specweave 0.21.3 → 0.22.2

package/plugins/specweave/lib/hooks/update-tasks-md.ts

@@ -32,6 +32,13 @@ interface TaskMatch {
   currentStatus: 'pending' | 'in_progress' | 'completed';
 }
 
+interface TaskConsistencyFix {
+  taskId: string;
+  lineNumber: number;
+  action: 'add-complete-marker' | 'remove-complete-marker';
+  currentLine: string;
+}
+
 /**
  * Main function - update tasks.md for given increment
  */
@@ -62,20 +69,30 @@ async function updateTasksMd(incrementId: string): Promise<void> {
     const tasks = parseTaskStatus(lines);
     console.log(`📋 Found ${tasks.length} tasks`);
 
-    // 4. Get recently completed tasks from environment (passed by hook)
-    // For now, we'll mark tasks as complete if they match a heuristic
-    // TODO: In future, hook will pass completed task IDs via env var
-    const completedTasks = detectCompletedTasks(lines);
+    // 4. Get recently completed tasks and consistency fixes
+    const { completedTasks, fixes } = detectCompletedTasks(lines);
 
-    if (completedTasks.length === 0) {
-      console.log('✅ No new task completions detected');
+    // 4a. Apply consistency fixes FIRST (if any)
+    let updatedContent = originalContent;
+    let autoFixedCount = 0;
+
+    if (fixes.length > 0) {
+      console.log(`🔧 Auto-fixing ${fixes.length} task consistency issue(s)...`);
+      updatedContent = applyConsistencyFixes(originalContent, fixes);
+      autoFixedCount = fixes.length;
+      console.log('✅ Task consistency auto-fixed');
+    }
+
+    if (completedTasks.length === 0 && fixes.length === 0) {
+      console.log('✅ No new task completions or consistency fixes needed');
       return;
     }
 
-    console.log(`🎯 Detected ${completedTasks.length} completed task(s):`, completedTasks);
+    if (completedTasks.length > 0) {
+      console.log(`🎯 Detected ${completedTasks.length} completed task(s):`, completedTasks);
+    }
 
     // 5. Update task status in content
-    let updatedContent = originalContent;
 
     for (const taskId of completedTasks) {
       updatedContent = markTaskComplete(updatedContent, taskId);
@@ -96,6 +113,9 @@ async function updateTasksMd(incrementId: string): Promise<void> {
     await fs.writeFile(tasksPath, updatedContent, 'utf-8');
 
     console.log(`✅ Updated ${tasksPath}`);
+    if (autoFixedCount > 0) {
+      console.log(`🔧 Auto-fixed ${autoFixedCount} consistency issue(s)`);
+    }
     console.log(`   Completed: ${completedCount}/${totalTasks}`);
     console.log(`   Progress: ${progress}%\n`);
 
@@ -158,8 +178,9 @@ function parseTaskStatus(lines: string[]): TaskMatch[] {
  *
  * @see .specweave/increments/0037/reports/ULTRATHINK-COMPLETE-MARKER-VS-CHECKBOXES.md
  */
-function detectCompletedTasks(lines: string[]): string[] {
+function detectCompletedTasks(lines: string[]): { completedTasks: string[]; fixes: TaskConsistencyFix[] } {
   const completedTasks: string[] = [];
+  const fixes: TaskConsistencyFix[] = [];
   const warnings: string[] = [];
   const taskPattern = /^###\s+(T-\d+[-A-Z]*):?\s+(.+)/;
 
@@ -190,22 +211,38 @@ function detectCompletedTasks(lines: string[]): string[] {
           completedTasks.push(taskId);
         }
       } else {
-        // ⚠️  INCONSISTENT: Header says COMPLETE but checkboxes incomplete
+        // ⚠️  INCONSISTENT: Header says COMPLETE but checkboxes incomplete - AUTO-FIX
+        fixes.push({
+          taskId,
+          lineNumber: i,
+          action: 'remove-complete-marker',
+          currentLine: line
+        });
         warnings.push(`${taskId}: Header has ✅ COMPLETE but not all checkboxes checked`);
       }
       continue;
     }
 
-    // If no implementation section, trust the header marker
+    // If no implementation section, remove COMPLETE marker (can't verify)
     if (hasCompleteMarker && !implementationSection) {
-      if (!completedTasks.includes(taskId)) {
-        completedTasks.push(taskId);
-      }
+      fixes.push({
+        taskId,
+        lineNumber: i,
+        action: 'remove-complete-marker',
+        currentLine: line
+      });
+      warnings.push(`${taskId}: Header has ✅ COMPLETE but no implementation section to verify`);
       continue;
     }
 
-    // Warn if checkboxes all complete but header missing marker
+    // Warn if checkboxes all complete but header missing marker - AUTO-FIX
     if (!hasCompleteMarker && implementationSection && allCheckboxesComplete) {
+      fixes.push({
+        taskId,
+        lineNumber: i,
+        action: 'add-complete-marker',
+        currentLine: line
+      });
       warnings.push(`${taskId}: All checkboxes checked but header missing ✅ COMPLETE`);
       // Still count as complete (checkboxes are source of truth for work done)
       if (!completedTasks.includes(taskId)) {
@@ -233,7 +270,31 @@ function detectCompletedTasks(lines: string[]): string[] {
     console.warn('');
   }
 
-  return completedTasks;
+  return { completedTasks, fixes };
+}
+
+/**
+ * Apply task consistency fixes to content
+ */
+function applyConsistencyFixes(content: string, fixes: TaskConsistencyFix[]): string {
+  const lines = content.split('\n');
+
+  // Apply fixes (process in reverse order to preserve line numbers)
+  for (const fix of fixes.reverse()) {
+    const line = lines[fix.lineNumber];
+
+    if (fix.action === 'remove-complete-marker') {
+      // Remove ✅ COMPLETE from header
+      const fixed = line.replace(/\s*✅\s*COMPLETE\s*/g, '');
+      lines[fix.lineNumber] = fixed;
+    } else if (fix.action === 'add-complete-marker') {
+      // Add ✅ COMPLETE to header (before any trailing spaces)
+      const fixed = line.trim() + ' ✅ COMPLETE';
+      lines[fix.lineNumber] = fixed;
+    }
+  }
+
+  return lines.join('\n');
 }
 
 /**

package/plugins/specweave/templates/iac/aws-lambda/defaults.json

@@ -0,0 +1,24 @@
+{
+  "region": "us-east-1",
+  "functionName": "my-lambda-function",
+  "runtime": "nodejs20.x",
+  "handler": "index.handler",
+  "memorySize": 128,
+  "timeout": 30,
+  "environment": "dev",
+  "databaseName": "my-dynamodb-table",
+  "primaryKey": "id",
+  "apiName": "my-api",
+  "apiStageName": "default",
+  "logRetentionDays": 90,
+  "corsOrigins": ["*"],
+  "projectName": "my-project",
+  "enableVpc": false,
+  "enableXray": false,
+  "enableSecretsManager": false,
+  "enableKms": false,
+  "enableEncryption": false,
+  "enablePointInTimeRecovery": false,
+  "enableStreams": false,
+  "enableRemoteState": false
+}

package/plugins/specweave/templates/iac/aws-lambda/templates/README.md.hbs

@@ -0,0 +1,260 @@
+# {{functionName}} - AWS Lambda Serverless Infrastructure
+
+**Generated by SpecWeave Serverless Architecture Intelligence**
+
+## Overview
+
+This Terraform configuration deploys a complete serverless application stack on AWS:
+
+- **Lambda Function**: `{{functionName}}` ({{runtime}}, {{memorySize}}MB memory, {{timeout}}s timeout)
+- **API Gateway**: HTTP API with CORS support
+- **DynamoDB**: NoSQL database table `{{databaseName}}`
+- **CloudWatch Logs**: Centralized logging with {{logRetentionDays}}-day retention
+{{#if enableVpc}}- **VPC Integration**: Secure network isolation{{/if}}
+{{#if enableXray}}- **X-Ray Tracing**: Distributed tracing enabled{{/if}}
+{{#if enableSecretsManager}}- **Secrets Manager**: Secure secret storage{{/if}}
+
+## Architecture
+
+```
+┌─────────────┐
+│   Client    │
+└──────┬──────┘
+       │ HTTPS
+       v
+┌─────────────────┐
+│  API Gateway    │
+│  (HTTP API)     │
+└──────┬──────────┘
+       │
+       v
+┌────────────────────┐      ┌──────────────┐
+│  Lambda Function   │─────>│  DynamoDB    │
+│  {{functionName}}  │      │  {{databaseName}} │
+└────────────────────┘      └──────────────┘
+       │
+       v
+┌────────────────────┐
+│ CloudWatch Logs    │
+└────────────────────┘
+```
+
+## Prerequisites
+
+1. **AWS CLI** configured with credentials:
+   ```bash
+   aws configure
+   ```
+
+2. **Terraform** v1.5.0 or higher:
+   ```bash
+   terraform version
+   ```
+
+3. **Lambda deployment package** ({{functionName}}.zip):
+   - Create your Lambda function code
+   - Package as {{functionName}}.zip
+   - Place in the same directory as this README
+
+## Deployment Instructions
+
+### Step 1: Initialize Terraform
+
+```bash
+terraform init
+```
+
+This downloads the AWS provider and initializes the backend.
+
+### Step 2: Review Configuration
+
+Edit `terraform.tfvars` (or create environment-specific files like `dev.tfvars`) to customize:
+
+```hcl
+aws_region     = "{{region}}"
+function_name  = "{{functionName}}"
+environment    = "{{environment}}"
+runtime        = "{{runtime}}"
+memory_size    = {{memorySize}}
+timeout        = {{timeout}}
+database_name  = "{{databaseName}}"
+primary_key    = "{{primaryKey}}"
+project_name   = "{{projectName}}"
+```
+
+### Step 3: Plan Deployment
+
+```bash
+terraform plan
+```
+
+Review the resources that will be created:
+- 1× Lambda Function
+- 1× API Gateway HTTP API
+- 1× DynamoDB Table
+- 2× CloudWatch Log Groups
+- 1× IAM Role + Policies
+{{#if enableVpc}}- 1× Security Group (VPC){{/if}}
+
+### Step 4: Deploy
+
+```bash
+terraform apply
+```
+
+Type `yes` when prompted to confirm deployment.
+
+### Step 5: Verify Deployment
+
+After successful deployment, Terraform will output:
+
+```
+api_endpoint = "https://xxxxxxxxxx.execute-api.{{region}}.amazonaws.com/{{apiStageName}}"
+function_name = "{{functionName}}"
+table_name = "{{databaseName}}"
+```
+
+Test your API:
+
+```bash
+curl https://xxxxxxxxxx.execute-api.{{region}}.amazonaws.com/{{apiStageName}}
+```
+
+## Environment-Specific Deployments
+
+Deploy to different environments using tfvars files:
+
+```bash
+# Development
+terraform apply -var-file="environments/dev.tfvars"
+
+# Staging
+terraform apply -var-file="environments/staging.tfvars"
+
+# Production
+terraform apply -var-file="environments/prod.tfvars"
+```
+
+## Cost Optimization
+
+### Free Tier Limits (First 12 Months)
+
+- **Lambda**: 1M requests/month + 400,000 GB-seconds compute
+- **API Gateway**: 1M API calls/month (first 12 months)
+- **DynamoDB**: 25GB storage + 25 WCU + 25 RCU (always free)
+- **CloudWatch Logs**: 5GB ingestion + 5GB storage
+
+### Estimated Monthly Cost (After Free Tier)
+
+**{{environment}} Environment**:
+{{#if eq environment "dev"}}
+- **Lambda**: ~$0.20/month (10K requests, 128MB, 1s avg duration)
+- **API Gateway**: ~$0.10/month (10K requests)
+- **DynamoDB**: $0.00/month (PAY_PER_REQUEST under free tier)
+- **CloudWatch Logs**: ~$0.50/month (1GB logs)
+- **Total**: ~$0.80/month
+{{else}}{{#if eq environment "staging"}}
+- **Lambda**: ~$2.00/month (100K requests, 256MB, 1s avg duration)
+- **API Gateway**: ~$1.00/month (100K requests)
+- **DynamoDB**: ~$1.25/month (PAY_PER_REQUEST, light usage)
+- **CloudWatch Logs**: ~$1.00/month (2GB logs)
+- **Total**: ~$5.25/month
+{{else}}
+- **Lambda**: ~$20.00/month (1M requests, 512MB, 1s avg duration)
+- **API Gateway**: ~$10.00/month (1M requests)
+- **DynamoDB**: ~$12.50/month (PROVISIONED, 5 RCU/WCU)
+- **CloudWatch Logs**: ~$5.00/month (10GB logs)
+- **Total**: ~$47.50/month
+{{/if}}{{/if}}
+
+### Cost Optimization Tips
+
+1. **Right-size memory**: Test with different memory settings (128MB, 256MB, 512MB)
+2. **Optimize timeout**: Reduce timeout to actual function duration
+3. **Use PAY_PER_REQUEST**: For low-traffic apps (<100K requests/month)
+4. **Enable CloudWatch Logs retention**: Delete old logs automatically
+5. **Monitor cold starts**: Use Provisioned Concurrency if needed ($$)
+
+## Security Best Practices
+
+✅ **Implemented**:
+- IAM least privilege roles
+- HTTPS-only API Gateway
+- CloudWatch Logs encryption
+- DynamoDB encryption at rest (if enabled)
+- Secrets Manager for sensitive data (if enabled)
+
+⚠️ **Additional Recommendations**:
+- Enable AWS WAF for API Gateway
+- Implement rate limiting
+- Use AWS Shield for DDoS protection
+- Enable VPC for database access
+- Rotate secrets regularly
+
+## Monitoring and Logging
+
+### CloudWatch Logs
+
+View Lambda logs:
+```bash
+aws logs tail /aws/lambda/{{functionName}} --follow
+```
+
+View API Gateway logs:
+```bash
+aws logs tail /aws/apigateway/{{apiName}}-{{environment}} --follow
+```
+
+### CloudWatch Metrics
+
+Monitor in AWS Console:
+- Lambda: Invocations, Duration, Errors, Throttles
+- API Gateway: Count, Latency, 4XX/5XX errors
+- DynamoDB: Read/Write capacity, Throttled requests
+
+## Cleanup
+
+To destroy all resources:
+
+```bash
+terraform destroy
+```
+
+Type `yes` to confirm deletion.
+
+**Warning**: This will permanently delete:
+- Lambda function
+- API Gateway
+- DynamoDB table (and all data)
+- CloudWatch Logs
+
+## Troubleshooting
+
+### Lambda Function Not Working
+
+1. Check CloudWatch Logs for errors
+2. Verify IAM role permissions
+3. Test function locally with AWS SAM
+
+### API Gateway 403 Errors
+
+1. Verify Lambda permission for API Gateway
+2. Check CORS configuration
+3. Review API Gateway execution logs
+
+### DynamoDB Access Denied
+
+1. Verify Lambda IAM role has DynamoDB permissions
+2. Check table name matches environment variable
+3. Verify primary key schema
+
+## Support
+
+For issues with this Terraform configuration, contact your SpecWeave administrator or file an issue at https://github.com/anton-abyzov/specweave/issues.
+
+## Additional Resources
+
+- [AWS Lambda Documentation](https://docs.aws.amazon.com/lambda/)
+- [API Gateway HTTP API Guide](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api.html)
+- [DynamoDB Developer Guide](https://docs.aws.amazon.com/dynamodb/)
+- [Terraform AWS Provider](https://registry.terraform.io/providers/hashicorp/aws/latest/docs)

package/plugins/specweave/templates/iac/aws-lambda/templates/environments/dev.tfvars.hbs

@@ -0,0 +1,34 @@
+# Development Environment Configuration
+# Optimized for free tier and minimal costs
+# Generated by SpecWeave Serverless Architecture Intelligence
+
+aws_region    = "{{region}}"
+environment   = "dev"
+function_name = "{{functionName}}-dev"
+runtime       = "{{runtime}}"
+
+# Free tier optimized settings
+memory_size = 128  # Smallest memory size (free tier eligible)
+timeout     = 30   # Conservative timeout
+
+# Database configuration
+database_name = "{{databaseName}}-dev"
+primary_key   = "{{primaryKey}}"
+{{#if sortKey}}
+sort_key      = "{{sortKey}}"
+{{/if}}
+
+# Logging (keep retention short in dev)
+log_retention_days = 7
+
+# CORS (allow localhost for development)
+cors_origins = ["http://localhost:3000", "http://localhost:8080"]
+
+# Project metadata
+project_name = "{{projectName}}"
+
+# Additional tags
+tags = {
+  CostCenter = "Development"
+  AutoDelete = "true"  # Mark for cleanup scripts
+}

package/plugins/specweave/templates/iac/aws-lambda/templates/environments/prod.tfvars.hbs

@@ -0,0 +1,37 @@
+# Production Environment Configuration
+# High availability, performance, and security
+# Generated by SpecWeave Serverless Architecture Intelligence
+
+aws_region    = "{{region}}"
+environment   = "prod"
+function_name = "{{functionName}}-prod"
+runtime       = "{{runtime}}"
+
+# Production-optimized settings
+memory_size = 512  # Higher memory for better performance
+timeout     = 300  # 5-minute timeout for complex operations
+
+# Database configuration
+database_name = "{{databaseName}}-prod"
+primary_key   = "{{primaryKey}}"
+{{#if sortKey}}
+sort_key      = "{{sortKey}}"
+{{/if}}
+
+# Logging (long retention for compliance)
+log_retention_days = 90
+
+# CORS (production domains only)
+cors_origins = ["https://{{projectName}}.com", "https://www.{{projectName}}.com", "https://api.{{projectName}}.com"]
+
+# Project metadata
+project_name = "{{projectName}}"
+
+# Additional tags
+tags = {
+  CostCenter        = "Production"
+  AutoDelete        = "false"
+  Backup            = "true"
+  DisasterRecovery  = "true"
+  Compliance        = "SOC2"
+}

package/plugins/specweave/templates/iac/aws-lambda/templates/environments/staging.tfvars.hbs

@@ -0,0 +1,35 @@
+# Staging Environment Configuration
+# Medium-tier resources for pre-production testing
+# Generated by SpecWeave Serverless Architecture Intelligence
+
+aws_region    = "{{region}}"
+environment   = "staging"
+function_name = "{{functionName}}-staging"
+runtime       = "{{runtime}}"
+
+# Medium-tier settings
+memory_size = 256  # Double dev memory for realistic testing
+timeout     = 60   # Higher timeout for complex operations
+
+# Database configuration
+database_name = "{{databaseName}}-staging"
+primary_key   = "{{primaryKey}}"
+{{#if sortKey}}
+sort_key      = "{{sortKey}}"
+{{/if}}
+
+# Logging (moderate retention for staging)
+log_retention_days = 30
+
+# CORS (allow staging domains)
+cors_origins = ["https://staging.{{projectName}}.com", "http://localhost:3000"]
+
+# Project metadata
+project_name = "{{projectName}}"
+
+# Additional tags
+tags = {
+  CostCenter = "Staging"
+  AutoDelete = "false"
+  Backup     = "true"
+}

package/plugins/specweave/templates/iac/aws-lambda/templates/outputs.tf.hbs

@@ -0,0 +1,77 @@
+# Outputs for AWS Lambda + API Gateway + DynamoDB
+# Generated by SpecWeave Serverless Architecture Intelligence
+
+output "api_endpoint" {
+  description = "API Gateway endpoint URL"
+  value       = aws_apigatewayv2_stage.{{snakeCase apiStageName}}.invoke_url
+}
+
+output "api_id" {
+  description = "API Gateway ID"
+  value       = aws_apigatewayv2_api.{{snakeCase apiName}}.id
+}
+
+output "function_name" {
+  description = "Lambda function name"
+  value       = aws_lambda_function.{{snakeCase functionName}}.function_name
+}
+
+output "function_arn" {
+  description = "Lambda function ARN"
+  value       = aws_lambda_function.{{snakeCase functionName}}.arn
+}
+
+output "function_invoke_arn" {
+  description = "Lambda function invoke ARN"
+  value       = aws_lambda_function.{{snakeCase functionName}}.invoke_arn
+}
+
+output "table_name" {
+  description = "DynamoDB table name"
+  value       = aws_dynamodb_table.{{snakeCase databaseName}}.name
+}
+
+output "table_arn" {
+  description = "DynamoDB table ARN"
+  value       = aws_dynamodb_table.{{snakeCase databaseName}}.arn
+}
+
+{{#if enableStreams}}
+output "table_stream_arn" {
+  description = "DynamoDB stream ARN"
+  value       = aws_dynamodb_table.{{snakeCase databaseName}}.stream_arn
+}
+{{/if}}
+
+output "lambda_role_arn" {
+  description = "Lambda execution role ARN"
+  value       = aws_iam_role.lambda_exec.arn
+}
+
+output "lambda_logs_group" {
+  description = "CloudWatch Logs group for Lambda"
+  value       = aws_cloudwatch_log_group.lambda_logs.name
+}
+
+output "api_logs_group" {
+  description = "CloudWatch Logs group for API Gateway"
+  value       = aws_cloudwatch_log_group.api_logs.name
+}
+
+{{#if enableVpc}}
+output "lambda_security_group_id" {
+  description = "Security group ID for Lambda function"
+  value       = aws_security_group.lambda_sg.id
+}
+{{/if}}
+
+output "deployment_summary" {
+  description = "Summary of deployed resources"
+  value = {
+    api_endpoint   = aws_apigatewayv2_stage.{{snakeCase apiStageName}}.invoke_url
+    function_name  = aws_lambda_function.{{snakeCase functionName}}.function_name
+    table_name     = aws_dynamodb_table.{{snakeCase databaseName}}.name
+    environment    = var.environment
+    region         = var.aws_region
+  }
+}

package/plugins/specweave/templates/iac/aws-lambda/templates/providers.tf.hbs

@@ -0,0 +1,36 @@
+# Terraform and AWS Provider Configuration
+# Generated by SpecWeave Serverless Architecture Intelligence
+
+terraform {
+  required_version = ">= 1.5.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+
+  {{#if enableRemoteState}}
+  backend "s3" {
+    bucket         = "{{terraformStateBucket}}"
+    key            = "{{functionName}}/terraform.tfstate"
+    region         = "{{region}}"
+    encrypt        = true
+    dynamodb_table = "{{terraformLockTable}}"
+  }
+  {{/if}}
+}
+
+provider "aws" {
+  region = var.aws_region
+
+  default_tags {
+    tags = {
+      Project     = var.project_name
+      Environment = var.environment
+      ManagedBy   = "Terraform"
+      CreatedBy   = "SpecWeave"
+    }
+  }
+}