@nockdev/awf 6.2.5 → 6.2.7

package/.agent/skills/_categories.yaml

@@ -131,12 +131,12 @@ categories:
       - bun
       - audit-pro
 
-      # P0 Skills (v6.2.5)
+      # P0 Skills (v6.2.7)
       - tdd-workflow
       - accessibility
       - seo
 
-      # P1 Skills (v6.2.5)
+      # P1 Skills (v6.2.7)
       - microservices
       - monorepo
 

package/.agent/skills/ai-ml/rag-patterns/META.yaml

@@ -7,6 +7,8 @@ version: "1.0.0"
 category: ai-ml
 priority: 3
 
+desc: "RAG patterns — chunking, embeddings, vector DBs, retrieval optimization, evaluation"
+
 description: |
   Retrieval-Augmented Generation patterns: chunking strategies,
   embedding models, vector databases, retrieval optimization, evaluation.

package/.agent/skills/core/api-design/META.yaml

@@ -1,5 +1,5 @@
 name: api-design
-version: "6.2.5"
+version: "6.2.7"
 display: API Design Patterns
 category: core
 tier: 1

package/.agent/skills/core/authentication/META.yaml

@@ -1,5 +1,5 @@
 name: authentication
-version: "6.2.5"
+version: "6.2.7"
 display: Authentication Patterns
 category: core
 tier: 1

package/.agent/skills/core/error-handling/META.yaml

@@ -1,5 +1,5 @@
 name: error-handling
-version: "6.2.5"
+version: "6.2.7"
 display: Error Handling Patterns
 category: core
 tier: 1

package/.agent/skills/core/logging/META.yaml

@@ -1,5 +1,5 @@
 name: logging
-version: "6.2.5"
+version: "6.2.7"
 display: Logging Best Practices
 category: core
 tier: 1

package/.agent/skills/core/observability/META.yaml

@@ -1,5 +1,5 @@
 name: observability
-version: "6.2.5"
+version: "6.2.7"
 display: Observability Patterns
 category: core
 tier: 1

package/.agent/skills/core/security/META.yaml

@@ -1,5 +1,5 @@
 name: security
-version: "6.2.5"
+version: "6.2.7"
 display: Security Patterns
 category: core
 tier: 1

package/.agent/skills/core/security/SKILL.md

@@ -2,7 +2,7 @@
 name: security
 detect: ["always"]
 priority: 0
-version: "6.2.5"
+version: "6.2.7"
 ---
 
 # Security Patterns (Enhanced 2026)

package/.agent/skills/cross-cutting/accessibility/META.yaml

@@ -1,5 +1,5 @@
 name: accessibility
-version: "6.2.5"
+version: "6.2.7"
 display: Accessibility (WCAG 2.2)
 category: cross-cutting
 tier: 1

package/.agent/skills/cross-cutting/audit-pro/META.yaml

@@ -1,5 +1,5 @@
 name: audit-pro
-version: "6.2.5"
+version: "6.2.7"
 display: Audit Pro System
 category: cross-cutting
 tier: 1
@@ -32,6 +32,14 @@ triggers:
       ai safety review,
     ]
 
+caps:
+  - Security audit (OWASP Top 10, CWE Top 25)
+  - Architecture review (ISO 25010)
+  - Performance profiling
+  - Code quality assessment
+  - DevOps readiness check
+  - Accessibility audit (WCAG 2.2)
+
 data_files:
   - data/checklists.yaml
   - data/scoring.yaml

package/.agent/skills/cross-cutting/audit-pro/SKILL.md

@@ -2,6 +2,25 @@
 
 12-Expert Panel audit system with 222 checkpoints. Conditional activation auto-detects project type (UI, DB, regulated, AI, cloud).
 
+## Decision Tree
+
+```
+/ap → Discovery
+  ├─ Stack detection (auto)
+  │   ├─ Frontend detected → Activate UX/A11y Expert
+  │   ├─ Database files → Activate Database Expert
+  │   ├─ Cloud config → Activate Cloud Expert
+  │   ├─ API routes → Activate API Expert
+  │   ├─ ML models → Activate AI Safety Expert
+  │   ├─ Regulated industry → Activate Compliance Expert
+  │   └─ Mobile project → Activate Mobile Expert
+  ├─ Complexity estimation
+  │   ├─ Small (<50 files) → Express audit (~15 min)
+  │   ├─ Medium (50-200) → Standard audit (~30 min)
+  │   └─ Large (200+) → Deep audit (~60 min)
+  └─ Expert panel assignment (5 core + conditional)
+```
+
 ## Standards
 
 - ISO 25010 (quality model)
@@ -13,7 +32,7 @@
 
 ## Expert Panel
 
-### Core Experts (5 - always active)
+### Core Experts (5 — always active)
 
 | Expert       | Domain                         | Checkpoints |
 | ------------ | ------------------------------ | ----------- |
@@ -23,7 +42,7 @@
 | Quality      | Code smells, testing, docs     | ~35         |
 | DevOps       | CI/CD, deployment, monitoring  | ~25         |
 
-### Conditional Experts (7 - auto-activated)
+### Conditional Experts (7 — auto-activated)
 
 | Expert     | Trigger                 | Domain                        |
 | ---------- | ----------------------- | ----------------------------- |
@@ -43,9 +62,18 @@
 
 1. **Discovery**: Detect stack, count files, estimate complexity
 2. **Expert Assignment**: Activate relevant experts based on project type
-3. **Parallel Audit**: Each expert evaluates independently
-4. **Consensus**: Cross-reference findings, resolve conflicts
-5. **Report**: Production readiness score, prioritized findings
+3. **Parallel Audit**: Each expert evaluates independently with evidence
+4. **Consensus**: Cross-reference findings, resolve conflicts, prioritize
+5. **Report**: Production readiness score, findings by severity (P0-P3)
+
+## Severity Levels
+
+| Level | Name     | Description                | Action Required |
+| ----- | -------- | -------------------------- | --------------- |
+| P0    | Critical | Security breach, data loss | Block deploy    |
+| P1    | High     | Significant vulnerability  | Fix before prod |
+| P2    | Medium   | Quality/performance issue  | Fix in sprint   |
+| P3    | Low      | Tech debt, style issues    | Backlog         |
 
 ## Scoring
 
@@ -55,6 +83,34 @@
 - **D (40-59)**: Major issues, not production ready
 - **F (0-39)**: Critical issues, requires redesign
 
+## Report Format
+
+```markdown
+# 🔬 Audit Pro Report — {Project Name}
+
+## Summary
+
+- Score: **B (82/100)**
+- Experts: 5 core + 2 conditional
+- Findings: 3 P1, 7 P2, 12 P3
+
+## P0 Critical (0)
+
+_None found_ ✅
+
+## P1 High (3)
+
+1. [SEC-001] SQL injection in user search — `api/users.ts:45`
+2. [SEC-002] Missing rate limiting on auth endpoints
+3. [PERF-001] N+1 query in dashboard list
+
+## Recommendations
+
+1. Fix all P1 before production deployment
+2. Address P2 issues in next sprint
+3. Schedule P3 items in backlog
+```
+
 ## Data Files
 
 - `data/checklists.yaml` — Full checkpoint definitions

package/.agent/skills/cross-cutting/bun/META.yaml

@@ -1,17 +1,12 @@
 name: bun
-version: "6.2.5"
+version: "6.2.7"
 category: runtime
 tier: 3
 
 desc: "Bun 1.3+ runtime development patterns. Covers all-in-one JS runtime, bundler, test runner, package manager."
 
-patterns:
-  total: 24
-  domains:
-    runtime: 10
-    database: 5
-    tooling: 9
-
+triggers:
+  file_patterns:
     - "bun.lockb"
     - "bunfig.toml"
   keywords:
@@ -42,6 +37,20 @@ patterns:
     - migrate to bun
     - bun database
 
+caps:
+  - Bun runtime & bundler
+  - Bun.serve HTTP server
+  - Bun.sql native database
+  - Bun test runner
+  - Package management
+
+patterns:
+  total: 24
+  domains:
+    runtime: 10
+    database: 5
+    tooling: 9
+
 related_skills:
   - typescript
   - nodejs

package/.agent/skills/cross-cutting/bun/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bun
 detect: ["bun.lockb", "bunfig.toml", "bun.lock"]
-version: "6.2.5"
+version: "6.2.7"
 category: runtime
 tier: 2
 ---

package/.agent/skills/cross-cutting/coding-rules/META.yaml

@@ -1,5 +1,5 @@
 name: coding-rules
-version: "6.2.5"
+version: "6.2.7"
 display: Awesome Coding Rules
 category: cross-cutting
 tier: 1

package/.agent/skills/cross-cutting/database/META.yaml

@@ -1,5 +1,5 @@
 name: database
-version: "6.2.5"
+version: "6.2.7"
 display: Database Patterns
 category: infrastructure
 tier: 1
@@ -7,6 +7,47 @@ priority: 1
 
 desc: "SQL/NoSQL database patterns - PostgreSQL 17/18, MySQL, MongoDB, Redis. Covers ORMs (Prisma, Drizzle, TypeORM), query optimization, migrations."
 
+trigger_desc: |
+  Activate when user works with databases, SQL queries, ORM setup (Prisma,
+  Drizzle, TypeORM), migrations, connection pooling, indexing, or NoSQL
+  (MongoDB, Redis). Also for database schema design, query optimization,
+  and choosing between SQL vs NoSQL solutions.
+
+compatibility: "PostgreSQL >= 15, Node.js >= 18 (for ORMs)"
+
+triggers:
+  file_patterns:
+    - "*.sql"
+    - "prisma/schema.prisma"
+    - "drizzle.config.*"
+    - "knexfile.*"
+    - "typeorm.config.*"
+    - "migrations/"
+    - "docker-compose*.yml"
+  keywords:
+    - database
+    - sql
+    - nosql
+    - postgresql
+    - mysql
+    - mongodb
+    - redis
+    - prisma
+    - drizzle
+    - typeorm
+    - migration
+    - orm
+    - query optimization
+    - connection pool
+    - indexing
+  intents:
+    - "setup database"
+    - "create migration"
+    - "optimize queries"
+    - "choose ORM"
+    - "database design"
+    - "connection pooling"
+
 related_skills:
   - typescript
   - python