flowmind 1.0.0

package/skills/log-audit/SKILL.md

@@ -0,0 +1,226 @@
+---
+name: log-audit
+description: Log analysis and trace visualization skill for FlowMind. Analyze application logs, trace requests, debug performance issues.
+metadata:
+  version: "1.1.0"
+  author: flowmind
+  category: monitoring
+componentDependencies:
+  - logService
+---
+
+# Log Audit Skill
+
+Analyze application logs, trace requests, and debug performance issues with FlowMind intelligence.
+
+## Features
+
+### 🔍 Log Query
+- Time-based filtering
+- Service filtering
+- Level filtering (ERROR, WARN, INFO, DEBUG)
+- Keyword search
+- Trace ID lookup
+
+### 🔗 Trace Analysis
+- Full call chain visualization
+- Duration breakdown
+- Error identification
+- Bottleneck detection
+
+### ⚡ Performance Analysis
+- Slow query detection
+- Timeout identification
+- Resource bottleneck analysis
+
+## Trigger Patterns
+
+```
+"日志", "log", "查看日志", "分析日志"
+"traceId", "链路", "trace", "调用链"
+"错误日志", "异常日志", "error log"
+"性能分析", "耗时分析", "performance"
+"排查", "调试", "debug"
+```
+
+## Output Formats
+
+### Sequential List (Default for Traces)
+
+```
+TraceId: {traceId}
+Time: {startTime} ~ {endTime}
+Duration: {totalDuration}ms | Requests: {count}
+
+=== Requests ===
+
+[1] {time} | {service} | {duration}ms
+    {method} {url}
+    Request: {params}
+    Response: {body}
+
+[2] {time} | {service} | {duration}ms
+    {method} {url}
+    Request: {params}
+    Response: {body}
+
+=== Summary ===
+Bottleneck: {service} - {url} ({duration}ms)
+```
+
+### Log Summary
+
+```
+┌─────────────────────────────────────────┐
+│ Log Analysis                            │
+├─────────────────────────────────────────┤
+│ Time: {range}                           │
+│ Total: {count} | Errors: {errorCount}   │
+├─────────────────────────────────────────┤
+│ Key Errors:                             │
+│ • [{time}] {error}                      │
+│ • [{time}] {error}                      │
+└─────────────────────────────────────────┘
+```
+
+## Component Integration
+
+This skill uses the **logService** component. The actual log service provider is determined by configuration.
+
+| Provider | MCP Server | Description |
+|----------|------------|-------------|
+| aliyun-sls | friday-sls-logs | Alibaba Cloud SLS |
+| baidu-sls | baidu-sls-logs | Baidu Cloud Log Service |
+| elk | (direct) | Elasticsearch |
+
+Configuration is managed in `flowmind.config.json` under `components.logService`.
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Output Format**: Learns preferred format
+- **Query Patterns**: Learns common queries
+- **Filter Preferences**: Learns which filters to apply
+
+```
+User: "用顺序列表格式"
+FlowMind: ✓ Learned for log-audit
+
+User: [Next query]
+FlowMind: [Applies sequential list automatically]
+```
+
+## Configuration
+
+Skill-specific configuration:
+
+```json
+{
+  "log-audit": {
+    "defaultFormat": "sequential-list",
+    "excludeInfrastructure": true
+  }
+}
+```
+
+Log service provider is configured via `components.logService` in `flowmind.config.json`.
+
+## Examples
+
+### Example 1: Trace Query
+
+```
+User: 查询 traceId abc123 的完整链路
+
+FlowMind:
+TraceId: abc123
+Time: 2026-06-22 10:00:00 ~ 10:00:05
+Duration: 5000ms | Requests: 8
+
+=== Requests ===
+
+[1] 10:00:00.100 | order-service | 150ms
+    POST /api/orders
+    Request: {"userId": "123"}
+    Response: {"orderId": "ORD-001"}
+
+[2] 10:00:00.300 | payment-service | 2000ms ⚠️
+    POST /api/payments
+    Request: {"orderId": "ORD-001"}
+    Response: {"status": "success"}
+
+=== Summary ===
+Bottleneck: payment-service (2000ms)
+```
+
+### Example 2: Error Analysis
+
+```
+User: 查看最近1小时的错误日志
+
+FlowMind:
+┌─────────────────────────────────────────┐
+│ Error Analysis                          │
+├─────────────────────────────────────────┤
+│ Time: 09:00 ~ 10:00                     │
+│ Errors: 3                               │
+├─────────────────────────────────────────┤
+│ • 09:15 NullPointerException            │
+│ • 09:32 ConnectionTimeout               │
+│ • 09:45 ValidationException             │
+└─────────────────────────────────────────┘
+```
+
+## Query Templates
+
+### Default (Exclude Infrastructure)
+
+```
+service != 'gateway'
+AND service NOT LIKE '%-gateway'
+AND service != 'nacos'
+AND service != 'sentinel'
+AND tag != 'health-check'
+```
+
+### Errors Only
+
+```
+level = 'ERROR'
+```
+
+### Slow Requests
+
+```
+duration > 1000
+```
+
+## Customization
+
+### Custom Templates
+
+```json
+{
+  "log-audit": {
+    "templates": {
+      "my-service": "service = 'my-service'",
+      "slow-db": "duration > 500 AND type = 'db'"
+    }
+  }
+}
+```
+
+### Custom Formats
+
+```json
+{
+  "log-audit": {
+    "formats": {
+      "compact": { "maxLines": 10 },
+      "detailed": { "includeHeaders": true },
+      "json": { "format": "json" }
+    }
+  }
+}
+```

package/skills/project-review/SKILL.md

@@ -0,0 +1,196 @@
+---
+name: project-review
+description: Project-level review and analysis skill for FlowMind. Analyze project health, dependencies, and overall quality.
+metadata:
+  version: "1.0.0"
+  author: flowmind
+  category: quality
+---
+
+# Project Review Skill
+
+Analyze project health, dependencies, and overall quality.
+
+## Features
+
+### 📊 Project Health
+- Dependency analysis
+- Security audit
+- License compliance
+- Update status
+
+### 📈 Code Metrics
+- Code complexity
+- Test coverage
+- Documentation coverage
+- Technical debt
+
+### 🔒 Security Analysis
+- Vulnerability scanning
+- Dependency risks
+- Secret detection
+- Best practices
+
+## Trigger Patterns
+
+```
+"项目审查", "project review"
+"依赖检查", "dependency check"
+"安全审计", "security audit"
+"代码质量", "code quality"
+"项目健康", "project health"
+```
+
+## Output Format
+
+```
+┌─────────────────────────────────────────────────────┐
+│ Project Review Report                               │
+├─────────────────────────────────────────────────────┤
+│ Project: {project_name}                             │
+│ Language: {language}                                │
+│ Last Updated: {date}                                │
+├─────────────────────────────────────────────────────┤
+│ Health Score: {score}/100                           │
+├─────────────────────────────────────────────────────┤
+│ Dependencies:                                       │
+│ • Total: {count}                                    │
+│ • Outdated: {outdated}                              │
+│ • Vulnerable: {vulnerable}                          │
+├─────────────────────────────────────────────────────┤
+│ Code Quality:                                       │
+│ • Complexity: {level}                               │
+│ • Test Coverage: {percent}%                         │
+│ • Documentation: {percent}%                         │
+├─────────────────────────────────────────────────────┤
+│ Recommendations:                                    │
+│ • {recommendation}                                  │
+└─────────────────────────────────────────────────────┘
+```
+
+## Health Checks
+
+### Dependencies
+
+| Check | Description |
+|-------|-------------|
+| Outdated | Packages needing update |
+| Vulnerable | Known security issues |
+| Unused | Unused dependencies |
+| License | License compliance |
+
+### Code Quality
+
+| Check | Description |
+|-------|-------------|
+| Complexity | Cyclomatic complexity |
+| Duplication | Code duplication |
+| Coverage | Test coverage |
+| Documentation | Doc coverage |
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Review Focus**: Learns what to check first
+- **Severity Levels**: Learns your standards
+- **Auto-fix**: Learns what to fix automatically
+
+```
+User: "先检查安全漏洞"
+FlowMind: ✓ Learned: Check security first
+
+User: [Next review]
+FlowMind: [Prioritizes security checks]
+```
+
+## Examples
+
+### Example 1: Full Project Review
+
+```
+User: 审查项目整体状况
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Project Review Report                               │
+├─────────────────────────────────────────────────────┤
+│ Project: my-app                                     │
+│ Language: JavaScript/Node.js                        │
+│ Last Updated: 2026-06-22                            │
+├─────────────────────────────────────────────────────┤
+│ Health Score: 82/100                                │
+├─────────────────────────────────────────────────────┤
+│ Dependencies:                                       │
+│ • Total: 45                                         │
+│ • Outdated: 8                                       │
+│ • Vulnerable: 2                                     │
+├─────────────────────────────────────────────────────┤
+│ Code Quality:                                       │
+│ • Complexity: Medium                                │
+│ • Test Coverage: 76%                                │
+│ • Documentation: 65%                                │
+├─────────────────────────────────────────────────────┤
+│ ⚠️ Issues Found:                                    │
+│ • 2 vulnerable dependencies                         │
+│ • 8 outdated packages                               │
+│ • Low documentation coverage                        │
+├─────────────────────────────────────────────────────┤
+│ Recommendations:                                    │
+│ • Run 'npm audit fix'                               │
+│ • Update outdated packages                          │
+│ • Add JSDoc comments                                │
+└─────────────────────────────────────────────────────┘
+```
+
+### Example 2: Security Audit
+
+```
+User: 进行安全审计
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Security Audit Report                               │
+├─────────────────────────────────────────────────────┤
+│ Vulnerabilities: 2 found                            │
+├─────────────────────────────────────────────────────┤
+│ 🔴 HIGH: lodash < 4.17.21                           │
+│    Prototype Pollution                              │
+│    Fix: npm install lodash@latest                   │
+├─────────────────────────────────────────────────────┤
+│ 🟡 MEDIUM: axios < 0.21.1                           │
+│    SSRF Vulnerability                               │
+│    Fix: npm install axios@latest                    │
+├─────────────────────────────────────────────────────┤
+│ Secrets: None detected ✓                            │
+│ HTTPS: All connections secure ✓                     │
+└─────────────────────────────────────────────────────┘
+```
+
+## Configuration
+
+```json
+{
+  "project-review": {
+    "checks": {
+      "dependencies": true,
+      "security": true,
+      "quality": true,
+      "documentation": true
+    },
+    "thresholds": {
+      "coverage": 80,
+      "complexity": 10
+    }
+  }
+}
+```
+
+## Review Checklist
+
+- [ ] Dependencies up to date
+- [ ] No known vulnerabilities
+- [ ] Test coverage > 80%
+- [ ] Documentation complete
+- [ ] License compliant
+- [ ] No secrets in code

package/skills/requirement-analyst/SKILL.md

@@ -0,0 +1,275 @@
+---
+name: requirement-analyst
+description: Requirement analyst skill for FlowMind. Six-dimensional analysis: historical design principles, iteration rationale, extensibility, market roadmap, requirement-code deviation, and upgrade vulnerabilities.
+metadata:
+  version: "1.0.0"
+  author: flowmind
+  category: analysis
+---
+
+# Requirement Analyst Skill
+
+Comprehensive requirement analysis combining code reality with requirement intent. Acts as a senior requirement analyst (需求分析师) evaluating from six dimensions.
+
+## Features
+
+### Historical Design Principle Evaluation
+- Evaluate why historical designs were made
+- Assess design validity in current context
+- Identify design debt and knowledge gaps
+
+### Iteration Rationale Assessment
+- Analyze iteration driving forces
+- Evaluate iteration quality and pace
+- Identify anomalous iterations (rollback, rework, over-design)
+
+### Extensibility Assessment
+- Development extensibility (modularity, interfaces, configurability)
+- Requirement upgrade extensibility (data model, API compatibility)
+- User growth extensibility (performance, caching, horizontal scaling)
+
+### Market Roadmap Planning
+- Feature coverage analysis
+- Requirement trend analysis
+- Short/mid/long-term development roadmap
+
+### Requirement-Code Deviation Analysis
+- Feature gaps (required but not implemented)
+- Over-implementation (implemented but not required)
+- Understanding gaps (implementation doesn't match intent)
+- Documentation lag (code changed, docs not updated)
+
+### Upgrade Vulnerability Identification
+- Data model fragility
+- API incompatibility risks
+- Hardcoded traps
+- Test blind spots
+- Dependency coupling
+
+## Trigger Patterns
+
+```
+"需求分析", "需求评审", "需求评估"
+"设计评审", "设计评估", "设计原理分析"
+"迭代评估", "迭代分析", "迭代回顾"
+"扩展性评估", "扩展性分析", "架构评估"
+"市场规划", "产品规划", "发展路线"
+"需求偏差", "需求偏差分析", "代码与需求对比"
+"升级风险", "升级漏洞", "技术债务评估"
+"全面分析", "需求分析师"
+"requirement analysis", "design review"
+"iteration review", "extensibility assessment"
+"market roadmap", "requirement deviation"
+"upgrade risk", "technical debt"
+```
+
+## Output Format
+
+### Comprehensive Report
+
+```
+┌─────────────────────────────────────────────────────┐
+│ Requirement Analysis Report                         │
+├─────────────────────────────────────────────────────┤
+│ Project: {project_name}                             │
+│ Analysis Scope: {dimensions}                        │
+│ Overall Score: {score}/100                          │
+├─────────────────────────────────────────────────────┤
+│ Dimension Scores:                                   │
+│ • Historical Design:  {score}/100                   │
+│ • Iteration Rationale: {score}/100                  │
+│ • Extensibility:       {score}/100                  │
+│ • Market Roadmap:      {score}/100                  │
+│ • Req-Code Deviation:  {score}/100                  │
+│ • Upgrade Vulnerability: {score}/100                │
+├─────────────────────────────────────────────────────┤
+│ Key Findings:                                       │
+│ • {finding_1}                                       │
+│ • {finding_2}                                       │
+├─────────────────────────────────────────────────────┤
+│ Priority Actions:                                   │
+│ P0: {action_1}                                      │
+│ P1: {action_2}                                      │
+│ P2: {action_3}                                      │
+└─────────────────────────────────────────────────────┘
+```
+
+### Single Dimension Report
+
+```
+┌─────────────────────────────────────────────────────┐
+│ {Dimension} Assessment Report                       │
+├─────────────────────────────────────────────────────┤
+│ Score: {score}/100                                  │
+│ Status: {status}                                    │
+├─────────────────────────────────────────────────────┤
+│ Findings:                                           │
+│ 1. {finding} - {severity}                           │
+│ 2. {finding} - {severity}                           │
+├─────────────────────────────────────────────────────┤
+│ Recommendations:                                    │
+│ • {recommendation}                                  │
+└─────────────────────────────────────────────────────┘
+```
+
+## Analysis Dimensions Detail
+
+### Dimension 1: Historical Design Principles
+
+| Item | Description |
+|------|-------------|
+| Design Intent | What problem was the design solving? |
+| Design Basis | What data/assumptions/constraints was it based on? |
+| Current Validity | Is the design still valid today? |
+| Design Debt | Which decisions have become technical debt? |
+| Knowledge Transfer | Is design knowledge effectively preserved? |
+
+### Dimension 2: Iteration Rationale
+
+| Item | Description |
+|------|-------------|
+| Driving Force | Demand-driven, tech-driven, or market-driven? |
+| Evolution Path | Is the iteration path logical? |
+| Iteration Quality | Clean implementation or leftover debt? |
+| Iteration Pace | Is the frequency reasonable? |
+| Anomalous Iterations | Rollbacks, reworks, over-design? |
+
+### Dimension 3: Extensibility
+
+| Category | Assessment Items |
+|----------|-----------------|
+| Development | Modularity, interface abstraction, configurability, readability, test coverage |
+| Requirement Upgrade | Data model extensibility, API compatibility, business rule flexibility, state machine extension |
+| User Growth | Performance bottlenecks, data volume capacity, caching strategy, horizontal scaling, degradation |
+
+### Dimension 4: Market Roadmap
+
+| Item | Description |
+|------|-------------|
+| Feature Coverage | What's covered vs. uncovered? |
+| Requirement Trends | Historical trends and predictions |
+| Technology Trends | Current stack evolution direction |
+| Competitive Positioning | Gaps vs. industry standards |
+| Short-term (1-3mo) | Immediate action items |
+| Mid-term (3-6mo) | Strategic initiatives |
+| Long-term (6-12mo) | Vision and goals |
+
+### Dimension 5: Requirement-Code Deviation
+
+| Deviation Type | Description |
+|----------------|-------------|
+| Feature Gap | Required but not implemented |
+| Over-implementation | Implemented but not required |
+| Understanding Gap | Implementation doesn't match intent |
+| Technical Compromise | Requirement degraded due to tech limits |
+| Requirement Creep | Requirement silently expanded |
+| Requirement Shrink | Requirement silently reduced |
+| Documentation Lag | Code changed, docs not updated |
+
+### Dimension 6: Upgrade Vulnerability
+
+| Vulnerability Type | Description |
+|--------------------|-------------|
+| Data Model Fragility | Schema changes may cause migration issues |
+| API Incompatibility | Interface changes may break clients |
+| Hardcoded Traps | Hardcoded rules need code changes to modify |
+| State Machine Deadlock | State transitions may create illegal states |
+| Performance Bottleneck | Feature upgrades amplify existing perf issues |
+| Test Blind Spots | Untested modules have highest upgrade risk |
+| Dependency Coupling | Tight coupling causes cascade changes |
+
+## Learning Integration
+
+This skill supports FlowMind learning:
+
+- **Analysis Focus**: Learns which dimensions you care about most
+- **Severity Threshold**: Learns your risk tolerance
+- **Report Format**: Learns preferred report detail level
+
+## Examples
+
+### Example 1: Full Requirement Analysis
+
+```
+User: 对当前项目做一次全面需求分析
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Requirement Analysis Report                         │
+├─────────────────────────────────────────────────────┤
+│ Project: order-service                              │
+│ Analysis Scope: All 6 dimensions                    │
+│ Overall Score: 72/100                               │
+├─────────────────────────────────────────────────────┤
+│ Dimension Scores:                                   │
+│ • Historical Design:  75/100                        │
+│ • Iteration Rationale: 80/100                       │
+│ • Extensibility:       65/100                       │
+│ • Market Roadmap:      70/100                       │
+│ • Req-Code Deviation:  68/100                       │
+│ • Upgrade Vulnerability: 62/100                     │
+├─────────────────────────────────────────────────────┤
+│ Key Findings:                                       │
+│ • Order state machine lacks extensibility           │
+│ • 3 features have requirement-code deviation        │
+│ • Redis caching strategy needs redesign for scale   │
+├─────────────────────────────────────────────────────┤
+│ P0: Fix state machine deadlocks in refund flow      │
+│ P1: Align 3 deviated features with requirements     │
+│ P2: Redesign Redis caching for 10x user growth      │
+└─────────────────────────────────────────────────────┘
+```
+
+### Example 2: Upgrade Risk Assessment
+
+```
+User: 评估一下需求升级的风险
+
+FlowMind:
+┌─────────────────────────────────────────────────────┐
+│ Upgrade Vulnerability Report                        │
+├─────────────────────────────────────────────────────┤
+│ Vulnerabilities Found: 8                            │
+│ • HIGH: 2                                           │
+│ • MEDIUM: 3                                         │
+│ • LOW: 3                                            │
+├─────────────────────────────────────────────────────┤
+│ 🔴 HIGH: Order status enum hardcoded (OrderService) │
+│    Impact: All order operations                     │
+│    Fix: Extract to configuration                    │
+│                                                    │
+│ 🔴 HIGH: No index on order_items.product_id         │
+│    Impact: Query performance at scale               │
+│    Fix: Add composite index                         │
+│                                                    │
+│ 🟡 MEDIUM: Payment API v1 deprecated                │
+│    Impact: Payment processing                       │
+│    Fix: Migrate to v2 API                           │
+└─────────────────────────────────────────────────────┘
+```
+
+## Configuration
+
+```json
+{
+  "requirement-analyst": {
+    "dimensions": {
+      "historicalDesign": true,
+      "iterationRationale": true,
+      "extensibility": true,
+      "marketRoadmap": true,
+      "reqCodeDeviation": true,
+      "upgradeVulnerability": true
+    },
+    "scoringWeights": {
+      "historicalDesign": 0.15,
+      "iterationRationale": 0.15,
+      "extensibility": 0.20,
+      "marketRoadmap": 0.15,
+      "reqCodeDeviation": 0.15,
+      "upgradeVulnerability": 0.20
+    },
+    "reportFormat": "detailed"
+  }
+}
+```