@cubis/foundry 0.3.31 → 0.3.33

package/workflows/workflows/agent-environment-setup/platforms/windsurf/skills/graphql-architect/references/subscriptions.md

@@ -0,0 +1,510 @@
+# GraphQL Subscriptions
+
+## Basic Subscription Setup
+
+```typescript
+// schema.graphql
+type Subscription {
+  postCreated: Post!
+  postUpdated(id: ID!): Post!
+  commentAdded(postId: ID!): Comment!
+  userOnline: User!
+}
+
+type Post {
+  id: ID!
+  title: String!
+  content: String!
+  author: User!
+}
+
+type Comment {
+  id: ID!
+  content: String!
+  author: User!
+  post: Post!
+}
+
+// server.ts
+import { createServer } from 'http';
+import { ApolloServer } from '@apollo/server';
+import { expressMiddleware } from '@apollo/server/express4';
+import { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer';
+import { makeExecutableSchema } from '@graphql-tools/schema';
+import { WebSocketServer } from 'ws';
+import { useServer } from 'graphql-ws/lib/use/ws';
+import express from 'express';
+
+const schema = makeExecutableSchema({ typeDefs, resolvers });
+
+const app = express();
+const httpServer = createServer(app);
+
+// WebSocket server for subscriptions
+const wsServer = new WebSocketServer({
+  server: httpServer,
+  path: '/graphql',
+});
+
+const serverCleanup = useServer(
+  {
+    schema,
+    context: async (ctx, msg, args) => {
+      // Extract auth from connection params
+      const token = ctx.connectionParams?.authorization;
+      const user = token ? await verifyToken(token) : null;
+      return { user };
+    },
+  },
+  wsServer
+);
+
+const server = new ApolloServer({
+  schema,
+  plugins: [
+    ApolloServerPluginDrainHttpServer({ httpServer }),
+    {
+      async serverWillStart() {
+        return {
+          async drainServer() {
+            await serverCleanup.dispose();
+          },
+        };
+      },
+    },
+  ],
+});
+
+await server.start();
+app.use('/graphql', express.json(), expressMiddleware(server));
+
+httpServer.listen(4000);
+```
+
+## PubSub Implementation
+
+```typescript
+// pubsub.ts
+import { RedisPubSub } from 'graphql-redis-subscriptions';
+import Redis from 'ioredis';
+
+// In-memory (development only)
+import { PubSub } from 'graphql-subscriptions';
+export const pubsub = new PubSub();
+
+// Redis (production)
+const options = {
+  host: process.env.REDIS_HOST || 'localhost',
+  port: parseInt(process.env.REDIS_PORT || '6379'),
+  retryStrategy: (times: number) => Math.min(times * 50, 2000),
+};
+
+export const pubsub = new RedisPubSub({
+  publisher: new Redis(options),
+  subscriber: new Redis(options),
+});
+
+// Strongly typed event names
+export const EVENTS = {
+  POST_CREATED: 'POST_CREATED',
+  POST_UPDATED: 'POST_UPDATED',
+  COMMENT_ADDED: 'COMMENT_ADDED',
+  USER_ONLINE: 'USER_ONLINE',
+} as const;
+```
+
+## Subscription Resolvers
+
+```typescript
+import { withFilter } from 'graphql-subscriptions';
+import { pubsub, EVENTS } from './pubsub';
+
+const resolvers = {
+  Subscription: {
+    // Simple subscription
+    postCreated: {
+      subscribe: () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
+    },
+
+    // Filtered subscription
+    postUpdated: {
+      subscribe: withFilter(
+        () => pubsub.asyncIterator([EVENTS.POST_UPDATED]),
+        (payload, variables) => {
+          // Only send updates for specific post
+          return payload.postUpdated.id === variables.id;
+        }
+      ),
+    },
+
+    // Filtered with authorization
+    commentAdded: {
+      subscribe: withFilter(
+        (parent, args, context) => {
+          // Check auth before subscribing
+          if (!context.user) {
+            throw new Error('Unauthorized');
+          }
+          return pubsub.asyncIterator([EVENTS.COMMENT_ADDED]);
+        },
+        async (payload, variables, context) => {
+          // Filter by post and check permissions
+          if (payload.commentAdded.postId !== variables.postId) {
+            return false;
+          }
+
+          // Check if user has access to post
+          const post = await context.dataSources.posts.findById(
+            variables.postId
+          );
+          return post && post.isPublic || post.authorId === context.user.id;
+        }
+      ),
+    },
+
+    // Complex subscription with multiple filters
+    userOnline: {
+      subscribe: withFilter(
+        () => pubsub.asyncIterator([EVENTS.USER_ONLINE]),
+        (payload, variables, context) => {
+          // Only notify friends
+          return context.user.friends.includes(payload.userOnline.id);
+        }
+      ),
+    },
+  },
+
+  Mutation: {
+    createPost: async (parent, args, context) => {
+      const post = await context.dataSources.posts.create(args.input);
+
+      // Publish event
+      await pubsub.publish(EVENTS.POST_CREATED, {
+        postCreated: post,
+      });
+
+      return post;
+    },
+
+    updatePost: async (parent, args: { id: string; input: any }, context) => {
+      const post = await context.dataSources.posts.update(
+        args.id,
+        args.input
+      );
+
+      await pubsub.publish(EVENTS.POST_UPDATED, {
+        postUpdated: post,
+      });
+
+      return post;
+    },
+
+    addComment: async (parent, args, context) => {
+      const comment = await context.dataSources.comments.create(args.input);
+
+      await pubsub.publish(EVENTS.COMMENT_ADDED, {
+        commentAdded: comment,
+      });
+
+      return comment;
+    },
+  },
+};
+```
+
+## Advanced Filtering
+
+```typescript
+// Type-safe payload
+interface PostCreatedPayload {
+  postCreated: Post;
+  tags: string[];
+  isPublic: boolean;
+}
+
+const resolvers = {
+  Subscription: {
+    postCreated: {
+      subscribe: withFilter(
+        () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
+        async (
+          payload: PostCreatedPayload,
+          variables: { tags?: string[]; authorId?: string },
+          context: Context
+        ) => {
+          // Filter by tags
+          if (variables.tags && variables.tags.length > 0) {
+            const hasMatchingTag = payload.tags.some(tag =>
+              variables.tags!.includes(tag)
+            );
+            if (!hasMatchingTag) return false;
+          }
+
+          // Filter by author
+          if (variables.authorId) {
+            if (payload.postCreated.authorId !== variables.authorId) {
+              return false;
+            }
+          }
+
+          // Check permissions
+          if (!payload.isPublic) {
+            return (
+              context.user?.id === payload.postCreated.authorId ||
+              context.user?.isAdmin
+            );
+          }
+
+          return true;
+        }
+      ),
+    },
+  },
+};
+```
+
+## Connection Management
+
+```typescript
+import { useServer } from 'graphql-ws/lib/use/ws';
+
+const wsServer = useServer(
+  {
+    schema,
+
+    // Connection lifecycle
+    onConnect: async (ctx) => {
+      console.log('Client connected');
+      const token = ctx.connectionParams?.authorization;
+
+      if (!token) {
+        throw new Error('Missing auth token');
+      }
+
+      const user = await verifyToken(token);
+      if (!user) {
+        throw new Error('Invalid token');
+      }
+
+      return { user };
+    },
+
+    onDisconnect: (ctx, code, reason) => {
+      console.log('Client disconnected', code, reason);
+    },
+
+    // Subscription lifecycle
+    onSubscribe: async (ctx, msg) => {
+      console.log('Client subscribed', msg.payload.operationName);
+
+      // Rate limiting
+      const subscriptionCount = getUserSubscriptionCount(ctx.user.id);
+      if (subscriptionCount >= 10) {
+        throw new Error('Too many subscriptions');
+      }
+
+      return { ctx, msg };
+    },
+
+    onComplete: (ctx, msg) => {
+      console.log('Subscription completed', msg.id);
+    },
+
+    // Keep-alive
+    connectionInitWaitTimeout: 10000,
+
+    // Context per subscription
+    context: async (ctx, msg, args) => {
+      const user = ctx.extra.user;
+      return {
+        user,
+        dataSources: createDataSources(),
+        subscriptionId: msg.id,
+      };
+    },
+  },
+  wsServer
+);
+```
+
+## Subscription Patterns
+
+```typescript
+// Pattern 1: Entity updates
+type Subscription {
+  entityUpdated(id: ID!): Entity!
+}
+
+// Pattern 2: Collection updates
+type Subscription {
+  entityAdded: Entity!
+  entityDeleted: ID!
+}
+
+// Pattern 3: Stream of events
+type Subscription {
+  events(types: [EventType!]): Event!
+}
+
+// Pattern 4: Live query (with intervals)
+type Subscription {
+  liveQuery(query: String!): [SearchResult!]!
+}
+
+// resolvers.ts
+const resolvers = {
+  Subscription: {
+    // Live query implementation
+    liveQuery: {
+      subscribe: async function* (parent, args, context) {
+        while (true) {
+          const results = await context.dataSources.search(args.query);
+          yield { liveQuery: results };
+          await new Promise(resolve => setTimeout(resolve, 5000));
+        }
+      },
+    },
+  },
+};
+```
+
+## Error Handling
+
+```typescript
+const resolvers = {
+  Subscription: {
+    postCreated: {
+      subscribe: withFilter(
+        () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
+        async (payload, variables, context) => {
+          try {
+            // Check permissions
+            if (!context.user) {
+              throw new GraphQLError('Unauthorized', {
+                extensions: { code: 'UNAUTHENTICATED' },
+              });
+            }
+
+            return true;
+          } catch (error) {
+            // Log error but don't propagate to client
+            console.error('Subscription filter error:', error);
+            return false;
+          }
+        }
+      ),
+
+      // Resolve subscription payload
+      resolve: (payload) => {
+        try {
+          return payload.postCreated;
+        } catch (error) {
+          throw new GraphQLError('Failed to resolve subscription', {
+            extensions: { code: 'SUBSCRIPTION_RESOLVE_ERROR' },
+          });
+        }
+      },
+    },
+  },
+};
+```
+
+## Client Usage
+
+```typescript
+// Apollo Client setup
+import { ApolloClient, InMemoryCache, split, HttpLink } from '@apollo/client';
+import { GraphQLWsLink } from '@apollo/client/link/subscriptions';
+import { getMainDefinition } from '@apollo/client/utilities';
+import { createClient } from 'graphql-ws';
+
+const httpLink = new HttpLink({
+  uri: 'http://localhost:4000/graphql',
+});
+
+const wsLink = new GraphQLWsLink(
+  createClient({
+    url: 'ws://localhost:4000/graphql',
+    connectionParams: {
+      authorization: `Bearer ${token}`,
+    },
+  })
+);
+
+const splitLink = split(
+  ({ query }) => {
+    const definition = getMainDefinition(query);
+    return (
+      definition.kind === 'OperationDefinition' &&
+      definition.operation === 'subscription'
+    );
+  },
+  wsLink,
+  httpLink
+);
+
+const client = new ApolloClient({
+  link: splitLink,
+  cache: new InMemoryCache(),
+});
+
+// Subscribe to events
+const subscription = client
+  .subscribe({
+    query: gql`
+      subscription OnPostCreated {
+        postCreated {
+          id
+          title
+          author {
+            username
+          }
+        }
+      }
+    `,
+  })
+  .subscribe({
+    next: (data) => console.log('New post:', data),
+    error: (err) => console.error('Subscription error:', err),
+    complete: () => console.log('Subscription completed'),
+  });
+
+// Unsubscribe
+subscription.unsubscribe();
+```
+
+## Scaling Subscriptions
+
+```typescript
+// Use Redis for multi-instance deployments
+import { RedisPubSub } from 'graphql-redis-subscriptions';
+
+// Horizontal scaling pattern
+const pubsub = new RedisPubSub({
+  publisher: new Redis(redisConfig),
+  subscriber: new Redis(redisConfig),
+  // Channel prefix for isolation
+  publisherPrefix: 'graphql:pub:',
+  subscriberPrefix: 'graphql:sub:',
+});
+
+// Connection limit per instance
+const MAX_CONNECTIONS_PER_INSTANCE = 10000;
+
+// Load balancing with sticky sessions
+// Ensure same user connects to same server instance
+// for connection state management
+```
+
+## Subscription Best Practices
+
+1. **Authentication**: Always validate auth in onConnect and filters
+2. **Authorization**: Check permissions in withFilter
+3. **Rate Limiting**: Limit subscriptions per user
+4. **Filtering**: Use withFilter for server-side filtering
+5. **Cleanup**: Always clean up subscriptions on disconnect
+6. **Scaling**: Use Redis PubSub for multi-instance deployments
+7. **Error Handling**: Gracefully handle errors in filters and resolvers
+8. **Testing**: Test subscription lifecycle and filtering
+9. **Monitoring**: Track active connections and subscription count
+10. **Performance**: Avoid N+1 in subscription resolvers

package/workflows/workflows/agent-environment-setup/platforms/windsurf/skills/java-pro/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: "java-pro"
+description: "Use for modern Java backend and platform engineering with Java 25-era language/runtime practices."
+license: MIT
+metadata:
+  version: "1.0.0"
+  domain: "language"
+  role: "specialist"
+  stack: "java"
+  baseline: "Java SE 25"
+---
+
+# Java Pro
+
+## When to use
+
+- Building or modernizing Java backend services.
+- Designing JVM architecture for high-throughput systems.
+- Improving reliability, observability, and maintainability.
+
+## Core workflow
+
+1. Clarify runtime target and deployment constraints.
+2. Define module boundaries and API contracts.
+3. Implement with clear domain/service/infrastructure separation.
+4. Add tests and performance checks for critical paths.
+
+## Baseline standards
+
+- Use current LTS/JDK baseline approved by project policy.
+- Prefer records/sealed hierarchies where they simplify modeling.
+- Keep null-handling explicit; avoid silent NPE pathways.
+- Use structured logging and trace propagation.
+- Enforce dependency and API compatibility checks in CI.
+
+## Avoid
+
+- Monolithic service classes with mixed responsibilities.
+- Reflection-heavy magic when explicit code is clearer.
+- Leaking persistence entities directly into API contracts.

package/workflows/workflows/agent-environment-setup/platforms/windsurf/skills/javascript-pro/SKILL.md

@@ -1,85 +1,55 @@
 ---
-name: javascript-pro
-description: Use when building JavaScript applications with modern ES2023+ features, async patterns, or Node.js development. Invoke for vanilla JavaScript, browser APIs, performance optimization, module systems.
+name: "javascript-pro"
+description: "Use for modern JavaScript architecture and implementation across browser, Node, and edge runtimes with ES2025+ practices."
 license: MIT
 metadata:
-  author: https://github.com/Jeffallan
-  version: "1.0.0"
-  domain: language
-  triggers: JavaScript, ES2023, async await, Node.js, vanilla JavaScript, Web Workers, Fetch API, browser API, module system
-  role: specialist
-  scope: implementation
-  output-format: code
-  related-skills: fullstack-guardian
+  version: "2.0.0"
+  domain: "language"
+  role: "specialist"
+  stack: "javascript"
+  baseline: "ES2025+"
 ---
 
 # JavaScript Pro
 
-Senior JavaScript developer with 10+ years mastering modern ES2023+ features, asynchronous patterns, and full-stack JavaScript development.
+## When to use
 
-## Role Definition
+- Implementing feature work in plain JavaScript.
+- Refactoring legacy JS toward modern modules and async flows.
+- Improving performance and reliability in browser/Node runtimes.
 
-You are a senior JavaScript engineer with 10+ years of experience. You specialize in modern ES2023+ JavaScript, Node.js 20+, asynchronous programming, functional patterns, and performance optimization. You build clean, maintainable code following modern best practices.
+## Core workflow
 
-## When to Use This Skill
+1. Confirm runtime constraints (browser targets, Node/edge version).
+2. Choose module boundaries and async strategy.
+3. Implement with explicit error and cancellation handling.
+4. Verify behavior with tests and runtime checks.
 
-- Building vanilla JavaScript applications
-- Implementing async/await patterns and Promise handling
-- Working with modern module systems (ESM/CJS)
-- Optimizing browser performance and memory usage
-- Developing Node.js backend services
-- Implementing Web Workers, Service Workers, or browser APIs
+## Baseline standards
 
-## Core Workflow
+- Prefer ESM for new code unless compatibility blocks it.
+- Use `AbortSignal` for cancellable async operations.
+- Keep side effects at edges; pure logic in reusable modules.
+- Validate untrusted input at boundaries.
+- Keep dependency surface intentionally small.
 
-1. **Analyze requirements** - Review package.json, module system, Node version, browser targets
-2. **Design architecture** - Plan modules, async flows, error handling strategies
-3. **Implement** - Write ES2023+ code with proper patterns and optimizations
-4. **Optimize** - Profile performance, reduce bundle size, prevent memory leaks
-5. **Test** - Write comprehensive tests with Jest achieving 85%+ coverage
+## Implementation guidance
 
-## Reference Guide
+- Use `Promise.all` for independent parallel operations.
+- Use structured logging and consistent error shapes.
+- Use streams for large payloads to avoid memory spikes.
+- Use feature detection, not UA sniffing, in browser code.
 
-Load detailed guidance based on context:
+## Avoid
 
-| Topic | Reference | Load When |
-|-------|-----------|-----------|
-| Modern Syntax | `references/modern-syntax.md` | ES2023+ features, optional chaining, private fields |
-| Async Patterns | `references/async-patterns.md` | Promises, async/await, error handling, event loop |
-| Modules | `references/modules.md` | ESM vs CJS, dynamic imports, package.json exports |
-| Browser APIs | `references/browser-apis.md` | Fetch, Web Workers, Storage, IntersectionObserver |
-| Node Essentials | `references/node-essentials.md` | fs/promises, streams, EventEmitter, worker threads |
+- Silent promise rejections.
+- Heavy framework coupling in low-level modules.
+- Copy-paste utility proliferation without consolidation.
 
-## Constraints
+## Reference files
 
-### MUST DO
-- Use ES2023+ features exclusively
-- Use `X | null` or `X | undefined` patterns
-- Use optional chaining (`?.`) and nullish coalescing (`??`)
-- Use async/await for all asynchronous operations
-- Use ESM (`import`/`export`) for new projects
-- Implement proper error handling with try/catch
-- Add JSDoc comments for complex functions
-- Follow functional programming principles
-
-### MUST NOT DO
-- Use `var` (always use `const` or `let`)
-- Use callback-based patterns (prefer Promises)
-- Mix CommonJS and ESM in same module
-- Ignore memory leaks or performance issues
-- Skip error handling in async functions
-- Use synchronous I/O in Node.js
-- Mutate function parameters
-- Create blocking operations in browser
-
-## Output Templates
-
-When implementing JavaScript features, provide:
-1. Module file with clean exports
-2. Test file with comprehensive coverage
-3. JSDoc documentation for public APIs
-4. Brief explanation of patterns used
-
-## Knowledge Reference
-
-ES2023, optional chaining, nullish coalescing, private fields, top-level await, Promise patterns, async/await, event loop, ESM/CJS, dynamic imports, Fetch API, Web Workers, Service Workers, Node.js streams, EventEmitter, memory optimization, functional programming
+- `references/modern-syntax.md`
+- `references/async-patterns.md`
+- `references/modules.md`
+- `references/browser-apis.md`
+- `references/node-essentials.md`