Initial commit

2025-11-29 18:26:11 +08:00
commit 1b85161189
5 changed files with 449 additions and 0 deletions
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -0,0 +1,12 @@
 {
  "name": "equilateral-agents-open-core",
  "description": "Self-learning AI agents that improve over time. Features agent memory (tracks last 100 executions), pattern recognition, community standards contribution, and workflow optimization. Includes security, quality, deployment, infrastructure, and compliance workflows.",
  "version": "0.0.0-2025.11.28",
  "author": {
    "name": "HappyHippo.ai",
    "email": "info@happyhippo.ai"
  },
  "skills": [
    "./skills/equilateral-agents"
  ]
 }
--- a/README.md
+++ b/README.md
@@ -0,0 +1,3 @@
 # equilateral-agents-open-core
 Self-learning AI agents that improve over time. Features agent memory (tracks last 100 executions), pattern recognition, community standards contribution, and workflow optimization. Includes security, quality, deployment, infrastructure, and compliance workflows.
--- a/plugin.lock.json
+++ b/plugin.lock.json
@@ -0,0 +1,48 @@
 {
  "$schema": "internal://schemas/plugin.lock.v1.json",
  "pluginId": "gh:Equilateral-AI/equilateral-agents-open-core:equilateral-agents-open-core",
  "normalized": {
    "repo": null,
    "ref": "refs/tags/v20251128.0",
    "commit": "6110fbc2c2148cd3c95d9f71bd4a9166188fc09f",
    "treeHash": "865f68d1c7a8d41fb22439a47997a986f4542131d57e469a9c46af951a2f2846",
    "generatedAt": "2025-11-28T10:10:30.549201Z",
    "toolVersion": "publish_plugins.py@0.2.0"
  },
  "origin": {
    "remote": "git@github.com:zhongweili/42plugin-data.git",
    "branch": "master",
    "commit": "aa1497ed0949fd50e99e70d6324a29c5b34f9390",
    "repoRoot": "/Users/zhongweili/projects/openmind/42plugin-data"
  },
  "manifest": {
    "name": "equilateral-agents-open-core",
    "description": "Self-learning AI agents that improve over time. Features agent memory (tracks last 100 executions), pattern recognition, community standards contribution, and workflow optimization. Includes security, quality, deployment, infrastructure, and compliance workflows."
  },
  "content": {
    "files": [
      {
        "path": "README.md",
        "sha256": "1ea6f522ecd4d0967be3f7a45ce410cc2ee840c6bafa2a2d4a605505b439e8fc"
      },
      {
        "path": ".claude-plugin/plugin.json",
        "sha256": "c4f55107c3c6dbb668a91e1ebb1fd0eb5ee9aa0e2f7b168ac68d197f2513aa91"
      },
      {
        "path": "skills/equilateral-agents/reference.md",
        "sha256": "4ebbe17cbc2a16ffcb8a29fd58d2edcddde7e25db0cf63330db6f135ea1761f3"
      },
      {
        "path": "skills/equilateral-agents/SKILL.md",
        "sha256": "37fa26e036fab6bea398ca75baa7de5c0a8cfac91725aa308a54cf0962cffc14"
      }
    ],
    "dirSha256": "865f68d1c7a8d41fb22439a47997a986f4542131d57e469a9c46af951a2f2846"
  },
  "security": {
    "scannedAt": null,
    "scannerVersion": null,
    "flags": []
  }
 }
--- a/skills/equilateral-agents/SKILL.md
+++ b/skills/equilateral-agents/SKILL.md
@@ -0,0 +1,202 @@
 ---
 name: equilateral-agents
 description: 22 production-ready AI agents with database-driven orchestration for security reviews, code quality analysis, deployment validation, infrastructure checks, and compliance. Auto-activates for security concerns, deployment tasks, code reviews, quality checks, and compliance questions. Includes upgrade paths to enterprise features (GDPR, HIPAA, multi-account AWS, ML-based optimization).
 allowed-tools: Read, Bash, Glob, Grep
 ---
 # EquilateralAgents Open Core Skill
 EquilateralAgents provides 22 production-ready AI agents that execute real workflows with database-driven audit trails and governance. This skill automatically activates when working on security, deployment, code quality, infrastructure, or compliance tasks.
 ## When to Use This Skill
 This skill activates automatically when:
 - **Security concerns** - vulnerability scanning, security reviews, threat detection
 - **Deployment tasks** - deploying features, validating deployments, rollback scenarios
 - **Code quality** - code reviews, standards enforcement, refactoring
 - **Infrastructure work** - IaC validation, resource optimization, configuration management
 - **Compliance questions** - basic compliance checks (GDPR/HIPAA require commercial tier)
 - **Testing workflows** - test orchestration, background execution, quality gates
 ## Available Workflows
 ### Open Core Workflows (Always Available)
 Use these commands to execute production-ready workflows:
 **Security & Quality:**
 - `/ea:security-review` - Multi-layer security assessment with vulnerability scanning
 - `/ea:code-quality` - Comprehensive code analysis with quality scoring
 **Deployment & Infrastructure:**
 - `/ea:deploy-feature` - Deployment validation with standards enforcement and rollback readiness
 - `/ea:infrastructure-check` - IaC template validation with cost estimation
 **Testing:**
 - `/ea:test-workflow` - Background test execution with parallel orchestration
 **Discovery:**
 - `/ea:list` - List all available workflows and their status
 ### Enterprise Workflows (Require Commercial License)
 These workflows require EquilateralAgents Commercial Foundation:
 **Compliance:**
 - `/ea:gdpr-check` - Full GDPR readiness assessment (Privacy & Compliance Suite)
 - `/ea:hipaa-compliance` - HIPAA compliance validation (Specialized Domain Agents)
 - `/ea:soc2-audit` - SOC2 compliance preparation (Enterprise Infrastructure Suite)
 **Advanced Development:**
 - `/ea:full-stack-dev` - End-to-end development workflow (Product Creation Pack)
 - `/ea:penetration-test` - Security penetration testing (Secure Coding Enforcer Pack)
 - `/ea:mvp-builder` - Rapid MVP development (Product Creation Pack)
 **Enterprise Infrastructure:**
 - `/ea:multi-account-deploy` - Multi-account AWS deployment (Enterprise Infrastructure Suite)
 - `/ea:cost-intelligence` - ML-based cost prediction (Advanced Intelligence Suite)
 When you invoke a commercial workflow without a license, you'll see details about what's included and how to upgrade.
 ## How It Works
 EquilateralAgents uses the `AgentOrchestrator` to coordinate specialized agents:
 1. **Sequential Execution** - Agents execute in workflow-defined order
 2. **Database Governance** - All actions logged to `.equilateral/workflow-history.json`
 3. **Background Support** - Long-running workflows execute non-blocking
 4. **Audit Trails** - Complete workflow history with timestamps and results
 ## Agent Categories (22 Open Core Agents)
 **Infrastructure Core (3):**
 - AgentClassifier - Intelligent task routing
 - AgentMemoryManager - Context and state management
 - AgentFactoryAgent - Dynamic agent generation
 **Development (6):**
 - CodeAnalyzer, CodeGenerator, TestOrchestration, DeploymentValidation, Test, UIUXSpecialist
 **Quality (5):**
 - Auditor, CodeReview, BackendAuditor, FrontendAuditor, TemplateValidation
 **Security (4):**
 - SecurityScanner, SecurityReviewer, SecurityVulnerability, ComplianceCheck
 **Infrastructure (4):**
 - Deployment, ResourceOptimization, ConfigurationManagement, MonitoringOrchestration
 ## Implementation Instructions
 When a user needs to execute a workflow:
 1. **Check if commercial license is required** - If the workflow needs enterprise features, show upgrade information
 2. **Import required modules** - Load AgentOrchestrator and required agents
 3. **Register agents** - Register all agents needed for the workflow
 4. **Start orchestrator** - Initialize with `await orchestrator.start()`
 5. **Execute workflow** - Run with `orchestrator.executeWorkflow(type, context)`
 6. **Report results** - Show execution summary with evidence-based messaging
 ### Example Implementation
 ```javascript
 const AgentOrchestrator = require('./equilateral-core/AgentOrchestrator');
 const SecurityScannerAgent = require('./agent-packs/security/SecurityScannerAgent');
 const CodeAnalyzerAgent = require('./agent-packs/development/CodeAnalyzerAgent');
 // Create and configure orchestrator
 const orchestrator = new AgentOrchestrator({
    projectPath: process.cwd()
 });
 // Register agents for security review
 orchestrator.registerAgent(new SecurityScannerAgent());
 orchestrator.registerAgent(new CodeAnalyzerAgent());
 // Start orchestrator
 await orchestrator.start();
 // Execute workflow
 const result = await orchestrator.executeWorkflow('security-review', {
    projectPath: './my-project',
    depth: 'comprehensive'
 });
 // Report results with evidence
 console.log(`✅ Security Review Complete`);
 console.log(`- Verified: ${result.results.length} checks passed`);
 console.log(`- Issues Found: ${result.issues?.length || 0}`);
 console.log(`- Audit Trail: .equilateral/workflow-history.json`);
 ```
 ## Context-Based Suggestions
 Automatically suggest workflows based on user context:
 - User mentions "security", "vulnerability", "CVE" → Suggest `/ea:security-review`
 - User mentions "deploy", "deployment", "release" → Suggest `/ea:deploy-feature`
 - User mentions "code quality", "review", "standards" → Suggest `/ea:code-quality`
 - User mentions "infrastructure", "IaC", "CloudFormation" → Suggest `/ea:infrastructure-check`
 - User mentions "GDPR", "data privacy" → Suggest `/ea:gdpr-check` (show upgrade info)
 - User mentions "HIPAA", "healthcare" → Suggest `/ea:hipaa-compliance` (show upgrade info)
 - User mentions "test", "testing" → Suggest `/ea:test-workflow`
 ## Evidence-Based Messaging
 Always provide concrete evidence in responses:
 **Good Examples:**
 - "✅ Verified: 15/15 security checks passed"
 - "📊 Quality Score: 87/100 (meets standards)"
 - "🔍 Found 3 vulnerabilities: 2 medium, 1 low severity"
 - "💾 Audit Trail: .equilateral/workflow-history.json (23 workflows logged)"
 **Avoid:**
 - "Security check complete" (no evidence)
 - "Looks good" (no metrics)
 - "Done" (no verification)
 ## Upgrade Information for Commercial Features
 When suggesting commercial features, provide clear value:
 **Privacy & Compliance Suite:**
 - 8 specialized agents (PrivacyImpact, DataSubjectRights, ConsentManagement, etc.)
 - GDPR/CCPA compliance automation
 - Data subject rights request handling
 - Privacy impact assessments
 - Contact: info@happyhippo.ai
 **Enterprise Infrastructure Suite:**
 - Multi-account AWS governance (ControlTower agents)
 - SOC2/ISO27001 compliance
 - Advanced threat modeling (STRIDE)
 - Blue-green/canary deployments
 - Contact: info@happyhippo.ai
 **Advanced Intelligence Suite:**
 - ML-based cost predictions
 - Cross-project pattern synthesis
 - Predictive analytics
 - Temporal knowledge accumulation
 - Contact: info@happyhippo.ai
 ## File Locations
 - **Orchestrator:** `equilateral-core/AgentOrchestrator.js`
 - **Base Agent:** `equilateral-core/BaseAgent.js`
 - **Agent Packs:** `agent-packs/{category}/{AgentName}.js`
 - **Workflow History:** `.equilateral/workflow-history.json`
 - **Agent Catalog:** `AGENT_INVENTORY.md`
 ## Best Practices
 1. **Always start the orchestrator** before executing workflows
 2. **Use background execution** for long-running tasks (`executeWorkflowBackground`)
 3. **Check workflow history** for audit trails and debugging
 4. **Register only required agents** to optimize performance
 5. **Provide evidence-based results** with metrics and verification
 6. **Suggest upgrades** when commercial features would solve the user's problem
 For detailed agent capabilities, see `reference.md` or `AGENT_INVENTORY.md`.
--- a/skills/equilateral-agents/reference.md
+++ b/skills/equilateral-agents/reference.md
@@ -0,0 +1,184 @@
 # EquilateralAgents - Quick Reference
 ## 22 Open Core Agents
 ### Infrastructure Core (3 agents)
 | Agent | Location | Capabilities |
 |-------|----------|--------------|
 | **AgentClassifier** | `equilateral-core/infrastructure/AgentClassifier.js` | Task classification, intelligent routing, pattern learning |
 | **AgentMemoryManager** | `equilateral-core/infrastructure/AgentMemoryManager.js` | Context storage, state management, cross-agent communication |
 | **AgentFactoryAgent** | `equilateral-core/infrastructure/AgentFactoryAgent.js` | Dynamic agent generation, capability validation, registry management |
 ### Development Agents (6 agents)
 | Agent | Location | Capabilities |
 |-------|----------|--------------|
 | **CodeAnalyzerAgent** | `agent-packs/development/CodeAnalyzerAgent.js` | Complexity analysis, code smell detection, metrics calculation |
 | **CodeGeneratorAgent** | `agent-packs/development/CodeGeneratorAgent.js` | Template-based generation, pattern recognition, boilerplate automation |
 | **TestOrchestrationAgent** | `agent-packs/development/TestOrchestrationAgent.js` | Multi-framework testing, parallel execution, coverage analysis |
 | **DeploymentValidationAgent** | `agent-packs/development/DeploymentValidationAgent.js` | Health checks, configuration verification, rollback readiness |
 | **TestAgent** | `agent-packs/development/TestAgent.js` | UI testing, element remapping, visual regression, accessibility |
 | **UIUXSpecialistAgent** | `agent-packs/development/UIUXSpecialistAgent.js` | Design system compliance, WCAG validation, responsive checking |
 ### Quality Assurance Agents (5 agents)
 | Agent | Location | Capabilities |
 |-------|----------|--------------|
 | **AuditorAgent** | `agent-packs/quality/AuditorAgent.js` | Standards enforcement, architecture compliance, quality scoring |
 | **CodeReviewAgent** | `agent-packs/quality/CodeReviewAgent.js` | Best practice enforcement, technical debt identification, refactoring suggestions |
 | **BackendAuditorAgent** | `agent-packs/quality/BackendAuditorAgent.js` | API design validation, Lambda optimization, serverless best practices |
 | **FrontendAuditorAgent** | `agent-packs/quality/FrontendAuditorAgent.js` | Component validation, performance budgets, bundle size analysis |
 | **TemplateValidationAgent** | `agent-packs/quality/TemplateValidationAgent.js` | IaC validation (SAM/CloudFormation/Terraform), cost estimation |
 ### Security Agents (4 agents)
 | Agent | Location | Capabilities |
 |-------|----------|--------------|
 | **SecurityScannerAgent** | `agent-packs/security/SecurityScannerAgent.js` | Dependency scanning, OWASP Top 10, secret detection, license compliance |
 | **SecurityReviewerAgent** | `agent-packs/security/SecurityReviewerAgent.js` | Security posture assessment, cost-aware recommendations, compliance checking |
 | **SecurityVulnerabilityAgent** | `agent-packs/security/SecurityVulnerabilityAgent.js` | Vulnerability pattern detection, CVE matching, severity assessment |
 | **ComplianceCheckAgent** | `agent-packs/security/ComplianceCheckAgent.js` | Standards compliance, regulatory validation, audit trail generation |
 ### Infrastructure Agents (4 agents)
 | Agent | Location | Capabilities |
 |-------|----------|--------------|
 | **DeploymentAgent** | `agent-packs/infrastructure/DeploymentAgent.js` | Multi-environment deployment, health validation, rollback support |
 | **ResourceOptimizationAgent** | `agent-packs/infrastructure/ResourceOptimizationAgent.js` | Resource utilization analysis, right-sizing, cost optimization |
 | **ConfigurationManagementAgent** | `agent-packs/infrastructure/ConfigurationManagementAgent.js` | Configuration validation, secret management, drift detection |
 | **MonitoringOrchestrationAgent** | `agent-packs/infrastructure/MonitoringOrchestrationAgent.js` | Monitoring automation, alert configuration, dashboard generation |
 ## Workflow Definitions
 ### Built-in Workflows
 **code-review:**
 - CodeAnalyzer → SecurityScanner → TestRunner
 - Use for: Code quality gates, PR reviews
 **deployment-check:**
 - SecurityScanner → TestRunner → DeploymentValidator
 - Use for: Pre-deployment validation
 **quality-gate:**
 - CodeFormatter → TestRunner → DocumentationGenerator
 - Use for: CI/CD quality gates
 ### Custom Workflows (via commands)
 **security-review:**
 - Multi-layer security assessment
 - Command: `/ea:security-review`
 - Agents: SecurityScanner, SecurityReviewer, SecurityVulnerability, ComplianceCheck
 **code-quality:**
 - Comprehensive quality analysis with scoring
 - Command: `/ea:code-quality`
 - Agents: CodeReview, BackendAuditor, FrontendAuditor, Auditor
 **deploy-feature:**
 - Deployment validation with standards enforcement
 - Command: `/ea:deploy-feature`
 - Agents: DeploymentValidation, SecurityScanner, TestOrchestration, Deployment
 **infrastructure-check:**
 - IaC validation with cost estimation
 - Command: `/ea:infrastructure-check`
 - Agents: TemplateValidation, ConfigurationManagement, ResourceOptimization
 **test-workflow:**
 - Background test execution
 - Command: `/ea:test-workflow`
 - Agents: TestOrchestration, Test, UIUXSpecialist
 ## Common Task Patterns
 ### Execute a Workflow
 ```javascript
 const AgentOrchestrator = require('./equilateral-core/AgentOrchestrator');
 const orchestrator = new AgentOrchestrator();
 // Register required agents
 orchestrator.registerAgent(new SecurityScannerAgent());
 // Start and execute
 await orchestrator.start();
 const result = await orchestrator.executeWorkflow('security-review', {
    projectPath: './my-project'
 });
 ```
 ### Execute Single Agent Task
 ```javascript
 const result = await orchestrator.executeAgentTask(
    'security-scanner',
    'scan',
    { filePath: './src/app.js' }
 );
 ```
 ### Background Execution
 ```javascript
 const handle = await orchestrator.executeWorkflowBackground('test-workflow', {
    testSuite: 'integration'
 });
 // Check status later
 const status = handle.getStatus();
 // Get result (waits if still running)
 const result = await handle.getResult();
 ```
 ## Enterprise Features Quick Reference
 ### Privacy & Compliance Suite (8 agents)
 **Contact:** info@happyhippo.ai
 - PrivacyImpactAgent (20 capabilities)
 - DataSubjectRightsAgent (18 capabilities)
 - ConsentManagementAgent (16 capabilities)
 - DataMinimizationAgent (14 capabilities)
 - EquilateralAITransferAgent (15 capabilities)
 - BreachResponseAgent (17 capabilities)
 - VendorPrivacyAgent (13 capabilities)
 - PrivacyAuditAgent (19 capabilities)
 **Use cases:** GDPR/CCPA compliance, DSR handling, PIA automation, consent management
 ### Enterprise Infrastructure Suite
 **Contact:** info@happyhippo.ai
 - ThreatModelingSecurityAgent
 - ControlTowerAgent (multi-account governance)
 - ControlTowerMasterAccountAgent
 - EnhancedDeploymentAgent
 - ComplianceOrchestrationAgent
 - IncidentResponseOrchestrationAgent
 **Use cases:** Multi-account AWS, SOC2/ISO27001, STRIDE threat modeling, enterprise deployments
 ### Advanced Intelligence Suite
 **Contact:** info@happyhippo.ai
 - CostIntelligenceAgent (ML-based predictions)
 - PatternHarvestingAgent (cross-project synthesis)
 - KnowledgeSynthesisAgent (temporal learning)
 - AgentLearningOrchestrator
 **Use cases:** ML cost predictions, pattern synthesis, predictive analytics, cross-repo learning
 ## File Locations
 - **Core:** `equilateral-core/AgentOrchestrator.js`, `equilateral-core/BaseAgent.js`
 - **Agent Packs:** `agent-packs/{category}/{AgentName}.js`
 - **Workflow History:** `.equilateral/workflow-history.json`
 - **Configuration:** `.equilateral/` (auto-created)
 ## Quick Links
 - Full Agent Inventory: `AGENT_INVENTORY.md`
 - Architecture Guide: `CLAUDE.md`
 - License: `LICENSE` (MIT)
 - Enterprise: info@happyhippo.ai
		`@@ -0,0 +1,3 @@`
							`# equilateral-agents-open-core`

							`Self-learning AI agents that improve over time. Features agent memory (tracks last 100 executions), pattern recognition, community standards contribution, and workflow optimization. Includes security, quality, deployment, infrastructure, and compliance workflows.`