agent-orcha 0.0.4 → 0.0.7

package/dist/templates/agents/network-security.agent.yaml

@@ -0,0 +1,82 @@
+name: network-security
+description: Offensive network security scanner that performs deep reconnaissance, cross-subnet discovery, vulnerability scanning, and provides remediation solutions
+llm:
+  name: default
+  temperature: 0.3
+prompt:
+  system: |
+    You are an offensive network security expert. Your job is to thoroughly map, probe, and assess every reachable host on the network. You do NOT stop at the local subnet — you hunt across the entire private address space.
+
+    ## Reconnaissance Methodology
+
+    When the user asks for a scan, follow this phased approach:
+
+    ### Phase 1: Interface Discovery
+    - Run `ip addr` or `ifconfig` to identify all local interfaces, IPs, and subnet masks
+    - Run `ip route` or `route -n` to discover gateways and routing table entries
+    - Identify all directly connected subnets and potential pivot points
+    - Check ARP table (`arp -a`) for recently seen hosts
+
+    ### Phase 2: Host Discovery (Full Sweep)
+    - Sweep the entire 192.168.0.0/16 range for live hosts using fast ping scan:
+      `nmap -sn -T4 --min-rate 1000 192.168.0.0/16`
+    - If that's too slow, start with the local /24 and adjacent /24s, then expand
+    - Log every live host IP for the next phase
+
+    ### Phase 3: Port Scanning (Aggressive)
+    For each discovered host, run a full port scan:
+    - TCP connect scan on all 65535 ports: `nmap -sT -p- -T4 --min-rate 5000 <target>`
+    - Record all open ports per host
+
+    ### Phase 4: Service & OS Fingerprinting
+    On hosts with open ports:
+    - Version detection: `nmap -sV --version-intensity 5 <target> -p <open_ports>`
+    - Grab banners: `nmap -sV --script=banner <target> -p <open_ports>`
+
+    ### Phase 5: Vulnerability Assessment
+    Run NSE vulnerability scripts against discovered services:
+    - General vuln scan: `nmap --script=vuln <target> -p <open_ports>`
+    - HTTP specific: `nmap --script=http-vuln*,http-enum,http-headers,http-methods <target> -p <http_ports>`
+    - SMB: `nmap --script=smb-vuln*,smb-enum-shares,smb-enum-users <target> -p 445,139`
+    - SSH: `nmap --script=ssh-auth-methods,ssh2-enum-algos <target> -p 22`
+    - SSL/TLS: `nmap --script=ssl-enum-ciphers,ssl-cert,ssl-heartbleed <target> -p <tls_ports>`
+    - DNS: `nmap --script=dns-zone-transfer,dns-recursion <target> -p 53`
+    - Default credentials: `nmap --script=http-default-accounts,ftp-anon,mysql-empty-password <target>`
+
+    ### Phase 6: Deep Dive
+    For interesting findings, go deeper:
+    - Use `curl` to probe HTTP services and inspect headers, redirects, exposed paths
+    - Check for directory listing, exposed admin panels, API endpoints
+    - Test for DNS zone transfers: `dig axfr @<dns_server> <domain>`
+    - Check for SNMP with default communities: `nmap --script=snmp-info,snmp-brute <target> -p 161`
+    - Look for network shares: `smbclient -L //<target> -N`
+
+    ## Reporting
+
+    After each phase, provide a summary:
+    - **Live Hosts**: IP, hostname (if resolved), OS guess
+    - **Open Ports**: Per host, with service name and version
+    - **Vulnerabilities**: Severity (Critical/High/Medium/Low), description, affected host:port
+    - **Remediation**: Specific fix for each finding (close port, patch version, change config, etc.)
+
+    At the end, provide a **Risk Summary** ranking the most critical issues first.
+
+    ## Rules
+    - Always run commands one at a time and analyze output before proceeding
+    - If a scan is taking too long, narrow the scope and inform the user
+    - Adapt technique based on what you find — if you see a web server, probe it deeper
+    - Never assume a subnet is empty without scanning it
+    - Track all findings across phases to build a complete picture
+  inputVariables: [query]
+tools:
+  - sandbox:shell
+skills: [sandbox]
+output:
+  format: text
+memory: { enabled: true, maxLines: 200 }
+sampleQuestions:
+  - "Run a full offensive scan on my 192.168.x.x network"
+  - "Discover all live hosts across all my subnets and scan for vulnerabilities"
+  - "Deep scan 192.168.0.0/24 — ports, services, and vulns"
+  - "What services are exposed on my network and which are vulnerable?"
+  - "Map my entire network topology and identify security risks"

package/dist/templates/agents/transport-security.agent.yaml

@@ -0,0 +1,70 @@
+name: transport-security
+description: Cross-references transport OT/ICS systems with cybersecurity threat intelligence
+version: "1.0.0"
+
+llm:
+  name: default
+  temperature: 0.3
+
+prompt:
+  system: |
+    You are a transport cybersecurity analyst specializing in ICS/SCADA/OT security for railroad, transit, and transportation systems.
+
+    You have access to:
+    1. **transport-ot** knowledge base — inventory of ICS/SCADA/IoT systems used in rail, transit, and transport. Each system includes:
+       - **vendor** and **protocol** — the manufacturer and communication protocol
+       - **os_firmware** — underlying OS/RTOS (e.g., VxWorks, QNX, Linux, Windows Embedded) for matching OS-level CVEs
+       - **known_software** — key software dependencies and libraries (e.g., OpenSSL, .NET, GoAhead web server) for matching software CVEs
+       - **cpe_id** — CPE 2.3 identifier for direct NVD/CVE lookup (when available)
+    2. **security-incidents** knowledge base — a local snapshot of recent CVEs, advisories, malware, and threat intel from CISA, NVD, and other feeds
+
+    ## CRITICAL: Query Efficiency Rules
+    You have ~116 OT systems and many security incidents. You MUST minimize tool calls. Target: **under 10 tool calls** for any query, even broad cross-references. Never loop through systems one-by-one.
+
+    ### Step 1: Bulk-load with entity_lookup (not search)
+    For cross-referencing, use `knowledge_entity_lookup_*` with the `type` filter to retrieve entities in bulk:
+    - `knowledge_entity_lookup_transport-ot(type="System", limit=50)` — returns up to 50 systems with ALL their properties (vendor, os_firmware, known_software, cpe_id, protocol) in ONE call. Call twice with different offsets if needed to cover all systems.
+    - `knowledge_entity_lookup_security-incidents(type="Incident", limit=50)` — returns up to 50 incidents with severity, category, description in ONE call.
+    This gives you the full dataset to cross-reference **in your own reasoning** without further tool calls.
+
+    ### Step 2: Cross-reference in your reasoning, NOT with tools
+    Once you have the bulk data from entity_lookup:
+    - Scan the system properties (os_firmware, known_software, vendor, cpe_id) yourself
+    - Match against incident descriptions, CVE IDs, and affected products yourself
+    - Group affected systems by shared OS (e.g., all VxWorks systems), shared library (e.g., all OpenSSL users), or shared vendor
+    - **Do NOT make individual search/traverse calls per system.** The bulk data already contains everything you need.
+
+    ### Step 3: Targeted follow-ups only when needed
+    Only use additional tool calls for:
+    - `knowledge_search_*` — when you need deeper context on a specific CVE or system not fully covered by entity data
+    - `knowledge_traverse_*` — when exploring a specific entity's relationships (e.g., "what category does this system belong to?")
+    - `knowledge_graph_schema_*` — call ONCE at the start if you need to understand the graph structure
+
+    ### Cross-reference priority
+    Match by **cpe_id** first (most precise), then by **os_firmware** (e.g., a VxWorks CVE affects all VxWorks systems), then by **known_software** (e.g., an OpenSSL CVE affects all OpenSSL users), then by **vendor** and **protocol**.
+
+    ### Output guidelines
+    - Be specific: cite CVE IDs, vendor names, system names, CPE IDs, and severity levels
+    - Consider the transport sector context — which systems are affected, what protocols are involved, what the operational impact could be
+    - When a CVE targets an OS or library, list ALL affected transport systems (you already have them from the bulk load)
+  inputVariables:
+    - query
+
+tools:
+  - knowledge:transport-ot
+  - knowledge:security-incidents
+
+memory:
+  enabled: true
+  maxLines: 50
+  
+output:
+  format: text
+
+publish:
+  enabled: true
+  
+sampleQuestions:
+  - "Which of our SCADA systems run VxWorks and are there any recent CVEs affecting them?"
+  - "Cross-reference all systems using OpenSSL with the latest security advisories"
+  - "Map the attack surface for our rail signaling systems by vendor and protocol"

package/dist/templates/agents/web-engineer.agent.yaml

@@ -0,0 +1,99 @@
+name: web-engineer
+description: Web software engineer that builds and publishes web applications using sandbox shell and htmlhost
+version: "1.0.0"
+
+llm:
+  name: default
+  temperature: 0.3
+
+prompt:
+  system: |
+    You are an expert web software engineer. You build complete web applications and publish them live via htmlhost.
+
+    ## Tools
+
+    - **ask_user** — Ask the user a question and WAIT for their response. Always use this tool for questions
+    - **sandbox_file_read** — Read a file from /tmp with line numbers.
+    - **sandbox_file_write** — Create or overwrite a file in /tmp.
+    - **sandbox_file_edit** — Find and replace a unique string in a file.
+    - **sandbox_file_insert** — Insert new lines before or after a specific line number.
+    - **sandbox_file_replace_lines** — Replace a range of lines with new content.
+    - **sandbox_shell** — Execute shell commands in /tmp.
+    - **htmlhost_deploy** — Publish an HTML file to get a live URL.
+
+    ## Workflow
+
+    1. **Clarify** — Use **ask_user** to understand what the user wants before coding.
+    2. **Build** — Write a single self-contained HTML file at `/tmp/projects/<project-name>/index.html`. Inline all CSS in `<style>` and all JS in `<script>`. Use CDN links or base64 for external assets.
+    3. **Publish** — Deploy `index.html` via htmlhost. Share the live URL.
+    4. **Iterate** — Edit the same file, redeploy.
+
+    ## Rules
+
+    - Everything lives in ONE `index.html` file — inline styles, inline scripts.
+    - No build steps, no compilation, no multi-file projects.
+    - Keep it simple: one file in, one file deployed.
+
+    ## CDN Libraries
+
+    Pick the right tool for the job:
+
+    **Apps, dashboards, landing pages** — Tailwind CSS for layout and styling:
+    `<script src="https://cdn.tailwindcss.com"></script>`
+
+    **Apps with interactivity** — Alpine.js for reactive UI without a framework:
+    `<script src="https://cdn.jsdelivr.net/npm/alpinejs@3/dist/cdn.min.js" defer></script>`
+
+    **Charts and data viz** — Chart.js:
+    `<script src="https://cdn.jsdelivr.net/npm/chart.js@4/dist/chart.umd.min.js"></script>`
+
+    **3D, WebGL, games with 3D** — Three.js:
+    `<script src="https://cdn.jsdelivr.net/npm/three@0.170/build/three.module.min.js" type="module"></script>`
+
+    **2D games, animations, sprites** — Custom CSS + vanilla JS canvas. No framework needed.
+
+    **Icons** — Lucide:
+    `<script src="https://cdn.jsdelivr.net/npm/lucide@0.460/dist/umd/lucide.min.js"></script>`
+
+    **Animations and transitions** — GSAP:
+    `<script src="https://cdn.jsdelivr.net/npm/gsap@3/dist/gsap.min.js"></script>`
+
+    **Markdown rendering** — Marked:
+    `<script src="https://cdn.jsdelivr.net/npm/marked@15/marked.min.js"></script>`
+
+    Combine as needed (e.g., Tailwind + Alpine for an interactive app, Tailwind + Chart.js for a dashboard).
+
+    ## Memory
+
+    You have persistent memory. Track active projects, published URLs, and user preferences.
+    Check memory at session start for existing projects.
+
+  inputVariables:
+    - query
+
+tools:
+  - builtin:ask_user
+  - sandbox:shell
+  - sandbox:file_read
+  - sandbox:file_write
+  - sandbox:file_edit
+  - sandbox:file_insert
+  - sandbox:file_replace_lines
+  - mcp:htmlhost
+  - sandbox:web_fetch
+  - sandbox:web_search
+
+memory:
+  enabled: true
+  maxLines: 500
+
+output:
+  format: text
+
+sampleQuestions:
+  - "Build me a portfolio website with a dark theme and smooth animations"
+  - "Create a task manager app with local storage persistence"
+  - "Build a calculator app with a modern glassmorphism design"
+  - "Make a snake game with arrow key controls"
+  - "Build a tic-tac-toe game I can play against the computer"
+  - "Create a simple pong game vs the computer"

package/dist/templates/agents/web-pilot.agent.yaml

@@ -0,0 +1,58 @@
+name: web-pilot
+description: Browser agent — navigates, fills forms, clicks through pages using observe-act loop
+version: "1.0.0"
+
+llm:
+  name: default
+  temperature: 0.3
+
+prompt:
+  system: |
+    You are a web pilot controlling a Chromium browser. Complete tasks by observing and acting one step at a time.
+
+    ## Loop: Observe → Act → Observe
+
+    1. Navigate/observe to get page snapshot with element refs (e1, e2...)
+    2. Act using refs: click({ ref: "e3" }) or type({ ref: "e5", text: "hello" })
+    3. Observe to verify. Adapt if needed. Screenshot only as last resort.
+
+    ## Rules
+
+    - Use refs from latest observe output — they update each call
+    - Click by text when ref unavailable: click({ text: "Accept" })
+    - Never screenshot to verify — use observe
+    - Use web_search to find URLs — never guess
+    - Read textExcerpt in observe/navigate results first — it often has the data you need
+    - Use evaluate() with JS to extract structured data directly from the DOM
+    - Don't repeat failed tool calls — switch strategy immediately
+    - Prefer web_fetch for read-only pages where you just need content
+  inputVariables:
+    - task
+
+tools:
+  - sandbox:browser_observe
+  - sandbox:browser_navigate
+  - sandbox:browser_click
+  - sandbox:browser_type
+  - sandbox:browser_content
+  - sandbox:browser_evaluate
+  - sandbox:browser_screenshot
+  - sandbox:web_search
+#  - sandbox:web_fetch
+
+skills:
+  - web-pilot
+
+memory: true
+
+publish:
+  enabled: true
+  password: "test"
+
+output:
+  format: text
+
+sampleQuestions:
+  - "Go to GitHub trending and list today's top 5 repositories with their descriptions"
+  - "Search for 'best pasta recipe', open the top result, and extract the ingredients list"
+  - "Navigate to weather.com and tell me the 5-day forecast for London"

package/dist/templates/knowledge/music-store/LICENSE.md

@@ -0,0 +1,11 @@
+Chinook Database
+--------------------------------------
+Copyright (c) 2008-2024 Luis Rocha
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated 
+documentation files (the "Software"), to deal in the Software without restriction, including without limitation 
+the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and 
+to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/templates/knowledge/music-store.knowledge.yaml

@@ -0,0 +1,138 @@
+name: music-store
+description: Music store catalog and customer purchases — artists, albums, tracks, genres, and who bought what
+
+source:
+  type: database
+  connectionString: sqlite://knowledge/music-store/musicstore.sqlite
+  query: |
+    SELECT
+      t.TrackId       AS track_id,
+      t.Name          AS track_name,
+      COALESCE(t.Composer, '') AS composer,
+      t.Milliseconds  AS duration_ms,
+      t.UnitPrice     AS price,
+      a.AlbumId       AS album_id,
+      a.Title         AS album_title,
+      ar.ArtistId     AS artist_id,
+      ar.Name         AS artist_name,
+      g.GenreId       AS genre_id,
+      g.Name          AS genre_name,
+      NULL            AS customer_id,
+      NULL            AS customer_name,
+      NULL            AS customer_country,
+      t.Name || ' by ' || COALESCE(ar.Name, 'Unknown')
+        || ' on album ' || a.Title
+        || ' [' || COALESCE(g.Name, 'Unknown') || ']'
+        || ' (' || (t.Milliseconds / 60000) || ':' || printf('%02d', (t.Milliseconds % 60000) / 1000) || ')'
+        || CASE WHEN t.Composer IS NOT NULL AND t.Composer <> '' THEN '. Composed by ' || t.Composer ELSE '' END
+      AS content
+    FROM Track t
+    JOIN Album a ON t.AlbumId = a.AlbumId
+    JOIN Artist ar ON a.ArtistId = ar.ArtistId
+    LEFT JOIN Genre g ON t.GenreId = g.GenreId
+
+    UNION ALL
+
+    SELECT
+      t.TrackId,
+      t.Name,
+      COALESCE(t.Composer, ''),
+      t.Milliseconds,
+      il.UnitPrice,
+      a.AlbumId,
+      a.Title,
+      ar.ArtistId,
+      ar.Name,
+      g.GenreId,
+      g.Name,
+      c.CustomerId,
+      c.FirstName || ' ' || c.LastName,
+      c.Country,
+      c.FirstName || ' ' || c.LastName || ' (' || c.Country || ')'
+        || ' purchased ' || t.Name || ' by ' || COALESCE(ar.Name, 'Unknown')
+        || ' from album ' || a.Title
+        || ' [' || COALESCE(g.Name, 'Unknown') || ']'
+      AS content
+    FROM InvoiceLine il
+    JOIN Invoice i ON il.InvoiceId = i.InvoiceId
+    JOIN Customer c ON i.CustomerId = c.CustomerId
+    JOIN Track t ON il.TrackId = t.TrackId
+    JOIN Album a ON t.AlbumId = a.AlbumId
+    JOIN Artist ar ON a.ArtistId = ar.ArtistId
+    LEFT JOIN Genre g ON t.GenreId = g.GenreId
+  contentColumn: content
+  metadataColumns:
+    - track_id
+    - track_name
+    - composer
+    - album_id
+    - album_title
+    - artist_id
+    - artist_name
+    - genre_id
+    - genre_name
+    - customer_id
+    - customer_name
+    - customer_country
+
+loader:
+  type: text
+
+splitter:
+  type: character
+  chunkSize: 500
+  chunkOverlap: 0
+
+embedding: default
+
+search:
+  defaultK: 10
+
+graph:
+  directMapping:
+    entities:
+      - type: Artist
+        idColumn: artist_id
+        nameColumn: artist_name
+        properties: []
+      - type: Album
+        idColumn: album_id
+        nameColumn: album_title
+        properties: []
+      - type: Track
+        idColumn: track_id
+        nameColumn: track_name
+        properties:
+          - composer
+          - duration_ms
+          - price
+      - type: Genre
+        idColumn: genre_id
+        nameColumn: genre_name
+        properties: []
+      - type: Customer
+        idColumn: customer_id
+        nameColumn: customer_name
+        properties:
+          - customer_country
+    relationships:
+      - type: PERFORMED_BY
+        source: Album
+        target: Artist
+        sourceIdColumn: album_id
+        targetIdColumn: artist_id
+      - type: ON_ALBUM
+        source: Track
+        target: Album
+        sourceIdColumn: track_id
+        targetIdColumn: album_id
+      - type: HAS_GENRE
+        source: Track
+        target: Genre
+        sourceIdColumn: track_id
+        targetIdColumn: genre_id
+      - type: PURCHASED
+        source: Customer
+        target: Track
+        sourceIdColumn: customer_id
+        targetIdColumn: track_id

package/dist/templates/knowledge/org-chart/personnel.csv

@@ -0,0 +1,21 @@
+employee_id,employee_name,title,department_id,department_name,manager_id,manager_name,location,hire_date,status,review_period,rating,strengths,areas_for_growth,summary,email,phone,ssn,salary,date_of_birth,home_address
+E001,Sarah Chen,Chief Executive Officer,D01,Executive,,,,2018-03-15,active,2025-H1,5,Visionary leadership and strategic planning,Delegation to new VPs,Exceptional year driving company growth from 50 to 120 employees. Led Series B fundraising and established international partnerships.,sarah.chen@orchacorp.com,415-555-0101,319-42-8817,285000,1979-06-12,"742 Presidio Ave, San Francisco, CA 94115"
+E002,James Rodriguez,VP of Engineering,D02,Engineering,E001,Sarah Chen,San Francisco,2019-01-10,active,2025-H1,5,Technical architecture and team scaling,"Cross-functional communication, documentation",Built engineering org from 8 to 35 engineers. Architected migration to microservices reducing latency by 40%.,james.rodriguez@orchacorp.com,415-555-0102,284-61-3390,245000,1984-11-03,"1580 Clay St, San Francisco, CA 94109"
+E003,Priya Patel,VP of Product,D03,Product,E001,Sarah Chen,San Francisco,2019-06-01,active,2025-H1,4,Customer empathy and roadmap prioritization,Data-driven decision making,Successfully launched 3 major product lines. Needs to leverage analytics more in feature prioritization.,priya.patel@orchacorp.com,415-555-0103,523-18-9044,235000,1986-02-28,"2901 Sacramento St, San Francisco, CA 94115"
+E004,Marcus Thompson,VP of Sales,D04,Sales,E001,Sarah Chen,New York,2020-02-01,active,2025-H1,4,Relationship building and enterprise deals,Pipeline forecasting accuracy,Exceeded revenue targets by 22%. Enterprise segment grew 45% YoY. Forecasting still needs improvement.,marcus.thompson@orchacorp.com,212-555-0104,147-80-5523,240000,1982-09-17,"315 W 70th St Apt 4B, New York, NY 10023"
+E005,Lisa Wang,VP of People,D05,People & Culture,E001,Sarah Chen,San Francisco,2020-09-01,active,2025-H1,4,Culture building and talent acquisition,Retention strategy for senior engineers,Reduced time-to-hire by 30%. Employee satisfaction scores at 4.2/5. Attrition in senior engineering needs attention.,lisa.wang@orchacorp.com,415-555-0105,638-29-7741,220000,1985-04-05,"1122 Fillmore St, San Francisco, CA 94115"
+E006,David Kim,Senior Staff Engineer,D02,Engineering,E002,James Rodriguez,San Francisco,2019-03-20,active,2025-H1,5,System design and mentoring junior engineers,Public speaking and conference presence,Led redesign of payment processing system handling $2M daily transactions. Mentored 6 engineers to promotion.,david.kim@orchacorp.com,415-555-0106,471-53-6628,195000,1988-07-22,"560 Haight St Apt 3, San Francisco, CA 94117"
+E007,Anna Kowalski,Staff Engineer,D02,Engineering,E002,James Rodriguez,Remote,2020-01-15,active,2025-H1,4,Backend performance optimization,Frontend skills and full-stack contribution,Optimized database queries reducing P99 latency from 800ms to 120ms. Should broaden full-stack capabilities.,anna.kowalski@orchacorp.com,503-555-0107,362-44-1187,180000,1990-12-14,"4428 NE Glisan St, Portland, OR 97213"
+E008,Carlos Mendez,Senior Engineer,D02,Engineering,E006,David Kim,San Francisco,2021-04-01,active,2025-H1,4,API design and testing practices,Ownership of larger projects independently,Designed REST API v3 adopted by 200+ integrators. Ready for staff-level scope with more independent ownership.,carlos.mendez@orchacorp.com,415-555-0108,519-67-2243,165000,1992-03-30,"783 Valencia St Apt 2, San Francisco, CA 94110"
+E009,Emily Foster,Senior Engineer,D02,Engineering,E006,David Kim,Remote,2021-07-15,active,2025-H1,3,Code quality and thorough reviews,Delivery speed and prioritization,Excellent code quality but missed 2 sprint deadlines. Needs to balance perfectionism with delivery velocity.,emily.foster@orchacorp.com,720-555-0109,283-71-5596,160000,1991-08-19,"1247 Pearl St Apt 5, Boulder, CO 80302"
+E010,Raj Gupta,Engineer,D02,Engineering,E007,Anna Kowalski,San Francisco,2022-06-01,active,2025-H1,4,Quick learner with strong algorithms background,Production debugging and operational skills,Shipped 3 features in first year. Strong CS fundamentals. Needs more exposure to production operations and on-call.,raj.gupta@orchacorp.com,415-555-0110,612-38-9907,135000,1996-01-11,"2250 Market St Apt 8, San Francisco, CA 94114"
+E011,Sophie Martin,Senior Product Manager,D03,Product,E003,Priya Patel,San Francisco,2020-03-01,active,2025-H1,4,User research and feature specification,Stakeholder management across engineering teams,Led mobile app redesign increasing DAU by 35%. Should improve collaboration with engineering leads on technical constraints.,sophie.martin@orchacorp.com,415-555-0111,745-22-3318,175000,1989-05-26,"1901 Union St, San Francisco, CA 94123"
+E012,Tom Bradley,Product Manager,D03,Product,E003,Priya Patel,Remote,2021-11-01,active,2025-H1,3,Competitive analysis and market research,Defining measurable success metrics for features,Good market intuition but feature specs lack clear KPIs. Needs to define measurable outcomes before development starts.,tom.bradley@orchacorp.com,312-555-0112,458-93-1176,145000,1993-10-08,"3547 N Clark St Apt 2F, Chicago, IL 60657"
+E013,Rachel Green,Enterprise Account Executive,D04,Sales,E004,Marcus Thompson,New York,2020-08-01,active,2025-H1,5,Closing complex enterprise deals,Mentoring junior sales reps,Closed 3 deals over $500K including the Globex contract. Top performer in the sales organization.,rachel.green@orchacorp.com,212-555-0113,391-56-8842,170000,1987-12-01,"225 E 57th St Apt 12A, New York, NY 10022"
+E014,Michael Scott,Account Executive,D04,Sales,E004,Marcus Thompson,New York,2021-03-15,active,2025-H1,3,Enthusiasm and client rapport,Following structured sales methodology and CRM discipline,Strong relationship builder but pipeline management is inconsistent. CRM data entry needs significant improvement.,michael.scott@orchacorp.com,212-555-0114,267-48-5531,130000,1990-04-15,"482 W 43rd St Apt 6C, New York, NY 10036"
+E015,Nina Petrov,Sales Development Rep,D04,Sales,E013,Rachel Green,New York,2022-09-01,active,2025-H1,4,Cold outreach and lead qualification,Transitioning from SDR to AE conversations,Generated 45 qualified opportunities in H1. Shows strong AE potential and is ready for promotion consideration.,nina.petrov@orchacorp.com,212-555-0115,184-72-6694,95000,1997-07-20,"159 E 3rd St Apt 4D, New York, NY 10009"
+E016,Alex Rivera,Senior Designer,D03,Product,E003,Priya Patel,San Francisco,2020-05-15,active,2025-H1,4,UI/UX design and design system maintenance,User research methodology and testing,Redesigned the component library saving 200+ engineering hours. Should deepen skills in user testing and research.,alex.rivera@orchacorp.com,415-555-0116,843-15-2279,155000,1991-11-30,"1645 Pacific Ave Apt 7, San Francisco, CA 94109"
+E017,Jordan Lee,DevOps Engineer,D02,Engineering,E002,James Rodriguez,Remote,2021-01-10,active,2025-H1,4,CI/CD pipelines and infrastructure automation,Security best practices and compliance,Reduced deployment time from 45min to 8min. Built monitoring dashboards adopted by all teams. Should pursue security certifications.,jordan.lee@orchacorp.com,206-555-0117,572-39-4481,155000,1993-06-09,"831 NW Market St Apt 5, Seattle, WA 98107"
+E018,Maria Santos,People Operations Manager,D05,People & Culture,E005,Lisa Wang,San Francisco,2021-06-01,active,2025-H1,4,Process improvement and employee onboarding,Conflict resolution and difficult conversations,Revamped onboarding reducing ramp-up time by 25%. Needs coaching on handling performance improvement plans.,maria.santos@orchacorp.com,415-555-0118,926-41-3357,130000,1994-02-14,"2380 California St, San Francisco, CA 94115"
+E019,Chris Evans,Junior Engineer,D02,Engineering,E007,Anna Kowalski,San Francisco,2023-01-15,active,2025-H1,3,Eagerness to learn and strong collaboration,Code architecture and design patterns,Good progress for first year. Completes assigned tasks well. Needs to develop ability to break down larger problems independently.,chris.evans@orchacorp.com,415-555-0119,715-28-8863,105000,1998-09-03,"440 Divisadero St Apt 2, San Francisco, CA 94117"
+E020,Diana Torres,Marketing Manager,D04,Sales,E004,Marcus Thompson,Remote,2021-08-01,active,2025-H1,4,Content strategy and demand generation,Marketing analytics and attribution modeling,Grew inbound leads by 60% through content marketing. Should develop stronger analytics capabilities for ROI measurement.,diana.torres@orchacorp.com,305-555-0120,438-66-1192,140000,1992-08-27,"1023 Brickell Ave Apt 3102, Miami, FL 33131"

package/dist/templates/knowledge/org-chart.knowledge.yaml

@@ -0,0 +1,53 @@
+name: org-chart
+description: Company org chart with personnel directory and performance reviews
+
+source:
+  type: file
+  path: knowledge/org-chart/personnel.csv
+
+loader:
+  type: csv
+
+splitter:
+  type: character
+  chunkSize: 800
+  chunkOverlap: 0
+
+embedding: default
+
+search:
+  defaultK: 5
+
+graph:
+  directMapping:
+    entities:
+      - type: Department
+        idColumn: department_id
+        nameColumn: department_name
+        properties: []
+      - type: Employee
+        idColumn: employee_id
+        nameColumn: employee_name
+        properties:
+          - title
+          - location
+          - hire_date
+          - status
+          - rating
+          - strengths
+          - areas_for_growth
+          - email
+          - phone
+          - salary
+          - date_of_birth
+    relationships:
+      - type: WORKS_IN
+        source: Employee
+        target: Department
+        sourceIdColumn: employee_id
+        targetIdColumn: department_id
+      - type: REPORTS_TO
+        source: Employee
+        target: Employee
+        sourceIdColumn: employee_id
+        targetIdColumn: manager_id

package/dist/templates/knowledge/pet-store.knowledge.yaml

@@ -0,0 +1,81 @@
+name: pet-store
+description: Pet store inventory with species, breeds, pets, and supplies
+
+source:
+  type: database
+  connectionString: sqlite://knowledge/pet-store/pet-store.db
+  query: |
+    SELECT
+      p.id       AS pet_id,
+      p.name     AS pet_name,
+      p.age,
+      p.price,
+      p.status,
+      p.description AS content,
+      b.id       AS breed_id,
+      b.name     AS breed_name,
+      b.size,
+      b.temperament,
+      b.avg_lifespan,
+      s.id       AS species_id,
+      s.name     AS species_name
+    FROM pets p
+    JOIN breeds b ON p.breed_id = b.id
+    JOIN species s ON b.species_id = s.id
+  contentColumn: content
+  metadataColumns:
+    - pet_id
+    - pet_name
+    - breed_name
+    - species_name
+    - status
+    - price
+
+loader:
+  type: text
+
+splitter:
+  type: character
+  chunkSize: 500
+  chunkOverlap: 50
+
+embedding: default
+
+search:
+  defaultK: 5
+
+reindex:
+  schedule: "0 * * * *"          # Re-index every hour
+
+graph:
+  directMapping:
+    entities:
+      - type: Species
+        idColumn: species_id
+        nameColumn: species_name
+        properties: []
+      - type: Breed
+        idColumn: breed_id
+        nameColumn: breed_name
+        properties:
+          - size
+          - temperament
+          - avg_lifespan
+      - type: Pet
+        idColumn: pet_id
+        nameColumn: pet_name
+        properties:
+          - age
+          - price
+          - status
+    relationships:
+      - type: IS_BREED
+        source: Breed
+        target: Species
+        sourceIdColumn: breed_id
+        targetIdColumn: species_id
+      - type: BELONGS_TO
+        source: Pet
+        target: Breed
+        sourceIdColumn: pet_id
+        targetIdColumn: breed_id