@kognai/build 0.6.0 → 0.6.1

package/package.json

@@ -1,19 +1,19 @@
 {
   "name": "@kognai/build",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Kognai sovereign orchestrator — interactive REPL (kognai) + one-shot CLI (kognai-build). Triple-supervisor + compliance review + TICKET-135 optimization profiles + TICKET-203/207 workspace integration.",
   "license": "MIT",
   "author": "SkinGem",
   "bin": {
-    "kognai": "./dist/bin/kognai.js",
-    "kognai-build": "./dist/bin/kognai-build.js"
+    "kognai": "dist/bin/kognai.js",
+    "kognai-build": "dist/bin/kognai-build.js"
   },
   "files": [
     "dist/",
     "README.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json && rm -f dist/tsconfig.tsbuildinfo && chmod +x dist/bin/kognai.js dist/bin/kognai-build.js",
+    "build": "rm -rf dist && tsc -p tsconfig.json && rm -f dist/tsconfig.tsbuildinfo && chmod +x dist/bin/kognai.js dist/bin/kognai-build.js",
     "prepublishOnly": "npm run build"
   },
   "engines": {
@@ -39,7 +39,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/SkinGem/kognai.git",
+    "url": "git+https://github.com/SkinGem/kognai.git",
     "directory": "packages/kognai-build"
   }
 }

package/dist/lib/skill-bank-stub.js

@@ -1,214 +0,0 @@
-"use strict";
-/**
- * Skill Bank Stub
- *
- * Mock skill metadata registry used by the cost estimator and capability
- * preview during Phase 1. Phase 2 (TICKET-055 + TICKET-102) will replace
- * the in-memory SKILL_BANK array with a real registry read backed by the
- * skill bank service. The function signatures below are the stable
- * contract that downstream consumers can rely on across both phases.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SKILL_BANK = void 0;
-exports.getSkillsByIds = getSkillsByIds;
-exports.listSkillsByCategory = listSkillsByCategory;
-/**
- * Stub skill registry covering the categories declared by the 9 starter
- * templates. ~20 entries spanning validation, security, data, api,
- * testing, devops, and content.
- */
-exports.SKILL_BANK = [
-    // --- validation ---
-    {
-        id: 'schema-validation',
-        name: 'Schema Validation',
-        tier: 'T2',
-        category: 'validation',
-        description: 'Validate payloads against declarative schemas (Zod/JSON Schema).',
-    },
-    {
-        id: 'type-narrowing',
-        name: 'Type Narrowing',
-        tier: 'T2',
-        category: 'validation',
-        description: 'Refine union types via discriminants and predicate guards.',
-    },
-    {
-        id: 'input-sanitization',
-        name: 'Input Sanitization',
-        tier: 'T2',
-        category: 'validation',
-        description: 'Strip, escape, and normalize untrusted user input.',
-    },
-    // --- security ---
-    {
-        id: 'audit-logging',
-        name: 'Audit Logging',
-        tier: 'T2.5',
-        category: 'security',
-        description: 'Emit tamper-evident audit trails for privileged actions.',
-    },
-    {
-        id: 'secret-rotation',
-        name: 'Secret Rotation',
-        tier: 'T3',
-        category: 'security',
-        description: 'Rotate API keys and credentials with zero-downtime cutover.',
-    },
-    {
-        id: 'jwt-issuance',
-        name: 'JWT Issuance',
-        tier: 'T2.5',
-        category: 'security',
-        description: 'Mint, sign, and verify JSON Web Tokens with rotation support.',
-    },
-    {
-        id: 'threat-modeling',
-        name: 'Threat Modeling',
-        tier: 'T3',
-        category: 'security',
-        description: 'STRIDE-style threat analysis for system designs.',
-    },
-    // --- data ---
-    {
-        id: 'postgres-migration',
-        name: 'Postgres Migration',
-        tier: 'T2.5',
-        category: 'data',
-        description: 'Author safe, reversible Postgres schema migrations.',
-    },
-    {
-        id: 'etl-windowing',
-        name: 'ETL Windowing',
-        tier: 'T3',
-        category: 'data',
-        description: 'Tumbling/sliding window aggregations for streaming ETL.',
-    },
-    {
-        id: 'schema-evolution',
-        name: 'Schema Evolution',
-        tier: 'T3',
-        category: 'data',
-        description: 'Backwards-compatible schema changes for long-lived data.',
-    },
-    // --- api ---
-    {
-        id: 'rest-design',
-        name: 'REST Design',
-        tier: 'T2',
-        category: 'api',
-        description: 'Design resource-oriented REST endpoints with proper verbs/codes.',
-    },
-    {
-        id: 'graphql-resolver',
-        name: 'GraphQL Resolver',
-        tier: 'T2.5',
-        category: 'api',
-        description: 'Author GraphQL resolvers with dataloader batching.',
-    },
-    {
-        id: 'x402-meter',
-        name: 'x402 Meter',
-        tier: 'T3',
-        category: 'api',
-        description: 'HTTP 402 payment metering middleware for API monetization.',
-    },
-    // --- testing ---
-    {
-        id: 'unit-test-author',
-        name: 'Unit Test Author',
-        tier: 'T1',
-        category: 'testing',
-        description: 'Write focused unit tests with clear arrange/act/assert.',
-    },
-    {
-        id: 'integration-test-author',
-        name: 'Integration Test Author',
-        tier: 'T2',
-        category: 'testing',
-        description: 'Cross-module tests with real or hermetic dependencies.',
-    },
-    {
-        id: 'property-test',
-        name: 'Property Test',
-        tier: 'T2.5',
-        category: 'testing',
-        description: 'Generative property-based testing with shrinking.',
-    },
-    // --- devops ---
-    {
-        id: 'ci-config',
-        name: 'CI Config',
-        tier: 'T2',
-        category: 'devops',
-        description: 'Continuous integration pipelines (GitHub Actions/GitLab CI).',
-    },
-    {
-        id: 'docker-compose',
-        name: 'Docker Compose',
-        tier: 'T2',
-        category: 'devops',
-        description: 'Local multi-service orchestration via docker-compose.',
-    },
-    {
-        id: 'deployment-manifest',
-        name: 'Deployment Manifest',
-        tier: 'T2.5',
-        category: 'devops',
-        description: 'Kubernetes/Nomad deployment manifests with health checks.',
-    },
-    // --- content ---
-    {
-        id: 'copyedit',
-        name: 'Copyedit',
-        tier: 'T1',
-        category: 'content',
-        description: 'Grammar, clarity, and tone editing for written copy.',
-    },
-    {
-        id: 'citation-format',
-        name: 'Citation Format',
-        tier: 'T1',
-        category: 'content',
-        description: 'Format citations in APA/MLA/Chicago style.',
-    },
-    {
-        id: 'seo-optimize',
-        name: 'SEO Optimize',
-        tier: 'T2',
-        category: 'content',
-        description: 'Optimize page content for search engine ranking.',
-    },
-];
-/**
- * Build a lookup index by id. Materialized once at module load; the stub
- * registry is small enough that a Map is overkill but keeps the contract
- * identical when Phase 2 swaps in a larger registry.
- */
-const SKILL_INDEX = new Map(exports.SKILL_BANK.map((entry) => [entry.id, entry]));
-/**
- * Return skill entries for the given ids, preserving caller order.
- * Unknown ids are silently skipped — callers that need strict resolution
- * should diff the returned ids against their input.
- */
-function getSkillsByIds(ids) {
-    if (!Array.isArray(ids) || ids.length === 0)
-        return [];
-    const out = [];
-    for (const id of ids) {
-        const entry = SKILL_INDEX.get(id);
-        if (entry)
-            out.push(entry);
-    }
-    return out;
-}
-/**
- * Return all skill entries in the given category. Category match is
- * case-insensitive to tolerate template author inconsistency.
- */
-function listSkillsByCategory(category) {
-    if (typeof category !== 'string' || category.length === 0)
-        return [];
-    const needle = category.toLowerCase();
-    return exports.SKILL_BANK.filter((entry) => entry.category.toLowerCase() === needle);
-}

package/dist/lib/tool-layer-stub.js

@@ -1,214 +0,0 @@
-"use strict";
-/**
- * Tool Layer Stub
- *
- * Phase 1 stub returning mock tool metadata for cost estimation and
- * capability discovery. Phase 2 (TICKET-125) replaces TOOL_LAYER with
- * a real provider registry backed by live cost-per-call data.
- *
- * Function signatures are stable across phases — callers (cost-estimator.ts,
- * build planners, capability matchers) can rely on the API surface.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TOOL_LAYER = void 0;
-exports.getToolsByIds = getToolsByIds;
-exports.listToolsByCategory = listToolsByCategory;
-exports.estimateToolCost = estimateToolCost;
-exports.TOOL_LAYER = [
-    // ── database ─────────────────────────────────────────────────────────────
-    {
-        id: 'postgres-encrypted',
-        name: 'PostgreSQL (Encrypted)',
-        provider: 'self-hosted',
-        category: 'database',
-        cost_per_call_usdc: 0,
-        description: 'Self-hosted Postgres with at-rest encryption and pgcrypto.',
-    },
-    {
-        id: 'redis-cache',
-        name: 'Redis Cache',
-        provider: 'self-hosted',
-        category: 'database',
-        cost_per_call_usdc: 0,
-        description: 'In-memory key-value store for caching and rate limiting.',
-    },
-    {
-        id: 'supabase',
-        name: 'Supabase Postgres',
-        provider: 'supabase',
-        category: 'database',
-        cost_per_call_usdc: 0.00005,
-        description: 'Managed Postgres with row-level security and realtime.',
-    },
-    // ── llm ──────────────────────────────────────────────────────────────────
-    {
-        id: 'anthropic-sonnet',
-        name: 'Anthropic Claude Sonnet',
-        provider: 'anthropic',
-        category: 'llm',
-        cost_per_call_usdc: 0.015,
-        description: 'Mid-tier reasoning LLM, ~1k token avg call.',
-    },
-    {
-        id: 'anthropic-haiku',
-        name: 'Anthropic Claude Haiku',
-        provider: 'anthropic',
-        category: 'llm',
-        cost_per_call_usdc: 0.0012,
-        description: 'Fast cheap LLM for classification and routing.',
-    },
-    {
-        id: 'qwen-plus',
-        name: 'Qwen Plus (Cloud)',
-        provider: 'alibaba',
-        category: 'llm',
-        cost_per_call_usdc: 0.0008,
-        description: 'Cloud-hosted Qwen Plus for general-purpose generation.',
-    },
-    {
-        id: 'ollama-local',
-        name: 'Ollama (Local)',
-        provider: 'self-hosted',
-        category: 'llm',
-        cost_per_call_usdc: 0,
-        description: 'Local LLM runtime (Qwen3, Llama, etc.) — zero per-call cost.',
-    },
-    // ── search ───────────────────────────────────────────────────────────────
-    {
-        id: 'tavily',
-        name: 'Tavily Search API',
-        provider: 'tavily',
-        category: 'search',
-        cost_per_call_usdc: 0.005,
-        description: 'LLM-optimized web search with snippet extraction.',
-    },
-    {
-        id: 'exa',
-        name: 'Exa Neural Search',
-        provider: 'exa',
-        category: 'search',
-        cost_per_call_usdc: 0.01,
-        description: 'Neural search over indexed web content.',
-    },
-    // ── payment ──────────────────────────────────────────────────────────────
-    {
-        id: 'x402-meter',
-        name: 'x402 Payment Meter',
-        provider: 'x402',
-        category: 'payment',
-        cost_per_call_usdc: 0.0001,
-        description: 'HTTP 402 micropayment metering for per-call billing.',
-    },
-    {
-        id: 'stripe-webhook',
-        name: 'Stripe Webhook Handler',
-        provider: 'stripe',
-        category: 'payment',
-        cost_per_call_usdc: 0,
-        description: 'Receive and verify Stripe webhook events (cost is in fees, not calls).',
-    },
-    // ── compliance ───────────────────────────────────────────────────────────
-    {
-        id: 'hipaa-bcc-checker',
-        name: 'HIPAA BAA/BCC Checker',
-        provider: 'self-hosted',
-        category: 'compliance',
-        cost_per_call_usdc: 0,
-        description: 'Verifies BAA coverage and BCC routing for PHI workflows.',
-    },
-    {
-        id: 'gdpr-data-mapper',
-        name: 'GDPR Data Mapper',
-        provider: 'self-hosted',
-        category: 'compliance',
-        cost_per_call_usdc: 0,
-        description: 'Tracks personal-data lineage for GDPR Article 30 records.',
-    },
-    // ── observability ────────────────────────────────────────────────────────
-    {
-        id: 'posthog',
-        name: 'PostHog Analytics',
-        provider: 'posthog',
-        category: 'observability',
-        cost_per_call_usdc: 0.00001,
-        description: 'Product analytics, session replay, and feature flags.',
-    },
-    {
-        id: 'datadog',
-        name: 'Datadog APM',
-        provider: 'datadog',
-        category: 'observability',
-        cost_per_call_usdc: 0.0002,
-        description: 'Application performance monitoring and log aggregation.',
-    },
-    {
-        id: 'sentry',
-        name: 'Sentry Error Tracking',
-        provider: 'sentry',
-        category: 'observability',
-        cost_per_call_usdc: 0.00005,
-        description: 'Error capture, stack traces, and release tracking.',
-    },
-    // ── identity ─────────────────────────────────────────────────────────────
-    {
-        id: 'erc-8004-resolver',
-        name: 'ERC-8004 Agent Resolver',
-        provider: 'self-hosted',
-        category: 'identity',
-        cost_per_call_usdc: 0,
-        description: 'Resolves on-chain agent identities per ERC-8004 spec.',
-    },
-    {
-        id: 'pact-mandate-verify',
-        name: 'PACT Mandate Verifier',
-        provider: 'self-hosted',
-        category: 'identity',
-        cost_per_call_usdc: 0,
-        description: 'Verifies PACT mandate signatures for delegated agent actions.',
-    },
-];
-/**
- * Internal index keyed by tool id for O(1) lookup.
- * Rebuilt at module load; safe because TOOL_LAYER is a const literal.
- */
-const TOOL_INDEX = new Map(exports.TOOL_LAYER.map((tool) => [tool.id, tool]));
-/**
- * Resolve a list of tool ids to their entries.
- * Unknown ids are silently dropped — callers needing strict validation
- * should compare result length to input length.
- */
-function getToolsByIds(ids) {
-    const seen = new Set();
-    const out = [];
-    for (const id of ids) {
-        if (seen.has(id))
-            continue;
-        seen.add(id);
-        const tool = TOOL_INDEX.get(id);
-        if (tool)
-            out.push(tool);
-    }
-    return out;
-}
-/**
- * List every tool in a given category.
- * Returns empty array for unknown categories.
- */
-function listToolsByCategory(category) {
-    return exports.TOOL_LAYER.filter((tool) => tool.category === category);
-}
-/**
- * Estimate total cost in USDC for invoking the given tools `expectedCalls` times each.
- *
- * Formula: sum(tool.cost_per_call_usdc for tool in resolved_tools) × expectedCalls
- *
- * Unknown tool ids contribute 0. Negative `expectedCalls` is clamped to 0.
- */
-function estimateToolCost(toolIds, expectedCalls) {
-    const calls = Math.max(0, expectedCalls);
-    if (calls === 0)
-        return 0;
-    const tools = getToolsByIds(toolIds);
-    const perCallSum = tools.reduce((acc, tool) => acc + tool.cost_per_call_usdc, 0);
-    return perCallSum * calls;
-}