@openweave/weave-skills 1.0.0

package/dist/skills/commit-composer.js

@@ -0,0 +1,223 @@
+/**
+ * Skill: commit-composer
+ *
+ * Analyses `git diff --staged` and proposes a Conventional Commits message.
+ * No LLM required — pure pattern-matching on diff hunks.
+ *
+ * Conventional format: <type>(<scope>): <description>
+ *   [optional body]
+ *   [optional footer: BREAKING CHANGE: ...]
+ *
+ * Types detected: feat, fix, docs, style, refactor, test, chore, perf, ci, build
+ *
+ * Input (via SkillContext.graph):
+ *   - `ctx.graph['diff']`       — staged diff string (injectable for tests)
+ *   - `ctx.graph['stagedFiles']` — string[] (overrides ctx.git?.stagedFiles)
+ *
+ * Output data:
+ *   - CommitComposerResult
+ */
+import { execSync } from 'node:child_process';
+export function parseDiffStats(diff) {
+    const additions = (diff.match(/^\+[^+]/gm) ?? []).length;
+    const deletions = (diff.match(/^-[^-]/gm) ?? []).length;
+    const filesChanged = [];
+    for (const m of diff.matchAll(/^(?:---|\+\+\+) (?:a\/|b\/)?(.+)$/gm)) {
+        const f = m[1].trim();
+        if (f !== '/dev/null' && !filesChanged.includes(f)) {
+            filesChanged.push(f);
+        }
+    }
+    return { additions, deletions, filesChanged };
+}
+export function detectScope(files) {
+    if (files.length === 0)
+        return null;
+    // pnpm workspace package scope
+    const pkgMatch = files[0].match(/^(?:packages|apps)\/([^/]+)\//);
+    if (pkgMatch) {
+        const pkg = pkgMatch[1];
+        // strip weave- prefix for brevity
+        return pkg.replace(/^weave-/, '');
+    }
+    // top-level directory scope
+    const topDir = files[0].split('/')[0];
+    if (topDir && topDir !== files[0])
+        return topDir;
+    return null;
+}
+const TYPE_RULES = [
+    {
+        type: 'test',
+        patterns: [/\.test\.[tj]sx?$/, /\.spec\.[tj]sx?$/, /__tests__\//],
+    },
+    {
+        type: 'docs',
+        patterns: [/\.md$/, /docs\//],
+    },
+    {
+        type: 'ci',
+        patterns: [/\.github\//, /\.gitlab-ci\.yml/, /ci\//],
+    },
+    {
+        type: 'build',
+        patterns: [/tsconfig/, /package\.json$/, /vite\.config/, /webpack/, /rollup/],
+    },
+    {
+        type: 'style',
+        patterns: [/\.css$/, /\.scss$/, /\.less$/, /\.svg$/, /\.png$/],
+    },
+    {
+        type: 'chore',
+        patterns: [/\.gitignore$/, /\.npmrc$/, /\.env/, /pnpm-lock/],
+    },
+];
+export function detectType(files, diff) {
+    // If all files match a specific type, use it
+    for (const rule of TYPE_RULES) {
+        if (files.length > 0 && files.every((f) => rule.patterns.some((p) => p.test(f)))) {
+            return rule.type;
+        }
+    }
+    // Check diff content for semantic clues
+    const addedLines = diff
+        .split('\n')
+        .filter((l) => l.startsWith('+') && !l.startsWith('+++'))
+        .join('\n');
+    const isFeature = /\bexport\s+(function|class|const|interface|type)\b/.test(addedLines) ||
+        /\bnew\s+\w+\s*\(/.test(addedLines);
+    const isFix = /\b(fix|bug|error|exception|catch|throw)\b/i.test(addedLines) ||
+        /\b(null|undefined)\s*\?\?/.test(addedLines);
+    const isRefactor = /\bextract|rename|move|reorganize|simplify\b/i.test(addedLines);
+    const isPerf = /\bcache|memoize|debounce|throttle|optimize\b/i.test(addedLines);
+    if (isPerf)
+        return 'perf';
+    if (isFix)
+        return 'fix';
+    if (isRefactor)
+        return 'refactor';
+    if (isFeature)
+        return 'feat';
+    return 'chore';
+}
+export function detectBreakingChange(diff) {
+    const removedLines = diff
+        .split('\n')
+        .filter((l) => l.startsWith('-') && !l.startsWith('---'))
+        .join('\n');
+    // Removed exports = potentially breaking
+    if (/^-\s*export\s+(function|class|const|interface|type)\s+\w+/m.test(removedLines)) {
+        return { breaking: true, note: 'Removed public export — downstream consumers may break' };
+    }
+    // Removed function parameters
+    if (/^-.*function\s+\w+\s*\([^)]+\)/m.test(removedLines)) {
+        return { breaking: true, note: 'Changed function signature' };
+    }
+    // BREAKING CHANGE in commit note markers already in diff
+    if (/BREAKING[\s_-]CHANGE/i.test(diff)) {
+        return { breaking: true, note: 'Breaking change marked in source' };
+    }
+    return { breaking: false, note: null };
+}
+export function buildDescription(type, _scope, _stats, files) {
+    const mainFile = files[0] ?? 'codebase';
+    const base = mainFile.replace(/^.*\//, '').replace(/\.[tj]sx?$/, '');
+    const descriptions = {
+        feat: `add ${base}`,
+        fix: `resolve issue in ${base}`,
+        docs: `update documentation`,
+        style: `apply style changes`,
+        refactor: `refactor ${base}`,
+        test: `add tests for ${base}`,
+        chore: `update project config`,
+        perf: `improve performance of ${base}`,
+        ci: `update CI/CD configuration`,
+        build: `update build configuration`,
+    };
+    return descriptions[type];
+}
+// ---------------------------------------------------------------------------
+// Skill
+// ---------------------------------------------------------------------------
+export const commitComposerSkill = {
+    id: 'commit-composer',
+    name: 'Commit Message Composer',
+    description: 'Analyses staged git diff and proposes a Conventional Commits message with type, scope and description.',
+    version: '1.0.0',
+    enabled: true,
+    tags: ['git', 'dx', 'commit'],
+    async execute(ctx) {
+        const graph = (ctx.graph ?? {});
+        // --- Get diff ---
+        let diff = '';
+        if (typeof graph['diff'] === 'string') {
+            diff = graph['diff'];
+        }
+        else {
+            try {
+                diff = execSync('git diff --staged', {
+                    cwd: ctx.projectRoot,
+                    encoding: 'utf8',
+                    timeout: 10_000,
+                });
+            }
+            catch {
+                return {
+                    success: false,
+                    output: 'Failed to read staged diff — is this a git repository with staged changes?',
+                    error: 'git diff --staged failed',
+                };
+            }
+        }
+        if (!diff.trim()) {
+            return {
+                success: false,
+                output: 'No staged changes found. Stage files with `git add` before composing a commit.',
+                error: 'empty diff',
+            };
+        }
+        const stats = parseDiffStats(diff);
+        // --- File list ---
+        const stagedFiles = Array.isArray(graph['stagedFiles'])
+            ? graph['stagedFiles']
+            : (ctx.git?.stagedFiles ?? stats.filesChanged);
+        const type = detectType(stagedFiles, diff);
+        const scope = detectScope(stagedFiles);
+        const description = buildDescription(type, scope, stats, stagedFiles);
+        const { breaking, note } = detectBreakingChange(diff);
+        // Build message
+        const header = scope
+            ? `${type}(${scope}): ${description}`
+            : `${type}: ${description}`;
+        const bodyLines = [];
+        if (stats.filesChanged.length > 1) {
+            bodyLines.push(`Changed ${stats.filesChanged.length} files (+${stats.additions}/-${stats.deletions} lines)`);
+        }
+        if (breaking && note) {
+            bodyLines.push('', `BREAKING CHANGE: ${note}`);
+        }
+        const suggestedMessage = bodyLines.length > 0
+            ? `${header}\n\n${bodyLines.join('\n')}`
+            : header;
+        const result = {
+            suggestedMessage,
+            type,
+            scope,
+            description,
+            breakingChange: breaking,
+            breakingChangeNote: note,
+            changedFiles: stagedFiles,
+            stats: {
+                additions: stats.additions,
+                deletions: stats.deletions,
+                filesChanged: stats.filesChanged.length,
+            },
+        };
+        return {
+            success: true,
+            output: `Suggested commit: "${header}"${breaking ? ' ⚠️  BREAKING CHANGE' : ''}`,
+            data: result,
+        };
+    },
+};
+//# sourceMappingURL=commit-composer.js.map

package/dist/skills/commit-composer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-composer.js","sourceRoot":"","sources":["../../src/skills/commit-composer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAwC9C,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,kCAAkC;QAClC,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,4BAA4B;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAEjD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,MAAM,UAAU,GAAe;IAC7B;QACE,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,CAAC;KAClE;IACD;QACE,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,CAAC,YAAY,EAAE,kBAAkB,EAAE,MAAM,CAAC;KACrD;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC;KAC9E;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC/D;IACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC;KAC7D;CACF,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,KAAe,EAAE,IAAY;IACtD,6CAA6C;IAC7C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,UAAU,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GACb,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC;QACrE,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,KAAK,GACT,4CAA4C,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7D,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,8CAA8C,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,+CAA+C,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEhF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,SAAS;QAAE,OAAO,MAAM,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,YAAY,GAAG,IAAI;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,yCAAyC;IACzC,IAAI,4DAA4D,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,wDAAwD,EAAE,CAAC;IAC5F,CAAC;IACD,8BAA8B;IAC9B,IAAI,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;IAChE,CAAC;IACD,yDAAyD;IACzD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAsB,EACtB,MAAqB,EACrB,MAAiB,EACjB,KAAe;IAEf,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAErE,MAAM,YAAY,GAAqC;QACrD,IAAI,EAAE,OAAO,IAAI,EAAE;QACnB,GAAG,EAAE,oBAAoB,IAAI,EAAE;QAC/B,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,YAAY,IAAI,EAAE;QAC5B,IAAI,EAAE,iBAAiB,IAAI,EAAE;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,0BAA0B,IAAI,EAAE;QACtC,EAAE,EAAE,4BAA4B;QAChC,KAAK,EAAE,4BAA4B;KACpC,CAAC;IAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAgB;IAC9C,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,wGAAwG;IAC1G,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC;IAE7B,KAAK,CAAC,OAAO,CAAC,GAAiB;QAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;QAE3D,mBAAmB;QACnB,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,mBAAmB,EAAE;oBACnC,GAAG,EAAE,GAAG,CAAC,WAAW;oBACpB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,4EAA4E;oBACpF,KAAK,EAAE,0BAA0B;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gFAAgF;gBACxF,KAAK,EAAE,YAAY;aACpB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAEnC,oBAAoB;QACpB,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACrD,CAAC,CAAE,KAAK,CAAC,aAAa,CAAc;YACpC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAEtD,gBAAgB;QAChB,MAAM,MAAM,GAAG,KAAK;YAClB,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,MAAM,WAAW,EAAE;YACrC,CAAC,CAAC,GAAG,IAAI,KAAK,WAAW,EAAE,CAAC;QAE9B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,SAAS,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,YAAY,CAAC,MAAM,YAAY,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,SAAS,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,GAAG,MAAM,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACxC,CAAC,CAAC,MAAM,CAAC;QAEX,MAAM,MAAM,GAAyB;YACnC,gBAAgB;YAChB,IAAI;YACJ,KAAK;YACL,WAAW;YACX,cAAc,EAAE,QAAQ;YACxB,kBAAkB,EAAE,IAAI;YACxB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM;aACxC;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,sBAAsB,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE;YAChF,IAAI,EAAE,MAAM;SACb,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/skills/container-advisor.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Skill: container-advisor
+ *
+ * Audits Dockerfile(s) against a best-practice checklist and produces a
+ * structured report with pass/fail per check plus remediation snippets.
+ *
+ * Checks:
+ *   1. Multi-stage build   — at least 2 FROM instructions
+ *   2. Non-root user       — USER instruction present (not root/0)
+ *   3. HEALTHCHECK         — HEALTHCHECK instruction defined
+ *   4. Pinned base image   — FROM uses a tag other than "latest" or no-tag
+ *   5. Minimal COPY scope  — no bare `COPY . .` (copies entire context)
+ *   6. No sudo usage       — RUN sudo ... is a smell
+ *   7. No secrets in ENV   — ENV key=value with secret-like name
+ *   8. Explicit WORKDIR    — WORKDIR instruction set before COPY/RUN
+ *   9. No `apt-get upgrade` — unpinned system upgrade → non-reproducible
+ *  10. Combined RUN layers  — multiple consecutive RUN instructions (layer bloat)
+ *
+ * Input options (ctx.graph):
+ *   - `dockerfileContent` {string}   — inject Dockerfile text (tests)
+ *   - `dockerfilePath`    {string}   — path relative to projectRoot
+ */
+import type { SkillModule } from '../types.js';
+export type CheckStatus = 'pass' | 'fail' | 'warn' | 'skip';
+export interface DockerCheck {
+    id: string;
+    title: string;
+    status: CheckStatus;
+    severity: 'error' | 'warning' | 'info';
+    details: string;
+    remediation: string;
+}
+export interface ContainerReport {
+    dockerfilePath: string;
+    checks: DockerCheck[];
+    score: number;
+    errors: number;
+    warnings: number;
+    summary: string;
+}
+export declare function auditDockerfile(content: string, filePath?: string): ContainerReport;
+export declare const containerAdvisorSkill: SkillModule;
+//# sourceMappingURL=container-advisor.d.ts.map

package/dist/skills/container-advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-advisor.d.ts","sourceRoot":"","sources":["../../src/skills/container-advisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,aAAa,CAAC;AAM1E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AA2LD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAe,GAAG,eAAe,CAgCzF;AAMD,eAAO,MAAM,qBAAqB,EAAE,WAoDnC,CAAC"}

package/dist/skills/container-advisor.js

@@ -0,0 +1,274 @@
+/**
+ * Skill: container-advisor
+ *
+ * Audits Dockerfile(s) against a best-practice checklist and produces a
+ * structured report with pass/fail per check plus remediation snippets.
+ *
+ * Checks:
+ *   1. Multi-stage build   — at least 2 FROM instructions
+ *   2. Non-root user       — USER instruction present (not root/0)
+ *   3. HEALTHCHECK         — HEALTHCHECK instruction defined
+ *   4. Pinned base image   — FROM uses a tag other than "latest" or no-tag
+ *   5. Minimal COPY scope  — no bare `COPY . .` (copies entire context)
+ *   6. No sudo usage       — RUN sudo ... is a smell
+ *   7. No secrets in ENV   — ENV key=value with secret-like name
+ *   8. Explicit WORKDIR    — WORKDIR instruction set before COPY/RUN
+ *   9. No `apt-get upgrade` — unpinned system upgrade → non-reproducible
+ *  10. Combined RUN layers  — multiple consecutive RUN instructions (layer bloat)
+ *
+ * Input options (ctx.graph):
+ *   - `dockerfileContent` {string}   — inject Dockerfile text (tests)
+ *   - `dockerfilePath`    {string}   — path relative to projectRoot
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+// ---------------------------------------------------------------------------
+// Individual check implementations
+// ---------------------------------------------------------------------------
+function checkMultiStage(lines) {
+    const fromCount = lines.filter((l) => /^FROM\s+/i.test(l.trim())).length;
+    return fromCount >= 2 ? 'pass' : 'fail';
+}
+function checkNonRootUser(lines) {
+    const userLine = lines.find((l) => /^USER\s+/i.test(l.trim()));
+    if (!userLine)
+        return 'fail';
+    const val = userLine.replace(/^USER\s+/i, '').trim().toLowerCase();
+    if (val === 'root' || val === '0')
+        return 'fail';
+    return 'pass';
+}
+function checkHealthcheck(lines) {
+    return lines.some((l) => /^HEALTHCHECK\s+/i.test(l.trim())) ? 'pass' : 'warn';
+}
+function checkPinnedBase(lines) {
+    const froms = lines.filter((l) => /^FROM\s+/i.test(l.trim()));
+    for (const from of froms) {
+        const image = from.replace(/^FROM\s+/i, '').split(/\s+/)[0];
+        if (image === 'scratch')
+            continue; // scratch is fine
+        if (!image.includes(':'))
+            return 'fail'; // no tag at all
+        if (image.endsWith(':latest'))
+            return 'fail'; // latest is unpinned
+    }
+    return 'pass';
+}
+function checkCopyScope(lines) {
+    // Bare "COPY . ." or "COPY . /" copies entire context
+    return lines.some((l) => /^COPY\s+\.\s+[./]/i.test(l.trim())) ? 'warn' : 'pass';
+}
+function checkNoSudo(lines) {
+    return lines.some((l) => /^RUN\b.+\bsudo\b/i.test(l.trim())) ? 'warn' : 'pass';
+}
+function checkNoSecretsInEnv(lines) {
+    const SECRET_KEYS = /\b(password|passwd|secret|api_?key|token|private_?key|auth)\s*=/i;
+    return lines.some((l) => /^ENV\s+/i.test(l.trim()) && SECRET_KEYS.test(l)) ? 'fail' : 'pass';
+}
+function checkWorkdir(lines) {
+    const instrs = lines.map((l) => l.trim()).filter((l) => /^(COPY|RUN|WORKDIR)\s+/i.test(l));
+    // WORKDIR should come before first COPY or RUN
+    const firstCopyRun = instrs.findIndex((l) => /^(COPY|RUN)\s+/i.test(l));
+    const firstWorkdir = instrs.findIndex((l) => /^WORKDIR\s+/i.test(l));
+    if (firstWorkdir === -1)
+        return 'fail';
+    if (firstCopyRun === -1)
+        return 'pass';
+    return firstWorkdir < firstCopyRun ? 'pass' : 'warn';
+}
+function checkNoAptUpgrade(lines) {
+    return lines.some((l) => /apt-get\s+upgrade\b/i.test(l)) ? 'warn' : 'pass';
+}
+function checkRunLayers(lines) {
+    let consecutive = 0;
+    let maxConsecutive = 0;
+    for (const l of lines) {
+        if (/^RUN\s+/i.test(l.trim())) {
+            consecutive++;
+            maxConsecutive = Math.max(maxConsecutive, consecutive);
+        }
+        else if (l.trim().length > 0 && !l.trim().startsWith('#')) {
+            consecutive = 0;
+        }
+    }
+    return maxConsecutive >= 3 ? 'warn' : 'pass';
+}
+const CHECKS = [
+    {
+        id: 'multi-stage',
+        title: 'Multi-stage build',
+        severity: 'error',
+        run: checkMultiStage,
+        failDetails: 'Only one FROM instruction found — single-stage build ships build tools to production.',
+        warnDetails: '',
+        remediation: 'Split into builder and final stages:\n  FROM node:22-alpine AS builder\n  RUN npm ci && npm run build\n  FROM node:22-alpine\n  COPY --from=builder /app/dist ./dist',
+    },
+    {
+        id: 'non-root-user',
+        title: 'Non-root USER',
+        severity: 'error',
+        run: checkNonRootUser,
+        failDetails: 'Container runs as root — a container escape would grant host root access.',
+        warnDetails: '',
+        remediation: 'Add before CMD/ENTRYPOINT:\n  RUN addgroup -S appgroup && adduser -S appuser -G appgroup\n  USER appuser',
+    },
+    {
+        id: 'healthcheck',
+        title: 'HEALTHCHECK defined',
+        severity: 'warning',
+        run: checkHealthcheck,
+        failDetails: '',
+        warnDetails: 'No HEALTHCHECK instruction — orchestrators (Docker Swarm, ECS) cannot detect unhealthy containers.',
+        remediation: 'Add:\n  HEALTHCHECK --interval=30s --timeout=5s --retries=3 \\\n    CMD wget -qO- http://localhost:3000/health || exit 1',
+    },
+    {
+        id: 'pinned-base',
+        title: 'Pinned base image version',
+        severity: 'error',
+        run: checkPinnedBase,
+        failDetails: 'Base image uses `:latest` or has no tag — builds are not reproducible.',
+        warnDetails: '',
+        remediation: 'Use a specific digest or version tag:\n  FROM node:22.12.0-alpine3.21',
+    },
+    {
+        id: 'copy-scope',
+        title: 'Scoped COPY (no `COPY . .`)',
+        severity: 'warning',
+        run: checkCopyScope,
+        failDetails: '',
+        warnDetails: '`COPY . .` copies the entire build context including secrets, .git, node_modules.',
+        remediation: 'Use a .dockerignore and copy only what the image needs:\n  COPY package.json pnpm-lock.yaml ./\n  COPY src/ ./src/',
+    },
+    {
+        id: 'no-sudo',
+        title: 'No sudo in RUN',
+        severity: 'warning',
+        run: checkNoSudo,
+        failDetails: '',
+        warnDetails: '`sudo` in RUN layers is a smell — the build user should already have required permissions.',
+        remediation: 'Grant permissions during image build or switch USER instead of using sudo at runtime.',
+    },
+    {
+        id: 'no-secrets-env',
+        title: 'No secrets in ENV',
+        severity: 'error',
+        run: checkNoSecretsInEnv,
+        failDetails: 'Secret-like key found in ENV instruction — secrets baked into layers are extractable via `docker history`.',
+        warnDetails: '',
+        remediation: 'Pass secrets at runtime via environment variables or Docker secrets:\n  docker run -e API_KEY=$API_KEY myimage',
+    },
+    {
+        id: 'explicit-workdir',
+        title: 'WORKDIR set before COPY/RUN',
+        severity: 'warning',
+        run: checkWorkdir,
+        failDetails: 'No WORKDIR set — files are placed in root (/) by default.',
+        warnDetails: 'WORKDIR defined after COPY/RUN — early instructions run in an unexpected directory.',
+        remediation: 'Set WORKDIR early:\n  WORKDIR /app',
+    },
+    {
+        id: 'no-apt-upgrade',
+        title: 'No `apt-get upgrade`',
+        severity: 'warning',
+        run: checkNoAptUpgrade,
+        failDetails: '',
+        warnDetails: '`apt-get upgrade` upgrades all packages to unspecified versions — breaks reproducibility.',
+        remediation: 'Pin specific package versions or use a freshly pulled base image instead.',
+    },
+    {
+        id: 'run-layers',
+        title: 'Minimal RUN layers',
+        severity: 'warning',
+        run: checkRunLayers,
+        failDetails: '',
+        warnDetails: '3+ consecutive RUN instructions detected — each adds a layer that increases image size.',
+        remediation: 'Chain RUN instructions with &&:\n  RUN npm ci \\\n   && npm run build \\\n   && rm -rf node_modules',
+    },
+];
+// ---------------------------------------------------------------------------
+// Main audit function
+// ---------------------------------------------------------------------------
+export function auditDockerfile(content, filePath = 'Dockerfile') {
+    const lines = content.split('\n');
+    const checks = [];
+    for (const def of CHECKS) {
+        const status = def.run(lines);
+        let details = '';
+        if (status === 'fail')
+            details = def.failDetails;
+        else if (status === 'warn')
+            details = def.warnDetails;
+        checks.push({
+            id: def.id,
+            title: def.title,
+            status,
+            severity: def.severity,
+            details,
+            remediation: status !== 'pass' ? def.remediation : '',
+        });
+    }
+    const errors = checks.filter((c) => c.status === 'fail' && c.severity === 'error').length;
+    const warnings = checks.filter((c) => (c.status === 'fail' || c.status === 'warn') && c.severity === 'warning').length;
+    const passed = checks.filter((c) => c.status === 'pass').length;
+    const score = Math.round((passed / checks.length) * 100);
+    const summary = errors > 0
+        ? `❌ ${errors} error(s), ${warnings} warning(s) — score: ${score}/100`
+        : warnings > 0
+            ? `⚠️  ${warnings} warning(s) — score: ${score}/100`
+            : `✅ All checks passed — score: ${score}/100`;
+    return { dockerfilePath: filePath, checks, score, errors, warnings, summary };
+}
+// ---------------------------------------------------------------------------
+// Skill
+// ---------------------------------------------------------------------------
+export const containerAdvisorSkill = {
+    id: 'container-advisor',
+    name: 'Container Advisor',
+    description: 'Audits Dockerfiles against 10 best-practice checks (multi-stage, non-root, HEALTHCHECK, pinned base, etc.)',
+    version: '1.0.0',
+    enabled: false,
+    tags: ['devops', 'docker'],
+    async execute(ctx) {
+        const opts = ctx.graph ?? {};
+        let content = '';
+        let filePath = 'Dockerfile';
+        if (typeof opts['dockerfileContent'] === 'string') {
+            content = opts['dockerfileContent'];
+        }
+        else {
+            const rel = typeof opts['dockerfilePath'] === 'string' ? opts['dockerfilePath'] : 'Dockerfile';
+            filePath = join(ctx.projectRoot, rel);
+            if (!existsSync(filePath)) {
+                return {
+                    success: false,
+                    output: `❌ Dockerfile not found at ${filePath}`,
+                    error: 'dockerfile not found',
+                };
+            }
+            content = readFileSync(filePath, 'utf-8');
+        }
+        const report = auditDockerfile(content, filePath);
+        const lines = [
+            `🐳 Container Advisor — ${report.dockerfilePath}`,
+            `   ${report.summary}`,
+            '',
+        ];
+        for (const c of report.checks) {
+            const icon = c.status === 'pass' ? '✅' : c.status === 'fail' ? '❌' : '⚠️ ';
+            lines.push(`  ${icon} ${c.title}`);
+            if (c.details)
+                lines.push(`     ${c.details}`);
+            if (c.remediation) {
+                lines.push(`     💡 Remediation:`);
+                for (const rl of c.remediation.split('\n'))
+                    lines.push(`        ${rl}`);
+            }
+        }
+        return {
+            success: report.errors === 0,
+            output: lines.join('\n'),
+            data: report,
+        };
+    },
+};
+//# sourceMappingURL=container-advisor.js.map

package/dist/skills/container-advisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-advisor.js","sourceRoot":"","sources":["../../src/skills/container-advisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2BjC,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,SAAS,eAAe,CAAC,KAAe;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,OAAO,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,KAAe;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS,CAAmB,kBAAkB;QACvE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,CAAa,gBAAgB;QACrE,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,CAAQ,qBAAqB;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,sDAAsD;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACjF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAe;IAC1C,MAAM,WAAW,GAAG,kEAAkE,CAAC;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,+CAA+C;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACvC,OAAO,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9B,WAAW,EAAE,CAAC;YACd,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,WAAW,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAgBD,MAAM,MAAM,GAAe;IACzB;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,eAAe;QACpB,WAAW,EAAE,uFAAuF;QACpG,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,sKAAsK;KACpL;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,gBAAgB;QACrB,WAAW,EAAE,2EAA2E;QACxF,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,0GAA0G;KACxH;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,gBAAgB;QACrB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE,0HAA0H;KACxI;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,eAAe;QACpB,WAAW,EAAE,wEAAwE;QACrF,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,uEAAuE;KACrF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,6BAA6B;QACpC,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,cAAc;QACnB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,mFAAmF;QAChG,WAAW,EAAE,oHAAoH;KAClI;IACD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,WAAW;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,4FAA4F;QACzG,WAAW,EAAE,uFAAuF;KACrG;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,OAAO;QACjB,GAAG,EAAE,mBAAmB;QACxB,WAAW,EAAE,4GAA4G;QACzH,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,gHAAgH;KAC9H;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,6BAA6B;QACpC,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,YAAY;QACjB,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE,oCAAoC;KAClD;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,sBAAsB;QAC7B,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,iBAAiB;QACtB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,2FAA2F;QACxG,WAAW,EAAE,2EAA2E;KACzF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,SAAS;QACnB,GAAG,EAAE,cAAc;QACnB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,yFAAyF;QACtG,WAAW,EAAE,qGAAqG;KACnH;CACF,CAAC;AAEF,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,QAAQ,GAAG,YAAY;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC;aAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC;QAEtD,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO;YACP,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACvH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,MAAM,cAAc,QAAQ,wBAAwB,KAAK,MAAM;QACtE,CAAC,CAAC,QAAQ,GAAG,CAAC;YACd,CAAC,CAAC,OAAO,QAAQ,wBAAwB,KAAK,MAAM;YACpD,CAAC,CAAC,gCAAgC,KAAK,MAAM,CAAC;IAEhD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAgB;IAChD,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,4GAA4G;IACzH,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAE1B,KAAK,CAAC,OAAO,CAAC,GAAiB;QAC7B,MAAM,IAAI,GAAI,GAAG,CAAC,KAAwC,IAAI,EAAE,CAAC;QACjE,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,YAAY,CAAC;QAE5B,IAAI,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YAC/F,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,6BAA6B,QAAQ,EAAE;oBAC/C,KAAK,EAAE,sBAAsB;iBAC9B,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG;YACZ,0BAA0B,MAAM,CAAC,cAAc,EAAE;YACjD,MAAM,MAAM,CAAC,OAAO,EAAE;YACtB,EAAE;SACH,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACnC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,IAAI,EAAE,MAAM;SACb,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/skills/context-memory.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Skill: context-memory
+ *
+ * Persists architectural decisions, team agreements and agent reasoning sessions
+ * into the WeaveGraph knowledge graph for long-term cross-session memory.
+ *
+ * Actions:
+ *   - save   — persist a new memory entry as a graph node
+ *   - load   — retrieve entries by id or tag
+ *   - list   — list all persisted memory entries (optionally filtered by type/tag)
+ *
+ * Input (via SkillContext.graph):
+ *   - `ctx.graph['action']`  — 'save' | 'load' | 'list' (default: 'list')
+ *   - `ctx.graph['entry']`   — MemoryEntry (required for 'save')
+ *   - `ctx.graph['query']`   — string keyword for 'load'
+ *   - `ctx.graph['store']`   — Record<string,MemoryEntry> injectable in-memory store for tests
+ *
+ * Output data:
+ *   - ContextMemoryResult
+ */
+import type { SkillModule } from '../types.js';
+export type MemoryEntryType = 'decision' | 'agreement' | 'reasoning' | 'constraint' | 'pattern' | 'note';
+export interface MemoryEntry {
+    id: string;
+    type: MemoryEntryType;
+    title: string;
+    content: string;
+    tags: string[];
+    createdAt: string;
+    sessionId?: string;
+}
+export interface ContextMemoryResult {
+    action: 'save' | 'load' | 'list';
+    saved?: MemoryEntry;
+    entries: MemoryEntry[];
+    total: number;
+    query?: string;
+}
+export declare function generateId(entry: Omit<MemoryEntry, 'id'>): string;
+export declare function matchesQuery(entry: MemoryEntry, query: string): boolean;
+export declare function saveEntry(store: Map<string, MemoryEntry>, raw: Partial<MemoryEntry>, sessionId?: string): MemoryEntry;
+export declare function listEntries(store: Map<string, MemoryEntry>, query?: string, type?: MemoryEntryType): MemoryEntry[];
+export declare const contextMemorySkill: SkillModule;
+//# sourceMappingURL=context-memory.d.ts.map

package/dist/skills/context-memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-memory.d.ts","sourceRoot":"","sources":["../../src/skills/context-memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,aAAa,CAAC;AAM1E,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,GACZ,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AASD,wBAAgB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,MAAM,CAOjE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAQvE;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAC/B,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,WAAW,CAgBb;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAC/B,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,eAAe,GACrB,WAAW,EAAE,CAKf;AAsBD,eAAO,MAAM,kBAAkB,EAAE,WAiGhC,CAAC"}