opencode-skills-collection 4.0.69 → 4.0.70

package/bundled-skills/connection-auth-rules/fetch_schema.py

@@ -0,0 +1,320 @@
+#!/usr/bin/env python3
+"""
+Fetch Connection Auth Rules schema from the apollo-agent GitHub repo.
+
+Reads connector defaults and transform step contracts, then outputs JSON
+for use by the connection-auth-rules skill.
+
+Usage:
+    python3 fetch_schema.py --list
+    python3 fetch_schema.py --connector <name>
+    python3 fetch_schema.py --connector <name> --transforms
+    python3 fetch_schema.py --transforms
+
+Set GITHUB_TOKEN env var to raise the GitHub API rate limit from 60 to
+5,000 requests/hour.
+"""
+
+from __future__ import annotations
+
+import ast
+import json
+import os
+import sys
+import argparse
+import urllib.request
+import urllib.error
+
+REPO = "monte-carlo-data/apollo-agent"
+DEFAULTS_PATH = "apollo/integrations/ctp/defaults"
+TRANSFORMS_PATH = "apollo/integrations/ctp/transforms"
+GITHUB_API = f"https://api.github.com/repos/{REPO}/contents"
+
+
+def _headers() -> dict[str, str]:
+    headers = {"User-Agent": "mc-agent-toolkit/connection-auth-rules"}
+    token = os.environ.get("GITHUB_TOKEN")
+    if token:
+        headers["Authorization"] = f"Bearer {token}"
+    return headers
+
+
+def _fetch_json(url: str) -> object:
+    req = urllib.request.Request(url, headers=_headers())
+    with urllib.request.urlopen(req) as resp:
+        return json.loads(resp.read())
+
+
+def _fetch_text(url: str) -> str:
+    req = urllib.request.Request(url, headers=_headers())
+    with urllib.request.urlopen(req) as resp:
+        return resp.read().decode("utf-8")
+
+
+def _list_py_files(api_path: str) -> list[dict]:
+    entries = _fetch_json(f"{GITHUB_API}/{api_path}")
+    return [
+        {"name": e["name"].removesuffix(".py"), "download_url": e["download_url"]}
+        for e in entries
+        if e["type"] == "file"
+        and e["name"].endswith(".py")
+        and e["name"] != "__init__.py"
+    ]
+
+
+# ---------------------------------------------------------------------------
+# AST helpers
+# ---------------------------------------------------------------------------
+
+
+def _ast_unparse(node: ast.expr) -> str:
+    # Return the actual string value for string constants — callers want the
+    # Jinja2 template text, not the Python repr with surrounding quotes.
+    if isinstance(node, ast.Constant) and isinstance(node.value, str):
+        return node.value
+    if hasattr(ast, "unparse"):
+        return ast.unparse(node)
+    if isinstance(node, ast.Constant):
+        return repr(node.value)
+    return "<complex expression>"
+
+
+def _extract_dict(node: ast.expr) -> dict[str, str]:
+    if not isinstance(node, ast.Dict):
+        return {}
+    return {
+        k.value: _ast_unparse(v)
+        for k, v in zip(node.keys, node.values)
+        if isinstance(k, ast.Constant)
+    }
+
+
+def _call_name(node: ast.Call) -> str:
+    if isinstance(node.func, ast.Name):
+        return node.func.id
+    if isinstance(node.func, ast.Attribute):
+        return node.func.attr
+    return ""
+
+
+def _parse_step_call(call: ast.Call) -> dict:
+    # Default type to the constructor name; overridden by an explicit type= kwarg.
+    step: dict = {"type": _call_name(call)}
+    for kw in call.keywords:
+        if kw.arg == "type":
+            step["type"] = _ast_unparse(kw.value)
+        elif kw.arg in ("input", "output", "when", "field_map"):
+            step[kw.arg] = (
+                _extract_dict(kw.value)
+                if isinstance(kw.value, ast.Dict)
+                else _ast_unparse(kw.value)
+            )
+    return step
+
+
+# ---------------------------------------------------------------------------
+# Connector schema parsing
+# ---------------------------------------------------------------------------
+
+
+def _parse_connector_schema(source: str) -> dict:
+    tree = ast.parse(source)
+
+    output_keys: list[str] = []
+    default_field_map: dict[str, str] = {}
+    default_steps: list[dict] = []
+
+    for node in ast.walk(tree):
+        # TypedDict subclass → output keys
+        if isinstance(node, ast.ClassDef):
+            for base in node.bases:
+                is_typed_dict = (
+                    isinstance(base, ast.Name) and base.id == "TypedDict"
+                ) or (isinstance(base, ast.Attribute) and base.attr == "TypedDict")
+                if is_typed_dict:
+                    output_keys.extend(
+                        stmt.target.id
+                        for stmt in node.body
+                        if isinstance(stmt, ast.AnnAssign)
+                        and isinstance(stmt.target, ast.Name)
+                    )
+
+        if not isinstance(node, ast.Call):
+            continue
+
+        name = _call_name(node)
+
+        # MapperConfig(field_map={...})
+        if name == "MapperConfig":
+            for kw in node.keywords:
+                if kw.arg == "field_map":
+                    default_field_map = _extract_dict(kw.value)
+
+        # CtpConfig(steps=[...], mapper=...)
+        if name == "CtpConfig":
+            for kw in node.keywords:
+                if kw.arg == "steps" and isinstance(kw.value, ast.List):
+                    default_steps = [
+                        _parse_step_call(elt)
+                        for elt in kw.value.elts
+                        if isinstance(elt, ast.Call)
+                    ]
+
+    return {
+        "output_keys": output_keys,
+        "default_field_map": default_field_map,
+        "default_steps": default_steps,
+    }
+
+
+# ---------------------------------------------------------------------------
+# Transform step parsing
+# ---------------------------------------------------------------------------
+
+
+def _parse_docstring_sections(docstring: str) -> dict[str, str]:
+    """Extract Step input/output/field_map sections from a docstring."""
+    sections: dict[str, str] = {}
+    current_key: str | None = None
+    buf: list[str] = []
+
+    # Prefixes are matched with startswith so "Step field_map (typical usage):"
+    # is caught by the "Step field_map" prefix.
+    prefix_map = [
+        ("Step input", "step_input"),
+        ("Step output", "step_output"),
+        ("Step field_map", "step_field_map"),
+    ]
+
+    for line in docstring.splitlines():
+        stripped = line.strip()
+        matched = False
+        for prefix, key in prefix_map:
+            if stripped.startswith(prefix):
+                if current_key is not None:
+                    sections[current_key] = "\n".join(buf).strip()
+                current_key = key
+                # Drop everything up to and including the first ":"
+                after_colon = (
+                    stripped[stripped.index(":") + 1 :].strip()
+                    if ":" in stripped
+                    else ""
+                )
+                buf = [after_colon] if after_colon else []
+                matched = True
+                break
+        if not matched and current_key is not None:
+            buf.append(stripped)
+
+    if current_key is not None:
+        sections[current_key] = "\n".join(buf).strip()
+
+    return sections
+
+
+def _parse_transform_step(name: str, source: str) -> dict:
+    tree = ast.parse(source)
+
+    # Docstrings live on the Transform subclass, not the module.
+    docstring = ast.get_docstring(tree) or ""
+    for node in ast.walk(tree):
+        if isinstance(node, ast.ClassDef):
+            class_doc = ast.get_docstring(node)
+            if class_doc:
+                docstring = class_doc
+                break
+
+    sections = _parse_docstring_sections(docstring)
+    return {
+        "name": name,
+        "step_input": sections.get("step_input", ""),
+        "step_output": sections.get("step_output", ""),
+        "step_field_map": sections.get("step_field_map", ""),
+    }
+
+
+# ---------------------------------------------------------------------------
+# Commands
+# ---------------------------------------------------------------------------
+
+
+def cmd_list() -> dict:
+    return {"connectors": _list_py_files(DEFAULTS_PATH)}
+
+
+def cmd_connector(name: str) -> dict:
+    files = _list_py_files(DEFAULTS_PATH)
+    match = next((f for f in files if f["name"] == name), None)
+    if not match:
+        return {
+            "error": (
+                f"Connector '{name}' not found. "
+                "Run --list to see available connectors."
+            )
+        }
+    source = _fetch_text(match["download_url"])
+    schema = _parse_connector_schema(source)
+    schema["connector"] = name
+    return {"schema": schema}
+
+
+def cmd_transforms() -> dict:
+    files = _list_py_files(TRANSFORMS_PATH)
+    return {
+        "transforms": [
+            _parse_transform_step(f["name"], _fetch_text(f["download_url"]))
+            for f in files
+        ]
+    }
+
+
+# ---------------------------------------------------------------------------
+# Entry point
+# ---------------------------------------------------------------------------
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(
+        description="Fetch connection-auth-rules schema from the apollo-agent repo",
+    )
+    parser.add_argument("--list", action="store_true", help="List available connectors")
+    parser.add_argument(
+        "--connector", metavar="NAME", help="Fetch schema for a connector"
+    )
+    parser.add_argument(
+        "--transforms", action="store_true", help="Fetch available transform steps"
+    )
+    args = parser.parse_args()
+
+    if not (args.list or args.connector or args.transforms):
+        parser.print_help()
+        sys.exit(1)
+
+    result: dict = {}
+
+    try:
+        if args.list:
+            result.update(cmd_list())
+
+        if args.connector:
+            connector_result = cmd_connector(args.connector)
+            if "error" in connector_result:
+                print(json.dumps(connector_result, indent=2))
+                sys.exit(1)
+            result.update(connector_result)
+
+        if args.transforms:
+            result.update(cmd_transforms())
+
+    except urllib.error.HTTPError as exc:
+        print(json.dumps({"error": f"GitHub API error {exc.code}: {exc.reason}"}))
+        sys.exit(1)
+    except urllib.error.URLError as exc:
+        print(json.dumps({"error": f"Network error: {exc.reason}"}))
+        sys.exit(1)
+
+    print(json.dumps(result, indent=2))
+
+
+if __name__ == "__main__":
+    main()

package/bundled-skills/dependency-analysis/README.md

@@ -0,0 +1,42 @@
+# Dependency Analysis
+
+This is an official Ontoly Agent Skill. It is independently installable and teaches an agent how to use Ontoly for dependency analysis.
+
+## Version
+
+- Skill version: 1.0.0
+- Minimum Ontoly version: 1.0.0
+- Required capabilities: `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics`, `EvidencePack`
+- Enhancement: LLM Enhancement
+- Deprecated: no
+
+## Install
+
+Install this skill with any Agent Skills compatible installer that supports `SKILL.md` directories, or copy this folder into your agent skills directory.
+
+## Use
+
+Ask the agent a task such as:
+
+> Which packages depend on this module?
+
+The agent should build or verify the Ontoly graph, use MCP capabilities, cite evidence, and only inspect files as a fallback.
+
+## Public Docs
+
+- [Agent Skills](https://ontoly.xyz/docs/agent-skills)
+- [Skills Overview](https://ontoly.xyz/docs/skills-overview)
+- [MCP](https://ontoly.xyz/docs/mcp)
+- [Capabilities](https://ontoly.xyz/docs/capabilities)
+- [Skills Validation](https://ontoly.xyz/docs/skills-validation)
+
+## Shared References
+
+This skill depends on the shared Ontoly workflow in [reference/workflow.md](reference/workflow.md).
+
+## Learn more
+
+- Documentation: https://ontoly.xyz/docs
+- This skill on the web: https://ontoly.xyz/skills#dependency-analysis
+- All Ontoly Agent Skills: https://ontoly.xyz/skills
+- Install via skills.sh: https://www.skills.sh/?q=0xsarwagya/ontoly

package/bundled-skills/dependency-analysis/SKILL.md

@@ -0,0 +1,76 @@
+---
+name: dependency-analysis
+description: Analyze internal and package dependencies using Ontoly graph traversal.
+  Use when asked which modules, packages, services, or files depend on each other.
+license: AGPL-3.0-only
+compatibility: Portable Agent Skills format; requires Ontoly CLI and MCP-capable or
+  CLI-capable coding agent.
+metadata:
+  ontoly.skill.version: 1.3.3
+  ontoly.min.version: 1.3.3
+  ontoly.capabilities: FindDependencies, FindDependents, FindCycles, GraphStatistics,
+    EvidencePack
+  ontoly.category: dependencies
+  ontoly.enhancement: LLM Enhancement
+  ontoly.deprecated: 'false'
+source_repo: 0xsarwagya/ontoly
+source_type: community
+source: community
+date_added: '2026-09-21'
+risk: unknown
+---
+## When to Use
+- Use when this upstream workflow matches the user's stated goal.
+- Use when the task requires the procedures documented in this skill.
+
+# Dependency Analysis
+
+Use this skill when the user asks for dependency analysis using Ontoly evidence.
+
+## Required Workflow
+
+Follow [the shared Ontoly workflow. Also read [graph evidence rules, [MCP usage, [best practices, and [fallback rules when the task requires detail.
+
+## Ontoly Capabilities
+
+Use these capabilities first: `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics`, `EvidencePack`.
+
+## Output Contract
+
+Return:
+
+- answer or plan
+- capabilities invoked
+- graph evidence with node ids, edge types, source spans, and graph hash when available
+- confidence: high, medium, or low
+- fallback reason if repository files were inspected
+
+## Boundaries
+
+Do not implement compiler, query, MCP, SDK, or business logic in the skill. Do not search repository files until Ontoly cannot answer or evidence must be confirmed.
+
+## Resources
+
+- [Examples
+- [Prompt template
+- [Capability notes
+
+## Learn more
+
+- Documentation: https://ontoly.xyz/docs
+- This skill on the web: https://ontoly.xyz/skills#dependency-analysis
+- All Ontoly Agent Skills: https://ontoly.xyz/skills
+- Install via skills.sh: https://www.skills.sh/?q=0xsarwagya/ontoly
+
+
+## Examples
+
+```text
+User: Apply this skill to my current task.
+Assistant: Follow the workflow in this skill, cite limitations, and ask before risky steps.
+```
+
+## Limitations
+
+- Imported upstream skill; verify credentials, permissions, and safety boundaries before execution.
+- Does not replace environment-specific validation, testing, or maintainer review.

package/bundled-skills/dependency-analysis/examples.md

@@ -0,0 +1,11 @@
+# Dependency Analysis Examples
+
+Each example is graph-first and MCP-first.
+
+| Repository | Questions | Expected workflow | Capabilities invoked | Expected evidence | Expected answer |
+| --- | --- | --- | --- | --- | --- |
+| Ovok Core | Trace the login flow through the NestJS auth controller. | Follow shared workflow, run `EvidencePack` first, then `FindDependencies` then `FindDependents` then `FindCycles` then `GraphStatistics`, inspect files only if graph evidence is missing. | `EvidencePack`, `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics` | controller, route, service, dependency-injection edges; graph hash; confidence. | A deterministic dependency report with direct/transitive edges, cycles, and confidence. |
+| Ghost | Explain the package entrypoint and public API surface. | Follow shared workflow, run `EvidencePack` first, then `FindDependencies` then `FindDependents` then `FindCycles` then `GraphStatistics`, inspect files only if graph evidence is missing. | `EvidencePack`, `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics` | package, exports, functions, interfaces; graph hash; confidence. | A deterministic dependency report with direct/transitive edges, cycles, and confidence. |
+| durable-local | Find storage APIs and consumers before a refactor. | Follow shared workflow, run `EvidencePack` first, then `FindDependencies` then `FindDependents` then `FindCycles` then `GraphStatistics`, inspect files only if graph evidence is missing. | `EvidencePack`, `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics` | functions, interfaces, dependents, configuration; graph hash; confidence. | A deterministic dependency report with direct/transitive edges, cycles, and confidence. |
+| 0xsarwagya | Summarize workspace packages and package dependencies. | Follow shared workflow, run `EvidencePack` first, then `FindDependencies` then `FindDependents` then `FindCycles` then `GraphStatistics`, inspect files only if graph evidence is missing. | `EvidencePack`, `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics` | workspace, packages, framework nodes, dependency edges; graph hash; confidence. | A deterministic dependency report with direct/transitive edges, cycles, and confidence. |
+| Innosphere | Identify application modules and request ownership. | Follow shared workflow, run `EvidencePack` first, then `FindDependencies` then `FindDependents` then `FindCycles` then `GraphStatistics`, inspect files only if graph evidence is missing. | `EvidencePack`, `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics` | controllers, modules, routes, services; graph hash; confidence. | A deterministic dependency report with direct/transitive edges, cycles, and confidence. |

package/bundled-skills/dependency-analysis/reference/best-practices.md

@@ -0,0 +1,7 @@
+# Agent Best Practices
+
+- Keep the answer graph-first and concise.
+- Separate measured graph facts from inference.
+- Prefer capability output over source search.
+- Include confidence: high when graph nodes and relationships directly answer the question, medium when evidence is partial, low when fallback file inspection was required.
+- Never generate SDKs, refactors, or security claims from the skill itself. The skill may plan workflows, but Ontoly remains the source of truth.

package/bundled-skills/dependency-analysis/reference/capabilities.md

@@ -0,0 +1,20 @@
+# Dependency Analysis Capability Notes
+
+Primary capabilities: `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics`, `EvidencePack`.
+
+Use [../reference/mcp.md](../reference/mcp.md) for common capability behavior and fallback CLI equivalents.
+
+## Required Evidence
+
+- capability name
+- graph hash
+- node ids and types
+- relationship types and direction
+- source spans when present
+- confidence
+
+## Compatibility
+
+- Skill version: 1.0.0
+- Minimum Ontoly version: 1.0.0
+- Deprecation status: active

package/bundled-skills/dependency-analysis/reference/fallbacks.md

@@ -0,0 +1,11 @@
+# Fallbacks
+
+Fallbacks are allowed only after Ontoly is insufficient. Valid fallback reasons:
+
+- graph artifact missing and build fails
+- relevant capability unavailable
+- graph trust below the task threshold
+- node is ambiguous or absent
+- source quote is needed to confirm a public answer
+
+When falling back, state the reason and keep inspection narrow: one file, one symbol, or one source span when possible.

package/bundled-skills/dependency-analysis/reference/graph.md

@@ -0,0 +1,15 @@
+# Software Graph Evidence
+
+Use Software Graph evidence as the primary source of truth. Prefer deterministic identifiers over prose names.
+
+Evidence fields to capture:
+
+- graph hash
+- capability invoked
+- node id and node type
+- edge type and direction
+- source span when present
+- diagnostic codes when relevant
+- confidence and reason for confidence
+
+Do not infer relationships that are absent from the graph. You may make a clearly labeled inference only after stating the graph evidence that supports it.

package/bundled-skills/dependency-analysis/reference/mcp.md

@@ -0,0 +1,14 @@
+# Ontoly MCP Usage
+
+Use Ontoly MCP capabilities before searching files. Common capability groups:
+
+- Architecture: `ExplainArchitecture`, `GraphStatistics`
+- Lookup: `FindNode`, `FindFunction`, `InspectFile`, `InspectModule`, `InspectClass`, `InspectFunction`
+- Dependencies: `FindDependencies`, `FindDependents`, `FindCycles`, `ImpactAnalysis`
+- Requests: `TraceRequestLifecycle`, `FindResponsibleFunction`, `TraceExecution`
+- Security: `FindAuthenticationFlow`, `FindConfigurationUsage`
+- Configuration: `FindConfiguration`, `FindConfigurationUsage`
+- Static analysis: `FindDeadCode`, `FindUnusedFeature`, `FindEntrypoints`
+- Evidence packs: `EvidencePack`
+
+If an agent cannot call MCP directly, use the nearest CLI command such as `ontoly evidence`, `ontoly report`, `ontoly query`, `ontoly trace`, or `ontoly inspect`.

package/bundled-skills/dependency-analysis/reference/workflow.md

@@ -0,0 +1,15 @@
+# Ontoly Agent Skill Standard Workflow
+
+Every Ontoly skill follows this workflow. Skills teach orchestration only; Ontoly provides the software understanding.
+
+LLM Enhancement is mandatory every time Ontoly is used by an LLM. An LLM-facing workflow must use an Ontoly skill or equivalent installed workflow that declares `ontoly.enhancement: "LLM Enhancement"` and preserves graph-first evidence, confidence, and fallback rules.
+
+1. Verify that an Ontoly graph exists at `.ontoly/SoftwareGraph.json`.
+2. If the graph is missing or stale, run `ontoly build .`.
+3. Check graph trust with `ontoly coverage .` or `ontoly stats . --json`.
+4. Prefer Ontoly MCP by starting or connecting to `ontoly mcp`.
+5. Query `EvidencePack` first for compact graph context, then the capability that matches the task before reading files.
+6. Inspect repository files only when Ontoly cannot answer, confidence is low, or source snippets are needed for confirmation.
+7. Always cite evidence: node ids, edge ids or relationship types, source spans, graph hash, capability name, and confidence.
+
+When evidence is incomplete, say what Ontoly proved, what remains unknown, and which fallback check was used.

package/bundled-skills/dependency-analysis/templates/dependency-review.md

@@ -0,0 +1,21 @@
+# Dependency Review
+
+Repository: {{repository}}
+Question: {{question}}
+
+## Workflow
+
+1. Verify `.ontoly/SoftwareGraph.json`.
+2. Build with `ontoly build .` if missing.
+3. Check trust with `ontoly coverage .`.
+4. Use Ontoly MCP capabilities: `FindDependencies`, `FindDependents`, `FindCycles`, `GraphStatistics`.
+5. Inspect files only if Ontoly cannot answer.
+
+## Response
+
+- Summary:
+- Capabilities invoked:
+- Evidence:
+- Confidence:
+- Fallbacks used:
+- Recommended next action: