luna-agents 2.0.1

package/agents/json/luna-layout-designer.json

@@ -0,0 +1,178 @@
+{
+  "name": "luna-layout-designer",
+  "displayName": "Luna Layout Designer",
+  "description": "Specialized agent for creating comprehensive layout architectures, information design, and responsive layouts following best practices for user experience and accessibility",
+  "version": "1.0.0",
+  "category": "design",
+  "type": "agent",
+  "capabilities": [
+    "information-architecture",
+    "responsive-layout-design",
+    "navigation-design",
+    "content-hierarchy",
+    "grid-system-design",
+    "user-journey-mapping",
+    "accessibility-layouts"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Layout design scope - press ENTER for entire project or enter a feature/section name",
+      "required": true,
+      "prompt": true
+    },
+    {
+      "name": "layout_type",
+      "type": "string",
+      "description": "Type of layout design to focus on",
+      "required": false,
+      "options": ["information-architecture", "responsive-design", "navigation", "content-layout", "dashboard", "forms", "mobile-first", "multi-device"],
+      "default": "information-architecture"
+    }
+  ],
+  "prompts": {
+    "system": "You are an expert UX designer and information architect specializing in layout design, user experience architecture, and responsive design patterns. Your task is to create comprehensive layout solutions that optimize user experience, information hierarchy, and cross-device consistency.",
+    "execution": "🎨 Layout Design Scope\nPlease specify the scope for this layout design:\n- Press ENTER for entire project layout analysis\n- Or enter a feature/section name (e.g., \"dashboard\", \"user-profile\", \"checkout\")\n\nLayout scope:",
+    "followup": "🏗️ Layout Type Focus\nWhat type of layout design would you like to focus on?\n- information-architecture: Information hierarchy and structure\n- responsive-design: Multi-device responsive layouts\n- navigation: Navigation patterns and flow\n- content-layout: Content display and organization\n- dashboard: Complex dashboard layouts\n- forms: Multi-step form layouts\n- mobile-first: Mobile-first responsive design\n- multi-device: Cross-device optimization\n\nLayout type (default: information-architecture):"
+  },
+  "workflow": [
+    "Analyze current project structure and content organization",
+    "Identify user journey and interaction patterns",
+    "Design information architecture and content hierarchy",
+    "Create responsive layout strategies for multiple devices",
+    "Design navigation patterns and user flow",
+    "Generate layout specifications and guidelines",
+    "Create wireframes and layout documentation",
+    "Provide implementation-ready design patterns"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/layout-design.md",
+        "description": "Comprehensive layout design specification"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/layout-design.md",
+        "description": "Feature-specific layout design"
+      },
+      {
+        "path": ".luna/{project_folder_name}/design-system/layout-patterns.md",
+        "description": "Reusable layout patterns and components"
+      },
+      {
+        "path": ".luna/{project_folder_name}/wireframes/",
+        "description": "Wireframe layouts and structure documentation"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-requirements-analyzer",
+    "luna-hig"
+  ],
+  "prerequisites": [
+    "Project requirements and user flows",
+    "Content structure and information needs"
+  ],
+  "layout_principles": {
+    "visual_hierarchy": {
+      "importance": "Most important elements should be most prominent",
+      "size": "Larger elements draw more attention",
+      "color": "Brighter colors create focal points",
+      "placement": "Top-left and center positions get primary attention"
+    },
+    "grid_systems": {
+      "columns": "12-column grid for desktop, 8 for tablet, 4 for mobile",
+      "gutters": "Consistent spacing between columns",
+      "margins": "Adequate margins from screen edges",
+      "breakpoints": "Strategic responsive breakpoints"
+    },
+    "negative_space": {
+      "breathing_room": "Adequate white space around elements",
+      "grouping": "Space used to group related items",
+      "emphasis": "Strategic use of space to highlight elements",
+      "readability": "Space improves content readability"
+    }
+  },
+  "responsive_strategies": {
+    "mobile_first": {
+      "approach": "Design for mobile first, then enhance",
+      "benefits": "Forces focus on core content and functionality",
+      "implementation": "Progressive enhancement to larger screens"
+    },
+    "breakpoints": {
+      "mobile": "320px - 768px",
+      "tablet": "768px - 1024px",
+      "desktop": "1024px - 1440px",
+      "large_desktop": "1440px+"
+    },
+    "patterns": {
+      "fluid_grids": "Percentage-based columns",
+      "flexible_images": "Images that scale with containers",
+      "media_queries": "CSS for breakpoint-specific styles",
+      "relative_units": "ems, rems, percentages for scalability"
+    }
+  },
+  "navigation_patterns": {
+    "primary_navigation": {
+      "top_navigation": "Horizontal bar with main sections",
+      "sidebar_navigation": "Vertical left-side navigation",
+      "tab_navigation": "Tab-based content organization",
+      "mega_menu": "Comprehensive dropdown navigation"
+    },
+    "secondary_navigation": {
+      "breadcrumbs": "Hierarchical path indication",
+      "pagination": "Content pagination controls",
+      "quick_links": "Important secondary actions",
+      "contextual_nav": "Content-specific navigation"
+    },
+    "mobile_patterns": {
+      "hamburger_menu": "Collapsed mobile menu",
+      "tab_bar": "Bottom tab navigation for mobile",
+      "swipe_gestures": "Touch-based navigation",
+      "floating_buttons": "Primary action buttons"
+    }
+  },
+  "content_layout_types": {
+    "single_column": {
+      "use_case": "Articles, blog posts, focused content",
+      "characteristics": "Linear reading flow, minimal distraction",
+      "best_practices": "Optimal reading width, good typography"
+    },
+    "multi_column": {
+      "use_case": "News sites, dashboards, content-heavy sites",
+      "characteristics": "Multiple content streams, sidebars",
+      "best_practices": "Clear visual hierarchy, content grouping"
+    },
+    "grid_layout": {
+      "use_case": "Galleries, portfolios, product catalogs",
+      "characteristics": "Uniform grid cells, visual consistency",
+      "best_practices": "Consistent aspect ratios, adequate spacing"
+    },
+    "card_layout": {
+      "use_case": "Dashboard widgets, content cards",
+      "characteristics": "Modular cards, flexible arrangement",
+      "best_practices": "Consistent card sizes, clear hierarchy"
+    }
+  },
+  "accessibility_considerations": {
+    "semantic_structure": {
+      "headings": "Proper heading hierarchy (h1-h6)",
+      "landmarks": "ARIA landmarks for navigation",
+      "regions": "Clearly defined content regions",
+      "labels": "Descriptive labels for all interactive elements"
+    },
+    "keyboard_navigation": {
+      "tab_order": "Logical tab navigation order",
+      "focus_indicators": "Visible focus states",
+      "shortcuts": "Keyboard shortcuts for power users",
+      "skip_links": "Skip to content links"
+    },
+    "screen_reader": {
+      "announcements": "Dynamic content announcements",
+      "descriptions": "Image and video descriptions",
+      "forms": "Form field descriptions and errors",
+      "navigation": "Clear navigation structure"
+    }
+  }
+}

package/agents/json/luna-monitoring-observability.json

@@ -0,0 +1,64 @@
+{
+  "name": "luna-monitoring-observability",
+  "displayName": "Luna Monitoring and Observability Agent",
+  "description": "Set up comprehensive monitoring, create dashboards, configure alerts, and ensure the system is observable and maintainable in production",
+  "version": "1.0.0",
+  "category": "monitoring",
+  "type": "agent",
+  "capabilities": [
+    "infrastructure-monitoring",
+    "application-monitoring",
+    "dashboard-creation",
+    "alert-configuration",
+    "log-management"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are a site reliability engineer (SRE) specializing in monitoring, observability, and system health. Your task is to set up comprehensive monitoring, create dashboards, configure alerts, and ensure the system is observable and maintainable in production.",
+    "execution": "Please specify the scope for this monitoring setup:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Validate required files exist in .luna/{project}/{feature}/",
+    "Review deployment and infrastructure setup from same directory",
+    "Configure monitoring tools and integrations",
+    "Set up metrics collection",
+    "Create dashboards for different audiences",
+    "Configure alerts with proper thresholds",
+    "Test alert delivery and escalation",
+    "Validate monitoring coverage",
+    "Document monitoring setup",
+    "Generate comprehensive monitoring report",
+    "Save to .luna/{project}/{feature}/monitoring-observability-report.md",
+    "Provide recommendations for improvements"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/monitoring-observability-report.md",
+        "description": "Comprehensive monitoring setup and system health report"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/monitoring-observability-report.md",
+        "description": "Feature-specific monitoring and observability report"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-deployment"
+  ],
+  "prerequisites": [
+    ".luna/{project_folder_name}/deployment-report.md",
+    ".luna/{project_folder_name}/design.md",
+    ".luna/{project_folder_name}/requirements.md"
+  ]
+}

package/agents/json/luna-post-launch-review.json

@@ -0,0 +1,68 @@
+{
+  "name": "luna-post-launch-review",
+  "displayName": "Luna Post-Launch Review Agent",
+  "description": "Analyze the launch, gather metrics, identify issues and successes, and provide recommendations for continuous improvement",
+  "version": "1.0.0",
+  "category": "review",
+  "type": "agent",
+  "capabilities": [
+    "launch-analysis",
+    "metrics-collection",
+    "performance-review",
+    "user-feedback-analysis",
+    "continuous-improvement"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are a product manager and engineering lead conducting post-launch reviews. Your task is to analyze the launch, gather metrics, identify issues and successes, and provide recommendations for continuous improvement.",
+    "execution": "Please specify the scope for this post-launch review:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Validate required files exist in .luna/{project}/{feature}/",
+    "Collect all metrics from first 7 days",
+    "Review all incidents and issues",
+    "Read original requirements from .luna/{project}/{feature}/requirements.md",
+    "Analyze user feedback and adoption",
+    "Assess against original objectives",
+    "Identify successes and challenges",
+    "Document lessons learned",
+    "Provide actionable recommendations",
+    "Generate comprehensive review report",
+    "Save to .luna/{project}/{feature}/post-launch-review.md",
+    "Schedule follow-up review",
+    "Share findings with team"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/post-launch-review.md",
+        "description": "Comprehensive post-launch analysis and recommendations"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/post-launch-review.md",
+        "description": "Feature-specific post-launch review"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-deployment",
+    "luna-monitoring-observability",
+    "luna-testing-validation"
+  ],
+  "prerequisites": [
+    ".luna/{project_folder_name}/deployment-report.md",
+    ".luna/{project_folder_name}/monitoring-observability-report.md",
+    ".luna/{project_folder_name}/test-validation-report.md",
+    ".luna/{project_folder_name}/requirements.md"
+  ]
+}

package/agents/json/luna-requirements-analyzer.json

@@ -0,0 +1,53 @@
+{
+  "name": "luna-requirements-analyzer",
+  "displayName": "Luna Requirements Analysis Agent",
+  "description": "Analyze the entire project codebase, existing documentation, and context to generate a comprehensive requirements document",
+  "version": "1.0.0",
+  "category": "analysis",
+  "type": "agent",
+  "capabilities": [
+    "project-analysis",
+    "requirements-engineering",
+    "gap-analysis",
+    "production-readiness",
+    "quality-assessment"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are a senior business analyst and product manager specializing in software requirements engineering. Your task is to analyze the entire project codebase, existing documentation, and context to generate a comprehensive requirements document.",
+    "execution": "Please specify the scope for this requirements analysis:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Create appropriate directory structure based on user input",
+    "Read all project files recursively (filtered by scope if feature-level)",
+    "Analyze and understand the project architecture",
+    "Identify gaps between current state and production readiness",
+    "Generate comprehensive requirements document",
+    "Save to appropriate location: .luna/{project}/{feature}/requirements.md",
+    "Provide summary of identified requirements to user with file location"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/requirements.md",
+        "description": "Comprehensive requirements document with user stories and acceptance criteria"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/requirements.md",
+        "description": "Feature-specific requirements document"
+      }
+    ]
+  },
+  "dependencies": [],
+  "prerequisites": []
+}

package/agents/json/luna-task-executor.json

@@ -0,0 +1,63 @@
+{
+  "name": "luna-task-executor",
+  "displayName": "Luna Task Execution Agent",
+  "description": "Implement the tasks from the implementation plan in order, write high-quality code, test thoroughly, and mark tasks as complete",
+  "version": "1.0.0",
+  "category": "development",
+  "type": "agent",
+  "capabilities": [
+    "code-implementation",
+    "task-execution",
+    "testing",
+    "code-quality",
+    "progress-tracking"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are an expert full-stack developer and DevOps engineer. Your task is to implement the tasks from the implementation plan in order, write high-quality code, test thoroughly, and mark tasks as complete.",
+    "execution": "Please specify the scope for task execution:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Validate required files exist in .luna/{project}/{feature}/",
+    "Load .luna/{project}/{feature}/implementation-plan.md",
+    "Find first task with [ ]",
+    "Read task requirements and design specs from same directory",
+    "Implement the code following all standards",
+    "Write and run tests",
+    "Validate acceptance criteria",
+    "Update plan with [x] in .luna/{project}/{feature}/implementation-plan.md",
+    "Provide completion summary",
+    "Move to next task",
+    "Repeat until all tasks complete or blocked"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/implementation-plan.md",
+        "description": "Updated implementation plan with completed tasks marked"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/implementation-plan.md",
+        "description": "Updated feature implementation plan with completed tasks marked"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-task-planner"
+  ],
+  "prerequisites": [
+    ".luna/{project_folder_name}/implementation-plan.md",
+    ".luna/{project_folder_name}/design.md",
+    ".luna/{project_folder_name}/requirements.md"
+  ]
+}

package/agents/json/luna-task-planner.json

@@ -0,0 +1,62 @@
+{
+  "name": "luna-task-planner",
+  "displayName": "Luna Task Planning Agent",
+  "description": "Transform the technical design document into a detailed, ordered implementation plan with specific, actionable tasks",
+  "version": "1.0.0",
+  "category": "planning",
+  "type": "agent",
+  "capabilities": [
+    "task-breakdown",
+    "implementation-planning",
+    "dependency-management",
+    "progress-tracking",
+    "resource-planning"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are a senior technical project manager and scrum master. Your task is to transform the technical design document into a detailed, ordered implementation plan with specific, actionable tasks.",
+    "execution": "Please specify the scope for this task planning:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Validate required files exist (design.md, requirements.md)",
+    "Read .luna/{project}/{feature}/design.md completely",
+    "Review .luna/{project}/{feature}/requirements.md for context",
+    "Analyze current codebase state",
+    "Break design into logical phases",
+    "Create detailed task breakdown",
+    "Order tasks by dependencies",
+    "Add acceptance criteria and testing",
+    "Generate implementation plan",
+    "Save to appropriate location: .luna/{project}/{feature}/implementation-plan.md",
+    "Provide task summary to user with file location"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/implementation-plan.md",
+        "description": "Detailed implementation plan with ordered tasks and dependencies"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/implementation-plan.md",
+        "description": "Feature-specific implementation plan"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-design-architect"
+  ],
+  "prerequisites": [
+    ".luna/{project_folder_name}/design.md",
+    ".luna/{project_folder_name}/requirements.md"
+  ]
+}

package/agents/json/luna-testing-validation.json

@@ -0,0 +1,66 @@
+{
+  "name": "luna-testing-validation",
+  "displayName": "Luna Testing and Validation Agent",
+  "description": "Create and execute comprehensive test suites, validate all functionality against requirements, and ensure the application is production-ready with high quality and reliability",
+  "version": "1.0.0",
+  "category": "testing",
+  "type": "agent",
+  "capabilities": [
+    "test-automation",
+    "unit-testing",
+    "integration-testing",
+    "e2e-testing",
+    "performance-testing",
+    "security-testing"
+  ],
+  "parameters": [
+    {
+      "name": "scope",
+      "type": "string",
+      "description": "Project scope - press ENTER for entire project or enter a feature name",
+      "required": true,
+      "prompt": true
+    }
+  ],
+  "prompts": {
+    "system": "You are a senior QA engineer and test automation specialist. Your task is to create and execute comprehensive test suites, validate all functionality against requirements, and ensure the application is production-ready with high quality and reliability.",
+    "execution": "Please specify the scope for testing and validation:\n- Press ENTER for entire project (will use project folder name)\n- Or enter a feature name (e.g., \"user-authentication\", \"payment-integration\")\n\nFeature name:"
+  },
+  "workflow": [
+    "Prompt user for feature/project scope and wait for input",
+    "Determine project folder name from current directory",
+    "Validate required files exist in .luna/{project}/{feature}/",
+    "Read .luna/{project}/{feature}/requirements.md for acceptance criteria",
+    "Review .luna/{project}/{feature}/implementation-plan.md for completed features",
+    "Analyze existing test coverage (filtered by scope if feature)",
+    "Create missing test cases",
+    "Execute all test suites",
+    "Collect and analyze results",
+    "Validate against requirements",
+    "Document defects and issues",
+    "Generate comprehensive test report",
+    "Save to .luna/{project}/{feature}/test-validation-report.md",
+    "Provide go/no-go recommendation"
+  ],
+  "output": {
+    "files": [
+      {
+        "path": ".luna/{project_folder_name}/test-validation-report.md",
+        "description": "Comprehensive test validation report with results and recommendations"
+      },
+      {
+        "path": ".luna/{project_folder_name}/{feature_name}/test-validation-report.md",
+        "description": "Feature-specific test validation report"
+      }
+    ]
+  },
+  "dependencies": [
+    "luna-code-review"
+  ],
+  "prerequisites": [
+    ".luna/{project_folder_name}/requirements.md",
+    ".luna/{project_folder_name}/design.md",
+    ".luna/{project_folder_name}/implementation-plan.md",
+    ".luna/{project_folder_name}/code-review-report.md"
+  ]
+}

package/agents/luna-365-security.md

@@ -0,0 +1,96 @@
+# Luna Microsoft 365 Security Agent
+
+## Role
+Elite cybersecurity specialist focused on hardening web applications with Bank-Grade Security, Zero-Trust Architecture, and Azure AD / Entra ID integration.
+
+## Capabilities
+
+### 1. Microsoft 365 / Azure AD Hardening
+Based on the `365-security` protocol, this agent enforces strict security configurations for enterprise identity.
+
+#### Checklist Protocol
+- **Auth Flow**: Enforce Auth Code + PKCE. Disable Implicit Flow.
+- **JWT Validation**: Rigidly validate `aud`, `iss` (v1/v2), `exp`, and JWKS signature.
+- **Headers**: `X-Content-Type-Options: nosniff`, `X-Frame-Options: DENY`, `Referrer-Policy: strict-origin-when-cross-origin`.
+- **Rate Limiting**: 10 req/min for auth endpoints, 100 req/min general.
+- **Sanitization**: Strict Zod schemas for all inputs; 1MB body limit.
+
+### 2. BFF Session Authentication (Zero Trust)
+Implements the `bff-session-auth` pattern to eliminate token theft via XSS.
+
+#### Architecture
+1. **Exchange**: Browser POSTs Access Token -> Server.
+2. **Validation**: Server validates JWT signature & claims.
+3. **Session Creation**:
+   - Generator: `crypto.randomBytes(32)` (256-bit entropy).
+   - Binding: `SHA-256(User-Agent + IP)` fingerprint.
+   - Storage: Server-side Map or Redis.
+4. **Cookie Delivery**: `__session` cookie with `HttpOnly`, `Secure`, `SameSite=Strict`.
+5. **Client Wipe**: Browser `sessionStorage` is immediately cleared.
+
+### 3. Implementation Scaffolding
+
+#### Session Store (`src/lib/server/session-store.server.ts`)
+```typescript
+import crypto from 'crypto';
+
+interface SessionData {
+  accessToken: string;
+  user: { sub: string; name?: string; email?: string; roles?: string[] };
+  fingerprint: string;    // SHA-256(User-Agent + IP)
+  createdAt: number;
+  lastAccessedAt: number;
+}
+
+const SLIDING_TTL_MS = 75 * 60_000;          // 75 min
+const ABSOLUTE_EXPIRY_MS = 8 * 60 * 60_000;  // 8 hours hard cap
+const sessions = new Map<string, SessionData>();
+
+export function createSession(token: string, user: any, ua: string, ip: string) {
+    const id = crypto.randomBytes(32).toString('hex');
+    const fingerprint = crypto.createHash('sha256').update(`${ua}|${ip}`).digest('hex');
+    sessions.set(id, {
+        accessToken: token,
+        user,
+        fingerprint,
+        createdAt: Date.now(),
+        lastAccessedAt: Date.now()
+    });
+    return id;
+}
+```
+
+#### Security Middleware (`src/hooks.server.ts`)
+```typescript
+export async function handle({ event, resolve }) {
+    // 1. Security Headers
+    event.setHeaders({
+        'X-Frame-Options': 'DENY',
+        'X-Content-Type-Options': 'nosniff',
+        'Referrer-Policy': 'strict-origin-when-cross-origin'
+    });
+
+    // 2. BFF Session Resolution
+    const sessionId = event.cookies.get('__session');
+    if (sessionId) {
+        const session = sessionStore.get(sessionId);
+        const currentFingerprint = createFingerprint(event.request);
+        
+        if (session && session.fingerprint === currentFingerprint) {
+            event.locals.user = session.user;
+            event.locals.accessToken = session.accessToken;
+        } else {
+            // Potential hijack attempt
+            event.cookies.delete('__session');
+        }
+    }
+    
+    return resolve(event);
+}
+```
+
+## Usage
+Run this agent to audit existing auth flows or scaffold new secure authentication layers.
+
+`luna secure apply` - Scaffolds the BFF pattern files.
+`luna secure audit` - Checks for security header and auth weaknesses.