auramaxx 0.0.20 → 0.1.1

package/docs/legacy/aura-file.md

@@ -1,48 +0,0 @@
-# `.aura` File Format
-
-`.aura` maps environment variable names to agent credential fields.
-
-## Syntax
-
-```ini
-# comment
-ENV_NAME=credentialName/field
-OTHER_ENV=@agentName/credentialName/field
-```
-
-Rules:
-
-- one mapping per line
-- comments start with `#`
-- env var names are validated (must be shell-safe)
-- `@agent/...` form selects a specific agent mapping
-
-## Examples
-
-```ini
-DATABASE_URL=postgres-prod/url
-OPENAI_API_KEY=openai-prod/api_key
-GITHUB_TOKEN=@agent/github/token
-```
-
-## Usage
-
-```bash
-auramaxx env check
-auramaxx env -- npm run dev
-auramaxx env inject
-```
-
-Migration helper:
-
-```bash
-auramaxx env init --from .env
-# or during setup
-auramaxx init --from-dotenv
-```
-
-## Security notes
-
-- `env inject` writes `.env` with mode `0600`
-- `shell-hook` requires explicit allowlist per project
-- avoid committing generated `.env`

package/docs/legacy/external/HOW_TO_AURAMAXX/README.md

@@ -1,45 +0,0 @@
-# HOW TO AURAMAXX
-
-This is the single external entrypoint for understanding and using AuraMaxx.
-
-## Fast start
-
-### First run
-
-```bash
-npx auramaxx
-npx auramaxx status
-```
-
-Open `http://localhost:4747/`, create/unlock your agent, and add one credential.
-
-### Returning run
-
-- Service already running: `npx auramaxx status`
-- Service not running: `npx auramaxx && npx auramaxx status`
-
-If using global install and prompted to update:
-
-```bash
-npm i -g auramaxx
-```
-
-## Core concepts (condensed)
-
-- **Auth:** access is explicit and scoped (not just process identity).
-- **Safety:** least-privilege defaults + approval flows.
-- **Understanding Aura:** local-first credential runtime for humans + agents.
-- **Security transparency:** source is auditable on GitHub: <https://github.com/Aura-Industry/auramaxx>
-
-## Main usage path
-
-- **Start here:** [WORKING_WITH_SECRETS.md](../../../how-to-auramaxx/WORKING_WITH_SECRETS.md)
-- Then configure MCP clients: [AGENT_SETUP.md](../../../quickstart/AGENT_SETUP.md)
-
-## Next references
-
-- [CLI](../../../ai-agents-workflow/CLI.md)
-- [MCP](../../../ai-agents-workflow/MCP.md)
-- [Auth + permissions](../../../ai-agents-workflow/AUTH.md)
-- [Security model](../../../why-auramaxx/security.md)
-- [Share secret guide](../../../how-to-auramaxx/share-secret.md)

package/docs/legacy/external/README.md

@@ -1,7 +0,0 @@
-# Legacy External Docs
-
-- [Getting Started](./getting-started.md)
-- [Overview](./overview.md)
-- [Persona Paths](./persona-paths.md)
-- [Why Aura](./why-aura.md)
-- [HOW_TO_AURAMAXX](./HOW_TO_AURAMAXX/README.md)

package/docs/legacy/external/getting-started.md

@@ -1,10 +0,0 @@
-# Getting Started
-
-External getting-started now routes through **HOW TO AURAMAXX**.
-
-## Start here
-
-- [HOW TO AURAMAXX](./HOW_TO_AURAMAXX/README.md)
-- [SETUP](../../quickstart/AGENT_SETUP.md)
-
-For core bootstrap commands, use the root [README](../../README.md).

package/docs/legacy/external/overview.md

@@ -1,19 +0,0 @@
-# Aura Overview
-
-AuraMaxx is a local credential agent and agent-safe secret runtime.
-
-It helps you store secrets once, use them across CLI/UI/agents, and enforce least-privilege access by default.
-
-## External docs entrypoint
-
-- Start here: [HOW TO AURAMAXX](./HOW_TO_AURAMAXX/README.md)
-- Main usage path: [SETUP](../../quickstart/AGENT_SETUP.md)
-
-## 2-minute proof
-
-```bash
-npx auramaxx
-npx auramaxx status
-```
-
-Then open `http://localhost:4747/`, create your agent, and add one credential.

package/docs/legacy/external/persona-paths.md

@@ -1,7 +0,0 @@
-# Deprecated: Persona Paths
-
-Persona-based external navigation has been replaced by tool-first usage paths.
-
-Use:
-- [HOW TO AURAMAXX](./HOW_TO_AURAMAXX/README.md)
-- [SETUP](../../quickstart/AGENT_SETUP.md)

package/docs/legacy/external/why-aura.md

@@ -1,7 +0,0 @@
-# Deprecated: Why Aura
-
-This page has been consolidated into **HOW TO AURAMAXX**.
-
-Use:
-- [HOW TO AURAMAXX](./HOW_TO_AURAMAXX/README.md)
-- [SETUP](../../quickstart/AGENT_SETUP.md)

package/docs/legacy/specs/README.md

@@ -1,6 +0,0 @@
-# Legacy Specs
-
-- [Aura Open Protocol](./aura-open-protocol.md)
-- [Aura Provider Plugin](./aura-provider-plugin.md)
-- [Aura Registry Model](./aura-registry-model.md)
-- [Task 256 Create/Edit UI](./task-256-create-edit-ui.md)

package/docs/legacy/specs/aura-open-protocol.md

@@ -1,61 +0,0 @@
-# Aura Open Protocol (.aura) v1
-
-## Scope
-Vendor-neutral `.aura` parsing + resolution contract.
-
-## Grammar (v1)
-- UTF-8, optional BOM ignored, CRLF normalized to LF.
-- Statements: blank, full-line comment (`#`), assignment (`KEY = VALUE`).
-- Key regex: `^[A-Z][A-Z0-9_]{0,127}$`.
-- Duplicate keys: `E_PARSE_DUPLICATE_KEY`.
-- Value forms:
-  - bare string
-  - quoted string (`\"`, `\\`, `\n`, `\r`, `\t`, `\uXXXX`)
-  - provider ref `${provider://resource?query}`
-  - var ref `${KEY}`
-- Inline trailing comments are not supported in v1.
-
-## Parse output contract
-`parse(text)` returns:
-- `version: "aura.v1"`
-- `nodes[]` with required `type` and `loc`
-- assignment nodes also include `keyRaw`, `keyNorm`, `valueType`, `valueRaw`, `valueNorm`
-
-## Validation + normalization contract
-`validate(doc)` returns deterministic lexical ordering by key:
-- `normalized.entries[]`
-- entry fields: `key`, `value`, `origin`, `dependencies`, optional `providerRef`
-
-## Resolver determinism
-- Fixed error precedence:
-  1) parse
-  2) validate
-  3) reference graph
-  4) provider resolution
-  5) merge/output policy
-- Bounded limits:
-  - max depth: 32 (`E_RESOLVE_DEPTH_EXCEEDED`)
-  - provider budget: 256 (`E_RESOLVE_PROVIDER_BUDGET`)
-  - default provider timeout: 5000ms
-
-## Compatibility matrix
-- Supported baseline: spec 1.x + parser 1.x + provider API 1.x
-- Unknown major spec: `E_COMPAT_SPEC_UNSUPPORTED`
-- Provider API major mismatch: `E_COMPAT_PROVIDER_API`
-
-## Trust/signature model (v1)
-- JCS canonicalization for signed payload.
-- Signature algorithm: `ed25519` only.
-- Required envelope fields:
-  - `algorithm`, `keyId`, `sig`, `createdAt`, `payloadSha256`
-
-## Error envelope
-All failures should expose:
-- `code`, `category`, `severity`, `message`, `retryable`
-- optional `details`, `loc`
-
-Code families:
-- `E_PARSE_*`, `E_VALIDATE_*`, `E_RESOLVE_*`, `E_POLICY_*`, `E_TRUST_*`, `E_COMPAT_*`
-
-## Canonical fixtures
-See `docs/specs/fixtures/` for v1 parse fixtures.

package/docs/legacy/specs/aura-provider-plugin.md

@@ -1,24 +0,0 @@
-# Aura Provider Plugin Contract (v1)
-
-## Capability taxonomy
-Allowed declared capabilities:
-- `resolve.read`
-- `resolve.metadata`
-- `resolve.list` (optional)
-
-No write/mutate capability in v1.
-
-## Mandatory policy sequence (deny by default)
-For each provider call, runtime checks in order:
-1. Trust/signature check
-2. Provider API compatibility check
-3. Declared capability check
-4. Local policy scope check
-5. Runtime hard-deny check
-
-Rule precedence: explicit deny > explicit allow > implicit deny.
-
-## Execution boundaries
-- Parser package never executes plugins.
-- Plugins execute in resolver runtime boundary only.
-- Capability escalation attempts must fail with `E_POLICY_CAPABILITY_ESCALATION`.

package/docs/legacy/specs/aura-registry-model.md

@@ -1,31 +0,0 @@
-# Aura Registry + Trust Model (v1)
-
-## Version and namespace basics
-- Namespace ownership is explicit (e.g., `org/name`).
-- Immutable published versions.
-- Dist tags/channels are aliases, not mutable artifacts.
-
-## Compatibility
-- Spec major mismatch => hard-fail.
-- Provider API major mismatch => hard-fail.
-- Minor/patch mismatch is allowed unless provider declares stricter minimum runtime.
-
-## Signing
-- Canonical payload: JCS (RFC 8785) without `signature` field.
-- Algorithm: Ed25519 only for v1.
-- Envelope fields required:
-  - `algorithm`, `keyId`, `sig`, `createdAt`, `payloadSha256`
-
-## Key lifecycle
-States:
-- `active`
-- `retired`
-- `compromised`
-
-Compromised key cutoff:
-- Artifacts signed at/after compromise timestamp are blocked.
-- Historical signatures before cutoff remain valid unless explicitly revoked.
-
-## Revocation behavior
-- strict mode: revocation unavailable => `E_TRUST_REVOCATION_UNAVAILABLE`
-- permissive mode: warn + continue with audit event

package/docs/legacy/specs/fixtures/invalid-bad-key.aura

@@ -1 +0,0 @@
-foo=lowercase-not-allowed

package/docs/legacy/specs/fixtures/invalid-bad-unicode-escape.aura

@@ -1 +0,0 @@
-BROKEN="bad\u12G4"

package/docs/legacy/specs/fixtures/invalid-duplicate-key.aura

@@ -1,2 +0,0 @@
-FOO=one
-FOO=two

package/docs/legacy/specs/fixtures/valid-basic.aura

@@ -1,4 +0,0 @@
-# basic mapping
-API_KEY=plain-token
-DB_URL="postgres://localhost:5432/aura"
-INHERITED=${API_KEY}

package/docs/legacy/specs/fixtures/valid-provider-ref.aura

@@ -1 +0,0 @@
-AWS_TOKEN=${agent://production/aws?field=access_token}

package/docs/legacy/specs/fixtures/valid-quoted-escapes.aura

@@ -1,2 +0,0 @@
-QUOTED="line1\nline2\t\"ok\""
-PATH="C:\\tmp\\aura"

package/docs/legacy/specs/task-256-create-edit-ui.md

@@ -1,65 +0,0 @@
-# Task #256 — Add Management UI to Create and Edit Tasks
-
-## Goal
-Add create & edit task capabilities to the Pipeline Dashboard UI (`/pipeline`).
-
-## Current State
-- **API**: `src/app/api/pipeline/tasks/route.ts` — GET only (list + detail)
-- **UI**: `src/components/pipeline/PipelineDashboardMvp.tsx` — read-only dashboard (360 lines)
-- **Backend**: `tasks/src/lib/pipeline-service.ts` — has write functions (transitionTaskState, acquireTaskLock, addTaskTag, removeTaskTag)
-- **CLI**: `scripts/taskctl.ts` — has `cmdCreateTask()` with INSERT/upsert SQL
-- **Design system**: Modal, TextInput, Button, ConfirmationModal available in `src/components/design-system/`
-
-## Plan
-
-### 1. API: Add POST/PATCH to `src/app/api/pipeline/tasks/route.ts`
-
-**POST** — Create task
-- Body: `{ title, slug, priority?, deliveryType?, dispatchAgent?, tags?[] }`
-- Auto-assign next task_num
-- Return created task
-
-**PATCH** — Update task  
-- Body: `{ taskNum, title?, slug?, priority?, status?, stage?, dispatchAgent?, addTags?[], removeTags?[] }`
-- Update fields that are provided
-- Use `transitionTaskState` for status changes
-- Return updated task
-
-Both endpoints open the DB in read-write mode (not readonly like GET).
-
-### 2. UI: Add "Create Task" button + modal
-
-In `PipelineDashboardMvp.tsx`:
-- Add a "＋ New Task" button next to Refresh in the filter bar
-- Opens a Modal with form fields:
-  - Title (TextInput, required)
-  - Slug (TextInput, auto-generated from title, editable)
-  - Priority (select: P0/P1/P2, default P2)
-  - Tags (comma-separated TextInput)
-- Submit calls POST `/api/pipeline/tasks`
-- On success, refresh task list and select the new task
-
-### 3. UI: Add "Edit" button in TaskDetailPanel
-
-- Add an "Edit" button in the detail panel header
-- Opens same modal pre-filled with current values
-- Additional fields when editing:
-  - Status (select dropdown)
-  - Dispatch Agent (TextInput)
-- Submit calls PATCH `/api/pipeline/tasks`
-- On success, refresh detail + list
-
-### 4. UI: Inline tag management in detail panel
-
-- Add ✕ buttons on existing tag badges to remove
-- Add a small "+ tag" input to add new tags
-- These call PATCH with addTags/removeTags
-
-## Files to Change
-1. `src/app/api/pipeline/tasks/route.ts` — add POST + PATCH handlers
-2. `src/components/pipeline/PipelineDashboardMvp.tsx` — add create/edit UI
-3. Possibly extract `TaskFormModal.tsx` as a sub-component
-
-## Testing
-- Add/extend `src/__tests__/app/pipeline-dashboard-mvp.test.tsx`
-- Test create form renders, edit form pre-fills, API calls made correctly

package/docs/legacy/templates/README.md

@@ -1,3 +0,0 @@
-# Legacy Templates
-
-- [Release Notes Template](./RELEASE_NOTES_TEMPLATE.md)

package/docs/legacy/templates/RELEASE_NOTES_TEMPLATE.md

@@ -1,22 +0,0 @@
-# Release Notes Template
-
-## Operator changes
-
-- What changed for humans running Aura locally?
-- What setup/upgrade action is required?
-- How to verify success (`npx auramaxx doctor` output expectation)?
-
-## Agent changes
-
-- What changed for agent auth/token behavior?
-- Any profile/scope defaults changed?
-- Any remediation for existing automations?
-
-## Verification checklist
-
-```bash
-node scripts/validate-job-docs.mjs
-npx auramaxx doctor
-```
-
-Mark release notes complete only after both checks pass.