paqad-ai 1.4.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (150) hide show
  1. package/CHANGELOG.md +52 -0
  2. package/dist/cli/index.js +2396 -386
  3. package/dist/cli/index.js.map +1 -1
  4. package/dist/index.d.ts +30 -1
  5. package/dist/index.js +665 -171
  6. package/dist/index.js.map +1 -1
  7. package/package.json +1 -1
  8. package/runtime/base/skills/module-attribution-extractor/SKILL.md +98 -0
  9. package/runtime/base/skills/module-attribution-extractor/agents/openai.yaml +6 -0
  10. package/runtime/base/skills/module-attribution-extractor/assets/templates/packet-collision.md +17 -0
  11. package/runtime/base/skills/module-attribution-extractor/assets/templates/packet-unknown.md +16 -0
  12. package/runtime/base/skills/module-attribution-extractor/references/pattern-set.md +30 -0
  13. package/runtime/base/skills/module-attribution-extractor/scripts/extract.sh +21 -0
  14. package/runtime/base/skills/module-attribution-extractor/scripts/filter-by-kind.sh +33 -0
  15. package/runtime/base/skills/module-attribution-extractor/scripts/needs-decision.sh +35 -0
  16. package/runtime/base/skills/module-attribution-inferencer/SKILL.md +105 -0
  17. package/runtime/base/skills/module-attribution-inferencer/agents/openai.yaml +5 -0
  18. package/runtime/base/skills/module-attribution-inferencer/assets/templates/packet-inferencer.md +22 -0
  19. package/runtime/base/skills/module-attribution-inferencer/references/scoring.md +44 -0
  20. package/runtime/base/skills/module-attribution-inferencer/scripts/infer.sh +25 -0
  21. package/runtime/base/skills/module-attribution-inferencer/scripts/is-confident.sh +27 -0
  22. package/runtime/base/skills/module-attribution-inferencer/scripts/require-module-map.sh +27 -0
  23. package/runtime/base/skills/module-health-rollup/SKILL.md +106 -0
  24. package/runtime/base/skills/module-health-rollup/agents/openai.yaml +7 -0
  25. package/runtime/base/skills/module-health-rollup/assets/templates/rollup-summary.md +22 -0
  26. package/runtime/base/skills/module-health-rollup/references/coverage-formats.md +46 -0
  27. package/runtime/base/skills/module-health-rollup/scripts/is-blocked.sh +29 -0
  28. package/runtime/base/skills/module-health-rollup/scripts/list-blocked-metrics.sh +30 -0
  29. package/runtime/base/skills/module-health-rollup/scripts/list-unattributed.sh +27 -0
  30. package/runtime/base/skills/module-health-rollup/scripts/rollup.sh +31 -0
  31. package/runtime/base/skills/module-map-reconciler/SKILL.md +112 -0
  32. package/runtime/base/skills/module-map-reconciler/agents/openai.yaml +5 -0
  33. package/runtime/base/skills/module-map-reconciler/assets/templates/findings-summary.md +23 -0
  34. package/runtime/base/skills/module-map-reconciler/references/source-roots-contract.md +59 -0
  35. package/runtime/base/skills/module-map-reconciler/scripts/count-by-code.sh +28 -0
  36. package/runtime/base/skills/module-map-reconciler/scripts/filter-by-code.sh +29 -0
  37. package/runtime/base/skills/module-map-reconciler/scripts/has-findings.sh +34 -0
  38. package/runtime/base/skills/module-map-reconciler/scripts/is-blocked.sh +26 -0
  39. package/runtime/base/skills/module-map-reconciler/scripts/reconcile.sh +17 -0
  40. package/runtime/base/skills/workflow-router/assets/routing-rules.txt +20 -0
  41. package/runtime/capabilities/coding/rules/design-retest.md +61 -0
  42. package/runtime/capabilities/coding/rules/design-test.md +205 -0
  43. package/runtime/capabilities/coding/skills/accessibility-review/SKILL.md +74 -0
  44. package/runtime/capabilities/coding/skills/accessibility-review/agents/openai.yaml +3 -0
  45. package/runtime/capabilities/coding/skills/accessibility-review/assets/output.template.md +8 -0
  46. package/runtime/capabilities/coding/skills/accessibility-review/references/wcag-mapping.md +50 -0
  47. package/runtime/capabilities/coding/skills/accessibility-review/scripts/lint-findings.sh +46 -0
  48. package/runtime/capabilities/coding/skills/accessibility-review/scripts/map-axe-to-wcag.sh +47 -0
  49. package/runtime/capabilities/coding/skills/accessibility-review/scripts/parse-axe-violations.sh +64 -0
  50. package/runtime/capabilities/coding/skills/accessibility-review/scripts/static-a11y-scan.sh +114 -0
  51. package/runtime/capabilities/coding/skills/component-conformance-review/SKILL.md +72 -0
  52. package/runtime/capabilities/coding/skills/component-conformance-review/agents/openai.yaml +3 -0
  53. package/runtime/capabilities/coding/skills/component-conformance-review/assets/output.template.md +8 -0
  54. package/runtime/capabilities/coding/skills/component-conformance-review/references/component-conformance-checklist.md +24 -0
  55. package/runtime/capabilities/coding/skills/component-conformance-review/scripts/derive-inventory.sh +57 -0
  56. package/runtime/capabilities/coding/skills/component-conformance-review/scripts/diff-inventories.sh +59 -0
  57. package/runtime/capabilities/coding/skills/component-conformance-review/scripts/lint-findings.sh +46 -0
  58. package/runtime/capabilities/coding/skills/component-conformance-review/scripts/parse-components-md.sh +75 -0
  59. package/runtime/capabilities/coding/skills/copy-and-ia-review/SKILL.md +66 -0
  60. package/runtime/capabilities/coding/skills/copy-and-ia-review/agents/openai.yaml +3 -0
  61. package/runtime/capabilities/coding/skills/copy-and-ia-review/assets/output.template.md +8 -0
  62. package/runtime/capabilities/coding/skills/copy-and-ia-review/references/copy-checklist.md +20 -0
  63. package/runtime/capabilities/coding/skills/copy-and-ia-review/scripts/check-action-verbs.sh +79 -0
  64. package/runtime/capabilities/coding/skills/copy-and-ia-review/scripts/check-terminology.sh +80 -0
  65. package/runtime/capabilities/coding/skills/copy-and-ia-review/scripts/extract-user-strings.sh +88 -0
  66. package/runtime/capabilities/coding/skills/copy-and-ia-review/scripts/lint-findings.sh +46 -0
  67. package/runtime/capabilities/coding/skills/design-system-coverage/SKILL.md +66 -0
  68. package/runtime/capabilities/coding/skills/design-system-coverage/agents/openai.yaml +3 -0
  69. package/runtime/capabilities/coding/skills/design-system-coverage/assets/output.template.json +49 -0
  70. package/runtime/capabilities/coding/skills/design-system-coverage/references/contract-clauses.md +48 -0
  71. package/runtime/capabilities/coding/skills/design-system-coverage/scripts/count-clauses.sh +44 -0
  72. package/runtime/capabilities/coding/skills/design-system-coverage/scripts/derive-tier.sh +67 -0
  73. package/runtime/capabilities/coding/skills/design-system-coverage/scripts/gap-report.sh +41 -0
  74. package/runtime/capabilities/coding/skills/design-system-coverage/scripts/list-contract-files.sh +28 -0
  75. package/runtime/capabilities/coding/skills/design-system-coverage/scripts/validate-contract.sh +37 -0
  76. package/runtime/capabilities/coding/skills/design-system-sync/SKILL.md +76 -0
  77. package/runtime/capabilities/coding/skills/design-system-sync/agents/openai.yaml +3 -0
  78. package/runtime/capabilities/coding/skills/design-system-sync/assets/output.template.md +27 -0
  79. package/runtime/capabilities/coding/skills/design-system-sync/references/sync-rules.md +24 -0
  80. package/runtime/capabilities/coding/skills/design-system-sync/scripts/detect-component-additions.sh +56 -0
  81. package/runtime/capabilities/coding/skills/design-system-sync/scripts/detect-token-additions.sh +61 -0
  82. package/runtime/capabilities/coding/skills/design-system-sync/scripts/lint-findings.sh +46 -0
  83. package/runtime/capabilities/coding/skills/design-system-sync/scripts/propose-components-diff.sh +39 -0
  84. package/runtime/capabilities/coding/skills/design-system-sync/scripts/propose-tokens-diff.sh +36 -0
  85. package/runtime/capabilities/coding/skills/motion-review/SKILL.md +67 -0
  86. package/runtime/capabilities/coding/skills/motion-review/agents/openai.yaml +3 -0
  87. package/runtime/capabilities/coding/skills/motion-review/assets/output.template.md +8 -0
  88. package/runtime/capabilities/coding/skills/motion-review/references/motion-checklist.md +14 -0
  89. package/runtime/capabilities/coding/skills/motion-review/scripts/find-reduced-motion-violations.sh +53 -0
  90. package/runtime/capabilities/coding/skills/motion-review/scripts/lint-findings.sh +46 -0
  91. package/runtime/capabilities/coding/skills/motion-review/scripts/parse-motion-budget.sh +42 -0
  92. package/runtime/capabilities/coding/skills/motion-review/scripts/scan-animations.sh +78 -0
  93. package/runtime/capabilities/coding/skills/responsive-review/SKILL.md +73 -0
  94. package/runtime/capabilities/coding/skills/responsive-review/agents/openai.yaml +3 -0
  95. package/runtime/capabilities/coding/skills/responsive-review/assets/output.template.md +8 -0
  96. package/runtime/capabilities/coding/skills/responsive-review/references/responsive-checklist.md +18 -0
  97. package/runtime/capabilities/coding/skills/responsive-review/scripts/extract-breakpoints.sh +44 -0
  98. package/runtime/capabilities/coding/skills/responsive-review/scripts/find-horizontal-scroll.sh +42 -0
  99. package/runtime/capabilities/coding/skills/responsive-review/scripts/find-touch-target-violations.sh +96 -0
  100. package/runtime/capabilities/coding/skills/responsive-review/scripts/lint-findings.sh +46 -0
  101. package/runtime/capabilities/coding/skills/state-coverage-review/SKILL.md +74 -0
  102. package/runtime/capabilities/coding/skills/state-coverage-review/agents/openai.yaml +3 -0
  103. package/runtime/capabilities/coding/skills/state-coverage-review/assets/output.template.md +8 -0
  104. package/runtime/capabilities/coding/skills/state-coverage-review/references/state-coverage-checklist.md +32 -0
  105. package/runtime/capabilities/coding/skills/state-coverage-review/scripts/cross-reference-states.sh +60 -0
  106. package/runtime/capabilities/coding/skills/state-coverage-review/scripts/extract-source-states.sh +61 -0
  107. package/runtime/capabilities/coding/skills/state-coverage-review/scripts/extract-tested-states.sh +73 -0
  108. package/runtime/capabilities/coding/skills/state-coverage-review/scripts/lint-findings.sh +46 -0
  109. package/runtime/capabilities/coding/skills/token-conformance-review/SKILL.md +88 -0
  110. package/runtime/capabilities/coding/skills/token-conformance-review/agents/openai.yaml +3 -0
  111. package/runtime/capabilities/coding/skills/token-conformance-review/assets/output.template.md +9 -0
  112. package/runtime/capabilities/coding/skills/token-conformance-review/references/token-leak-checklist.md +49 -0
  113. package/runtime/capabilities/coding/skills/token-conformance-review/scripts/lint-findings.sh +46 -0
  114. package/runtime/capabilities/coding/skills/token-conformance-review/scripts/match-leak-to-token.sh +85 -0
  115. package/runtime/capabilities/coding/skills/token-conformance-review/scripts/normalize-color.sh +82 -0
  116. package/runtime/capabilities/coding/skills/token-conformance-review/scripts/parse-tokens.sh +57 -0
  117. package/runtime/capabilities/coding/skills/token-conformance-review/scripts/scan-tokens.sh +63 -0
  118. package/runtime/capabilities/coding/stacks/angular/pack.yaml +11 -0
  119. package/runtime/capabilities/coding/stacks/astro/pack.yaml +11 -0
  120. package/runtime/capabilities/coding/stacks/django/pack.yaml +11 -0
  121. package/runtime/capabilities/coding/stacks/dotnet/pack.yaml +11 -0
  122. package/runtime/capabilities/coding/stacks/express/pack.yaml +11 -0
  123. package/runtime/capabilities/coding/stacks/fastapi/pack.yaml +11 -0
  124. package/runtime/capabilities/coding/stacks/flask/pack.yaml +11 -0
  125. package/runtime/capabilities/coding/stacks/flutter/pack.yaml +11 -0
  126. package/runtime/capabilities/coding/stacks/go-web/pack.yaml +11 -0
  127. package/runtime/capabilities/coding/stacks/kotlin-android/pack.yaml +12 -0
  128. package/runtime/capabilities/coding/stacks/laravel/pack.yaml +11 -0
  129. package/runtime/capabilities/coding/stacks/nestjs/pack.yaml +11 -0
  130. package/runtime/capabilities/coding/stacks/nextjs/pack.yaml +13 -0
  131. package/runtime/capabilities/coding/stacks/node-cli/pack.yaml +11 -0
  132. package/runtime/capabilities/coding/stacks/node-library/pack.yaml +11 -0
  133. package/runtime/capabilities/coding/stacks/node-service/pack.yaml +11 -0
  134. package/runtime/capabilities/coding/stacks/rails/pack.yaml +12 -0
  135. package/runtime/capabilities/coding/stacks/react/pack.yaml +11 -0
  136. package/runtime/capabilities/coding/stacks/rust-web/pack.yaml +11 -0
  137. package/runtime/capabilities/coding/stacks/spring-boot/pack.yaml +12 -0
  138. package/runtime/capabilities/coding/stacks/svelte/pack.yaml +11 -0
  139. package/runtime/capabilities/coding/stacks/vue/pack.yaml +11 -0
  140. package/runtime/capabilities/security/skills/finding-normalizer/SKILL.md +7 -1
  141. package/runtime/capabilities/security/skills/finding-normalizer/assets/vocabulary.txt +27 -0
  142. package/runtime/capabilities/security/skills/finding-normalizer/scripts/validate-findings.sh +2 -2
  143. package/runtime/hooks/module-health-sync.sh +23 -6
  144. package/runtime/scripts/design/axe-static.sh +86 -0
  145. package/runtime/scripts/design/coverage.sh +87 -0
  146. package/runtime/scripts/design/enumerate-surface.sh +76 -0
  147. package/runtime/scripts/design/retest.sh +45 -0
  148. package/runtime/scripts/design/runtime-checks.ts +208 -0
  149. package/runtime/scripts/design/scan-overrides.sh +63 -0
  150. package/runtime/scripts/design/scan-tokens.sh +36 -0
package/CHANGELOG.md CHANGED
@@ -1,5 +1,57 @@
1
1
  # paqad-ai
2
2
 
3
+ ## 1.6.0
4
+
5
+ ### Minor Changes
6
+
7
+ - [#84](https://github.com/Eliyce/paqad-ai/pull/84) [`82d6c45`](https://github.com/Eliyce/paqad-ai/commit/82d6c457b0768e647cddb932547101e4fe45c4d2) Thanks [@HLasani](https://github.com/HLasani)! - feat([#76](https://github.com/Eliyce/paqad-ai/issues/76)): design-test workflow — UI audit against the project's design-system contract
8
+
9
+ Adds a heavyweight design-test workflow that mirrors pentest but grades the running UI against `docs/instructions/design-system/*`. Intent-routed (no slash command), resumable, 9 skills + readiness gate, 7 framework-owned runners under `runtime/scripts/design/`, Playwright live phase, `DT-XXXX` finding ids with stable `token | component | state | a11y | responsive | motion | copy | performance | documentation-drift` categories. Companion `design-retest` workflow preserves IDs across re-runs.
10
+
11
+ **Workflow**
12
+ - New workflow rules: `runtime/capabilities/coding/rules/design-test.md` + `design-retest.md`.
13
+ - 11 design-test routing triggers at priority 235; 4 design-retest triggers at 245.
14
+ - `feature-development.yaml` splices design-system reads + per-stage instructions through planning → specification → development → review → checks → documentation_sync (schema-conformant via `merge_mode: append`).
15
+
16
+ **Skills (the LLM-reasoning layer)**
17
+ - `design-system-coverage` (readiness gate, mirrors `stride-threat-model`), `token-conformance-review`, `component-conformance-review`, `state-coverage-review`, `accessibility-review` (WCAG 2.2 A/AA), `responsive-review`, `motion-review`, `copy-and-ia-review`, `design-system-sync`.
18
+ - **Hard-coded design values** (hex literals, raw `px`/`rem`, ad-hoc font stacks where a token exists) default to **high severity** — first-class findings, not a stylistic preference.
19
+
20
+ **Deterministic scripts (the complement to the LLM layer)**
21
+
22
+ Per the [agentskills.io](https://agentskills.io) contract: 25 small, focused scripts do the mechanical work so the agent doesn't re-derive it on every run. Each script has `--help`, structured stdout, stderr diagnostics, and meaningful exit codes (0 ok, 1 finding, 2 usage).
23
+ - design-system-coverage: `count-clauses`, `derive-tier`, `gap-report`
24
+ - token-conformance-review: `parse-tokens`, `normalize-color`, `match-leak-to-token`
25
+ - component-conformance-review: `derive-inventory`, `parse-components-md`, `diff-inventories`
26
+ - state-coverage-review: `extract-source-states`, `extract-tested-states`, `cross-reference-states`
27
+ - accessibility-review: `static-a11y-scan`, `parse-axe-violations`, `map-axe-to-wcag`
28
+ - responsive-review: `extract-breakpoints`, `find-horizontal-scroll`, `find-touch-target-violations`
29
+ - motion-review: `scan-animations`, `parse-motion-budget`, `find-reduced-motion-violations`
30
+ - copy-and-ia-review: `extract-user-strings`, `check-action-verbs`, `check-terminology`
31
+ - design-system-sync: `detect-token-additions`, `detect-component-additions`, `propose-tokens-diff`, `propose-components-diff`
32
+
33
+ **Framework runners (zero project footprint)**
34
+
35
+ `runtime/scripts/design/{scan-tokens, scan-overrides, enumerate-surface, axe-static, coverage, runtime-checks.ts, retest}` — all ship inside paqad-ai; outputs land in the project at `docs/design-test/*` and `.paqad/design-test/runs/*` as work products. Diverges from pentest's project-seeded runner model intentionally; the divergence is documented in the workflow rule.
36
+
37
+ **Finding normalizer**
38
+
39
+ `DT-` code prefix, design-test category vocabulary, `blocker | nit` severities + `accepted | waived | still-open | needs-manual-verification` statuses.
40
+
41
+ **Tests**
42
+
43
+ ~200 fixture-driven test cases under `tests/unit/skills/` + `tests/fixtures/design-skills/<skill>/`. The `coverage-completeness` meta-test enforces that every script is referenced by basename in its spec, passes `bash -n`, and that every backticked path in each `SKILL.md` Resources section exists on disk.
44
+
45
+ **Skill-authoring rule**
46
+
47
+ `docs/instructions/rules/_shared/skill-authoring.md` captures the contract for future skills — anatomy, frontmatter, the deterministic-vs-judgment boundary, the script interface contract, portability workarounds (no `mapfile`, no `\b` in awk, BSD grep alternation quirk, missing-trailing-newline guard), and the testing rules. Auto-loaded by the framework entry, so future skills inherit the contract without being told.
48
+
49
+ ## 1.5.0
50
+
51
+ ### Minor Changes
52
+
53
+ - [#82](https://github.com/Eliyce/paqad-ai/pull/82) [`f330595`](https://github.com/Eliyce/paqad-ai/commit/f330595d38c5e66afc54443daefe9e4f97a7ea68) Thanks [@HLasani](https://github.com/HLasani)! - Living module lifecycle: prospective decisions, retrospective reconciliation, test-driven health, dashboard drift checks (closes [#80](https://github.com/Eliyce/paqad-ai/issues/80))
54
+
3
55
  ## 1.4.0
4
56
 
5
57
  ### Minor Changes