moai-adk 0.15.1__py3-none-any.whl → 0.25.4__py3-none-any.whl

moai_adk/templates/.claude/skills/moai-alfred-dev-guide/examples.md

@@ -1,355 +0,0 @@
-# Alfred Development Guide - Examples
-
-## Example 1: Complete SPEC-First TDD Workflow for User Authentication
-
-### Phase 1: Write SPEC (30 minutes)
-
-**File**: `.moai/specs/SPEC-AUTH-001/spec.md`
-
-```markdown
----
-id: AUTH-001
-title: "User Authentication System"
-version: 0.1.0
-status: active
-created: 2025-11-03
-updated: 2025-11-03
-author: @GOOS
-priority: high
----
-
-# User Authentication SPEC
-
-@SPEC:AUTH-001
-
-## Ubiquitous Requirements
-- The system shall provide user authentication via email and password.
-- The system shall validate email format (RFC 5322) before storage.
-- The system shall hash passwords using bcrypt (≥12 rounds).
-
-## Event-driven Requirements
-- WHEN a user submits signup form, the system shall create user account.
-- WHEN email verification link is clicked, the system shall activate account.
-- WHEN login fails 3 times, the system shall lock account for 1 hour.
-
-## State-driven Requirements
-- WHILE user is authenticated, the system shall allow access to protected resources.
-- WHILE session is active, the system shall maintain JWT token validity.
-
-## Optional Features
-- WHERE 2FA is enabled, the system may require additional verification.
-
-## Constraints
-- IF password is invalid, the system shall return 401 Unauthorized.
-- The system shall NOT store plaintext passwords.
-- The system shall enforce 8-character minimum password length.
-
-## HISTORY
-
-### v0.1.0 (2025-11-03)
-- Initial draft with core auth requirements
-```
-
-### Phase 2: TDD Implementation (2 hours)
-
-**RED: Write failing tests first**
-
-```python
-# tests/test_auth.py
-import pytest
-from src.auth import signup, login, verify_email  # @TEST:AUTH-001
-from src.models import User
-
-class TestSignup:
-    """SPEC: User signup and verification workflow"""
-
-    def test_signup_creates_user(self):  # @TEST:AUTH-001
-        """SPEC: The system shall create user account."""
-        response = signup(email="user@example.com", password="securePass123")
-
-        assert response["status"] == "created"
-        user = User.find_by_email("user@example.com")
-        assert user is not None
-        assert user.verified is False
-
-    def test_invalid_email_rejected(self):  # @TEST:AUTH-001
-        """SPEC: The system shall validate email format."""
-        with pytest.raises(ValueError):
-            signup(email="invalid-email", password="securePass123")
-
-    def test_weak_password_rejected(self):  # @TEST:AUTH-001
-        """SPEC: Enforce 8-character minimum password length."""
-        with pytest.raises(ValueError):
-            signup(email="user@example.com", password="short")
-
-class TestLogin:
-    """SPEC: User login and session management"""
-
-    def test_successful_login(self):  # @TEST:AUTH-001
-        """SPEC: The system shall authenticate valid credentials."""
-        user = create_test_user("user@example.com", "securePass123", verified=True)
-
-        token = login(email="user@example.com", password="securePass123")
-
-        assert token is not None
-        assert isinstance(token, str)
-
-    def test_failed_login_locks_account(self):  # @TEST:AUTH-001
-        """SPEC: WHEN login fails 3 times, lock account."""
-        user = create_test_user("user@example.com", "securePass123", verified=True)
-
-        for i in range(3):
-            with pytest.raises(Exception):
-                login(email="user@example.com", password="wrongPassword")
-
-        assert user.locked is True
-        assert user.locked_until is not None
-```
-
-**GREEN: Minimal implementation that passes tests**
-
-```python
-# src/auth.py
-from datetime import datetime, timedelta  # @CODE:AUTH-001
-import bcrypt
-import jwt
-from src.models import User
-from src.email import send_verification_email
-
-def signup(email: str, password: str) -> dict:  # @CODE:AUTH-001
-    """Create new user account with email verification."""
-    # Validate inputs
-    if "@" not in email:
-        raise ValueError("Invalid email")
-    if len(password) < 8:
-        raise ValueError("Password too short")
-
-    # Hash password
-    hashed = bcrypt.hashpw(password.encode(), bcrypt.gensalt(12))
-
-    # Create user
-    user = User.create(email=email, password_hash=hashed, verified=False)
-
-    # Send verification email
-    token = generate_verification_token(user.id)
-    send_verification_email(email, token)
-
-    return {"status": "created", "user_id": user.id}
-
-def login(email: str, password: str) -> str:  # @CODE:AUTH-001
-    """Authenticate user and return JWT token."""
-    user = User.find_by_email(email)
-    if not user:
-        raise ValueError("Invalid credentials")
-
-    if user.locked:
-        raise ValueError("Account locked")
-
-    # Verify password
-    if not bcrypt.checkpw(password.encode(), user.password_hash):
-        user.failed_attempts += 1
-        if user.failed_attempts >= 3:
-            user.locked = True
-            user.locked_until = datetime.now() + timedelta(hours=1)
-        user.save()
-        raise ValueError("Invalid credentials")
-
-    # Reset attempts and create token
-    user.failed_attempts = 0
-    token = jwt.encode({"user_id": user.id, "exp": datetime.utcnow() + timedelta(hours=1)}, "SECRET_KEY")
-    user.save()
-
-    return token
-```
-
-**REFACTOR: Improve code quality**
-
-```python
-# src/auth.py (refactored)
-from datetime import datetime, timedelta  # @CODE:AUTH-001
-import bcrypt
-import jwt
-from typing import Dict, Optional
-from src.models import User
-from src.email import send_verification_email
-from src.config import Settings
-
-MAX_FAILED_ATTEMPTS = 3  # @CODE:AUTH-001
-LOCKOUT_DURATION_HOURS = 1  # @CODE:AUTH-001
-MIN_PASSWORD_LENGTH = 8  # @CODE:AUTH-001
-
-def _validate_email(email: str) -> None:
-    """Validate email format."""
-    if "@" not in email or "." not in email.split("@")[1]:
-        raise ValueError("Invalid email format")
-
-def _validate_password(password: str) -> None:
-    """Validate password strength."""
-    if len(password) < MIN_PASSWORD_LENGTH:
-        raise ValueError(f"Password must be at least {MIN_PASSWORD_LENGTH} characters")
-
-def signup(email: str, password: str) -> Dict[str, any]:  # @CODE:AUTH-001
-    """Create new user account with email verification.
-
-    Args:
-        email: User email address
-        password: User password (min 8 chars)
-
-    Returns:
-        Dictionary with status and user_id
-
-    Raises:
-        ValueError: If email or password invalid
-    """
-    _validate_email(email)
-    _validate_password(password)
-
-    hashed = bcrypt.hashpw(password.encode(), bcrypt.gensalt(12))
-    user = User.create(email=email, password_hash=hashed, verified=False)
-
-    token = jwt.encode({"user_id": user.id, "type": "verify"}, Settings.SECRET_KEY)
-    send_verification_email(email, token)
-
-    return {"status": "created", "user_id": user.id}
-
-def login(email: str, password: str) -> str:  # @CODE:AUTH-001
-    """Authenticate user and return JWT token."""
-    user = User.find_by_email(email)
-    if not user:
-        raise ValueError("Invalid credentials")
-
-    if user.is_locked():
-        raise ValueError("Account temporarily locked")
-
-    if not bcrypt.checkpw(password.encode(), user.password_hash):
-        _handle_failed_login(user)
-        raise ValueError("Invalid credentials")
-
-    _reset_login_attempts(user)
-    token = jwt.encode({
-        "user_id": user.id,
-        "exp": datetime.utcnow() + timedelta(hours=1)
-    }, Settings.SECRET_KEY)
-
-    return token
-
-def _handle_failed_login(user: User) -> None:
-    """Track failed login attempts."""
-    user.failed_attempts += 1
-    if user.failed_attempts >= MAX_FAILED_ATTEMPTS:
-        user.locked_until = datetime.now() + timedelta(hours=LOCKOUT_DURATION_HOURS)
-    user.save()
-
-def _reset_login_attempts(user: User) -> None:
-    """Reset failed attempt counter on successful login."""
-    user.failed_attempts = 0
-    user.locked_until = None
-    user.save()
-```
-
-### Phase 3: Sync Documentation (1 hour)
-
-**Update SPEC status**:
-
-```yaml
-status: completed
-version: 1.0.0
-updated: 2025-11-03
-```
-
-**Update README.md**:
-
-```markdown
-## Authentication
-
-User authentication system with email verification and brute-force protection.
-
-- Email signup with verification
-- JWT-based sessions
-- Automatic lockout after 3 failed attempts
-- See SPEC-AUTH-001 for requirements
-```
-
-**Generate sync report**:
-
-```bash
-rg '@(SPEC|TEST|CODE|DOC):AUTH-001' -n .moai/specs/ tests/ src/ docs/
-
-# Output:
-# .moai/specs/SPEC-AUTH-001/spec.md:@SPEC:AUTH-001
-# tests/test_auth.py:@TEST:AUTH-001 (4 matches)
-# src/auth.py:@CODE:AUTH-001 (5 matches)
-# README.md:SPEC-AUTH-001
-
-✅ TAG chain verified: SPEC→TEST→CODE→DOC
-```
-
-## Example 2: Context Engineering in Action
-
-### `/alfred:1-plan` Command
-
-Only load:
-```
-✅ .moai/project/product.md (150 KB)
-✅ .moai/project/structure.md (50 KB)
-
-❌ Skip: All SPEC files, analysis, reports
-```
-
-Context saved: ~5 MB
-
-### `/alfred:2-run` Command
-
-Load only:
-```
-✅ .moai/specs/SPEC-AUTH-001/spec.md (20 KB)
-✅ development-guide.md (14 KB) ← This Skill!
-
-❌ Skip: Other SPECs, unrelated docs, analysis
-```
-
-Context saved: ~200 MB
-
-## Example 3: TRUST 5 Validation Checklist
-
-```markdown
-# AUTH-001 Implementation Verification
-
-## T – Test-Driven (SPEC-Aligned)
-- [x] SPEC written with EARS format (5 patterns)
-- [x] RED: Tests written first, all fail
-- [x] GREEN: Minimal code passes all tests
-- [x] REFACTOR: Code improved, tests still pass
-- [x] @TAG chain complete: SPEC→TEST(4)→CODE(5)→README
-
-## R – Readable
-- [x] Function names: signup(), login(), _validate_email()
-- [x] Variables: email, password, hashed, token
-- [x] Comments explain WHY: "bcrypt 12 rounds for security"
-- [x] Docstrings for public functions
-- [x] README updated
-
-## U – Unified
-- [x] Naming: snake_case for functions, UPPER_CASE for constants
-- [x] Error handling: consistent ValueError usage
-- [x] Test structure: Arrange→Act→Assert pattern
-- [x] SPEC format: 5 EARS patterns used
-- [x] Documentation: SPEC→README→docstrings
-
-## S – Secured
-- [x] No hardcoded secrets (use Settings.SECRET_KEY)
-- [x] Input validation: email, password format
-- [x] Error handling: Generic "Invalid credentials"
-- [x] Brute-force protection: 3 attempts → lockout
-- [x] Password hashing: bcrypt with 12 rounds
-
-## E – Evaluated (≥85% Coverage)
-- [x] Test coverage: 92%
-  - signup(): 95% (valid, invalid email, weak password)
-  - login(): 89% (success, invalid, locked, failed attempts)
-  - helper functions: 100%
-- [x] Edge cases: lockout expiration, token expiration
-- [x] Integration tests: signup→verify→login
-
-✅ All TRUST 5 principles met!
-```

moai_adk/templates/.claude/skills/moai-alfred-dev-guide/reference.md

@@ -1,239 +0,0 @@
-# Alfred Development Guide - Reference
-
-## SPEC-First TDD Workflow Details
-
-### Phase 1: SPEC (`/alfred:1-plan`)
-
-**Duration**: 30-60 minutes per feature
-**Output**: `.moai/specs/SPEC-{ID}/spec.md`
-
-#### EARS Requirement Patterns
-
-```markdown
-### Ubiquitous Requirements (Baseline)
-- The system shall provide user authentication via email.
-- The system shall validate email format before storage.
-
-### Event-driven Requirements
-- WHEN a user clicks 'Sign Up', the system shall display the signup form.
-- WHEN signup is complete, the system shall send verification email.
-- WHEN verification email expires, the system shall invalidate token.
-
-### State-driven Requirements
-- WHILE the user is unauthenticated, the system shall deny access to protected resources.
-- WHILE the session is active, the system shall allow request processing.
-
-### Optional Features
-- WHERE the user enables 2FA, the system may require additional verification.
-- WHERE API quota remains, the system may allow batch operations.
-
-### Constraints
-- IF password is invalid 3 times, the system shall lock the account.
-- IF rate limit exceeded, the system shall return 429 error.
-```
-
-#### SPEC Metadata Required
-
-```yaml
-id: AUTH-001
-title: "User Authentication System"
-version: 0.1.0
-status: active
-created: 2025-11-03
-updated: 2025-11-03
-author: @USERNAME
-priority: high
-```
-
-### Phase 2: TDD Implementation (`/alfred:2-run`)
-
-**Duration**: 2-4 hours per SPEC
-
-#### RED Phase (Failing Tests)
-
-```python
-# tests/test_auth.py
-import pytest
-from src.auth import authenticate  # @TEST:AUTH-001
-
-def test_invalid_password_denies_access():  # @TEST:AUTH-001
-    """SPEC: IF password invalid 3 times, lock account"""
-    user = create_test_user()
-
-    with pytest.raises(AuthenticationError):  # RED: Will fail
-        for _ in range(3):
-            authenticate(user.email, "wrong_password")
-
-    assert user.account_locked  # Then passes (GREEN)
-```
-
-#### GREEN Phase (Minimal Implementation)
-
-```python
-# src/auth.py
-from src.models import User  # @CODE:AUTH-001
-
-def authenticate(email: str, password: str) -> User:  # @CODE:AUTH-001
-    """Authenticate user with email and password."""
-    user = User.find_by_email(email)
-
-    if not user.verify_password(password):
-        user.failed_attempts += 1
-        if user.failed_attempts >= 3:
-            user.account_locked = True
-        return None
-
-    user.failed_attempts = 0
-    return user
-```
-
-#### REFACTOR Phase (Improve Code)
-
-```python
-# Refactored: Better error handling and type hints
-from typing import Optional  # @CODE:AUTH-001
-from src.models import User
-from src.exceptions import AuthenticationError
-
-MAX_FAILED_ATTEMPTS = 3  # @CODE:AUTH-001
-
-def authenticate(email: str, password: str) -> Optional[User]:  # @CODE:AUTH-001
-    """Authenticate user and manage attempt tracking."""
-    user = User.find_by_email(email)
-    if not user:
-        raise AuthenticationError("User not found")
-
-    if not user.verify_password(password):
-        user.increment_failed_attempts(MAX_FAILED_ATTEMPTS)
-        raise AuthenticationError("Invalid credentials")
-
-    user.reset_failed_attempts()
-    return user
-```
-
-### Phase 3: Documentation Sync (`/alfred:3-sync`)
-
-**Duration**: 30-60 minutes per SPEC
-**Actions**:
-1. Verify all @TAG chains (SPEC→TEST→CODE→DOC)
-2. Update README, CHANGELOG
-3. Generate sync report
-4. Create PR to develop
-
-## Context Engineering: JIT Loading
-
-### When to Load What
-
-**`/alfred:1-plan` command**:
-```
-Always load:
-- .moai/project/product.md (project overview)
-
-Optional load:
-- .moai/project/structure.md (codebase layout)
-- .moai/project/tech.md (technology choices)
-
-Never load:
-- Individual SPEC files (load only candidates)
-```
-
-**`/alfred:2-run` command**:
-```
-Always load:
-- .moai/specs/SPEC-{ID}/spec.md (target SPEC)
-
-Optionally load:
-- development-guide.md (if testing TDD patterns)
-- SPEC-related files (if chained features)
-
-Never load:
-- Unrelated SPECs, docs, analysis files
-```
-
-**`/alfred:3-sync` command**:
-```
-Always load:
-- .moai/reports/sync-report.md (previous sync state)
-
-Optional load:
-- Changed SPEC files (only ones modified)
-- TAG validation results
-
-Never load:
-- Old sync reports (keep recent only)
-```
-
-## TRUST 5 Principles Checklist
-
-### T – Test-Driven (SPEC-Aligned)
-- [ ] SPEC written with EARS format
-- [ ] RED phase: failing tests written first
-- [ ] GREEN phase: code passes all tests
-- [ ] REFACTOR: improved code still passes
-- [ ] @TAG chain: SPEC→TEST→CODE→DOC
-
-### R – Readable
-- [ ] Variable names are descriptive
-- [ ] Functions do one thing
-- [ ] Comments explain WHY, not WHAT
-- [ ] Code follows language style guide
-- [ ] Documentation is current
-
-### U – Unified
-- [ ] Consistent naming conventions
-- [ ] Same patterns across codebase
-- [ ] Shared language (EARS for specs)
-- [ ] Common test structure
-- [ ] Standardized documentation
-
-### S – Secured
-- [ ] No hardcoded secrets
-- [ ] Input validation present
-- [ ] Error handling included
-- [ ] OWASP top 10 considered
-- [ ] Security review completed
-
-### E – Evaluated (85%+ Coverage)
-- [ ] Test coverage ≥85%
-- [ ] All functions tested
-- [ ] Error paths covered
-- [ ] Edge cases included
-- [ ] Integration tests exist
-
-## @TAG Chain Validation
-
-```bash
-# Check all TAGs
-rg '@(SPEC|TEST|CODE|DOC):' -n .moai/specs/ tests/ src/ docs/
-
-# Find orphan SPECs (no @CODE references)
-rg '@SPEC:AUTH-001' -n .moai/specs/
-rg '@CODE:AUTH-001' -n src/  # Should have at least one
-
-# Find orphan CODE tags (SPEC missing)
-rg '@CODE:AUTH-001' -n src/
-rg '@SPEC:AUTH-001' -n .moai/specs/  # Should exist
-```
-
-## Common Commands
-
-```bash
-# Start new SPEC
-mkdir -p .moai/specs/SPEC-AUTH-001
-
-# Check for duplicates
-rg "@SPEC:AUTH-001" .moai/specs/  # Should return 0-1 hits
-
-# List all SPECs by status
-rg "^status:" .moai/specs/SPEC-*/spec.md
-
-# Validate all YAML frontmatter
-for f in .moai/specs/SPEC-*/spec.md; do
-  echo "Checking $f..."
-  head -20 "$f" | grep -E "^(id|version|status|created|updated|author|priority):"
-done
-
-# Generate SPEC index
-echo "# SPEC Inventory" && \
-rg "^id:" .moai/specs/SPEC-*/spec.md | sed 's/:id:/: /'
-```

moai_adk/templates/.claude/skills/moai-alfred-ears-authoring/SKILL.md

@@ -1,113 +0,0 @@
----
-name: moai-alfred-ears-authoring
-version: 2.0.0
-created: 2025-10-22
-updated: 2025-10-22
-status: active
-description: EARS (Easy Approach to Requirements Syntax) authoring with 5 statement patterns for clear requirements.
-keywords: ['ears', 'requirements', 'specs', 'authoring']
-allowed-tools:
-  - Read
-  - Bash
----
-
-# Alfred Ears Authoring Skill
-
-## Skill Metadata
-
-| Field | Value |
-| ----- | ----- |
-| **Skill Name** | moai-alfred-ears-authoring |
-| **Version** | 2.0.0 (2025-10-22) |
-| **Allowed tools** | Read (read_file), Bash (terminal) |
-| **Auto-load** | On demand when keywords detected |
-| **Tier** | Alfred |
-
----
-
-## What It Does
-
-EARS (Easy Approach to Requirements Syntax) authoring with 5 statement patterns for clear requirements.
-
-**Key capabilities**:
-- ✅ Best practices enforcement for alfred domain
-- ✅ TRUST 5 principles integration
-- ✅ Latest tool versions (2025-10-22)
-- ✅ TDD workflow support
-
----
-
-## When to Use
-
-**Automatic triggers**:
-- Related code discussions and file patterns
-- SPEC implementation (`/alfred:2-run`)
-- Code review requests
-
-**Manual invocation**:
-- Review code for TRUST 5 compliance
-- Design new features
-- Troubleshoot issues
-
----
-
-## Inputs
-
-- Language-specific source directories
-- Configuration files
-- Test suites and sample data
-
-## Outputs
-
-- Test/lint execution plan
-- TRUST 5 review checkpoints
-- Migration guidance
-
-## Failure Modes
-
-- When required tools are not installed
-- When dependencies are missing
-- When test coverage falls below 85%
-
-## Dependencies
-
-- Access to project files via Read/Bash tools
-- Integration with `moai-foundation-langs` for language detection
-- Integration with `moai-foundation-trust` for quality gates
-
----
-
-## References (Latest Documentation)
-
-_Documentation links updated 2025-10-22_
-
----
-
-## Changelog
-
-- **v2.0.0** (2025-10-22): Major update with latest tool versions, comprehensive best practices, TRUST 5 integration
-- **v1.0.0** (2025-03-29): Initial Skill release
-
----
-
-## Works Well With
-
-- `moai-foundation-trust` (quality gates)
-- `moai-alfred-code-reviewer` (code review)
-- `moai-essentials-debug` (debugging support)
-
----
-
-## Best Practices
-
-✅ **DO**:
-- Follow alfred best practices
-- Use latest stable tool versions
-- Maintain test coverage ≥85%
-- Document all public APIs
-
-❌ **DON'T**:
-- Skip quality gates
-- Use deprecated tools
-- Ignore security warnings
-- Mix testing frameworks