@nockdev/awf 6.2.0

package/.agent/skills/cross-cutting/electron/data/testing.yaml

@@ -0,0 +1,103 @@
+# Electron Testing Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: testing
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 4
+
+patterns:
+  - id: test001
+    name: Playwright Electron
+    category: testing
+    version: all
+    description: E2E testing with Playwright's Electron support
+    text: playwright electron e2e test automation browser window launch
+    example: |
+      // e2e/app.spec.ts
+      import { test, expect, _electron as electron } from '@playwright/test';
+
+      test('app launches', async () => {
+        const app = await electron.launch({ args: ['./dist/main.js'] });
+        const window = await app.firstWindow();
+        
+        await expect(window).toHaveTitle(/MyApp/);
+        
+        // Test IPC
+        const result = await window.evaluate(() => {
+          return window.electronAPI.getVersion();
+        });
+        expect(result).toMatch(/\d+\.\d+\.\d+/);
+        
+        await app.close();
+      });
+    severity: HIGH
+    recommended: true
+    docs_url: https://playwright.dev/docs/api/class-electron
+
+  - id: test002
+    name: Vitest Electron
+    category: testing
+    version: all
+    description: Unit testing with Vitest for main/preload logic
+    text: vitest electron unit test mock module fast esm
+    example: |
+      // vitest.config.ts
+      import { defineConfig } from 'vitest/config';
+
+      export default defineConfig({
+        test: {
+          environment: 'node',
+          include: ['src/**/*.test.ts'],
+          coverage: { provider: 'v8' }
+        }
+      });
+
+      // src/main/__tests__/ipc.test.ts
+      import { describe, it, expect, vi } from 'vitest';
+
+      describe('IPC handlers', () => {
+        it('validates input', () => {
+          expect(validatePath('../etc/passwd')).toBe(false);
+        });
+      });
+    severity: HIGH
+    docs_url: https://vitest.dev
+
+  - id: test003
+    name: WebDriver
+    category: testing
+    version: all
+    description: Selenium-style E2E testing with WebDriverIO
+    text: webdriver selenium chromedriver e2e automated browser driver
+    example: |
+      // wdio.conf.js
+      module.exports = {
+        services: ['electron'],
+        capabilities: [{
+          browserName: 'electron',
+          'wdio:electronServiceOptions': {
+            appBinaryPath: './dist/MyApp.exe'
+          }
+        }]
+      };
+    severity: MEDIUM
+    docs_url: https://webdriver.io/docs/electron
+
+  - id: test004
+    name: electron-mocha
+    category: testing
+    version: all
+    description: Run Mocha tests in Electron environment
+    text: electron mocha test runner node browser environment
+    example: |
+      # package.json
+      {
+        "scripts": {
+          "test": "electron-mocha --renderer test/**/*.spec.js"
+        }
+      }
+    severity: LOW

package/.agent/skills/cross-cutting/electron/data/updates.yaml

@@ -0,0 +1,99 @@
+# Electron Auto Update Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: updates
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 5
+
+patterns:
+  - id: upd001
+    name: electron-updater
+    category: updates
+    version: all
+    description: Auto-update library with GitHub, S3, and generic server support
+    text: electron updater auto update check install download notify
+    example: |
+      import { autoUpdater } from 'electron-updater';
+
+      autoUpdater.checkForUpdatesAndNotify();
+      autoUpdater.on('update-downloaded', () => {
+        autoUpdater.quitAndInstall();
+      });
+    severity: HIGH
+    recommended: true
+    docs_url: https://www.electron.build/auto-update
+
+  - id: upd002
+    name: differential update
+    category: updates
+    version: all
+    description: Download only changed chunks to reduce bandwidth
+    text: differential update delta patch bandwidth efficient blockmap
+    example: |
+      // electron-builder.json
+      {
+        "publish": { "provider": "github" },
+        "differentialDownload": true
+      }
+    severity: MEDIUM
+
+  - id: upd003
+    name: code signing
+    category: updates
+    version: all
+    description: Sign app for distribution and auto-update verification
+    text: code signing certificate mac windows notarize codesign verify
+    example: |
+      # Environment variables for CI
+      CSC_LINK=path/to/certificate.p12
+      CSC_KEY_PASSWORD=your-password
+
+      # electron-builder.json
+      {
+        "win": {
+          "signingHashAlgorithms": ["sha256"],
+          "sign": "./scripts/sign.js"
+        }
+      }
+    severity: CRITICAL
+    platform: all
+
+  - id: upd004
+    name: notarization
+    category: updates
+    version: all
+    description: Apple notarization for macOS distribution
+    text: notarization macos apple notarize hardened runtime gatekeeper
+    example: |
+      // electron-builder.json
+      {
+        "mac": {
+          "hardenedRuntime": true,
+          "gatekeeperAssess": false,
+          "notarize": {
+            "teamId": "YOUR_TEAM_ID"
+          }
+        }
+      }
+    severity: CRITICAL
+    platform: macos
+
+  - id: upd005
+    name: update progress
+    category: updates
+    version: all
+    description: Track and display update download progress
+    text: update progress download percentage notify ui display
+    example: |
+      autoUpdater.on('download-progress', (progress) => {
+        mainWindow.webContents.send('update:progress', {
+          percent: progress.percent,
+          transferred: progress.transferred,
+          total: progress.total
+        });
+      });
+    severity: LOW

package/.agent/skills/cross-cutting/electron/data/window.yaml

@@ -0,0 +1,83 @@
+# Electron Window Management Patterns - HSA Electron Skill
+# Version: Electron 35-40 (2025-2026)
+# Updated: 2026-02-05
+
+metadata:
+  skill: electron
+  domain: window
+  version: "1.0.0"
+  updated: "2026-02-05"
+  patterns_count: 6
+
+patterns:
+  - id: win001
+    name: BrowserWindow
+    category: window
+    version: all
+    description: Create and manage application windows
+    text: browser window create main process options config width height
+    example: |
+      const mainWindow = new BrowserWindow({
+        width: 1200,
+        height: 800,
+        webPreferences: { preload, contextIsolation: true }
+      });
+    severity: HIGH
+
+  - id: win002
+    name: roundedCorners
+    category: window
+    version: "35+"
+    description: Windows 11 rounded corners UI customization
+    text: rounded corners windows 11 ui customization style modern
+    example: "new BrowserWindow({ roundedCorners: true })"
+    severity: LOW
+    platform: windows
+
+  - id: win003
+    name: BrowserView
+    category: window
+    version: "5+"
+    description: Embed web content like tabs or panels within a window
+    text: browser view embed webview tab multi view panel content
+    example: |
+      const view = new BrowserView();
+      mainWindow.addBrowserView(view);
+      view.setBounds({ x: 0, y: 0, width: 800, height: 600 });
+    severity: MEDIUM
+
+  - id: win004
+    name: frameless
+    category: window
+    version: all
+    description: Custom titlebar with frameless window
+    text: frameless window custom titlebar draggable transparent border
+    example: |
+      new BrowserWindow({
+        frame: false,
+        transparent: true,
+        titleBarStyle: 'hidden'
+      });
+    severity: MEDIUM
+
+  - id: win005
+    name: alwaysOnTop
+    category: window
+    version: all
+    description: Keep window floating above other applications
+    text: always on top floating window level screen overlay
+    example: "mainWindow.setAlwaysOnTop(true, 'floating');"
+    severity: LOW
+
+  - id: win006
+    name: window state
+    category: window
+    version: all
+    description: Persist and restore window bounds across sessions
+    text: window state persist restore bounds position size session
+    example: |
+      // Use electron-store to persist window bounds
+      const bounds = store.get('windowBounds', { width: 800, height: 600 });
+      mainWindow = new BrowserWindow(bounds);
+      mainWindow.on('close', () => store.set('windowBounds', mainWindow.getBounds()));
+    severity: MEDIUM

package/.agent/skills/cross-cutting/kubernetes/META.yaml

@@ -0,0 +1,70 @@
+name: kubernetes
+version: "6.2.0"
+category: infrastructure
+tier: 3
+
+desc: "Kubernetes orchestration patterns for K8s 1.32-1.33+. Covers Gateway API, Sidecar Containers, Kueue, Pod Security."
+
+patterns:
+  total: 20
+  domains:
+    networking: 5
+    workloads: 5
+    security: 5
+    scheduling: 5
+
+hsa:
+  enabled: true
+  adapter: kubernetes_adapter.py
+
+triggers:
+  file_patterns:
+    - "*.yaml"
+    - "*.yml"
+    - "Chart.yaml"
+    - "kustomization.yaml"
+    - "values.yaml"
+  keywords:
+    # Core
+    - kubernetes
+    - k8s
+    - kubectl
+    - helm
+    - kustomize
+    # Workloads
+    - deployment
+    - statefulset
+    - daemonset
+    - job
+    - cronjob
+    # Networking
+    - service
+    - ingress
+    - gateway api
+    - gateway
+    - httproute
+    # Security
+    - pod security
+    - rbac
+    - service account
+    - network policy
+    # Scheduling
+    - node selector
+    - affinity
+    - kueue
+    - priority class
+  intents:
+    - deploy kubernetes
+    - create deployment
+    - configure ingress
+    - setup k8s
+
+related_skills:
+  - docker
+  - aws
+  - ci-cd
+  - security
+
+prevent_confusion_with:
+  - docker: "kubernetes orchestrates containers, docker builds them"
+  - aws: "kubernetes is general, aws covers EKS specifically"

package/.agent/skills/cross-cutting/kubernetes/data/networking.yaml

@@ -0,0 +1,270 @@
+# =============================================================================
+# Kubernetes Networking Patterns (Feb 2026)
+# =============================================================================
+# Gateway API v1.4+, Service Mesh, Network Policies
+
+metadata:
+  skill: kubernetes
+  domain: networking
+  version: "1.33.0"
+  updated: "2026-02-05"
+  patterns_count: 5
+
+patterns:
+  - id: k8s001
+    name: Gateway API v1.4
+    category: networking
+    version: "1.30+"
+    description: Next-generation Ingress replacement with dynamic backends
+    text: gateway api httproute grpcroute ingress replacement
+    example: |
+      # Gateway API v1.4 - Dynamic backends, x-envoy-* headers
+
+      # 1. Create Gateway
+      apiVersion: gateway.networking.k8s.io/v1
+      kind: Gateway
+      metadata:
+        name: prod-gateway
+      spec:
+        gatewayClassName: istio  # Or: nginx, envoy, cilium
+        listeners:
+          - name: http
+            port: 80
+            protocol: HTTP
+          - name: https
+            port: 443
+            protocol: HTTPS
+            tls:
+              mode: Terminate
+              certificateRefs:
+                - name: prod-tls-cert
+
+      # 2. Create HTTPRoute
+      apiVersion: gateway.networking.k8s.io/v1
+      kind: HTTPRoute
+      metadata:
+        name: api-route
+      spec:
+        parentRefs:
+          - name: prod-gateway
+        hostnames:
+          - "api.example.com"
+        rules:
+          - matches:
+              - path:
+                  type: PathPrefix
+                  value: /v1
+            backendRefs:
+              - name: api-v1
+                port: 80
+                weight: 90
+              - name: api-v2
+                port: 80
+                weight: 10  # Canary
+
+      # Benefits over Ingress:
+      # - Role-oriented (infra vs app teams)
+      # - Native traffic splitting
+      # - Cross-namespace routing
+      # - Protocol-agnostic (HTTP, gRPC, TCP)
+    severity: CRITICAL
+    docs_url: https://gateway-api.sigs.k8s.io/
+
+  - id: k8s002
+    name: GRPCRoute
+    category: networking
+    version: "1.30+"
+    description: Native gRPC routing in Gateway API
+    text: grpcroute grpc routing gateway api service
+    example: |
+      apiVersion: gateway.networking.k8s.io/v1
+      kind: GRPCRoute
+      metadata:
+        name: grpc-api
+      spec:
+        parentRefs:
+          - name: prod-gateway
+        hostnames:
+          - "grpc.example.com"
+        rules:
+          - matches:
+              - method:
+                  service: myapp.v1.UserService
+                  method: GetUser
+            backendRefs:
+              - name: user-service
+                port: 50051
+
+          - matches:
+              - method:
+                  service: myapp.v1.OrderService
+            backendRefs:
+              - name: order-service
+                port: 50051
+            filters:
+              - type: RequestHeaderModifier
+                requestHeaderModifier:
+                  add:
+                    - name: x-request-id
+                      value: grpc-route
+
+      # Enables:
+      # - Method-level routing
+      # - Header manipulation
+      # - Load balancing per-method
+    severity: HIGH
+    docs_url: https://gateway-api.sigs.k8s.io/guides/grpc-routing/
+
+  - id: k8s003
+    name: Network Policies
+    category: networking
+    version: "1.0+"
+    description: Micro-segmentation with pod-level firewall rules
+    text: network policy firewall security isolation namespace
+    example: |
+      # Default deny all ingress
+      apiVersion: networking.k8s.io/v1
+      kind: NetworkPolicy
+      metadata:
+        name: default-deny-ingress
+        namespace: production
+      spec:
+        podSelector: {}
+        policyTypes:
+          - Ingress
+
+      # Allow specific traffic
+      apiVersion: networking.k8s.io/v1
+      kind: NetworkPolicy
+      metadata:
+        name: api-policy
+        namespace: production
+      spec:
+        podSelector:
+          matchLabels:
+            app: api
+        policyTypes:
+          - Ingress
+          - Egress
+        ingress:
+          - from:
+              - namespaceSelector:
+                  matchLabels:
+                    name: frontend
+              - podSelector:
+                  matchLabels:
+                    app: nginx
+            ports:
+              - protocol: TCP
+                port: 8080
+        egress:
+          - to:
+              - podSelector:
+                  matchLabels:
+                    app: database
+            ports:
+              - protocol: TCP
+                port: 5432
+
+      # Requires CNI with NetworkPolicy support:
+      # Calico, Cilium, Weave, etc.
+    severity: CRITICAL
+    docs_url: https://kubernetes.io/docs/concepts/services-networking/network-policies/
+
+  - id: k8s004
+    name: Service Mesh (Istio/Linkerd)
+    category: networking
+    version: "all"
+    description: mTLS, observability, and traffic management
+    text: service mesh istio linkerd mtls observability sidecar
+    example: |
+      # Istio: Enable sidecar injection
+      kubectl label namespace production istio-injection=enabled
+
+      # Virtual Service for traffic splitting
+      apiVersion: networking.istio.io/v1beta1
+      kind: VirtualService
+      metadata:
+        name: reviews
+      spec:
+        hosts:
+          - reviews
+        http:
+          - match:
+              - headers:
+                  end-user:
+                    exact: canary-tester
+            route:
+              - destination:
+                  host: reviews
+                  subset: v2
+          - route:
+              - destination:
+                  host: reviews
+                  subset: v1
+                weight: 90
+              - destination:
+                  host: reviews
+                  subset: v2
+                weight: 10
+
+      # mTLS enforcement
+      apiVersion: security.istio.io/v1beta1
+      kind: PeerAuthentication
+      metadata:
+        name: default
+        namespace: production
+      spec:
+        mtls:
+          mode: STRICT
+    severity: HIGH
+    docs_url: https://istio.io/latest/docs/
+
+  - id: k8s005
+    name: Headless Services
+    category: networking
+    version: "1.0+"
+    description: Direct pod DNS for StatefulSets and database clusters
+    text: headless service statefulset dns pod discovery
+    example: |
+      # Headless service (no clusterIP)
+      apiVersion: v1
+      kind: Service
+      metadata:
+        name: database
+      spec:
+        clusterIP: None  # Headless!
+        selector:
+          app: postgres
+        ports:
+          - port: 5432
+
+      # StatefulSet with headless service
+      apiVersion: apps/v1
+      kind: StatefulSet
+      metadata:
+        name: postgres
+      spec:
+        serviceName: database  # Links to headless service
+        replicas: 3
+        selector:
+          matchLabels:
+            app: postgres
+        template:
+          metadata:
+            labels:
+              app: postgres
+          spec:
+            containers:
+              - name: postgres
+                image: postgres:16
+
+      # DNS records created:
+      # postgres-0.database.namespace.svc.cluster.local
+      # postgres-1.database.namespace.svc.cluster.local
+      # postgres-2.database.namespace.svc.cluster.local
+
+      # Connect to specific pod:
+      # psql -h postgres-0.database -U admin
+    severity: MEDIUM
+    docs_url: https://kubernetes.io/docs/concepts/services-networking/service/#headless-services