flowmind 1.0.0

package/skills/auto-flow/SKILL.md

@@ -0,0 +1,277 @@
+---
+name: auto-flow
+description: Automated workflow orchestration skill for FlowMind. Define, execute, and manage complex multi-step workflows.
+metadata:
+  version: "1.0.0"
+  author: flowmind
+  category: automation
+---
+
+# Auto Flow Skill
+
+Define, execute, and manage complex multi-step workflows.
+
+## Features
+
+### 🔄 Workflow Execution
+- Sequential steps
+- Parallel execution
+- Conditional branching
+- Error handling
+
+### 📋 Workflow Templates
+- Reusable workflows
+- Parameterized steps
+- Version control
+- Team sharing
+
+### 📊 Monitoring
+- Step tracking
+- Progress reporting
+- Error logging
+- Performance metrics
+
+## Trigger Patterns
+
+```
+"自动化", "automation", "workflow"
+"流程", "process", "pipeline"
+"批量", "batch"
+"定时", "scheduled"
+"工作流", "work flow"
+```
+
+## Workflow Definition
+
+### YAML Format
+
+```yaml
+name: deploy-pipeline
+description: Deploy to production
+
+steps:
+  - name: test
+    action: run-tests
+    params:
+      coverage: true
+
+  - name: build
+    action: build-artifact
+    depends_on: [test]
+
+  - name: deploy-staging
+    action: deploy
+    params:
+      environment: staging
+    depends_on: [build]
+
+  - name: integration-test
+    action: run-integration-tests
+    depends_on: [deploy-staging]
+
+  - name: deploy-prod
+    action: deploy
+    params:
+      environment: production
+    depends_on: [integration-test]
+    when: "{{branch}} == 'main'"
+```
+
+## Output Format
+
+```
+┌─────────────────────────────────────────────────────┐
+│ Workflow Execution                                  │
+├─────────────────────────────────────────────────────┤
+│ Workflow: {name}                                    │
+│ Status: {status}                                    │
+│ Progress: {progress}%                               │
+├─────────────────────────────────────────────────────┤
+│ Steps:                                              │
+│ ✓ test (2m 30s)                                     │
+│ ✓ build (1m 15s)                                    │
+│ ✓ deploy-staging (45s)                              │
+│ ⏳ integration-test (running...)                     │
+│ ○ deploy-prod (pending)                             │
+├─────────────────────────────────────────────────────┤
+│ Duration: 4m 30s                                    │
+│ ETA: 2m 15s                                         │
+└─────────────────────────────────────────────────────┘
+```
+
+## Built-in Workflows
+
+### Development Workflow
+
+```yaml
+name: dev-workflow
+steps:
+  - name: code-review
+    skill: code-review
+
+  - name: test
+    skill: data-validation
+
+  - name: docs
+    skill: api-sync
+
+  - name: archive
+    skill: archive-change
+```
+
+### Deployment Workflow
+
+```yaml
+name: deploy-workflow
+steps:
+  - name: validate
+    action: validate-config
+
+  - name: backup
+    action: backup-database
+
+  - name: deploy
+    action: deploy-application
+
+  - name: verify
+    action: health-check
+
+  - name: notify
+    action: send-notification
+```
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Workflow Preferences**: Learns common workflows
+- **Step Order**: Learns preferred step sequence
+- **Error Handling**: Learns recovery preferences
+
+```
+User: "部署前先备份数据库"
+FlowMind: ✓ Learned: Backup before deploy
+
+User: [Next deploy]
+FlowMind: [Includes backup step automatically]
+```
+
+## Examples
+
+### Example 1: Execute Workflow
+
+```
+User: 执行部署流程
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Workflow: deploy-production                         │
+├─────────────────────────────────────────────────────┤
+│ ✓ validate (5s)                                     │
+│ ✓ backup (2m 15s)                                   │
+│ ✓ deploy (3m 30s)                                   │
+│ ✓ verify (30s)                                      │
+│ ✓ notify (5s)                                       │
+├─────────────────────────────────────────────────────┤
+│ Status: ✓ Completed                                 │
+│ Duration: 6m 25s                                    │
+│ Environment: production                             │
+└─────────────────────────────────────────────────────┘
+```
+
+### Example 2: Custom Workflow
+
+```
+User: 创建一个代码提交流程
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Workflow Created: code-commit                       │
+├─────────────────────────────────────────────────────┤
+│ Steps:                                              │
+│ 1. lint - Run linter                                │
+│ 2. test - Run tests                                 │
+│ 3. review - Code review                             │
+│ 4. commit - Create commit                           │
+│ 5. push - Push to remote                            │
+├─────────────────────────────────────────────────────┤
+│ Usage: flowmind run code-commit                     │
+└─────────────────────────────────────────────────────┘
+```
+
+## Configuration
+
+```json
+{
+  "auto-flow": {
+    "workflows": {
+      "path": "./workflows",
+      "autoDiscover": true
+    },
+    "execution": {
+      "parallel": true,
+      "maxConcurrent": 5,
+      "timeout": 3600
+    },
+    "notifications": {
+      "onComplete": true,
+      "onError": true
+    }
+  }
+}
+```
+
+## Workflow Actions
+
+### Built-in Actions
+
+| Action | Description |
+|--------|-------------|
+| `run-command` | Execute shell command |
+| `run-tests` | Run test suite |
+| `deploy` | Deploy application |
+| `notify` | Send notification |
+| `wait` | Wait for condition |
+| `approve` | Request approval |
+
+### Custom Actions
+
+```json
+{
+  "auto-flow": {
+    "actions": {
+      "my-action": {
+        "command": "npm run my-script",
+        "timeout": 300
+      }
+    }
+  }
+}
+```
+
+## Error Handling
+
+### Retry Configuration
+
+```yaml
+steps:
+  - name: deploy
+    action: deploy
+    retry:
+      max: 3
+      delay: 5000
+      backoff: exponential
+```
+
+### Failure Actions
+
+```yaml
+steps:
+  - name: deploy
+    action: deploy
+    on_failure:
+      - action: rollback
+      - action: notify
+        params:
+          message: "Deploy failed!"
+```

package/skills/code-review/SKILL.md

@@ -0,0 +1,206 @@
+---
+name: code-review
+description: Code review and quality analysis skill for FlowMind. Analyze code for security vulnerabilities, style violations, and best practices.
+metadata:
+  version: "1.0.0"
+  author: flowmind
+  category: quality
+---
+
+# Code Review Skill
+
+Analyze code for security vulnerabilities, style violations, and best practices.
+
+## Features
+
+### 🔒 Security Analysis
+- SQL injection detection
+- XSS vulnerability scanning
+- Authentication issues
+- Sensitive data exposure
+
+### 📏 Code Quality
+- Style guide compliance
+- Complexity analysis
+- Code duplication detection
+- Documentation completeness
+
+### ✅ Best Practices
+- Design pattern adherence
+- Error handling review
+- Performance considerations
+- Testing coverage
+
+## Trigger Patterns
+
+```
+"代码审查", "code review", "review"
+"安全检查", "security check"
+"代码质量", "code quality"
+"PR审查", "PR review"
+"代码规范", "style guide"
+```
+
+## Output Format
+
+```
+┌─────────────────────────────────────────────────────┐
+│ Code Review Report                                  │
+├─────────────────────────────────────────────────────┤
+│ Files Analyzed: {count}                             │
+│ Lines of Code: {loc}                                │
+├─────────────────────────────────────────────────────┤
+│ Security Issues: {count}                            │
+│ • [HIGH] {issue} at {file}:{line}                   │
+│ • [MEDIUM] {issue} at {file}:{line}                 │
+├─────────────────────────────────────────────────────┤
+│ Quality Issues: {count}                             │
+│ • {issue} at {file}:{line}                          │
+├─────────────────────────────────────────────────────┤
+│ Suggestions:                                        │
+│ • {suggestion}                                      │
+└─────────────────────────────────────────────────────┘
+```
+
+## Review Categories
+
+### Security Checks
+
+| Check | Severity | Description |
+|-------|----------|-------------|
+| SQL Injection | HIGH | Unsanitized user input in queries |
+| XSS | HIGH | Unescaped output in templates |
+| Hardcoded Secrets | HIGH | Credentials in source code |
+| Weak Crypto | MEDIUM | Insecure encryption algorithms |
+
+### Quality Checks
+
+| Check | Severity | Description |
+|-------|----------|-------------|
+| Complexity | MEDIUM | Functions too complex |
+| Duplication | LOW | Duplicated code blocks |
+| Documentation | LOW | Missing documentation |
+| Naming | LOW | Poor naming conventions |
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Review Focus**: Learns which issues you care about most
+- **Severity Levels**: Learns your severity preferences
+- **Output Format**: Learns preferred report format
+
+```
+User: "先检查安全漏洞"
+FlowMind: ✓ Learned: Security first for code review
+
+User: [Next review]
+FlowMind: [Prioritizes security issues]
+```
+
+## Examples
+
+### Example 1: Security Review
+
+```
+User: 检查这个文件的安全漏洞
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Security Review                                     │
+├─────────────────────────────────────────────────────┤
+│ File: src/api/users.js                              │
+├─────────────────────────────────────────────────────┤
+│ 🔴 HIGH: SQL Injection                              │
+│    Line 45: query(`SELECT * FROM users WHERE id=${id}`)│
+│    Fix: Use parameterized queries                   │
+├─────────────────────────────────────────────────────┤
+│ 🟡 MEDIUM: Hardcoded Secret                         │
+│    Line 12: const API_KEY = 'abc123'                │
+│    Fix: Use environment variables                   │
+└─────────────────────────────────────────────────────┘
+```
+
+### Example 2: Code Quality Review
+
+```
+User: 审查这段代码的质量
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Code Quality Review                                 │
+├─────────────────────────────────────────────────────┤
+│ Function: processOrder                              │
+│ Lines: 85                                           │
+│ Complexity: 12 (HIGH)                               │
+├─────────────────────────────────────────────────────┤
+│ Issues:                                             │
+│ • Function too long (85 lines)                      │
+│ • High cyclomatic complexity                        │
+│ • Missing error handling                            │
+├─────────────────────────────────────────────────────┤
+│ Suggestions:                                        │
+│ • Split into smaller functions                      │
+│ • Add try-catch blocks                              │
+│ • Add unit tests                                    │
+└─────────────────────────────────────────────────────┘
+```
+
+## Configuration
+
+```json
+{
+  "code-review": {
+    "security": {
+      "enabled": true,
+      "severity": ["high", "medium", "low"]
+    },
+    "quality": {
+      "enabled": true,
+      "maxComplexity": 10,
+      "maxFunctionLength": 50
+    },
+    "style": {
+      "enabled": true,
+      "guide": "standard"
+    }
+  }
+}
+```
+
+## Customization
+
+### Custom Rules
+
+Add custom review rules:
+
+```json
+{
+  "code-review": {
+    "customRules": [
+      {
+        "name": "no-console-log",
+        "pattern": "console\\.log",
+        "severity": "warning",
+        "message": "Remove console.log statements"
+      }
+    ]
+  }
+}
+```
+
+### Ignore Patterns
+
+Exclude files from review:
+
+```json
+{
+  "code-review": {
+    "ignore": [
+      "**/test/**",
+      "**/*.test.js",
+      "**/node_modules/**"
+    ]
+  }
+}
+```

package/skills/code-review-audit/SKILL.md

@@ -0,0 +1,150 @@
+---
+name: code-review-audit
+description: Code review and security audit skill for FlowMind. Three-dimensional review: security audit, design compliance check, and mandatory constraint validation before merge or test.
+metadata:
+  version: "1.0.0"
+  author: flowmind
+  category: quality
+---
+
+# Code Review & Security Audit Skill
+
+Three-dimensional code review: security audit, design compliance, and constraint validation.
+
+## Features
+
+### Security Audit
+- SQL injection detection
+- Hardcoded secrets scanning
+- Sensitive data exposure in logs
+- Unauthorized access detection
+- XSS vulnerability scanning
+
+### Design Compliance
+- Functional completeness check
+- API consistency verification
+- Database schema alignment
+- Redis/Kafka design alignment
+- Over-implementation detection
+
+### Mandatory Constraints
+- Code quality constraints (inner classes, field remarks, method docs, complexity)
+- Naming conventions (error codes, Kafka topics, Redis keys)
+- Layered architecture (Controller/Service/Repository separation)
+- Performance constraints (batch operations, timeout, parallel calls)
+- Test coverage requirements
+
+## Trigger Patterns
+
+```
+"合并审核", "测试前审核"
+"代码审查", "code review", "review"
+"MR 审核", "PR review"
+"安全审查", "security audit"
+"设计合规", "design compliance"
+```
+
+## Output Format
+
+```
+┌─────────────────────────────────────────────────────┐
+│ Code Review Report                                  │
+├─────────────────────────────────────────────────────┤
+│ Review Type: {merge/test}                           │
+│ Files Changed: {count}                              │
+│ Design Doc: {yes/no}                                │
+├─────────────────────────────────────────────────────┤
+│ Security: {issues}                                  │
+│ Design Compliance: {status}                         │
+│ Constraints: {violations}                           │
+├─────────────────────────────────────────────────────┤
+│ Verdict: PASS / CONDITIONAL / FAIL                  │
+│ Must Fix: {list}                                    │
+│ Suggestions: {list}                                 │
+└─────────────────────────────────────────────────────┘
+```
+
+## Review Levels
+
+| Level | Condition | Scope |
+|-------|-----------|-------|
+| micro | ≤3 files, bug fix/config | Security + basic quality |
+| small | ≤5 files, single module | + naming, layering, tests |
+| medium | ≤15 files, API/DB/Redis | + performance, caching, exceptions |
+| full | >15 files, cross-module | All constraints |
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Review Focus**: Learns which issues you care about most
+- **Severity Levels**: Learns your severity preferences
+- **Constraint Priority**: Learns which constraints to prioritize
+
+## Examples
+
+### Example 1: Merge Review
+
+```
+User: 合并审核
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Code Review Report                                  │
+├─────────────────────────────────────────────────────┤
+│ Review Type: Merge Review                           │
+│ Files Changed: 5                                    │
+│ Design Doc: openspec/changes/xxx/DESIGN.md          │
+├─────────────────────────────────────────────────────┤
+│ Security: 1 HIGH (SQL injection at line 45)         │
+│ Design Compliance: 2 features missing               │
+│ Constraints: 3 violations                           │
+├─────────────────────────────────────────────────────┤
+│ Verdict: ❌ FAIL                                    │
+│ Must Fix:                                           │
+│ • SQL injection at UserService.java:45              │
+│ • Missing Redis caching for store data              │
+└─────────────────────────────────────────────────────┘
+```
+
+### Example 2: Security Review
+
+```
+User: 安全审查这个接口
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Security Audit                                      │
+├─────────────────────────────────────────────────────┤
+│ 🔴 HIGH: Hardcoded API key at Config.java:12        │
+│    Fix: Use environment variables                   │
+│ 🟡 MEDIUM: Exception stack exposed to client        │
+│    Fix: Return generic error message                │
+│ 🟢 LOW: DEBUG level logging in production           │
+│    Fix: Set appropriate log level                   │
+└─────────────────────────────────────────────────────┘
+```
+
+## Configuration
+
+```json
+{
+  "code-review-audit": {
+    "security": {
+      "enabled": true,
+      "severity": ["high", "medium", "low"]
+    },
+    "designCompliance": {
+      "enabled": true,
+      "checkOverImplementation": true
+    },
+    "constraints": {
+      "codeQuality": true,
+      "naming": true,
+      "layering": true,
+      "performance": true,
+      "testing": true
+    }
+  }
+}
+```