anchi-toolkit 1.2.0 → 1.2.1

package/dist/.cursor/failure-modes.yaml

@@ -0,0 +1,148 @@
+# Failure Modes & Self-Restraint
+# When AI must stop, ask, or escalate
+# ═══════════════════════════════════════════════════════════════
+
+# ═══════════════════════════════════════════════════════════════
+# STOP CONDITIONS
+# ═══════════════════════════════════════════════════════════════
+
+stop_conditions:
+  # Confidence too low
+  low_confidence:
+    condition: "confidence < 0.5"
+    action: ask_user
+    message: |
+      ⚠️ I'm not confident about this approach.
+      My confidence level: {confidence}
+      
+      Options:
+      1. Provide more context
+      2. Try a different approach
+      3. Cancel
+
+  # Missing context
+  missing_context:
+    condition: "required_context_missing"
+    action: request_info
+    message: |
+      ❓ I need more information:
+      - {missing_items}
+      
+      Please provide the above, or I can make assumptions.
+
+  # Architecture violation
+  architecture_violation:
+    condition: "violates_preset_contract"
+    action: stop
+    message: |
+      🛑 This would violate the project architecture.
+      
+      Preset: {preset}
+      Rule violated: {rule}
+      
+      Options:
+      1. Modify approach to comply
+      2. Request architecture override (requires lead approval)
+      3. Cancel
+
+  # Security concern
+  security_concern:
+    condition: "potential_security_risk"
+    action: escalate
+    escalate_to: security-auditor
+    message: |
+      🔒 Security concern detected.
+      Escalating to security-auditor for review.
+
+  # Outside expertise
+  outside_expertise:
+    condition: "agent_boundary_exceeded"
+    action: escalate
+    message: |
+      🔄 This requires expertise I don't have.
+      Escalating to: {appropriate_agent}
+
+# ═══════════════════════════════════════════════════════════════
+# SELF-RESTRAINT RULES (Never do these)
+# ═══════════════════════════════════════════════════════════════
+
+restraints:
+  # Credentials & Secrets
+  - id: R001
+    name: "Never guess credentials"
+    triggers: ["password", "api_key", "secret", "token"]
+    action: "Always ask user for credentials, never generate"
+    
+  - id: R002
+    name: "Never expose secrets"
+    triggers: ["console.log", "print", "response.json"]
+    check: "Does output contain sensitive data?"
+    action: "Sanitize before output"
+
+  # File Operations
+  - id: R003
+    name: "Never delete without confirmation"
+    triggers: ["rm", "delete", "remove", "drop"]
+    action: "Require explicit user confirmation"
+    
+  - id: R004
+    name: "Never modify .env without confirmation"
+    triggers: [".env", "environment"]
+    action: "Show changes and ask for approval"
+
+  # Deployment
+  - id: R005
+    name: "Never deploy without approval"
+    triggers: ["deploy", "publish", "release", "npm publish"]
+    action: "Require explicit lead approval"
+    
+  - id: R006
+    name: "Never push to production"
+    triggers: ["production", "main branch", "master branch"]
+    action: "Stop and require multi-person approval"
+
+  # Security
+  - id: R007
+    name: "Never skip security review for auth/payment"
+    triggers: ["auth", "login", "payment", "checkout"]
+    action: "Always engage security-auditor"
+    
+  - id: R008
+    name: "Never add backdoors"
+    triggers: ["bypass", "skip auth", "admin access"]
+    action: "Stop and explain security implications"
+
+# ═══════════════════════════════════════════════════════════════
+# WARNING CONDITIONS (Proceed with caution)
+# ═══════════════════════════════════════════════════════════════
+
+warnings:
+  - condition: "0.5 <= confidence < 0.7"
+    message: "⚠️ Proceeding with medium confidence. Review recommended."
+    auto_enable_review: true
+    
+  - condition: "no_tests_for_new_code"
+    message: "⚠️ No tests added for new functionality."
+    suggest: "/test to add coverage"
+    
+  - condition: "large_change"
+    threshold: "files > 10 OR lines > 500"
+    message: "⚠️ Large change detected. Breaking into phases recommended."
+
+# ═══════════════════════════════════════════════════════════════
+# RECOVERY ACTIONS
+# ═══════════════════════════════════════════════════════════════
+
+recovery:
+  on_error:
+    - log_error_to_audit
+    - suggest_rollback
+    - offer_debug_session
+    
+  on_user_cancel:
+    - save_progress_to_memory
+    - log_cancellation_reason
+    
+  on_escalation:
+    - transfer_context_to_new_agent
+    - log_escalation_reason

package/dist/.cursor/hooks/dev-rules-reminder.cjs

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+
+/**
+ * Development Rules Reminder - PreToolUse Hook
+ *
+ * Injects modularization reminders before Write/Edit operations.
+ * Uses transcript checking to inject only once per ~50 messages for token efficiency.
+ *
+ * Exit Codes:
+ *   0 - Success (non-blocking, allows continuation)
+ */
+
+const fs = require('fs');
+const os = require('os');
+
+/**
+ * Check if reminder was recently injected by scanning transcript
+ */
+function wasRecentlyInjected(transcriptPath) {
+  try {
+    if (!transcriptPath || !fs.existsSync(transcriptPath)) {
+      // Transcript doesn't exist - inject reminder
+      return false;
+    }
+
+    const transcript = fs.readFileSync(transcriptPath, 'utf-8');
+    const lines = transcript.split('\n');
+
+    // Check last 50 lines for reminder marker
+    const recentLines = lines.slice(-50);
+    const wasInjected = recentLines.some(line => line.includes('**[IMPORTANT]** Consider Modularization'));
+
+    return wasInjected;
+
+  } catch (error) {
+    // If we can't read transcript, assume not injected (fail-open)
+    return false;
+  }
+}
+
+/**
+ * Main hook execution
+ */
+async function main() {
+  try {
+    // Read hook payload from stdin
+    const stdin = fs.readFileSync(0, 'utf-8').trim();
+
+    if (!stdin) {
+      process.exit(0);
+    }
+
+    const payload = JSON.parse(stdin);
+    const toolName = payload.tool_name;
+
+    // Check if reminder was recently injected
+    if (wasRecentlyInjected(payload.transcript_path)) {
+      process.exit(0);
+    }
+
+    const memUsed = Math.round(process.memoryUsage().heapUsed / 1024 / 1024);
+    const memTotal = Math.round(os.totalmem() / 1024 / 1024);
+    const memPercent = Math.round((memUsed / memTotal) * 100);
+
+    const cpuUsage = Math.round((process.cpuUsage().user / 1000000) * 100);
+    const cpuSystem = Math.round((process.cpuUsage().system / 1000000) * 100);
+
+    const reminder = [
+      `## Current environment`,
+      `- Date time: ${new Date().toLocaleString()}`,
+      `- Timezone: ${Intl.DateTimeFormat().resolvedOptions().timeZone}`,
+      `- Working directory: ${process.cwd()}`,
+      `- OS: ${process.platform}`,
+      `- User: ${process.env.USERNAME}`,
+      `- Locale: ${process.env.LANG}`,
+      `- Memory usage: ${memUsed}MB/${memTotal}MB (${memPercent}%)`,
+      `- CPU usage: ${cpuUsage}% user / ${cpuSystem}% system`,
+      `- IMPORTANT: Include these environment information when prompting subagents to perform tasks.`,
+      ``,
+      `## Rules`,
+      `- Read and follow development rules: ".cursor/workflows/development-rules.md"`,
+      `- Read and follow documentation management: ".cursor/workflows/documentation-management.md"`,
+      `- Markdown files are organized in: Plans → "plans/" directory, Docs → "docs/" directory`,
+      `- Report markdown files in the same directory as the plan file`,
+      `- IMPORTANT: DO NOT create markdown files out of "plans/" or "docs/" directories UNLESS the user explicitly requests it.`,
+      `- Activate skills: Run \`python .cursor/scripts/generate_catalogs.py --skills\` to generate a skills catalog and analyze it, then activate the relevant skills that are needed for the task during the process.`,
+      `- Execute commands: Run \`python .cursor/scripts/generate_catalogs.py --commands\` to generate a commands catalog and analyze it, then execute the relevant SlashCommands that are needed for the task during the process.`,
+      `- When skills' scripts are failed to execute, always fix them and run again, repeat until success.`,
+      `- Follow **YANGI (You Aren't Gonna Need It) - KISS (Keep It Simple, Stupid) - DRY (Don't Repeat Yourself)** principles`,
+      `- Sacrifice grammar for the sake of concision when writing reports.`,
+      `- In reports, list any unresolved questions at the end, if any.`,
+      `- IMPORTANT: Ensure token consumption efficiency while maintaining high quality.`,
+      `- IMPORTANT: Include these rules when prompting subagents to perform tasks.`,
+      ``,
+      `## **[IMPORTANT] Consider Modularization:**`,
+      `- Check existing modules before creating new`,
+      `- Analyze logical separation boundaries (functions, classes, concerns)`,
+      `- Use kebab-case naming with descriptive names, it's fine if the file name is long because this ensures file names are self-documenting for LLM tools (Grep, Glob, Search)`,
+      `- Write descriptive code comments`,
+      `- After modularization, continue with main task`,
+      `- When not to modularize: Markdown files, plain text files, bash scripts, configuration files, environment variables files, etc.`,
+      `- IMPORTANT: Include these considerations when prompting subagents to perform tasks.`,
+    ].join('\n');
+
+    console.log(reminder);
+    process.exit(0);
+
+  } catch (error) {
+    // Fail-open: log error but allow operation to continue
+    console.error(`Dev rules hook error: ${error.message}`);
+    process.exit(0);
+  }
+}
+
+main();

package/dist/.cursor/hooks/dev-rules-reminder.js

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+
+/**
+ * Development Rules Reminder - PreToolUse Hook
+ *
+ * Injects modularization reminders before Write/Edit operations.
+ * Uses transcript checking to inject only once per ~50 messages for token efficiency.
+ *
+ * Exit Codes:
+ *   0 - Success (non-blocking, allows continuation)
+ */
+
+import fs from 'fs';
+import os from 'os';
+
+/**
+ * Check if reminder was recently injected by scanning transcript
+ */
+function wasRecentlyInjected(transcriptPath) {
+  try {
+    if (!transcriptPath || !fs.existsSync(transcriptPath)) {
+      // Transcript doesn't exist - inject reminder
+      return false;
+    }
+
+    const transcript = fs.readFileSync(transcriptPath, 'utf-8');
+    const lines = transcript.split('\n');
+
+    // Check last 50 lines for reminder marker
+    const recentLines = lines.slice(-50);
+    const wasInjected = recentLines.some(line => line.includes('**[IMPORTANT]** Consider Modularization'));
+
+    return wasInjected;
+
+  } catch (error) {
+    // If we can't read transcript, assume not injected (fail-open)
+    return false;
+  }
+}
+
+/**
+ * Main hook execution
+ */
+async function main() {
+  try {
+    // Read hook payload from stdin
+    const stdin = fs.readFileSync(0, 'utf-8').trim();
+
+    if (!stdin) {
+      process.exit(0);
+    }
+
+    const payload = JSON.parse(stdin);
+    const toolName = payload.tool_name;
+
+    // Check if reminder was recently injected
+    if (wasRecentlyInjected(payload.transcript_path)) {
+      process.exit(0);
+    }
+
+    const memUsed = Math.round(process.memoryUsage().heapUsed / 1024 / 1024);
+    const memTotal = Math.round(os.totalmem() / 1024 / 1024);
+    const memPercent = Math.round((memUsed / memTotal) * 100);
+
+    const cpuUsage = Math.round((process.cpuUsage().user / 1000000) * 100);
+    const cpuSystem = Math.round((process.cpuUsage().system / 1000000) * 100);
+
+    const reminder = [
+      `## Current environment`,
+      `- Date time: ${new Date().toLocaleString()}`,
+      `- Timezone: ${Intl.DateTimeFormat().resolvedOptions().timeZone}`,
+      `- Working directory: ${process.cwd()}`,
+      `- OS: ${process.platform}`,
+      `- User: ${process.env.USERNAME}`,
+      `- Locale: ${process.env.LANG}`,
+      `- Memory usage: ${memUsed}MB/${memTotal}MB (${memPercent}%)`,
+      `- CPU usage: ${cpuUsage}% user / ${cpuSystem}% system`,
+      `- IMPORTANT: Include these environment information when prompting subagents to perform tasks.`,
+      ``,
+      `## Rules`,
+      `- Read and follow development rules: ".cursor/workflows/development-rules.md"`,
+      `- Read and follow documentation management: ".cursor/workflows/documentation-management.md"`,
+      `- Markdown files are organized in: Plans → "plans/" directory, Docs → "docs/" directory`,
+      `- Report markdown files in the same directory as the plan file`,
+      `- IMPORTANT: DO NOT create markdown files out of "plans/" or "docs/" directories UNLESS the user explicitly requests it.`,
+      `- Activate skills: Run \`python .cursor/scripts/generate_catalogs.py --skills\` to generate a skills catalog and analyze it, then activate the relevant skills that are needed for the task during the process.`,
+      `- Execute commands: Run \`python .cursor/scripts/generate_catalogs.py --commands\` to generate a commands catalog and analyze it, then execute the relevant SlashCommands that are needed for the task during the process.`,
+      `- When skills' scripts are failed to execute, always fix them and run again, repeat until success.`,
+      `- Follow **YANGI (You Aren't Gonna Need It) - KISS (Keep It Simple, Stupid) - DRY (Don't Repeat Yourself)** principles`,
+      `- Sacrifice grammar for the sake of concision when writing reports.`,
+      `- In reports, list any unresolved questions at the end, if any.`,
+      `- IMPORTANT: Ensure token consumption efficiency while maintaining high quality.`,
+      `- IMPORTANT: Include these rules when prompting subagents to perform tasks.`,
+      ``,
+      `## **[IMPORTANT] Consider Modularization:**`,
+      `- Check existing modules before creating new`,
+      `- Analyze logical separation boundaries (functions, classes, concerns)`,
+      `- Use kebab-case naming with descriptive names, it's fine if the file name is long because this ensures file names are self-documenting for LLM tools (Grep, Glob, Search)`,
+      `- Write descriptive code comments`,
+      `- After modularization, continue with main task`,
+      `- When not to modularize: Markdown files, plain text files, bash scripts, configuration files, environment variables files, etc.`,
+      `- IMPORTANT: Include these considerations when prompting subagents to perform tasks.`,
+    ].join('\n');
+
+    console.log(reminder);
+    process.exit(0);
+
+  } catch (error) {
+    // Fail-open: log error but allow operation to continue
+    console.error(`Dev rules hook error: ${error.message}`);
+    process.exit(0);
+  }
+}
+
+main();