@nockdev/awf 6.2.0 → 6.2.2

package/.agent/skills/tooling/mcp/data/tool-design.yaml

@@ -0,0 +1,124 @@
+# MCP Tool Design Patterns - HSA MCP Skill
+# Updated: 2026-02-12
+
+metadata:
+  skill: mcp
+  domain: tool-design
+  version: "1.0.0"
+  updated: "2026-02-12"
+  patterns_count: 8
+
+patterns:
+  - id: td001
+    name: stateless_tool
+    category: design
+    description: Stateless tool that produces same output for same input
+    text: stateless tool idempotent pure function no side effects
+    example: |
+      server.tool("search", { query: z.string(), limit: z.number().default(10) },
+        async ({ query, limit }) => {
+          const results = await db.search(query, limit);
+          return { content: [{ type: "text", text: JSON.stringify(results) }] };
+        });
+    severity: CRITICAL
+    rule: "Tools MUST be stateless and idempotent"
+
+  - id: td002
+    name: pagination
+    category: design
+    description: Pagination pattern for large result sets
+    text: pagination cursor token next page large results bounded
+    example: |
+      server.tool("list_items", {
+        cursor: z.string().optional(),
+        pageSize: z.number().default(20).max(100)
+      }, async ({ cursor, pageSize }) => {
+        const { items, nextCursor } = await db.paginate(cursor, pageSize);
+        return {
+          content: [{ type: "text", text: JSON.stringify(items) }],
+          _meta: { nextCursor }
+        };
+      });
+    rule: "NEVER return unbounded results"
+
+  - id: td003
+    name: input_validation
+    category: design
+    description: JSON Schema validation for all tool inputs
+    text: input validation json schema zod type safety
+    example: |
+      const schema = z.object({
+        path: z.string().refine(p => !p.includes(".."), "No path traversal"),
+        content: z.string().max(100000, "Content too large")
+      });
+    severity: CRITICAL
+
+  - id: td004
+    name: error_handling
+    category: design
+    description: Structured error responses using JSON-RPC error codes
+    text: error handling json-rpc error codes recoverable fatal
+    example: |
+      // Return error as content (recoverable)
+      return { content: [{ type: "text", text: "Error: File not found" }], isError: true };
+      // Throw for fatal errors
+      throw new McpError(ErrorCode.InvalidParams, "Invalid file path");
+    error_codes:
+      -32600: "Invalid Request"
+      -32601: "Method not found"
+      -32602: "Invalid params"
+      -32603: "Internal error"
+
+  - id: td005
+    name: resource_design
+    category: design
+    description: Resource primitives for exposing data
+    text: resource uri template static dynamic data exposure
+    example: |
+      // Static resource
+      server.resource("readme", "file:///README.md", async () => ({
+        contents: [{ uri: "file:///README.md", text: readmeContent }]
+      }));
+      // Dynamic resource template
+      server.resourceTemplate("user/{id}", async (uri) => ({
+        contents: [{ uri: uri.href, text: await getUser(uri.params.id) }]
+      }));
+
+  - id: td006
+    name: prompt_design
+    category: design
+    description: Prompt primitives for reusable prompt templates
+    text: prompt template reusable parameterized prompt primitive
+    example: |
+      server.prompt("code_review", { language: z.string(), code: z.string() },
+        ({ language, code }) => ({
+          messages: [{
+            role: "user",
+            content: { type: "text", text: `Review this ${language} code:\n${code}` }
+          }]
+        }));
+
+  - id: td007
+    name: bounded_context
+    category: design
+    description: Single responsibility per server
+    text: bounded context single responsibility server separation concerns
+    example: "// ✅ Separate servers: file-server, git-server, db-server"
+    rule: "Each MCP server should have ONE bounded context"
+    anti_pattern: "// ❌ One server doing files + git + database + email"
+
+  - id: td008
+    name: response_format
+    category: design
+    description: Content types and response formatting
+    text: response content type text image resource embedded
+    example: |
+      // Text content
+      { content: [{ type: "text", text: "Hello" }] }
+      // Image content
+      { content: [{ type: "image", data: base64Data, mimeType: "image/png" }] }
+      // Multiple content blocks
+      { content: [
+        { type: "text", text: "Found 3 results:" },
+        { type: "text", text: JSON.stringify(results) }
+      ]}

package/.agent/skills/tooling/mcp/data/transport-patterns.yaml

@@ -0,0 +1,95 @@
+# MCP Transport Patterns - HSA MCP Skill
+# Version: MCP SDK 2025-2026
+# Updated: 2026-02-12
+
+metadata:
+  skill: mcp
+  domain: transport
+  version: "1.0.0"
+  updated: "2026-02-12"
+  patterns_count: 8
+
+patterns:
+  - id: tp001
+    name: stdio_transport
+    category: transport
+    description: Local stdio transport for development and CLI tools
+    text: stdio transport local development cli pipe subprocess
+    example: "new StdioServerTransport(); // stdin/stdout"
+    use_case: Local MCP servers, IDE integrations, same-machine
+    severity: INFO
+
+  - id: tp002
+    name: streamable_http
+    category: transport
+    description: Streamable HTTP transport for production remote servers
+    text: streamable http transport production remote sse server-sent events
+    example: "new StreamableHTTPServerTransport({ sessionId })"
+    use_case: Remote servers, multi-user, cloud deployment
+    severity: INFO
+    requires_auth: true
+
+  - id: tp003
+    name: server_setup_stdio
+    category: transport
+    description: Basic MCP server setup with stdio transport
+    text: server create stdio setup basic initialize
+    example: |
+      const server = new McpServer({ name: "my-server", version: "1.0.0" });
+      const transport = new StdioServerTransport();
+      await server.connect(transport);
+
+  - id: tp004
+    name: server_setup_http
+    category: transport
+    description: MCP server with Streamable HTTP + Express
+    text: server http express setup production oauth
+    example: |
+      app.post("/mcp", async (req, res) => {
+        const transport = new StreamableHTTPServerTransport({ sessionId: req.sessionId });
+        await server.connect(transport);
+        await transport.handleRequest(req, res);
+      });
+
+  - id: tp005
+    name: transport_selection
+    category: transport
+    description: Decision matrix for choosing transport
+    text: transport selection guide choose stdio http decision
+    decision_matrix:
+      stdio:
+        when: "Local dev, CLI, same machine, no auth needed"
+        pros: "Simple, no network, fast"
+        cons: "Local only, single client"
+      streamable_http:
+        when: "Production, remote, multi-user, cloud"
+        pros: "Scalable, auth support, firewall friendly"
+        cons: "Complex setup, requires OAuth 2.1"
+
+  - id: tp006
+    name: connection_lifecycle
+    category: transport
+    description: MCP connection lifecycle management
+    text: connection lifecycle initialize shutdown cleanup graceful
+    example: |
+      server.onclose = async () => { await cleanup(); };
+      process.on("SIGTERM", async () => { await server.close(); });
+
+  - id: tp007
+    name: session_management
+    category: transport
+    description: Session management for HTTP transport
+    text: session management http stateless reconnect resume
+    example: "transport = new StreamableHTTPServerTransport({ sessionId: uuid() });"
+    note: "Sessions are optional; prefer stateless design"
+
+  - id: tp008
+    name: error_transport
+    category: transport
+    description: Transport-level error handling
+    text: transport error handling reconnect retry timeout
+    example: |
+      server.onerror = (error) => {
+        console.error("[MCP Error]", error);
+        // Don't crash - log and continue
+      };

package/.agent/templates/README.md

@@ -1,4 +1,4 @@
-# 📄 DOMYH Awesome Code Templates v6.2.0
+# 📄 DOMYH Awesome Code Templates v6.2.2
 
 > Output templates for agent-generated reports and plans
 
@@ -22,7 +22,7 @@
 ```yaml
 ---
 name: template-name
-version: "6.1.2"
+version: "6.2.2"
 type: report|plan|format|wizard
 triggers: ["/command"]
 ---

package/.agent/templates/debug-report.md

@@ -1,6 +1,6 @@
 ---
 name: debug-report
-version: "6.1.2"
+version: "6.2.2"
 type: report
 triggers: ["/debug"]
 ---

package/.agent/templates/deploy-plan.md

@@ -1,6 +1,6 @@
 ---
 name: deploy-plan
-version: "6.1.2"
+version: "6.2.2"
 type: plan
 triggers: ["/deploy"]
 ---

package/.agent/templates/doc-template.md

@@ -1,6 +1,6 @@
 ---
 name: doc-template
-version: "6.1.2"
+version: "6.2.2"
 type: wizard
 triggers: ["/doc", "/generate"]
 ---

package/.agent/templates/index.yaml

@@ -2,7 +2,7 @@
 # Template Index — HSA Semantic Template Matching
 # =============================================================================
 # DOMYH Awesome Code Agent — Template Registry for HSA
-# Version: 6.1.2
+# version: 6.2.2
 # =============================================================================
 
 templates:
@@ -236,4 +236,4 @@ search:
 # =============================================================================
 # Footer
 # =============================================================================
-# _DOMYH Awesome Code • Template Index v6.2.0 • HSA Integration_
+# _DOMYH Awesome Code • Template Index v6.2.2 • HSA Integration_

package/.agent/templates/migrate-plan.md

@@ -1,6 +1,6 @@
 ---
 name: migrate-plan
-version: "6.1.2"
+version: "6.2.2"
 type: plan
 triggers: ["/migrate"]
 ---

package/.agent/templates/phase-template.md

@@ -1,4 +1,4 @@
-# 📋 Phase Template — DOMYH v6.2.0
+# 📋 Phase Template — DOMYH v6.2.2
 
 > **Mục đích**: Template chuẩn cho phase files khi sử dụng `/plan full`
 > **Tạo bởi**: Agent tự động tạo theo complexity detection

package/.agent/templates/tasks/audit.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: audit
-version: "6.1.2"
+version: "6.2.2"
 
 # Required fields
 scope: string              # What to audit

package/.agent/templates/tasks/bug_fix.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: bug_fix
-version: "6.1.2"
+version: "6.2.2"
 
 # Required fields
 symptom: string              # What's the visible problem

package/.agent/templates/tasks/code_implementation.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: code_implementation
-version: "6.1.2"
+version: "6.2.2"
 
 # Required fields
 description: string       # What to build

package/.agent/templates/tasks/refactor.yaml

@@ -8,7 +8,7 @@
 
 ```yaml
 task_type: refactor
-version: "6.1.2"
+version: "6.2.2"
 
 # Required fields
 target: string            # What to refactor

package/.agent/templates/test-report.md

@@ -1,6 +1,6 @@
 ---
 name: test-report
-version: "6.1.2"
+version: "6.2.2"
 type: report
 triggers: ["/test"]
 ---

package/.agent/workflows/code.md

@@ -1,6 +1,6 @@
 ---
 description: "💻 Write production-ready code, fix/improve existing projects, with proper error handling, types, and documentation"
-skills: { required: [], contextual: [auto] }
+skills: { required: [], contextual: [auto, domyh-design, tailwind] }
 ---
 
 # 💻 /code — Code Pro
@@ -13,6 +13,13 @@ skills: { required: [], contextual: [auto] }
 ## CODE FLOW
 
 1. **DETECT** (Auto) — Parse intent (feature/bugfix/refactor), detect stack via HSA (`hsa_detect_stack`), load language skill via HSA (`hsa_get_context`)
+   - **UI INTENT CHECK** (→ See FLOW.md §18.1):
+     Classify intent into T1 (Create) / T2 (Modify) / T3 (Design):
+     T1 (new UI, no existing ref) → Follow FLOW.md §18.2 Create Pipeline (12 steps)
+     T2 (modify existing UI) → Follow FLOW.md §18.3 Modify Pipeline (9 steps)
+     T3 (design-only, no code) → Route to /visualize (§18.4)
+     Auto-load: `domyh-design` + `tailwind` skills
+     Auto-run: design system search → inject design tokens + platform guidelines
 2. **PLAN** — Break down into steps, identify dependencies → `hsa_prefetch` planned files → ⛔ STOP if major change (>50 lines). Show step count: `Plan: 4 steps, ~85 lines`
 3. **EXECUTE** — Write code following skill patterns, error handling + types, add tests (auto test loop). Show progress: `[Step 2/4] Creating auth middleware...`
 4. **VERIFY** — Run tests → Fix → Repeat (max 3), lint check. Agent re-reads ALL generated code:
@@ -23,6 +30,20 @@ skills: { required: [], contextual: [auto] }
    - [ ] Names follow language conventions?
    - [ ] No security anti-patterns (hardcoded secrets, raw SQL)?
    - → If issues found: fix silently before output
+   - **UI QUALITY GATE** (if UI intent detected → FLOW.md §18.2 A9):
+     Apply Visual QA Pipeline (score /100):
+     L1. Accessibility (30pts): WCAG 2.2 AA, contrast ≥ 4.5:1, keyboard nav, focus visible
+     L2. Visual Consistency (25pts): design tokens (no magic values), spacing rhythm, typography scale
+     L3. Responsiveness (20pts): 375px / 768px / 1024px / 1440px breakpoints pass
+     L4. Interaction Quality (15pts): hover/focus/active states, loading/error states
+     L5. Performance (10pts): CLS < 0.1, images optimized, CSS < 50KB
+     Apply Nielsen Heuristic Check (§18.2 A10): 10 items, score ≥8/10
+     Result: ≥90/100 → SHIP ✅ | 70-89 → FIX MINOR ⚠️ | <70 → REDESIGN ❌
+     - [ ] Design tokens used (no magic color/spacing values)
+     - [ ] Responsive: tested 375px, 768px, 1024px, 1440px
+     - [ ] Dark mode: no pure black/white, CSS variables, prefers-color-scheme
+     - [ ] SVG icons only (no emoji as icons)
+     - [ ] Focus states visible, transitions 150-300ms
 5. **SYNC** — `hsa_check_changes` to update index, output summary of changes, confidence score (1-10), next steps. Persist key decisions to `memory/state.json`
 
 ---

package/.agent/workflows/deploy.md

@@ -1,6 +1,10 @@
 ---
 description: "🚀 Deploy to production with pre-checks, rollback plan, and post-verification"
-skills: { required: [ci-cd], contextual: [docker, kubernetes, aws] }
+skills:
+  {
+    required: [ci-cd],
+    contextual: [docker, kubernetes, aws, terraform, gcp, azure],
+  }
 ---
 
 # 🚀 /deploy — Deploy Pro

package/.agent/workflows/e2e.md

@@ -0,0 +1,112 @@
+---
+description: "🌐 E2E test generation: detect framework, write critical path tests, run and verify"
+skills: { required: [testing, tdd-workflow], contextual: [auto] }
+---
+
+# 🌐 /e2e — End-to-End Test Generation
+
+> Generate and run E2E tests for critical user flows
+> 📚 Playwright • Cypress • Selenium • Multi-browser
+
+---
+
+## E2E FLOW
+
+1. **DETECT** — Identify frontend framework, existing E2E setup, test runner. Show: `[Step 1/5] Detecting E2E framework...`
+2. **MAP** — Identify critical user flows from routes/pages. Show: `[Step 2/5] Mapping 8 critical user flows...`
+3. **GENERATE** — Write E2E tests for critical paths. Show: `[Step 3/5] Generating tests for Login → Dashboard → Checkout`
+4. **RUN** — Execute E2E tests, capture screenshots on failure. Show: `[Step 4/5] Running 12 E2E tests...`
+5. **REPORT** — Show results with pass/fail, timing, screenshots. Show: `[Step 5/5] ✅ 11/12 passed (1 flaky)`
+
+---
+
+## COMMANDS
+
+| Command       | Description                           |
+| ------------- | ------------------------------------- |
+| `/e2e`        | Generate E2E tests for critical flows |
+| `/e2e [page]` | Generate E2E tests for specific page  |
+| `/e2e run`    | Run existing E2E tests                |
+| `/e2e smoke`  | Generate smoke tests only             |
+| `/e2e visual` | Visual regression tests               |
+
+---
+
+## FRAMEWORK DETECTION
+
+| Framework      | Config File            | Runner                |
+| -------------- | ---------------------- | --------------------- |
+| **Playwright** | `playwright.config.ts` | `npx playwright test` |
+| **Cypress**    | `cypress.config.ts`    | `npx cypress run`     |
+| **Selenium**   | `wdio.conf.ts`         | `npx wdio run`        |
+
+If no E2E framework found:
+
+1. Recommend Playwright (modern, fast, multi-browser)
+2. Offer to scaffold: `npm init playwright@latest`
+
+---
+
+## CRITICAL FLOW IDENTIFICATION
+
+Automatically identify critical flows from:
+
+- **Routes/pages**: Login, dashboard, checkout, settings
+- **Forms**: Registration, payment, contact
+- **CRUD**: Create, read, update, delete operations
+- **Auth**: Login, logout, password reset, 2FA
+
+Priority:
+
+1. 🔴 **Revenue flows**: Checkout, payment, subscription
+2. 🟠 **User onboarding**: Registration, login, first-use
+3. 🟡 **Core features**: Primary user actions
+4. 🟢 **Settings/profile**: Account management
+
+---
+
+## TEST STRUCTURE
+
+```typescript
+// Playwright E2E test template
+import { test, expect } from "@playwright/test";
+
+test.describe("User Login Flow", () => {
+  test("should login with valid credentials", async ({ page }) => {
+    // Arrange
+    await page.goto("/login");
+
+    // Act
+    await page.fill('[data-testid="email"]', "user@example.com");
+    await page.fill('[data-testid="password"]', "password123");
+    await page.click('[data-testid="login-button"]');
+
+    // Assert
+    await expect(page).toHaveURL("/dashboard");
+    await expect(page.locator('[data-testid="welcome"]')).toBeVisible();
+  });
+
+  test("should show error for invalid credentials", async ({ page }) => {
+    await page.goto("/login");
+    await page.fill('[data-testid="email"]', "wrong@example.com");
+    await page.fill('[data-testid="password"]', "wrong");
+    await page.click('[data-testid="login-button"]');
+    await expect(page.locator('[data-testid="error"]')).toContainText(
+      "Invalid",
+    );
+  });
+});
+```
+
+---
+
+## BEST PRACTICES
+
+| Rule                            | Why                            |
+| ------------------------------- | ------------------------------ |
+| Use `data-testid` selectors     | Stable, decoupled from styling |
+| One assertion per critical path | Clear failure identification   |
+| Set up test data via API        | Faster than UI setup           |
+| Clean up after tests            | Avoid inter-test dependencies  |
+| Run in CI with retries          | Handle flakiness               |
+| Screenshot on failure           | Visual debugging               |

package/.agent/workflows/fix.md

@@ -59,7 +59,7 @@ skills: { required: [], contextual: [auto] }
 
 ---
 
-## 🔄 ESCALATION
+## 🎨 UI FIX CATEGORY (→ FLOW.md §18.6)\r\n\r\n| Category | Detect Pattern | Additional Steps |\r\n|-----------|---------------------------------------------|---------------------------------------|\r\n| CSS/Style | overflow, z-index, opacity, display, visible | Load design tokens, check dark mode |\r\n| Layout | flex/grid, position, float, alignment | Verify responsive (mobile + desktop) |\r\n| Color | color, background, gradient, contrast | Verify WCAG contrast ≥ 4.5:1 |\r\n| Font | font-size, line-height, font-family | Check typography scale compliance |\r\n| Animation | transition, transform, keyframes | Check prefers-reduced-motion |\r\n| Dark Mode | dark: prefix, color-scheme, theme toggle | Test both modes after fix |\r\n\r\nWhen UI fix detected → auto-load `domyh-design` skill, apply §18.6 additional verify.\r\n\r\n---\r\n\r\n## 🔄 ESCALATION
 
 After 2 retries fail: