@nuvlore/extension-workday-infra-access 0.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,3 @@
+# @nuvlore/extension-workday-infra-access
+
+Workday infrastructure access — DC Boundary, AWS/GCP read-only, and access workflows.

package/agents/workday-infra-access-readonly.yaml

@@ -0,0 +1,183 @@
+name: workday-infra-access-readonly
+description: Read-only Workday infrastructure access specialist. Plans or checks public-cloud SPC login, and checks Boundary bauth auth before bounded SSH diagnostics on explicit private-cloud/DC hosts.
+tools:
+  includes:
+    - aws_cust_federated_readonly_command_pack
+    - gcp_readonly_command_pack
+    - workday_boundary_login
+    - workday_private_cloud_sudo_readonly_command
+    - workday_public_cloud_kubernetes_read
+    - workday_public_cloud_spc_login
+    - workday_spc_argo_readonly_command_pack
+  excludes: []
+permissionMode: dontAsk
+skills:
+  - workday-infra-access
+  - remote-readonly-investigation
+  - devops-log-analysis
+maxTurns: 8
+color: yellow
+instructions: |-
+  You are the Workday infrastructure access specialist for this workspace.
+
+  Use `workday-infra-access` for public-cloud connection planning, Boundary/LDAP
+  preparation, SPC/Argo inspection, and explicit-host read-only diagnostics. Load
+  `references/access-runbook.md` from that skill when path-specific details are
+  needed.
+
+  Route by target:
+
+  - Public cloud environment login: call `workday_public_cloud_spc_login` first.
+  - AWS CUST: call `aws_cust_federated_readonly_command_pack` before evidence reads.
+  - GCP: call `gcp_readonly_command_pack` before evidence reads.
+  - SPC Argo/status inspection after public-cloud login: call `workday_spc_argo_readonly_command_pack`.
+  - Live public-cloud Kubernetes evidence after SPC is ready: call `workday_public_cloud_kubernetes_read` once per resource/read.
+  - Private cloud/DC host or BDS incident: start with `workday_boundary_login`
+    status and the explicit host or resolvable target supplied by the requester.
+    Private cloud uses `bauth init` and ordinary SSH; it does not use SPC.
+  - Private cloud sudo read: use `workday_private_cloud_sudo_readonly_command`.
+
+  Hard boundaries:
+
+  - Never ask for or print LDAP passwords, Keychain JSON, kubeconfig, cloud
+    credentials, tokens, keytabs, or sudo stdin.
+  - Confirm the operator has an active Workday Security Network session before
+    public-cloud SPC login or private-cloud Boundary `bauth init`.
+  - Only the three dedicated login/sudo tools may read LDAP PROD password from
+    Keychain; do not call Keychain directly from command packs, shell snippets, or
+    agent instructions.
+  - Do not run login/federation, config mutation, Argo/Kubernetes writes, HDFS
+    writes, service restarts, Airflow state changes, migration retry/cancel, or
+    cloud object writes unless an explicit login tool action has structured HITL
+    approval for its local auth-state change.
+  - Treat `spc connect` as connectivity only. It does not prove Kubernetes write
+    permission; before any user-approved remediation, verify `kubectl auth whoami`
+    and `kubectl auth can-i`.
+  - Inspect only explicit targets. If no host, cluster, account, project, or
+    namespace can be resolved, report the blocker instead of inventing one.
+  - Use sudo only for bounded read-only evidence that requires it, and only
+    through the approved saved-credential path described in the runbook.
+
+  For BDS and Argo dependency incidents, compare requested selectors and desired
+  state with live read-only evidence. If namespace RBAC denies pod, service,
+  endpoint, deployment, or log reads, report that as an evidence gap and continue
+  only with reachable evidence.
+
+  Final answers should state the target, identity/readiness checks performed,
+  evidence collected, denied or missing evidence, and any manual remediation plan.
+runtime:
+  profile: deep-agent
+  autonomy: medium
+  reasoningDepth: high
+  description: Coordinates a graph whose nodes are only agents or tools; skills attach to agent nodes.
+orchestration:
+  nodes:
+    - id: agent-workday-infra-access-readonly
+      ref: workday-infra-access-readonly
+      description: Receive and classify work inside this agent boundary.
+      kind: agent
+      skills:
+        - workday-infra-access
+        - remote-readonly-investigation
+        - devops-log-analysis
+    - id: tool-aws-cust-federated-readonly-command-pack
+      ref: aws_cust_federated_readonly_command_pack
+      description: Use aws_cust_federated_readonly_command_pack for package-owned evidence or prepared actions.
+      kind: tool
+    - id: tool-gcp-readonly-command-pack
+      ref: gcp_readonly_command_pack
+      description: Use gcp_readonly_command_pack for package-owned evidence or prepared actions.
+      kind: tool
+    - id: tool-workday-boundary-login
+      ref: workday_boundary_login
+      description: Use workday_boundary_login for package-owned evidence or prepared actions.
+      kind: tool
+    - id: tool-workday-private-cloud-sudo-readonly-command
+      ref: workday_private_cloud_sudo_readonly_command
+      description: Use workday_private_cloud_sudo_readonly_command for package-owned evidence or prepared actions.
+      kind: tool
+    - id: tool-workday-public-cloud-kubernetes-read
+      ref: workday_public_cloud_kubernetes_read
+      description: Use workday_public_cloud_kubernetes_read for one atomic read-only kubectl operation after SPC is ready.
+      kind: tool
+    - id: tool-workday-public-cloud-spc-login
+      ref: workday_public_cloud_spc_login
+      description: Use workday_public_cloud_spc_login for package-owned evidence or prepared actions.
+      kind: tool
+    - id: tool-workday-spc-argo-readonly-command-pack
+      ref: workday_spc_argo_readonly_command_pack
+      description: Use workday_spc_argo_readonly_command_pack for package-owned evidence or prepared actions.
+      kind: tool
+    - id: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      description: Decide whether to continue read-only work, ask approval, delegate to another agent, or report.
+      kind: agent
+      ref: workday-infra-access-readonly
+      skills:
+        - workday-infra-access
+        - remote-readonly-investigation
+        - devops-log-analysis
+    - id: human-approval
+      ref: human-approval
+      description: The agent prepares evidence and plans but must not cross approval or ownership boundaries on its own.
+      kind: tool
+      requiresHumanApproval: true
+    - id: agent-workday-infra-access-readonly-2
+      ref: workday-infra-access-readonly
+      description: Report findings, evidence, approval needs, and next action.
+      kind: agent
+      skills:
+        - workday-infra-access
+        - remote-readonly-investigation
+        - devops-log-analysis
+  edges:
+    - from: agent-workday-infra-access-readonly
+      to: tool-aws-cust-federated-readonly-command-pack
+      condition: SOP context is needed
+    - from: agent-workday-infra-access-readonly
+      to: tool-gcp-readonly-command-pack
+      condition: SOP context is needed
+    - from: agent-workday-infra-access-readonly
+      to: tool-workday-boundary-login
+      condition: SOP context is needed
+    - from: agent-workday-infra-access-readonly
+      to: tool-workday-private-cloud-sudo-readonly-command
+      condition: SOP context is needed
+    - from: agent-workday-infra-access-readonly
+      to: tool-workday-public-cloud-kubernetes-read
+      condition: live Kubernetes read evidence is needed after SPC is ready
+    - from: agent-workday-infra-access-readonly
+      to: tool-workday-public-cloud-spc-login
+      condition: SOP context is needed
+    - from: agent-workday-infra-access-readonly
+      to: tool-workday-spc-argo-readonly-command-pack
+      condition: SOP context is needed
+    - from: tool-aws-cust-federated-readonly-command-pack
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-gcp-readonly-command-pack
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-workday-boundary-login
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-workday-private-cloud-sudo-readonly-command
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-workday-public-cloud-kubernetes-read
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-workday-public-cloud-spc-login
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: tool-workday-spc-argo-readonly-command-pack
+      to: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      condition: tool result is available
+    - from: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      to: human-approval
+      condition: The request requires external action, mutation, credentials, spending, approval, or work outside this agent scope.
+    - from: decision-decide-whether-to-continue-read-only-work-ask-approval-delegate-to-another-agent-or-report
+      to: agent-workday-infra-access-readonly-2
+      condition: no handoff is needed
+    - from: human-approval
+      to: agent-workday-infra-access-readonly-2
+      condition: handoff result is available

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@nuvlore/extension-workday-infra-access",
+  "version": "0.1.1",
+  "type": "module",
+  "description": "Workday infrastructure read-only access tools, workflows, skills, and agents.",
+  "license": "Apache-2.0",
+  "files": [
+    "package.json",
+    "agents",
+    "src",
+    "tools",
+    "skills",
+    "workflows",
+    "LICENSE",
+    "README.md",
+    "vendor/extension-read-only-toolkit/LICENSE",
+    "vendor/extension-read-only-toolkit/README.md",
+    "vendor/extension-read-only-toolkit/package.json",
+    "vendor/extension-read-only-toolkit/src"
+  ],
+  "keywords": [
+    "agent-runtime-extension"
+  ],
+  "agentRuntimeDistribution": {
+    "visibility": "private",
+    "group": "workday-infra-access",
+    "serviceGrouping": "multi-capability",
+    "publicService": false,
+    "rationale": "Workday infrastructure access domain package for read-only Boundary, public cloud, and Kubernetes workflows."
+  },
+  "agentRuntimeTools": {
+    "service": "workday"
+  },
+  "scripts": {
+    "test": "npm run test:unit && npm run test:integration",
+    "test:unit": "node --test test/node-unit/*.test.js && vitest run test/unit",
+    "test:integration": "node --test test/node-integration/*.test.js"
+  },
+  "dependencies": {
+    "@nuvlore/extension-read-only-toolkit": "file:vendor/extension-read-only-toolkit",
+    "zod": "^4.1.12"
+  },
+  "devDependencies": {
+    "vitest": "^3.1.3"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  }
+}

package/skills/workday-infra-access/SKILL.md

@@ -0,0 +1,102 @@
+---
+name: workday-infra-access
+description: Use when the user needs Workday infrastructure access planning, including DC/Boundary connectivity with LDAP credentials or public-cloud connection planning.
+allowed-tools:
+  - mcp__devops_tool__workday_boundary_login
+  - mcp__devops_tool__workday_public_cloud_environment_map
+  - mcp__devops_tool__workday_public_cloud_spc_login
+  - mcp__devops_tool__workday_private_cloud_sudo_readonly_command
+  - mcp__devops_tool__workday_spc_argo_readonly_command_pack
+  - mcp__devops_tool__public_cloud_access_status
+  - mcp__devops_tool__aws_cust_federated_readonly_command_pack
+  - mcp__devops_tool__gcp_readonly_command_pack
+  - mcp__devops_tool__remote_readonly_command
+  - mcp__devops_tool__remote_log_pattern_summary
+---
+
+# Workday Infrastructure Access
+
+Use this skill for Workday DC/Boundary access planning, saved LDAP
+credential-backed `bauth init`, explicit-host ordinary SSH checks, SPC + Argo UI
+inspection, AWS CUST federated access planning, and GCP read-only access
+planning.
+
+Shared access conventions for DC login, Scylla BDM access, and sudo stdin live
+in `workday-access-profiles`; package tools should reuse those profiles instead
+of copying Boundary, Keychain, SSH, or BDM command templates.
+
+Load `references/access-runbook.md` as the router, then load only the matching
+access-path reference: `references/access-boundary-runbook.md`,
+`references/access-spc-argo-runbook.md`, or
+`references/access-scylla-cloud-runbook.md`.
+
+## Routing
+
+- Boundary/DC host access: start with `workday_boundary_login` action `status`.
+  If login preparation is required, use action `login` only after explicit
+  human approval with `humanApprovedLocalWrite: true` and a complete structured
+  `hitlApproval` object.
+- Public cloud environment mapping: when the user gives a logical environment
+  such as CP2, call `workday_public_cloud_environment_map` first to resolve the
+  concrete SPC cluster and platform-specific follow-up reads.
+- Public cloud environment login: after mapping, call
+  `workday_public_cloud_spc_login`.
+  For customer SPC clusters, the tool must refresh `sso-cust` with
+  `sso-cli aws --force --profile sso-cust`, then run SPC with
+  `AWS_PROFILE=sso-cust` only. Do not pass `AWS_REGION` into `sso-cli aws`,
+  `spc connect`, or the follow-up kubectl environment unless the operator
+  explicitly requests a region override.
+- Workday SPC + Argo UI inspection after public-cloud login: call `workday_spc_argo_readonly_command_pack`.
+- Generic public cloud access planning: call `public_cloud_access_status`.
+- AWS CUST federated access: call `aws_cust_federated_readonly_command_pack` first.
+- GCP project access: call `gcp_readonly_command_pack` first.
+- Private cloud sudo evidence collection: for an explicit private cloud/DC
+  host, use only `workday_private_cloud_sudo_readonly_command` for commands
+  that need sudo. The tool itself runs `bauth init` with LDAP PROD, then uses
+  ordinary `ssh <host>`.
+- Non-sudo remote evidence collection: after Boundary login is ready and the
+  target host is explicit, use only `remote_readonly_command` or
+  `remote_log_pattern_summary` with ordinary SSH. Private cloud/DC does not use
+  SPC.
+
+## Guardrails
+
+- Never ask the user to paste LDAP passwords into chat.
+- Never print, summarize, or store LDAP passwords, Keychain JSON, tokens,
+  private keys, kubeconfig, ADC, AWS credential files, or cloud session
+  material.
+- Login preparation can update local auth state; keep it separate from remote
+  inspection evidence and require explicit approval. Public cloud uses SPC;
+  private cloud/DC uses Boundary through `bauth init`.
+- Both public cloud SPC login and private cloud Boundary login require an
+  already-active Workday Security Network session first.
+- Only `workday_boundary_login`, `workday_public_cloud_spc_login`, and
+  `workday_private_cloud_sudo_readonly_command` may read the LDAP PROD password
+  from Keychain. Other tools and agents must not call Keychain directly.
+- Do not authenticate, port-forward, mutate Argo/Kubernetes, call cloud APIs, or
+  run cloud login/config commands from a tool unless the operator is actively
+  doing that approved local setup in an interactive session.
+- Do not invent hostnames. If no host or resolvable target is provided, ask for
+  the host or state the blocker.
+- Treat permission/RBAC/IAM denials as evidence gaps, not proof that a resource,
+  service, pod, or log is absent.
+
+## Evidence Order
+
+1. Classify the request as Boundary/DC, SPC/Argo, AWS CUST, GCP, generic public
+   cloud, or explicit remote read-only inspection.
+2. Generate the relevant atomic helper tool output before using local or remote access.
+3. Verify cloud/session identity and authorization before evidence reads:
+   for public-cloud SPC, check `AWS_PROFILE=sso-cust aws sts get-caller-identity`
+   before `kubectl auth whoami` and `kubectl auth can-i`; for other paths use
+   `aws sts get-caller-identity`,
+   `gcloud auth list`, or `gcloud config list` as applicable.
+4. Collect only bounded read-only evidence from explicit hosts, namespaces,
+   projects, accounts, or services.
+5. Report exact status, evidence, blockers, and next read-only checks.
+
+## Output
+
+Return Boundary/SPC/cloud readiness, target checked, identity or authorization
+evidence, read-only command result summary, blockers such as missing Keychain
+credential or unavailable `bauth`, and the next safe read-only check.

package/skills/workday-infra-access/references/access-boundary-runbook.md

@@ -0,0 +1,43 @@
+# Boundary And BDS DC Access Runbook
+
+Use for private cloud/DC `bauth init`, explicit BDS DC hosts, ordinary SSH,
+sudo stdin, root-owned read-only state, and remote command examples. Owner:
+`workday-infra-access/SKILL.md`.
+
+## Shared Profiles
+
+- Reuse shared profiles for DC SSH and `SudoEnvironmentProfile` for routing
+  sudo reads to the dedicated sudo tool.
+
+## Boundary Access
+
+- Check Boundary status with `workday_boundary_login` using `action: "status"`.
+- If Boundary is not ready and the user explicitly approves local auth-state
+  changes, call `workday_boundary_login` with `action: "login"`,
+  `humanApprovedLocalWrite: true`, and a complete `hitlApproval` object with
+  `approved`, `approvedBy`, `action`, `target`, `reason`, `expectedImpact`, and
+  `risk`.
+- The tool consumes the saved macOS Keychain LDAP credential in place for
+  approved `bauth init`; do not ask the user to paste LDAP passwords into chat.
+- For BDS customer DC hosts, use the explicit hostname from incident or
+  environment evidence unchanged. After `bauth init`, connect with ordinary
+  `ssh <host>`; do not use SPC for private cloud and do not invent `.bnd`
+  aliases.
+- Start remote work as the normal SSH user. Use `sudo` only for root-owned
+  read-only state such as root kubeconfig, bounded `journalctl`, or service
+  status.
+- When sudo needs a password, use `workday_private_cloud_sudo_readonly_command`.
+  The tool reads the LDAP PROD password from Keychain, runs `bauth init`, then
+  passes the same secret only to remote sudo stdin. Agents and command packs
+  must not call Keychain directly.
+
+## Read-Only Command Boundary
+
+- Read-only examples: `hostname -f`, `date -u`, `whoami`,
+  `kubectl get/describe/logs`, `hdfs dfs -ls/-du/-cat/-tail`, `yarn logs`,
+  `getent hosts`, `ip route get`, bounded `curl` connect probes, `journalctl`
+  reads, and `systemctl status`.
+- Mutating examples forbidden in read-only investigations: service restarts,
+  `kubectl apply/delete/patch/scale/rollout restart`, Airflow `clear`,
+  `backfill`, `trigger`, `mark_success`, HDFS writes/removals, migration
+  cancel/retry, and `aws s3 cp` object writes.

package/skills/workday-infra-access/references/access-runbook.md

@@ -0,0 +1,15 @@
+# Workday Infrastructure Access Runbook Router
+
+This file is only a router for `workday-infra-access/SKILL.md`. Load the
+smallest access-path reference that matches the request.
+
+Both public-cloud SPC and private-cloud Boundary paths require an active Workday
+Security Network session before starting environment login.
+
+- Private cloud/DC `bauth init`, BDS DC ordinary SSH, sudo stdin, and
+  read-only remote commands:
+  `access-boundary-runbook.md`.
+- Public cloud SPC login, Argo UI, ComponentRelease, Flux HelmRelease,
+  smoke-test dependency namespace checks: `access-spc-argo-runbook.md`.
+- Scylla BDM, AWS CUST, and GCP public-cloud read-only access after SPC login:
+  `access-scylla-cloud-runbook.md`.

package/skills/workday-infra-access/references/access-scylla-cloud-runbook.md

@@ -0,0 +1,39 @@
+# Scylla BDM And Public Cloud Access Runbook
+
+Use for Scylla BDM bucket checks, AWS CUST read-only access, and GCP read-only
+access. Owner: `workday-infra-access/SKILL.md`.
+
+## Scylla BDM Access
+
+- Reuse `ScyllaAccessProfile` for BDM `kcsb`, `bucketdetails-config`, and RBAC.
+- Connect to the target Scylla environment, read `bucketdetails-config`, then use
+  BDM `kcsb exec <bdm-pod> -- sh -lc 'hadoop fs ...'` and bounded BDM logs.
+- Before claiming SIR, Galahad, OMS, or ORS pods/logs are absent, run namespace
+  `kubectl auth can-i` checks through the SPC kubeconfig.
+
+## AWS CUST
+
+- Use `aws_cust_federated_readonly_command_pack` first. The operator must complete AWS
+  federated access using the approved CCOE guide
+  `AWS - Federated Access to CUST Accounts - User Guide`; tools must not open
+  browser federation, run `aws configure`, read `~/.aws`, or store cloud session
+  material.
+- Always run `aws sts get-caller-identity` before AWS evidence reads. Verify
+  account ID, role ARN, region, and profile against incident evidence before
+  reading service metadata.
+- AWS read-only commands are limited to `describe-*`, `list-*`, `get-*`,
+  `head-*`, `aws s3 ls`, and `aws sts get-caller-identity`.
+- Treat `aws s3 cp`, `mv`, `rm`, `sync`, `s3api put-object`,
+  `s3api delete-object`, `secretsmanager get-secret-value`, and IAM/KMS mutation
+  as forbidden.
+
+## GCP
+
+- Use `gcp_readonly_command_pack` first. Use an already-approved local `gcloud`
+  identity only; do not run `gcloud auth login`, `gcloud config set`, read ADC
+  credentials, or change active project/impersonation from a tool.
+- Always verify `gcloud auth list` and `gcloud config list` before GCP evidence
+  reads.
+- GCP read-only commands are limited to project/IAM policy inspection,
+  list/describe/read operations, and Cloud Storage bucket/object listing.
+- A cloud IAM denial is an evidence gap, not proof that the resource is absent.