agent-nuvira 1.88.1 → 1.88.2

package/.agents/skills/backup-strategy/SKILL.md

@@ -1,27 +1,148 @@
 ---
 name: backup-strategy
 description: Design and implement backup strategies. Use when the goal asks to set up backups, disaster recovery, or data protection.
-version: 1.0.0
+version: 2.0.0
+whenToUse: Backup automation, disaster recovery, data retention, compliance, cross-region replication
+whenNotToUse: Real-time replication (use database replication), caching (use redis-cache), log aggregation
 ---
 
-# backup-strategy
+# Backup Strategy
 
-Design and implement backup strategies. Use when the goal asks to set up backups, disaster recovery, or data protection.
+Design and implement backup strategies with enterprise patterns.
 
 ## Goal pattern
 
-backup disaster recovery retention snapshot restore data protection
+backup disaster recovery retention snapshot restore data protection RPO RTO
 
 ## Parameters
 
 - strategy (choice [default: incremental]): Backup strategy
+- storage (choice [default: s3]): Backup storage location
+- encryption (boolean [default: true]): Encrypt backups
 
 ## Steps
 
-1. [analyst] Define RPO (Recovery Point Objective) and RTO (Recovery Time Objective). Identify critical data.
+### Step 1: [context-gatherer] — Analyze backup requirements
 
-2. [analyst] Implement backup strategy: full, incremental, differential. Choose storage (S3, GCS, tape). (after: step-0)
+```bash
+# Check data to backup
+du -sh /var/lib/postgresql/ 2>/dev/null
+du -sh /var/lib/mysql/ 2>/dev/null
+du -sh /app/data/ 2>/dev/null
 
-3. [analyst] Add encryption, compression, and versioning. Implement retention policies. (after: step-1)
+# Check existing backups
+ls -la /var/backups/ 2>/dev/null
+aws s3 ls s3://my-backups/ 2>/dev/null
 
-4. [analyst] Test restore procedures regularly. Document runbooks and verify backups. (after: step-2)
+# Check disk space
+df -h /var/backups
+```
+
+- What data? (database, files, configurations)
+- What RPO? (Recovery Point Objective - max data loss)
+- What RTO? (Recovery Time Objective - max downtime)
+- What retention? (7 days, 30 days, 1 year)
+- What compliance? (GDPR, HIPAA, SOC2)
+
+### Step 2: [writer] — Implement backup solution
+
+**Database backup script:**
+```bash
+#!/bin/bash
+# /usr/local/bin/backup-db.sh
+set -euo pipefail
+
+TIMESTAMP=$(date +%Y%m%d_%H%M%S)
+BACKUP_DIR="/var/backups/db"
+S3_BUCKET="s3://my-backups/database"
+RETENTION_DAYS=30
+
+# Create backup
+pg_dump mydb | gzip > "$BACKUP_DIR/mydb_$TIMESTAMP.sql.gz"
+
+# Encrypt backup
+gpg --encrypt --recipient admin@example.com "$BACKUP_DIR/mydb_$TIMESTAMP.sql.gz"
+rm "$BACKUP_DIR/mydb_$TIMESTAMP.sql.gz"
+
+# Upload to S3
+aws s3 cp "$BACKUP_DIR/mydb_$TIMESTAMP.sql.gz.gpg" "$S3_BUCKET/"
+
+# Cleanup old backups
+find "$BACKUP_DIR" -name "*.gz.gpg" -mtime +$RETENTION_DAYS -delete
+
+# Log
+echo "Backup completed: mydb_$TIMESTAMP.sql.gz.gpg" >> /var/log/backup.log
+```
+
+**File backup with restic:**
+```bash
+# Initialize restic repository
+restic -r s3:s3.amazonaws.com/my-backups init
+
+# Backup files
+restic -r s3:s3.amazonaws.com/my-backups backup /app/data \
+  --verbose \
+  --exclude="*.tmp" \
+  --exclude="node_modules"
+
+# List snapshots
+restic -r s3:s3.amazonaws.com/my-backups snapshots
+
+# Restore from backup
+restic -r s3:s3.amazonaws.com/my-backups restore latest --target /restore
+```
+
+**Automated backup cron:**
+```bash
+# /etc/cron.d/backup
+0 2 * * * root /usr/local/bin/backup-db.sh >> /var/log/backup.log 2>&1
+0 3 * * * root /usr/local/bin/backup-files.sh >> /var/log/backup.log 2>&1
+0 4 * * 0 root /usr/local/bin/backup-verify.sh >> /var/log/backup.log 2>&1
+```
+
+### Step 3: [runner] — Deploy and test
+
+```bash
+# Run backup manually
+/usr/local/bin/backup-db.sh
+
+# Verify backup exists
+ls -la /var/backups/db/
+
+# Test restore
+gunzip -k /var/backups/db/mydb_20240101_020000.sql.gz
+psql mydb < /var/backups/db/mydb_20240101_020000.sql
+
+# Verify S3 upload
+aws s3 ls s3://my-backups/database/ | tail -5
+```
+
+### Step 4: [reviewer] — Verify backup strategy
+
+```bash
+# Check backup logs
+tail -100 /var/log/backup.log
+
+# Verify backup integrity
+gpg --verify /var/backups/db/mydb_*.gpg
+
+# Test restore to different location
+createdb mydb_restore
+psql mydb_restore < /var/backups/db/mydb_*.sql
+
+# Check retention
+find /var/backups -name "*.gz.gpg" -mtime +30 | wc -l
+```
+
+**Verification checklist:**
+- [ ] Backups complete successfully
+- [ ] Backups encrypted
+- [ ] Backups uploaded to offsite storage
+- [ ] Restore tested successfully
+- [ ] Retention policy enforced
+- [ ] Backup logs monitored
+- [ ] RPO/RTO targets met
+
+## Reference Documents
+
+Load deep-dive content with `skill_view('backup-strategy', 'references/guide.md')`.

package/.agents/skills/cdn-setup/SKILL.md

@@ -1,27 +1,193 @@
 ---
 name: cdn-setup
 description: Configure CDN for static assets. Use when the goal asks to set up CDN, optimize asset delivery, or reduce latency.
-version: 1.0.0
+version: 2.0.0
+whenToUse: Static asset delivery, global content distribution, cache optimization, DDoS protection, edge computing
+whenNotToUse: Dynamic API responses (use application caching), database queries, real-time WebSocket
 ---
 
-# cdn-setup
+# CDN Setup
 
-Configure CDN for static assets. Use when the goal asks to set up CDN, optimize asset delivery, or reduce latency.
+Configure CDN for optimal content delivery.
 
 ## Goal pattern
 
-cdn cloudflare cloudfront fastly cache static assets edge
+CDN content delivery network static assets cache edge cloudflare cloudfront
 
 ## Parameters
 
 - provider (choice [default: cloudflare]): CDN provider
+- caching (choice [default: aggressive]): Caching strategy
+- ssl (boolean [default: true]): SSL termination at edge
 
 ## Steps
 
-1. [analyst] Choose CDN provider (Cloudflare, CloudFront, Fastly). Configure custom domain and SSL.
+### Step 1: [context-gatherer] — Analyze content and traffic patterns
 
-2. [analyst] Set up cache rules: TTLs, purge strategies, and cache-by-header. (after: step-0)
+```bash
+# Check current asset sizes
+find public/ -type f -exec ls -lh {} \; | sort -k5 -h | tail -20
 
-3. [analyst] Configure origin shielding, mid-tier caching, and failover origins. (after: step-1)
+# Check existing CDN setup
+curl -I https://example.com/static/bundle.js 2>/dev/null | grep -i "cf-ray\|x-amz-cf\|x-fastly"
 
-4. [analyst] Monitor cache hit ratio, bandwidth savings, and latency improvements. (after: step-2)
+# Check DNS
+dig example.com +short
+dig CNAME example.com +short
+```
+
+- What content to serve? (images, JS, CSS, videos)
+- What origin server? (S3, EC2, GCS, custom)
+- What cache behavior? (long TTL for static, short for HTML)
+- What security needs? (DDoS protection, WAF, rate limiting)
+
+### Step 2: [writer] — Configure CDN
+
+**Cloudflare configuration:**
+```javascript
+// wrangler.toml (Cloudflare Workers for edge logic)
+name = "myapp-cdn"
+main = "src/worker.ts"
+compatibility_date = "2024-01-01"
+
+[site]
+bucket = "./public"
+
+# Cache rules
+[[rules]]
+pattern = "*.js"
+cache = true
+ttl = 31536000  # 1 year
+
+[[rules]]
+pattern = "*.css"
+cache = true
+ttl = 31536000
+
+[[rules]]
+pattern = "*.html"
+cache = true
+ttl = 3600  # 1 hour
+```
+
+**AWS CloudFront distribution:**
+```json
+{
+  "CallerReference": "myapp-2024",
+  "Origins": {
+    "Quantity": 2,
+    "Items": [
+      {
+        "Id": "s3-static",
+        "DomainName": "myapp-static.s3.amazonaws.com",
+        "S3OriginConfig": {
+          "OriginAccessIdentity": ""
+        }
+      },
+      {
+        "Id": "api-origin",
+        "DomainName": "api.example.com",
+        "CustomOriginConfig": {
+          "HTTPPort": 80,
+          "HTTPSPort": 443,
+          "OriginProtocolPolicy": "https-only"
+        }
+      }
+    ]
+  },
+  "DefaultCacheBehavior": {
+    "TargetOriginId": "s3-static",
+    "ViewerProtocolPolicy": "redirect-to-https",
+    "CachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6",  # CachingOptimized
+    "Compress": true
+  },
+  "CacheBehaviors": {
+    "Quantity": 2,
+    "Items": [
+      {
+        "PathPattern": "/api/*",
+        "TargetOriginId": "api-origin",
+        "ViewerProtocolPolicy": "https-only",
+        "CachePolicyId": "4135ea2d-6df8-44a3-9df3-4b5a84be39ad",  # CachingDisabled
+        "OriginRequestPolicyId": "216adef6-5c7f-47e4-b989-5492eafa07d3"
+      },
+      {
+        "PathPattern": "/static/*",
+        "TargetOriginId": "s3-static",
+        "ViewerProtocolPolicy": "redirect-to-https",
+        "CachePolicyId": "658327ea-f89d-4fab-a63d-7e88639e58f6",
+        "Compress": true
+      }
+    ]
+  },
+  "CustomErrorResponses": {
+    "Quantity": 1,
+    "Items": [
+      {
+        "ErrorCode": 404,
+        "ResponsePagePath": "/404.html",
+        "ResponseCode": "404",
+        "ErrorCachingMinTTL": 300
+      }
+    ]
+  },
+  "ViewerCertificate": {
+    "ACMCertificateArn": "arn:aws:acm:us-east-1:123456789:certificate/abc123",
+    "SSLSupportMethod": "sni-only",
+    "MinimumProtocolVersion": "TLSv1.2_2021"
+  },
+  "WebACLId": "arn:aws:wafv2:us-east-1:123456789:global/webacl/myapp/abc123"
+}
+```
+
+### Step 3: [runner] — Deploy CDN configuration
+
+```bash
+# Cloudflare: deploy worker
+npm run wrangler deploy
+
+# CloudFront: create distribution
+aws cloudfront create-distribution --distribution-config file://cloudfront.json
+
+# Verify CDN is working
+curl -I https://example.com/static/bundle.js | grep -i "cf-ray\|x-cache\|age"
+
+# Purge cache
+curl -X POST "https://api.cloudflare.com/client/v4/zones/ZONE_ID/purge_cache" \
+  -H "Authorization: Bearer API_TOKEN" \
+  -H "Content-Type: application/json" \
+  --data '{"purge_everything":true}'
+```
+
+### Step 4: [reviewer] — Verify CDN performance
+
+```bash
+# Check cache hit ratio
+curl -s "https://api.cloudflare.com/client/v4/zones/ZONE_ID/analytics/dashboard" \
+  -H "Authorization: Bearer API_TOKEN" | jq '.result.totals.requests'
+
+# Test global latency
+for region in us-west us-east eu-west ap-south; do
+  echo -n "$region: "
+  curl -o /dev/null -s -w "%{time_total}s\n" https://example.com/
+done
+
+# Verify SSL
+openssl s_client -connect example.com:443 -servername example.com
+
+# Check headers
+curl -I https://example.com/static/bundle.js | grep -E "Cache-Control|ETag|Vary"
+```
+
+**Verification checklist:**
+- [ ] Cache hit ratio > 80%
+- [ ] SSL grade A+
+- [ ] Static assets served from edge
+- [ ] API requests pass through to origin
+- [ ] Cache headers correct (Cache-Control, ETag)
+- [ ] DDoS protection enabled
+- [ ] Global latency < 100ms
+
+## Reference Documents
+
+Load deep-dive content with `skill_view('cdn-setup', 'references/guide.md')`.

package/.agents/skills/cloud-deploy/SKILL.md

@@ -1,27 +1,184 @@
 ---
 name: cloud-deploy
 description: Deploy applications to AWS, GCP, or Azure. Use when the goal asks to deploy, host, or infrastructure-as-code for cloud platforms.
-version: 1.0.0
+version: 2.0.0
+whenToUse: Cloud deployment, serverless functions, container orchestration, static site hosting, API deployment
+whenNotToUse: Local development (use Docker Compose), Kubernetes-only (use kubernetes skill), on-premise
 ---
 
-# cloud-deploy
+# Cloud Deploy
 
-Deploy applications to AWS, GCP, or Azure. Use when the goal asks to deploy, host, or infrastructure-as-code for cloud platforms.
+Deploy applications to cloud platforms with production patterns.
 
 ## Goal pattern
 
-deploy cloud aws gcp azure serverless lambda ec2
+cloud deploy AWS GCP Azure serverless lambda function app engine kubernetes
 
 ## Parameters
 
 - provider (choice [default: aws]): Cloud provider
+- strategy (choice [default: containers]): Deployment strategy
+- monitoring (boolean [default: true]): Set up monitoring
 
 ## Steps
 
-1. [analyst] Choose cloud provider and deployment strategy (serverless, containers, VMs).
+### Step 1: [context-gatherer] — Analyze deployment requirements
 
-2. [analyst] Configure IAM roles, VPCs, security groups, and networking. (after: step-0)
+```bash
+# Check cloud CLI
+aws --version 2>/dev/null
+gcloud --version 2>/dev/null
+az --version 2>/dev/null
 
-3. [analyst] Set up CI/CD pipeline for automated deployments with rollback support. (after: step-1)
+# Check Docker
+docker --version
+docker ps
 
-4. [analyst] Configure monitoring, logging, and alerting for the deployed application. (after: step-2)
+# Check existing deployments
+aws ecs list-clusters 2>/dev/null | head -5
+gcloud run services list 2>/dev/null | head -5
+```
+
+- What application? (web app, API, worker, static site)
+- What cloud provider? (AWS, GCP, Azure)
+- What deployment target? (ECS, Cloud Run, App Service, Lambda)
+- What environment variables? (secrets, config)
+- What domain/SSL? (custom domain, certificates)
+
+### Step 2: [writer] — Create deployment configuration
+
+**AWS ECS deployment:**
+```yaml
+# Dockerfile
+FROM node:20-alpine AS builder
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --only=production
+COPY dist/ ./dist/
+
+FROM node:20-alpine
+WORKDIR /app
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/dist ./dist
+EXPOSE 3000
+CMD ["node", "dist/index.js"]
+
+---
+# ECS Task Definition
+{
+  "family": "myapp",
+  "networkMode": "awsvpc",
+  "requiresCompatibilities": ["FARGATE"],
+  "cpu": "512",
+  "memory": "1024",
+  "containerDefinitions": [
+    {
+      "name": "myapp",
+      "image": "123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest",
+      "portMappings": [
+        { "containerPort": 3000, "protocol": "tcp" }
+      ],
+      "environment": [
+        { "name": "NODE_ENV", "value": "production" }
+      ],
+      "secrets": [
+        { "name": "DATABASE_URL", "valueFrom": "arn:aws:ssm:us-east-1:123456789:parameter/myapp/db-url" }
+      ],
+      "logConfiguration": {
+        "logDriver": "awslogs",
+        "options": {
+          "awslogs-group": "/ecs/myapp",
+          "awslogs-region": "us-east-1",
+          "awslogs-stream-prefix": "ecs"
+        }
+      },
+      "healthCheck": {
+        "command": ["CMD-SHELL", "curl -f http://localhost:3000/health || exit 1"],
+        "interval": 30,
+        "timeout": 5,
+        "retries": 3
+      }
+    }
+  ]
+}
+```
+
+**GCP Cloud Run:**
+```yaml
+# cloudbuild.yaml
+steps:
+  - name: 'gcr.io/cloud-builders/docker'
+    args: ['build', '-t', 'gcr.io/$PROJECT_ID/myapp:$COMMIT_SHA', '.']
+  
+  - name: 'gcr.io/cloud-builders/docker'
+    args: ['push', 'gcr.io/$PROJECT_ID/myapp:$COMMIT_SHA']
+  
+  - name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
+    args:
+      - gcloud
+      - run
+      - deploy
+      - myapp
+      - --image=gcr.io/$PROJECT_ID/myapp:$COMMIT_SHA
+      - --region=us-central1
+      - --platform=managed
+      - --allow-unauthenticated
+
+images:
+  - 'gcr.io/$PROJECT_ID/myapp:$COMMIT_SHA'
+```
+
+### Step 3: [runner] — Deploy application
+
+```bash
+# Build and push Docker image
+docker build -t myapp:latest .
+docker tag myapp:latest 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest
+docker push 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:latest
+
+# Deploy to ECS
+aws ecs update-service \
+  --cluster myapp-cluster \
+  --service myapp-service \
+  --force-new-deployment
+
+# Wait for deployment
+aws ecs wait services-stable \
+  --cluster myapp-cluster \
+  --services myapp-service
+
+# Verify deployment
+aws ecs describe-services \
+  --cluster myapp-cluster \
+  --services myapp-service \
+  --query 'services[0].{status:status,desired:desiredCount,running:runningCount}'
+```
+
+### Step 4: [reviewer] — Verify deployment
+
+```bash
+# Health check
+curl -f https://myapp.example.com/health
+
+# Check logs
+aws logs tail /ecs/myapp --follow
+
+# Verify SSL
+openssl s_client -connect myapp.example.com:443 -servername myapp.example.com
+
+# Load test
+ab -n 100 -c 10 https://myapp.example.com/
+```
+
+**Verification checklist:**
+- [ ] Application responds to health checks
+- [ ] SSL certificate valid
+- [ ] Environment variables set correctly
+- [ ] Logs flowing to CloudWatch/Cloud Logging
+- [ ] Auto-scaling configured
+- [ ] Database connections working
+- [ ] No errors in deployment logs
+
+## Reference Documents
+
+Load deep-dive content with `skill_view('cloud-deploy', 'references/aws-services.md')`.