@jaguilar87/gaia-ops 4.4.0 → 4.7.2

package/dist/gaia-ops/config/cloud/aws.json

@@ -0,0 +1,140 @@
+{
+  "version": "2.0",
+  "provider": "aws",
+  "description": "AWS-specific context extensions. Merged on top of context-contracts.json at runtime by context_provider.py.",
+  "agents": {
+    "cloud-troubleshooter": {
+      "read": [
+        "vpc_mapping",
+        "load_balancers",
+        "api_gateway",
+        "irsa_bindings",
+        "aws_accounts"
+      ],
+      "write": [
+        "vpc_mapping",
+        "load_balancers",
+        "irsa_bindings"
+      ]
+    },
+    "terraform-architect": {
+      "read": [
+        "vpc_mapping",
+        "load_balancers",
+        "api_gateway",
+        "irsa_bindings",
+        "aws_accounts"
+      ],
+      "write": [
+        "vpc_mapping",
+        "load_balancers",
+        "api_gateway",
+        "irsa_bindings"
+      ]
+    },
+    "gitops-operator": {
+      "read": [
+        "irsa_bindings"
+      ],
+      "write": []
+    },
+    "devops-developer": {
+      "read": [
+        "aws_accounts",
+        "load_balancers"
+      ],
+      "write": []
+    },
+    "speckit-planner": {
+      "read": [
+        "aws_accounts"
+      ],
+      "write": []
+    }
+  },
+  "section_schemas": {
+    "aws_accounts": {
+      "_description": "AWS account IDs by environment. AWS projects often use multiple accounts (prod, dev, shared services).",
+      "production": {
+        "account_id": "",
+        "account_alias": "",
+        "region": "us-east-1"
+      },
+      "development": {
+        "account_id": "",
+        "account_alias": "",
+        "region": "us-east-1"
+      },
+      "shared": {
+        "account_id": "",
+        "account_alias": "",
+        "purpose": "Shared services (ECR, shared EKS, tooling)"
+      }
+    },
+    "vpc_mapping": {
+      "_description": "AWS VPC topology per environment, including subnets and AZ mapping",
+      "vpcs": [
+        {
+          "vpc_id": "",
+          "name": "",
+          "environment": "production",
+          "region": "us-east-1",
+          "cidr": "10.0.0.0/16",
+          "subnets": {
+            "private": [],
+            "public": []
+          },
+          "availability_zones": [],
+          "clusters": [],
+          "status": "ACTIVE"
+        }
+      ]
+    },
+    "load_balancers": {
+      "_description": "AWS NLB and ALB resources by service and cluster",
+      "_example": {
+        "my-service-nlb-prod": {
+          "name": "my-service-nlb-prod",
+          "type": "network",
+          "scheme": "internal",
+          "dns": "xxxx.elb.us-east-1.amazonaws.com",
+          "service": "my-service",
+          "namespace": "my-namespace",
+          "cluster": "my-eks-cluster",
+          "purpose": ""
+        }
+      }
+    },
+    "api_gateway": {
+      "_description": "AWS API Gateway V2 (HTTP/WebSocket) configurations and VPC Links",
+      "vpc_links": {
+        "_example_key": {
+          "id": "",
+          "status": "ACTIVE",
+          "target_nlb": "",
+          "target_nlb_dns": "",
+          "backend_service": "",
+          "namespace": "",
+          "cluster": "",
+          "host": "",
+          "purpose": ""
+        }
+      },
+      "apis": []
+    },
+    "irsa_bindings": {
+      "_description": "IAM Roles for Service Accounts (OIDC-based). AWS equivalent of GCP Workload Identity.",
+      "_example": {
+        "my-service-sa": {
+          "kubernetes_sa": "my-service-sa",
+          "namespace": "my-namespace",
+          "iam_role_arn": "arn:aws:iam::123456789012:role/my-service-role",
+          "iam_policies": [
+            "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"
+          ],
+          "purpose": "Describe what this service account does"
+        }
+      }
+    }
+  }
+}

package/dist/gaia-ops/config/cloud/gcp.json

@@ -0,0 +1,145 @@
+{
+  "version": "2.0",
+  "provider": "gcp",
+  "description": "GCP-specific context extensions. Merged on top of context-contracts.json at runtime by context_provider.py.",
+  "agents": {
+    "cloud-troubleshooter": {
+      "read": [
+        "gcp_services",
+        "workload_identity",
+        "static_ips"
+      ],
+      "write": [
+        "gcp_services",
+        "workload_identity",
+        "static_ips"
+      ]
+    },
+    "terraform-architect": {
+      "read": [
+        "gcp_services",
+        "workload_identity",
+        "static_ips"
+      ],
+      "write": [
+        "gcp_services",
+        "workload_identity",
+        "static_ips"
+      ]
+    },
+    "gitops-operator": {
+      "read": [
+        "workload_identity",
+        "gcp_services"
+      ],
+      "write": []
+    },
+    "devops-developer": {
+      "read": [
+        "gcp_services"
+      ],
+      "write": []
+    },
+    "speckit-planner": {
+      "read": [
+        "gcp_services"
+      ],
+      "write": []
+    }
+  },
+  "section_schemas": {
+    "gcp_services": {
+      "_description": "GCP-managed services used by the project (Artifact Registry, Cloud SQL, Memorystore, etc.)",
+      "artifact_registry": {
+        "repositories": [
+          {
+            "name": "",
+            "location": "",
+            "format": "DOCKER",
+            "project": "",
+            "url": ""
+          }
+        ]
+      },
+      "cloud_sql": {
+        "instances": [
+          {
+            "name": "",
+            "version": "POSTGRES_15",
+            "tier": "db-f1-micro",
+            "region": "",
+            "database_flags": {},
+            "status": ""
+          }
+        ]
+      },
+      "memorystore": {
+        "instances": [
+          {
+            "name": "",
+            "tier": "BASIC",
+            "memory_size_gb": 1,
+            "region": "",
+            "status": ""
+          }
+        ]
+      },
+      "cloud_storage": {
+        "buckets": [
+          {
+            "name": "",
+            "location": "",
+            "storage_class": "STANDARD",
+            "purpose": ""
+          }
+        ]
+      },
+      "secret_manager": {
+        "enabled": true,
+        "secrets": []
+      },
+      "pubsub": {
+        "topics": [],
+        "subscriptions": []
+      },
+      "cloud_nat": {
+        "name": "",
+        "router": "",
+        "region": "",
+        "status": ""
+      }
+    },
+    "workload_identity": {
+      "_description": "GCP Workload Identity bindings: Kubernetes ServiceAccount -> GCP ServiceAccount with IAM roles",
+      "_example": {
+        "my-service-sa": {
+          "kubernetes_sa": "my-service-sa",
+          "namespace": "my-namespace",
+          "gcp_sa": "my-service-sa@project-id.iam.gserviceaccount.com",
+          "iam_roles": [
+            "roles/cloudsql.client",
+            "roles/secretmanager.secretAccessor",
+            "roles/artifactregistry.reader"
+          ],
+          "purpose": "Describe what this service account does"
+        }
+      }
+    },
+    "static_ips": {
+      "_description": "GCP global and regional static IP addresses used for Ingress and services",
+      "_example": {
+        "my-service-ip": {
+          "name": "my-service-ip",
+          "address": "34.x.x.x",
+          "type": "global",
+          "purpose": "Ingress for my-service",
+          "dns_records": [
+            "my-service.example.com"
+          ],
+          "ssl_certificates": "Active until YYYY-MM-DD",
+          "status": ""
+        }
+      }
+    }
+  }
+}

package/dist/gaia-ops/config/context-contracts.json

@@ -0,0 +1,131 @@
+{
+  "version": "4.0",
+  "description": "Context contracts v4: universal core sections + agent-specific ops sections + workspace_repos. Core sections are granted to every agent. Cloud-specific extensions live in cloud/{provider}.json.",
+  "core_sections": [
+    "project_identity",
+    "stack",
+    "git",
+    "environment",
+    "application_services",
+    "architecture_overview",
+    "operational_guidelines"
+  ],
+  "section_schemas": {
+    "workspace_repos": {
+      "description": "Array of repositories in a multi-repo workspace",
+      "schema": {
+        "repos": [
+          {
+            "name": "string",
+            "path": "string (relative to workspace root)",
+            "remote_url": "string",
+            "platform": "string (github/gitlab/bitbucket)",
+            "role": "string (gitops/iac/platform/agent/library)",
+            "primary_language": "string"
+          }
+        ]
+      }
+    }
+  },
+  "agents": {
+    "cloud-troubleshooter": {
+      "read": [
+        "project_identity",
+        "stack",
+        "git",
+        "environment",
+        "application_services",
+        "architecture_overview",
+        "operational_guidelines",
+        "infrastructure",
+        "orchestration",
+        "cluster_details",
+        "infrastructure_topology",
+        "terraform_infrastructure",
+        "gitops_configuration",
+        "monitoring_observability",
+        "workspace_repos"
+      ],
+      "write": [
+        "cluster_details",
+        "infrastructure_topology",
+        "application_services",
+        "monitoring_observability",
+        "architecture_overview"
+      ]
+    },
+    "gitops-operator": {
+      "read": [
+        "project_identity",
+        "stack",
+        "git",
+        "environment",
+        "application_services",
+        "architecture_overview",
+        "operational_guidelines",
+        "infrastructure",
+        "orchestration",
+        "gitops_configuration",
+        "cluster_details",
+        "workspace_repos"
+      ],
+      "write": [
+        "gitops_configuration",
+        "cluster_details",
+        "application_services"
+      ]
+    },
+    "terraform-architect": {
+      "read": [
+        "project_identity",
+        "stack",
+        "git",
+        "environment",
+        "application_services",
+        "architecture_overview",
+        "operational_guidelines",
+        "infrastructure",
+        "orchestration",
+        "terraform_infrastructure",
+        "infrastructure_topology",
+        "cluster_details",
+        "workspace_repos"
+      ],
+      "write": [
+        "terraform_infrastructure",
+        "infrastructure_topology"
+      ]
+    },
+    "devops-developer": {
+      "read": [
+        "project_identity",
+        "stack",
+        "git",
+        "environment",
+        "application_services",
+        "architecture_overview",
+        "operational_guidelines",
+        "infrastructure",
+        "workspace_repos"
+      ],
+      "write": [
+        "application_services",
+        "architecture_overview"
+      ]
+    },
+    "speckit-planner": {
+      "read": [
+        "project_identity",
+        "stack",
+        "git",
+        "environment",
+        "application_services",
+        "architecture_overview",
+        "operational_guidelines",
+        "infrastructure",
+        "workspace_repos"
+      ],
+      "write": []
+    }
+  }
+}

package/dist/gaia-ops/config/git_standards.json

@@ -0,0 +1,72 @@
+{
+  "commit_message": {
+    "format": "conventional_commits",
+    "description": "Commit messages must follow Conventional Commits specification",
+
+    "type_allowed": [
+      "feat",
+      "fix",
+      "refactor",
+      "docs",
+      "test",
+      "chore",
+      "ci",
+      "perf",
+      "style",
+      "build"
+    ],
+
+    "scope_required": false,
+    "scope_examples": ["helmrelease", "terraform", "pg-non-prod", "infrastructure"],
+
+    "subject_max_length": 72,
+    "subject_rules": {
+      "capitalize_first_letter": false,
+      "no_period_at_end": true,
+      "imperative_mood": true,
+      "no_emoji": true
+    },
+
+    "body_max_line_length": 72,
+    "body_required": false,
+
+    "footer_forbidden": [
+      "Generated with Claude Code",
+      "Co-Authored-By: Claude",
+      "🤖 Generated with"
+    ],
+
+    "footer_allowed": [
+      "BREAKING CHANGE:",
+      "Refs:",
+      "Closes:",
+      "Fixes:",
+      "Implements:",
+      "See:"
+    ],
+
+    "examples_valid": [
+      "feat(helmrelease): add Phase 3.3 services",
+      "fix(pg-non-prod): correct API key environment variable mappings",
+      "refactor: simplify context provider logic",
+      "docs: update README with new workflow",
+      "chore(deps): update terraform to v1.6.0"
+    ],
+
+    "examples_invalid": [
+      "Added new feature",
+      "Fixed bugs",
+      "Updates",
+      "feat: add feature\n\n🤖 Generated with Claude Code",
+      "feat: add new feature 🚀",
+      "fix: 🐛 correct bug"
+    ]
+  },
+
+  "enforcement": {
+    "enabled": true,
+    "block_on_failure": true,
+    "log_violations": true,
+    "log_path": ".claude/logs/commit-violations.jsonl"
+  }
+}

package/dist/gaia-ops/config/surface-routing.json

@@ -0,0 +1,197 @@
+{
+  "version": "1.0",
+  "reconnaissance_agent": "devops-developer",
+  "surfaces": {
+    "live_runtime": {
+      "primary_agent": "cloud-troubleshooter",
+      "adjacent_surfaces": ["gitops_desired_state", "terraform_iac"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "orchestration", "cluster_details", "monitoring_observability", "application_services", "infrastructure_topology", "architecture_overview"],
+      "required_checks": [
+        "Prefer read-only live validation when runtime state is the question",
+        "Capture the exact diagnostic command and the key output that changed your conclusion",
+        "Compare actual state against desired state when manifests or IaC are implicated"
+      ],
+      "signals": {
+        "keywords": [
+          "live cluster",
+          "runtime drift",
+          "pod",
+          "pods",
+          "logs",
+          "incident",
+          "crashloopbackoff",
+          "imagepullbackoff",
+          "service unavailable",
+          "latency",
+          "outage",
+          "runtime"
+        ],
+        "commands": ["kubectl", "gcloud", "aws", "eksctl", "gsutil"],
+        "artifacts": ["pod", "service", "ingress", "node pool", "cluster"]
+      }
+    },
+    "gitops_desired_state": {
+      "primary_agent": "gitops-operator",
+      "adjacent_surfaces": ["live_runtime", "terraform_iac", "app_ci_tooling"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "orchestration", "gitops_configuration", "cluster_details", "application_services", "operational_guidelines", "architecture_overview"],
+      "required_checks": [
+        "Search existing manifests and neighboring GitOps resources before proposing changes",
+        "Check desired state against runtime symptoms when the task smells like drift",
+        "Surface any deployment/runtime contract that another surface must validate"
+      ],
+      "signals": {
+        "keywords": [
+          "gitops",
+          "flux",
+          "helm",
+          "kustomize",
+          "manifest",
+          "deployment",
+          "state in git",
+          "desired state",
+          "helmrelease",
+          "kustomization",
+          "rollout",
+          "configmap",
+          "ingress"
+        ],
+        "commands": ["helm", "flux", "kustomize", "kubectl diff", "kubectl apply --dry-run"],
+        "artifacts": ["yaml", "manifest", "helmrelease", "kustomization", "deployment", "service", "ingress"]
+      }
+    },
+    "terraform_iac": {
+      "primary_agent": "terraform-architect",
+      "adjacent_surfaces": ["gitops_desired_state", "app_ci_tooling", "live_runtime"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "orchestration", "terraform_infrastructure", "infrastructure_topology", "cluster_details", "application_services", "architecture_overview"],
+      "required_checks": [
+        "Compare against 2-3 sibling modules or stacks before introducing new structure",
+        "Call out blast radius when the change touches shared modules, IAM, or stateful resources",
+        "State clearly which live/runtime or GitOps surfaces must cross-check the result"
+      ],
+      "signals": {
+        "keywords": [
+          "terraform",
+          "terragrunt",
+          "iac",
+          "iam",
+          "bucket",
+          "state",
+          "module",
+          "service account",
+          "workload identity",
+          "secret manager",
+          "vpc",
+          "subnet",
+          "policy"
+        ],
+        "commands": ["terraform", "terragrunt", "tflint"],
+        "artifacts": [".tf", ".hcl", "module", "terragrunt.hcl", "provider", "backend"]
+      }
+    },
+    "app_ci_tooling": {
+      "primary_agent": "devops-developer",
+      "adjacent_surfaces": ["terraform_iac", "gitops_desired_state"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "application_services", "operational_guidelines", "architecture_overview"],
+      "required_checks": [
+        "Search for existing application, CI, and developer workflow patterns before changing build or runtime behavior",
+        "Surface deployment, runtime, or infrastructure implications instead of treating the task as app-only by default",
+        "Include exact build, test, or verification commands whenever they informed the conclusion"
+      ],
+      "signals": {
+        "keywords": [
+          "ci",
+          "cd",
+          "pipeline",
+          "docker",
+          "dockerfile",
+          "build",
+          "test",
+          "lint",
+          "package",
+          "npm",
+          "pnpm",
+          "yarn",
+          "turbo",
+          "turborepo",
+          "remote cache",
+          "application code",
+          "env var",
+          "environment variable"
+        ],
+        "commands": ["npm", "pnpm", "yarn", "node", "pytest", "jest", "eslint", "prettier", "turbo", "docker"],
+        "artifacts": ["package.json", "Dockerfile", "workflow", "pipeline", "tests", "src/"]
+      }
+    },
+    "planning_specs": {
+      "primary_agent": "speckit-planner",
+      "adjacent_surfaces": ["app_ci_tooling", "gaia_system"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "operational_guidelines", "application_services", "architecture_overview"],
+      "required_checks": [
+        "Keep planning artifacts aligned with governance and project context",
+        "Tag adjacent surfaces explicitly when the plan crosses infra, runtime, or app boundaries",
+        "Do not silently choose an implementation path when multiple valid options remain"
+      ],
+      "signals": {
+        "keywords": [
+          "spec",
+          "plan",
+          "tasks",
+          "research",
+          "data-model",
+          "acceptance criteria",
+          "feature breakdown",
+          "workflow phase",
+          "speckit",
+          "specification",
+          "specify",
+          "task generation",
+          "implementation plan",
+          "feature planning",
+          "pre-implementation",
+          "feature spec",
+          "task breakdown"
+        ],
+        "commands": ["/speckit.plan", "/speckit.tasks", "/speckit.init", "/speckit.add-task", "/speckit.analyze-task"],
+        "artifacts": ["spec.md", "plan.md", "tasks.md", "research.md", "data-model.md", "governance.md"]
+      }
+    },
+    "gaia_system": {
+      "primary_agent": "gaia-system",
+      "adjacent_surfaces": ["app_ci_tooling"],
+      "contract_sections": ["project_identity", "stack", "git", "environment", "infrastructure", "orchestration", "operational_guidelines", "architecture_overview"],
+      "required_checks": [
+        "Keep hooks, skills, templates, and tests aligned as one system",
+        "Check for duplicated contract text or diverging runtime/prompt behavior",
+        "Call out any cross-agent or cross-hook impact explicitly"
+      ],
+      "signals": {
+        "keywords": [
+          "hook",
+          "hooks",
+          "skill",
+          "skills",
+          "agent",
+          "agents",
+          "claude.md",
+          "project context",
+          "orchestrator",
+          "context provider",
+          "response contract",
+          "pre_tool_use",
+          "subagent_stop",
+          "gaia",
+          "scanner",
+          "contract",
+          "project-context",
+          "project-context.json",
+          "dispatch",
+          "routing",
+          "identity",
+          "meta-agent"
+        ],
+        "commands": [],
+        "artifacts": ["hooks/", "skills/", "agents/", "templates/", "claude.md", "project-context.json"]
+      }
+    }
+  }
+}

package/dist/gaia-ops/config/universal-rules.json

@@ -0,0 +1,10 @@
+{
+  "rules": {
+    "universal": [
+      {
+        "rule": "Your prompt includes a Project Context section with confirmed project knowledge. Extract relevant data from it BEFORE executing commands."
+      }
+    ],
+    "agent_specific": {}
+  }
+}