@rasensio/aidlc-content 0.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Rodrigo Asensio
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/capabilities/claude-code.yaml

@@ -0,0 +1,9 @@
+platform: claude-code
+capabilities:
+  plan-mode:
+    phases: [ideation, requirements, design]
+    activation: >-
+      Before producing this phase's artifact, enter plan mode to reason through
+      the problem space, identify constraints, and outline the approach before
+      committing to a structure. Exit plan mode only when you begin writing the
+      artifact.

package/capabilities/codex.yaml

@@ -0,0 +1,8 @@
+platform: codex
+capabilities:
+  code-generation:
+    phases: [implementation, testing]
+    activation: >-
+      Leverage Codex sandboxed execution for this phase. Write implementation
+      code and tests together, using the sandbox to validate that tests pass
+      before proposing the final changeset.

package/capabilities/cursor.yaml

@@ -0,0 +1,8 @@
+platform: cursor
+capabilities:
+  composer:
+    phases: [design, implementation]
+    activation: >-
+      Use Cursor Composer for this phase to coordinate multi-file edits in a
+      single operation. Frame the design or implementation as a Composer prompt
+      describing the desired end state across all affected files.

package/capabilities/kiro.yaml

@@ -0,0 +1,9 @@
+platform: kiro
+capabilities:
+  spec-driven-development:
+    phases: [requirements, design, implementation]
+    activation: >-
+      Use Kiro spec sessions for this phase. Keep spec documents under
+      .kiro/specs/ and let the spec workflow drive requirements, design
+      decisions, and task breakdown. Reference the active spec when producing
+      artifacts so that traceability is maintained.

package/capabilities/windsurf.yaml

@@ -0,0 +1,8 @@
+platform: windsurf
+capabilities:
+  cascade:
+    phases: [implementation]
+    activation: >-
+      Use Windsurf Cascade flows for implementation steps that span multiple
+      files. Keep individual instructions concise due to context-size
+      constraints; reference .aidlc/skills/ for full phase guidance when needed.

package/dist/capabilities.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityMap } from './types.js';
+export declare function loadCapabilities(): CapabilityMap[];
+export declare function getCapabilityMap(platform: string): CapabilityMap | undefined;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,wBAAgB,gBAAgB,IAAI,aAAa,EAAE,CAclD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAE5E"}

package/dist/capabilities.js

@@ -0,0 +1,23 @@
+import { fileURLToPath } from 'node:url';
+import { resolve, dirname } from 'node:path';
+import { readdirSync, readFileSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+const CONTENT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const CAPABILITIES_DIR = resolve(CONTENT_ROOT, 'capabilities');
+export function loadCapabilities() {
+    const files = readdirSync(CAPABILITIES_DIR)
+        .filter(f => f.endsWith('.yaml') || f.endsWith('.yml'))
+        .sort();
+    return files.map(filename => {
+        const raw = readFileSync(resolve(CAPABILITIES_DIR, filename), 'utf8');
+        const parsed = parseYaml(raw);
+        return {
+            platform: parsed['platform'] ?? '',
+            capabilities: parsed['capabilities'] ?? {},
+        };
+    });
+}
+export function getCapabilityMap(platform) {
+    return loadCapabilities().find(c => c.platform === platform);
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;AAE/D,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,gBAAgB,CAAC;SACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACtD,IAAI,EAAE,CAAC;IAEV,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;QAEzD,OAAO;YACL,QAAQ,EAAG,MAAM,CAAC,UAAU,CAAY,IAAI,EAAE;YAC9C,YAAY,EAAG,MAAM,CAAC,cAAc,CAA6B,IAAI,EAAE;SACxE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC/D,CAAC"}

package/dist/guidance.d.ts

@@ -0,0 +1,3 @@
+import type { GuidanceLayer } from './types.js';
+export declare function loadGuidance(): GuidanceLayer[];
+//# sourceMappingURL=guidance.d.ts.map

package/dist/guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guidance.d.ts","sourceRoot":"","sources":["../src/guidance.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAShD,wBAAgB,YAAY,IAAI,aAAa,EAAE,CAc9C"}

package/dist/guidance.js

@@ -0,0 +1,21 @@
+import { fileURLToPath } from 'node:url';
+import { resolve, dirname } from 'node:path';
+import { readFileSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+const CONTENT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const GUIDANCE_DIR = resolve(CONTENT_ROOT, 'guidance');
+export function loadGuidance() {
+    const indexPath = resolve(GUIDANCE_DIR, 'index.yaml');
+    const indexRaw = readFileSync(indexPath, 'utf8');
+    const index = parseYaml(indexRaw);
+    return index.layers.map(layer => {
+        const filePath = resolve(GUIDANCE_DIR, layer.file);
+        const body = readFileSync(filePath, 'utf8');
+        return {
+            name: layer.name,
+            filename: layer.file,
+            body,
+        };
+    });
+}
+//# sourceMappingURL=guidance.js.map

package/dist/guidance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guidance.js","sourceRoot":"","sources":["../src/guidance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAMvD,MAAM,UAAU,YAAY;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAkB,CAAC;IAEnD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,IAAI;SACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { loadSkills, getSkill } from './skills.js';
+export { loadTemplates, getTemplate } from './templates.js';
+export { loadGuidance } from './guidance.js';
+export { loadCapabilities, getCapabilityMap } from './capabilities.js';
+export { loadPhases, getPhase } from './phases.js';
+export type { Skill, WorkflowTemplate, GuidanceLayer, CapabilityMap, PhaseDefinition } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { loadSkills, getSkill } from './skills.js';
+export { loadTemplates, getTemplate } from './templates.js';
+export { loadGuidance } from './guidance.js';
+export { loadCapabilities, getCapabilityMap } from './capabilities.js';
+export { loadPhases, getPhase } from './phases.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}

package/dist/phases.d.ts

@@ -0,0 +1,4 @@
+import type { PhaseDefinition } from './types.js';
+export declare function loadPhases(): PhaseDefinition[];
+export declare function getPhase(name: string): PhaseDefinition | undefined;
+//# sourceMappingURL=phases.d.ts.map

package/dist/phases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phases.d.ts","sourceRoot":"","sources":["../src/phases.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,wBAAgB,UAAU,IAAI,eAAe,EAAE,CA2B9C;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAElE"}

package/dist/phases.js

@@ -0,0 +1,34 @@
+import { fileURLToPath } from 'node:url';
+import { resolve, dirname } from 'node:path';
+import { readdirSync, readFileSync, existsSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+const CONTENT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const PHASES_DIR = resolve(CONTENT_ROOT, 'phases');
+export function loadPhases() {
+    if (!existsSync(PHASES_DIR)) {
+        return [];
+    }
+    const files = readdirSync(PHASES_DIR)
+        .filter(f => f.endsWith('.yaml') || f.endsWith('.yml') || f.endsWith('.json'))
+        .sort();
+    if (files.length === 0) {
+        return [];
+    }
+    return files.map(filename => {
+        const raw = readFileSync(resolve(PHASES_DIR, filename), 'utf8');
+        const parsed = filename.endsWith('.json')
+            ? JSON.parse(raw)
+            : parseYaml(raw);
+        return {
+            name: parsed['name'] ?? '',
+            purpose: parsed['purpose'] ?? '',
+            exitCriteria: Array.isArray(parsed['exitCriteria'])
+                ? parsed['exitCriteria']
+                : [],
+        };
+    });
+}
+export function getPhase(name) {
+    return loadPhases().find(p => p.name === name);
+}
+//# sourceMappingURL=phases.js.map

package/dist/phases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phases.js","sourceRoot":"","sources":["../src/phases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEnD,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC7E,IAAI,EAAE,CAAC;IAEV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B;YAC9C,CAAC,CAAE,SAAS,CAAC,GAAG,CAA6B,CAAC;QAEhD,OAAO;YACL,IAAI,EAAG,MAAM,CAAC,MAAM,CAAY,IAAI,EAAE;YACtC,OAAO,EAAG,MAAM,CAAC,SAAS,CAAY,IAAI,EAAE;YAC5C,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACjD,CAAC,CAAE,MAAM,CAAC,cAAc,CAAc;gBACtC,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/skills.d.ts

@@ -0,0 +1,4 @@
+import type { Skill } from './types.js';
+export declare function loadSkills(): Skill[];
+export declare function getSkill(name: string): Skill | undefined;
+//# sourceMappingURL=skills.d.ts.map

package/dist/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AA6BxC,wBAAgB,UAAU,IAAI,KAAK,EAAE,CASpC;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAExD"}

package/dist/skills.js

@@ -0,0 +1,40 @@
+import { fileURLToPath } from 'node:url';
+import { resolve, dirname } from 'node:path';
+import { readdirSync, readFileSync } from 'node:fs';
+const CONTENT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const SKILLS_DIR = resolve(CONTENT_ROOT, 'skills');
+function parseSkillFrontmatter(raw) {
+    const match = raw.match(/^---\n([\s\S]*?)\n---/);
+    if (!match) {
+        return { name: '', phase: '', description: '' };
+    }
+    const frontmatter = match[1];
+    const meta = {};
+    for (const line of frontmatter.split('\n')) {
+        const colonIdx = line.indexOf(':');
+        if (colonIdx === -1)
+            continue;
+        const key = line.slice(0, colonIdx).trim();
+        const value = line.slice(colonIdx + 1).trim();
+        meta[key] = value;
+    }
+    return {
+        name: meta['name'] ?? '',
+        phase: meta['phase'] ?? '',
+        description: meta['description'] ?? '',
+    };
+}
+export function loadSkills() {
+    const files = readdirSync(SKILLS_DIR).filter(f => f.endsWith('.md')).sort();
+    return files.map(filename => {
+        const raw = readFileSync(resolve(SKILLS_DIR, filename), 'utf8');
+        const meta = parseSkillFrontmatter(raw);
+        // Strip frontmatter from body
+        const body = raw.replace(/^---\n[\s\S]*?\n---\n?/, '');
+        return { filename, meta, body };
+    });
+}
+export function getSkill(name) {
+    return loadSkills().find(s => s.meta.name === name);
+}
+//# sourceMappingURL=skills.js.map

package/dist/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../src/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGpD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEnD,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAA2B,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAC1B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACxC,8BAA8B;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/templates.d.ts

@@ -0,0 +1,4 @@
+import type { WorkflowTemplate } from './types.js';
+export declare function loadTemplates(): WorkflowTemplate[];
+export declare function getTemplate(name: string): WorkflowTemplate | undefined;
+//# sourceMappingURL=templates.d.ts.map

package/dist/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAKnD,wBAAgB,aAAa,IAAI,gBAAgB,EAAE,CAqBlD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEtE"}

package/dist/templates.js

@@ -0,0 +1,29 @@
+import { fileURLToPath } from 'node:url';
+import { resolve, dirname } from 'node:path';
+import { readdirSync, readFileSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+const CONTENT_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const TEMPLATES_DIR = resolve(CONTENT_ROOT, 'templates');
+export function loadTemplates() {
+    const files = readdirSync(TEMPLATES_DIR)
+        .filter(f => f.endsWith('.yaml') || f.endsWith('.yml'))
+        .sort();
+    return files.map(filename => {
+        const raw = readFileSync(resolve(TEMPLATES_DIR, filename), 'utf8');
+        const parsed = parseYaml(raw);
+        const phases = Array.isArray(parsed['phases'])
+            ? parsed['phases'].map(p => p.name)
+            : [];
+        return {
+            name: parsed['name'] ?? '',
+            scope: parsed['scope'] ?? '',
+            phases,
+            description: parsed['description'] ?? '',
+            raw: parsed,
+        };
+    });
+}
+export function getTemplate(name) {
+    return loadTemplates().find(t => t.name === name);
+}
+//# sourceMappingURL=templates.js.map

package/dist/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5E,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAEzD,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACtD,IAAI,EAAE,CAAC;IAEV,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;QAEzD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC,CAAE,MAAM,CAAC,QAAQ,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;YACL,IAAI,EAAG,MAAM,CAAC,MAAM,CAAY,IAAI,EAAE;YACtC,KAAK,EAAG,MAAM,CAAC,OAAO,CAAY,IAAI,EAAE;YACxC,MAAM;YACN,WAAW,EAAG,MAAM,CAAC,aAAa,CAAY,IAAI,EAAE;YACpD,GAAG,EAAE,MAAM;SACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,31 @@
+export interface Skill {
+    filename: string;
+    meta: {
+        name: string;
+        phase: string;
+        description: string;
+    };
+    body: string;
+}
+export interface WorkflowTemplate {
+    name: string;
+    scope: string;
+    phases: string[];
+    description: string;
+    raw: Record<string, unknown>;
+}
+export interface GuidanceLayer {
+    name: string;
+    filename: string;
+    body: string;
+}
+export interface CapabilityMap {
+    platform: string;
+    capabilities: Record<string, unknown>;
+}
+export interface PhaseDefinition {
+    name: string;
+    purpose: string;
+    exitCriteria: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,KAAK;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/guidance/accessibility.md

@@ -0,0 +1,67 @@
+---
+name: accessibility
+description: Web accessibility guidelines and inclusive design
+---
+# Accessibility
+
+Follow these accessibility rules when building user interfaces. All interactive content must be usable by people with diverse abilities, including those using assistive technologies.
+
+## Semantic HTML
+
+- Use semantic elements (`<nav>`, `<main>`, `<article>`, `<section>`, `<header>`, `<footer>`) for page structure.
+- Use heading elements (`<h1>`–`<h6>`) in logical hierarchy; never skip levels for styling.
+- Use `<button>` for actions and `<a>` for navigation; never use `<div>` or `<span>` as interactive elements without proper roles.
+- Use `<label>` elements explicitly associated with form inputs via `for`/`id` pairing.
+- Use lists (`<ul>`, `<ol>`, `<dl>`) for grouped items rather than styled `<div>` sequences.
+
+## ARIA Usage
+
+- Prefer native HTML semantics over ARIA; add ARIA only when no native element provides the required semantics.
+- Use `aria-label` or `aria-labelledby` for interactive elements that lack visible text labels.
+- Set `aria-expanded`, `aria-selected`, `aria-checked` states dynamically to reflect current UI state.
+- Apply `role="alert"` or `aria-live="polite"` for dynamic content that must be announced to screen readers.
+- Never use `aria-hidden="true"` on focusable elements.
+
+## Keyboard Navigation
+
+- All interactive elements must be reachable and operable via keyboard alone (Tab, Shift+Tab, Enter, Space, Arrow keys).
+- Maintain a logical tab order that follows the visual reading flow; avoid positive `tabindex` values.
+- Provide visible focus indicators on all focusable elements; never remove outline without a visible replacement.
+- Implement keyboard shortcuts for complex widgets (modals, dropdowns, tabs) per WAI-ARIA Authoring Practices.
+- Trap focus inside modal dialogs until dismissed; restore focus to the triggering element on close.
+
+## Color and Contrast
+
+- Maintain a minimum contrast ratio of 4.5:1 for normal text and 3:1 for large text (WCAG AA).
+- Never use color as the sole means of conveying information; pair color with text, icons, or patterns.
+- Verify contrast in both light and dark modes if the application supports theme switching.
+- Ensure focus indicators have at least 3:1 contrast against adjacent colors.
+
+## Images and Media
+
+- Provide meaningful `alt` text for informative images; use `alt=""` for decorative images.
+- Provide captions or transcripts for video and audio content.
+- Avoid auto-playing media; if unavoidable, provide an immediate mechanism to pause or stop.
+- Ensure animated content can be paused and does not flash more than 3 times per second.
+
+## Forms and Errors
+
+- Associate error messages with their input fields using `aria-describedby` or `aria-errormessage`.
+- Display error summaries at the top of forms with links to the offending fields.
+- Do not rely solely on placeholder text as a label; placeholders disappear on input.
+- Group related form controls with `<fieldset>` and `<legend>`.
+- Provide clear instructions before the form and inline help where input format is constrained.
+
+## Responsive and Adaptive Design
+
+- Support zoom up to 200% without loss of content or functionality.
+- Use relative units (rem, em, %) for text and spacing rather than fixed pixels.
+- Ensure touch targets are at least 44x44 CSS pixels for mobile interfaces.
+- Test layouts with different text sizes, languages, and reading directions (LTR/RTL).
+
+## Testing and Verification
+
+- Run automated accessibility scans (axe-core, Lighthouse) in CI and fix all critical/serious issues.
+- Test with at least one screen reader (VoiceOver, NVDA, or JAWS) for major user flows.
+- Validate keyboard-only navigation for all primary workflows.
+- Note: full WCAG conformance requires manual testing with assistive technologies and expert review.

package/guidance/api-conventions.md

@@ -0,0 +1,124 @@
+---
+name: api-conventions
+description: REST API naming, error format, and versioning conventions
+---
+# API Conventions
+
+Follow these conventions when designing, implementing, or reviewing REST APIs. Consistency across endpoints reduces integration friction and simplifies documentation.
+
+## URL Structure and Naming
+
+- Use lowercase, hyphen-separated path segments: `/user-profiles`, not `/userProfiles` or `/user_profiles`.
+- Use plural nouns for resource collections: `/orders`, `/products`, `/users`.
+- Use resource identifiers as path segments: `/users/{userId}/orders/{orderId}`.
+- Limit nesting to two levels; deeper relationships should use query parameters or links.
+- Use query parameters for filtering, sorting, and pagination: `?status=active&sort=-created_at&page=2`.
+- Avoid verbs in URLs; let HTTP methods convey the action.
+
+## HTTP Methods
+
+- `GET` — Retrieve a resource or collection. Must be safe and idempotent. Never mutate state.
+- `POST` — Create a new resource or trigger a non-idempotent action. Return 201 with Location header for creates.
+- `PUT` — Replace an entire resource. Must be idempotent. Return 200 or 204.
+- `PATCH` — Partially update a resource. Use JSON Merge Patch or JSON Patch content types. Return 200.
+- `DELETE` — Remove a resource. Must be idempotent. Return 204 on success, 404 if already absent.
+- `OPTIONS` — Return allowed methods and CORS headers. Used for preflight requests.
+
+## Status Codes
+
+Use the most specific applicable status code:
+
+| Range | Use for |
+|-------|---------|
+| 200 | Successful retrieval or update |
+| 201 | Resource created (include Location header) |
+| 204 | Success with no response body |
+| 400 | Malformed request (syntax or validation errors) |
+| 401 | Missing or invalid authentication credentials |
+| 403 | Authenticated but insufficient permissions |
+| 404 | Resource not found |
+| 409 | Conflict (e.g., duplicate key, version mismatch) |
+| 422 | Semantically invalid request (valid syntax but business rule violation) |
+| 429 | Rate limit exceeded (include Retry-After header) |
+| 500 | Unexpected server error (never expose internals) |
+
+## Error Response Format
+
+Return a consistent JSON error body for all 4xx and 5xx responses:
+
+```json
+{
+  "error": {
+    "code": "VALIDATION_FAILED",
+    "message": "Human-readable summary of the problem",
+    "details": [
+      {
+        "field": "email",
+        "issue": "Must be a valid email address"
+      }
+    ],
+    "request_id": "req_abc123"
+  }
+}
+```
+
+- `code` — Machine-readable error identifier (UPPER_SNAKE_CASE).
+- `message` — Brief, user-safe description. Never include stack traces or internal paths.
+- `details` — Optional array of field-level errors for validation failures.
+- `request_id` — Correlation identifier for debugging (matches server-side logs).
+
+## Pagination
+
+- Use cursor-based pagination for large or frequently-changing collections.
+- Support limit/offset as a simpler alternative for smaller, stable datasets.
+- Return pagination metadata in the response body:
+
+```json
+{
+  "data": [...],
+  "pagination": {
+    "next_cursor": "eyJpZCI6MTAwfQ",
+    "has_more": true,
+    "total_count": 2340
+  }
+}
+```
+
+- Include `total_count` only when it can be computed efficiently.
+
+## Versioning
+
+- Use URL prefix versioning for major breaking changes: `/v1/users`, `/v2/users`.
+- Increment the version number only on backward-incompatible changes.
+- Support the previous major version for at least 6 months after a new version ships.
+- Treat additive changes (new optional fields, new endpoints) as backward-compatible.
+- Document deprecation timelines in the Sunset response header and changelog.
+
+## Request and Response Conventions
+
+- Use `snake_case` for JSON field names throughout request and response bodies.
+- Represent timestamps in ISO 8601 format with UTC timezone: `2025-06-15T10:30:00Z`.
+- Use envelope format for collections: `{ "data": [...], "pagination": {...} }`.
+- Return the full created or updated resource in response to POST, PUT, and PATCH.
+- Accept and return `Content-Type: application/json` by default.
+- Support `Accept` header negotiation where multiple formats are available.
+
+## Rate Limiting and Throttling
+
+- Enforce rate limits per client or API key.
+- Return `429 Too Many Requests` with a `Retry-After` header (seconds until next allowed request).
+- Include rate limit headers on every response: `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`.
+
+## CORS and Security Headers
+
+- Configure CORS to allow only trusted origins; avoid wildcard `*` in production.
+- Return appropriate CORS headers: `Access-Control-Allow-Origin`, `Access-Control-Allow-Methods`, `Access-Control-Allow-Headers`.
+- Set `Cache-Control: no-store` on responses containing sensitive data.
+- Include `X-Content-Type-Options: nosniff` and `X-Request-Id` on all responses.
+
+## Documentation and Discoverability
+
+- Provide an OpenAPI 3.x specification for every public API.
+- Include request/response examples for each endpoint.
+- Document authentication requirements, rate limits, and error codes.
+- Use consistent terminology across endpoint descriptions.

package/guidance/index.yaml

@@ -0,0 +1,7 @@
+layers:
+  - name: secure-defaults
+    file: secure-defaults.md
+  - name: accessibility
+    file: accessibility.md
+  - name: api-conventions
+    file: api-conventions.md

package/guidance/secure-defaults.md

@@ -0,0 +1,71 @@
+---
+name: secure-defaults
+description: Security best practices and secure coding defaults
+---
+# Secure Defaults
+
+Follow these security rules by default when writing or reviewing code. Deviations require explicit justification in the design artifact.
+
+## Input Validation
+
+- Validate and sanitize all external inputs at the system boundary before processing.
+- Use an allowlist approach for accepted values when possible; reject unknown inputs.
+- Enforce maximum length, type, and format constraints on every input field.
+- Never trust client-side validation alone; always validate server-side.
+
+## Database and Query Safety
+
+- Use parameterized queries or prepared statements for all database access.
+- Never construct SQL, NoSQL, or ORM queries by string concatenation with user input.
+- Apply principle of least privilege to database credentials (read-only where writes are not needed).
+- Escape identifiers if dynamic table or column names are unavoidable.
+
+## Authentication and Authorization
+
+- Hash passwords with a modern adaptive algorithm (bcrypt, scrypt, or argon2) with per-user salts.
+- Enforce minimum password complexity or passphrase length per current NIST guidance.
+- Implement rate limiting and account lockout on authentication endpoints.
+- Check authorization on every request; never rely solely on client-side role checks.
+- Use short-lived tokens (JWT, session) with explicit expiration and refresh rotation.
+
+## Secrets Management
+
+- Never store secrets (API keys, tokens, passwords, private keys) in source code or config files committed to version control.
+- Use environment variables or a dedicated secrets manager for runtime secrets.
+- Rotate secrets on a defined schedule and immediately on suspected compromise.
+- Log secret access but never log secret values.
+
+## Transport and Data Protection
+
+- Use TLS 1.2+ for all network communication; reject plain HTTP in production.
+- Encrypt sensitive data at rest using AES-256 or equivalent.
+- Set Secure, HttpOnly, and SameSite attributes on all authentication cookies.
+- Apply Content-Security-Policy, X-Content-Type-Options, and Strict-Transport-Security headers.
+
+## Error Handling and Logging
+
+- Never expose stack traces, internal paths, or database details in user-facing error responses.
+- Log errors with sufficient context for debugging but exclude sensitive data (PII, secrets).
+- Use structured logging (JSON) with consistent severity levels.
+- Return generic error messages to clients; map internal errors to safe public codes.
+
+## Dependency Security
+
+- Pin dependency versions and use lock files to ensure reproducible builds.
+- Audit dependencies for known vulnerabilities regularly (e.g., npm audit, Snyk, Dependabot).
+- Prefer well-maintained packages with active security response teams.
+- Remove unused dependencies to reduce attack surface.
+
+## Least Privilege and Defense in Depth
+
+- Run services with the minimum permissions required for their function.
+- Separate concerns: do not mix admin and user-facing logic in the same process.
+- Apply defense in depth: assume any single layer can be bypassed.
+- Validate at multiple boundaries (network edge, service boundary, data layer).
+
+## File and Resource Handling
+
+- Validate uploaded file types, sizes, and content (not just extensions).
+- Store uploaded files outside the web root with randomized names.
+- Set restrictive file permissions on sensitive files (0600 for keys, 0644 for config).
+- Avoid path traversal: canonicalize paths and reject `..` sequences in user input.