moai-adk 0.25.4__py3-none-any.whl → 0.41.0__py3-none-any.whl

moai_adk/templates/.claude/skills/moai-tool-ast-grep/rules/quality/deprecated-apis.yml

@@ -0,0 +1,84 @@
+# Deprecated API Detection Rules
+
+id: deprecated-substr
+language: javascript
+severity: warning
+message: "substr() is deprecated. Use slice() or substring() instead."
+rule:
+  pattern: $STR.substr($$$ARGS)
+fix: $STR.slice($$$ARGS)
+
+---
+id: deprecated-escape
+language: javascript
+severity: warning
+message: "escape() is deprecated. Use encodeURIComponent() instead."
+rule:
+  pattern: escape($STR)
+fix: encodeURIComponent($STR)
+
+---
+id: deprecated-unescape
+language: javascript
+severity: warning
+message: "unescape() is deprecated. Use decodeURIComponent() instead."
+rule:
+  pattern: unescape($STR)
+fix: decodeURIComponent($STR)
+
+---
+id: deprecated-component-will-mount
+language: typescriptreact
+severity: error
+message: "componentWillMount is deprecated. Use componentDidMount or useEffect."
+rule:
+  pattern: componentWillMount() { $$$BODY }
+
+---
+id: deprecated-component-will-receive-props
+language: typescriptreact
+severity: error
+message: "componentWillReceiveProps is deprecated. Use getDerivedStateFromProps or useEffect."
+rule:
+  pattern: componentWillReceiveProps($PROPS) { $$$BODY }
+
+---
+id: deprecated-find-dom-node
+language: typescriptreact
+severity: warning
+message: "findDOMNode is deprecated. Use refs instead."
+rule:
+  pattern: ReactDOM.findDOMNode($COMPONENT)
+
+---
+id: deprecated-python-imp
+language: python
+severity: warning
+message: "imp module is deprecated. Use importlib instead."
+rule:
+  pattern: import imp
+
+---
+id: deprecated-python-optparse
+language: python
+severity: info
+message: "optparse is deprecated. Use argparse instead."
+rule:
+  pattern: import optparse
+
+---
+id: deprecated-python-thread
+language: python
+severity: warning
+message: "thread module is deprecated. Use threading instead."
+rule:
+  pattern: import thread
+
+---
+id: deprecated-python-cgi-escape
+language: python
+severity: warning
+message: "cgi.escape() is deprecated. Use html.escape() instead."
+rule:
+  pattern: cgi.escape($$$ARGS)
+fix: html.escape($$$ARGS)

moai_adk/templates/.claude/skills/moai-tool-ast-grep/rules/security/secrets-detection.yml

@@ -0,0 +1,89 @@
+# Secrets and Credentials Detection Rules
+
+id: hardcoded-password-python
+language: python
+severity: error
+message: "Hardcoded credential detected. Use environment variables."
+rule:
+  any:
+    - pattern: password = "$$$VALUE"
+    - pattern: PASSWORD = "$$$VALUE"
+    - pattern: passwd = "$$$VALUE"
+    - pattern: secret = "$$$VALUE"
+    - pattern: SECRET = "$$$VALUE"
+    - pattern: api_key = "$$$VALUE"
+    - pattern: API_KEY = "$$$VALUE"
+    - pattern: apikey = "$$$VALUE"
+
+---
+id: hardcoded-password-js
+language: javascript
+severity: error
+message: "Hardcoded credential detected. Use environment variables."
+rule:
+  any:
+    - pattern: "password: '$$$VALUE'"
+    - pattern: 'password: "$$$VALUE"'
+    - pattern: "apiKey: '$$$VALUE'"
+    - pattern: 'apiKey: "$$$VALUE"'
+    - pattern: "secret: '$$$VALUE'"
+    - pattern: 'secret: "$$$VALUE"'
+    - pattern: const password = "$$$VALUE"
+    - pattern: const apiKey = "$$$VALUE"
+
+---
+id: hardcoded-password-ts
+language: typescript
+severity: error
+message: "Hardcoded credential detected. Use environment variables."
+rule:
+  any:
+    - pattern: "password: '$$$VALUE'"
+    - pattern: 'password: "$$$VALUE"'
+    - pattern: "apiKey: '$$$VALUE'"
+    - pattern: 'apiKey: "$$$VALUE"'
+    - pattern: const password = "$$$VALUE"
+    - pattern: const apiKey = "$$$VALUE"
+
+---
+id: hardcoded-jwt-secret
+language: javascript
+severity: error
+message: "JWT secret should not be hardcoded"
+rule:
+  any:
+    - pattern: jwt.sign($PAYLOAD, "$SECRET")
+    - pattern: jwt.verify($TOKEN, "$SECRET")
+
+---
+id: hardcoded-jwt-secret-ts
+language: typescript
+severity: error
+message: "JWT secret should not be hardcoded"
+rule:
+  any:
+    - pattern: jwt.sign($PAYLOAD, "$SECRET")
+    - pattern: jwt.verify($TOKEN, "$SECRET")
+
+---
+id: aws-credentials-python
+language: python
+severity: error
+message: "AWS credentials should not be hardcoded"
+rule:
+  any:
+    - pattern: aws_access_key_id = "$$$VALUE"
+    - pattern: aws_secret_access_key = "$$$VALUE"
+    - pattern: AWS_ACCESS_KEY_ID = "$$$VALUE"
+    - pattern: AWS_SECRET_ACCESS_KEY = "$$$VALUE"
+
+---
+id: private-key-detection
+language: python
+severity: error
+message: "Private key should not be hardcoded in source code"
+rule:
+  any:
+    - pattern: private_key = "$$$VALUE"
+    - pattern: PRIVATE_KEY = "$$$VALUE"
+    - pattern: ssh_key = "$$$VALUE"

moai_adk/templates/.claude/skills/moai-tool-ast-grep/rules/security/sql-injection.yml

@@ -0,0 +1,45 @@
+# SQL Injection Detection Rules
+
+id: sql-injection-python-format
+language: python
+severity: error
+message: "Potential SQL injection: Use parameterized queries instead of string formatting"
+rule:
+  any:
+    - pattern: cursor.execute($QUERY % $ARGS)
+    - pattern: cursor.execute($QUERY.format($$$ARGS))
+    - pattern: cursor.execute(f"$$$SQL")
+    - pattern: execute($QUERY + $VAR)
+
+---
+id: sql-injection-python-fstring
+language: python
+severity: error
+message: "Potential SQL injection: f-strings in SQL queries are dangerous"
+rule:
+  pattern: |
+    cursor.execute(f"$$$SQL")
+
+---
+id: sql-injection-js-template
+language: javascript
+severity: error
+message: "Potential SQL injection: Use parameterized queries"
+rule:
+  any:
+    - pattern: $DB.query(`$$$SQL ${$VAR} $$$REST`)
+    - pattern: $DB.query($SQL + $VAR)
+    - pattern: $DB.raw($SQL + $VAR)
+    - pattern: knex.raw($SQL + $VAR)
+
+---
+id: sql-injection-ts-template
+language: typescript
+severity: error
+message: "Potential SQL injection: Use parameterized queries"
+rule:
+  any:
+    - pattern: $DB.query(`$$$SQL ${$VAR} $$$REST`)
+    - pattern: $DB.query($SQL + $VAR)
+    - pattern: prisma.$raw($SQL + $VAR)
+    - pattern: knex.raw($SQL + $VAR)

moai_adk/templates/.claude/skills/moai-tool-ast-grep/rules/security/xss-prevention.yml

@@ -0,0 +1,50 @@
+# XSS Prevention Rules
+
+id: xss-dangerouslySetInnerHTML
+language: typescriptreact
+severity: warning
+message: "XSS risk: Sanitize content before using dangerouslySetInnerHTML"
+rule:
+  pattern: dangerouslySetInnerHTML={{ __html: $CONTENT }}
+
+---
+id: xss-dangerouslySetInnerHTML-jsx
+language: javascript
+severity: warning
+message: "XSS risk: Sanitize content before using dangerouslySetInnerHTML"
+rule:
+  pattern: dangerouslySetInnerHTML={{ __html: $CONTENT }}
+
+---
+id: xss-innerHTML
+language: javascript
+severity: warning
+message: "Potential XSS: innerHTML assignment with user input"
+rule:
+  any:
+    - pattern: $EL.innerHTML = $CONTENT
+    - pattern: document.write($CONTENT)
+    - pattern: $EL.outerHTML = $CONTENT
+
+---
+id: xss-document-write
+language: javascript
+severity: error
+message: "document.write is a security risk and bad practice"
+rule:
+  pattern: document.write($CONTENT)
+
+---
+id: xss-eval-usage
+language: javascript
+severity: error
+message: "eval() is dangerous and can lead to code injection"
+rule:
+  any:
+    - pattern: eval($CODE)
+    - pattern: new Function($CODE)
+    - pattern: setTimeout($CODE, $DELAY)
+    - pattern: setInterval($CODE, $DELAY)
+  constraints:
+    CODE:
+      kind: string

moai_adk/templates/.claude/skills/moai-tool-ast-grep/rules/sgconfig.yml

@@ -0,0 +1,54 @@
+# AST-Grep Configuration for MoAI-ADK
+# https://ast-grep.github.io/reference/sgconfig.html
+
+ruleDirs:
+  - security
+  - quality
+  - languages
+
+testConfigs:
+  - ./**/__tests__/*.yml
+
+languageGlobs:
+  python:
+    - "**/*.py"
+    - "**/*.pyi"
+  javascript:
+    - "**/*.js"
+    - "**/*.jsx"
+    - "**/*.mjs"
+    - "**/*.cjs"
+  typescript:
+    - "**/*.ts"
+    - "**/*.tsx"
+    - "**/*.mts"
+    - "**/*.cts"
+  go:
+    - "**/*.go"
+  rust:
+    - "**/*.rs"
+  java:
+    - "**/*.java"
+  kotlin:
+    - "**/*.kt"
+    - "**/*.kts"
+  cpp:
+    - "**/*.c"
+    - "**/*.cpp"
+    - "**/*.cc"
+    - "**/*.h"
+    - "**/*.hpp"
+  ruby:
+    - "**/*.rb"
+  php:
+    - "**/*.php"
+
+# Custom rules utilities
+utils:
+  is-security-sensitive:
+    any:
+      - pattern: password
+      - pattern: secret
+      - pattern: api_key
+      - pattern: token
+      - pattern: credential

moai_adk/templates/.claude/skills/moai-tool-opencode/SKILL.md

@@ -0,0 +1,214 @@
+---
+name: moai-tool-opencode
+description: OpenCode.ai open-source AI coding agent comprehensive reference. Use when working with OpenCode TUI, CLI, IDE integration, configuring agents, tools, MCP servers, creating plugins, or developing with the SDK.
+version: 2.0.0
+status: active
+updated: 2026-01-08
+allowed-tools:
+  - Read
+  - Grep
+  - Glob
+  - WebFetch
+  - Bash
+---
+
+# OpenCode.ai Tool Skill
+
+Comprehensive reference for OpenCode.ai - an open-source AI coding agent available as terminal interface, desktop application, and IDE extension.
+
+## Quick Reference
+
+**Installation:**
+```bash
+curl -fsSL https://opencode.ai/install | bash
+# or
+npm install -g opencode
+```
+
+**Start OpenCode:**
+```bash
+opencode              # Launch TUI in current directory
+opencode /path/to/dir # Launch in specific directory
+opencode run "prompt" # Non-interactive mode
+opencode serve        # Start headless server
+```
+
+**Essential Commands:**
+- `/connect` - Configure API keys
+- `/init` - Generate AGENTS.md
+- `/models` - List available models
+- `/share` - Share session
+- `/undo` - Undo changes
+- `Tab` - Switch agents
+- `Ctrl+P` - Command palette
+
+**Configuration Files:**
+- `~/.config/opencode/opencode.json` - Global config
+- `./opencode.json` - Project config
+- `AGENTS.md` - Project instructions
+- `.opencode/agent/` - Custom agents
+- `.opencode/skill/` - Agent skills
+- `.opencode/tool/` - Custom tools
+- `.opencode/command/` - Custom commands
+
+---
+
+## Documentation Index
+
+This skill contains 32 comprehensive documentation modules organized by category.
+
+### Core (7 modules)
+- [Introduction](modules/core/intro.md) - Installation, setup, primary use cases
+- [Configuration](modules/core/config.md) - JSON configuration options and merge order
+- [Providers](modules/core/providers.md) - 75+ LLM providers setup
+- [Network](modules/core/network.md) - Proxy and certificate configuration
+- [Enterprise](modules/core/enterprise.md) - SSO, central config, AI gateway
+- [Troubleshooting](modules/core/troubleshooting.md) - Common issues and solutions
+- [Migration 1.0](modules/core/migration-1.0.md) - Upgrade guide
+
+### Usage (7 modules)
+- [TUI](modules/usage/tui.md) - Terminal interface reference
+- [CLI](modules/usage/cli.md) - Command-line interface
+- [IDE](modules/usage/ide.md) - VS Code/Cursor integration
+- [Zen](modules/usage/zen.md) - Curated model gateway
+- [Share](modules/usage/share.md) - Session sharing
+- [GitHub](modules/usage/github.md) - GitHub Actions integration
+- [GitLab](modules/usage/gitlab.md) - GitLab CI/CD integration
+
+### Configuration (14 modules)
+- [Tools](modules/configure/tools.md) - Built-in and custom tools
+- [Rules](modules/configure/rules.md) - AGENTS.md instructions
+- [Agents](modules/configure/agents.md) - Custom agent configuration
+- [Models](modules/configure/models.md) - Model selection and variants
+- [Themes](modules/configure/themes.md) - Custom theme creation
+- [Keybinds](modules/configure/keybinds.md) - Keyboard shortcuts
+- [Commands](modules/configure/commands.md) - Custom slash commands
+- [Formatters](modules/configure/formatters.md) - Code formatting
+- [Permissions](modules/configure/permissions.md) - Tool approval system
+- [LSP Servers](modules/configure/lsp-servers.md) - Language server setup
+- [MCP Servers](modules/configure/mcp-servers.md) - Model Context Protocol
+- [ACP Support](modules/configure/acp.md) - Agent Client Protocol
+- [Skills](modules/configure/skills.md) - Reusable instructions
+- [Custom Tools](modules/configure/custom-tools.md) - TypeScript tools
+
+### Development (4 modules)
+- [SDK](modules/develop/sdk.md) - JavaScript/TypeScript client
+- [Server](modules/develop/server.md) - HTTP API reference
+- [Plugins](modules/develop/plugins.md) - Plugin development
+- [Ecosystem](modules/develop/ecosystem.md) - Community projects
+
+See [index.md](index.md) for complete navigation.
+
+---
+
+## Key Concepts
+
+### Agent Architecture
+
+**Primary Agents** - Main assistants you interact with directly:
+- Build: Full tools enabled (default)
+- Plan: Restricted, analysis-focused
+
+**Subagents** - Specialized assistants invoked by primary agents:
+- General: Research and multi-step tasks
+- Explore: Fast codebase exploration
+
+### Configuration Hierarchy
+
+1. Command-line flags (highest priority)
+2. Environment variables
+3. Project config (`./opencode.json`)
+4. Global config (`~/.config/opencode/opencode.json`)
+5. Built-in defaults
+
+### Tool Permission Levels
+
+| Level | Description |
+|-------|-------------|
+| `allow` | Auto-approve execution |
+| `ask` | Request user approval |
+| `deny` | Block execution |
+
+---
+
+## Common Patterns
+
+### Basic Configuration
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "model": "anthropic/claude-sonnet-4",
+  "agent": {
+    "security": {
+      "description": "Security auditor",
+      "permission": { "edit": "deny" }
+    }
+  }
+}
+```
+
+### Custom Command
+
+```markdown
+---
+description: Review current changes
+agent: plan
+---
+Review the following changes:
+!`git diff --staged`
+```
+
+### MCP Server Setup
+
+```json
+{
+  "mcp": {
+    "github": {
+      "type": "local",
+      "command": ["npx", "-y", "@modelcontextprotocol/server-github"],
+      "environment": { "GITHUB_TOKEN": "{env:GITHUB_TOKEN}" }
+    }
+  }
+}
+```
+
+### Custom Tool
+
+```typescript
+import { tool } from "@opencode-ai/plugin"
+
+export default tool({
+  description: "Query project database",
+  args: {
+    query: tool.schema.string().describe("SQL query")
+  },
+  async execute(args) {
+    return `Executed: ${args.query}`
+  }
+})
+```
+
+---
+
+## Resources
+
+- Documentation: https://opencode.ai/docs
+- GitHub: https://github.com/anomalyco/opencode
+- Discord: https://opencode.ai/discord
+
+Storage Locations:
+- Config: `~/.config/opencode/`
+- Data: `~/.local/share/opencode/`
+- Cache: `~/.cache/opencode/`
+- Logs: `~/.local/share/opencode/log/`
+
+---
+
+## Works Well With
+
+- moai-lang-typescript - TypeScript development patterns
+- moai-lang-python - Python development patterns
+- moai-domain-backend - Backend API development
+- moai-domain-frontend - Frontend development
+- moai-workflow-testing - Testing workflows