npm - @nockdev/awf - Versions diffs - 6.2.0 → 6.2.2 - Mend

@nockdev/awf 6.2.0 → 6.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (733) hide show

package/.agent/skills/core/authentication/data/password-patterns.yaml CHANGED Viewed

@@ -1,175 +1,175 @@
 metadata:
   skill: authentication
   domain: password_patterns
-  version: 6.2.0
-  updated: '2026-02-05'
-  migrated_from: password-patterns.csv
+  version: 6.2.2
+  updated: "2026-02-05"
+  migrated_from: password-patterns.yaml
   patterns_count: 20
   columns:
-  - id
-  - pattern_name
-  - description
-  - category
-  - security_level
-  - keywords
+    - id
+    - pattern_name
+    - description
+    - category
+    - security_level
+    - keywords
 patterns:
-- id: PWD-001
-  pattern_name: Password Hashing
-  description: Never store plaintext passwords
-  category: security
-  security_level: critical
-  keywords:
-  - hash
-  - bcrypt
-- id: PWD-002
-  pattern_name: Bcrypt Algorithm
-  description: Adaptive cost factor password hashing
-  category: algorithms
-  security_level: critical
-  keywords:
-  - bcrypt
-  - cost
-- id: PWD-003
-  pattern_name: Argon2 Algorithm
-  description: Memory-hard modern password hashing
-  category: algorithms
-  security_level: critical
-  keywords:
-  - argon2
-  - memory
-- id: PWD-004
-  pattern_name: Scrypt Algorithm
-  description: Memory and CPU intensive hashing
-  category: algorithms
-  security_level: high
-  keywords:
-  - scrypt
-  - memory
-- id: PWD-005
-  pattern_name: Salt Generation
-  description: Unique random salt per password
-  category: security
-  security_level: critical
-  keywords:
-  - salt
-  - random
-- id: PWD-006
-  pattern_name: Pepper Usage
-  description: Server-side secret added to hash
-  category: security
-  security_level: high
-  keywords:
-  - pepper
-  - secret
-- id: PWD-007
-  pattern_name: Work Factor Tuning
-  description: Balance security vs performance
-  category: implementation
-  security_level: high
-  keywords:
-  - cost
-  - factor
-- id: PWD-008
-  pattern_name: Password Policy
-  description: Minimum length complexity rules
-  category: policy
-  security_level: high
-  keywords:
-  - policy
-  - complexity
-- id: PWD-009
-  pattern_name: Minimum Length
-  description: At least 8 characters minimum 12 recommended
-  category: policy
-  security_level: high
-  keywords:
-  - length
-  - minimum
-- id: PWD-010
-  pattern_name: No Common Passwords
-  description: Check against breach databases
-  category: security
-  security_level: high
-  keywords:
-  - common
-  - breach
-- id: PWD-011
-  pattern_name: Password Strength Meter
-  description: Visual feedback during creation
-  category: usability
-  security_level: medium
-  keywords:
-  - strength
-  - meter
-- id: PWD-012
-  pattern_name: Passphrase Support
-  description: Allow long memorable phrases
-  category: usability
-  security_level: medium
-  keywords:
-  - passphrase
-  - phrase
-- id: PWD-013
-  pattern_name: Password Expiration
-  description: Periodic password changes (debated)
-  category: policy
-  security_level: medium
-  keywords:
-  - expiration
-  - rotation
-- id: PWD-014
-  pattern_name: Password History
-  description: Prevent reuse of recent passwords
-  category: policy
-  security_level: medium
-  keywords:
-  - history
-  - reuse
-- id: PWD-015
-  pattern_name: Secure Reset Token
-  description: Cryptographic token for reset links
-  category: recovery
-  security_level: critical
-  keywords:
-  - reset
-  - token
-- id: PWD-016
-  pattern_name: Reset Token Expiry
-  description: Short-lived reset links (1 hour)
-  category: security
-  security_level: high
-  keywords:
-  - expiry
-  - timeout
-- id: PWD-017
-  pattern_name: Reset Confirmation
-  description: Email notification on password change
-  category: security
-  security_level: high
-  keywords:
-  - notification
-  - change
-- id: PWD-018
-  pattern_name: Change Password Flow
-  description: Require current password to change
-  category: security
-  security_level: high
-  keywords:
-  - change
-  - current
-- id: PWD-019
-  pattern_name: Breach Detection
-  description: Check passwords against known breaches
-  category: security
-  security_level: high
-  keywords:
-  - breach
-  - haveibeenpwned
-- id: PWD-020
-  pattern_name: Timing Attack Prevention
-  description: Constant time password comparison
-  category: security
-  security_level: high
-  keywords:
-  - timing
-  - constant
+  - id: PWD-001
+    pattern_name: Password Hashing
+    description: Never store plaintext passwords
+    category: security
+    security_level: critical
+    keywords:
+      - hash
+      - bcrypt
+  - id: PWD-002
+    pattern_name: Bcrypt Algorithm
+    description: Adaptive cost factor password hashing
+    category: algorithms
+    security_level: critical
+    keywords:
+      - bcrypt
+      - cost
+  - id: PWD-003
+    pattern_name: Argon2 Algorithm
+    description: Memory-hard modern password hashing
+    category: algorithms
+    security_level: critical
+    keywords:
+      - argon2
+      - memory
+  - id: PWD-004
+    pattern_name: Scrypt Algorithm
+    description: Memory and CPU intensive hashing
+    category: algorithms
+    security_level: high
+    keywords:
+      - scrypt
+      - memory
+  - id: PWD-005
+    pattern_name: Salt Generation
+    description: Unique random salt per password
+    category: security
+    security_level: critical
+    keywords:
+      - salt
+      - random
+  - id: PWD-006
+    pattern_name: Pepper Usage
+    description: Server-side secret added to hash
+    category: security
+    security_level: high
+    keywords:
+      - pepper
+      - secret
+  - id: PWD-007
+    pattern_name: Work Factor Tuning
+    description: Balance security vs performance
+    category: implementation
+    security_level: high
+    keywords:
+      - cost
+      - factor
+  - id: PWD-008
+    pattern_name: Password Policy
+    description: Minimum length complexity rules
+    category: policy
+    security_level: high
+    keywords:
+      - policy
+      - complexity
+  - id: PWD-009
+    pattern_name: Minimum Length
+    description: At least 8 characters minimum 12 recommended
+    category: policy
+    security_level: high
+    keywords:
+      - length
+      - minimum
+  - id: PWD-010
+    pattern_name: No Common Passwords
+    description: Check against breach databases
+    category: security
+    security_level: high
+    keywords:
+      - common
+      - breach
+  - id: PWD-011
+    pattern_name: Password Strength Meter
+    description: Visual feedback during creation
+    category: usability
+    security_level: medium
+    keywords:
+      - strength
+      - meter
+  - id: PWD-012
+    pattern_name: Passphrase Support
+    description: Allow long memorable phrases
+    category: usability
+    security_level: medium
+    keywords:
+      - passphrase
+      - phrase
+  - id: PWD-013
+    pattern_name: Password Expiration
+    description: Periodic password changes (debated)
+    category: policy
+    security_level: medium
+    keywords:
+      - expiration
+      - rotation
+  - id: PWD-014
+    pattern_name: Password History
+    description: Prevent reuse of recent passwords
+    category: policy
+    security_level: medium
+    keywords:
+      - history
+      - reuse
+  - id: PWD-015
+    pattern_name: Secure Reset Token
+    description: Cryptographic token for reset links
+    category: recovery
+    security_level: critical
+    keywords:
+      - reset
+      - token
+  - id: PWD-016
+    pattern_name: Reset Token Expiry
+    description: Short-lived reset links (1 hour)
+    category: security
+    security_level: high
+    keywords:
+      - expiry
+      - timeout
+  - id: PWD-017
+    pattern_name: Reset Confirmation
+    description: Email notification on password change
+    category: security
+    security_level: high
+    keywords:
+      - notification
+      - change
+  - id: PWD-018
+    pattern_name: Change Password Flow
+    description: Require current password to change
+    category: security
+    security_level: high
+    keywords:
+      - change
+      - current
+  - id: PWD-019
+    pattern_name: Breach Detection
+    description: Check passwords against known breaches
+    category: security
+    security_level: high
+    keywords:
+      - breach
+      - haveibeenpwned
+  - id: PWD-020
+    pattern_name: Timing Attack Prevention
+    description: Constant time password comparison
+    category: security
+    security_level: high
+    keywords:
+      - timing
+      - constant

package/.agent/skills/core/authentication/data/password.yaml CHANGED Viewed

@@ -1,168 +1,168 @@
 metadata:
   skill: authentication
   domain: password
-  version: 6.2.0
-  updated: '2026-02-05'
-  migrated_from: password-patterns.csv
+  version: 6.2.2
+  updated: "2026-02-05"
+  migrated_from: password-patterns.yaml
   patterns_count: 20
 patterns:
-- id: PWD-001
-  pattern: Password Hashing
-  description: Never store plaintext passwords
-  category: security
-  security_level: critical
-  keywords:
-  - hash
-  - bcrypt
-- id: PWD-002
-  pattern: Bcrypt Algorithm
-  description: Adaptive cost factor password hashing
-  category: algorithms
-  security_level: critical
-  keywords:
-  - bcrypt
-  - cost
-- id: PWD-003
-  pattern: Argon2 Algorithm
-  description: Memory-hard modern password hashing
-  category: algorithms
-  security_level: critical
-  keywords:
-  - argon2
-  - memory
-- id: PWD-004
-  pattern: Scrypt Algorithm
-  description: Memory and CPU intensive hashing
-  category: algorithms
-  security_level: high
-  keywords:
-  - scrypt
-  - memory
-- id: PWD-005
-  pattern: Salt Generation
-  description: Unique random salt per password
-  category: security
-  security_level: critical
-  keywords:
-  - salt
-  - random
-- id: PWD-006
-  pattern: Pepper Usage
-  description: Server-side secret added to hash
-  category: security
-  security_level: high
-  keywords:
-  - pepper
-  - secret
-- id: PWD-007
-  pattern: Work Factor Tuning
-  description: Balance security vs performance
-  category: implementation
-  security_level: high
-  keywords:
-  - cost
-  - factor
-- id: PWD-008
-  pattern: Password Policy
-  description: Minimum length complexity rules
-  category: policy
-  security_level: high
-  keywords:
-  - policy
-  - complexity
-- id: PWD-009
-  pattern: Minimum Length
-  description: At least 8 characters minimum 12 recommended
-  category: policy
-  security_level: high
-  keywords:
-  - length
-  - minimum
-- id: PWD-010
-  pattern: No Common Passwords
-  description: Check against breach databases
-  category: security
-  security_level: high
-  keywords:
-  - common
-  - breach
-- id: PWD-011
-  pattern: Password Strength Meter
-  description: Visual feedback during creation
-  category: usability
-  security_level: medium
-  keywords:
-  - strength
-  - meter
-- id: PWD-012
-  pattern: Passphrase Support
-  description: Allow long memorable phrases
-  category: usability
-  security_level: medium
-  keywords:
-  - passphrase
-  - phrase
-- id: PWD-013
-  pattern: Password Expiration
-  description: Periodic password changes (debated)
-  category: policy
-  security_level: medium
-  keywords:
-  - expiration
-  - rotation
-- id: PWD-014
-  pattern: Password History
-  description: Prevent reuse of recent passwords
-  category: policy
-  security_level: medium
-  keywords:
-  - history
-  - reuse
-- id: PWD-015
-  pattern: Secure Reset Token
-  description: Cryptographic token for reset links
-  category: recovery
-  security_level: critical
-  keywords:
-  - reset
-  - token
-- id: PWD-016
-  pattern: Reset Token Expiry
-  description: Short-lived reset links (1 hour)
-  category: security
-  security_level: high
-  keywords:
-  - expiry
-  - timeout
-- id: PWD-017
-  pattern: Reset Confirmation
-  description: Email notification on password change
-  category: security
-  security_level: high
-  keywords:
-  - notification
-  - change
-- id: PWD-018
-  pattern: Change Password Flow
-  description: Require current password to change
-  category: security
-  security_level: high
-  keywords:
-  - change
-  - current
-- id: PWD-019
-  pattern: Breach Detection
-  description: Check passwords against known breaches
-  category: security
-  security_level: high
-  keywords:
-  - breach
-  - haveibeenpwned
-- id: PWD-020
-  pattern: Timing Attack Prevention
-  description: Constant time password comparison
-  category: security
-  security_level: high
-  keywords:
-  - timing
-  - constant
+  - id: PWD-001
+    pattern: Password Hashing
+    description: Never store plaintext passwords
+    category: security
+    security_level: critical
+    keywords:
+      - hash
+      - bcrypt
+  - id: PWD-002
+    pattern: Bcrypt Algorithm
+    description: Adaptive cost factor password hashing
+    category: algorithms
+    security_level: critical
+    keywords:
+      - bcrypt
+      - cost
+  - id: PWD-003
+    pattern: Argon2 Algorithm
+    description: Memory-hard modern password hashing
+    category: algorithms
+    security_level: critical
+    keywords:
+      - argon2
+      - memory
+  - id: PWD-004
+    pattern: Scrypt Algorithm
+    description: Memory and CPU intensive hashing
+    category: algorithms
+    security_level: high
+    keywords:
+      - scrypt
+      - memory
+  - id: PWD-005
+    pattern: Salt Generation
+    description: Unique random salt per password
+    category: security
+    security_level: critical
+    keywords:
+      - salt
+      - random
+  - id: PWD-006
+    pattern: Pepper Usage
+    description: Server-side secret added to hash
+    category: security
+    security_level: high
+    keywords:
+      - pepper
+      - secret
+  - id: PWD-007
+    pattern: Work Factor Tuning
+    description: Balance security vs performance
+    category: implementation
+    security_level: high
+    keywords:
+      - cost
+      - factor
+  - id: PWD-008
+    pattern: Password Policy
+    description: Minimum length complexity rules
+    category: policy
+    security_level: high
+    keywords:
+      - policy
+      - complexity
+  - id: PWD-009
+    pattern: Minimum Length
+    description: At least 8 characters minimum 12 recommended
+    category: policy
+    security_level: high
+    keywords:
+      - length
+      - minimum
+  - id: PWD-010
+    pattern: No Common Passwords
+    description: Check against breach databases
+    category: security
+    security_level: high
+    keywords:
+      - common
+      - breach
+  - id: PWD-011
+    pattern: Password Strength Meter
+    description: Visual feedback during creation
+    category: usability
+    security_level: medium
+    keywords:
+      - strength
+      - meter
+  - id: PWD-012
+    pattern: Passphrase Support
+    description: Allow long memorable phrases
+    category: usability
+    security_level: medium
+    keywords:
+      - passphrase
+      - phrase
+  - id: PWD-013
+    pattern: Password Expiration
+    description: Periodic password changes (debated)
+    category: policy
+    security_level: medium
+    keywords:
+      - expiration
+      - rotation
+  - id: PWD-014
+    pattern: Password History
+    description: Prevent reuse of recent passwords
+    category: policy
+    security_level: medium
+    keywords:
+      - history
+      - reuse
+  - id: PWD-015
+    pattern: Secure Reset Token
+    description: Cryptographic token for reset links
+    category: recovery
+    security_level: critical
+    keywords:
+      - reset
+      - token
+  - id: PWD-016
+    pattern: Reset Token Expiry
+    description: Short-lived reset links (1 hour)
+    category: security
+    security_level: high
+    keywords:
+      - expiry
+      - timeout
+  - id: PWD-017
+    pattern: Reset Confirmation
+    description: Email notification on password change
+    category: security
+    security_level: high
+    keywords:
+      - notification
+      - change
+  - id: PWD-018
+    pattern: Change Password Flow
+    description: Require current password to change
+    category: security
+    security_level: high
+    keywords:
+      - change
+      - current
+  - id: PWD-019
+    pattern: Breach Detection
+    description: Check passwords against known breaches
+    category: security
+    security_level: high
+    keywords:
+      - breach
+      - haveibeenpwned
+  - id: PWD-020
+    pattern: Timing Attack Prevention
+    description: Constant time password comparison
+    category: security
+    security_level: high
+    keywords:
+      - timing
+      - constant