@scemoon/cdh 1.0.0

package/ai-dlc-skill/providers/aliyun/deployment.yaml

@@ -0,0 +1,66 @@
+# Aliyun Stack Deployment
+
+Production deployment pipeline for Aliyun. The default is the unified `deploy_stack` orchestrator; per-component deploys are only allowed into isolated dev sandboxes.
+
+## Environments
+
+| Environment | Purpose | Deploy Trigger | Orchestrator |
+|-------------|---------|----------------|--------------|
+| preview | Per-component + cross-stack e2e | Feature branch | `deploy_stack --preview` |
+| staging | Pre-production stack validation | PR merge to main | `deploy_stack --env staging` |
+| production | Live traffic | Release tag + human approval | `deploy_stack --env production` |
+
+## Stack Deploy Steps
+
+```yaml
+staging:
+  orchestrator: deploy_stack
+  steps:
+    - fun deploy --env staging                   # backend
+    - rds migrate --env staging                  # backend (or tablestore)
+    - oss sync ./dist oss://bucket-staging/      # web
+    - cdn refresh --domain staging.example.com   # web
+    - native build with BACKEND_URL injected     # native
+    - desktop build with BACKEND_URL injected    # desktop
+    - wxa build with BACKEND_URL injected        # wxa
+    - mya build with BACKEND_URL injected        # mya
+    - tta build with BACKEND_URL injected        # tta
+    - smoke-test ${STACK_URL}
+
+production:
+  orchestrator: deploy_stack
+  pre_conditions:
+    - human-approval-gate
+  steps:
+    - fun deploy --env production --publish
+    - rds migrate --env production
+    - oss sync ./dist oss://bucket-production/
+    - cdn refresh --domain example.com
+    - native build with BACKEND_URL injected
+    - desktop build with BACKEND_URL injected
+    - wxa build with BACKEND_URL injected
+    - mya build with BACKEND_URL injected
+    - tta build with BACKEND_URL injected
+    - smoke-test ${PRODUCTION_URL}
+    - health-check ${PRODUCTION_URL}/health
+    - bvt ${PRODUCTION_URL}
+```
+
+## Per-Component Dev Sandbox (allowed)
+
+```bash
+# Personal dev sandbox — one user, one component
+fun deploy --function hello --env dev-${USER}
+oss cp -r ./dist oss://{dev-bucket}/ --update
+# Per-component deploys to shared envs (preview/staging/production) are forbidden
+```
+
+## Stack Rollback
+
+```bash
+# Automatic on BVT failure
+deploy_stack --rollback ${LAST_STABLE_STACK_VERSION} --provider aliyun
+
+# Manual on demand
+deploy_stack --rollback --stack-version v1.2.3 --provider aliyun
+```

package/ai-dlc-skill/providers/aliyun/preview.yaml

@@ -0,0 +1,84 @@
+# Aliyun Stack Preview
+
+Preview deployment for the unified stack (backend + all clients: web, native, desktop, wxa, mya, tta). URL resolution is dynamic per platform; `BACKEND_URL` is injected into client builds at build time.
+
+## Overview
+
+`deploy_stack --preview --provider aliyun` deploys the full stack to an isolated preview environment and exports the stack URL. Used for per-component e2e AND cross-stack e2e verification before staging or production.
+
+## Preview Flow
+
+```
+git push feature branch
+  → deploy_stack --preview --provider aliyun
+  → STACK_URL = BACKEND_URL = https://{gateway}.{region}.fc.devs.com
+  → WEB_URL  = https://{bucket}.{region}.oss-website.aliyuncs.com
+  → NATIVE_DIST_URL = internal distribution URL
+  → DESKTOP_DIST_URL = internal distribution URL
+  → WXA_URL / MYA_URL / TTA_URL = mini-program preview QR
+  → Per-component e2e: pytest apps/{comp}/tests/e2e/ --base-url $URL
+  → Cross-stack e2e:  pytest tests/cross-stack/ --stack-url $STACK_URL
+  → TTL: 24h → auto cleanup
+```
+
+## Configuration
+
+```yaml
+preview:
+  orchestrator: deploy_stack
+  strategy: unified
+  ttl: 24h
+  auto_cleanup: true
+  db_sandbox: true          # isolated DB per preview
+  url_pattern_backend: "https://{gateway}.{region}.fc.devs.com"
+  url_pattern_web:     "https://{bucket}.{region}.oss-website.aliyuncs.com"
+  build_env:
+    web:
+      - BACKEND_URL
+      - STACK_URL
+    native:
+      - BACKEND_URL
+    desktop:
+      - BACKEND_URL
+    wxa:
+      - BACKEND_URL
+    mya:
+      - BACKEND_URL
+    tta:
+      - BACKEND_URL
+  env:
+    - STACK_URL             # = BACKEND_URL (gateway)
+    - BACKEND_URL
+    - WEB_URL
+    - NATIVE_DIST_URL
+    - DESKTOP_DIST_URL
+    - WXA_URL
+    - MYA_URL
+    - TTA_URL
+    - DATABASE_URL (sandbox)
+```
+
+## BDD E2E Integration
+
+```bash
+# Deploy unified stack preview
+export STACK_URL=$(deploy_stack --preview --provider aliyun --output url)
+export BACKEND_URL=$STACK_URL
+export WEB_URL=$(deploy_stack --preview --provider aliyun --output web_url)
+export NATIVE_DIST_URL=$(deploy_stack --preview --provider aliyun --output native_url)
+export DESKTOP_DIST_URL=$(deploy_stack --preview --provider aliyun --output desktop_url)
+
+# Per-component e2e
+pytest apps/backend/tests/e2e/ --base-url $BACKEND_URL
+pytest apps/web/tests/e2e/ --base-url $WEB_URL --api-url $BACKEND_URL
+pytest apps/native/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/desktop/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/wxa/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/mya/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/tta/tests/e2e/ --backend-url $BACKEND_URL
+
+# Cross-stack e2e
+pytest tests/cross-stack/ --stack-url $STACK_URL
+
+# Cleanup (automatic after TTL)
+```

package/ai-dlc-skill/providers/aliyun/provider.yaml

@@ -0,0 +1,160 @@
+# Aliyun Provider (Stack-aware)
+
+Aliyun (Alibaba Cloud) provider — secondary platform. Supports the unified stack deploy (backend + all clients: web, native, desktop, wxa, mya, tta) and per-component deploys (for isolated dev sandboxes only).
+
+## Metadata
+
+```yaml
+provider:
+  name: aliyun
+  display_name: Alibaba Cloud
+  default: false
+  version: 3.0.0
+  website: https://www.aliyun.com/
+
+stack:
+  components:
+    - id: backend
+      deploy_order: 1
+      exposes: BACKEND_URL
+    - id: web
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: native
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: desktop
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: wxa
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: mya
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: tta
+      deploy_order: 2
+      consumes: BACKEND_URL
+
+regions:
+  - id: cn-shanghai
+    name: Shanghai
+  - id: cn-beijing
+    name: Beijing
+  - id: cn-hangzhou
+    name: Hangzhou
+  - id: ap-southeast-1
+    name: Singapore
+
+services:
+  - functions: function-compute
+  - database: rds + tablestore
+  - storage: oss
+  - hosting: static-website + cdn
+
+limits:
+  function_timeout: 600s
+  function_memory: 3072MB
+
+compute_modes:
+  - id: fc
+    type: faas
+    default: true
+    description: "Function Compute — event-driven functions"
+    limits:
+      timeout: 600s
+      memory: 3072MB
+  - id: sae
+    type: caas
+    description: "Serverless App Engine 2.0 — container/web app hosting"
+    limits:
+      timeout: 86400s
+      memory: 32768MB
+
+capabilities:
+  - function_compute
+  - serverless_app_engine
+  - oss_storage
+  - rds_database
+  - tablestore
+  - static_hosting
+  - cdn_acceleration
+  - preview_deploy
+  - ssl_cert
+  - stack_deploy
+  - build_env_injection
+```
+
+## Stack Deploy (recommended for shared environments)
+
+```bash
+# Unified stack preview
+deploy_stack --preview --provider aliyun
+# → backend:  fun deploy --env preview
+# → web:      oss + cdn deploy with build env BACKEND_URL=${STACK_URL}
+# → native:   build with BACKEND_URL injected; package
+# → desktop:  build with BACKEND_URL injected; package
+# → wxa:      build with BACKEND_URL injected; upload to mini-program platform
+# → mya:      build with BACKEND_URL injected; upload to mini-program platform
+# → tta:      build with BACKEND_URL injected; upload to mini-program platform
+# → STACK_URL = https://{gateway}.{region}.fc.devs.com
+
+deploy_stack --env staging --provider aliyun
+deploy_stack --env production --provider aliyun
+deploy_stack --rollback ${LAST_STABLE_STACK_VERSION} --provider aliyun
+```
+
+## Per-Component Deploy (dev sandboxes only)
+
+```bash
+# Functions
+fun deploy --function hello
+
+# Storage (OSS)
+oss cp ./file.txt oss://bucket/path/
+oss ls oss://bucket/
+
+# Database (RDS / TableStore)
+# RDS: standard MySQL/PostgreSQL CLI
+# TableStore: ots search
+
+# Hosting (web only, dev sandbox)
+oss cp -r ./dist oss://{dev-bucket}/ && cdn refresh
+
+# Environment
+fun config --account-id <id>
+fun config --region cn-shanghai
+```
+
+> Per-component deploys to shared environments are forbidden (STK-004). Use `deploy_stack`.
+
+## URL Resolution
+
+| Component | Pattern |
+|-----------|---------|
+| `STACK_URL` / `BACKEND_URL` | `https://{gateway}.{region}.fc.devs.com` |
+| `WEB_URL` | `https://{bucket}.{region}.oss-website.aliyuncs.com` |
+| `NATIVE_DIST_URL` | internal distribution URL |
+| `DESKTOP_DIST_URL` | internal distribution URL |
+| `WXA_URL` | mini-program preview QR |
+| `MYA_URL` | mini-program preview QR |
+| `TTA_URL` | mini-program preview QR |
+
+## Build Config Injection
+
+```bash
+BACKEND_URL=$STACK_URL pnpm --filter web build
+oss cp -r ./dist oss://{bucket}/ --update
+cdn refresh
+```
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| ALICLOUD_ACCESS_KEY | Aliyun access key ID |
+| ALICLOUD_SECRET_KEY | Aliyun access key secret |
+| ALICLOUD_REGION | Default region |
+| FUNCTION_COMPUTE_SERVICE | FC service name |
+| BACKEND_URL | Stack URL injected at build time |
+| STACK_URL | Alias of BACKEND_URL (gateway) |

package/ai-dlc-skill/providers/tcb/deployment.yaml

@@ -0,0 +1,69 @@
+# TCB Stack Deployment
+
+Production deployment pipeline for TCB. The default is the unified `deploy_stack` orchestrator; per-component deploys are only allowed into isolated dev sandboxes.
+
+## Environments
+
+| Environment | Purpose | Deploy Trigger | Orchestrator |
+|-------------|---------|----------------|--------------|
+| preview | Per-component + cross-stack e2e | Feature branch | `deploy_stack --preview` |
+| staging | Pre-production stack validation | PR merge to main | `deploy_stack --env staging` |
+| production | Live traffic | Release tag + human approval | `deploy_stack --env production` |
+
+## Stack Deploy Steps
+
+```yaml
+staging:
+  orchestrator: deploy_stack
+  steps:
+    - tcb fn deploy --env staging            # backend
+    - tcb db migrate --env staging           # backend
+    - tcb hosting deploy --env staging \
+        --build-env BACKEND_URL=${STACK_URL}  # web
+    - native build with BACKEND_URL injected  # native
+    - desktop build with BACKEND_URL injected # desktop
+    - wxa build with BACKEND_URL injected     # wxa
+    - mya build with BACKEND_URL injected     # mya
+    - tta build with BACKEND_URL injected     # tta
+    - smoke-test ${STACK_URL}
+
+production:
+  orchestrator: deploy_stack
+  pre_conditions:
+    - human-approval-gate
+  steps:
+    - tcb fn deploy --env production
+    - tcb db migrate --env production
+    - tcb hosting deploy --env production \
+        --build-env BACKEND_URL=${STACK_URL}
+    - native build with BACKEND_URL injected
+    - desktop build with BACKEND_URL injected
+    - wxa build with BACKEND_URL injected
+    - mya build with BACKEND_URL injected
+    - tta build with BACKEND_URL injected
+    - smoke-test ${PRODUCTION_URL}
+    - health-check ${PRODUCTION_URL}/health
+    - bvt ${PRODUCTION_URL}
+```
+
+## Per-Component Dev Sandbox (allowed)
+
+```bash
+# Personal dev sandbox — one user, one component
+tcb env create dev-${USER}
+tcb fn deploy --name hello --dir ./functions --env dev-${USER}
+tcb hosting deploy --env dev-${USER}
+# Per-component deploys to shared envs (preview/staging/production) are forbidden
+```
+
+## Stack Rollback
+
+```bash
+# Automatic on BVT failure
+deploy_stack --rollback ${LAST_STABLE_STACK_VERSION} --provider tcb
+
+# Manual on demand
+deploy_stack --rollback --stack-version v1.2.3 --provider tcb
+```
+
+The previous stable stack version is identified by the last green BVT.

package/ai-dlc-skill/providers/tcb/preview.yaml

@@ -0,0 +1,83 @@
+# TCB Stack Preview
+
+Preview deployment for the unified stack (backend + all clients: web, native, desktop, wxa, mya, tta). URL resolution is dynamic per platform; `BACKEND_URL` is injected into client builds at build time.
+
+## Overview
+
+`deploy_stack --preview --provider tcb` deploys the full stack to an isolated preview environment and exports the stack URL. Used for per-component e2e AND cross-stack e2e verification before staging or production.
+
+## Preview Flow
+
+```
+git push feature branch
+  → deploy_stack --preview --provider tcb
+  → STACK_URL = BACKEND_URL = https://{env-id}.tcb-preview.com
+  → WEB_URL  = https://{env-id}-{project}.tcb-preview.com
+  → NATIVE_DIST_URL = internal distribution URL
+  → DESKTOP_DIST_URL = internal distribution URL
+  → WXA_URL / MYA_URL / TTA_URL = mini-program preview QR
+  → Per-component e2e: pytest apps/{comp}/tests/e2e/ --base-url $URL
+  → Cross-stack e2e:  pytest tests/cross-stack/ --stack-url $STACK_URL
+  → TTL: 24h → auto cleanup
+```
+
+## Configuration
+
+```yaml
+preview:
+  orchestrator: deploy_stack
+  strategy: unified
+  ttl: 24h
+  auto_cleanup: true
+  db_sandbox: true          # isolated database per preview
+  url_pattern: "https://{env-id}.tcb-preview.com"
+  build_env:
+    web:
+      - BACKEND_URL
+      - STACK_URL
+    native:
+      - BACKEND_URL
+    desktop:
+      - BACKEND_URL
+    wxa:
+      - BACKEND_URL
+    mya:
+      - BACKEND_URL
+    tta:
+      - BACKEND_URL
+  env:
+    - STACK_URL             # = BACKEND_URL (gateway)
+    - BACKEND_URL
+    - WEB_URL
+    - NATIVE_DIST_URL
+    - DESKTOP_DIST_URL
+    - WXA_URL
+    - MYA_URL
+    - TTA_URL
+    - DATABASE_URL (sandbox)
+```
+
+## BDD E2E Integration
+
+```bash
+# Deploy unified stack preview
+export STACK_URL=$(deploy_stack --preview --provider tcb --output url)
+export BACKEND_URL=$STACK_URL
+export WEB_URL=$(deploy_stack --preview --provider tcb --output web_url)
+export NATIVE_DIST_URL=$(deploy_stack --preview --provider tcb --output native_url)
+export DESKTOP_DIST_URL=$(deploy_stack --preview --provider tcb --output desktop_url)
+
+# Per-component e2e
+pytest apps/backend/tests/e2e/ --base-url $BACKEND_URL
+pytest apps/web/tests/e2e/ --base-url $WEB_URL --api-url $BACKEND_URL
+pytest apps/native/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/desktop/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/wxa/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/mya/tests/e2e/ --backend-url $BACKEND_URL
+pytest apps/tta/tests/e2e/ --backend-url $BACKEND_URL
+
+# Cross-stack e2e
+pytest tests/cross-stack/ --stack-url $STACK_URL
+
+# Cleanup (automatic after TTL)
+```

package/ai-dlc-skill/providers/tcb/provider.yaml

@@ -0,0 +1,172 @@
+# TCB Provider (Stack-aware)
+
+Default cloud development platform. Supports the unified stack deploy (backend + all clients: web, native, desktop, wxa, mya, tta) and per-component deploys (for isolated dev sandboxes only).
+
+## Metadata
+
+```yaml
+provider:
+  name: tcb
+  display_name: Tencent CloudBase
+  default: true
+  version: 3.0.0
+  website: https://cloud.tencent.com/product/tcb
+
+stack:
+  components:
+    - id: backend
+      deploy_order: 1
+      exposes: BACKEND_URL
+    - id: web
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: native
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: desktop
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: wxa
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: mya
+      deploy_order: 2
+      consumes: BACKEND_URL
+    - id: tta
+      deploy_order: 2
+      consumes: BACKEND_URL
+
+regions:
+  - id: ap-shanghai
+    name: Shanghai
+  - id: ap-beijing
+    name: Beijing
+  - id: ap-guangzhou
+    name: Guangzhou
+  - id: ap-singapore
+    name: Singapore
+
+services:
+  - functions: cloudbase
+  - database: cloudbase
+  - storage: cloudbase
+  - hosting: cloudbase
+
+limits:
+  function_timeout: 60s
+  function_memory: 1536MB
+  max_instances: 100
+
+compute_modes:
+  - id: cloudbase-functions
+    type: faas
+    default: true
+    description: "CloudBase Functions (SCF) — event-driven functions"
+    limits:
+      timeout: 60s
+      memory: 1536MB
+      max_instances: 100
+  - id: cloudbase-run
+    type: caas
+    description: "CloudBase Run — container hosting"
+    limits:
+      timeout: 3600s
+      memory: 4096MB
+
+capabilities:
+  - serverless_functions
+  - static_hosting
+  - serverless_database
+  - serverless_storage
+  - preview_deploy
+  - ssl_cert
+  - custom_domain
+  - cdn_acceleration
+  - stack_deploy
+  - build_env_injection
+  - container_hosting
+
+storage:
+  object_storage: cloudbase-storage
+  document_db: docdb
+  relational_db: mysql
+  cdn: tencent-cloud-cdn
+```
+
+## Stack Deploy (recommended for shared environments)
+
+```bash
+# Unified stack preview (returns STACK_URL = BACKEND_URL + per-component URLs)
+deploy_stack --preview --provider tcb
+# → backend:  tcb fn deploy --env preview
+# → backend:  tcb db migrate --env preview
+# → web:      tcb hosting deploy --env preview --build-env BACKEND_URL=${STACK_URL}
+# → native:   build with BACKEND_URL injected; upload to internal distribution
+# → desktop:  build with BACKEND_URL injected; upload to internal distribution
+# → wxa:      build with BACKEND_URL injected; upload to mini-program platform
+# → mya:      build with BACKEND_URL injected; upload to mini-program platform
+# → tta:      build with BACKEND_URL injected; upload to mini-program platform
+# → STACK_URL = https://{env-id}.tcb-preview.com
+
+# Stack staging
+deploy_stack --env staging --provider tcb
+
+# Stack production (after human approval)
+deploy_stack --env production --provider tcb
+
+# Stack rollback
+deploy_stack --rollback ${LAST_STABLE_STACK_VERSION} --provider tcb
+```
+
+## Per-Component Deploy (dev sandboxes only)
+
+For isolated dev work on a single component, per-component deploy is allowed into a personal sandbox env.
+
+```bash
+# Functions
+tcb fn deploy --name hello --dir ./functions
+tcb fn invoke --name hello --params '{}'
+tcb fn logs --name hello
+
+# Database
+tcb db query "SELECT * FROM users"
+tcb db migrate
+
+# Hosting (web only)
+tcb hosting deploy --env dev-<user>
+
+# Environment
+tcb env list
+tcb env use <env-id>
+```
+
+> Per-component deploys to shared environments (preview, staging, production) are forbidden (STK-004). Use `deploy_stack`.
+
+## URL Resolution
+
+| Component | Pattern |
+|-----------|---------|
+| `STACK_URL` / `BACKEND_URL` | `https://{env-id}.tcb-preview.com` |
+| `WEB_URL` | `https://{env-id}-{project}.tcb-preview.com` |
+| `NATIVE_DIST_URL` | internal distribution URL |
+| `DESKTOP_DIST_URL` | internal distribution URL |
+| `WXA_URL` | mini-program preview QR |
+| `MYA_URL` | mini-program preview QR |
+| `TTA_URL` | mini-program preview QR |
+
+## Build Config Injection
+
+```bash
+tcb hosting deploy --env preview --build-env BACKEND_URL=$STACK_URL
+# web reads process.env.BACKEND_URL at build time
+```
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| TCB_SECRET_ID | Tencent Cloud secret ID |
+| TCB_SECRET_KEY | Tencent Cloud secret key |
+| TCB_ENV_ID | CloudBase environment ID |
+| BACKEND_URL | Stack URL injected at build time |
+| STACK_URL | Alias of BACKEND_URL (gateway) |