kiro-kit 0.1.0

package/dist/presets/devops/commands/plan/refactor.md

@@ -0,0 +1,16 @@
+---
+description: Plan a refactoring effort with risk assessment
+inclusion: manual
+argument-hint: "[target-area]"
+---
+
+## Arguments
+TARGET: $1 (required)
+
+## Workflow
+1. Analyze current state of target area
+2. Identify pain points and technical debt
+3. Design target architecture
+4. Plan migration steps with rollback points
+5. Estimate effort and risk
+6. Output plan to `plans/` directory

package/dist/presets/devops/commands/release.md

@@ -0,0 +1,17 @@
+---
+description: Prepare and execute a release with version bump and changelog
+inclusion: manual
+argument-hint: "[version-type]"
+---
+
+## Arguments
+VERSION_TYPE: $1 (default: patch, options: major, minor, patch)
+
+## Workflow
+1. Verify working tree is clean
+2. Run full test suite
+3. Bump version in package.json
+4. Update CHANGELOG.md with new entries
+5. Create git commit and tag
+6. Push to remote with tags
+7. Report release summary

package/dist/presets/devops/commands/review/code.md

@@ -0,0 +1,15 @@
+---
+description: Review recent code changes for quality and correctness
+inclusion: manual
+argument-hint: "[scope]"
+---
+
+## Arguments
+SCOPE: $1 (default: recent changes via git diff)
+
+## Workflow
+1. Identify files to review (git diff or specified scope)
+2. Check code quality, patterns, and standards
+3. Identify security concerns
+4. Verify error handling and edge cases
+5. Produce review report with categorized findings

package/dist/presets/devops/commands/review/security.md

@@ -0,0 +1,16 @@
+---
+description: Run security review on infrastructure and application code
+inclusion: manual
+argument-hint: "[scope]"
+---
+
+## Arguments
+SCOPE: $1 (default: full project)
+
+## Workflow
+1. Scan for hardcoded secrets and credentials
+2. Check IAM policies for over-permissive access
+3. Review network security configurations
+4. Validate encryption settings
+5. Check dependency vulnerabilities
+6. Produce security report with severity ratings

package/dist/presets/devops/commands/scout/ext.md

@@ -0,0 +1,16 @@
+---
+description: Scout codebase using external agentic tools for faster parallel search
+inclusion: manual
+argument-hint: "[search-query] [scale]"
+---
+
+## Arguments
+QUERY: $1 (required)
+SCALE: $2 (default: 3)
+
+## Workflow
+1. Analyze search query and divide into parallel tasks
+2. Launch external agents (Gemini, OpenCode) for each section
+3. Collect results within 3-minute timeout
+4. Deduplicate and organize findings
+5. Present file list with coverage gaps

package/dist/presets/devops/commands/scout.md

@@ -0,0 +1,16 @@
+---
+description: Scout the codebase for files relevant to a task
+inclusion: manual
+argument-hint: "[search-query] [scale]"
+---
+
+## Arguments
+QUERY: $1 (required)
+SCALE: $2 (default: 3)
+
+## Workflow
+1. Analyze the search query and identify key directories
+2. Divide codebase into logical sections for parallel searching
+3. Search each section for files matching the query
+4. Deduplicate and organize results by category
+5. Present file list with any coverage gaps noted

package/dist/presets/devops/commands/skill/add.md

@@ -0,0 +1,16 @@
+---
+description: Add new reference files or scripts to a skill
+inclusion: manual
+argument-hint: "[skill-name] [reference-prompt]"
+---
+
+## Arguments
+SKILL: $1 (required)
+PROMPT: $2 (required)
+
+## Workflow
+1. Locate skill directory at `.kiro/skills/$1`
+2. Analyze requirements from prompt
+3. Create reference files or scripts as needed
+4. Update SKILL.md if new capabilities added
+5. Verify skill structure is valid

package/dist/presets/devops/commands/skill/create.md

@@ -0,0 +1,16 @@
+---
+description: Create a new skill from template
+inclusion: manual
+argument-hint: "[skill-name] [description]"
+---
+
+## Arguments
+NAME: $1 (required, kebab-case)
+DESCRIPTION: $2 (required)
+
+## Workflow
+1. Copy template-skill directory to `.kiro/skills/$1`
+2. Update SKILL.md front-matter with name and description
+3. Customize content based on description
+4. Create references/ directory if needed
+5. Verify skill structure is valid

package/dist/presets/devops/commands/skill/optimize.md

@@ -0,0 +1,16 @@
+---
+description: Optimize an existing agent skill
+inclusion: manual
+argument-hint: "[skill-name] [prompt]"
+---
+
+## Arguments
+SKILL: $1 (required)
+PROMPT: $2 (default: empty)
+
+## Workflow
+1. Read current skill at `.kiro/skills/$1`
+2. Analyze for improvement opportunities
+3. Propose optimization plan
+4. Ask user to review before implementing
+5. Apply approved changes

package/dist/presets/devops/commands/test.md

@@ -0,0 +1,15 @@
+---
+description: Run the test suite with coverage reporting
+inclusion: manual
+argument-hint: "[pattern]"
+---
+
+## Arguments
+PATTERN: $1 (default: all tests)
+
+## Workflow
+1. Run test suite with coverage
+2. If pattern provided, filter tests to match
+3. Report test results summary (passed, failed, skipped)
+4. Report coverage metrics (lines, branches, functions)
+5. Highlight any failing tests with error details

package/dist/presets/devops/docs/code-standards.md

@@ -0,0 +1,82 @@
+# Code Standards
+
+## Terraform
+
+- Use `terraform fmt` for consistent formatting
+- Pin provider versions in `versions.tf`
+- Use modules for reusable infrastructure components
+- Variables must have descriptions and type constraints
+- Use validation blocks for input validation
+- Outputs must have descriptions
+- Use `locals` for computed values, not repeated expressions
+- Never hardcode account IDs, regions, or environment names
+
+## Docker
+
+- Use multi-stage builds for production images
+- Pin base image versions (no `latest` tag)
+- Run as non-root user
+- Use `.dockerignore` to minimize build context
+- Order layers from least to most frequently changing
+- Combine RUN commands to reduce layers
+- Set HEALTHCHECK instruction
+
+## Kubernetes
+
+- Use namespaces for isolation
+- Set resource requests AND limits
+- Implement liveness, readiness, and startup probes
+- Use ConfigMaps for non-sensitive config
+- Use external secret managers for sensitive data
+- Apply network policies
+- Use pod disruption budgets for critical workloads
+
+## CI/CD Pipelines
+
+- Pin action/image versions to SHA
+- Use OIDC for cloud authentication
+- Cache dependencies and build artifacts
+- Fail fast: cheapest checks run first
+- Separate build and deploy stages
+- Include rollback mechanism
+
+## File Organization
+
+```
+infrastructure/
+  modules/             Reusable Terraform modules
+  environments/        Environment-specific configs
+kubernetes/
+  base/                Kustomize base manifests
+  overlays/            Environment overlays
+docker/
+  Dockerfile           Application Dockerfile
+  docker-compose.yml   Local development
+.github/workflows/     CI/CD pipeline definitions
+scripts/               Operational scripts
+docs/                  Documentation
+```
+
+## Naming
+
+- Terraform resources: snake_case (`web_server`)
+- Kubernetes resources: kebab-case (`my-service`)
+- Docker images: kebab-case (`my-app`)
+- Environment variables: UPPER_SNAKE_CASE (`DATABASE_URL`)
+- Files: kebab-case (`deploy-script.sh`)
+
+## Git Conventions
+
+- Conventional commits: `type(scope): description`
+- Branch naming: `feature/description`, `fix/description`, `infra/description`
+- PR titles under 72 characters
+- Squash merge to main
+
+## Security
+
+- No secrets in code or environment files committed to git
+- Use secret managers (AWS Secrets Manager, Vault, etc.)
+- Least-privilege IAM policies
+- Encrypt data at rest and in transit
+- Scan dependencies and images for vulnerabilities
+- Review security groups and network policies regularly

package/dist/presets/devops/docs/project-roadmap.md

@@ -0,0 +1,58 @@
+# Project Roadmap
+
+## Current Phase: [Phase Name]
+
+### Phase 1: Foundation (Status: [Not Started/In Progress/Complete])
+
+- [ ] Infrastructure repository setup
+- [ ] CI/CD pipeline configuration
+- [ ] Development environment provisioning
+- [ ] Monitoring and alerting baseline
+- [ ] Security scanning integration
+
+### Phase 2: Core Infrastructure (Status: [Not Started/In Progress/Complete])
+
+- [ ] Production VPC and networking
+- [ ] Compute cluster setup (EKS/ECS/GKE)
+- [ ] Database provisioning with backups
+- [ ] Secret management configuration
+- [ ] DNS and certificate management
+
+### Phase 3: Application Deployment (Status: [Not Started/In Progress/Complete])
+
+- [ ] Container build pipeline
+- [ ] Deployment automation
+- [ ] Health check and auto-scaling
+- [ ] Blue-green or canary deployment
+- [ ] Rollback procedures
+
+### Phase 4: Observability (Status: [Not Started/In Progress/Complete])
+
+- [ ] Metrics collection and dashboards
+- [ ] Centralized logging
+- [ ] Distributed tracing
+- [ ] Alert routing and escalation
+- [ ] SLI/SLO definitions
+
+### Phase 5: Hardening (Status: [Not Started/In Progress/Complete])
+
+- [ ] Security audit and remediation
+- [ ] Performance testing and optimization
+- [ ] Disaster recovery testing
+- [ ] Documentation and runbooks
+- [ ] Cost optimization
+
+## Success Metrics
+
+| Metric | Target | Current |
+|--------|--------|---------|
+| Deployment frequency | Daily | [current] |
+| Lead time for changes | < 1 hour | [current] |
+| Change failure rate | < 5% | [current] |
+| Mean time to recovery | < 30 min | [current] |
+
+## Changelog
+
+### [Unreleased]
+
+- [Changes not yet released]

package/dist/presets/devops/docs/system-architecture.md

@@ -0,0 +1,85 @@
+# System Architecture
+
+## Overview
+
+Document the high-level system architecture, infrastructure components, and their interactions.
+
+## Infrastructure Diagram
+
+```
+[Internet]
+    |
+[CDN / WAF]
+    |
+[Load Balancer]
+    |
++---+---+
+|       |
+[App]  [App]  (Auto-scaling group)
+|       |
++---+---+
+    |
+[Database]  [Cache]  [Queue]
+```
+
+## Components
+
+### Compute
+
+| Component | Technology | Purpose |
+|-----------|-----------|---------|
+| Application | [ECS/EKS/EC2] | [description] |
+| Workers | [Lambda/ECS] | [description] |
+| Scheduler | [EventBridge/CronJob] | [description] |
+
+### Storage
+
+| Component | Technology | Purpose |
+|-----------|-----------|---------|
+| Primary DB | [RDS/Cloud SQL] | [description] |
+| Cache | [ElastiCache/Memorystore] | [description] |
+| Object Store | [S3/GCS] | [description] |
+
+### Networking
+
+| Component | CIDR/Config | Purpose |
+|-----------|-------------|---------|
+| VPC | 10.0.0.0/16 | [description] |
+| Public Subnets | 10.0.1.0/24 | Load balancers |
+| Private Subnets | 10.0.10.0/24 | Application |
+| Data Subnets | 10.0.20.0/24 | Databases |
+
+## Environments
+
+| Environment | Purpose | Scale | Region |
+|-------------|---------|-------|--------|
+| Development | Feature development | Minimal | [region] |
+| Staging | Pre-production testing | Production-like | [region] |
+| Production | Live traffic | Auto-scaled | [region] |
+
+## Deployment Pipeline
+
+```
+Code Push -> Lint/Test -> Build Image -> Scan -> Deploy Dev -> Deploy Staging -> Deploy Prod
+```
+
+## Monitoring
+
+- Metrics: [Prometheus/CloudWatch/Datadog]
+- Logging: [ELK/CloudWatch Logs/Loki]
+- Tracing: [OpenTelemetry/X-Ray/Jaeger]
+- Alerting: [PagerDuty/OpsGenie/Slack]
+
+## Disaster Recovery
+
+- RTO: [target]
+- RPO: [target]
+- Backup strategy: [description]
+- Failover procedure: [description]
+
+## Security
+
+- Authentication: [method]
+- Authorization: [method]
+- Encryption: [at rest and in transit details]
+- Network security: [VPC, security groups, NACLs]

package/dist/presets/devops/hooks/.env.example

@@ -0,0 +1,9 @@
+# Hook environment variables
+# Copy this file to .env and fill in your values.
+
+# Discord webhook URL for notifications
+DISCORD_WEBHOOK_URL=<your-discord-webhook-url>
+
+# Telegram bot token and chat ID for notifications
+TELEGRAM_BOT_TOKEN=<your-telegram-bot-token>
+TELEGRAM_CHAT_ID=<your-telegram-chat-id>

package/dist/presets/devops/hooks/README.md

@@ -0,0 +1,30 @@
+# Hooks
+
+Cross-platform hook scripts for Kiro IDE automation.
+
+## Available Hooks
+
+| Hook | Trigger | Description |
+|------|---------|-------------|
+| scout-block | PreToolUse | Blocks dangerous commands (rm -rf, drop database, etc.) |
+| build-verify | PreToolUse | Verifies build artifacts exist before deployment commands |
+| modularization-hook | PostToolUse | Warns when files exceed 200 lines |
+| image-scan | PostToolUse | Reminds to scan container images after docker build |
+| discord-notify | agentStop | Sends notification via Discord webhook |
+| telegram-notify | agentStop | Sends notification via Telegram bot |
+| pre-commit-lint | PreToolUse | Runs linter before commit |
+| git-status-tracker | PostToolUse | Logs git working tree status summary |
+
+## Platform Support
+
+Each hook has a primary `.js` (Node.js) version and platform-specific fallbacks:
+- `.js` - Cross-platform (requires Node.js)
+- `.sh` - Unix/macOS/Linux (bash)
+- `.ps1` - Windows (PowerShell)
+
+## Environment Variables
+
+Copy `hooks/.env.example` to `hooks/.env` and configure:
+- `DISCORD_WEBHOOK_URL` - Required for discord-notify
+- `TELEGRAM_BOT_TOKEN` - Required for telegram-notify
+- `TELEGRAM_CHAT_ID` - Required for telegram-notify

package/dist/presets/devops/hooks/build-verify.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+// PreToolUse hook: verifies build artifacts exist before deployment commands.
+// Prevents deploying stale or missing builds.
+
+const fs = require('fs');
+const path = require('path');
+
+const DEPLOY_PATTERNS = [
+  /kubectl\s+apply/i,
+  /helm\s+(install|upgrade)/i,
+  /terraform\s+apply/i,
+  /docker\s+push/i,
+  /aws\s+.*deploy/i,
+  /gcloud\s+.*deploy/i,
+];
+
+const input = process.argv.slice(2).join(' ') || '';
+const isDeployCommand = DEPLOY_PATTERNS.some((p) => p.test(input));
+
+if (!isDeployCommand) {
+  process.exit(0);
+}
+
+// Check for common build artifacts
+const buildIndicators = [
+  'dist',
+  'build',
+  'Dockerfile',
+  'docker-compose.yml',
+  'docker-compose.yaml',
+];
+
+const hasArtifact = buildIndicators.some((indicator) => {
+  return fs.existsSync(path.resolve(process.cwd(), indicator));
+});
+
+if (!hasArtifact) {
+  process.stderr.write(
+    '[build-verify] Warning: No build artifacts found. Run build before deploying.\n'
+  );
+  // Exit 0 to warn but not block -- user may have artifacts elsewhere
+}
+
+process.exit(0);

package/dist/presets/devops/hooks/discord-notify.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+// Sends a notification to Discord via webhook.
+// Requires DISCORD_WEBHOOK_URL in hooks/.env or environment.
+
+const https = require('https');
+
+const WEBHOOK_URL = process.env.DISCORD_WEBHOOK_URL || '';
+const message = process.argv.slice(2).join(' ') || 'Agent task completed.';
+
+if (!WEBHOOK_URL) {
+  process.stderr.write('[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping.\n');
+  process.exit(0);
+}
+
+const url = new URL(WEBHOOK_URL);
+const payload = JSON.stringify({ content: message });
+
+const options = {
+  hostname: url.hostname,
+  path: url.pathname,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+};
+
+const req = https.request(options, (res) => {
+  process.exit(res.statusCode >= 200 && res.statusCode < 300 ? 0 : 1);
+});
+
+req.on('error', () => process.exit(1));
+req.write(payload);
+req.end();

package/dist/presets/devops/hooks/discord-notify.ps1

@@ -0,0 +1,19 @@
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+$Message = if ($args.Count -gt 0) { $args -join ' ' } else { 'Agent task completed.' }
+
+$WebhookUrl = $env:DISCORD_WEBHOOK_URL
+
+if (-not $WebhookUrl) {
+    Write-Error "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping."
+    exit 0
+}
+
+$Body = @{ content = $Message } | ConvertTo-Json
+try {
+    Invoke-RestMethod -Uri $WebhookUrl -Method Post -Body $Body -ContentType 'application/json'
+    exit 0
+} catch {
+    exit 1
+}

package/dist/presets/devops/hooks/discord-notify.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+MESSAGE="${*:-Agent task completed.}"
+
+if [ -z "$DISCORD_WEBHOOK_URL" ]; then
+  echo "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping." >&2
+  exit 0
+fi
+
+curl -s -o /dev/null -w "%{http_code}" \
+  -H "Content-Type: application/json" \
+  -d "{\"content\": \"$MESSAGE\"}" \
+  "$DISCORD_WEBHOOK_URL" | grep -q "^2" && exit 0 || exit 1

package/dist/presets/devops/hooks/git-status-tracker.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+// Tracks git status changes and logs summary.
+// Useful as a PostToolUse or agentStop hook.
+
+const { execSync } = require('child_process');
+
+try {
+  const status = execSync('git status --porcelain', { encoding: 'utf8' }).trim();
+  if (!status) {
+    process.stdout.write('[git-status] Working tree clean.\n');
+    process.exit(0);
+  }
+
+  const lines = status.split('\n');
+  const added = lines.filter((l) => l.startsWith('A') || l.startsWith('?')).length;
+  const modified = lines.filter((l) => l.startsWith('M') || l.startsWith(' M')).length;
+  const deleted = lines.filter((l) => l.startsWith('D') || l.startsWith(' D')).length;
+
+  process.stdout.write(
+    `[git-status] ${lines.length} changes: +${added} ~${modified} -${deleted}\n`
+  );
+} catch (err) {
+  process.stderr.write('[git-status] Not a git repository or git unavailable.\n');
+}
+
+process.exit(0);

package/dist/presets/devops/hooks/image-scan.js

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+// PostToolUse hook: reminds to scan container images after docker build.
+// Checks if a docker build was just executed and suggests scanning.
+
+const DOCKER_BUILD_PATTERNS = [
+  /docker\s+build/i,
+  /docker\s+compose\s+build/i,
+  /podman\s+build/i,
+  /buildah\s+bud/i,
+  /nerdctl\s+build/i,
+];
+
+const input = process.argv.slice(2).join(' ') || '';
+const isDockerBuild = DOCKER_BUILD_PATTERNS.some((p) => p.test(input));
+
+if (!isDockerBuild) {
+  process.exit(0);
+}
+
+process.stdout.write(
+  '[image-scan] Container image built. Run vulnerability scan before pushing:\n' +
+  '  trivy image <image-name>\n' +
+  '  grype <image-name>\n' +
+  '  docker scout cves <image-name>\n'
+);
+
+process.exit(0);

package/dist/presets/devops/hooks/modularization-hook.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+// PostToolUse hook: warns when a file exceeds 200 lines.
+// Encourages splitting large files into smaller modules.
+
+const fs = require('fs');
+const path = require('path');
+
+const MAX_LINES = 200;
+const CODE_EXTENSIONS = ['.js', '.ts', '.jsx', '.tsx', '.py', '.go', '.rs', '.java', '.tf', '.yaml', '.yml'];
+
+const filePath = process.argv[2] || '';
+
+if (!filePath || !fs.existsSync(filePath)) {
+  process.exit(0);
+}
+
+const ext = path.extname(filePath).toLowerCase();
+if (!CODE_EXTENSIONS.includes(ext)) {
+  process.exit(0);
+}
+
+try {
+  const content = fs.readFileSync(filePath, 'utf8');
+  const lineCount = content.split('\n').length;
+
+  if (lineCount > MAX_LINES) {
+    process.stderr.write(
+      `[modularization] Warning: ${filePath} has ${lineCount} lines (max ${MAX_LINES}). Consider splitting.\n`
+    );
+    process.exit(1);
+  }
+} catch (err) {
+  // Silently ignore read errors
+}
+
+process.exit(0);

package/dist/presets/devops/hooks/pre-commit-lint.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// Pre-commit hook: runs linter on staged files.
+// Exits non-zero if lint fails, preventing commit.
+
+const { execSync } = require('child_process');
+
+try {
+  execSync('npm run lint --silent', { stdio: 'pipe' });
+  process.exit(0);
+} catch (err) {
+  process.stderr.write('[pre-commit-lint] Lint failed. Fix errors before committing.\n');
+  if (err.stdout) process.stderr.write(err.stdout.toString());
+  if (err.stderr) process.stderr.write(err.stderr.toString());
+  process.exit(1);
+}