icdev 1.0.0__py3-none-any.whl

icdev/data/args/code_pattern_config.yaml

@@ -0,0 +1,151 @@
+# [TEMPLATE: CUI // SP-CTI]
+# Code Pattern Scanner Configuration (Phase 44 — D278)
+# Declarative dangerous code patterns across 6 languages.
+---
+
+patterns:
+  universal:
+    - pattern: '\beval\s*\('
+      severity: critical
+      name: eval_usage
+      description: "Dynamic code evaluation — potential code injection"
+    - pattern: '\bexec\s*\('
+      severity: critical
+      name: exec_usage
+      description: "Dynamic code execution — potential code injection"
+    - pattern: 'subprocess\.(call|run|Popen|check_output)\s*\('
+      severity: high
+      name: subprocess_spawn
+      description: "Process spawning — potential command injection"
+
+  python:
+    - pattern: '\bos\.system\s*\('
+      severity: critical
+      name: os_system
+      description: "Shell command execution via os.system"
+    - pattern: '\bpickle\.(loads?|dumps?)\s*\('
+      severity: high
+      name: pickle_usage
+      description: "Pickle deserialization — potential arbitrary code execution"
+    - pattern: '\b__import__\s*\('
+      severity: high
+      name: dunder_import
+      description: "Dynamic import — potential code injection"
+    - pattern: '\bimportlib\.import_module\s*\('
+      severity: medium
+      name: importlib_usage
+      description: "Dynamic module import via importlib"
+    - pattern: '\bos\.popen\s*\('
+      severity: critical
+      name: os_popen
+      description: "Shell command via os.popen"
+    - pattern: '\bcompile\s*\('
+      severity: medium
+      name: compile_usage
+      description: "Dynamic code compilation"
+
+  java:
+    - pattern: 'Runtime\.getRuntime\(\)\.exec\s*\('
+      severity: critical
+      name: runtime_exec
+      description: "Shell execution via Runtime.exec"
+    - pattern: 'ObjectInputStream'
+      severity: high
+      name: deserialization
+      description: "Java deserialization — potential RCE"
+    - pattern: '(InitialContext|lookup)\s*\(.*["\x27]ldap'
+      severity: critical
+      name: jndi_injection
+      description: "JNDI lookup — potential Log4Shell"
+    - pattern: 'ProcessBuilder\s*\('
+      severity: high
+      name: process_builder
+      description: "Process execution via ProcessBuilder"
+
+  go:
+    - pattern: 'os/exec'
+      severity: high
+      name: os_exec_import
+      description: "Process execution package import"
+    - pattern: 'exec\.Command\s*\('
+      severity: high
+      name: exec_command
+      description: "Shell command execution via exec.Command"
+    - pattern: '\bunsafe\.'
+      severity: medium
+      name: unsafe_usage
+      description: "Unsafe pointer operations"
+
+  rust:
+    - pattern: '\bunsafe\s*\{'
+      severity: medium
+      name: unsafe_block
+      description: "Unsafe code block — bypasses borrow checker"
+    - pattern: 'std::process::Command'
+      severity: high
+      name: process_command
+      description: "Shell command execution via std::process::Command"
+    - pattern: 'std::mem::transmute'
+      severity: high
+      name: mem_transmute
+      description: "Unsafe memory transmutation"
+
+  csharp:
+    - pattern: 'Process\.Start\s*\('
+      severity: high
+      name: process_start
+      description: "Process execution via Process.Start"
+    - pattern: 'Assembly\.Load'
+      severity: high
+      name: assembly_load
+      description: "Dynamic assembly loading — potential code injection"
+    - pattern: 'SqlCommand\s*\(.*\+'
+      severity: high
+      name: sql_concat
+      description: "SQL string concatenation — potential SQL injection"
+
+  typescript:
+    - pattern: 'child_process'
+      severity: high
+      name: child_process
+      description: "Child process module — command execution"
+    - pattern: 'Deno\.run\s*\('
+      severity: high
+      name: deno_run
+      description: "Deno process execution"
+    - pattern: '\beval\s*\('
+      severity: critical
+      name: eval_usage
+      description: "Dynamic code evaluation"
+    - pattern: 'process\.exit\s*\('
+      severity: medium
+      name: process_exit
+      description: "Process termination"
+    - pattern: 'Function\s*\('
+      severity: high
+      name: function_constructor
+      description: "Dynamic function creation via Function constructor"
+
+scan:
+  skip_dirs:
+    - node_modules
+    - .git
+    - __pycache__
+    - .tox
+    - .venv
+    - venv
+    - target
+    - build
+    - dist
+    - .tmp
+    - vendor
+
+  file_extensions:
+    python: [".py"]
+    java: [".java"]
+    go: [".go"]
+    rust: [".rs"]
+    csharp: [".cs"]
+    typescript: [".ts", ".tsx", ".js", ".jsx"]
+
+  max_file_size_kb: 500

icdev/data/args/code_quality_config.yaml

@@ -0,0 +1,47 @@
+# Code Quality Intelligence Configuration (Phase 52 — D331-D337)
+# CUI // SP-CTI
+
+smell_thresholds:
+  max_function_loc: 50
+  max_nesting: 4
+  max_complexity: 10
+  max_params: 5
+  max_methods_per_class: 10
+
+maintainability_weights:
+  complexity: 0.30
+  smell_density: 0.20
+  test_health: 0.20
+  coupling: 0.15
+  coverage: 0.15
+
+audit_thresholds:
+  max_avg_complexity: 10
+  max_avg_complexity_critical: 25
+  max_high_cc_pct: 5.0
+  max_smell_density_per_kloc: 10.0
+  max_smell_density_critical: 20.0
+
+innovation_engine:
+  min_complexity_for_signal: 10
+  min_pass_rate_threshold: 0.8
+  signal_source_type: code_quality_introspective
+
+scan:
+  exclude_dirs:
+    - venv
+    - .venv
+    - env
+    - node_modules
+    - .git
+    - __pycache__
+    - build
+    - dist
+    - .tox
+    - .eggs
+    - vendor
+    - target
+    - bin
+    - obj
+    - .tmp
+  max_file_size_bytes: 1048576

icdev/data/args/companion_registry.yaml

@@ -0,0 +1,202 @@
+# [TEMPLATE: CUI // SP-CTI]
+# Companion Registry — Declarative registry of supported AI coding tools (D194).
+# Add new tools here without code changes (D26 pattern).
+
+companions:
+  claude_code:
+    display_name: "Claude Code"
+    vendor: "Anthropic"
+    instruction_file: "CLAUDE.md"
+    mcp_support: true
+    mcp_config_file: ".mcp.json"
+    mcp_config_format: "claude"
+    skill_format: "claude_skill"
+    skill_directory: ".claude/skills"
+    command_directory: ".claude/commands"
+    env_detection:
+      env_vars: ["CLAUDE_CODE"]
+      config_dirs: [".claude"]
+      process_names: ["claude"]
+    capabilities:
+      custom_commands: true
+      hooks: true
+      mcp_tools: true
+      inline_completion: false
+    notes: "Primary platform. CLAUDE.md already maintained manually."
+
+  codex:
+    display_name: "OpenAI Codex CLI"
+    vendor: "OpenAI"
+    instruction_file: "AGENTS.md"
+    mcp_support: true
+    mcp_config_file: ".codex/config.toml"
+    mcp_config_format: "codex_toml"
+    skill_format: "codex_skill"
+    skill_directory: ".agents/skills"
+    env_detection:
+      env_vars: ["CODEX_CLI", "OPENAI_API_KEY"]
+      config_dirs: [".codex", ".agents"]
+      process_names: ["codex"]
+    capabilities:
+      custom_commands: true
+      hooks: false
+      mcp_tools: true
+      inline_completion: false
+
+  gemini:
+    display_name: "Google Gemini CLI"
+    vendor: "Google"
+    instruction_file: "GEMINI.md"
+    mcp_support: true
+    mcp_config_file: ".gemini/settings.json"
+    mcp_config_format: "json"
+    skill_format: "none"
+    env_detection:
+      env_vars: ["GEMINI_API_KEY", "GOOGLE_API_KEY"]
+      config_dirs: [".gemini"]
+      process_names: ["gemini"]
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: false
+
+  copilot:
+    display_name: "GitHub Copilot"
+    vendor: "GitHub / Microsoft"
+    instruction_file: ".github/copilot-instructions.md"
+    mcp_support: true
+    mcp_config_file: null
+    mcp_config_format: "ide_settings"
+    skill_format: "copilot_prompt"
+    skill_directory: ".github/prompts"
+    env_detection:
+      env_vars: ["GITHUB_COPILOT"]
+      config_dirs: [".github"]
+      process_names: []
+    capabilities:
+      custom_commands: true
+      hooks: false
+      mcp_tools: true
+      inline_completion: true
+
+  cursor:
+    display_name: "Cursor"
+    vendor: "Cursor Inc"
+    instruction_file: ".cursor/rules/icdev.mdc"
+    mcp_support: true
+    mcp_config_file: null
+    mcp_config_format: "ide_settings"
+    skill_format: "cursor_mdc"
+    skill_directory: ".cursor/rules"
+    env_detection:
+      env_vars: []
+      config_dirs: [".cursor"]
+      process_names: ["cursor"]
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: true
+
+  windsurf:
+    display_name: "Windsurf"
+    vendor: "Codeium"
+    instruction_file: ".windsurf/rules/icdev.md"
+    mcp_support: true
+    mcp_config_file: null
+    mcp_config_format: "ide_settings"
+    skill_format: "none"
+    env_detection:
+      env_vars: []
+      config_dirs: [".windsurf"]
+      process_names: ["windsurf"]
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: true
+
+  amazon_q:
+    display_name: "Amazon Q Developer"
+    vendor: "AWS"
+    instruction_file: ".amazonq/rules/icdev.md"
+    mcp_support: true
+    mcp_config_file: ".amazonq/mcp.json"
+    mcp_config_format: "json"
+    skill_format: "none"
+    env_detection:
+      env_vars: ["AWS_Q_DEVELOPER"]
+      config_dirs: [".amazonq"]
+      process_names: []
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: true
+
+  junie:
+    display_name: "JetBrains Junie"
+    vendor: "JetBrains"
+    instruction_file: ".junie/guidelines.md"
+    mcp_support: true
+    mcp_config_file: null
+    mcp_config_format: "ide_settings"
+    skill_format: "none"
+    env_detection:
+      env_vars: []
+      config_dirs: [".junie", ".idea"]
+      process_names: []
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: true
+
+  cline:
+    display_name: "Cline"
+    vendor: "Cline"
+    instruction_file: ".clinerules"
+    mcp_support: true
+    mcp_config_file: null
+    mcp_config_format: "json"
+    skill_format: "none"
+    env_detection:
+      env_vars: []
+      config_dirs: []
+      config_files: [".clinerules"]
+      process_names: []
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: true
+      inline_completion: false
+
+  aider:
+    display_name: "Aider"
+    vendor: "Aider-AI"
+    instruction_file: "CONVENTIONS.md"
+    mcp_support: false
+    mcp_config_file: null
+    mcp_config_format: null
+    skill_format: "none"
+    env_detection:
+      env_vars: []
+      config_dirs: []
+      config_files: [".aider.conf.yml"]
+      process_names: ["aider"]
+    capabilities:
+      custom_commands: false
+      hooks: false
+      mcp_tools: false
+      inline_completion: false
+
+# Default settings for instruction file generation
+defaults:
+  instruction_style: "full"
+  include_mcp_setup: true
+  include_workflows: true
+  include_guardrails: true
+  include_testing: true
+  skip_platforms:
+    - "claude_code"        # CLAUDE.md maintained manually, not generated

icdev/data/args/context_config.yaml

@@ -0,0 +1,82 @@
+# [TEMPLATE: CUI // SP-CTI]
+# Semantic Layer Context Configuration (Phase 44 — D277)
+# Configures CLAUDE.md indexing, metadata caching, and agent-role section mapping.
+---
+
+indexing:
+  claude_md_path: "CLAUDE.md"  # Relative to BASE_DIR
+
+cache:
+  metadata_ttl_seconds: 60      # How often to refresh live metadata
+  section_ttl_seconds: 300      # How often to re-parse CLAUDE.md sections
+
+# Agent role → CLAUDE.md section keyword mapping
+# Used by get_agent_context to deliver role-tailored context
+agent_sections:
+  builder-agent:
+    - "Languages"
+    - "Testing"
+    - "Builder"
+    - "TDD"
+    - "Code Gen"
+  compliance-agent:
+    - "Compliance"
+    - "Crosswalk"
+    - "Gates"
+    - "Security Gates"
+    - "NIST"
+    - "FedRAMP"
+    - "CMMC"
+    - "OSCAL"
+  security-agent:
+    - "Security"
+    - "SAST"
+    - "Vulnerability"
+    - "Secret"
+    - "ATLAS"
+    - "Prompt Injection"
+  architect-agent:
+    - "Architecture"
+    - "GOTCHA"
+    - "ATLAS"
+    - "MCP"
+    - "Agent"
+    - "Key Architecture Decisions"
+  infrastructure-agent:
+    - "Infrastructure"
+    - "Terraform"
+    - "K8s"
+    - "Docker"
+    - "Cloud"
+    - "Deploy"
+    - "Helm"
+  orchestrator-agent:
+    - "Architecture"
+    - "Agent"
+    - "Workflow"
+    - "MCP"
+    - "GOTCHA"
+    - "Multi-Agent"
+  modernization-agent:
+    - "Modernization"
+    - "Migration"
+    - "Legacy"
+    - "7R"
+  requirements-agent:
+    - "RICOAS"
+    - "Requirements"
+    - "Intake"
+    - "Readiness"
+    - "COA"
+  mbse-agent:
+    - "MBSE"
+    - "SysML"
+    - "DOORS"
+    - "Digital Thread"
+    - "DES"
+  devsecops-agent:
+    - "DevSecOps"
+    - "ZTA"
+    - "Pipeline"
+    - "Policy"
+    - "Service Mesh"