kiro-kit 0.1.0

package/dist/presets/mobile/docs/code-standards.md

@@ -0,0 +1,74 @@
+# Code Standards
+
+## Dart/Flutter
+
+- Dart 3+ with sound null safety
+- Follow effective Dart style guide
+- Use `dart analyze` with zero warnings policy
+- Format with `dart format` (line length 80)
+
+## File Organization
+
+```
+lib/
+  app/                   App config, themes, router
+  core/                  Constants, extensions, utilities
+  features/
+    [feature]/
+      data/              Repositories, data sources, DTOs
+      domain/            Entities, use cases, interfaces
+      presentation/
+        screens/         Screen widgets
+        widgets/         Feature widgets
+        bloc/            State management
+  shared/
+    widgets/             Cross-feature reusable widgets
+    services/            Shared services
+test/
+  features/[feature]/    Mirrors lib/ structure
+```
+
+## Naming
+
+- Files: snake_case (`user_profile_screen.dart`)
+- Classes: PascalCase (`UserProfileScreen`)
+- Variables/functions: camelCase (`getUserProfile`)
+- Constants: camelCase (`defaultPadding`) or UPPER_SNAKE_CASE (`API_BASE_URL`)
+- BLoC events: PascalCase past tense (`ProfileLoaded`)
+- BLoC states: PascalCase adjective (`ProfileLoading`)
+
+## Widget Rules
+
+- Prefer StatelessWidget with const constructors
+- Keep build methods under 80 lines
+- Extract sub-widgets into separate classes (not methods)
+- Use named parameters for 3+ parameters
+- Always include Key parameter
+
+## State Management
+
+- BLoC for complex features, Riverpod for simpler state
+- Keep state immutable (freezed or sealed classes)
+- Handle all async states: initial, loading, success, failure
+- Dispose resources properly
+
+## Error Handling
+
+- Use typed error classes (sealed class hierarchy)
+- Never catch generic Exception without rethrowing
+- User-facing errors must be actionable
+- Log errors to crash reporting in production
+
+## Testing
+
+- Widget tests colocated in test/ mirroring lib/
+- Use `mocktail` for mocking
+- Test behavior, not implementation
+- Golden tests for visual regression
+
+## Git Conventions
+
+- Conventional commits: `type(scope): description`
+- Branch naming: `feature/description`, `fix/description`
+- PR titles under 72 characters
+- Squash merge to main

package/dist/presets/mobile/docs/project-roadmap.md

@@ -0,0 +1,48 @@
+# Project Roadmap
+
+## Current Phase: [Phase Name]
+
+### Phase 1: Foundation
+- [ ] Project setup and architecture scaffolding
+- [ ] Core infrastructure (networking, storage, DI)
+- [ ] Authentication flow
+- [ ] Navigation framework
+- [ ] Design system and theme
+
+### Phase 2: Core Features
+- [ ] [Feature 1]
+- [ ] [Feature 2]
+- [ ] [Feature 3]
+
+### Phase 3: Platform Polish
+- [ ] iOS-specific refinements
+- [ ] Android-specific refinements
+- [ ] Performance optimization
+- [ ] Accessibility audit and fixes
+
+### Phase 4: Release Preparation
+- [ ] App store assets (screenshots, descriptions)
+- [ ] Beta testing (TestFlight, Internal Testing)
+- [ ] Crash reporting and analytics setup
+- [ ] Store submission
+
+## Milestones
+
+| Milestone | Target Date | Status |
+|-----------|-------------|--------|
+| Alpha (internal) | TBD | Not started |
+| Beta (testers) | TBD | Not started |
+| Release candidate | TBD | Not started |
+| Production launch | TBD | Not started |
+
+## Platform Support
+
+- iOS: [minimum version]
+- Android: [minimum API level]
+- Tablet support: [yes/no]
+
+## Dependencies
+
+- Flutter SDK: [version]
+- Dart SDK: [version]
+- Key packages: [list critical dependencies]

package/dist/presets/mobile/docs/system-architecture.md

@@ -0,0 +1,70 @@
+# System Architecture
+
+## Overview
+
+This document describes the mobile application architecture following clean architecture principles with clear separation of concerns.
+
+## Architecture Layers
+
+```
++------------------+
+| Presentation     |  Widgets, Screens, BLoC/Cubit
++------------------+
+| Domain           |  Entities, Use Cases, Repository Interfaces
++------------------+
+| Data             |  Repositories, Data Sources, DTOs
++------------------+
+| Core             |  Utilities, Constants, Extensions
++------------------+
+```
+
+## Dependency Rule
+
+Dependencies point inward. Outer layers depend on inner layers, never the reverse.
+
+- Presentation depends on Domain
+- Data depends on Domain (implements interfaces)
+- Domain depends on nothing (pure business logic)
+
+## State Management
+
+- Pattern: BLoC (Business Logic Component)
+- Events flow in, states flow out
+- Unidirectional data flow
+- States are immutable value objects
+
+## Navigation
+
+- Declarative routing with go_router
+- Type-safe route parameters
+- Deep link support
+- Authentication guards at router level
+
+## Data Flow
+
+1. User interaction triggers UI event
+2. BLoC receives event, calls use case
+3. Use case orchestrates repository calls
+4. Repository fetches from remote or local source
+5. Result propagates back as new state
+6. UI rebuilds based on new state
+
+## Platform Integration
+
+- Platform channels for native features
+- Abstracted behind interfaces for testability
+- Graceful degradation when features unavailable
+
+## Offline Strategy
+
+- Local database as primary data source
+- Background sync when connectivity available
+- Conflict resolution: last-write-wins with user notification
+- Queue-based operation replay for mutations
+
+## Security
+
+- Secure storage for credentials (Keychain/Keystore)
+- Certificate pinning for API communication
+- Code obfuscation in release builds
+- No sensitive data in logs or crash reports

package/dist/presets/mobile/hooks/.env.example

@@ -0,0 +1,9 @@
+# Hook environment variables
+# Copy this file to .env and fill in your values.
+
+# Discord webhook URL for notifications
+DISCORD_WEBHOOK_URL=<your-discord-webhook-url>
+
+# Telegram bot token and chat ID for notifications
+TELEGRAM_BOT_TOKEN=<your-telegram-bot-token>
+TELEGRAM_CHAT_ID=<your-telegram-chat-id>

package/dist/presets/mobile/hooks/README.md

@@ -0,0 +1,28 @@
+# Hooks
+
+Cross-platform hook scripts for Kiro IDE automation.
+
+## Available Hooks
+
+| Hook | Trigger | Description |
+|------|---------|-------------|
+| scout-block | PreToolUse | Blocks dangerous commands (rm -rf, drop database, etc.) |
+| modularization-hook | PostToolUse | Warns when files exceed 200 lines |
+| discord-notify | agentStop | Sends notification via Discord webhook |
+| telegram-notify | agentStop | Sends notification via Telegram bot |
+| pre-commit-lint | PreToolUse | Runs analyzer/linter before commit |
+| git-status-tracker | PostToolUse | Logs git working tree status summary |
+
+## Platform Support
+
+Each hook has a primary `.js` (Node.js) version and platform-specific fallbacks:
+- `.js` - Cross-platform (requires Node.js)
+- `.sh` - Unix/macOS/Linux (bash)
+- `.ps1` - Windows (PowerShell)
+
+## Environment Variables
+
+Copy `hooks/.env.example` to `hooks/.env` and configure:
+- `DISCORD_WEBHOOK_URL` - Required for discord-notify
+- `TELEGRAM_BOT_TOKEN` - Required for telegram-notify
+- `TELEGRAM_CHAT_ID` - Required for telegram-notify

package/dist/presets/mobile/hooks/discord-notify.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+// Sends a notification to Discord via webhook.
+// Requires DISCORD_WEBHOOK_URL in hooks/.env or environment.
+
+const https = require('https');
+
+const WEBHOOK_URL = process.env.DISCORD_WEBHOOK_URL || '';
+const message = process.argv.slice(2).join(' ') || 'Agent task completed.';
+
+if (!WEBHOOK_URL) {
+  process.stderr.write('[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping.\n');
+  process.exit(0);
+}
+
+const url = new URL(WEBHOOK_URL);
+const payload = JSON.stringify({ content: message });
+
+const options = {
+  hostname: url.hostname,
+  path: url.pathname,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+};
+
+const req = https.request(options, (res) => {
+  process.exit(res.statusCode >= 200 && res.statusCode < 300 ? 0 : 1);
+});
+
+req.on('error', () => process.exit(1));
+req.write(payload);
+req.end();

package/dist/presets/mobile/hooks/discord-notify.ps1

@@ -0,0 +1,19 @@
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+$Message = if ($args.Count -gt 0) { $args -join ' ' } else { 'Agent task completed.' }
+
+$WebhookUrl = $env:DISCORD_WEBHOOK_URL
+
+if (-not $WebhookUrl) {
+    Write-Error "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping."
+    exit 0
+}
+
+$Body = @{ content = $Message } | ConvertTo-Json
+try {
+    Invoke-RestMethod -Uri $WebhookUrl -Method Post -Body $Body -ContentType 'application/json'
+    exit 0
+} catch {
+    exit 1
+}

package/dist/presets/mobile/hooks/discord-notify.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Sends a notification to Discord via webhook.
+# Requires DISCORD_WEBHOOK_URL in environment.
+
+MESSAGE="${*:-Agent task completed.}"
+
+if [ -z "$DISCORD_WEBHOOK_URL" ]; then
+  echo "[discord-notify] DISCORD_WEBHOOK_URL not set. Skipping." >&2
+  exit 0
+fi
+
+curl -s -o /dev/null -w "%{http_code}" \
+  -H "Content-Type: application/json" \
+  -d "{\"content\": \"$MESSAGE\"}" \
+  "$DISCORD_WEBHOOK_URL" | grep -q "^2" && exit 0 || exit 1

package/dist/presets/mobile/hooks/git-status-tracker.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+// Tracks git status changes and logs summary.
+// Useful as a PostToolUse or agentStop hook.
+
+const { execSync } = require('child_process');
+
+try {
+  const status = execSync('git status --porcelain', { encoding: 'utf8' }).trim();
+  if (!status) {
+    process.stdout.write('[git-status] Working tree clean.\n');
+    process.exit(0);
+  }
+
+  const lines = status.split('\n');
+  const added = lines.filter((l) => l.startsWith('A') || l.startsWith('?')).length;
+  const modified = lines.filter((l) => l.startsWith('M') || l.startsWith(' M')).length;
+  const deleted = lines.filter((l) => l.startsWith('D') || l.startsWith(' D')).length;
+
+  process.stdout.write(
+    `[git-status] ${lines.length} changes: +${added} ~${modified} -${deleted}\n`
+  );
+} catch (err) {
+  process.stderr.write('[git-status] Not a git repository or git unavailable.\n');
+}
+
+process.exit(0);

package/dist/presets/mobile/hooks/modularization-hook.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+// PostToolUse hook: warns when a file exceeds 200 lines.
+// Encourages splitting large files into smaller modules.
+
+const fs = require('fs');
+const path = require('path');
+
+const MAX_LINES = 200;
+const CODE_EXTENSIONS = ['.dart', '.ts', '.tsx', '.js', '.jsx', '.swift', '.kt', '.java'];
+
+const filePath = process.argv[2] || '';
+
+if (!filePath || !fs.existsSync(filePath)) {
+  process.exit(0);
+}
+
+const ext = path.extname(filePath).toLowerCase();
+if (!CODE_EXTENSIONS.includes(ext)) {
+  process.exit(0);
+}
+
+try {
+  const content = fs.readFileSync(filePath, 'utf8');
+  const lineCount = content.split('\n').length;
+
+  if (lineCount > MAX_LINES) {
+    process.stderr.write(
+      `[modularization] Warning: ${filePath} has ${lineCount} lines (max ${MAX_LINES}). Consider splitting.\n`
+    );
+    process.exit(1);
+  }
+} catch (err) {
+  // Silently ignore read errors
+}
+
+process.exit(0);

package/dist/presets/mobile/hooks/pre-commit-lint.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+// Pre-commit hook: runs linter/analyzer on the project.
+// Exits non-zero if analysis fails, preventing commit.
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+
+// Detect project type and run appropriate linter
+let command = '';
+if (fs.existsSync('pubspec.yaml')) {
+  command = 'dart analyze';
+} else if (fs.existsSync('package.json')) {
+  command = 'npm run lint --silent';
+} else {
+  process.exit(0);
+}
+
+try {
+  execSync(command, { stdio: 'pipe' });
+  process.exit(0);
+} catch (err) {
+  process.stderr.write('[pre-commit-lint] Analysis failed. Fix errors before committing.\n');
+  if (err.stdout) process.stderr.write(err.stdout.toString());
+  if (err.stderr) process.stderr.write(err.stderr.toString());
+  process.exit(1);
+}

package/dist/presets/mobile/hooks/scout-block.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+// Security guard: blocks dangerous commands before execution.
+// Registered as PreToolUse hook.
+
+const BLOCKED_PATTERNS = [
+  /rm\s+(-rf|-fr)\s+[\/~]/i,
+  /rm\s+(-rf|-fr)\s+\./i,
+  /drop\s+(database|table|schema)/i,
+  /truncate\s+table/i,
+  /delete\s+from\s+\w+\s*;?\s*$/i,
+  /format\s+[a-z]:/i,
+  /mkfs\./i,
+  /dd\s+if=.*of=\/dev/i,
+  /chmod\s+-R\s+777\s+\//i,
+  />\s*\/dev\/sd[a-z]/i,
+  /:(){ :\|:& };:/,
+  /shutdown/i,
+  /reboot/i,
+  /init\s+0/i,
+];
+
+const input = process.argv.slice(2).join(' ') || '';
+const blocked = BLOCKED_PATTERNS.some((p) => p.test(input));
+
+if (blocked) {
+  process.stderr.write(`[scout-block] Blocked dangerous command: ${input}\n`);
+  process.exit(2);
+}
+
+process.exit(0);

package/dist/presets/mobile/hooks/scout-block.ps1

@@ -0,0 +1,26 @@
+# Security guard: blocks dangerous commands before execution.
+# Registered as PreToolUse hook.
+
+$Input = $args -join ' '
+
+$BlockedPatterns = @(
+    'rm\s+(-rf|-fr)\s+[\/~]'
+    'drop\s+(database|table|schema)'
+    'truncate\s+table'
+    'format\s+[a-z]:'
+    'mkfs\.'
+    'dd\s+if=.*of=\/dev'
+    'chmod\s+-R\s+777\s+\/'
+    'shutdown'
+    'reboot'
+    'init\s+0'
+)
+
+foreach ($pattern in $BlockedPatterns) {
+    if ($Input -match $pattern) {
+        Write-Error "[scout-block] Blocked dangerous command: $Input"
+        exit 2
+    }
+}
+
+exit 0

package/dist/presets/mobile/hooks/scout-block.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# Security guard: blocks dangerous commands before execution.
+# Registered as PreToolUse hook.
+
+INPUT="$*"
+
+BLOCKED_PATTERNS=(
+  "rm -rf /"
+  "rm -fr /"
+  "rm -rf ~"
+  "rm -rf ."
+  "drop database"
+  "drop table"
+  "truncate table"
+  "mkfs."
+  "dd if="
+  "chmod -R 777 /"
+  "shutdown"
+  "reboot"
+  "init 0"
+  "format c:"
+)
+
+for pattern in "${BLOCKED_PATTERNS[@]}"; do
+  if echo "$INPUT" | grep -qi "$pattern"; then
+    echo "[scout-block] Blocked dangerous command: $INPUT" >&2
+    exit 2
+  fi
+done
+
+exit 0

package/dist/presets/mobile/hooks/telegram-notify.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+// Sends a notification to Telegram via bot API.
+// Requires TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID in environment.
+
+const https = require('https');
+
+const TOKEN = process.env.TELEGRAM_BOT_TOKEN || '';
+const CHAT_ID = process.env.TELEGRAM_CHAT_ID || '';
+const message = process.argv.slice(2).join(' ') || 'Agent task completed.';
+
+if (!TOKEN || !CHAT_ID) {
+  process.stderr.write('[telegram-notify] TELEGRAM_BOT_TOKEN or TELEGRAM_CHAT_ID not set. Skipping.\n');
+  process.exit(0);
+}
+
+const payload = JSON.stringify({ chat_id: CHAT_ID, text: message });
+const options = {
+  hostname: 'api.telegram.org',
+  path: `/bot${TOKEN}/sendMessage`,
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+};
+
+const req = https.request(options, (res) => {
+  process.exit(res.statusCode >= 200 && res.statusCode < 300 ? 0 : 1);
+});
+
+req.on('error', () => process.exit(1));
+req.write(payload);
+req.end();

package/dist/presets/mobile/hooks/telegram-notify.ps1

@@ -0,0 +1,22 @@
+# Sends a notification to Telegram via bot API.
+# Requires TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID in environment.
+
+$Message = if ($args.Count -gt 0) { $args -join ' ' } else { 'Agent task completed.' }
+
+$Token = $env:TELEGRAM_BOT_TOKEN
+$ChatId = $env:TELEGRAM_CHAT_ID
+
+if (-not $Token -or -not $ChatId) {
+    Write-Error "[telegram-notify] TELEGRAM_BOT_TOKEN or TELEGRAM_CHAT_ID not set. Skipping."
+    exit 0
+}
+
+$Body = @{ chat_id = $ChatId; text = $Message } | ConvertTo-Json
+$Uri = "https://api.telegram.org/bot$Token/sendMessage"
+
+try {
+    Invoke-RestMethod -Uri $Uri -Method Post -Body $Body -ContentType 'application/json'
+    exit 0
+} catch {
+    exit 1
+}

package/dist/presets/mobile/hooks/telegram-notify.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Sends a notification to Telegram via bot API.
+# Requires TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID in environment.
+
+MESSAGE="${*:-Agent task completed.}"
+
+if [ -z "$TELEGRAM_BOT_TOKEN" ] || [ -z "$TELEGRAM_CHAT_ID" ]; then
+  echo "[telegram-notify] TELEGRAM_BOT_TOKEN or TELEGRAM_CHAT_ID not set. Skipping." >&2
+  exit 0
+fi
+
+curl -s -o /dev/null -w "%{http_code}" \
+  -H "Content-Type: application/json" \
+  -d "{\"chat_id\": \"$TELEGRAM_CHAT_ID\", \"text\": \"$MESSAGE\"}" \
+  "https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage" \
+  | grep -q "^2" && exit 0 || exit 1