@nockdev/awf 6.2.0 → 6.2.2

package/.agent/skills/devops/azure/META.yaml

@@ -0,0 +1,44 @@
+name: azure
+version: "1.0.0"
+display: Microsoft Azure
+category: devops
+tier: 1
+priority: 7
+
+desc: "Microsoft Azure services: Azure Functions, Azure DevOps, Cosmos DB, AKS, Entra ID, and Azure CLI patterns."
+
+triggers:
+  file_patterns:
+    - "azure-pipelines.yml"
+    - "host.json"
+    - "local.settings.json"
+    - ".azure/**"
+  keywords:
+    - Azure
+    - Azure Functions
+    - Azure DevOps
+    - Cosmos DB
+    - Azure SQL
+    - AKS
+    - Entra ID
+    - Azure Active Directory
+    - az cli
+    - Azure Blob Storage
+
+caps:
+  - Azure Functions (serverless)
+  - Azure DevOps pipelines
+  - Cosmos DB, Azure SQL
+  - AKS (Azure Kubernetes Service)
+  - Entra ID (IAM/security)
+  - Azure CLI patterns
+
+related_skills:
+  - docker
+  - kubernetes
+  - terraform
+
+hsa_adapter:
+  enabled: true
+  data_dir: "skills/devops/azure/data"
+  preload_data: false

package/.agent/skills/devops/azure/SKILL.md

@@ -0,0 +1,43 @@
+# Microsoft Azure
+
+> Azure Functions • Azure DevOps • Cosmos DB • AKS
+
+---
+
+## Khi Nào Dùng
+
+- Deploy serverless functions (Azure Functions)
+- CI/CD pipelines (Azure DevOps)
+- NoSQL database (Cosmos DB)
+- Enterprise app deployment
+
+## Service Selection
+
+| Service             | Type                 | Best For               |
+| ------------------- | -------------------- | ---------------------- |
+| **Azure Functions** | Serverless functions | Event-driven, webhooks |
+| **App Service**     | Managed web apps     | APIs, web apps         |
+| **AKS**             | Managed Kubernetes   | Microservices          |
+| **Cosmos DB**       | Multi-model NoSQL    | Global distribution    |
+| **Azure SQL**       | Managed SQL          | Relational data        |
+
+## Azure Functions Quick Start
+
+```bash
+func init MyProject --typescript
+func new --name HttpTrigger --template "HTTP trigger"
+func start  # Local development
+az functionapp publish MyFunctionApp  # Deploy
+```
+
+## Common Traps
+
+| Trap            | Fix                                          |
+| --------------- | -------------------------------------------- |
+| Cold starts     | Premium plan, keep-alive pings               |
+| Entra ID config | Use managed identity, DefaultAzureCredential |
+| Cost management | Azure Cost Management + budget alerts        |
+
+---
+
+_DOMYH Awesome Code • Azure Skill v1.0.0_

package/.agent/skills/devops/azure/data/cli.yaml

@@ -0,0 +1,69 @@
+# Azure CLI Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-CLI-001
+    name: az Essential Commands
+    category: cli
+    description: |
+      Most common Azure CLI commands.
+    text: |
+      # Auth & Config
+      az login
+      az account set --subscription "my-sub"
+      az account show
+      az group list
+
+      # Resource management
+      az group create --name my-rg --location eastus
+      az resource list --resource-group my-rg
+
+      # Container Registry
+      az acr create --resource-group my-rg --name myregistry --sku Basic
+      az acr login --name myregistry
+
+      # Key Vault
+      az keyvault create --name my-kv --resource-group my-rg
+      az keyvault secret set --name MySecret --value "secret-value" --vault-name my-kv
+      az keyvault secret show --name MySecret --vault-name my-kv
+
+  - id: AZ-CLI-002
+    name: az Output & Query
+    category: cli
+    description: |
+      Format and query Azure CLI output.
+    text: |
+      --output json    → JSON output (default)
+      --output table   → Table format
+      --output tsv     → Tab-separated values
+      --query          → JMESPath query
+
+      Examples:
+      az vm list --query "[].{Name:name, State:powerState}" --output table
+      az webapp list --query "[?resourceGroup=='my-rg'].name" --output tsv
+
+  - id: AZ-CLI-003
+    name: Bicep (ARM Alternative)
+    category: iac
+    description: |
+      Azure-native IaC language (alternative to Terraform for Azure-only).
+    example: |
+      // main.bicep
+      param location string = resourceGroup().location
+      param appName string
+
+      resource appServicePlan 'Microsoft.Web/serverfarms@2023-01-01' = {
+        name: '${appName}-plan'
+        location: location
+        sku: { name: 'B1', tier: 'Basic' }
+      }
+
+      resource webApp 'Microsoft.Web/sites@2023-01-01' = {
+        name: appName
+        location: location
+        properties: {
+          serverFarmId: appServicePlan.id
+        }
+      }
+
+      // Deploy: az deployment group create --resource-group my-rg --template-file main.bicep

package/.agent/skills/devops/azure/data/compute.yaml

@@ -0,0 +1,83 @@
+# Azure Compute Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-CMP-001
+    name: Azure Functions
+    category: serverless
+    description: |
+      Azure serverless functions.
+    example: |
+      // TypeScript HTTP trigger
+      import { app, HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
+
+      export async function httpTrigger(
+        request: HttpRequest,
+        context: InvocationContext
+      ): Promise<HttpResponseInit> {
+        const name = request.query.get("name") || (await request.text());
+        return { body: `Hello, ${name}!` };
+      }
+
+      app.http("httpTrigger", {
+        methods: ["GET", "POST"],
+        authLevel: "anonymous",
+        handler: httpTrigger
+      });
+
+  - id: AZ-CMP-002
+    name: Azure Container Apps
+    category: containers
+    description: |
+      Serverless containers on Azure.
+    text: |
+      Similar to Cloud Run.
+      Auto-scaling, Dapr integration, revision management.
+    example: |
+      az containerapp create \
+        --name my-api \
+        --resource-group my-rg \
+        --environment my-env \
+        --image myregistry.azurecr.io/api:latest \
+        --target-port 3000 \
+        --ingress external \
+        --min-replicas 1 \
+        --max-replicas 10
+
+  - id: AZ-CMP-003
+    name: Azure App Service
+    category: paas
+    description: |
+      Platform-as-a-Service for web apps.
+    text: |
+      Supports: .NET, Node.js, Python, Java, PHP, Ruby
+      Features: Deployment slots, auto-scale, custom domains, SSL
+
+      az webapp create --name my-webapp --resource-group my-rg --plan my-plan
+
+  - id: AZ-CMP-004
+    name: AKS (Azure Kubernetes)
+    category: kubernetes
+    description: |
+      Managed Kubernetes on Azure.
+    text: |
+      az aks create --resource-group my-rg --name my-cluster \
+        --node-count 3 --generate-ssh-keys \
+        --tier standard
+
+      az aks get-credentials --resource-group my-rg --name my-cluster
+      kubectl get nodes
+
+  - id: AZ-CMP-005
+    name: Service Selection
+    category: comparison
+    description: |
+      Azure compute service comparison.
+    text: |
+      | Service | Best For | Scale | Cost Model |
+      |---------|----------|-------|-----------|
+      | Functions | Events | Auto | Per execution |
+      | Container Apps | Containers | Auto | Per vCPU/memory |
+      | App Service | Web apps | Auto | Per plan |
+      | AKS | Complex apps | Semi-auto | Per node |
+      | VMs | Custom | Manual | Per hour |

package/.agent/skills/devops/azure/data/data-services.yaml

@@ -0,0 +1,126 @@
+# Azure Data Services — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: AZ-DAT-001
+    name: Cosmos DB
+    category: database
+    description: |
+      Multi-model globally distributed database.
+    example: |
+      import { CosmosClient } from "@azure/cosmos";
+
+      const client = new CosmosClient({ endpoint: "...", key: "..." });
+      const database = client.database("mydb");
+      const container = database.container("items");
+
+      // Create
+      await container.items.create({
+        id: "item1", category: "electronics", name: "Laptop", price: 999
+      });
+
+      // Query
+      const { resources } = await container.items
+        .query("SELECT * FROM c WHERE c.category = @cat", [
+          { name: "@cat", value: "electronics" }
+        ])
+        .fetchAll();
+
+  - id: AZ-DAT-002
+    name: Azure Storage
+    category: storage
+    description: |
+      Blob, Queue, Table, and File storage.
+    example: |
+      import { BlobServiceClient } from "@azure/storage-blob";
+
+      const blobService = BlobServiceClient.fromConnectionString(connStr);
+      const container = blobService.getContainerClient("uploads");
+
+      // Upload
+      const blockBlob = container.getBlockBlobClient("file.pdf");
+      await blockBlob.uploadFile("./local-file.pdf");
+
+      // Download
+      await blockBlob.downloadToFile("./downloaded.pdf");
+
+      // SAS token (temporary access)
+      const sasUrl = generateBlobSASQueryParameters({ ... });
+
+  - id: AZ-DAT-003
+    name: Azure Service Bus
+    category: messaging
+    description: |
+      Enterprise message broker with queues and topics.
+    example: |
+      import { ServiceBusClient } from "@azure/service-bus";
+
+      const client = new ServiceBusClient(connStr);
+
+      // Send
+      const sender = client.createSender("orders-queue");
+      await sender.sendMessages({ body: { orderId: "123", amount: 99.99 } });
+
+      // Receive
+      const receiver = client.createReceiver("orders-queue");
+      const messages = await receiver.receiveMessages(10, { maxWaitTimeInMs: 5000 });
+      for (const msg of messages) {
+        processOrder(msg.body);
+        await receiver.completeMessage(msg);
+      }
+
+  - id: AZ-DAT-004
+    name: Entra ID (Azure AD)
+    category: security
+    description: |
+      Identity and access management.
+    text: |
+      Key concepts:
+      - Tenants: Organization directory
+      - App registrations: OAuth2 apps
+      - Managed Identity: No credentials for Azure services
+      - RBAC: Role-based access control
+
+      Best practice: Use Managed Identity for service-to-service auth
+    example: |
+      import { DefaultAzureCredential } from "@azure/identity";
+
+      // Uses Managed Identity in Azure, CLI creds locally
+      const credential = new DefaultAzureCredential();
+
+  - id: AZ-DAT-005
+    name: Azure DevOps Pipelines
+    category: ci-cd
+    description: |
+      CI/CD pipelines with Azure DevOps.
+    example: |
+      # azure-pipelines.yml
+      trigger: [main]
+      pool:
+        vmImage: 'ubuntu-latest'
+
+      stages:
+        - stage: Build
+          jobs:
+            - job: Build
+              steps:
+                - task: NodeTool@0
+                  inputs: { versionSpec: '20.x' }
+                - script: npm ci
+                - script: npm test
+                - script: npm run build
+        
+        - stage: Deploy
+          dependsOn: Build
+          condition: succeeded()
+          jobs:
+            - deployment: Deploy
+              environment: production
+              strategy:
+                runOnce:
+                  deploy:
+                    steps:
+                      - task: AzureWebApp@1
+                        inputs:
+                          azureSubscription: 'my-subscription'
+                          appName: 'my-webapp'

package/.agent/skills/devops/ci-cd/META.yaml

@@ -1,21 +1,54 @@
-name: ci-cd
-version: "6.2.0"
-display: CI/CD Pipelines
-category: devops
-tier: 1
-priority: 1
+name: ci-cd
+version: "6.2.2"
+category: infrastructure
+tier: 3
 
-desc: "CI/CD pipeline patterns for GitHub Actions, GitLab CI, Azure DevOps, Jenkins. Covers automation, deployment strategies, security scanning."
+desc: "CI/CD pipeline patterns for GitHub Actions, GitLab CI, and GitOps. Includes SLSA Build Level 3, ARM64 runners, security scanning."
+
+patterns:
+  total: 20
+  domains:
+    github-actions: 6
+    gitlab-ci: 5
+    security: 5
+    deployment: 4
+
+    - ".github/workflows/*.yml"
+    - ".gitlab-ci.yml"
+    - "Jenkinsfile"
+    - "azure-pipelines.yml"
+    - ".circleci/config.yml"
+  keywords:
+    # General
+    - ci cd
+    - pipeline
+    - continuous integration
+    - continuous deployment
+    - workflow
+    # GitHub Actions
+    - github actions
+    - actions workflow
+    - reusable workflow
+    - composite action
+    - arm64 runner
+    - slsa attestation
+    # Security
+    - dependency review
+    - code scanning
+    - secret scanning
+    - artifact attestation
+    - supply chain
+  intents:
+    - create pipeline
+    - setup ci
+    - deploy workflow
+    - secure pipeline
 
 related_skills:
   - docker
   - kubernetes
+  - aws
   - security
 
-caps:
-  - GitHub Actions (matrix, reusable, OIDC)
-  - GitLab CI (stages, artifacts)
-  - Azure DevOps (multi-stage)
-  - Jenkins (Declarative pipelines)
-  - Security scanning (SAST, DAST)
-  - Progressive deployment
+prevent_confusion_with:
+  - aws: "ci-cd is platform-agnostic, aws covers AWS-specific deployment"