@nockdev/awf 6.2.0 → 6.2.2

package/.agent/skills/cross-cutting/accessibility/data/aria-patterns.yaml

@@ -0,0 +1,88 @@
+# ARIA Patterns Data
+
+patterns:
+  - name: modal-dialog
+    role: dialog
+    html: |
+      <div role="dialog" aria-modal="true" aria-labelledby="modal-title">
+        <h2 id="modal-title">Confirm Action</h2>
+        <p>Are you sure?</p>
+        <button>Cancel</button>
+        <button>Confirm</button>
+      </div>
+    requirements:
+      - "Focus trapped inside modal"
+      - "Escape key closes modal"
+      - "Focus returns to trigger on close"
+      - "Background content inert (inert attribute)"
+
+  - name: tabs
+    role: tablist
+    html: |
+      <div role="tablist" aria-label="Settings">
+        <button role="tab" aria-selected="true" aria-controls="panel-1" id="tab-1">General</button>
+        <button role="tab" aria-selected="false" aria-controls="panel-2" id="tab-2" tabindex="-1">Security</button>
+      </div>
+      <div role="tabpanel" id="panel-1" aria-labelledby="tab-1">...</div>
+      <div role="tabpanel" id="panel-2" aria-labelledby="tab-2" hidden>...</div>
+    keyboard:
+      - "Arrow Left/Right: Switch tabs"
+      - "Home/End: First/last tab"
+      - "Tab: Move to panel content"
+
+  - name: accordion
+    html: |
+      <h3>
+        <button aria-expanded="false" aria-controls="section-1">Section Title</button>
+      </h3>
+      <div id="section-1" role="region" aria-labelledby="accordion-btn" hidden>
+        Content here
+      </div>
+    keyboard:
+      - "Enter/Space: Toggle expand"
+      - "Arrow Up/Down: Move between headers"
+
+  - name: combobox-autocomplete
+    role: combobox
+    html: |
+      <label for="search">Search</label>
+      <input id="search" role="combobox" aria-expanded="false"
+             aria-controls="suggestions" aria-autocomplete="list"
+             aria-activedescendant="">
+      <ul id="suggestions" role="listbox" hidden>
+        <li role="option" id="opt-1">Option 1</li>
+      </ul>
+    keyboard:
+      - "Arrow Down: Open list, move selection"
+      - "Escape: Close list"
+      - "Enter: Select option"
+
+  - name: live-region
+    description: "Announce dynamic content changes"
+    variants:
+      alert: '<div role="alert">Error: Invalid email</div>'
+      status: '<div role="status" aria-live="polite">3 results found</div>'
+      log: '<div role="log" aria-live="polite">Chat messages...</div>'
+    rules:
+      - "Use role='alert' for urgent (assertive)"
+      - "Use aria-live='polite' for non-urgent"
+      - "Keep announcements brief and clear"
+
+  - name: skip-navigation
+    html: |
+      <a href="#main-content" class="skip-link">Skip to main content</a>
+      <!-- Navigation -->
+      <main id="main-content">...</main>
+    css: |
+      .skip-link {
+        position: absolute;
+        left: -9999px;
+      }
+      .skip-link:focus {
+        position: fixed;
+        top: 0; left: 0;
+        z-index: 9999;
+        padding: 1rem;
+        background: #000;
+        color: #fff;
+      }

package/.agent/skills/cross-cutting/accessibility/data/testing-tools.yaml

@@ -0,0 +1,60 @@
+# Accessibility Testing Tools
+
+tools:
+  - name: axe-core
+    type: automated
+    install: "npm install -D @axe-core/cli"
+    usage:
+      cli: "npx axe https://localhost:3000"
+      playwright: |
+        import AxeBuilder from '@axe-core/playwright';
+        const results = await new AxeBuilder({ page }).analyze();
+        expect(results.violations).toHaveLength(0);
+      jest: |
+        import { axe, toHaveNoViolations } from 'jest-axe';
+        expect.extend(toHaveNoViolations);
+        const results = await axe(container);
+        expect(results).toHaveNoViolations();
+    coverage: "~57% of WCAG issues"
+
+  - name: lighthouse
+    type: automated
+    usage:
+      chrome: "DevTools → Lighthouse → Accessibility"
+      cli: "npx lighthouse https://example.com --only-categories=accessibility"
+      ci: |
+        - name: Lighthouse CI
+          uses: treosh/lighthouse-ci-action@v10
+          with:
+            urls: https://example.com
+    scoring: "0-100 accessibility score"
+
+  - name: pa11y
+    type: ci-cd
+    install: "npm install -g pa11y"
+    usage: "pa11y https://example.com --standard WCAG2AA"
+    ci_integration: |
+      pa11y-ci --config .pa11yci.json
+
+  - name: eslint-plugin-jsx-a11y
+    type: linter
+    install: "npm install -D eslint-plugin-jsx-a11y"
+    catches:
+      - "Missing alt text"
+      - "Invalid ARIA attributes"
+      - "Non-interactive elements with handlers"
+      - "Missing form labels"
+
+  - name: manual-testing
+    type: manual
+    checklist:
+      - tool: "Keyboard only"
+        test: "Navigate entire page without mouse"
+      - tool: "Screen reader (NVDA/VoiceOver)"
+        test: "Read page content, interact with controls"
+      - tool: "Zoom to 200%"
+        test: "Content reflows, no horizontal scroll"
+      - tool: "High contrast mode"
+        test: "All content visible and usable"
+      - tool: "Reduced motion"
+        test: "No animations with prefers-reduced-motion"

package/.agent/skills/cross-cutting/accessibility/data/wcag-guidelines.yaml

@@ -0,0 +1,98 @@
+# WCAG 2.2 Guidelines Data
+# Perceivable, Operable, Understandable, Robust
+
+guidelines:
+  perceivable:
+    - id: "1.1.1"
+      name: "Non-text Content"
+      level: A
+      rule: "Provide text alternatives for non-text content"
+      patterns:
+        - element: "img"
+          fix: 'Add alt attribute: <img alt="Description">'
+          decorative: 'Use alt="" for decorative images'
+        - element: "svg"
+          fix: 'Add <title> and role="img" for meaningful SVG'
+        - element: "video"
+          fix: "Provide captions and audio descriptions"
+
+    - id: "1.4.3"
+      name: "Contrast (Minimum)"
+      level: AA
+      rule: "Text has contrast ratio of at least 4.5:1"
+      exceptions: ["Large text (3:1)", "Logos", "Disabled elements"]
+
+    - id: "1.4.11"
+      name: "Non-text Contrast"
+      level: AA
+      rule: "UI components and graphics have 3:1 contrast ratio"
+      applies_to: ["Borders", "Icons", "Focus indicators", "Charts"]
+
+    - id: "1.4.13"
+      name: "Content on Hover or Focus"
+      level: AA
+      rule: "Additional content triggered by hover/focus must be dismissible, hoverable, and persistent"
+
+  operable:
+    - id: "2.1.1"
+      name: "Keyboard"
+      level: A
+      rule: "All functionality available via keyboard"
+      patterns:
+        click: "Every onClick must also handle onKeyDown (Enter/Space)"
+        focus_order: "Tab order matches visual order"
+        no_trap: "User can always Tab away"
+
+    - id: "2.4.7"
+      name: "Focus Visible"
+      level: AA
+      rule: "Keyboard focus indicator is visible"
+      css: |
+        :focus-visible {
+          outline: 3px solid #005fcc;
+          outline-offset: 2px;
+        }
+
+    - id: "2.4.11"
+      name: "Focus Not Obscured (Minimum)"
+      level: AA
+      new_in: "WCAG 2.2"
+      rule: "Focused element is not entirely hidden by other elements"
+
+    - id: "2.5.8"
+      name: "Target Size (Minimum)"
+      level: AA
+      new_in: "WCAG 2.2"
+      rule: "Touch targets are at least 24x24 CSS pixels"
+      recommended: "44x44 CSS pixels for mobile"
+
+  understandable:
+    - id: "3.1.1"
+      name: "Language of Page"
+      level: A
+      rule: 'Set lang attribute: <html lang="en">'
+
+    - id: "3.3.1"
+      name: "Error Identification"
+      level: A
+      rule: "Identify and describe input errors in text"
+      pattern: |
+        <input aria-invalid="true" aria-describedby="error-msg">
+        <span id="error-msg" role="alert">Email is required</span>
+
+    - id: "3.3.8"
+      name: "Accessible Authentication"
+      level: AA
+      new_in: "WCAG 2.2"
+      rule: "No cognitive function test for authentication"
+      allowed: ["Passkeys", "Password managers", "OAuth", "Email link"]
+
+  robust:
+    - id: "4.1.2"
+      name: "Name, Role, Value"
+      level: A
+      rule: "All UI components have accessible name and role"
+      techniques:
+        - "Use semantic HTML elements (<button>, <nav>, <main>)"
+        - "Add aria-label when no visible text"
+        - "Use aria-labelledby to reference visible label"

package/.agent/skills/cross-cutting/audit-pro/META.yaml

@@ -1,7 +1,7 @@
 name: audit-pro
-version: "6.2.0"
+version: "6.2.2"
 display: Audit Pro System
-category: support
+category: cross-cutting
 tier: 1
 priority: 1
 
@@ -32,10 +32,6 @@ triggers:
       ai safety review,
     ]
 
-hsa:
-  enabled: true
-  adapter: audit_pro_adapter.py
-
 data_files:
   - data/checklists.yaml
   - data/scoring.yaml

package/.agent/skills/cross-cutting/audit-pro/SKILL.md

@@ -0,0 +1,61 @@
+# Audit Pro System
+
+12-Expert Panel audit system with 222 checkpoints. Conditional activation auto-detects project type (UI, DB, regulated, AI, cloud).
+
+## Standards
+
+- ISO 25010 (quality model)
+- CWE Top 25 (security weaknesses)
+- OWASP Top 10 (web security)
+- WCAG 2.2 (accessibility)
+- GDPR (data privacy)
+- SRE (reliability engineering)
+
+## Expert Panel
+
+### Core Experts (5 - always active)
+
+| Expert       | Domain                         | Checkpoints |
+| ------------ | ------------------------------ | ----------- |
+| Security     | Auth, injection, data exposure | ~30         |
+| Architecture | Patterns, modularity, coupling | ~30         |
+| Performance  | Latency, throughput, memory    | ~25         |
+| Quality      | Code smells, testing, docs     | ~35         |
+| DevOps       | CI/CD, deployment, monitoring  | ~25         |
+
+### Conditional Experts (7 - auto-activated)
+
+| Expert     | Trigger                 | Domain                        |
+| ---------- | ----------------------- | ----------------------------- |
+| UX/A11y    | Frontend detected       | WCAG, usability               |
+| Database   | DB files detected       | Schema, queries, migrations   |
+| Compliance | Regulated industry      | GDPR, HIPAA, PCI-DSS          |
+| AI Safety  | ML models detected      | Bias, drift, interpretability |
+| Cloud      | Cloud config detected   | Cost, HA, disaster recovery   |
+| API        | API routes detected     | REST maturity, versioning     |
+| Mobile     | Mobile project detected | Platform guidelines           |
+
+## Workflow
+
+```
+/ap → Discovery → Expert Assignment → Parallel Audit → Consensus → Report
+```
+
+1. **Discovery**: Detect stack, count files, estimate complexity
+2. **Expert Assignment**: Activate relevant experts based on project type
+3. **Parallel Audit**: Each expert evaluates independently
+4. **Consensus**: Cross-reference findings, resolve conflicts
+5. **Report**: Production readiness score, prioritized findings
+
+## Scoring
+
+- **A (90-100)**: Production ready
+- **B (75-89)**: Minor issues, safe to deploy
+- **C (60-74)**: Significant issues, fix before deploy
+- **D (40-59)**: Major issues, not production ready
+- **F (0-39)**: Critical issues, requires redesign
+
+## Data Files
+
+- `data/checklists.yaml` — Full checkpoint definitions
+- `data/scoring.yaml` — Scoring weights and formulas

package/.agent/skills/cross-cutting/bun/META.yaml

@@ -1,5 +1,5 @@
-name: bun
-version: "6.2.0"
+name: bun
+version: "6.2.2"
 category: runtime
 tier: 3
 
@@ -12,12 +12,6 @@ patterns:
     database: 5
     tooling: 9
 
-hsa:
-  enabled: true
-  adapter: bun_adapter.py
-
-triggers:
-  file_patterns:
     - "bun.lockb"
     - "bunfig.toml"
   keywords:

package/.agent/skills/cross-cutting/bun/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bun
 detect: ["bun.lockb", "bunfig.toml", "bun.lock"]
-version: "6.1.2"
+version: "6.2.2"
 category: runtime
 tier: 2
 ---
@@ -339,18 +339,14 @@ bun x socket scan
 
 ## 🔌 HSA Integration
 
-```python
-from .agent.scripts.hsa.adapters import (
-    search_bun_patterns,
-    get_bun_api,
-)
+Data powered by HSA BM25 search engine:
 
-# Search Bun patterns
-results = search_bun_patterns("s3 upload")
-
-# Get specific API
-api = get_bun_api("Bun.sql")
-```
+| Domain  | Query Examples                       |
+| ------- | ------------------------------------ |
+| API     | "Bun.sql PostgreSQL tagged template" |
+| Storage | "Bun.S3 upload stream"               |
+| Build   | "Bun.build minify splitting target"  |
+| Runtime | "Elysia HTTP server validation"      |
 
 ---
 

package/.agent/skills/cross-cutting/coding-rules/META.yaml

@@ -1,7 +1,7 @@
 name: coding-rules
-version: "6.2.0"
+version: "6.2.2"
 display: Awesome Coding Rules
-category: support
+category: cross-cutting
 tier: 1
 priority: 2
 
@@ -37,15 +37,7 @@ caps:
   - 9 memory management patterns
   - 12 performance benchmarks
   - 9 concurrency patterns
-
-hsa:
-  enabled: true
-  adapter: coding_rules_adapter.py
-  functions:
-    - search_coding_rules
-    - get_naming_conventions
-    - get_architecture_patterns
-    - get_design_patterns
+  - 15 framework directory structures
 
 data_files:
   - data/naming-conventions.yaml
@@ -59,3 +51,4 @@ data_files:
   - data/memory-management.yaml
   - data/performance-benchmarks.yaml
   - data/concurrency-patterns.yaml
+  - data/framework-directories.yaml

package/.agent/skills/cross-cutting/coding-rules/SKILL.md

@@ -95,32 +95,31 @@ src/
 
 ## Data Files
 
-| File                         | Content                      | Entries       |
-| ---------------------------- | ---------------------------- | ------------- |
-| `naming-conventions.csv`     | Multi-language naming rules  | 22 languages  |
-| `architecture-patterns.csv`  | Project structure patterns   | 10 patterns   |
-| `coding-rules.csv`           | Universal coding rules       | 32+ rules     |
-| `design-patterns.csv`        | GoF patterns by language     | 20 patterns   |
-| `build-systems.csv`          | Build system commands        | 38 configs    |
-| `framework-signatures.csv`   | Framework detection rules    | 47 frameworks |
-| `test-frameworks.csv`        | Test framework detection     | 24 frameworks |
-| `solid-principles.csv`       | SOLID implementation         | 5 principles  |
-| `memory-management.csv`      | Memory allocation benchmarks | 9 languages   |
-| `performance-benchmarks.csv` | Cross-language performance   | 12 categories |
-| `concurrency-patterns.csv`   | Async/threading comparison   | 9 languages   |
+| File                          | Content                      | Entries       |
+| ----------------------------- | ---------------------------- | ------------- |
+| `naming-conventions.yaml`     | Multi-language naming rules  | 23 languages  |
+| `architecture-patterns.yaml`  | Project structure patterns   | 10 patterns   |
+| `coding-rules.yaml`           | Universal coding rules       | 32+ rules     |
+| `design-patterns.yaml`        | GoF patterns by language     | 20 patterns   |
+| `build-systems.yaml`          | Build system commands        | 38 configs    |
+| `framework-signatures.yaml`   | Framework detection rules    | 47 frameworks |
+| `test-frameworks.yaml`        | Test framework detection     | 24 frameworks |
+| `solid-principles.yaml`       | SOLID implementation         | 5 principles  |
+| `memory-management.yaml`      | Memory allocation benchmarks | 9 languages   |
+| `performance-benchmarks.yaml` | Cross-language performance   | 12 categories |
+| `concurrency-patterns.yaml`   | Async/threading comparison   | 9 languages   |
+| `framework-directories.yaml`  | Framework directory trees    | 15 frameworks |
 
 ## Usage
 
-```bash
-# Search naming conventions
-python .agent/skills/coding-rules/scripts/search.py "python function naming"
+All data files are YAML format in `data/` directory, indexed by HSA BM25 engine:
 
-# Get architecture for project type
-python .agent/skills/coding-rules/scripts/search.py "enterprise backend" --domain architecture
-
-# Find design pattern implementation
-python .agent/skills/coding-rules/scripts/search.py "observer csharp" --domain patterns
-```
+- **Naming**: `data/naming-conventions.yaml` — lookup by `language` field
+- **Architecture**: `data/architecture-patterns.yaml` — lookup by `architecture` field
+- **Design Patterns**: `data/design-patterns.yaml` — lookup by `pattern` field
+- **Directory Trees**: `data/framework-directories.yaml` — lookup by `framework` field
+- **Build Commands**: `data/build-systems.yaml` — lookup by `build_system` field
+- **Detection**: `data/framework-signatures.yaml` — match `detection_file` + `detection_pattern`
 
 ## Sources
 
@@ -142,30 +141,23 @@ python .agent/skills/coding-rules/scripts/search.py "observer csharp" --domain p
 
 ## 🔌 HSA Integration
 
-This skill is powered by HSA adapter for semantic search across 11 data domains:
-
-```python
-from .agent.scripts.hsa.adapters import (
-    search_coding_rules,
-    get_naming_convention,
-    get_design_pattern,
-    detect_framework,
-)
-
-# Search coding rules
-results = search_coding_rules("single responsibility", language="python")
-
-# Get naming conventions for language
-naming = get_naming_convention("typescript")
-# → {"classes": "PascalCase", "functions": "camelCase", ...}
-
-# Detect framework from imports
-framework = detect_framework(["from fastapi import FastAPI"])
-# → {"name": "FastAPI", "language": "Python", ...}
-```
-
-**Available Functions**: `search_coding_rules`, `get_naming_convention`, `get_coding_rule`, `get_design_pattern`, `get_build_command`, `detect_framework`
+All 12 data domains are indexed by HSA BM25 engine for semantic search:
+
+| Domain              | Data File                     | Query Examples              |
+| ------------------- | ----------------------------- | --------------------------- |
+| Naming              | `naming-conventions.yaml`     | "python function naming"    |
+| Architecture        | `architecture-patterns.yaml`  | "clean architecture folder" |
+| Coding Rules        | `coding-rules.yaml`           | "single responsibility"     |
+| Design Patterns     | `design-patterns.yaml`        | "observer csharp"           |
+| Build Systems       | `build-systems.yaml`          | "cmake build command"       |
+| Framework Detection | `framework-signatures.yaml`   | "react detection"           |
+| Test Frameworks     | `test-frameworks.yaml`        | "jest testing"              |
+| SOLID               | `solid-principles.yaml`       | "dependency inversion"      |
+| Memory              | `memory-management.yaml`      | "rust memory safety"        |
+| Performance         | `performance-benchmarks.yaml` | "go vs rust benchmark"      |
+| Concurrency         | `concurrency-patterns.yaml`   | "async await pattern"       |
+| Directory Trees     | `framework-directories.yaml`  | "nuxt directory structure"  |
 
 ---
 
-_DOMYH Awesome Code • Awesome Coding Rules • 23 Languages • HSA-Powered_
+_DOMYH Awesome Code • Awesome Coding Rules • 23 Languages • 12 Data Domains_

package/.agent/skills/cross-cutting/coding-rules/data/adr-patterns.yaml

@@ -0,0 +1,102 @@
+# =============================================================================
+# adr-patterns.yaml — Architecture Decision Records
+# =============================================================================
+
+version: "1.0.0"
+
+overview:
+  description: |
+    Architecture Decision Records capture context, options, and rationale
+    for significant architectural decisions. They serve as documentation
+    for future team members and prevent re-debating settled decisions.
+
+templates:
+  madr:
+    name: "Markdown ADR (MADR)"
+    structure: |
+      # ADR-NNNN: [Decision Title]
+
+      ## Status
+      [Proposed | Accepted | Deprecated | Superseded by ADR-XXXX]
+
+      ## Context
+      What is the issue that we're seeing that is motivating this decision?
+
+      ## Decision
+      What is the change that we're proposing and/or doing?
+
+      ## Consequences
+      What becomes easier or more difficult to do because of this change?
+
+      ### Positive
+      - [Benefit 1]
+
+      ### Negative
+      - [Trade-off 1]
+
+      ## Alternatives Considered
+      ### Option A: [Name]
+      - Pros: ...
+      - Cons: ...
+
+  nygard:
+    name: "Michael Nygard (original)"
+    structure: |
+      # [Number]. [Title]
+      Date: [YYYY-MM-DD]
+      ## Status
+      ## Context
+      ## Decision
+      ## Consequences
+
+lifecycle:
+  statuses:
+    - proposed: "Under discussion, not yet decided"
+    - accepted: "Decision made, being implemented"
+    - deprecated: "No longer applies, but kept for history"
+    - superseded: "Replaced by a newer ADR"
+
+  transitions: |
+    proposed → accepted → deprecated
+                        → superseded (by ADR-XXXX)
+
+conventions:
+  naming: "docs/adr/NNNN-kebab-case-title.md"
+  numbering: "Sequential (0001, 0002, ...)"
+  directory: "docs/adr/ or docs/architecture/decisions/"
+  index: "README.md or index.md listing all ADRs"
+
+  example_index: |
+    # Architecture Decision Records
+
+    | # | Title | Status | Date |
+    |---|-------|--------|------|
+    | 0001 | Use PostgreSQL as primary DB | Accepted | 2025-01-15 |
+    | 0002 | Adopt microservices architecture | Accepted | 2025-02-01 |
+    | 0003 | Switch from REST to gRPC | Proposed | 2025-03-10 |
+
+tooling:
+  - name: "adr-tools"
+    install: "brew install adr-tools"
+    commands:
+      create: "adr new Use PostgreSQL"
+      list: "adr list"
+      link: "adr link 3 Supersedes 2"
+
+  - name: "log4brains"
+    install: "npm install -g log4brains"
+    features: ["Web UI", "Search", "Timeline view"]
+    commands:
+      init: "log4brains init"
+      new: "log4brains adr new"
+      preview: "log4brains preview"
+
+when_to_create:
+  - "Choosing a database or infrastructure"
+  - "Selecting a framework or library"
+  - "Defining API contracts or protocols"
+  - "Architecture pattern decisions (monolith vs microservices)"
+  - "Security-impacting decisions"
+  - "Performance trade-offs"
+
+# _DOMYH Awesome Code • ADR Patterns_