@nockdev/awf 6.2.0

package/.agent/skills/cross-cutting/electron/data/build.yaml

@@ -0,0 +1,105 @@
+# Electron Build Tools Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: build
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 6
+
+patterns:
+  - id: build001
+    name: electron-vite
+    category: build
+    version: all
+    description: Fast Vite-based build tool with HMR for Electron
+    text: electron vite build tool fast hmr bundler dev hot reload
+    example: |
+      # Install
+      npm create @electron-vite/quick-start@latest my-app
+      # Dev
+      npx electron-vite dev
+      # Build
+      npx electron-vite build
+    severity: HIGH
+    recommended: true
+    docs_url: https://electron-vite.org
+
+  - id: build002
+    name: electron-builder
+    category: packaging
+    version: all
+    description: Complete solution for packaging and distribution
+    text: electron builder package distribute installer dmg nsis exe deb
+    example: |
+      # package.json
+      "build": {
+        "appId": "com.yourcompany.app",
+        "mac": { "target": ["dmg", "zip"] },
+        "win": { "target": ["nsis"] },
+        "linux": { "target": ["deb", "AppImage"] }
+      }
+    severity: HIGH
+    docs_url: https://www.electron.build
+
+  - id: build003
+    name: electron-forge
+    category: build
+    version: all
+    description: Official Electron scaffolding and build tool
+    text: electron forge scaffold template official plugin maker packager
+    example: |
+      # Create new app
+      npm init electron-app@latest my-app -- --template=vite-typescript
+      # Package
+      npx electron-forge package
+      # Make distributables
+      npx electron-forge make
+    severity: HIGH
+    docs_url: https://www.electronforge.io
+
+  - id: build004
+    name: externalizeDepsPlugin
+    category: build
+    version: all
+    description: Externalize Node.js dependencies from bundle
+    text: externalize deps plugin native module node addon exclude
+    example: |
+      // electron.vite.config.ts
+      import { externalizeDepsPlugin } from 'electron-vite';
+
+      export default defineConfig({
+        main: { plugins: [externalizeDepsPlugin()] },
+        preload: { plugins: [externalizeDepsPlugin()] }
+      });
+    severity: MEDIUM
+
+  - id: build005
+    name: electron-rebuild
+    category: build
+    version: all
+    description: Rebuild native modules for Electron's Node.js version
+    text: electron rebuild native module node gyp addon binding
+    example: |
+      # After npm install
+      npx electron-rebuild
+      # Or in package.json
+      "postinstall": "electron-rebuild"
+    severity: MEDIUM
+    docs_url: https://github.com/electron/rebuild
+
+  - id: build006
+    name: asar
+    category: packaging
+    version: all
+    description: Archive format for Electron app resources
+    text: asar archive package resources bundle app protection
+    example: |
+      # electron-builder.json
+      {
+        "asar": true,
+        "asarUnpack": ["**/*.node", "**/node_modules/sharp/**"]
+      }
+    severity: LOW

package/.agent/skills/cross-cutting/electron/data/crash.yaml

@@ -0,0 +1,103 @@
+# Electron Crash Reporting & Logging Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: crash
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 4
+
+patterns:
+  - id: crash001
+    name: crashReporter
+    category: crash
+    version: all
+    description: Built-in crash reporter that submits minidumps
+    text: crash reporter minidump submit diagnostics report error native
+    example: |
+      import { crashReporter, app } from 'electron';
+
+      crashReporter.start({
+        productName: 'MyApp',
+        submitURL: 'https://your-crash-server.com/submit',
+        uploadToServer: true,
+        extra: {
+          app_version: app.getVersion(),
+          environment: process.env.NODE_ENV
+        }
+      });
+    severity: HIGH
+    docs_url: https://www.electronjs.org/docs/latest/api/crash-reporter
+
+  - id: crash002
+    name: Sentry Electron
+    category: crash
+    version: all
+    description: Full-featured error tracking with Sentry SDK
+    text: sentry electron error tracking crash reporting apm performance
+    example: |
+      // main.ts
+      import * as Sentry from '@sentry/electron/main';
+
+      Sentry.init({
+        dsn: 'https://your-dsn@sentry.io/project',
+        release: app.getVersion()
+      });
+
+      // preload.ts
+      import * as Sentry from '@sentry/electron/renderer';
+      Sentry.init({ dsn: 'https://...' });
+    severity: HIGH
+    recommended: true
+    docs_url: https://docs.sentry.io/platforms/electron
+
+  - id: crash003
+    name: electron-log
+    category: logging
+    version: all
+    description: Simple logging with file rotation and transports
+    text: electron log file transport console winston logging rotate
+    example: |
+      import log from 'electron-log';
+
+      // Configure
+      log.transports.file.level = 'info';
+      log.transports.file.maxSize = 5 * 1024 * 1024; // 5MB
+
+      // Use
+      log.info('App started');
+      log.error('Something failed', error);
+
+      // Path: ~/Library/Logs/MyApp/main.log (macOS)
+    severity: MEDIUM
+    docs_url: https://github.com/megahertz/electron-log
+
+  - id: crash004
+    name: process crash handling
+    category: crash
+    version: all
+    description: Handle renderer and GPU process crashes gracefully
+    text: process crash handling renderer gpu unresponsive recover
+    example: |
+      mainWindow.webContents.on('render-process-gone', (event, details) => {
+        log.error('Renderer crashed:', details.reason);
+        
+        if (details.reason === 'crashed') {
+          // Attempt recovery
+          mainWindow.reload();
+        }
+      });
+
+      mainWindow.webContents.on('unresponsive', () => {
+        log.warn('Window unresponsive');
+        dialog.showMessageBox({
+          type: 'warning',
+          message: 'App is not responding',
+          buttons: ['Wait', 'Reload']
+        }).then(({ response }) => {
+          if (response === 1) mainWindow.reload();
+        });
+      });
+    severity: MEDIUM

package/.agent/skills/cross-cutting/electron/data/ipc.yaml

@@ -0,0 +1,85 @@
+# Electron IPC Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: ipc
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 6
+
+patterns:
+  - id: ipc001
+    name: ipcMain.handle
+    category: ipc
+    version: "7+"
+    description: Async IPC handler pattern (recommended for request-response)
+    text: ipc invoke handle async communication main renderer promise await
+    example: |
+      ipcMain.handle('channel', async (event, data) => {
+        return await processData(data);
+      });
+    severity: HIGH
+    recommended: true
+
+  - id: ipc002
+    name: ipcRenderer.invoke
+    category: ipc
+    version: "7+"
+    description: Invoke main process handler and await response
+    text: ipc invoke renderer call main process promise async
+    example: "const result = await ipcRenderer.invoke('channel', data);"
+    severity: HIGH
+    recommended: true
+
+  - id: ipc003
+    name: ipcMain.on / ipcRenderer.send
+    category: ipc
+    version: all
+    description: One-way IPC from renderer to main (fire-and-forget)
+    text: ipc send on one way communication main renderer fire forget
+    example: |
+      // Renderer
+      ipcRenderer.send('channel', data);
+      // Main
+      ipcMain.on('channel', (event, data) => { ... });
+    severity: MEDIUM
+
+  - id: ipc004
+    name: MessageChannelMain
+    category: ipc
+    version: "14+"
+    description: Direct renderer-to-renderer communication via message ports
+    text: message port channel direct renderer communication port transfer
+    example: |
+      const { port1, port2 } = new MessageChannelMain();
+      window1.webContents.postMessage('port', null, [port1]);
+      window2.webContents.postMessage('port', null, [port2]);
+    severity: MEDIUM
+
+  - id: ipc005
+    name: contextBridge types
+    category: ipc
+    version: all
+    description: TypeScript type declarations for exposed preload API
+    text: typescript types preload api declaration interface window global
+    example: |
+      // preload.d.ts
+      declare global {
+        interface Window {
+          electronAPI: {
+            openFile: () => Promise<string | null>;
+          }
+        }
+      }
+    severity: LOW
+
+  - id: ipc006
+    name: webContents.send
+    category: ipc
+    version: all
+    description: Push events from main process to renderer
+    text: webcontents send main renderer push events notify update
+    example: "mainWindow.webContents.send('update:progress', 50);"
+    severity: MEDIUM

package/.agent/skills/cross-cutting/electron/data/native.yaml

@@ -0,0 +1,157 @@
+# Electron Native Integration Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: native
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 7
+
+patterns:
+  - id: nat001
+    name: Tray
+    category: native
+    version: all
+    description: System tray icon with context menu
+    text: system tray notification area icon menu context minimize background
+    example: |
+      import { Tray, Menu, nativeImage } from 'electron';
+
+      const icon = nativeImage.createFromPath('icon.png');
+      const tray = new Tray(icon);
+      tray.setToolTip('MyApp');
+
+      const menu = Menu.buildFromTemplate([
+        { label: 'Show', click: () => mainWindow.show() },
+        { type: 'separator' },
+        { label: 'Quit', click: () => app.quit() }
+      ]);
+      tray.setContextMenu(menu);
+    severity: MEDIUM
+    docs_url: https://www.electronjs.org/docs/latest/api/tray
+
+  - id: nat002
+    name: globalShortcut
+    category: native
+    version: all
+    description: Register global keyboard shortcuts
+    text: global shortcut keyboard hotkey system wide register accelerator
+    example: |
+      import { globalShortcut, app } from 'electron';
+
+      app.whenReady().then(() => {
+        globalShortcut.register('CommandOrControl+Shift+X', () => {
+          mainWindow.isVisible() ? mainWindow.hide() : mainWindow.show();
+        });
+      });
+
+      app.on('will-quit', () => globalShortcut.unregisterAll());
+    severity: MEDIUM
+    docs_url: https://www.electronjs.org/docs/latest/api/global-shortcut
+
+  - id: nat003
+    name: powerMonitor
+    category: native
+    version: all
+    description: Monitor system power state changes
+    text: power monitor suspend resume battery ac idle sleep wake
+    example: |
+      import { powerMonitor } from 'electron';
+
+      powerMonitor.on('suspend', () => {
+        console.log('System suspended - saving state');
+      });
+
+      powerMonitor.on('resume', () => {
+        console.log('System resumed - syncing data');
+      });
+
+      powerMonitor.on('on-battery', () => {
+        // Reduce background tasks
+      });
+    severity: MEDIUM
+    docs_url: https://www.electronjs.org/docs/latest/api/power-monitor
+
+  - id: nat004
+    name: Notification
+    category: native
+    version: all
+    description: Native desktop notifications
+    text: native notification desktop alert toast action button click
+    example: |
+      import { Notification } from 'electron';
+
+      if (Notification.isSupported()) {
+        new Notification({
+          title: 'Update Available',
+          body: 'A new version is ready to install',
+          icon: path.join(__dirname, 'icon.png')
+        }).show();
+      }
+    severity: LOW
+    docs_url: https://www.electronjs.org/docs/latest/api/notification
+
+  - id: nat005
+    name: desktopCapturer
+    category: native
+    version: all
+    description: Capture audio/video from desktop sources
+    text: desktop capturer screen capture video audio source share recording
+    example: |
+      import { desktopCapturer } from 'electron';
+
+      const sources = await desktopCapturer.getSources({
+        types: ['window', 'screen'],
+        thumbnailSize: { width: 320, height: 180 }
+      });
+
+      for (const source of sources) {
+        if (source.name === 'Electron') {
+          // Use source.id with getUserMedia
+        }
+      }
+    severity: MEDIUM
+    docs_url: https://www.electronjs.org/docs/latest/api/desktop-capturer
+
+  - id: nat006
+    name: protocol handler
+    category: native
+    version: all
+    description: Register custom URL protocol for deep linking
+    text: protocol handler custom url scheme deep link open with
+    example: |
+      import { app } from 'electron';
+
+      // Register protocol
+      app.setAsDefaultProtocolClient('myapp');
+
+      // Handle URL on macOS
+      app.on('open-url', (event, url) => {
+        event.preventDefault();
+        handleDeepLink(url); // myapp://action?param=value
+      });
+    severity: MEDIUM
+
+  - id: nat007
+    name: single instance
+    category: native
+    version: all
+    description: Ensure only one instance of app runs
+    text: single instance lock second instance focus prevent duplicate
+    example: |
+      const gotTheLock = app.requestSingleInstanceLock();
+
+      if (!gotTheLock) {
+        app.quit();
+      } else {
+        app.on('second-instance', (event, argv) => {
+          // Focus existing window
+          if (mainWindow) {
+            if (mainWindow.isMinimized()) mainWindow.restore();
+            mainWindow.focus();
+          }
+        });
+      }
+    severity: HIGH

package/.agent/skills/cross-cutting/electron/data/security.yaml

@@ -0,0 +1,89 @@
+# Electron Security Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: security
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 8
+
+patterns:
+  - id: sec001
+    name: contextBridge
+    category: security
+    version: "12+"
+    description: Safe API exposure from preload to renderer via isolated world
+    text: context bridge expose ipc renderer preload safe api isolated world
+    example: "contextBridge.exposeInMainWorld('api', { ... })"
+    severity: CRITICAL
+    docs_url: https://www.electronjs.org/docs/latest/api/context-bridge
+
+  - id: sec002
+    name: contextIsolation
+    category: security
+    version: "12+"
+    description: Isolate preload scripts from renderer's JavaScript context
+    text: context isolation sandbox security node separate worlds renderer
+    example: "webPreferences: { contextIsolation: true }"
+    severity: CRITICAL
+    default: true
+
+  - id: sec003
+    name: preload
+    category: security
+    version: all
+    description: Preload scripts run before renderer with limited Node.js access
+    text: preload script context isolation node integration safe bridge
+    example: "preload: path.join(__dirname, 'preload.js')"
+    severity: CRITICAL
+
+  - id: sec004
+    name: executeInMainWorld
+    category: security
+    version: "35+"
+    description: Safe cross-world code execution (experimental in Electron 35)
+    text: execute main world experimental cross boundary safe injection
+    example: "contextBridge.executeInMainWorld(() => { ... })"
+    severity: MEDIUM
+    experimental: true
+
+  - id: sec005
+    name: Content-Security-Policy
+    category: security
+    version: all
+    description: CSP headers to prevent XSS and code injection attacks
+    text: content security policy csp header strict xss protection script src
+    example: "Content-Security-Policy: default-src 'self'; script-src 'self'"
+    severity: HIGH
+
+  - id: sec006
+    name: sandbox
+    category: security
+    version: "20+"
+    description: Process sandboxing for renderer processes
+    text: sandbox process isolation security chromium renderer restrict
+    example: "webPreferences: { sandbox: true }"
+    severity: HIGH
+    default: true
+
+  - id: sec007
+    name: nodeIntegration
+    category: security
+    version: all
+    description: Disable Node.js integration in renderer (MUST be false)
+    text: node integration disable security renderer process require
+    example: "webPreferences: { nodeIntegration: false }"
+    severity: CRITICAL
+    default: false
+
+  - id: sec008
+    name: fuses
+    category: security
+    version: "27+"
+    description: Compile-time security flags for hardening Electron apps
+    text: fuses compile time security flags hardening electron toggle
+    example: "npx @electron/fuses read/write <app>"
+    severity: MEDIUM
+    docs_url: https://www.electronjs.org/docs/latest/tutorial/fuses

package/.agent/skills/cross-cutting/electron/data/storage.yaml

@@ -0,0 +1,100 @@
+# Electron Storage Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: storage
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 5
+
+patterns:
+  - id: stor001
+    name: better-sqlite3
+    category: storage
+    version: all
+    description: Fast, synchronous SQLite3 bindings for Electron
+    text: better sqlite3 database sql local embedded wal sync fast
+    example: |
+      import Database from 'better-sqlite3';
+      import { app } from 'electron';
+      import path from 'path';
+
+      const dbPath = path.join(app.getPath('userData'), 'app.db');
+      const db = new Database(dbPath);
+      db.pragma('journal_mode = WAL');
+
+      const stmt = db.prepare('SELECT * FROM users WHERE id = ?');
+      const user = stmt.get(userId);
+    severity: HIGH
+    recommended: true
+    docs_url: https://github.com/WiseLibs/better-sqlite3
+
+  - id: stor002
+    name: electron-store
+    category: storage
+    version: all
+    description: Simple key-value storage with JSON persistence
+    text: electron store settings config json persist preferences key value
+    example: |
+      import Store from 'electron-store';
+
+      const store = new Store({
+        defaults: {
+          theme: 'system',
+          recentFiles: []
+        }
+      });
+
+      store.set('theme', 'dark');
+      const theme = store.get('theme');
+    severity: MEDIUM
+    docs_url: https://github.com/sindresorhus/electron-store
+
+  - id: stor003
+    name: safeStorage
+    category: storage
+    version: "15+"
+    description: Encrypt sensitive data using OS keychain/credential manager
+    text: safe storage encrypt decrypt sensitive credential keychain secure
+    example: |
+      import { safeStorage } from 'electron';
+
+      if (safeStorage.isEncryptionAvailable()) {
+        const encrypted = safeStorage.encryptString('my-secret');
+        // Store encrypted buffer
+        
+        const decrypted = safeStorage.decryptString(encrypted);
+      }
+    severity: HIGH
+    docs_url: https://www.electronjs.org/docs/latest/api/safe-storage
+
+  - id: stor004
+    name: userData path
+    category: storage
+    version: all
+    description: Platform-specific user data directory for app storage
+    text: user data path persistent storage app directory platform config
+    example: |
+      import { app } from 'electron';
+
+      // Windows: %APPDATA%/YourApp
+      // macOS: ~/Library/Application Support/YourApp
+      // Linux: ~/.config/YourApp
+      const userDataPath = app.getPath('userData');
+    severity: MEDIUM
+
+  - id: stor005
+    name: SQLCipher
+    category: storage
+    version: all
+    description: Encrypted SQLite for sensitive local data
+    text: sqlcipher encrypted database sqlite security sensitive data
+    example: |
+      // Use @journeyapps/sqlcipher or sql.js with encryption
+      import Database from '@journeyapps/sqlcipher';
+
+      const db = new Database(dbPath);
+      db.key(encryptionKey);
+    severity: HIGH