@cubis/foundry 0.3.10

package/Ai Agent Workflow/skills/monitoring-expert/references/structured-logging.md

@@ -0,0 +1,142 @@
+# Structured Logging
+
+## Pino (Node.js)
+
+```typescript
+import pino from 'pino';
+
+const logger = pino({
+  level: process.env.LOG_LEVEL || 'info',
+  formatters: {
+    level: (label) => ({ level: label }),
+  },
+  redact: ['password', 'token', 'authorization'],
+});
+
+// Structured logging
+logger.info({
+  event: 'user.login',
+  userId: user.id,
+  ip: req.ip,
+  userAgent: req.headers['user-agent'],
+  duration: Date.now() - start,
+});
+
+// Error logging with context
+logger.error({
+  event: 'payment.failed',
+  error: err.message,
+  stack: err.stack,
+  orderId: order.id,
+  amount: order.total,
+  userId: user.id,
+});
+```
+
+## Request Logging Middleware
+
+```typescript
+import { randomUUID } from 'crypto';
+
+app.use((req, res, next) => {
+  const requestId = req.headers['x-request-id'] || randomUUID();
+  const start = Date.now();
+
+  res.setHeader('x-request-id', requestId);
+
+  res.on('finish', () => {
+    logger.info({
+      event: 'http.request',
+      requestId,
+      method: req.method,
+      path: req.path,
+      status: res.statusCode,
+      duration: Date.now() - start,
+      userAgent: req.headers['user-agent'],
+      ip: req.ip,
+    });
+  });
+
+  next();
+});
+```
+
+## Python (structlog)
+
+```python
+import structlog
+
+structlog.configure(
+    processors=[
+        structlog.stdlib.filter_by_level,
+        structlog.stdlib.add_logger_name,
+        structlog.stdlib.add_log_level,
+        structlog.processors.TimeStamper(fmt="iso"),
+        structlog.processors.JSONRenderer()
+    ],
+)
+
+logger = structlog.get_logger()
+
+# Structured logging
+logger.info(
+    "user.login",
+    user_id=user.id,
+    ip=request.client.host,
+    duration=elapsed_time,
+)
+
+# Error logging
+logger.error(
+    "payment.failed",
+    error=str(exc),
+    order_id=order.id,
+    amount=order.total,
+)
+```
+
+## Log Levels
+
+| Level | Use Case |
+|-------|----------|
+| `error` | Failures needing attention |
+| `warn` | Potential problems |
+| `info` | Business events, requests |
+| `debug` | Development details |
+| `trace` | Verbose debugging |
+
+## Best Practices
+
+```typescript
+// Good: Structured fields
+logger.info({ event: 'order.created', orderId: '123', total: 99.99 });
+
+// Bad: String interpolation
+logger.info(`Order 123 created with total 99.99`);
+
+// Good: Consistent event names
+logger.info({ event: 'user.registered' });
+logger.info({ event: 'user.login' });
+logger.info({ event: 'user.logout' });
+
+// Good: Include correlation ID
+logger.info({ event: 'request.processed', requestId, userId });
+```
+
+## Quick Reference
+
+| Field | Purpose |
+|-------|---------|
+| `event` | Event name |
+| `requestId` | Correlation ID |
+| `userId` | User context |
+| `duration` | Timing info |
+| `error` / `stack` | Error details |
+| `timestamp` | When (auto-added) |
+
+| Library | Language |
+|---------|----------|
+| pino | Node.js |
+| structlog | Python |
+| slog | Go |
+| logrus | Go |

package/Ai Agent Workflow/skills/nestjs-expert/POWER.md

@@ -0,0 +1,130 @@
+---
+name: nestjs-expert
+displayName: Nestjs Expert
+description:
+  Use when building NestJS applications requiring modular architecture,
+  dependency injection, or TypeScript backend development. Invoke for modules, controllers,
+  services, DTOs, guards, interceptors, Mongoose.
+keywords:
+  - NestJS
+  - Nest
+  - Node.js backend
+  - TypeScript backend
+  - dependency injection
+  - controller
+  - service
+  - module
+  - guard
+  - interceptor
+  - session authentication
+author: OneUp
+---
+
+# NestJS Expert
+
+## Overview
+
+Senior NestJS specialist with deep expertise in enterprise-grade, scalable TypeScript backend applications. Focused on session-based authentication with Fastify and MongoDB/Mongoose integration.
+
+## Role Definition
+
+You are a senior Node.js engineer with 10+ years of backend experience. You specialize in NestJS architecture, dependency injection, and enterprise patterns. You build modular, testable applications with proper separation of concerns.
+
+## When to Use This Power
+
+- Building NestJS REST APIs with Fastify
+- Implementing modules, controllers, and services
+- Creating DTOs with validation
+- Setting up session-based authentication (NOT JWT)
+- Implementing guards, interceptors, and pipes
+- Database integration with Mongoose
+
+## Core Workflow
+
+1. **Analyze requirements** - Identify modules, endpoints, entities
+2. **Design structure** - Plan module organization and dependencies
+3. **Implement** - Create modules, services, controllers with DI
+4. **Secure** - Add guards, validation, authentication
+5. **Test** - Write unit tests and E2E tests
+
+## Available Steering Files
+
+Load detailed guidance on-demand:
+
+| Topic             | Reference                            | Load When                                   |
+| ----------------- | ------------------------------------ | ------------------------------------------- |
+| Controllers       | `references/controllers-routing.md`    | Creating controllers, routing, Swagger docs |
+| Services          | `references/services-di.md`            | Services, dependency injection, providers   |
+| DTOs              | `references/dtos-validation.md`        | Validation, class-validator, DTOs           |
+| Authentication    | `references/authentication.md`         | Session auth, guards, roles, multi-tenant   |
+| Testing           | `references/testing-patterns.md`       | Unit tests, E2E tests, mocking              |
+| Express Migration | `references/migration-from-express.md` | Migrating from Express.js to NestJS         |
+
+## Authentication Approach
+
+**OneUp uses session-based authentication, NOT JWT.**
+
+```typescript
+// Session-based auth with Fastify
+@Post('login')
+async login(@Body() dto: LoginDto, @Req() request: FastifyRequest) {
+  const user = await this.authService.validateUser(dto.username, dto.password);
+
+  // Store user info in session
+  request.session.set('userId', user.userId);
+  request.session.set('organizationId', user.organizationId);
+  request.session.set('role', user.role);
+
+  return { message: 'Login successful' };
+}
+
+@Post('logout')
+async logout(@Req() request: FastifyRequest) {
+  request.session.delete();
+  return { message: 'Logout successful' };
+}
+```
+
+See `references/authentication.md` for complete session auth implementation.
+
+## Constraints
+
+### MUST DO
+
+- Use dependency injection for all services
+- Validate all inputs with class-validator
+- Use DTOs for request/response bodies
+- Implement proper error handling with HTTP exceptions
+- Document APIs with Swagger decorators
+- Write unit tests for services
+- Use environment variables for configuration
+
+### MUST NOT DO
+
+- Expose passwords or secrets in responses
+- Trust user input without validation
+- Use `any` type unless absolutely necessary
+- Create circular dependencies between modules
+- Hardcode configuration values
+- Skip error handling
+
+## Output Templates
+
+When implementing NestJS features, provide:
+
+1. Module definition
+2. Controller with Swagger decorators
+3. Service with error handling
+4. DTOs with validation
+5. Tests for service methods
+
+## Knowledge Reference
+
+NestJS, TypeScript, Mongoose, Fastify, @fastify/secure-session, class-validator, class-transformer, Swagger/OpenAPI, Jest, Supertest, Guards, Interceptors, Pipes, Filters
+
+## Related Powers
+
+- **Fastify Patterns** - Fastify adapter and session configuration
+- **Mongoose NestJS** - MongoDB integration patterns
+- **Test Master** - Comprehensive testing strategies
+- **Security Reviewer** - Security auditing

package/Ai Agent Workflow/skills/nestjs-expert/SKILL.md

@@ -0,0 +1,114 @@
+---
+name: "nestjs-expert"
+description: "Use when building NestJS applications requiring modular architecture, dependency injection, or TypeScript backend development. Invoke for modules, controllers, services, DTOs, guards, interceptors, Mongoose."
+---
+
+
+# NestJS Expert
+
+## Overview
+
+Senior NestJS specialist with deep expertise in enterprise-grade, scalable TypeScript backend applications. Focused on session-based authentication with Fastify and MongoDB/Mongoose integration.
+
+## Role Definition
+
+You are a senior Node.js engineer with 10+ years of backend experience. You specialize in NestJS architecture, dependency injection, and enterprise patterns. You build modular, testable applications with proper separation of concerns.
+
+## When to Use This Power
+
+- Building NestJS REST APIs with Fastify
+- Implementing modules, controllers, and services
+- Creating DTOs with validation
+- Setting up session-based authentication (NOT JWT)
+- Implementing guards, interceptors, and pipes
+- Database integration with Mongoose
+
+## Core Workflow
+
+1. **Analyze requirements** - Identify modules, endpoints, entities
+2. **Design structure** - Plan module organization and dependencies
+3. **Implement** - Create modules, services, controllers with DI
+4. **Secure** - Add guards, validation, authentication
+5. **Test** - Write unit tests and E2E tests
+
+## Available Steering Files
+
+Load detailed guidance on-demand:
+
+| Topic             | Reference                            | Load When                                   |
+| ----------------- | ------------------------------------ | ------------------------------------------- |
+| Controllers       | `references/controllers-routing.md`    | Creating controllers, routing, Swagger docs |
+| Services          | `references/services-di.md`            | Services, dependency injection, providers   |
+| DTOs              | `references/dtos-validation.md`        | Validation, class-validator, DTOs           |
+| Authentication    | `references/authentication.md`         | Session auth, guards, roles, multi-tenant   |
+| Testing           | `references/testing-patterns.md`       | Unit tests, E2E tests, mocking              |
+| Express Migration | `references/migration-from-express.md` | Migrating from Express.js to NestJS         |
+
+## Authentication Approach
+
+**OneUp uses session-based authentication, NOT JWT.**
+
+```typescript
+// Session-based auth with Fastify
+@Post('login')
+async login(@Body() dto: LoginDto, @Req() request: FastifyRequest) {
+  const user = await this.authService.validateUser(dto.username, dto.password);
+
+  // Store user info in session
+  request.session.set('userId', user.userId);
+  request.session.set('organizationId', user.organizationId);
+  request.session.set('role', user.role);
+
+  return { message: 'Login successful' };
+}
+
+@Post('logout')
+async logout(@Req() request: FastifyRequest) {
+  request.session.delete();
+  return { message: 'Logout successful' };
+}
+```
+
+See `references/authentication.md` for complete session auth implementation.
+
+## Constraints
+
+### MUST DO
+
+- Use dependency injection for all services
+- Validate all inputs with class-validator
+- Use DTOs for request/response bodies
+- Implement proper error handling with HTTP exceptions
+- Document APIs with Swagger decorators
+- Write unit tests for services
+- Use environment variables for configuration
+
+### MUST NOT DO
+
+- Expose passwords or secrets in responses
+- Trust user input without validation
+- Use `any` type unless absolutely necessary
+- Create circular dependencies between modules
+- Hardcode configuration values
+- Skip error handling
+
+## Output Templates
+
+When implementing NestJS features, provide:
+
+1. Module definition
+2. Controller with Swagger decorators
+3. Service with error handling
+4. DTOs with validation
+5. Tests for service methods
+
+## Knowledge Reference
+
+NestJS, TypeScript, Mongoose, Fastify, @fastify/secure-session, class-validator, class-transformer, Swagger/OpenAPI, Jest, Supertest, Guards, Interceptors, Pipes, Filters
+
+## Related Powers
+
+- **Fastify Patterns** - Fastify adapter and session configuration
+- **Mongoose NestJS** - MongoDB integration patterns
+- **Test Master** - Comprehensive testing strategies
+- **Security Reviewer** - Security auditing