@nockdev/awf 6.2.0

package/.agent/skills/cross-cutting/database/data/postgresql.yaml

@@ -0,0 +1,170 @@
+# PostgreSQL Patterns - HSA Database Skill
+# Version: PG 18 (Sep 2025)
+# Updated: 2026-02-05
+
+patterns:
+  # Performance
+  - id: pg001
+    pattern: Connection Pooling
+    category: performance
+    version: all
+    description: Use PgBouncer or built-in pooling for connection reuse
+    example: "max_connections = 100, pgbouncer pool_size = 20"
+    severity: HIGH
+
+  - id: pg002
+    pattern: Async I/O
+    category: performance
+    version: "18"
+    description: PostgreSQL 18 async I/O for 2-3x sequential scan speedup
+    example: "CREATE TABLE ... WITH (parallel_workers = 4)"
+    severity: MEDIUM
+
+  - id: pg003
+    pattern: Index Skip Scan
+    category: performance
+    version: "18"
+    description: 40% faster queries by skipping irrelevant index entries
+    example: "SELECT DISTINCT category FROM products"
+    severity: MEDIUM
+
+  - id: pg004
+    pattern: UUIDv7
+    category: data
+    version: "18"
+    description: Time-ordered UUIDs for better index performance
+    example: "id UUID DEFAULT uuidv7()"
+    severity: MEDIUM
+
+  - id: pg005
+    pattern: Virtual Generated Columns
+    category: data
+    version: "18"
+    description: Compute on demand, reduce storage
+    example: "full_name TEXT GENERATED ALWAYS AS (first || ' ' || last) VIRTUAL"
+    severity: LOW
+
+  - id: pg006
+    pattern: RETURNING OLD/NEW
+    category: query
+    version: "18"
+    description: Get old and new values in UPDATE/DELETE
+    example: "UPDATE t SET x=1 RETURNING OLD.x, NEW.x"
+    severity: MEDIUM
+
+  - id: pg007
+    pattern: UNIQUE NULLS DISTINCT
+    category: constraint
+    version: "18"
+    description: Treat NULLs as distinct in unique constraints
+    example: "CREATE UNIQUE INDEX idx ON t(col) NULLS DISTINCT"
+    severity: LOW
+
+  # Optimization
+  - id: pg008
+    pattern: Partial Index
+    category: optimization
+    version: all
+    description: Index only relevant subset of data
+    example: "CREATE INDEX idx ON orders (created_at) WHERE status = 'pending'"
+    severity: HIGH
+
+  - id: pg009
+    pattern: Covering Index
+    category: optimization
+    version: "11+"
+    description: Include columns to avoid table lookup
+    example: "CREATE INDEX idx ON orders(user_id) INCLUDE (status, total)"
+    severity: HIGH
+
+  - id: pg010
+    pattern: BRIN Index
+    category: optimization
+    version: all
+    description: Block Range Index for large time-series tables
+    example: "CREATE INDEX idx ON events USING BRIN(created_at)"
+    severity: MEDIUM
+
+  - id: pg011
+    pattern: GIN Index
+    category: optimization
+    version: all
+    description: Generalized Inverted Index for JSONB/arrays
+    example: "CREATE INDEX idx ON events USING GIN(data)"
+    severity: HIGH
+
+  # Data
+  - id: pg012
+    pattern: JSONB Operations
+    category: data
+    version: "14+"
+    description: Use JSONB for flexible schema with indexing
+    example: 'data @> ''{"type": "purchase"}'''
+    severity: MEDIUM
+
+  - id: pg013
+    pattern: JSON_TABLE
+    category: data
+    version: "17+"
+    description: Transform JSON to relational rows
+    example: "SELECT * FROM JSON_TABLE(data, '$.items[*]' COLUMNS(...))"
+    severity: MEDIUM
+
+  # Debug & Maintenance
+  - id: pg014
+    pattern: EXPLAIN ANALYZE
+    category: debug
+    version: all
+    description: Always analyze query plans before optimization
+    example: "EXPLAIN (ANALYZE, BUFFERS, FORMAT TEXT) SELECT ..."
+    severity: CRITICAL
+
+  - id: pg015
+    pattern: Vacuum Strategy
+    category: maintenance
+    version: all
+    description: Configure autovacuum for high-write tables
+    example: "ALTER TABLE SET (autovacuum_vacuum_scale_factor = 0.05)"
+    severity: HIGH
+
+  # Security
+  - id: pg016
+    pattern: Row-Level Security
+    category: security
+    version: all
+    description: Implement RLS for multi-tenant isolation
+    example: "CREATE POLICY tenant_policy ON table USING (tenant_id = current_setting('app.tenant_id'))"
+    severity: CRITICAL
+
+  - id: pg017
+    pattern: Parameterized Queries
+    category: security
+    version: all
+    description: Use $1, $2 placeholders to prevent SQL injection
+    example: "SELECT * FROM users WHERE id = $1"
+    severity: CRITICAL
+
+  # Transaction
+  - id: pg018
+    pattern: Advisory Locks
+    category: transaction
+    version: all
+    description: Application-level locking
+    example: "SELECT pg_advisory_lock(12345)"
+    severity: MEDIUM
+
+  - id: pg019
+    pattern: Serializable Isolation
+    category: transaction
+    version: all
+    description: Strictest isolation for financial operations
+    example: "SET TRANSACTION ISOLATION LEVEL SERIALIZABLE"
+    severity: HIGH
+
+  - id: pg020
+    pattern: NOT NULL NOT VALID
+    category: maintenance
+    version: "18"
+    description: Add NOT NULL constraint without full scan
+    example: "ALTER TABLE ADD CONSTRAINT col_not_null CHECK (col IS NOT NULL) NOT VALID"
+    severity: MEDIUM

package/.agent/skills/cross-cutting/database/data/redis.yaml

@@ -0,0 +1,129 @@
+# Redis Patterns - HSA Database Skill
+# Version: Redis 8 (2025)
+# Updated: 2026-02-05
+
+patterns:
+  # Performance
+  - id: re001
+    pattern: Pipelining
+    category: performance
+    version: all
+    description: Send multiple commands in one roundtrip
+    example: "pipe = redis.pipeline(); pipe.get('a'); pipe.get('b'); pipe.execute()"
+    severity: HIGH
+
+  - id: re002
+    pattern: I/O Threading
+    category: performance
+    version: "8"
+    description: Multi-threaded I/O for 87% faster latency
+    example: "io-threads 4, io-threads-do-reads yes"
+    severity: HIGH
+
+  # Memory
+  - id: re003
+    pattern: Memory Eviction
+    category: memory
+    version: all
+    description: Configure eviction policy for memory limits
+    example: "maxmemory-policy allkeys-lru"
+    severity: CRITICAL
+
+  - id: re004
+    pattern: Replica Memory Savings
+    category: memory
+    version: "8"
+    description: 35% less memory on replica nodes
+    example: "Automatic in Redis 8"
+    severity: MEDIUM
+
+  # New Data Types (Redis 8)
+  - id: re005
+    pattern: Vector Set
+    category: data
+    version: "8"
+    description: Native vector similarity search (beta), 1B vectors
+    example: "VADD myvecs id1 [...] VSEARCH myvecs TOPK 10 [...]"
+    severity: HIGH
+
+  - id: re006
+    pattern: JSON Data Type
+    category: data
+    version: "8"
+    description: Native JSON storage and manipulation
+    example: 'JSON.SET user:1 $ ''{"name":"Alice"}'''
+    severity: MEDIUM
+
+  - id: re007
+    pattern: Time Series
+    category: data
+    version: "8"
+    description: Native time series data with aggregation
+    example: "TS.ADD sensor:temp * 25.3"
+    severity: MEDIUM
+
+  - id: re008
+    pattern: Probabilistic
+    category: data
+    version: "8"
+    description: Bloom, cuckoo, count-min, top-k, t-digest
+    example: "BF.ADD mybloom item1"
+    severity: LOW
+
+  # New Commands (Redis 8)
+  - id: re009
+    pattern: HGETDEL
+    category: command
+    version: "8"
+    description: Get hash field and delete it atomically
+    example: "HGETDEL myhash field1"
+    severity: MEDIUM
+
+  - id: re010
+    pattern: HGETEX/HSETEX
+    category: command
+    version: "8"
+    description: Get/set hash fields with optional TTL
+    example: "HSETEX myhash EX 3600 field1 value1"
+    severity: MEDIUM
+
+  # Patterns
+  - id: re011
+    pattern: SCAN over KEYS
+    category: performance
+    version: "2.8+"
+    description: Never use KEYS in production, use SCAN
+    example: "SCAN 0 MATCH user:* COUNT 100"
+    severity: CRITICAL
+
+  - id: re012
+    pattern: Lua Scripts
+    category: atomicity
+    version: all
+    description: Use Lua for atomic multi-key operations
+    example: 'EVAL ''redis.call("set", KEYS[1], ARGV[1])'' 1 key value'
+    severity: MEDIUM
+
+  - id: re013
+    pattern: Streams
+    category: messaging
+    version: "5+"
+    description: Use streams for persistent message queues
+    example: "XADD stream * field value; XREAD STREAMS stream 0"
+    severity: HIGH
+
+  - id: re014
+    pattern: Cluster Mode
+    category: scaling
+    version: "3+"
+    description: Horizontal scaling with hash slots
+    example: "redis-cli --cluster create ..."
+    severity: HIGH
+
+  - id: re015
+    pattern: TTL Strategy
+    category: memory
+    version: all
+    description: Set TTL on cache keys to prevent memory bloat
+    example: "SETEX key 3600 value"
+    severity: HIGH

package/.agent/skills/cross-cutting/deno/META.yaml

@@ -0,0 +1,68 @@
+name: deno
+version: "6.2.0"
+category: runtime
+tier: 3
+
+desc: "Deno 2.6+ development patterns. Covers TypeScript-first, permissions, Fresh framework, npm/jsr compat, OpenTelemetry."
+
+patterns:
+  total: 27
+  domains:
+    runtime: 12
+    security: 9
+    tooling: 6
+
+hsa:
+  enabled: true
+  adapter: deno_adapter.py
+
+triggers:
+  file_patterns:
+    - "deno.json"
+    - "deno.jsonc"
+    - "deno.lock"
+    - "mod.ts"
+    - "deps.ts"
+  keywords:
+    # Core
+    - deno
+    - deno 2
+    - deno deploy
+    - Deno.serve
+    - Deno.openKv
+    # Features
+    - url import
+    - permissions deno
+    - deno compile
+    - deno audit
+    - jsr:
+    - npm:
+    # Security
+    - "--allow-net"
+    - "--allow-read"
+    - "--allow-write"
+    - "--allow-env"
+    - "--deny-"
+    # Framework
+    - fresh framework
+    - oak deno
+    - hono deno
+    # Testing
+    - deno test
+    - deno bench
+    - Deno.test
+  intents:
+    - create deno project
+    - deno api
+    - fresh app
+    - deno deploy
+    - deno permissions
+
+related_skills:
+  - typescript
+  - javascript
+  - nodejs
+
+prevent_confusion_with:
+  - nodejs: "Deno uses URL imports, Node uses npm"
+  - bun: "Deno is security-first, Bun is speed-first"

package/.agent/skills/cross-cutting/deno/SKILL.md

@@ -0,0 +1,343 @@
+---
+name: deno
+detect: ["deno.json", "deno.jsonc", "deno.lock", "mod.ts", "deps.ts"]
+version: "6.1.2"
+category: runtime
+tier: 2
+---
+
+# Deno Patterns — DOMYH Awesome Code
+
+> **Version**: Deno 2.6.8 (2025-2026)
+> **Framework**: Fresh, Hono
+> **Philosophy**: Secure by default, TypeScript-first
+
+---
+
+## 🎯 When to Use This Skill
+
+Use for: APIs, CLI tools, edge functions, TypeScript projects.
+**NOT for**: Heavy npm ecosystem (→ nodejs), speed-critical (→ bun).
+
+---
+
+## 📦 What's New in Deno 2.x (2025-2026)
+
+| Version | Key Features                                        |
+| ------- | --------------------------------------------------- |
+| **2.2** | node:sqlite, TypeScript 5.7, lint plugins           |
+| **2.4** | deno bundle return, bytes/text imports              |
+| **2.5** | WebSocket headers, setTimeout unstable              |
+| **2.6** | **dx** command, **deno audit**, tsgo fast typecheck |
+
+---
+
+## 🔧 Project Setup
+
+### deno.json
+
+```json
+{
+  "tasks": {
+    "dev": "deno run --watch --allow-net --allow-read main.ts",
+    "start": "deno run --allow-net --allow-read main.ts",
+    "test": "deno test --allow-all",
+    "check": "deno check *.ts",
+    "fmt": "deno fmt",
+    "lint": "deno lint",
+    "audit": "deno audit"
+  },
+  "imports": {
+    "@std/": "jsr:@std/",
+    "hono": "jsr:@hono/hono@^4",
+    "@oak/oak": "jsr:@oak/oak@^17"
+  },
+  "compilerOptions": {
+    "strict": true
+  }
+}
+```
+
+### Project Structure
+
+```
+project/
+├── deno.json         # Config & imports
+├── deno.lock         # Lock file
+├── main.ts           # Entry point
+├── routes/
+│   ├── api/
+│   │   └── users.ts
+│   └── index.ts
+├── lib/
+│   └── db.ts
+└── tests/
+    └── api_test.ts
+```
+
+---
+
+## 🔄 Core Patterns
+
+### HTTP Server with Hono
+
+```typescript
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger } from "hono/logger";
+
+const app = new Hono();
+
+app.use("*", logger());
+app.use("/api/*", cors());
+
+app.get("/", (c) => c.text("Hello Deno 2.6!"));
+
+app.get("/api/users", async (c) => {
+  const users = await listUsers();
+  return c.json(users);
+});
+
+app.get("/api/users/:id", async (c) => {
+  const id = c.req.param("id");
+  const user = await getUser(id);
+  if (!user) return c.json({ error: "Not found" }, 404);
+  return c.json(user);
+});
+
+Deno.serve({ port: 8000 }, app.fetch);
+```
+
+### Database with Deno KV
+
+```typescript
+const kv = await Deno.openKv();
+
+interface User {
+  id: string;
+  name: string;
+  email: string;
+  createdAt: Date;
+}
+
+export async function createUser(
+  data: Omit<User, "id" | "createdAt">,
+): Promise<User> {
+  const id = crypto.randomUUID();
+  const user: User = { id, ...data, createdAt: new Date() };
+
+  await kv.set(["users", id], user);
+  await kv.set(["users_by_email", data.email], id);
+
+  return user;
+}
+
+export async function getUser(id: string): Promise<User | null> {
+  const result = await kv.get<User>(["users", id]);
+  return result.value;
+}
+
+export async function listUsers(): Promise<User[]> {
+  const users: User[] = [];
+  const iter = kv.list<User>({ prefix: ["users"] });
+
+  for await (const entry of iter) {
+    if (entry.key.length === 2) users.push(entry.value);
+  }
+  return users;
+}
+```
+
+### 🆕 node:sqlite (Deno 2.2+)
+
+```typescript
+import { DatabaseSync } from "node:sqlite";
+
+const db = new DatabaseSync("app.db");
+
+db.exec(`
+  CREATE TABLE IF NOT EXISTS users (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    email TEXT UNIQUE
+  )
+`);
+
+const stmt = db.prepare("INSERT INTO users (name, email) VALUES (?, ?)");
+stmt.run("Alice", "alice@example.com");
+
+const users = db.prepare("SELECT * FROM users").all();
+```
+
+---
+
+## 🆕 CLI Commands (2.6+)
+
+### dx — Package Binary Runner
+
+```bash
+# Run npm package binaries directly
+dx prettier --write .
+dx eslint src/
+dx tsx script.ts
+
+# Same as npx but for Deno
+```
+
+### deno audit — Security Scan
+
+```bash
+# Scan dependencies for vulnerabilities
+deno audit
+
+# Output:
+# ✓ No vulnerabilities found
+# - or -
+# ⚠ Found 2 vulnerabilities in dependencies
+```
+
+### Granular Permissions
+
+```bash
+# Specific host only
+deno run --allow-net=api.example.com main.ts
+
+# Specific path only
+deno run --allow-read=./config,./data main.ts
+
+# Fine-grained env access
+deno run --allow-env=DATABASE_URL,API_KEY main.ts
+```
+
+---
+
+## 🔒 Permissions Best Practices
+
+```typescript
+// ✅ Check permissions at runtime
+const netPermission = await Deno.permissions.query({ name: "net" });
+if (netPermission.state !== "granted") {
+  console.error("Network permission required");
+  Deno.exit(1);
+}
+
+// ✅ Request permission dynamically
+const status = await Deno.permissions.request({
+  name: "read",
+  path: "./config",
+});
+
+if (status.state === "granted") {
+  const config = await Deno.readTextFile("./config/app.json");
+}
+```
+
+---
+
+## 🌐 Fresh Framework (Full-stack)
+
+```typescript
+// routes/index.tsx
+import { Handlers, PageProps } from "$fresh/server.ts";
+import Counter from "../islands/Counter.tsx";
+
+interface Data {
+  message: string;
+}
+
+export const handler: Handlers<Data> = {
+  GET(req, ctx) {
+    return ctx.render({ message: "Welcome to Fresh!" });
+  },
+};
+
+export default function Home({ data }: PageProps<Data>) {
+  return (
+    <div class="p-4 mx-auto max-w-screen-md">
+      <h1 class="text-4xl font-bold">{data.message}</h1>
+      <Counter start={0} />
+    </div>
+  );
+}
+```
+
+---
+
+## 🧪 Testing
+
+```typescript
+import { assertEquals, assertExists } from "@std/assert";
+import { createUser, getUser } from "../lib/db.ts";
+
+Deno.test("User CRUD operations", async (t) => {
+  let userId: string;
+
+  await t.step("create user", async () => {
+    const user = await createUser({
+      name: "Test User",
+      email: "test@example.com",
+    });
+    assertExists(user.id);
+    assertEquals(user.name, "Test User");
+    userId = user.id;
+  });
+
+  await t.step("get user", async () => {
+    const user = await getUser(userId);
+    assertExists(user);
+    assertEquals(user.email, "test@example.com");
+  });
+});
+```
+
+```bash
+deno test --allow-all           # Run tests
+deno test --allow-all --coverage=coverage  # With coverage
+deno coverage coverage          # View coverage
+```
+
+---
+
+## ✅ Production Checklist
+
+### Security
+
+- [ ] Minimal permissions specified
+- [ ] No --allow-all in production
+- [ ] Environment variables for secrets
+- [ ] CORS configured properly
+- [ ] `deno audit` passing
+
+### Quality
+
+- [ ] deno lint passing
+- [ ] deno fmt consistent
+- [ ] deno check for type errors
+- [ ] Tests coverage > 80%
+
+### Deploy
+
+- [ ] deno.lock committed
+- [ ] Deno Deploy or Docker
+- [ ] Health check endpoint
+
+---
+
+## 🔌 HSA Integration
+
+```python
+from .agent.scripts.hsa.adapters import (
+    search_deno_patterns,
+    get_deno_permission,
+)
+
+# Search Deno patterns
+results = search_deno_patterns("kv database")
+
+# Get permission info
+perm = get_deno_permission("net")
+```
+
+---
+
+_DOMYH Awesome Code • Deno 2.6.8 • 2026_