@scemoon/cdh 1.0.8 → 1.0.9-beta.2

package/ai-dlc-skill/providers/aliyun/SKILL.md

@@ -0,0 +1,204 @@
+---
+name: aliyun
+description: |
+  Alibaba Cloud (Aliyun) knowledge base for AI Agents.
+  Covers: Function Compute (FC), Serverless App Engine (SAE), OSS Storage,
+  RDS/MySQL, TableStore, CDN Hosting, REST API, SDK.
+  Supports decision-making for architecture selection, deployment, troubleshooting.
+triggers:
+  - aliyun
+  - alibaba cloud
+  - function compute
+  - fc
+  - serverless
+  - oss
+  - rds
+  - 阿里云
+services:
+  - function-compute
+  - serverless-app-engine
+  - oss-storage
+  - rds
+  - tablestore
+  - cdn-hosting
+compute_modes:
+  - fc  # FaaS
+  - sae # CaaS
+credentials:
+  - ALICLOUD_ACCESS_KEY
+  - ALICLOUD_SECRET_KEY
+  - ALICLOUD_REGION
+  - FUNCTION_COMPUTE_SERVICE
+compatibility:
+  cdh: ">=1.4"
+  opencode: ">=1.15"
+---
+
+# Alibaba Cloud (Aliyun) Knowledge Base
+
+## What is Aliyun
+
+Aliyun (Alibaba Cloud) is a comprehensive cloud computing platform providing:
+
+| Service | Type | Use Case |
+|---------|------|----------|
+| Function Compute (FC) | FaaS | Event-driven serverless functions |
+| Serverless App Engine (SAE) | CaaS | Long-running container workloads |
+| RDS (MySQL/PostgreSQL) | RDBMS | Relational data, SQL queries |
+| TableStore | NoSQL | Wide-column storage, massive scale |
+| OSS | Object Storage | Files, images, static assets |
+| CDN + Static Website | Static Hosting | SPA, static sites, global acceleration |
+
+## Agent Decision Tree
+
+When agent needs to interact with Aliyun, follow this decision tree:
+
+```
+1. What is the goal?
+   ├── Deploy/manage serverless functions → services/function-compute.md
+   ├── Deploy/manage container apps → services/serverless-app-engine.md
+   ├── Store/query relational data → services/database.md
+   ├── Store/query massive NoSQL data → services/database.md (TableStore)
+   ├── Upload/download files → services/storage.md
+   ├── Deploy static website → services/cdn-hosting.md
+   └── Debug/deploy → best-practices/troubleshooting.md
+```
+
+## How to Interact
+
+### CLI Tools
+
+Aliyun uses multiple CLI tools:
+
+| Tool | Purpose |
+|------|---------|
+| `fun` | Function Compute deployment and management |
+| `ossutil` | OSS storage operations |
+| `ocs` | TableStore operations |
+| `aliyun` | General Aliyun CLI (RDS, etc.) |
+| `cdn` | CDN refresh and management |
+
+### REST API (For programmatic access)
+
+```
+https://{product}.{region}.aliyuncs.com/
+Headers: Authorization, Content-Type
+```
+
+See `api/rest-api.md` for endpoint reference.
+
+### SDK (For programmatic access)
+
+```
+Node.js, Python, Java, PHP, .NET, Go
+```
+
+See `api/sdk.md` for SDK reference.
+
+## Architecture Overview
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                       Aliyun Platform                        │
+├─────────────┬─────────────┬─────────────┬──────────────────┤
+│    FC       │    SAE      │    RDS      │      OSS         │
+│  (Function  │  (Serverless│  (MySQL/    │   (Object        │
+│   Compute)  │   App Eng.) │   PG)       │    Storage)      │
+├─────────────┴─────────────┴─────────────┴──────────────────┤
+│                    CDN + Static Website                     │
+│                  (Global Edge + OSS Origin)                 │
+└─────────────────────────────────────────────────────────────┘
+                              │
+                    ┌─────────┴─────────┐
+              Custom Domain + SSL
+                    │
+     ┌──────────────┼──────────────┐
+     │              │              │
+   Backend       Web App      Mobile App
+  (FC/SAE)     (OSS+CDN)     (via API)
+```
+
+## Region Selection
+
+| Region ID | Region Name | Use Case |
+|-----------|-------------|----------|
+| `cn-shanghai` | Shanghai | China mainland (default) |
+| `cn-beijing` | Beijing | China mainland alternative |
+| `cn-hangzhou` | Hangzhou | China mainland alternative |
+| `ap-southeast-1` | Singapore | Southeast Asia |
+
+## Credential Management
+
+See `security/authentication.md` for complete guide.
+
+| Variable | Description |
+|----------|-------------|
+| `ALICLOUD_ACCESS_KEY` | Aliyun access key ID |
+| `ALICLOUD_SECRET_KEY` | Aliyun access key secret |
+| `ALICLOUD_REGION` | Default region |
+
+## Quick Reference
+
+### Deploy a Function
+
+```bash
+# Using fun CLI
+fun deploy --function hello --service my-service --env $ALICLOUD_REGION
+
+# Using template.yml
+fun deploy --template template.yml
+```
+
+### Store Files
+
+```bash
+# Upload to OSS
+ossutil cp ./file.txt oss://bucket/path/
+
+# List bucket
+ossutil ls oss://bucket/
+```
+
+### Query Database
+
+```bash
+# Connect to RDS MySQL
+mysql -h ${RDS_HOST} -P 3306 -u ${RDS_USER} -p${RDS_PASSWORD}
+
+# TableStore query
+ots select --instance-name xxx --table-name xxx
+```
+
+## File Structure
+
+```
+aliyun/
+├── SKILL.md                    # This file
+├── provider.yaml               # AI-DLC provider config
+├── preview.yaml                # Preview deployment flow
+├── deployment.yaml             # Production deployment pipeline
+├── services/
+│   ├── overview.md             # Platform overview
+│   ├── function-compute.md     # Function Compute (FaaS)
+│   ├── serverless-app-engine.md# SAE (CaaS)
+│   ├── storage.md              # OSS object storage
+│   ├── database.md             # RDS + TableStore
+│   └── cdn-hosting.md          # CDN + Static website
+├── cli/
+│   ├── setup.md                # Installation & login
+│   ├── functions.md            # fun CLI reference
+│   ├── storage.md              # ossutil reference
+│   ├── database.md             # RDS & TableStore CLI
+│   └── hosting.md              # OSS + CDN hosting
+├── api/
+│   ├── rest-api.md             # REST API reference
+│   └── sdk.md                  # Multi-language SDK
+├── integration/
+│   └── ci-cd.md                # CI/CD integration
+├── security/
+│   └── authentication.md       # Auth & credentials
+└── best-practices/
+    ├── function-design.md      # Function design patterns
+    ├── database-design.md      # Database schema design
+    └── troubleshooting.md      # Common issues & solutions
+```

package/ai-dlc-skill/providers/aliyun/api/rest-api.md

@@ -0,0 +1,214 @@
+# Aliyun REST API Reference
+
+## When to Use REST API vs CLI vs SDK
+
+**Use REST API when:**
+- Need programmatic access from external systems
+- CLI/SDK doesn't support specific operation
+- Building custom integrations
+- Debugging and testing
+
+**Use SDK when:**
+- Building applications (preferred over raw API)
+- Need type-safe access
+
+**Use CLI when:**
+- One-off operations
+- CI/CD pipelines
+- Local development
+
+## API Base URL
+
+```
+https://{product}.{region}.aliyuncs.com/
+```
+
+Common endpoints:
+- Function Compute: `https://fc.{region}.aliyuncs.com`
+- OSS: `https://oss.{region}.aliyuncs.com`
+- RDS: `https://rds.{region}.aliyuncs.com`
+- TableStore: `https://ots.{region}.aliyuncs.com`
+- CDN: `https://cdn.aliyuncs.com`
+
+## Authentication
+
+### Common Headers
+
+```
+Authorization: <signature>
+Content-Type: application/json
+X-Accees-Key-Id: <access-key-id>
+```
+
+### Signature Algorithm
+
+```javascript
+const crypto = require('crypto');
+
+function sign(request, accessKeySecret) {
+  const stringToSign = crypto
+    .createHmac('sha256', accessKeySecret)
+    .update(request)
+    .digest('base64');
+  return stringToSign;
+}
+```
+
+## Function Compute API
+
+### List Services
+
+```
+GET /services
+```
+
+### Create Service
+
+```
+POST /services
+{
+  "ServiceName": "my-service",
+  "Description": "My service"
+}
+```
+
+### Deploy Function
+
+```
+POST /services/{serviceName}/functions/{functionName}
+{
+  "Runtime": "nodejs14",
+  "Handler": "index.handler",
+  "MemorySize": 256,
+  "Timeout": 60,
+  "Code": {
+    "ZipFile": "<base64-encoded-code>"
+  }
+}
+```
+
+### Invoke Function
+
+```
+POST /services/{serviceName}/functions/{functionName}/invocations
+{
+  "event": {}
+}
+```
+
+## OSS API
+
+### List Buckets
+
+```
+GET /?buckets
+```
+
+### Put Object
+
+```
+PUT /{bucket}/{object}
+Content-Type: image/jpeg
+Body: <binary-data>
+```
+
+### Get Object
+
+```
+GET /{bucket}/{object}
+```
+
+### Generate Signed URL
+
+```
+GET /{bucket}/{object}?Expires=3600&OSSAccessKeyId=xxx&Signature=xxx
+```
+
+## RDS API
+
+### Describe Instances
+
+```
+GET /instances?RegionId=cn-shanghai
+```
+
+### Create Database
+
+```
+POST /instances/{instanceId}/databases
+{
+  "DBName": "myapp",
+  "CharacterSetName": "utf8mb4"
+}
+```
+
+### Create Account
+
+```
+POST /instances/{instanceId}/accounts
+{
+  "AccountName": "appuser",
+  "AccountPassword": "StrongPass123!",
+  "AccountType": "Normal"
+}
+```
+
+## CDN API
+
+### Refresh Cache
+
+```
+POST /?RefreshObjectCaches
+{
+  "ObjectPath": ["http://example.com/index.html"],
+  "ObjectType": "File"
+}
+```
+
+### Describe Domain Stats
+
+```
+GET /?DomainStats&DomainName=example.com&StartTime=1640000000&EndTime=1640100000
+```
+
+## Error Responses
+
+All API errors follow this format:
+
+```json
+{
+  "Code": "InvalidAccessKeyId",
+  "Message": "The specified AccessKeyId is invalid",
+  "RequestId": "12345678-1234-1234-1234-123456789012"
+}
+```
+
+### Common Error Codes
+
+| Code | Meaning |
+|------|---------|
+| `InvalidAccessKeyId` | Access key not found |
+| `SignatureDoesNotMatch` | Signature verification failed |
+| `InvalidParameter` | Missing or invalid parameter |
+| `ResourceNotFound` | Resource doesn't exist |
+| `Unauthorized` | Permission denied |
+| `Throttling` | Rate limit exceeded |
+
+## Rate Limits
+
+| API | Limit |
+|-----|-------|
+| Function Compute invoke | 1000/min |
+| OSS | 10000/min (upload), 10000/min (download) |
+| RDS | 100/min |
+| CDN refresh | 100/day (file), 10/day (directory) |
+
+## Best Practices
+
+1. **Use SDK when possible** - Easier than raw API
+2. **Implement retry logic** - Handle transient errors
+3. **Use pagination** - Don't fetch all data at once
+4. **Cache responses** - When data doesn't change frequently
+5. **Use appropriate timeout** - Some operations take longer
+
+For SDK reference → `sdk.md`

package/ai-dlc-skill/providers/aliyun/api/sdk.md

@@ -0,0 +1,307 @@
+# Aliyun SDK Reference
+
+## SDK Options
+
+| SDK | Language | Use Case |
+|-----|----------|----------|
+| `@alicloud/fc-builders` | Node.js | Function Compute build/deploy |
+| `@alicloud/oss-sdk` | Node.js | OSS operations |
+| `ali-oss` | Node.js/Browser | OSS (recommended) |
+| `@serverless-devs/sdk` | Multi | Serverless devs |
+| `tablestore` | Node.js/Python/Java | TableStore |
+
+## Function Compute SDK (@alicloud/fc)
+
+### Installation
+
+```bash
+npm install @alicloud/fc-builders @alicloud/fc
+```
+
+### Initialize Client
+
+```javascript
+const FC = require('@alicloud/fc');
+const fs = require('fs');
+
+const fcClient = new FC({
+  accessKeyId: process.env.ALICLOUD_ACCESS_KEY,
+  accessKeySecret: process.env.ALICLOUD_SECRET_KEY,
+  region: process.env.ALICLOUD_REGION
+});
+```
+
+### Deploy Function
+
+```javascript
+const zipBuffer = fs.readFileSync('./function.zip');
+
+await fcClient.createFunction('my-service', {
+  FunctionName: 'hello',
+  Handler: 'index.handler',
+  Runtime: 'nodejs14',
+  MemorySize: 256,
+  Timeout: 60,
+  Code: { ZipFile: zipBuffer.toString('base64') }
+});
+```
+
+### Invoke Function
+
+```javascript
+const result = await fcClient.invokeFunction('my-service', 'hello', {
+  invocationType: 'Sync',
+  payload: JSON.stringify({ key: 'value' })
+});
+
+console.log(result.data); // Function response
+```
+
+## OSS SDK (ali-oss)
+
+### Installation
+
+```bash
+npm install ali-oss
+```
+
+### Initialize Client
+
+```javascript
+const OSS = require('ali-oss');
+
+const client = new OSS({
+  region: process.env.ALICLOUD_REGION,
+  accessKeyId: process.env.ALICLOUD_ACCESS_KEY,
+  accessKeySecret: process.env.ALICLOUD_SECRET_KEY,
+  bucket: 'my-bucket'
+});
+```
+
+### Upload File
+
+```javascript
+async function upload(fileName, fileContent) {
+  const result = await client.put(fileName, fileContent);
+  return result.url;
+}
+
+// Or with stream
+const stream = fs.createReadStream('./file.txt');
+const result = await client.putStream('uploads/file.txt', stream);
+```
+
+### Download File
+
+```javascript
+const result = await client.get('uploads/file.txt', './download.txt');
+```
+
+### List Files
+
+```javascript
+const result = await client.list({
+  prefix: 'uploads/',
+  marker: '',
+  'max-keys': 100
+});
+
+result.objects.forEach(obj => {
+  console.log(obj.name, obj.size);
+});
+```
+
+### Generate Signed URL
+
+```javascript
+const url = client.signatureUrl('private/file.pdf', {
+  expires: 3600
+});
+```
+
+### Multipart Upload
+
+```javascript
+const file = fs.createReadStream('./large-file.zip');
+const result = await client.multipartUpload('backups/large-file.zip', file, {
+  partSize: 10 * 1024 * 1024, // 10MB parts
+  progress: (p) => console.log(`Progress: ${p * 100}%`)
+});
+```
+
+## TableStore SDK
+
+### Installation
+
+```bash
+npm install tablestore
+```
+
+### Initialize Client
+
+```javascript
+const TableStore = require('tablestore');
+
+const client = new TableStore.Client({
+  accessKeyId: process.env.ALICLOUD_ACCESS_KEY,
+  accessKeySecret: process.env.ALICLOUD_SECRET_KEY,
+  instanceName: 'my-instance',
+  region: process.env.ALICLOUD_REGION
+});
+```
+
+### Put Row
+
+```javascript
+await client.putRow({
+  tableName: 'users',
+  primaryKey: [{ user_id: 'user-123' }],
+  attributeColumns: [
+    { name: 'name', value: 'Alice' },
+    { name: 'email', value: 'alice@example.com' }
+  ]
+});
+```
+
+### Get Row
+
+```javascript
+const result = await client.getRow({
+  tableName: 'users',
+  primaryKey: [{ user_id: 'user-123' }]
+});
+
+console.log(result.row.attributes);
+```
+
+### Query with Index
+
+```javascript
+const result = await client.search({
+  tableName: 'users',
+  indexName: 'email_index',
+  searchQuery: {
+    offset: 0,
+    limit: 10,
+    query: {
+      terms: [{ email: 'alice@example.com' }]
+    }
+  }
+});
+```
+
+## RDS (MySQL) SDK
+
+### Installation
+
+```bash
+npm install mysql2
+```
+
+### Connection Pool
+
+```javascript
+const mysql = require('mysql2/promise');
+
+const pool = mysql.createPool({
+  host: process.env.RDS_HOST,
+  port: process.env.RDS_PORT || 3306,
+  user: process.env.RDS_USER,
+  password: process.env.RDS_PASSWORD,
+  database: process.env.RDS_DATABASE,
+  waitForConnections: true,
+  connectionLimit: 10,
+  queueLimit: 0
+});
+
+// Query
+const [rows] = await pool.execute('SELECT * FROM users LIMIT 10');
+
+// Transaction
+const connection = await pool.getConnection();
+await connection.beginTransaction();
+try {
+  await connection.execute('INSERT INTO users (name) VALUES (?)', ['Alice']);
+  await connection.commit();
+} catch (e) {
+  await connection.rollback();
+} finally {
+  connection.release();
+}
+```
+
+## Common Patterns
+
+### Batch Operations (OSS)
+
+```javascript
+async function uploadBatch(files) {
+  const promises = files.map(file =>
+    client.put(file.key, file.content)
+  );
+  return Promise.all(promises);
+}
+```
+
+### Conditional Write (OTS)
+
+```javascript
+await client.putRow({
+  tableName: 'counters',
+  primaryKey: [{ key: 'page_views' }],
+  attributeColumns: [
+    { name: 'count', value: 1, type: 'increment' }
+  ],
+  condition: 'IGNORE'  // Ignore if exists
+});
+```
+
+### Retry with Backoff
+
+```javascript
+async function withRetry(fn, maxRetries = 3) {
+  for (let i = 0; i < maxRetries; i++) {
+    try {
+      return await fn();
+    } catch (error) {
+      if (i === maxRetries - 1) throw error;
+      await sleep(Math.pow(2, i) * 100);
+    }
+  }
+}
+```
+
+## Best Practices
+
+1. **Reuse client instance** - Don't re-initialize on every request
+2. **Use connection pooling** - For database connections
+3. **Handle errors** - Wrap SDK calls in try/catch
+4. **Use multipart for large files** - OSS multipart upload
+5. **Close clients** - On function exit
+
+## Error Handling
+
+```javascript
+try {
+  const result = await client.put(fileName, content);
+} catch (e) {
+  if (e.code === 'RequestTimeTooSkewed') {
+    console.error('Clock issue - check system time');
+  } else if (e.code === 'SignatureDoesNotMatch') {
+    console.error('Credential issue - check access key');
+  } else {
+    throw e;
+  }
+}
+```
+
+## Troubleshooting
+
+| Issue | Cause | Solution |
+|-------|-------|----------|
+| `RequestTimeTooSkewed` | Clock out of sync | Sync system time |
+| `InvalidAccessKeyId` | Wrong credentials | Verify access key |
+| `oss upload timeout` | Large file | Use multipart upload |
+| `OTS throttle` | Exceeded throughput | Add delay between requests |
+
+For troubleshooting → `../best-practices/troubleshooting.md`