@nockdev/awf 6.2.0 → 6.2.2

package/.agent/skills/devops/gcp/META.yaml

@@ -0,0 +1,43 @@
+name: gcp
+version: "1.0.0"
+display: Google Cloud Platform
+category: devops
+tier: 1
+priority: 6
+
+desc: "Google Cloud Platform services: Cloud Run, Cloud Functions, BigQuery, Firestore, Pub/Sub, IAM, and gcloud CLI patterns."
+
+triggers:
+  file_patterns:
+    - "app.yaml"
+    - "cloudbuild.yaml"
+    - ".gcloudignore"
+  keywords:
+    - GCP
+    - Google Cloud
+    - Cloud Run
+    - Cloud Functions
+    - BigQuery
+    - Firestore
+    - Cloud SQL
+    - Pub/Sub
+    - gcloud
+    - Google Cloud Storage
+
+caps:
+  - Cloud Run (serverless containers)
+  - Cloud Functions (event-driven)
+  - BigQuery, Firestore, Cloud SQL
+  - Pub/Sub messaging
+  - IAM & security
+  - gcloud CLI patterns
+
+related_skills:
+  - docker
+  - kubernetes
+  - terraform
+
+hsa_adapter:
+  enabled: true
+  data_dir: "skills/devops/gcp/data"
+  preload_data: false

package/.agent/skills/devops/gcp/SKILL.md

@@ -0,0 +1,43 @@
+# Google Cloud Platform
+
+> Cloud Run • Cloud Functions • BigQuery • Firestore
+
+---
+
+## Khi Nào Dùng
+
+- Deploy containerized apps (Cloud Run)
+- Serverless functions (Cloud Functions)
+- Big data analytics (BigQuery)
+
+## Service Selection
+
+| Service             | Type                   | Best For              |
+| ------------------- | ---------------------- | --------------------- |
+| **Cloud Run**       | Serverless containers  | APIs, web apps        |
+| **Cloud Functions** | Event-driven functions | Webhooks, triggers    |
+| **GKE**             | Managed K8s            | Complex microservices |
+| **BigQuery**        | Data warehouse         | Analytics, ML         |
+| **Firestore**       | NoSQL document DB      | Real-time apps        |
+| **Cloud SQL**       | Managed SQL            | Relational data       |
+
+## Cloud Run Quick Start
+
+```bash
+gcloud run deploy my-service \
+  --source . \
+  --region us-central1 \
+  --allow-unauthenticated
+```
+
+## Common Traps
+
+| Trap           | Fix                                    |
+| -------------- | -------------------------------------- |
+| Cold starts    | Min instances, Cloud Run always-on     |
+| IAM complexity | Use workload identity, least privilege |
+| Cost spike     | Budget alerts, quotas                  |
+
+---
+
+_DOMYH Awesome Code • GCP Skill v1.0.0_

package/.agent/skills/devops/gcp/data/cli.yaml

@@ -0,0 +1,39 @@
+# GCP CLI Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-CLI-001
+    name: gcloud Essential Commands
+    category: cli
+    description: |
+      Most common gcloud commands.
+    text: |
+      # Auth & Config
+      gcloud auth login
+      gcloud auth application-default login
+      gcloud config set project PROJECT_ID
+      gcloud config set compute/region us-central1
+
+      # Info
+      gcloud info
+      gcloud projects list
+      gcloud services list --enabled
+
+      # Common operations
+      gcloud run services list
+      gcloud functions list
+      gcloud compute instances list
+      gcloud container clusters list
+
+  - id: GCP-CLI-002
+    name: gcloud Formatting
+    category: cli
+    description: |
+      Format gcloud output.
+    text: |
+      --format=json    → JSON output
+      --format=yaml    → YAML output
+      --format=csv     → CSV output
+      --format="table(name,status,region)"  → Custom table
+      --filter="name:my-*"   → Filter results
+      --quiet          → No prompts

package/.agent/skills/devops/gcp/data/compute.yaml

@@ -0,0 +1,92 @@
+# GCP Compute Patterns — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-CMP-001
+    name: Cloud Run Service
+    category: serverless
+    description: |
+      Deploy containerized apps on Cloud Run.
+    example: |
+      # Deploy from container image
+      gcloud run deploy api-service \
+        --image gcr.io/PROJECT/api:latest \
+        --region us-central1 \
+        --allow-unauthenticated \
+        --set-env-vars "DB_HOST=...,NODE_ENV=production" \
+        --memory 512Mi \
+        --cpu 1 \
+        --max-instances 10 \
+        --min-instances 1
+
+  - id: GCP-CMP-002
+    name: Cloud Functions v2
+    category: serverless
+    description: |
+      Event-driven serverless functions.
+    example: |
+      # functions/index.ts (HTTP trigger)
+      import { onRequest } from "firebase-functions/v2/https";
+
+      export const helloWorld = onRequest(
+        { region: "us-central1", memory: "256MiB" },
+        (req, res) => {
+          res.json({ message: "Hello from Cloud Functions!" });
+        }
+      );
+
+      # Pub/Sub trigger
+      import { onMessagePublished } from "firebase-functions/v2/pubsub";
+
+      export const processOrder = onMessagePublished(
+        { topic: "orders", region: "us-central1" },
+        (event) => {
+          const order = event.data.message.json;
+          // Process order
+        }
+      );
+
+  - id: GCP-CMP-003
+    name: GKE Autopilot
+    category: kubernetes
+    description: |
+      Managed Kubernetes with Autopilot.
+    text: |
+      Autopilot: Google manages nodes, pay per pod
+      Standard: You manage nodes, more control
+
+      gcloud container clusters create-auto my-cluster \
+        --region us-central1
+
+  - id: GCP-CMP-004
+    name: Service Selection
+    category: comparison
+    description: |
+      Which GCP compute service to use.
+    text: |
+      | Service | Best For | Scale | Cost Model |
+      |---------|----------|-------|-----------|
+      | Cloud Run | Containers, APIs | Auto | Per request |
+      | Cloud Functions | Events, webhooks | Auto | Per invocation |
+      | GKE Autopilot | Complex apps | Manual+Auto | Per pod |
+      | Compute Engine | VMs, custom | Manual | Per hour |
+      | App Engine | Web apps | Auto | Per instance-hour |
+
+  - id: GCP-CMP-005
+    name: Cloud Build CI/CD
+    category: ci-cd
+    description: |
+      GCP-native CI/CD pipeline.
+    example: |
+      # cloudbuild.yaml
+      steps:
+        - name: 'node:20'
+          args: ['npm', 'ci']
+        - name: 'node:20'
+          args: ['npm', 'test']
+        - name: 'gcr.io/cloud-builders/docker'
+          args: ['build', '-t', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA', '.']
+        - name: 'gcr.io/cloud-builders/docker'
+          args: ['push', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA']
+        - name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
+          args: ['gcloud', 'run', 'deploy', 'api', '--image', 'gcr.io/$PROJECT_ID/api:$COMMIT_SHA', '--region', 'us-central1']

package/.agent/skills/devops/gcp/data/data-services.yaml

@@ -0,0 +1,97 @@
+# GCP Data Services — HSA Tier 3 Data
+version: "1.0.0"
+
+patterns:
+  - id: GCP-DAT-001
+    name: Firestore
+    category: database
+    description: |
+      NoSQL document database with real-time sync.
+    example: |
+      import { getFirestore, collection, doc, setDoc, getDocs, query, where } from "firebase/firestore";
+
+      const db = getFirestore();
+
+      // Create/Update
+      await setDoc(doc(db, "users", "alice"), {
+        name: "Alice", email: "alice@example.com", createdAt: new Date()
+      });
+
+      // Query
+      const q = query(collection(db, "users"), where("name", "==", "Alice"));
+      const snapshot = await getDocs(q);
+      snapshot.forEach(doc => console.log(doc.data()));
+
+  - id: GCP-DAT-002
+    name: BigQuery
+    category: analytics
+    description: |
+      Serverless data warehouse for analytics.
+    example: |
+      // Node.js client
+      import { BigQuery } from "@google-cloud/bigquery";
+      const bq = new BigQuery();
+
+      const [rows] = await bq.query({
+        query: "SELECT name, COUNT(*) as count FROM `project.dataset.events` GROUP BY name ORDER BY count DESC LIMIT 10",
+        location: "US"
+      });
+
+  - id: GCP-DAT-003
+    name: Cloud Storage
+    category: storage
+    description: |
+      Object storage for files and media.
+    example: |
+      import { Storage } from "@google-cloud/storage";
+      const storage = new Storage();
+      const bucket = storage.bucket("my-bucket");
+
+      // Upload
+      await bucket.upload("local-file.pdf", { destination: "uploads/file.pdf" });
+
+      // Download
+      await bucket.file("uploads/file.pdf").download({ destination: "downloaded.pdf" });
+
+      // Signed URL (temporary access)
+      const [url] = await bucket.file("uploads/file.pdf")
+        .getSignedUrl({ action: "read", expires: Date.now() + 3600000 });
+
+  - id: GCP-DAT-004
+    name: Pub/Sub
+    category: messaging
+    description: |
+      Asynchronous messaging service.
+    example: |
+      import { PubSub } from "@google-cloud/pubsub";
+      const pubsub = new PubSub();
+
+      // Publish
+      const topic = pubsub.topic("orders");
+      await topic.publishMessage({ json: { orderId: "123", amount: 99.99 } });
+
+      // Subscribe
+      const subscription = pubsub.subscription("orders-worker");
+      subscription.on("message", (msg) => {
+        const order = JSON.parse(msg.data.toString());
+        processOrder(order);
+        msg.ack();
+      });
+
+  - id: GCP-DAT-005
+    name: IAM Best Practices
+    category: security
+    description: |
+      GCP IAM configuration.
+    text: |
+      Principles:
+      - Use service accounts (not user accounts) for services
+      - Least privilege: minimal roles per service
+      - Workload Identity for GKE → no key files
+      - Short-lived credentials (1h max)
+
+      Common roles:
+      roles/run.invoker — Invoke Cloud Run
+      roles/cloudfunctions.invoker — Invoke Functions
+      roles/storage.objectViewer — Read GCS objects
+      roles/bigquery.dataViewer — Read BigQuery

package/.agent/skills/devops/kubernetes/META.yaml

@@ -1,15 +1,64 @@
-name: kubernetes
-version: "6.2.0"
-category: devops
-tier: 1
+name: kubernetes
+version: "6.2.2"
+category: infrastructure
+tier: 3
 
-desc: "Container orchestration platform patterns for Kubernetes 1.30/1.31. Covers deployments, services, Helm 3, ArgoCD GitOps, scaling, security."
+desc: "Kubernetes orchestration patterns for K8s 1.32-1.33+. Covers Gateway API, Sidecar Containers, Kueue, Pod Security."
+
+patterns:
+  total: 20
+  domains:
+    networking: 5
+    workloads: 5
+    security: 5
+    scheduling: 5
+
+    - "*.yaml"
+    - "*.yml"
+    - "Chart.yaml"
+    - "kustomization.yaml"
+    - "values.yaml"
+  keywords:
+    # Core
+    - kubernetes
+    - k8s
+    - kubectl
+    - helm
+    - kustomize
+    # Workloads
+    - deployment
+    - statefulset
+    - daemonset
+    - job
+    - cronjob
+    # Networking
+    - service
+    - ingress
+    - gateway api
+    - gateway
+    - httproute
+    # Security
+    - pod security
+    - rbac
+    - service account
+    - network policy
+    # Scheduling
+    - node selector
+    - affinity
+    - kueue
+    - priority class
+  intents:
+    - deploy kubernetes
+    - create deployment
+    - configure ingress
+    - setup k8s
 
 related_skills:
   - docker
   - aws
   - ci-cd
+  - security
 
 prevent_confusion_with:
-  - docker: "K8s orchestrates containers, Docker builds them"
-  - aws-serverless: "K8s for container orchestration, not Lambda"
+  - docker: "kubernetes orchestrates containers, docker builds them"
+  - aws: "kubernetes is general, aws covers EKS specifically"