@nockdev/awf 6.2.0 → 6.2.1

package/.agent/skills/devops/azure/SKILL.md

@@ -0,0 +1,43 @@
+# Microsoft Azure
+
+> Azure Functions • Azure DevOps • Cosmos DB • AKS
+
+---
+
+## Khi Nào Dùng
+
+- Deploy serverless functions (Azure Functions)
+- CI/CD pipelines (Azure DevOps)
+- NoSQL database (Cosmos DB)
+- Enterprise app deployment
+
+## Service Selection
+
+| Service             | Type                 | Best For               |
+| ------------------- | -------------------- | ---------------------- |
+| **Azure Functions** | Serverless functions | Event-driven, webhooks |
+| **App Service**     | Managed web apps     | APIs, web apps         |
+| **AKS**             | Managed Kubernetes   | Microservices          |
+| **Cosmos DB**       | Multi-model NoSQL    | Global distribution    |
+| **Azure SQL**       | Managed SQL          | Relational data        |
+
+## Azure Functions Quick Start
+
+```bash
+func init MyProject --typescript
+func new --name HttpTrigger --template "HTTP trigger"
+func start  # Local development
+az functionapp publish MyFunctionApp  # Deploy
+```
+
+## Common Traps
+
+| Trap            | Fix                                          |
+| --------------- | -------------------------------------------- |
+| Cold starts     | Premium plan, keep-alive pings               |
+| Entra ID config | Use managed identity, DefaultAzureCredential |
+| Cost management | Azure Cost Management + budget alerts        |
+
+---
+
+_DOMYH Awesome Code • Azure Skill v1.0.0_

package/.agent/skills/devops/azure/data/cli.yaml

@@ -0,0 +1,69 @@
+# Azure CLI Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-CLI-001
+    name: az Essential Commands
+    category: cli
+    description: |
+      Most common Azure CLI commands.
+    text: |
+      # Auth & Config
+      az login
+      az account set --subscription "my-sub"
+      az account show
+      az group list
+
+      # Resource management
+      az group create --name my-rg --location eastus
+      az resource list --resource-group my-rg
+
+      # Container Registry
+      az acr create --resource-group my-rg --name myregistry --sku Basic
+      az acr login --name myregistry
+
+      # Key Vault
+      az keyvault create --name my-kv --resource-group my-rg
+      az keyvault secret set --name MySecret --value "secret-value" --vault-name my-kv
+      az keyvault secret show --name MySecret --vault-name my-kv
+
+  - id: AZ-CLI-002
+    name: az Output & Query
+    category: cli
+    description: |
+      Format and query Azure CLI output.
+    text: |
+      --output json    → JSON output (default)
+      --output table   → Table format
+      --output tsv     → Tab-separated values
+      --query          → JMESPath query
+
+      Examples:
+      az vm list --query "[].{Name:name, State:powerState}" --output table
+      az webapp list --query "[?resourceGroup=='my-rg'].name" --output tsv
+
+  - id: AZ-CLI-003
+    name: Bicep (ARM Alternative)
+    category: iac
+    description: |
+      Azure-native IaC language (alternative to Terraform for Azure-only).
+    example: |
+      // main.bicep
+      param location string = resourceGroup().location
+      param appName string
+
+      resource appServicePlan 'Microsoft.Web/serverfarms@2023-01-01' = {
+        name: '${appName}-plan'
+        location: location
+        sku: { name: 'B1', tier: 'Basic' }
+      }
+
+      resource webApp 'Microsoft.Web/sites@2023-01-01' = {
+        name: appName
+        location: location
+        properties: {
+          serverFarmId: appServicePlan.id
+        }
+      }
+
+      // Deploy: az deployment group create --resource-group my-rg --template-file main.bicep

package/.agent/skills/devops/azure/data/compute.yaml

@@ -0,0 +1,83 @@
+# Azure Compute Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-CMP-001
+    name: Azure Functions
+    category: serverless
+    description: |
+      Azure serverless functions.
+    example: |
+      // TypeScript HTTP trigger
+      import { app, HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+
+      export async function httpTrigger(
+        request: HttpRequest,
+        context: InvocationContext
+      ): Promise<HttpResponseInit> {
+        const name = request.query.get("name") || (await request.text());
+        return { body: `Hello, ${name}!` };
+      }
+
+      app.http("httpTrigger", {
+        methods: ["GET", "POST"],
+        authLevel: "anonymous",
+        handler: httpTrigger
+      });
+
+  - id: AZ-CMP-002
+    name: Azure Container Apps
+    category: containers
+    description: |
+      Serverless containers on Azure.
+    text: |
+      Similar to Cloud Run.
+      Auto-scaling, Dapr integration, revision management.
+    example: |
+      az containerapp create \
+        --name my-api \
+        --resource-group my-rg \
+        --environment my-env \
+        --image myregistry.azurecr.io/api:latest \
+        --target-port 3000 \
+        --ingress external \
+        --min-replicas 1 \
+        --max-replicas 10
+
+  - id: AZ-CMP-003
+    name: Azure App Service
+    category: paas
+    description: |
+      Platform-as-a-Service for web apps.
+    text: |
+      Supports: .NET, Node.js, Python, Java, PHP, Ruby
+      Features: Deployment slots, auto-scale, custom domains, SSL
+
+      az webapp create --name my-webapp --resource-group my-rg --plan my-plan
+
+  - id: AZ-CMP-004
+    name: AKS (Azure Kubernetes)
+    category: kubernetes
+    description: |
+      Managed Kubernetes on Azure.
+    text: |
+      az aks create --resource-group my-rg --name my-cluster \
+        --node-count 3 --generate-ssh-keys \
+        --tier standard
+
+      az aks get-credentials --resource-group my-rg --name my-cluster
+      kubectl get nodes
+
+  - id: AZ-CMP-005
+    name: Service Selection
+    category: comparison
+    description: |
+      Azure compute service comparison.
+    text: |
+      | Service | Best For | Scale | Cost Model |
+      |---------|----------|-------|-----------|
+      | Functions | Events | Auto | Per execution |
+      | Container Apps | Containers | Auto | Per vCPU/memory |
+      | App Service | Web apps | Auto | Per plan |
+      | AKS | Complex apps | Semi-auto | Per node |
+      | VMs | Custom | Manual | Per hour |

package/.agent/skills/devops/azure/data/data-services.yaml

@@ -0,0 +1,126 @@
+# Azure Data Services — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-DAT-001
+    name: Cosmos DB
+    category: database
+    description: |
+      Multi-model globally distributed database.
+    example: |
+      import { CosmosClient } from "@azure/cosmos";
+
+      const client = new CosmosClient({ endpoint: "...", key: "..." });
+      const database = client.database("mydb");
+      const container = database.container("items");
+
+      // Create
+      await container.items.create({
+        id: "item1", category: "electronics", name: "Laptop", price: 999
+      });
+
+      // Query
+      const { resources } = await container.items
+        .query("SELECT * FROM c WHERE c.category = @cat", [
+          { name: "@cat", value: "electronics" }
+        ])
+        .fetchAll();
+
+  - id: AZ-DAT-002
+    name: Azure Storage
+    category: storage
+    description: |
+      Blob, Queue, Table, and File storage.
+    example: |
+      import { BlobServiceClient } from "@azure/storage-blob";
+
+      const blobService = BlobServiceClient.fromConnectionString(connStr);
+      const container = blobService.getContainerClient("uploads");
+
+      // Upload
+      const blockBlob = container.getBlockBlobClient("file.pdf");
+      await blockBlob.uploadFile("./local-file.pdf");
+
+      // Download
+      await blockBlob.downloadToFile("./downloaded.pdf");
+
+      // SAS token (temporary access)
+      const sasUrl = generateBlobSASQueryParameters({ ... });
+
+  - id: AZ-DAT-003
+    name: Azure Service Bus
+    category: messaging
+    description: |
+      Enterprise message broker with queues and topics.
+    example: |
+      import { ServiceBusClient } from "@azure/service-bus";
+
+      const client = new ServiceBusClient(connStr);
+
+      // Send
+      const sender = client.createSender("orders-queue");
+      await sender.sendMessages({ body: { orderId: "123", amount: 99.99 } });
+
+      // Receive
+      const receiver = client.createReceiver("orders-queue");
+      const messages = await receiver.receiveMessages(10, { maxWaitTimeInMs: 5000 });
+      for (const msg of messages) {
+        processOrder(msg.body);
+        await receiver.completeMessage(msg);
+      }
+
+  - id: AZ-DAT-004
+    name: Entra ID (Azure AD)
+    category: security
+    description: |
+      Identity and access management.
+    text: |
+      Key concepts:
+      - Tenants: Organization directory
+      - App registrations: OAuth2 apps
+      - Managed Identity: No credentials for Azure services
+      - RBAC: Role-based access control
+
+      Best practice: Use Managed Identity for service-to-service auth
+    example: |
+      import { DefaultAzureCredential } from "@azure/identity";
+
+      // Uses Managed Identity in Azure, CLI creds locally
+      const credential = new DefaultAzureCredential();
+
+  - id: AZ-DAT-005
+    name: Azure DevOps Pipelines
+    category: ci-cd
+    description: |
+      CI/CD pipelines with Azure DevOps.
+    example: |
+      # azure-pipelines.yml
+      trigger: [main]
+      pool:
+        vmImage: 'ubuntu-latest'
+
+      stages:
+        - stage: Build
+          jobs:
+            - job: Build
+              steps:
+                - task: NodeTool@0
+                  inputs: { versionSpec: '20.x' }
+                - script: npm ci
+                - script: npm test
+                - script: npm run build
+        
+        - stage: Deploy
+          dependsOn: Build
+          condition: succeeded()
+          jobs:
+            - deployment: Deploy
+              environment: production
+              strategy:
+                runOnce:
+                  deploy:
+                    steps:
+                      - task: AzureWebApp@1
+                        inputs:
+                          azureSubscription: 'my-subscription'
+                          appName: 'my-webapp'

package/.agent/skills/devops/ci-cd/META.yaml

@@ -1,21 +1,54 @@
-name: ci-cd
-version: "6.2.0"
-display: CI/CD Pipelines
-category: devops
-tier: 1
-priority: 1
+name: ci-cd
+version: "6.2.1"
+category: infrastructure
+tier: 3
 
-desc: "CI/CD pipeline patterns for GitHub Actions, GitLab CI, Azure DevOps, Jenkins. Covers automation, deployment strategies, security scanning."
+desc: "CI/CD pipeline patterns for GitHub Actions, GitLab CI, and GitOps. Includes SLSA Build Level 3, ARM64 runners, security scanning."
+
+patterns:
+  total: 20
+  domains:
+    github-actions: 6
+    gitlab-ci: 5
+    security: 5
+    deployment: 4
+
+    - ".github/workflows/*.yml"
+    - ".gitlab-ci.yml"
+    - "Jenkinsfile"
+    - "azure-pipelines.yml"
+    - ".circleci/config.yml"
+  keywords:
+    # General
+    - ci cd
+    - pipeline
+    - continuous integration
+    - continuous deployment
+    - workflow
+    # GitHub Actions
+    - github actions
+    - actions workflow
+    - reusable workflow
+    - composite action
+    - arm64 runner
+    - slsa attestation
+    # Security
+    - dependency review
+    - code scanning
+    - secret scanning
+    - artifact attestation
+    - supply chain
+  intents:
+    - create pipeline
+    - setup ci
+    - deploy workflow
+    - secure pipeline
 
 related_skills:
   - docker
   - kubernetes
+  - aws
   - security
 
-caps:
-  - GitHub Actions (matrix, reusable, OIDC)
-  - GitLab CI (stages, artifacts)
-  - Azure DevOps (multi-stage)
-  - Jenkins (Declarative pipelines)
-  - Security scanning (SAST, DAST)
-  - Progressive deployment
+prevent_confusion_with:
+  - aws: "ci-cd is platform-agnostic, aws covers AWS-specific deployment"

package/.agent/skills/devops/docker/META.yaml

@@ -1,20 +1,59 @@
-name: docker
-version: "6.2.0"
-display: Docker
-category: devops
-tier: 1
-priority: 1
+name: docker
+version: "6.2.1"
+category: infrastructure
+tier: 3
 
-desc: "Container orchestration with Docker 28+ and Compose V3. Covers multi-stage builds, security, networking, volumes."
+desc: "Docker containerization patterns for builds, security, and deployment. Covers Compose v5, Hardened Images, Build Cloud, Bake."
+
+patterns:
+  total: 18
+  domains:
+    build: 5
+    compose: 5
+    security: 4
+    runtime: 4
+
+    - "Dockerfile"
+    - "Dockerfile.*"
+    - "docker-compose.yml"
+    - "compose.yml"
+    - "docker-bake.hcl"
+  keywords:
+    # Docker
+    - docker
+    - dockerfile
+    - container
+    - image
+    - docker build
+    - docker run
+    # Compose
+    - docker compose
+    - compose
+    - multicontainer
+    - services
+    - compose v5
+    # Build
+    - buildx
+    - multi-stage
+    - buildkit
+    - docker bake
+    - build cloud
+    # Security
+    - hardened image
+    - rootless
+    - distroless
+    - container security
+  intents:
+    - create dockerfile
+    - optimize docker
+    - secure container
+    - docker compose
 
 related_skills:
   - kubernetes
   - ci-cd
-  - go
+  - aws
+  - security
 
-caps:
-  - Docker 28+
-  - Multi-stage builds
-  - BuildKit
-  - Docker Compose V3
-  - Security best practices
+prevent_confusion_with:
+  - kubernetes: "docker is for container building, kubernetes is orchestration"

package/.agent/skills/devops/gcp/META.yaml

@@ -0,0 +1,43 @@
+name: gcp
+version: "1.0.0"
+display: Google Cloud Platform
+category: devops
+tier: 1
+priority: 6
+
+desc: "Google Cloud Platform services: Cloud Run, Cloud Functions, BigQuery, Firestore, Pub/Sub, IAM, and gcloud CLI patterns."
+
+triggers:
+  file_patterns:
+    - "app.yaml"
+    - "cloudbuild.yaml"
+    - ".gcloudignore"
+  keywords:
+    - GCP
+    - Google Cloud
+    - Cloud Run
+    - Cloud Functions
+    - BigQuery
+    - Firestore
+    - Cloud SQL
+    - Pub/Sub
+    - gcloud
+    - Google Cloud Storage
+
+caps:
+  - Cloud Run (serverless containers)
+  - Cloud Functions (event-driven)
+  - BigQuery, Firestore, Cloud SQL
+  - Pub/Sub messaging
+  - IAM & security
+  - gcloud CLI patterns
+
+related_skills:
+  - docker
+  - kubernetes
+  - terraform
+
+hsa_adapter:
+  enabled: true
+  data_dir: "skills/devops/gcp/data"
+  preload_data: false

package/.agent/skills/devops/gcp/SKILL.md

@@ -0,0 +1,43 @@
+# Google Cloud Platform
+
+> Cloud Run • Cloud Functions • BigQuery • Firestore
+
+---
+
+## Khi Nào Dùng
+
+- Deploy containerized apps (Cloud Run)
+- Serverless functions (Cloud Functions)
+- Big data analytics (BigQuery)
+
+## Service Selection
+
+| Service             | Type                   | Best For              |
+| ------------------- | ---------------------- | --------------------- |
+| **Cloud Run**       | Serverless containers  | APIs, web apps        |
+| **Cloud Functions** | Event-driven functions | Webhooks, triggers    |
+| **GKE**             | Managed K8s            | Complex microservices |
+| **BigQuery**        | Data warehouse         | Analytics, ML         |
+| **Firestore**       | NoSQL document DB      | Real-time apps        |
+| **Cloud SQL**       | Managed SQL            | Relational data       |
+
+## Cloud Run Quick Start
+
+```bash
+gcloud run deploy my-service \
+  --source . \
+  --region us-central1 \
+  --allow-unauthenticated
+```
+
+## Common Traps
+
+| Trap           | Fix                                    |
+| -------------- | -------------------------------------- |
+| Cold starts    | Min instances, Cloud Run always-on     |
+| IAM complexity | Use workload identity, least privilege |
+| Cost spike     | Budget alerts, quotas                  |
+
+---
+
+_DOMYH Awesome Code • GCP Skill v1.0.0_

package/.agent/skills/devops/gcp/data/cli.yaml

@@ -0,0 +1,39 @@
+# GCP CLI Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-CLI-001
+    name: gcloud Essential Commands
+    category: cli
+    description: |
+      Most common gcloud commands.
+    text: |
+      # Auth & Config
+      gcloud auth login
+      gcloud auth application-default login
+      gcloud config set project PROJECT_ID
+      gcloud config set compute/region us-central1
+
+      # Info
+      gcloud info
+      gcloud projects list
+      gcloud services list --enabled
+
+      # Common operations
+      gcloud run services list
+      gcloud functions list
+      gcloud compute instances list
+      gcloud container clusters list
+
+  - id: GCP-CLI-002
+    name: gcloud Formatting
+    category: cli
+    description: |
+      Format gcloud output.
+    text: |
+      --format=json    → JSON output
+      --format=yaml    → YAML output
+      --format=csv     → CSV output
+      --format="table(name,status,region)"  → Custom table
+      --filter="name:my-*"   → Filter results
+      --quiet          → No prompts

package/.agent/skills/devops/gcp/data/compute.yaml

@@ -0,0 +1,92 @@
+# GCP Compute Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-CMP-001
+    name: Cloud Run Service
+    category: serverless
+    description: |
+      Deploy containerized apps on Cloud Run.
+    example: |
+      # Deploy from container image
+      gcloud run deploy api-service \
+        --image gcr.io/PROJECT/api:latest \
+        --region us-central1 \
+        --allow-unauthenticated \
+        --set-env-vars "DB_HOST=...,NODE_ENV=production" \
+        --memory 512Mi \
+        --cpu 1 \
+        --max-instances 10 \
+        --min-instances 1
+
+  - id: GCP-CMP-002
+    name: Cloud Functions v2
+    category: serverless
+    description: |
+      Event-driven serverless functions.
+    example: |
+      # functions/index.ts (HTTP trigger)
+      import { onRequest } from "firebase-functions/v2/https";
+
+      export const helloWorld = onRequest(
+        { region: "us-central1", memory: "256MiB" },
+        (req, res) => {
+          res.json({ message: "Hello from Cloud Functions!" });
+        }
+      );
+
+      # Pub/Sub trigger
+      import { onMessagePublished } from "firebase-functions/v2/pubsub";
+
+      export const processOrder = onMessagePublished(
+        { topic: "orders", region: "us-central1" },
+        (event) => {
+          const order = event.data.message.json;
+          // Process order
+        }
+      );
+
+  - id: GCP-CMP-003
+    name: GKE Autopilot
+    category: kubernetes
+    description: |
+      Managed Kubernetes with Autopilot.
+    text: |
+      Autopilot: Google manages nodes, pay per pod
+      Standard: You manage nodes, more control
+
+      gcloud container clusters create-auto my-cluster \
+        --region us-central1
+
+  - id: GCP-CMP-004
+    name: Service Selection
+    category: comparison
+    description: |
+      Which GCP compute service to use.
+    text: |
+      | Service | Best For | Scale | Cost Model |
+      |---------|----------|-------|-----------|
+      | Cloud Run | Containers, APIs | Auto | Per request |
+      | Cloud Functions | Events, webhooks | Auto | Per invocation |
+      | GKE Autopilot | Complex apps | Manual+Auto | Per pod |
+      | Compute Engine | VMs, custom | Manual | Per hour |
+      | App Engine | Web apps | Auto | Per instance-hour |
+
+  - id: GCP-CMP-005
+    name: Cloud Build CI/CD
+    category: ci-cd
+    description: |
+      GCP-native CI/CD pipeline.
+    example: |
+      # cloudbuild.yaml
+      steps:
+        - name: 'node:20'
+          args: ['npm', 'ci']
+        - name: 'node:20'
+          args: ['npm', 'test']
+        - name: 'gcr.io/cloud-builders/docker'
+          args: ['build', '-t', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA', '.']
+        - name: 'gcr.io/cloud-builders/docker'
+          args: ['push', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA']
+        - name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
+          args: ['gcloud', 'run', 'deploy', 'api', '--image', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA', '--region', 'us-central1']