nowaikit 2.6.0 → 3.1.0

package/dist/prompts/capabilities/ops-risk.js

@@ -0,0 +1,227 @@
+const capability = {
+    name: 'ops-risk',
+    title: 'Change Risk Assessment',
+    description: 'Change risk scoring, conflict detection, CAB preparation, and rollback planning',
+    category: 'ops',
+    arguments: [
+        {
+            name: 'change',
+            description: 'change number e.g. CHG0012345 or describe the planned change',
+            required: true,
+        },
+        {
+            name: 'action',
+            description: 'assess, prepare-cab, check-conflicts, plan-rollback. Default: assess',
+            required: false,
+        },
+    ],
+    recommendedTools: [
+        'get_change_request',
+        'update_change_request',
+        'list_change_requests',
+        'submit_change_for_approval',
+        'search_cmdb_ci',
+        'list_relationships',
+        'ml_predict_change_risk',
+        'query_records',
+        'add_work_note',
+    ],
+    buildPrompt(args) {
+        const change = args?.change ?? 'Assess the change risk';
+        const action = args?.action ?? 'assess';
+        return [
+            {
+                role: 'assistant',
+                content: {
+                    type: 'text',
+                    text: [
+                        '# Capability: Change Risk Assessment',
+                        '',
+                        `**Action:** ${action}`,
+                        '',
+                        'I am a **change risk assessment specialist**. I evaluate change requests for risk,',
+                        'detect conflicts, prepare CAB documentation, and create rollback plans.',
+                        '',
+                        '## Risk Scoring Matrix',
+                        '',
+                        'Each change is scored across five dimensions on a 1-5 scale:',
+                        '',
+                        '### Dimension 1 — Scope',
+                        '',
+                        '| Score | Criteria |',
+                        '|-------|----------|',
+                        '| 1 | Single CI, no dependencies, config-only |',
+                        '| 2 | Single CI with minor dependencies, simple script changes |',
+                        '| 3 | Multiple CIs in same service, moderate script changes |',
+                        '| 4 | Multiple services, schema changes, new integrations |',
+                        '| 5 | Platform-wide impact, core table changes, plugin activation |',
+                        '',
+                        '### Dimension 2 — History',
+                        '',
+                        '| Score | Criteria |',
+                        '|-------|----------|',
+                        '| 1 | Change team has 100% success rate on similar changes |',
+                        '| 2 | Team has > 90% success rate, minor issues in past |',
+                        '| 3 | Team has 75-90% success rate, some rollbacks |',
+                        '| 4 | Team has < 75% success rate or first-time change type |',
+                        '| 5 | Previous failed changes on same CI, or high-risk team history |',
+                        '',
+                        '### Dimension 3 — Complexity',
+                        '',
+                        '| Score | Criteria |',
+                        '|-------|----------|',
+                        '| 1 | Property change, UI-only update |',
+                        '| 2 | Single business rule or client script update |',
+                        '| 3 | Multiple script changes, workflow/flow modifications |',
+                        '| 4 | New integrations, data migrations, ACL restructuring |',
+                        '| 5 | Architecture changes, platform upgrade, multi-system coordination |',
+                        '',
+                        '### Dimension 4 — Reversibility',
+                        '',
+                        '| Score | Criteria |',
+                        '|-------|----------|',
+                        '| 1 | Fully reversible via update set rollback |',
+                        '| 2 | Reversible with minor manual steps |',
+                        '| 3 | Partially reversible — some data changes persist |',
+                        '| 4 | Difficult to reverse — schema changes, data transformations |',
+                        '| 5 | Irreversible — data deletion, third-party system changes |',
+                        '',
+                        '### Dimension 5 — Window',
+                        '',
+                        '| Score | Criteria |',
+                        '|-------|----------|',
+                        '| 1 | Scheduled maintenance window, low-traffic period |',
+                        '| 2 | Off-peak hours, adequate buffer time |',
+                        '| 3 | Business hours but low-impact period |',
+                        '| 4 | Peak hours or limited rollback window |',
+                        '| 5 | During critical business period, no rollback window, or emergency |',
+                        '',
+                        '### Scoring Calculation',
+                        '',
+                        '```',
+                        'Total Risk Score = (Scope + History + Complexity + Reversibility + Window) / 5',
+                        '',
+                        'Risk Level:',
+                        '  1.0 - 2.0  =  LOW       — Standard approval, minimal oversight',
+                        '  2.1 - 3.0  =  MODERATE  — Peer review required, monitoring post-deploy',
+                        '  3.1 - 4.0  =  HIGH      — CAB approval required, dedicated rollback team',
+                        '  4.1 - 5.0  =  CRITICAL  — Executive approval, war room during implementation',
+                        '```',
+                        '',
+                        '## Conflict Detection',
+                        '',
+                        'Use `list_change_requests`, `search_cmdb_ci`, and `query_records` to detect:',
+                        '',
+                        '### Overlapping Windows',
+                        '- Other changes scheduled within the same maintenance window',
+                        '- Changes to the same CI or related CIs at the same time',
+                        '- Changes by the same team overlapping (resource conflict)',
+                        '',
+                        '### Same CI Conflicts',
+                        '- Multiple changes targeting the same configuration item',
+                        '- Changes to upstream/downstream dependencies of the target CI',
+                        '- Recent changes to the same CI that are still stabilizing (< 48h)',
+                        '',
+                        '### Blackout Periods',
+                        '- Corporate freeze windows (end-of-quarter, holiday periods)',
+                        '- Scheduled maintenance by platform vendor',
+                        '- Planned events (product launches, high-traffic events)',
+                        '- Other team-specific blackout windows',
+                        '',
+                        '## CAB Document Generation',
+                        '',
+                        'When action is `prepare-cab`, generate a complete CAB submission:',
+                        '',
+                        '```',
+                        'CAB SUBMISSION DOCUMENT',
+                        '=======================',
+                        'Change: [CHG number]',
+                        'Requestor: [name]  |  Group: [assignment group]',
+                        'Type: [standard/normal/emergency]',
+                        '',
+                        'SUMMARY',
+                        '  [2-3 sentence business justification]',
+                        '',
+                        'RISK ASSESSMENT',
+                        '  Scope: [score/5]  |  History: [score/5]  |  Complexity: [score/5]',
+                        '  Reversibility: [score/5]  |  Window: [score/5]',
+                        '  Overall Risk: [level] ([score]/5)',
+                        '  ML Prediction: [if available from ml_predict_change_risk]',
+                        '',
+                        'IMPACT ANALYSIS',
+                        '  Affected CIs: [list]',
+                        '  Affected Services: [list with criticality]',
+                        '  User Impact: [estimated users/duration]',
+                        '  Downtime: [expected duration]',
+                        '',
+                        'IMPLEMENTATION PLAN',
+                        '  1. [step with estimated duration]',
+                        '  2. [step with estimated duration]',
+                        '  ...',
+                        '  Total Duration: [sum]',
+                        '',
+                        'BACKOUT PLAN',
+                        '  Trigger: [conditions that trigger rollback]',
+                        '  Steps: [numbered rollback steps]',
+                        '  Duration: [estimated rollback time]',
+                        '  Verification: [how to confirm rollback success]',
+                        '',
+                        'TEST PLAN',
+                        '  Pre-change: [verification steps]',
+                        '  Post-change: [validation steps]',
+                        '  ATF Suites: [list of automated tests]',
+                        '',
+                        'CONFLICT CHECK',
+                        '  Overlapping changes: [list or "none detected"]',
+                        '  Blackout violations: [list or "none"]',
+                        '  CI conflicts: [list or "none"]',
+                        '',
+                        'APPROVAL CHAIN',
+                        '  Technical: [approver]',
+                        '  Business: [approver]',
+                        '  CAB: [scheduled date]',
+                        '```',
+                        '',
+                        '## Rollback Planning',
+                        '',
+                        'When action is `plan-rollback`, generate a detailed rollback plan:',
+                        '',
+                        '- **Rollback triggers** — specific conditions that mandate a rollback',
+                        '- **Decision authority** — who can authorize the rollback',
+                        '- **Pre-rollback checklist** — data backups, user notification, etc.',
+                        '- **Rollback steps** — ordered list with estimated duration per step',
+                        '- **Verification steps** — how to confirm the system is back to baseline',
+                        '- **Communication plan** — who to notify at each stage',
+                        '- **Partial rollback options** — if only some changes need reverting',
+                        '',
+                        '## Tools I Use',
+                        '',
+                        '| Tool | Purpose |',
+                        '|------|---------|',
+                        '| `get_change_request` | Fetch change record details |',
+                        '| `update_change_request` | Update risk scores, add plan details |',
+                        '| `list_change_requests` | Find overlapping/conflicting changes |',
+                        '| `submit_change_for_approval` | Submit completed assessment for approval |',
+                        '| `search_cmdb_ci` / `list_relationships` | Map affected CIs and dependencies |',
+                        '| `ml_predict_change_risk` | Get ML-based risk prediction |',
+                        '| `query_records` | Fetch historical change data, blackout windows |',
+                        '| `add_work_note` | Document assessment findings on the change |',
+                        '',
+                        '---',
+                        '',
+                        `Starting change risk assessment with action: **${action}**.`,
+                    ].join('\n'),
+                },
+            },
+            {
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: change,
+                },
+            },
+        ];
+    },
+};
+export default capability;
+//# sourceMappingURL=ops-risk.js.map

package/dist/prompts/capabilities/ops-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops-risk.js","sourceRoot":"","sources":["../../../src/prompts/capabilities/ops-risk.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAyB;IACvC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,iFAAiF;IACnF,QAAQ,EAAE,KAAK;IAEf,SAAS,EAAE;QACT;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,8DAA8D;YAChE,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sEAAsE;YACxE,QAAQ,EAAE,KAAK;SAChB;KACF;IAED,gBAAgB,EAAE;QAChB,oBAAoB;QACpB,uBAAuB;QACvB,sBAAsB;QACtB,4BAA4B;QAC5B,gBAAgB;QAChB,oBAAoB;QACpB,wBAAwB;QACxB,eAAe;QACf,eAAe;KAChB;IAED,WAAW,CAAC,IAAI;QACd,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,wBAAwB,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC;QAExC,OAAO;YACL;gBACE,IAAI,EAAE,WAAoB;gBAC1B,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,sCAAsC;wBACtC,EAAE;wBACF,eAAe,MAAM,EAAE;wBACvB,EAAE;wBACF,oFAAoF;wBACpF,yEAAyE;wBACzE,EAAE;wBACF,wBAAwB;wBACxB,EAAE;wBACF,8DAA8D;wBAC9D,EAAE;wBACF,yBAAyB;wBACzB,EAAE;wBACF,sBAAsB;wBACtB,sBAAsB;wBACtB,iDAAiD;wBACjD,kEAAkE;wBAClE,+DAA+D;wBAC/D,6DAA6D;wBAC7D,qEAAqE;wBACrE,EAAE;wBACF,2BAA2B;wBAC3B,EAAE;wBACF,sBAAsB;wBACtB,sBAAsB;wBACtB,8DAA8D;wBAC9D,2DAA2D;wBAC3D,sDAAsD;wBACtD,+DAA+D;wBAC/D,uEAAuE;wBACvE,EAAE;wBACF,8BAA8B;wBAC9B,EAAE;wBACF,sBAAsB;wBACtB,sBAAsB;wBACtB,yCAAyC;wBACzC,sDAAsD;wBACtD,8DAA8D;wBAC9D,8DAA8D;wBAC9D,2EAA2E;wBAC3E,EAAE;wBACF,iCAAiC;wBACjC,EAAE;wBACF,sBAAsB;wBACtB,sBAAsB;wBACtB,kDAAkD;wBAClD,4CAA4C;wBAC5C,0DAA0D;wBAC1D,qEAAqE;wBACrE,kEAAkE;wBAClE,EAAE;wBACF,0BAA0B;wBAC1B,EAAE;wBACF,sBAAsB;wBACtB,sBAAsB;wBACtB,0DAA0D;wBAC1D,8CAA8C;wBAC9C,8CAA8C;wBAC9C,+CAA+C;wBAC/C,2EAA2E;wBAC3E,EAAE;wBACF,yBAAyB;wBACzB,EAAE;wBACF,KAAK;wBACL,gFAAgF;wBAChF,EAAE;wBACF,aAAa;wBACb,kEAAkE;wBAClE,0EAA0E;wBAC1E,4EAA4E;wBAC5E,gFAAgF;wBAChF,KAAK;wBACL,EAAE;wBACF,uBAAuB;wBACvB,EAAE;wBACF,8EAA8E;wBAC9E,EAAE;wBACF,yBAAyB;wBACzB,8DAA8D;wBAC9D,0DAA0D;wBAC1D,4DAA4D;wBAC5D,EAAE;wBACF,uBAAuB;wBACvB,0DAA0D;wBAC1D,gEAAgE;wBAChE,oEAAoE;wBACpE,EAAE;wBACF,sBAAsB;wBACtB,8DAA8D;wBAC9D,4CAA4C;wBAC5C,0DAA0D;wBAC1D,wCAAwC;wBACxC,EAAE;wBACF,4BAA4B;wBAC5B,EAAE;wBACF,mEAAmE;wBACnE,EAAE;wBACF,KAAK;wBACL,yBAAyB;wBACzB,yBAAyB;wBACzB,sBAAsB;wBACtB,iDAAiD;wBACjD,mCAAmC;wBACnC,EAAE;wBACF,SAAS;wBACT,yCAAyC;wBACzC,EAAE;wBACF,iBAAiB;wBACjB,qEAAqE;wBACrE,kDAAkD;wBAClD,qCAAqC;wBACrC,6DAA6D;wBAC7D,EAAE;wBACF,iBAAiB;wBACjB,wBAAwB;wBACxB,8CAA8C;wBAC9C,2CAA2C;wBAC3C,iCAAiC;wBACjC,EAAE;wBACF,qBAAqB;wBACrB,qCAAqC;wBACrC,qCAAqC;wBACrC,OAAO;wBACP,yBAAyB;wBACzB,EAAE;wBACF,cAAc;wBACd,+CAA+C;wBAC/C,oCAAoC;wBACpC,uCAAuC;wBACvC,mDAAmD;wBACnD,EAAE;wBACF,WAAW;wBACX,oCAAoC;wBACpC,mCAAmC;wBACnC,yCAAyC;wBACzC,EAAE;wBACF,gBAAgB;wBAChB,kDAAkD;wBAClD,yCAAyC;wBACzC,kCAAkC;wBAClC,EAAE;wBACF,gBAAgB;wBAChB,yBAAyB;wBACzB,wBAAwB;wBACxB,yBAAyB;wBACzB,KAAK;wBACL,EAAE;wBACF,sBAAsB;wBACtB,EAAE;wBACF,oEAAoE;wBACpE,EAAE;wBACF,uEAAuE;wBACvE,2DAA2D;wBAC3D,sEAAsE;wBACtE,sEAAsE;wBACtE,0EAA0E;wBAC1E,wDAAwD;wBACxD,sEAAsE;wBACtE,EAAE;wBACF,gBAAgB;wBAChB,EAAE;wBACF,oBAAoB;wBACpB,oBAAoB;wBACpB,wDAAwD;wBACxD,oEAAoE;wBACpE,mEAAmE;wBACnE,6EAA6E;wBAC7E,iFAAiF;wBACjF,6DAA6D;wBAC7D,sEAAsE;wBACtE,kEAAkE;wBAClE,EAAE;wBACF,KAAK;wBACL,EAAE;wBACF,kDAAkD,MAAM,KAAK;qBAC9D,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb;aACF;YACD;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/prompts/capabilities/ops-triage.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityDefinition } from '../types.js';
+declare const capability: CapabilityDefinition;
+export default capability;
+//# sourceMappingURL=ops-triage.d.ts.map

package/dist/prompts/capabilities/ops-triage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops-triage.d.ts","sourceRoot":"","sources":["../../../src/prompts/capabilities/ops-triage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,QAAA,MAAM,UAAU,EAAE,oBA2LjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/prompts/capabilities/ops-triage.js

@@ -0,0 +1,183 @@
+const capability = {
+    name: 'ops-triage',
+    title: 'Incident Triage',
+    description: 'P1/P2 incident triage — fetch details, assess impact via CMDB, check SLAs, search KB, suggest resolution, draft communications',
+    category: 'ops',
+    arguments: [
+        {
+            name: 'incident',
+            description: 'incident number e.g. INC0012345 or describe the situation',
+            required: true,
+        },
+        {
+            name: 'action',
+            description: 'triage, escalate, communicate, review. Default: triage',
+            required: false,
+        },
+    ],
+    recommendedTools: [
+        'get_incident',
+        'update_incident',
+        'add_work_note',
+        'add_comment',
+        'query_records',
+        'search_knowledge',
+        'get_sla_details',
+        'list_active_slas',
+        'search_cmdb_ci',
+        'get_cmdb_ci',
+        'list_relationships',
+        'create_change_request',
+    ],
+    buildPrompt(args) {
+        const incident = args?.incident ?? 'Triage the incident';
+        const action = args?.action ?? 'triage';
+        return [
+            {
+                role: 'assistant',
+                content: {
+                    type: 'text',
+                    text: [
+                        '# Capability: Incident Triage',
+                        '',
+                        `**Action:** ${action}`,
+                        '',
+                        'I am a **P1/P2 incident triage specialist**. I fetch incident details, assess impact',
+                        'via the CMDB, check SLA compliance, search the knowledge base for known resolutions,',
+                        'and draft stakeholder communications.',
+                        '',
+                        '## Triage Workflow',
+                        '',
+                        '### Step 1 — Fetch Incident Details',
+                        '',
+                        'Use `get_incident` to retrieve the full incident record:',
+                        '- Number, short description, detailed description',
+                        '- Priority, impact, urgency, state',
+                        '- Assignment group, assigned to',
+                        '- Configuration item, business service',
+                        '- Caller, opened at, timeline',
+                        '- Related records (child incidents, problem, change)',
+                        '',
+                        '### Step 2 — Assess Impact via CMDB',
+                        '',
+                        'Use `search_cmdb_ci`, `get_cmdb_ci`, and `list_relationships` to map the blast radius:',
+                        '- Identify the affected CI and its class/type',
+                        '- Map upstream dependencies (what depends on this CI)',
+                        '- Map downstream dependencies (what this CI depends on)',
+                        '- Identify affected business services and their criticality',
+                        '- Determine the number of users/customers potentially impacted',
+                        '- Check CI operational status and recent changes',
+                        '',
+                        '### Step 3 — Check SLAs',
+                        '',
+                        'Use `get_sla_details` and `list_active_slas` to evaluate:',
+                        '- Active SLA definitions attached to this incident',
+                        '- Time elapsed vs. time remaining for each SLA stage (response, resolution)',
+                        '- Whether any SLA is breached or at risk of breach',
+                        '- Escalation actions triggered or pending',
+                        '- Business hours vs. 24/7 SLA calculation',
+                        '',
+                        '### Step 4 — Search Knowledge Base',
+                        '',
+                        'Use `search_knowledge` to find relevant articles:',
+                        '- Search by CI, error message, symptoms, category',
+                        '- Look for known error articles with workarounds',
+                        '- Check for recent similar incident resolutions',
+                        '- Identify matching problem records',
+                        '',
+                        '### Step 5 — Check Recent Changes',
+                        '',
+                        'Use `query_records` on `change_request` to find recent changes:',
+                        '- Changes to the affected CI in the last 7 days',
+                        '- Changes to upstream/downstream CIs',
+                        '- Failed or backed-out changes',
+                        '- Scheduled changes in flight during the incident window',
+                        '- Correlate change implementation time with incident start time',
+                        '',
+                        '### Step 6 — Suggest Resolution',
+                        '',
+                        'Based on gathered evidence, provide:',
+                        '- **Root cause hypothesis** — most likely cause ranked by evidence strength',
+                        '- **Immediate remediation** — steps to restore service now',
+                        '- **Workaround** — temporary mitigation if full fix needs a change window',
+                        '- **Permanent fix** — long-term resolution with change request if needed',
+                        '- **Similar past incidents** — how they were resolved',
+                        '',
+                        '### Step 7 — Draft Communications',
+                        '',
+                        'Generate two communication drafts:',
+                        '',
+                        '**Stakeholder Communication (non-technical):**',
+                        '- Affected service and business impact',
+                        '- Current status and ETA for resolution',
+                        '- Workaround availability',
+                        '- Next update time',
+                        '',
+                        '**Technical Communication (engineering):**',
+                        '- Affected CIs and dependency chain',
+                        '- Error details and diagnostic data',
+                        '- Actions taken and current hypothesis',
+                        '- Requested assistance or escalation',
+                        '',
+                        '### Step 8 — Execute Actions',
+                        '',
+                        'Based on the action parameter, execute:',
+                        '',
+                        '| Action | What Happens |',
+                        '|--------|-------------|',
+                        '| **triage** | Full analysis (steps 1-7), add work notes with findings |',
+                        '| **escalate** | Triage + update priority/assignment + notify escalation contacts |',
+                        '| **communicate** | Generate stakeholder + technical comms, add as comments |',
+                        '| **review** | Post-incident review — timeline, actions taken, lessons learned |',
+                        '',
+                        'Use `update_incident` to update fields, `add_work_note` for internal notes,',
+                        'and `add_comment` for customer-visible updates.',
+                        '',
+                        '## Output Format',
+                        '',
+                        '```',
+                        'INCIDENT TRIAGE REPORT',
+                        '======================',
+                        'Incident: [number]  |  Priority: [P1/P2/P3]  |  State: [state]',
+                        '',
+                        'IMPACT ASSESSMENT',
+                        '  Affected CI: [ci_name] ([ci_class])',
+                        '  Business Services: [list]',
+                        '  Upstream Dependencies: [count] CIs',
+                        '  Downstream Dependants: [count] CIs',
+                        '  Estimated User Impact: [number] users',
+                        '',
+                        'SLA STATUS',
+                        '  Response SLA: [elapsed/total] — [status]',
+                        '  Resolution SLA: [elapsed/total] — [status]',
+                        '',
+                        'ANALYSIS',
+                        '  Root Cause Hypothesis: [description]',
+                        '  Evidence: [supporting data]',
+                        '  Related Changes: [CHG numbers]',
+                        '  KB Matches: [article numbers]',
+                        '',
+                        'RECOMMENDED ACTIONS',
+                        '  1. [immediate action]',
+                        '  2. [follow-up action]',
+                        '  ...',
+                        '```',
+                        '',
+                        '---',
+                        '',
+                        `Starting incident triage with action: **${action}**.`,
+                    ].join('\n'),
+                },
+            },
+            {
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: incident,
+                },
+            },
+        ];
+    },
+};
+export default capability;
+//# sourceMappingURL=ops-triage.js.map

package/dist/prompts/capabilities/ops-triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops-triage.js","sourceRoot":"","sources":["../../../src/prompts/capabilities/ops-triage.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAyB;IACvC,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACT,gIAAgI;IAClI,QAAQ,EAAE,KAAK;IAEf,SAAS,EAAE;QACT;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,2DAA2D;YAC7D,QAAQ,EAAE,IAAI;SACf;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,wDAAwD;YAC1D,QAAQ,EAAE,KAAK;SAChB;KACF;IAED,gBAAgB,EAAE;QAChB,cAAc;QACd,iBAAiB;QACjB,eAAe;QACf,aAAa;QACb,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,kBAAkB;QAClB,gBAAgB;QAChB,aAAa;QACb,oBAAoB;QACpB,uBAAuB;KACxB;IAED,WAAW,CAAC,IAAI;QACd,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,qBAAqB,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC;QAExC,OAAO;YACL;gBACE,IAAI,EAAE,WAAoB;gBAC1B,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,+BAA+B;wBAC/B,EAAE;wBACF,eAAe,MAAM,EAAE;wBACvB,EAAE;wBACF,sFAAsF;wBACtF,sFAAsF;wBACtF,uCAAuC;wBACvC,EAAE;wBACF,oBAAoB;wBACpB,EAAE;wBACF,qCAAqC;wBACrC,EAAE;wBACF,0DAA0D;wBAC1D,mDAAmD;wBACnD,oCAAoC;wBACpC,iCAAiC;wBACjC,wCAAwC;wBACxC,+BAA+B;wBAC/B,sDAAsD;wBACtD,EAAE;wBACF,qCAAqC;wBACrC,EAAE;wBACF,wFAAwF;wBACxF,+CAA+C;wBAC/C,uDAAuD;wBACvD,yDAAyD;wBACzD,6DAA6D;wBAC7D,gEAAgE;wBAChE,kDAAkD;wBAClD,EAAE;wBACF,yBAAyB;wBACzB,EAAE;wBACF,2DAA2D;wBAC3D,oDAAoD;wBACpD,6EAA6E;wBAC7E,oDAAoD;wBACpD,2CAA2C;wBAC3C,2CAA2C;wBAC3C,EAAE;wBACF,oCAAoC;wBACpC,EAAE;wBACF,mDAAmD;wBACnD,mDAAmD;wBACnD,kDAAkD;wBAClD,iDAAiD;wBACjD,qCAAqC;wBACrC,EAAE;wBACF,mCAAmC;wBACnC,EAAE;wBACF,iEAAiE;wBACjE,iDAAiD;wBACjD,sCAAsC;wBACtC,gCAAgC;wBAChC,0DAA0D;wBAC1D,iEAAiE;wBACjE,EAAE;wBACF,iCAAiC;wBACjC,EAAE;wBACF,sCAAsC;wBACtC,6EAA6E;wBAC7E,4DAA4D;wBAC5D,2EAA2E;wBAC3E,0EAA0E;wBAC1E,uDAAuD;wBACvD,EAAE;wBACF,mCAAmC;wBACnC,EAAE;wBACF,oCAAoC;wBACpC,EAAE;wBACF,gDAAgD;wBAChD,wCAAwC;wBACxC,yCAAyC;wBACzC,2BAA2B;wBAC3B,oBAAoB;wBACpB,EAAE;wBACF,4CAA4C;wBAC5C,qCAAqC;wBACrC,qCAAqC;wBACrC,wCAAwC;wBACxC,sCAAsC;wBACtC,EAAE;wBACF,8BAA8B;wBAC9B,EAAE;wBACF,yCAAyC;wBACzC,EAAE;wBACF,2BAA2B;wBAC3B,0BAA0B;wBAC1B,0EAA0E;wBAC1E,qFAAqF;wBACrF,+EAA+E;wBAC/E,kFAAkF;wBAClF,EAAE;wBACF,6EAA6E;wBAC7E,iDAAiD;wBACjD,EAAE;wBACF,kBAAkB;wBAClB,EAAE;wBACF,KAAK;wBACL,wBAAwB;wBACxB,wBAAwB;wBACxB,gEAAgE;wBAChE,EAAE;wBACF,mBAAmB;wBACnB,uCAAuC;wBACvC,6BAA6B;wBAC7B,sCAAsC;wBACtC,sCAAsC;wBACtC,yCAAyC;wBACzC,EAAE;wBACF,YAAY;wBACZ,4CAA4C;wBAC5C,8CAA8C;wBAC9C,EAAE;wBACF,UAAU;wBACV,wCAAwC;wBACxC,+BAA+B;wBAC/B,kCAAkC;wBAClC,iCAAiC;wBACjC,EAAE;wBACF,qBAAqB;wBACrB,yBAAyB;wBACzB,yBAAyB;wBACzB,OAAO;wBACP,KAAK;wBACL,EAAE;wBACF,KAAK;wBACL,EAAE;wBACF,2CAA2C,MAAM,KAAK;qBACvD,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb;aACF;YACD;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,QAAQ;iBACf;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/prompts/capabilities/review-acls.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityDefinition } from '../types.js';
+declare const capability: CapabilityDefinition;
+export default capability;
+//# sourceMappingURL=review-acls.d.ts.map

package/dist/prompts/capabilities/review-acls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-acls.d.ts","sourceRoot":"","sources":["../../../src/prompts/capabilities/review-acls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,QAAA,MAAM,UAAU,EAAE,oBA+IjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/prompts/capabilities/review-acls.js

@@ -0,0 +1,142 @@
+const capability = {
+    name: 'review-acls',
+    title: 'ACL Coverage Analysis',
+    description: 'Analyze ACL coverage across all tables and fields — find gaps, conflicts, overly permissive rules',
+    category: 'review',
+    arguments: [
+        {
+            name: 'table',
+            description: 'Specific table to audit (e.g. "incident", "cmdb_ci"), or omit for instance-wide analysis',
+            required: false,
+        },
+    ],
+    recommendedTools: [
+        'list_acls',
+        'get_acl',
+        'query_records',
+        'get_table_schema',
+        'list_users',
+        'list_groups',
+    ],
+    buildPrompt(args) {
+        const table = args?.table ?? '';
+        const scope = table || 'instance-wide';
+        return [
+            {
+                role: 'assistant',
+                content: {
+                    type: 'text',
+                    text: [
+                        '# ACL Coverage Analysis',
+                        '',
+                        'I am a **ServiceNow ACL analysis specialist**. I audit access control lists across',
+                        'tables and fields to find coverage gaps, conflicting rules, and overly permissive access.',
+                        '',
+                        `## Audit Scope: **${scope}**`,
+                        '',
+                        table
+                            ? `I will perform a deep ACL analysis on the \`${table}\` table and all its fields.`
+                            : 'I will perform an instance-wide ACL coverage analysis across all tables.',
+                        '',
+                        '## What I Check',
+                        '',
+                        '### 1. Tables with NO ACLs Defined',
+                        '- Identify tables that have zero ACL records — these rely solely on default security',
+                        '- Flag custom tables (non-OOB) with no ACLs as **Critical**',
+                        '- Check inherited ACLs from parent tables and whether they are sufficient',
+                        '',
+                        '### 2. Field-Level ACL Gaps',
+                        '- Tables with table-level ACLs but no field-level ACLs for sensitive fields',
+                        '- Sensitive field detection: fields named `password`, `ssn`, `credit_card`, `api_key`,',
+                        '  `token`, `secret`, `salary`, `dob`, `date_of_birth`, `social_security`, or custom',
+                        '  fields marked as encrypted',
+                        '- Fields containing PII or financial data without explicit field-level ACLs',
+                        '',
+                        '### 3. Wildcard / Overly Permissive ACLs',
+                        '- ACLs with **empty script AND empty condition** — effectively grants access to anyone with the role',
+                        '- ACLs with no role requirement and no condition — grants access to all authenticated users',
+                        '- ACLs using `*` operation type — applies to all CRUD operations indiscriminately',
+                        '',
+                        '### 4. Admin-Only Shortcut ACLs',
+                        '- ACLs that only require `admin` role — often a lazy shortcut',
+                        '- Identify where scoped roles (`x_*`) should replace admin requirements',
+                        '- Flag tables where admin is the only role with write access',
+                        '',
+                        '### 5. Conflicting ACLs',
+                        '- Multiple ACLs on the same object with different roles and different outcomes',
+                        '- ACLs where one grants access and another denies it for overlapping role sets',
+                        '- Order-of-evaluation issues where a permissive ACL runs before a restrictive one',
+                        '- Duplicate ACLs (same table, operation, and role)',
+                        '',
+                        '### 6. Row-Level ACL Gaps on Multi-Tenant Tables',
+                        '- Tables with a `company`, `department`, or `assignment_group` field but no',
+                        '  row-level condition restricting visibility',
+                        '- Multi-tenant tables where users can see records outside their org',
+                        '- Domain-separated instances missing domain ACL conditions',
+                        '',
+                        '### 7. Script Conditions That Could Be Simplified',
+                        '- ACLs with script conditions that perform simple field comparisons — these should',
+                        '  use the condition builder instead for better performance and maintainability',
+                        '- Scripts that only check `gs.hasRole()` — should use the role field instead',
+                        '- Scripts that only check `current.field == value` — should use a condition',
+                        '',
+                        '### 8. Missing CRUD Operation Coverage',
+                        '- Tables with `read` ACLs but missing `create`, `write`, or `delete` ACLs',
+                        '- Tables with `write` but no `delete` — users can edit but deletion is uncontrolled',
+                        '- Tables missing `create` ACLs — anyone can insert records',
+                        '- Attachment ACLs missing for tables that store sensitive attachments',
+                        '',
+                        '## Output Format',
+                        '',
+                        '### Coverage Matrix',
+                        '',
+                        'A table showing ACL coverage per table and operation:',
+                        '',
+                        '| Table | Read | Create | Write | Delete | Field-Level | Row-Level | Issues |',
+                        '|-------|------|--------|-------|--------|-------------|-----------|--------|',
+                        '',
+                        '### Gap List',
+                        '',
+                        'For each gap found:',
+                        '',
+                        '| Field | Description |',
+                        '|-------|-------------|',
+                        '| **Severity** | Critical / High / Medium / Low |',
+                        '| **Table** | Affected table |',
+                        '| **Gap Type** | Missing ACL, Overly Permissive, Conflict, etc. |',
+                        '| **Details** | What is missing or misconfigured |',
+                        '| **Recommendation** | Specific fix with ACL configuration |',
+                        '',
+                        '### Recommendations',
+                        '',
+                        'Prioritized list of actions to improve ACL coverage, grouped by severity.',
+                        '',
+                        '## Tools I Use',
+                        '',
+                        '| Tool | Purpose |',
+                        '|------|---------|',
+                        '| `list_acls` | Retrieve all ACLs, optionally filtered by table |',
+                        '| `get_acl` | Deep-dive into specific ACL configuration |',
+                        '| `query_records` | Check table metadata, field definitions, record counts |',
+                        '| `get_table_schema` | Understand table structure and field types |',
+                        '| `list_users` | Check user role assignments for impact analysis |',
+                        '| `list_groups` | Check group role assignments for impact analysis |',
+                        '',
+                        'I will now begin the ACL coverage analysis.',
+                    ].join('\n'),
+                },
+            },
+            {
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: table
+                        ? `Analyze ACL coverage for the ${table} table`
+                        : 'Analyze ACL coverage across the entire instance',
+                },
+            },
+        ];
+    },
+};
+export default capability;
+//# sourceMappingURL=review-acls.js.map

package/dist/prompts/capabilities/review-acls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-acls.js","sourceRoot":"","sources":["../../../src/prompts/capabilities/review-acls.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAyB;IACvC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EACT,mGAAmG;IACrG,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE;QACT;YACE,IAAI,EAAE,OAAO;YACb,WAAW,EACT,0FAA0F;YAC5F,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW;QACX,SAAS;QACT,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,aAAa;KACd;IAED,WAAW,CAAC,IAAI;QACd,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,IAAI,eAAe,CAAC;QAEvC,OAAO;YACL;gBACE,IAAI,EAAE,WAAoB;gBAC1B,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE;wBACJ,yBAAyB;wBACzB,EAAE;wBACF,oFAAoF;wBACpF,2FAA2F;wBAC3F,EAAE;wBACF,qBAAqB,KAAK,IAAI;wBAC9B,EAAE;wBACF,KAAK;4BACH,CAAC,CAAC,+CAA+C,KAAK,8BAA8B;4BACpF,CAAC,CAAC,0EAA0E;wBAC9E,EAAE;wBACF,iBAAiB;wBACjB,EAAE;wBACF,oCAAoC;wBACpC,sFAAsF;wBACtF,6DAA6D;wBAC7D,2EAA2E;wBAC3E,EAAE;wBACF,6BAA6B;wBAC7B,6EAA6E;wBAC7E,wFAAwF;wBACxF,qFAAqF;wBACrF,8BAA8B;wBAC9B,6EAA6E;wBAC7E,EAAE;wBACF,0CAA0C;wBAC1C,sGAAsG;wBACtG,6FAA6F;wBAC7F,mFAAmF;wBACnF,EAAE;wBACF,iCAAiC;wBACjC,+DAA+D;wBAC/D,yEAAyE;wBACzE,8DAA8D;wBAC9D,EAAE;wBACF,yBAAyB;wBACzB,gFAAgF;wBAChF,gFAAgF;wBAChF,mFAAmF;wBACnF,oDAAoD;wBACpD,EAAE;wBACF,kDAAkD;wBAClD,6EAA6E;wBAC7E,8CAA8C;wBAC9C,qEAAqE;wBACrE,4DAA4D;wBAC5D,EAAE;wBACF,mDAAmD;wBACnD,oFAAoF;wBACpF,gFAAgF;wBAChF,8EAA8E;wBAC9E,6EAA6E;wBAC7E,EAAE;wBACF,wCAAwC;wBACxC,2EAA2E;wBAC3E,qFAAqF;wBACrF,4DAA4D;wBAC5D,uEAAuE;wBACvE,EAAE;wBACF,kBAAkB;wBAClB,EAAE;wBACF,qBAAqB;wBACrB,EAAE;wBACF,uDAAuD;wBACvD,EAAE;wBACF,+EAA+E;wBAC/E,+EAA+E;wBAC/E,EAAE;wBACF,cAAc;wBACd,EAAE;wBACF,qBAAqB;wBACrB,EAAE;wBACF,yBAAyB;wBACzB,yBAAyB;wBACzB,mDAAmD;wBACnD,gCAAgC;wBAChC,mEAAmE;wBACnE,oDAAoD;wBACpD,8DAA8D;wBAC9D,EAAE;wBACF,qBAAqB;wBACrB,EAAE;wBACF,2EAA2E;wBAC3E,EAAE;wBACF,gBAAgB;wBAChB,EAAE;wBACF,oBAAoB;wBACpB,oBAAoB;wBACpB,mEAAmE;wBACnE,2DAA2D;wBAC3D,8EAA8E;wBAC9E,qEAAqE;wBACrE,oEAAoE;wBACpE,sEAAsE;wBACtE,EAAE;wBACF,6CAA6C;qBAC9C,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb;aACF;YACD;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,KAAK;wBACT,CAAC,CAAC,gCAAgC,KAAK,QAAQ;wBAC/C,CAAC,CAAC,iDAAiD;iBACtD;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/prompts/capabilities/review-code.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityDefinition } from '../types.js';
+declare const capability: CapabilityDefinition;
+export default capability;
+//# sourceMappingURL=review-code.d.ts.map

package/dist/prompts/capabilities/review-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-code.d.ts","sourceRoot":"","sources":["../../../src/prompts/capabilities/review-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,QAAA,MAAM,UAAU,EAAE,oBA6JjB,CAAC;AAEF,eAAe,UAAU,CAAC"}