aw-ecc 1.4.21

package/.opencode/commands/rust-build.md

@@ -0,0 +1,78 @@
+---
+description: Fix Rust build errors and borrow checker issues
+agent: rust-build-resolver
+subtask: true
+---
+
+# Rust Build Command
+
+Fix Rust build, clippy, and dependency errors: $ARGUMENTS
+
+## Your Task
+
+1. **Run cargo check**: `cargo check 2>&1`
+2. **Run cargo clippy**: `cargo clippy -- -D warnings 2>&1`
+3. **Fix errors** one at a time
+4. **Verify fixes** don't introduce new errors
+
+## Common Rust Errors
+
+### Borrow Checker
+```
+cannot borrow `x` as mutable because it is also borrowed as immutable
+```
+**Fix**: Restructure to end immutable borrow first; clone only if justified
+
+### Type Mismatch
+```
+mismatched types: expected `T`, found `U`
+```
+**Fix**: Add `.into()`, `as`, or explicit type conversion
+
+### Missing Import
+```
+unresolved import `crate::module`
+```
+**Fix**: Fix the `use` path or declare the module (add Cargo.toml deps only for external crates)
+
+### Lifetime Errors
+```
+does not live long enough
+```
+**Fix**: Use owned type or add lifetime annotation
+
+### Trait Not Implemented
+```
+the trait `X` is not implemented for `Y`
+```
+**Fix**: Add `#[derive(Trait)]` or implement manually
+
+## Fix Order
+
+1. **Build errors** - Code must compile
+2. **Clippy warnings** - Fix suspicious constructs
+3. **Formatting** - `cargo fmt` compliance
+
+## Build Commands
+
+```bash
+cargo check 2>&1
+cargo clippy -- -D warnings 2>&1
+cargo fmt --check 2>&1
+cargo tree --duplicates
+cargo test
+```
+
+## Verification
+
+After fixes:
+```bash
+cargo check                  # Should succeed
+cargo clippy -- -D warnings  # No warnings allowed
+cargo fmt --check            # Formatting should pass
+cargo test                   # Tests should pass
+```
+
+---
+
+**IMPORTANT**: Fix errors only. No refactoring, no improvements. Get the build green with minimal changes.

package/.opencode/commands/rust-review.md

@@ -0,0 +1,65 @@
+---
+description: Rust code review for ownership, safety, and idiomatic patterns
+agent: rust-reviewer
+subtask: true
+---
+
+# Rust Review Command
+
+Review Rust code for idiomatic patterns and best practices: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze Rust code** for idioms and patterns
+2. **Check ownership** - borrowing, lifetimes, unnecessary clones
+3. **Review error handling** - proper `?` propagation, no unwrap in production
+4. **Verify safety** - unsafe usage, injection, secrets
+
+## Review Checklist
+
+### Safety (CRITICAL)
+- [ ] No unchecked `unwrap()`/`expect()` in production paths
+- [ ] `unsafe` blocks have `// SAFETY:` comments
+- [ ] No SQL/command injection
+- [ ] No hardcoded secrets
+
+### Ownership (HIGH)
+- [ ] No unnecessary `.clone()` to satisfy borrow checker
+- [ ] `&str` preferred over `String` in function parameters
+- [ ] `&[T]` preferred over `Vec<T>` in function parameters
+- [ ] No excessive lifetime annotations where elision works
+
+### Error Handling (HIGH)
+- [ ] Errors propagated with `?`; use `.context()` in `anyhow`/`eyre` application code
+- [ ] No silenced errors (`let _ = result;`)
+- [ ] `thiserror` for library errors, `anyhow` for applications
+
+### Concurrency (HIGH)
+- [ ] No blocking in async context
+- [ ] Bounded channels preferred
+- [ ] `Mutex` poisoning handled
+- [ ] `Send`/`Sync` bounds correct
+
+### Code Quality (MEDIUM)
+- [ ] Functions under 50 lines
+- [ ] No deep nesting (>4 levels)
+- [ ] Exhaustive matching on business enums
+- [ ] Clippy warnings addressed
+
+## Report Format
+
+### CRITICAL Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### HIGH Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+### MEDIUM Issues
+- [file:line] Issue description
+  Suggestion: How to fix
+
+---
+
+**TIP**: Run `cargo clippy -- -D warnings` and `cargo fmt --check` for automated checks.

package/.opencode/commands/rust-test.md

@@ -0,0 +1,104 @@
+---
+description: Rust TDD workflow with unit and property tests
+agent: tdd-guide
+subtask: true
+---
+
+# Rust Test Command
+
+Implement using Rust TDD methodology: $ARGUMENTS
+
+## Your Task
+
+Apply test-driven development with Rust idioms:
+
+1. **Define types** - Structs, enums, traits
+2. **Write tests** - Unit tests in `#[cfg(test)]` modules
+3. **Implement minimal code** - Pass the tests
+4. **Check coverage** - Target 80%+
+
+## TDD Cycle for Rust
+
+### Step 1: Define Interface
+```rust
+pub struct Input {
+    // fields
+}
+
+pub fn process(input: &Input) -> Result<Output, Error> {
+    todo!()
+}
+```
+
+### Step 2: Write Tests
+```rust
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn valid_input_succeeds() {
+        let input = Input { /* ... */ };
+        let result = process(&input);
+        assert!(result.is_ok());
+    }
+
+    #[test]
+    fn invalid_input_returns_error() {
+        let input = Input { /* ... */ };
+        let result = process(&input);
+        assert!(result.is_err());
+    }
+}
+```
+
+### Step 3: Run Tests (RED)
+```bash
+cargo test
+```
+
+### Step 4: Implement (GREEN)
+```rust
+pub fn process(input: &Input) -> Result<Output, Error> {
+    // Minimal implementation that handles both paths
+    validate(input)?;
+    Ok(Output { /* ... */ })
+}
+```
+
+### Step 5: Check Coverage
+```bash
+cargo llvm-cov
+cargo llvm-cov --fail-under-lines 80
+```
+
+## Rust Testing Commands
+
+```bash
+cargo test                        # Run all tests
+cargo test -- --nocapture         # Show println output
+cargo test test_name              # Run specific test
+cargo test --no-fail-fast         # Don't stop on first failure
+cargo test --lib                  # Unit tests only
+cargo test --test integration     # Integration tests only
+cargo test --doc                  # Doc tests only
+cargo bench                       # Run benchmarks
+```
+
+## Test File Organization
+
+```
+src/
+├── lib.rs             # Library root
+├── service.rs         # Implementation
+└── service/
+    └── tests.rs       # Or inline #[cfg(test)] mod tests {}
+tests/
+└── integration.rs     # Integration tests
+benches/
+└── benchmark.rs       # Criterion benchmarks
+```
+
+---
+
+**TIP**: Use `rstest` for parameterized tests and `proptest` for property-based testing.

package/.opencode/commands/security.md

@@ -0,0 +1,89 @@
+---
+description: Run comprehensive security review
+agent: security-reviewer
+subtask: true
+---
+
+# Security Review Command
+
+Conduct a comprehensive security review: $ARGUMENTS
+
+## Your Task
+
+Analyze the specified code for security vulnerabilities following OWASP guidelines and security best practices.
+
+## Security Checklist
+
+### OWASP Top 10
+
+1. **Injection** (SQL, NoSQL, OS command, LDAP)
+   - Check for parameterized queries
+   - Verify input sanitization
+   - Review dynamic query construction
+
+2. **Broken Authentication**
+   - Password storage (bcrypt, argon2)
+   - Session management
+   - Multi-factor authentication
+   - Password reset flows
+
+3. **Sensitive Data Exposure**
+   - Encryption at rest and in transit
+   - Proper key management
+   - PII handling
+
+4. **XML External Entities (XXE)**
+   - Disable DTD processing
+   - Input validation for XML
+
+5. **Broken Access Control**
+   - Authorization checks on every endpoint
+   - Role-based access control
+   - Resource ownership validation
+
+6. **Security Misconfiguration**
+   - Default credentials removed
+   - Error handling doesn't leak info
+   - Security headers configured
+
+7. **Cross-Site Scripting (XSS)**
+   - Output encoding
+   - Content Security Policy
+   - Input sanitization
+
+8. **Insecure Deserialization**
+   - Validate serialized data
+   - Implement integrity checks
+
+9. **Using Components with Known Vulnerabilities**
+   - Run `npm audit`
+   - Check for outdated dependencies
+
+10. **Insufficient Logging & Monitoring**
+    - Security events logged
+    - No sensitive data in logs
+    - Alerting configured
+
+### Additional Checks
+
+- [ ] Secrets in code (API keys, passwords)
+- [ ] Environment variable handling
+- [ ] CORS configuration
+- [ ] Rate limiting
+- [ ] CSRF protection
+- [ ] Secure cookie flags
+
+## Report Format
+
+### Critical Issues
+[Issues that must be fixed immediately]
+
+### High Priority
+[Issues that should be fixed before release]
+
+### Recommendations
+[Security improvements to consider]
+
+---
+
+**IMPORTANT**: Security issues are blockers. Do not proceed until critical issues are resolved.

package/.opencode/commands/setup-pm.md

@@ -0,0 +1,67 @@
+---
+description: Configure package manager preference
+agent: build
+---
+
+# Setup Package Manager Command
+
+Configure your preferred package manager: $ARGUMENTS
+
+## Your Task
+
+Set up package manager preference for the project or globally.
+
+## Detection Order
+
+1. **Environment variable**: `CLAUDE_PACKAGE_MANAGER`
+2. **Project config**: `.claude/package-manager.json`
+3. **package.json**: `packageManager` field
+4. **Lock file**: Auto-detect from lock files
+5. **Global config**: `~/.claude/package-manager.json`
+6. **Fallback**: First available
+
+## Configuration Options
+
+### Option 1: Environment Variable
+```bash
+export CLAUDE_PACKAGE_MANAGER=pnpm
+```
+
+### Option 2: Project Config
+```bash
+# Create .claude/package-manager.json
+echo '{"packageManager": "pnpm"}' > .claude/package-manager.json
+```
+
+### Option 3: package.json
+```json
+{
+  "packageManager": "pnpm@8.0.0"
+}
+```
+
+### Option 4: Global Config
+```bash
+# Create ~/.claude/package-manager.json
+echo '{"packageManager": "yarn"}' > ~/.claude/package-manager.json
+```
+
+## Supported Package Managers
+
+| Manager | Lock File | Commands |
+|---------|-----------|----------|
+| npm | package-lock.json | `npm install`, `npm run` |
+| pnpm | pnpm-lock.yaml | `pnpm install`, `pnpm run` |
+| yarn | yarn.lock | `yarn install`, `yarn run` |
+| bun | bun.lockb | `bun install`, `bun run` |
+
+## Verification
+
+Check current setting:
+```bash
+node scripts/setup-package-manager.js --detect
+```
+
+---
+
+**TIP**: For consistency across team, add `packageManager` field to package.json.

package/.opencode/commands/skill-create.md

@@ -0,0 +1,117 @@
+---
+description: Generate skills from git history analysis
+agent: build
+---
+
+# Skill Create Command
+
+Analyze git history to generate Claude Code skills: $ARGUMENTS
+
+## Your Task
+
+1. **Analyze commits** - Pattern recognition from history
+2. **Extract patterns** - Common practices and conventions
+3. **Generate SKILL.md** - Structured skill documentation
+4. **Create instincts** - For continuous-learning-v2
+
+## Analysis Process
+
+### Step 1: Gather Commit Data
+```bash
+# Recent commits
+git log --oneline -100
+
+# Commits by file type
+git log --name-only --pretty=format: | sort | uniq -c | sort -rn
+
+# Most changed files
+git log --pretty=format: --name-only | sort | uniq -c | sort -rn | head -20
+```
+
+### Step 2: Identify Patterns
+
+**Commit Message Patterns**:
+- Common prefixes (feat, fix, refactor)
+- Naming conventions
+- Co-author patterns
+
+**Code Patterns**:
+- File structure conventions
+- Import organization
+- Error handling approaches
+
+**Review Patterns**:
+- Common review feedback
+- Recurring fix types
+- Quality gates
+
+### Step 3: Generate SKILL.md
+
+```markdown
+# [Skill Name]
+
+## Overview
+[What this skill teaches]
+
+## Patterns
+
+### Pattern 1: [Name]
+- When to use
+- Implementation
+- Example
+
+### Pattern 2: [Name]
+- When to use
+- Implementation
+- Example
+
+## Best Practices
+
+1. [Practice 1]
+2. [Practice 2]
+3. [Practice 3]
+
+## Common Mistakes
+
+1. [Mistake 1] - How to avoid
+2. [Mistake 2] - How to avoid
+
+## Examples
+
+### Good Example
+```[language]
+// Code example
+```
+
+### Anti-pattern
+```[language]
+// What not to do
+```
+```
+
+### Step 4: Generate Instincts
+
+For continuous-learning-v2:
+
+```json
+{
+  "instincts": [
+    {
+      "trigger": "[situation]",
+      "action": "[response]",
+      "confidence": 0.8,
+      "source": "git-history-analysis"
+    }
+  ]
+}
+```
+
+## Output
+
+Creates:
+- `skills/[name]/SKILL.md` - Skill documentation
+- `skills/[name]/instincts.json` - Instinct collection
+
+---
+
+**TIP**: Run `/skill-create --instincts` to also generate instincts for continuous learning.

package/.opencode/commands/tdd.md

@@ -0,0 +1,66 @@
+---
+description: Enforce TDD workflow with 80%+ coverage
+agent: tdd-guide
+subtask: true
+---
+
+# TDD Command
+
+Implement the following using strict test-driven development: $ARGUMENTS
+
+## TDD Cycle (MANDATORY)
+
+```
+RED → GREEN → REFACTOR → REPEAT
+```
+
+1. **RED**: Write a failing test FIRST
+2. **GREEN**: Write minimal code to pass the test
+3. **REFACTOR**: Improve code while keeping tests green
+4. **REPEAT**: Continue until feature complete
+
+## Your Task
+
+### Step 1: Define Interfaces (SCAFFOLD)
+- Define TypeScript interfaces for inputs/outputs
+- Create function signature with `throw new Error('Not implemented')`
+
+### Step 2: Write Failing Tests (RED)
+- Write tests that exercise the interface
+- Include happy path, edge cases, and error conditions
+- Run tests - verify they FAIL
+
+### Step 3: Implement Minimal Code (GREEN)
+- Write just enough code to make tests pass
+- No premature optimization
+- Run tests - verify they PASS
+
+### Step 4: Refactor (IMPROVE)
+- Extract constants, improve naming
+- Remove duplication
+- Run tests - verify they still PASS
+
+### Step 5: Check Coverage
+- Target: 80% minimum
+- 100% for critical business logic
+- Add more tests if needed
+
+## Coverage Requirements
+
+| Code Type | Minimum |
+|-----------|---------|
+| Standard code | 80% |
+| Financial calculations | 100% |
+| Authentication logic | 100% |
+| Security-critical code | 100% |
+
+## Test Types to Include
+
+- **Unit Tests**: Individual functions
+- **Edge Cases**: Empty, null, max values, boundaries
+- **Error Conditions**: Invalid inputs, network failures
+- **Integration Tests**: API endpoints, database operations
+
+---
+
+**MANDATORY**: Tests must be written BEFORE implementation. Never skip the RED phase.

package/.opencode/commands/test-coverage.md

@@ -0,0 +1,80 @@
+---
+description: Analyze and improve test coverage
+agent: tdd-guide
+subtask: true
+---
+
+# Test Coverage Command
+
+Analyze test coverage and identify gaps: $ARGUMENTS
+
+## Your Task
+
+1. **Run coverage report**: `npm test -- --coverage`
+2. **Analyze results** - Identify low coverage areas
+3. **Prioritize gaps** - Critical code first
+4. **Generate missing tests** - For uncovered code
+
+## Coverage Targets
+
+| Code Type | Target |
+|-----------|--------|
+| Standard code | 80% |
+| Financial logic | 100% |
+| Auth/security | 100% |
+| Utilities | 90% |
+| UI components | 70% |
+
+## Coverage Report Analysis
+
+### Summary
+```
+File           | % Stmts | % Branch | % Funcs | % Lines
+---------------|---------|----------|---------|--------
+All files      |   XX    |    XX    |   XX    |   XX
+```
+
+### Low Coverage Files
+[Files below target, prioritized by criticality]
+
+### Uncovered Lines
+[Specific lines that need tests]
+
+## Test Generation
+
+For each uncovered area:
+
+### [Function/Component Name]
+
+**Location**: `src/path/file.ts:123`
+
+**Coverage Gap**: [description]
+
+**Suggested Tests**:
+```typescript
+describe('functionName', () => {
+  it('should [expected behavior]', () => {
+    // Test code
+  })
+
+  it('should handle [edge case]', () => {
+    // Edge case test
+  })
+})
+```
+
+## Coverage Improvement Plan
+
+1. **Critical** (add immediately)
+   - [ ] file1.ts - Auth logic
+   - [ ] file2.ts - Payment handling
+
+2. **High** (add this sprint)
+   - [ ] file3.ts - Core business logic
+
+3. **Medium** (add when touching file)
+   - [ ] file4.ts - Utilities
+
+---
+
+**IMPORTANT**: Coverage is a metric, not a goal. Focus on meaningful tests, not just hitting numbers.