@brunosps00/dev-workflow 1.0.2 → 1.0.4

package/README.md

@@ -26,7 +26,7 @@ npx @brunosps00/dev-workflow install-deps
 
 ## Commands
 
-dev-workflow v1.0.2 ships **22 commands** organized into four tiers. Most users only invoke Tier 1 + Tier 2.
+dev-workflow v1.0.4 ships **24 commands** organized into four tiers. Most users only invoke Tier 1 + Tier 2.
 
 ### Tier 1 — Gateway (3)
 
@@ -61,6 +61,8 @@ Use these when you want step-by-step control instead of `/dw-autopilot`.
 | **`/dw-functional-doc`** | Maps screens + user flows into a functional doc, validated end-to-end with Playwright. |
 | **`/dw-new-project`** | Bootstrap a new project from empty directory. Stack interview, wraps official `create-*` tools, composes docker-compose for dev, seeds `.env`, scripts, CI, `.dw/rules/`. |
 | **`/dw-dockerize`** | Reads existing project, detects stack + runtime deps, proposes Dockerfile + docker-compose for dev/prod with explicit trade-offs (Conservative/Balanced/Bold). |
+| **`/dw-install-azure-skills`** | **Opt-in.** Clones curated Azure skills from [`MicrosoftDocs/Agent-Skills`](https://github.com/MicrosoftDocs/Agent-Skills) (CC-BY-4.0) into `.agents/skills/azure/` and registers the [Microsoft Learn MCP Server](https://learn.microsoft.com/en-us/training/support/mcp-get-started) (HTTP, no-auth). Interactive category selection (Compute / Data & Storage / AI & ML / Networking / Identity & Security / DevOps / Observability / Integration / Architecture / All). Re-run to refresh from upstream. Also available as CLI: `npx @brunosps00/dev-workflow install-azure-skills`. |
+| **`/dw-install-aws-skills`** | **Opt-in.** Clones curated AWS skills from [`aws/agent-toolkit-for-aws`](https://github.com/aws/agent-toolkit-for-aws) (Apache 2.0) into `.agents/skills/aws/` and registers the unified [AWS MCP Server](https://docs.aws.amazon.com/aws-mcp/) (stdio via `uvx mcp-proxy-for-aws@latest`). **Requires `uv`, `aws cli ≥ 2.32.0`, and AWS credentials.** Interactive category selection (Core / Analytics / Database / EC2 / Migration / Networking / Operations / Security / Serverless / Storage / All). The agent gains `aws___call_aws` (executes 15,000+ AWS APIs) and `aws___run_script` (Python sandboxed) — review `.dw/references/aws-mcp-instructions.md` for the destructive-operations protocol. Also available as CLI: `npx @brunosps00/dev-workflow install-aws-skills [--region=<aws-region>]`. |
 
 ### Tier 4 — Hidden/Internal (5)
 
@@ -234,13 +236,17 @@ Installed via `npx @brunosps00/dev-workflow install-deps`:
 ## Options
 
 ```bash
-npx @brunosps00/dev-workflow init                  # Interactive language selection
-npx @brunosps00/dev-workflow init --lang=en        # English, skip prompt
-npx @brunosps00/dev-workflow init --lang=pt-br     # Portuguese, skip prompt
-npx @brunosps00/dev-workflow init --force          # Overwrite existing files
-npx @brunosps00/dev-workflow update                # Update commands/templates only
-npx @brunosps00/dev-workflow install-deps          # Install Playwright, react-doctor; check Trivy, Docker
-npx @brunosps00/dev-workflow help                  # Show help
+npx @brunosps00/dev-workflow init                          # Interactive language selection
+npx @brunosps00/dev-workflow init --lang=en                # English, skip prompt
+npx @brunosps00/dev-workflow init --lang=pt-br             # Portuguese, skip prompt
+npx @brunosps00/dev-workflow init --force                  # Overwrite existing files
+npx @brunosps00/dev-workflow update                        # Update commands/templates only
+npx @brunosps00/dev-workflow install-deps                  # Install Playwright, react-doctor; check Trivy, Docker
+npx @brunosps00/dev-workflow install-azure-skills          # Opt-in: Azure skills + Microsoft Learn MCP
+npx @brunosps00/dev-workflow install-azure-skills --products=azure-aks,azure-openai  # Subset override
+npx @brunosps00/dev-workflow install-aws-skills            # Opt-in: AWS skills + AWS MCP Server (needs uv + aws cli + creds)
+npx @brunosps00/dev-workflow install-aws-skills --region=eu-central-1  # Region override
+npx @brunosps00/dev-workflow help                          # Show help
 ```
 
 ## Getting Started
@@ -267,6 +273,10 @@ Incident response (`dw-incident-response`) adapted from [`wilsto/claude-code-sta
 
 LLM evaluation (`dw-llm-eval`) trajectory-match modes (strict / unordered / subset / superset) and tool-argument matching strategies adapted from [`langchain-ai/agentevals`](https://github.com/langchain-ai/agentevals) (MIT). The broader oracle-ladder framing, judge-calibration discipline, and reference-dataset principle are distilled from the open evaluations literature (OpenAI evals cookbook, Anthropic evals guidance, the academic eval-of-LLM body of work) and rewritten in our voice.
 
+Optional AWS integration (v1.0.4). The `/dw-install-aws-skills` command and `npx @brunosps00/dev-workflow install-aws-skills` CLI pull curated agent skills from [`aws/agent-toolkit-for-aws`](https://github.com/aws/agent-toolkit-for-aws) (Apache 2.0, by AWS) into `.agents/skills/aws/` and register the unified [AWS MCP Server](https://docs.aws.amazon.com/aws-mcp/) via [`mcp-proxy-for-aws`](https://github.com/aws/mcp-proxy-for-aws) (stdio transport with SigV4 authentication). Unlike the Azure equivalent, the AWS MCP Server requires `uv`, `aws cli ≥ 2.32.0`, and valid AWS credentials configured via `aws login` or an IAM profile — the command detects each prerequisite and prints OS-specific install instructions if missing (without auto-installing anything). Capability includes `aws___search_documentation`, `aws___read_documentation`, `aws___retrieve_skill`, plus `aws___call_aws` (executes any of 15,000+ AWS APIs with the user's IAM permissions) and `aws___run_script` (Python sandboxed). `.dw/references/aws-mcp-instructions.md` encodes the destructive-operations protocol — agents must confirm before any `create*`/`update*`/`delete*`/`modify*` call, IAM change, or billing-affecting operation. The AWS Knowledge MCP (HTTP, no-auth) was considered for symmetry with Microsoft Learn MCP but is officially deprecated by AWS in favor of the unified server, which AWS explicitly recommends against running alongside the legacy endpoint ("tool conflicts that confuse AI agents"). Default endpoint is `us-east-1` with `eu-central-1` available; region overridable via `--region=<aws-region>` or by editing `.claude/settings.json` directly. Not installed by default; user explicitly invokes the command. Re-run refreshes from upstream; `dev-workflow update` deliberately does not touch `.agents/skills/aws/`.
+
+Optional Azure integration (v1.0.3). The `/dw-install-azure-skills` command and `npx @brunosps00/dev-workflow install-azure-skills` CLI pull curated agent skills from [`MicrosoftDocs/Agent-Skills`](https://github.com/MicrosoftDocs/Agent-Skills) (CC-BY-4.0, by Microsoft) into `.agents/skills/azure/` and register the [Microsoft Learn MCP Server](https://learn.microsoft.com/en-us/training/support/mcp-get-started) (HTTP endpoint, no authentication required) into `.claude/settings.json`. The MCP server exposes three tools — `microsoft_docs_search`, `microsoft_docs_fetch`, `microsoft_code_sample_search` — that give the agent live access to Microsoft Learn documentation. **Not installed by default**: `init` and `update` do not touch `.agents/skills/azure/` or register the MCP. Users explicitly invoke the command when they begin Azure-focused work. The 10 categories (Compute, Data & Storage, AI & ML, Networking, Identity & Security, DevOps, Observability, Integration, Architecture, All) are dev-workflow's curated grouping over the 200+ skills in the upstream repo; the `--products=<csv>` flag lets advanced users pick individual services. Re-running the command refreshes from upstream; `dev-workflow update` deliberately does not touch these external skills so the Microsoft upstream release cadence is decoupled from the dev-workflow npm release cadence. Skills are copied verbatim from the upstream repo (CC-BY-4.0 permits this with attribution); the agent-facing `.dw/references/azure-mcp-instructions.md` is a clean-room adaptation of Microsoft's "Set instructions" guidance.
+
 Session continuity and adaptive routing patterns adapted from [`tech-leads-club/agent-skills/tlc-spec-driven`](https://github.com/tech-leads-club/agent-skills/tree/main/packages/skills-catalog/skills/(development)/tlc-spec-driven) by Felipe Rodrigues (CC-BY-4.0, v1.0.2). Eight patterns were absorbed selectively after a comparative analysis confirmed that the majority of the skill duplicates existing dev-workflow capabilities (PRD/TechSpec/Tasks pipeline, constitution discipline, source-grounding, two-tier memory, verify-before-complete, brownfield mapping, sub-agent delegation, atomic commits). Patterns adopted: (1) `STATE.md` cross-session working memory at `.dw/STATE.md` + new `/dw-pause` and `/dw-resume` commands; (2) Auto-Sizing Matrix (Small/Medium/Large/Complex) formalized in `CLAUDE.md`/`AGENTS.md` above the Trigger Map; (3) Concerns Map (`.dw/rules/concerns.md`) generated by a new Step 9 in `/dw-analyze-project` and consumed on-demand by `/dw-plan`, `/dw-run`, and `/dw-bugfix`; (4) Context Budget discipline as a new section in `dw-memory` with reference `dw-memory/references/context-budget.md`; (5) Interactive UAT walkthrough as `/dw-qa --uat`; (6) Quick-mode persistence — bugfixes now land in `.dw/bugfixes/NNN-<slug>/{TASK.md, SUMMARY.md, fix-report.md}` and remain queryable via `/dw-intel`; (7) Safety valve in `/dw-bugfix` Step 5.0 that forces escalation to `/dw-plan` when scope exceeds 5 tasks or has cross-dependencies; (8) Cross-skill awareness — `/dw-intel --build` now indexes `.dw/bugfixes/*/SUMMARY.md` into `bugfixes.json`, and `dw-codebase-intel` documents the new `bugfix-history` and `risk-area` query shapes. Patterns explicitly REJECTED: `.specs/` directory structure (dev-workflow uses `.dw/`), Knowledge Verification Chain (already covered by `dw-source-grounding`), Specify/Design/Tasks/Execute naming (dev-workflow keeps PRD/TechSpec/Tasks/Run), Skill Integrations pattern with mermaid-studio/codenavi delegation, and literal text copying (everything is clean-room reimplementation from the conceptual patterns; CC-BY-4.0 attribution is for derivative ideas, not borrowed prose).
 
 Four patterns from [`mattpocock/skills`](https://github.com/mattpocock/skills) by Matt Pocock (MIT) were integrated **without adding new commands or skills** — instead they fold into the existing surface as internal modes and inline guidance: (1) **grill-with-docs** → `/dw-brainstorm` `grill` mode (interview discipline that stress-tests plan vocabulary against `.dw/rules/`); (2) **prototype** → `/dw-brainstorm` `prototype` mode (LOGIC terminal app or UI variant dispatch); (3) **improve-codebase-architecture** → `dw-simplification/references/deep-modules.md` (deletion test, locality, leverage, seam, adapter diagnostic invoked by the `refactor-audit` mode); (4) **zoom-out** → one-paragraph guidance in `agent-instructions.md`. The same release also collapses `/dw-brainstorm`'s six legacy flags into a single full-flow entry point that auto-dispatches modes based on project signals.

package/bin/dev-workflow.js

@@ -2,6 +2,8 @@
 
 const { run } = require('../lib/init');
 const installDeps = require('../lib/install-deps');
+const installAzureSkills = require('../lib/install-azure-skills');
+const installAwsSkills = require('../lib/install-aws-skills');
 const uninstall = require('../lib/uninstall');
 
 const args = process.argv.slice(2);
@@ -22,16 +24,25 @@ const HELP_TEXT = `
     npx dev-workflow init [--force] [--lang=en|pt-br]
     npx dev-workflow update [--lang=en|pt-br]
     npx dev-workflow install-deps
+    npx dev-workflow install-azure-skills [--products=<csv>]
+    npx dev-workflow install-aws-skills [--region=<aws-region>]
     npx dev-workflow help
 
   Commands:
-    init           Scaffold .dw/ (commands, templates, references, scripts, skills, rules, MCPs)
-    update         Update managed files (commands, templates, references, scripts, skills, wrappers, MCPs)
-                   Preserves: .dw/rules/, .dw/spec/, user data
-    install-deps   Install system dependencies (Playwright browsers, MCP servers)
-    uninstall      Remove all managed files (commands, templates, wrappers, skills, MCPs)
-                   Preserves: .dw/rules/, .dw/spec/, .dw/intel/ (user data)
-    help           Show this help message
+    init                   Scaffold .dw/ (commands, templates, references, scripts, skills, rules, MCPs)
+    update                 Update managed files (commands, templates, references, scripts, skills, wrappers, MCPs)
+                           Preserves: .dw/rules/, .dw/spec/, .dw/bugfixes/, .dw/STATE.md, .agents/skills/azure/, user data
+    install-deps           Install system dependencies (Playwright browsers, MCP servers)
+    install-azure-skills   Opt-in: clone curated Azure skills from MicrosoftDocs/Agent-Skills
+                           into .agents/skills/azure/ and register the Microsoft Learn MCP
+                           server (HTTP, no-auth). Interactive category selection.
+    install-aws-skills     Opt-in: clone curated AWS skills from aws/agent-toolkit-for-aws
+                           into .agents/skills/aws/ and register the unified AWS MCP Server
+                           (stdio via mcp-proxy-for-aws). Requires uv, aws cli, and AWS
+                           credentials. Interactive category selection.
+    uninstall              Remove all managed files (commands, templates, wrappers, skills, MCPs)
+                           Preserves: .dw/rules/, .dw/spec/, .dw/intel/ (user data)
+    help                   Show this help message
 
   Options:
     --force        Overwrite existing files (init only; update always overwrites managed files)
@@ -58,6 +69,12 @@ async function main() {
     case 'install-deps':
       installDeps.run();
       break;
+    case 'install-azure-skills':
+      await installAzureSkills.run();
+      break;
+    case 'install-aws-skills':
+      await installAwsSkills.run();
+      break;
     case 'uninstall':
       uninstall.run();
       break;

package/lib/aws-categories.js

@@ -0,0 +1,80 @@
+// Upstream-native categories for the AWS skills repo (aws/agent-toolkit-for-aws,
+// Apache 2.0). Microsoft's Azure repo is service-oriented and required us to invent
+// 10 human categories; AWS organizes skills task-oriented under skills/core-skills/
+// (13 horizontal) and skills/specialized-skills/<category>/ (9 verticals × N tasks).
+// This file mirrors that structure 1:1 — no artificial mapping.
+//
+// Update this file when the upstream adds, renames, or removes top-level directories.
+
+const CATEGORIES = {
+  All: {
+    description: 'Every skill in the upstream repo (core + specialized).',
+    dirs: '__ALL__',
+  },
+  Core: {
+    description:
+      'All 13 horizontal core skills (Bedrock, Amplify, Billing, CDK, CloudFormation, Containers, IAM, Messaging, Observability, SDK JS/Python/Swift, Serverless).',
+    dirs: ['core-skills/*'],
+  },
+  Analytics: {
+    description: 'Athena, Glue, Kinesis, EMR, Redshift, OpenSearch, QuickSight, etc.',
+    dirs: ['specialized-skills/analytics-skills/*'],
+  },
+  Database: {
+    description: 'DynamoDB, RDS/Aurora, DocumentDB, ElastiCache, Neptune, etc.',
+    dirs: ['specialized-skills/database-skills/*'],
+  },
+  'EC2 / Compute': {
+    description: 'EC2 launch, AMI, instance profiles, image builder, etc.',
+    dirs: ['specialized-skills/ec2-skills/*'],
+  },
+  'Migration & Modernization': {
+    description: 'DMS, MGN, App2Container, modernization patterns.',
+    dirs: ['specialized-skills/migration-and-modernization-skills/*'],
+  },
+  'Networking & Content Delivery': {
+    description: 'VPC, Route 53, CloudFront, API Gateway, ELB, Transit Gateway, etc.',
+    dirs: ['specialized-skills/networking-and-content-delivery-skills/*'],
+  },
+  Operations: {
+    description: 'CloudWatch, Systems Manager, OpsWorks, Config, Trusted Advisor.',
+    dirs: ['specialized-skills/operations-skills/*'],
+  },
+  'Security & Identity': {
+    description: 'IAM patterns, KMS, Secrets Manager, GuardDuty, WAF, Security Hub.',
+    dirs: ['specialized-skills/security-and-identity-skills/*'],
+  },
+  Serverless: {
+    description: 'Lambda, Step Functions, EventBridge, SAM patterns.',
+    dirs: ['specialized-skills/serverless-skills/*'],
+  },
+  Storage: {
+    description: 'S3, EBS, EFS, FSx, Storage Gateway, data lake tables.',
+    dirs: ['specialized-skills/storage-skills/*'],
+  },
+};
+
+function listCategories() {
+  return Object.keys(CATEGORIES);
+}
+
+// Resolve selected category names → list of upstream relative paths to scan for skills.
+// Each entry is a directory pattern under `skills/`. The caller globs each pattern.
+// Special-cases "All" → returns the sentinel string '__ALL__' meaning every dir
+// under skills/core-skills/ and skills/specialized-skills/<*>/.
+function resolveDirs(selectedCategories) {
+  if (selectedCategories.includes('All')) {
+    return '__ALL__';
+  }
+  const dirs = new Set();
+  for (const cat of selectedCategories) {
+    const entry = CATEGORIES[cat];
+    if (!entry || !Array.isArray(entry.dirs)) continue;
+    for (const d of entry.dirs) {
+      dirs.add(d);
+    }
+  }
+  return Array.from(dirs);
+}
+
+module.exports = { CATEGORIES, listCategories, resolveDirs };

package/lib/azure-categories.js

@@ -0,0 +1,168 @@
+// Curated categories mapping human-readable groups to upstream Azure skill slugs
+// from MicrosoftDocs/Agent-Skills (CC-BY-4.0). Match is prefix-based: a slug in the
+// list matches any directory whose name starts with that slug. "all" is a sentinel
+// meaning every directory under skills/.
+//
+// This file is the single source of truth. When Microsoft adds, renames, or removes
+// services, update the prefixes here — install-azure-skills.js does not embed slugs.
+
+const CATEGORIES = {
+  All: { description: 'Every skill in the upstream repo (skills/ and non-overlapping products/).' },
+  Compute: {
+    description: 'AKS, App Service, Container Apps/Instances/Registry, Functions, VMs, Batch.',
+    prefixes: [
+      'azure-aks',
+      'azure-app-service',
+      'azure-container-apps',
+      'azure-container-instances',
+      'azure-container-registry',
+      'azure-functions',
+      'azure-virtual-machines',
+      'azure-vmware-solution',
+      'azure-batch',
+      'azure-spring-apps',
+    ],
+  },
+  'Data & Storage': {
+    description: 'Blob, Cosmos DB, SQL, MySQL, PostgreSQL, Cache for Redis, Data Lake, Files.',
+    prefixes: [
+      'azure-blob-storage',
+      'azure-cosmos-db',
+      'azure-sql',
+      'azure-database-for-mysql',
+      'azure-database-for-postgresql',
+      'azure-cache-redis',
+      'azure-data-lake',
+      'azure-files',
+      'azure-storage',
+      'azure-table-storage',
+      'azure-queue-storage',
+      'azure-managed-disk',
+    ],
+  },
+  'AI & ML': {
+    description: 'OpenAI, AI Foundry, AI Vision, AI Search, Machine Learning, Anomaly Detector, Bot Service.',
+    prefixes: [
+      'azure-openai',
+      'azure-ai-foundry',
+      'azure-ai-vision',
+      'azure-ai-search',
+      'azure-ai-services',
+      'azure-machine-learning',
+      'azure-anomaly-detector',
+      'azure-bot-service',
+      'azure-cognitive',
+    ],
+  },
+  Networking: {
+    description: 'Application Gateway, Front Door, Load Balancer, VPN Gateway, ExpressRoute, Bastion, DNS, CDN.',
+    prefixes: [
+      'azure-application-gateway',
+      'azure-front-door',
+      'azure-load-balancer',
+      'azure-vpn-gateway',
+      'azure-expressroute',
+      'azure-bastion',
+      'azure-dns',
+      'azure-cdn',
+      'azure-virtual-network',
+      'azure-virtual-wan',
+      'azure-private-link',
+      'azure-network-watcher',
+      'azure-firewall',
+      'azure-traffic-manager',
+    ],
+  },
+  'Identity & Security': {
+    description: 'Entra ID (Active Directory), Key Vault, Attestation, Defender, Sentinel.',
+    prefixes: [
+      'azure-active-directory',
+      'azure-entra',
+      'azure-key-vault',
+      'azure-attestation',
+      'azure-defender',
+      'azure-sentinel',
+      'azure-security-center',
+      'azure-artifact-signing',
+    ],
+  },
+  DevOps: {
+    description: 'Azure DevOps (Boards, Pipelines, Artifacts, Repos), Azure DevOps Server, GitHub integration.',
+    prefixes: [
+      'azure-boards',
+      'azure-pipelines',
+      'azure-artifacts',
+      'azure-repos',
+      'azure-devops',
+      'azure-test-plans',
+    ],
+  },
+  Observability: {
+    description: 'Monitor, Application Insights, Log Analytics.',
+    prefixes: [
+      'azure-monitor',
+      'azure-application-insights',
+      'azure-log-analytics',
+    ],
+  },
+  Integration: {
+    description: 'Logic Apps, Service Bus, Event Grid, Event Hubs, API Management, API Center.',
+    prefixes: [
+      'azure-logic-apps',
+      'azure-service-bus',
+      'azure-event-grid',
+      'azure-event-hubs',
+      'azure-api-management',
+      'azure-api-center',
+      'azure-business-process-tracking',
+    ],
+  },
+  Architecture: {
+    description: 'Architecture guidance, Advisor, Blueprints, Well-Architected.',
+    prefixes: [
+      'azure-architecture',
+      'azure-advisor',
+      'azure-blueprints',
+      'azure-well-architected',
+      'azure-policy',
+      'azure-resource-graph',
+      'azure-resource-manager',
+    ],
+  },
+};
+
+// Return the list of category names in the canonical display order.
+function listCategories() {
+  return Object.keys(CATEGORIES);
+}
+
+// Resolve selected category names → flat set of slug prefixes to match against
+// upstream skill directory names. Special-cases "All".
+function resolvePrefixes(selectedCategories) {
+  if (selectedCategories.includes('All')) {
+    return null; // null = match every directory
+  }
+  const prefixes = new Set();
+  for (const cat of selectedCategories) {
+    const entry = CATEGORIES[cat];
+    if (!entry || !entry.prefixes) continue;
+    for (const prefix of entry.prefixes) {
+      prefixes.add(prefix);
+    }
+  }
+  return Array.from(prefixes);
+}
+
+// True when a directory name should be installed given the resolved prefix set.
+// null prefix set means install everything.
+function matchesPrefixes(dirName, prefixes) {
+  if (prefixes === null) return true;
+  for (const prefix of prefixes) {
+    if (dirName === prefix || dirName.startsWith(`${prefix}-`)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+module.exports = { CATEGORIES, listCategories, resolvePrefixes, matchesPrefixes };

package/lib/constants.js

@@ -11,6 +11,8 @@ const COMMANDS = {
     { name: 'dw-functional-doc', description: 'Maps screens and user flows into a functional doc, validated end-to-end with Playwright.' },
     { name: 'dw-generate-pr', description: 'Trigger when commits are ready and the branch needs a PR. Pushes branch and opens PR with summary + test plan + hard verify gate.' },
     { name: 'dw-help', description: 'Lists primary commands and the flows that connect them. Pass --advanced to see internal/hidden commands.' },
+    { name: 'dw-install-aws-skills', description: 'Trigger when user asks to install AWS expertise, setup AWS MCP server, or add AWS agent skills. Opt-in: clones curated skills from aws/agent-toolkit-for-aws into .agents/skills/aws/ and registers the unified AWS MCP Server (stdio via mcp-proxy-for-aws). Requires uv, aws cli, and AWS credentials.' },
+    { name: 'dw-install-azure-skills', description: 'Trigger when user asks to install Azure expertise, setup Microsoft docs MCP, or add Azure agent skills. Opt-in: clones curated skills from MicrosoftDocs/Agent-Skills into .agents/skills/azure/ and registers the Microsoft Learn MCP server.' },
     { name: 'dw-intel', description: 'Codebase intelligence: query mode (default) answers questions citing .dw/intel/ + .dw/rules/; --build mode (re)builds the index.' },
     { name: 'dw-new-project', description: 'Interviews you about stack and infra, then scaffolds a working monorepo with docker-compose for dev, .env, scripts, CI, and seeded rules.' },
     { name: 'dw-pause', description: 'Trigger when user says "pause work", "end session", or "save where we are". Consolidates open loops, decisions, blockers, and todos into .dw/STATE.md so the next session can resume.' },
@@ -35,6 +37,8 @@ const COMMANDS = {
     { name: 'dw-functional-doc', description: 'Mapeia telas e fluxos em um dossie funcional, validado E2E com Playwright.' },
     { name: 'dw-generate-pr', description: 'Trigger quando commits estao prontos e branch precisa de PR. Push da branch e abre PR com summary + test plan + hard verify gate.' },
     { name: 'dw-help', description: 'Lista comandos primarios e fluxos que os conectam. Passe --advanced para ver comandos internos/escondidos.' },
+    { name: 'dw-install-aws-skills', description: 'Trigger quando usuario pede pra instalar expertise AWS, configurar MCP da AWS, ou adicionar agent skills AWS. Opt-in: clona skills curadas de aws/agent-toolkit-for-aws para .agents/skills/aws/ e registra o AWS MCP Server unificado (stdio via mcp-proxy-for-aws). Requer uv, aws cli e credenciais AWS.' },
+    { name: 'dw-install-azure-skills', description: 'Trigger quando usuario pede pra instalar expertise Azure, configurar MCP do Microsoft docs, ou adicionar agent skills Azure. Opt-in: clona skills curadas de MicrosoftDocs/Agent-Skills para .agents/skills/azure/ e registra o Microsoft Learn MCP server.' },
     { name: 'dw-intel', description: 'Inteligencia do codebase: modo query (default) responde citando .dw/intel/ + .dw/rules/; modo --build (re)constroi indice.' },
     { name: 'dw-new-project', description: 'Entrevista voce sobre stack e infra, depois faz scaffold de um monorepo com docker-compose para dev, .env, scripts, CI e rules seed.' },
     { name: 'dw-pause', description: 'Trigger quando usuario diz "pausa o trabalho", "encerra a sessao" ou "salva onde paramos". Consolida pontas soltas, decisoes, bloqueios e todos em .dw/STATE.md para a proxima sessao retomar.' },