ai-qakit 1.0.0

package/templates/.claude/skills/infra-engineer/dot_env.example

@@ -0,0 +1,76 @@
+# DevOps Skill - Environment Variables
+
+# =============================================================================
+# Cloudflare Configuration
+# =============================================================================
+# Get these from: https://dash.cloudflare.com
+# API Token: Profile -> API Tokens -> Create Token
+# Account ID: Overview -> Account ID (right sidebar)
+
+CLOUDFLARE_API_TOKEN=your_cloudflare_api_token_here
+CLOUDFLARE_ACCOUNT_ID=your_cloudflare_account_id_here
+
+# Optional: Specific zone configuration
+# CLOUDFLARE_ZONE_ID=your_zone_id_here
+
+# =============================================================================
+# Google Cloud Configuration
+# =============================================================================
+# Authentication via service account key file or gcloud CLI
+# Download from: IAM & Admin -> Service Accounts -> Create Key
+
+# Option 1: Service account key file path
+GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account-key.json
+
+# Option 2: Project configuration
+# GCP_PROJECT_ID=your-project-id
+# GCP_REGION=us-central1
+# GCP_ZONE=us-central1-a
+
+# =============================================================================
+# Docker Configuration
+# =============================================================================
+# Optional: Docker registry authentication
+
+# Docker Hub
+# DOCKER_USERNAME=your_docker_username
+# DOCKER_PASSWORD=your_docker_password
+
+# Google Container Registry (GCR)
+# GCR_HOSTNAME=gcr.io
+# GCR_PROJECT_ID=your-project-id
+
+# AWS ECR
+# AWS_ACCOUNT_ID=123456789012
+# AWS_REGION=us-east-1
+
+# =============================================================================
+# CI/CD Configuration
+# =============================================================================
+# Optional: For automated deployments
+
+# GitHub Actions
+# GITHUB_TOKEN=your_github_token
+
+# GitLab CI
+# GITLAB_TOKEN=your_gitlab_token
+
+# =============================================================================
+# Monitoring & Logging
+# =============================================================================
+# Optional: For observability
+
+# Sentry
+# SENTRY_DSN=your_sentry_dsn
+
+# Datadog
+# DD_API_KEY=your_datadog_api_key
+
+# =============================================================================
+# Notes
+# =============================================================================
+# 1. Copy this file to .env and fill in your actual values
+# 2. Never commit .env file to version control
+# 3. Use different credentials for dev/staging/production
+# 4. Rotate credentials regularly
+# 5. Use least-privilege principle for API tokens

package/templates/.claude/skills/infra-engineer/references/aws-overview.md

@@ -0,0 +1,171 @@
+# AWS Overview
+
+Amazon Web Services (AWS) - comprehensive cloud computing platform with 200+ services across compute, storage, databases, networking, security, and more.
+
+## Account Setup
+
+### Initial Configuration
+```bash
+# Install AWS CLI v2
+curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
+unzip awscliv2.zip
+sudo ./aws/install
+
+# Verify installation
+aws --version
+
+# Configure credentials
+aws configure
+# AWS Access Key ID: <your-access-key>
+# AWS Secret Access Key: <your-secret-key>
+# Default region: us-east-1
+# Default output format: json
+```
+
+### Multiple Profiles
+```bash
+# Configure named profile
+aws configure --profile production
+
+# Use profile
+aws s3 ls --profile production
+export AWS_PROFILE=production
+```
+
+## IAM (Identity and Access Management)
+
+### Core Concepts
+- **Users**: Individual identities with long-term credentials
+- **Groups**: Collections of users with shared permissions
+- **Roles**: Assumed by services or users for temporary credentials
+- **Policies**: JSON documents defining permissions
+
+### Best Practices
+- Enable MFA for all users
+- Use IAM roles for EC2 instances (not access keys)
+- Follow least privilege principle
+- Rotate credentials regularly
+- Use AWS Organizations for multi-account management
+
+### Example Policy
+```json
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:GetObject",
+        "s3:PutObject"
+      ],
+      "Resource": "arn:aws:s3:::my-bucket/*"
+    }
+  ]
+}
+```
+
+## Core Services
+
+### Compute
+- **EC2**: Virtual servers
+- **Lambda**: Serverless functions
+- **ECS**: Container orchestration (Docker)
+- **EKS**: Managed Kubernetes
+- **Fargate**: Serverless containers
+- **Lightsail**: Simplified VPS
+
+### Storage
+- **S3**: Object storage (industry standard)
+- **EBS**: Block storage for EC2
+- **EFS**: Managed NFS file system
+- **Glacier**: Archive storage
+
+### Database
+- **RDS**: Managed relational databases (PostgreSQL, MySQL, MariaDB, Oracle, SQL Server)
+- **Aurora**: MySQL/PostgreSQL-compatible with better performance
+- **DynamoDB**: NoSQL key-value and document database
+- **ElastiCache**: In-memory caching (Redis, Memcached)
+- **DocumentDB**: MongoDB-compatible
+
+### Networking
+- **VPC**: Virtual Private Cloud (isolated network)
+- **CloudFront**: CDN
+- **Route 53**: DNS service
+- **ELB**: Load balancers (ALB, NLB, CLB)
+- **API Gateway**: Managed API service
+
+## Regions and Availability Zones
+
+### Global Infrastructure
+- **Regions**: Geographic locations (us-east-1, eu-west-1, ap-southeast-1)
+- **Availability Zones**: Isolated data centers within region (us-east-1a, us-east-1b)
+- **Edge Locations**: CloudFront CDN points of presence
+
+### High Availability Pattern
+```yaml
+Architecture:
+  Region: us-east-1
+  AZ-1 (us-east-1a):
+    - EC2 instances
+    - RDS primary
+  AZ-2 (us-east-1b):
+    - EC2 instances
+    - RDS standby
+  Load Balancer: Distributes traffic across AZs
+```
+
+## Cost Management
+
+### Free Tier
+- 750 hours/month EC2 t2.micro or t3.micro (12 months)
+- 5GB S3 storage
+- 25GB DynamoDB storage
+- 1 million Lambda requests/month
+
+### Cost Optimization
+- Use Reserved Instances (up to 72% discount)
+- Use Savings Plans (flexible commitment-based discount)
+- Use Spot Instances (up to 90% discount)
+- Enable Cost Explorer and Budget Alerts
+- Right-size instances based on CloudWatch metrics
+- Use S3 Intelligent-Tiering or Lifecycle policies
+
+## Common CLI Commands
+
+```bash
+# EC2
+aws ec2 describe-instances
+aws ec2 start-instances --instance-ids i-1234567890abcdef0
+aws ec2 stop-instances --instance-ids i-1234567890abcdef0
+
+# S3
+aws s3 ls
+aws s3 cp file.txt s3://my-bucket/
+aws s3 sync ./local-dir s3://my-bucket/remote-dir
+
+# Lambda
+aws lambda list-functions
+aws lambda invoke --function-name my-function output.json
+
+# CloudFormation
+aws cloudformation create-stack --stack-name my-stack --template-body file://template.yaml
+aws cloudformation describe-stacks --stack-name my-stack
+```
+
+## Security Best Practices
+
+1. **Enable CloudTrail** for audit logging
+2. **Use AWS Config** for compliance monitoring
+3. **Enable GuardDuty** for threat detection
+4. **Encrypt data** at rest (S3, EBS, RDS) and in transit
+5. **Use Security Groups** as virtual firewalls
+6. **Enable VPC Flow Logs** for network monitoring
+7. **Use AWS Secrets Manager** for credentials
+8. **Regular security assessments** with AWS Inspector
+
+## Resources
+
+- AWS Documentation: https://docs.aws.amazon.com
+- AWS CLI Reference: https://awscli.amazonaws.com/v2/documentation/api/latest/index.html
+- AWS Well-Architected Framework: https://aws.amazon.com/architecture/well-architected
+- AWS Training: https://aws.amazon.com/training

package/templates/.claude/skills/infra-engineer/references/browser-rendering.md

@@ -0,0 +1,305 @@
+# Cloudflare Browser Rendering
+
+Headless browser automation with Puppeteer/Playwright on Cloudflare Workers.
+
+## Setup
+
+**wrangler.toml:**
+```toml
+name = "browser-worker"
+main = "src/index.ts"
+compatibility_date = "2024-01-01"
+
+browser = { binding = "MYBROWSER" }
+```
+
+## Basic Screenshot Worker
+
+```typescript
+import puppeteer from '@cloudflare/puppeteer';
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+    const page = await browser.newPage();
+
+    await page.goto('https://example.com', { waitUntil: 'networkidle2' });
+    const screenshot = await page.screenshot({ type: 'png' });
+
+    await browser.close();
+
+    return new Response(screenshot, {
+      headers: { 'Content-Type': 'image/png' }
+    });
+  }
+};
+```
+
+## Session Reuse (Cost Optimization)
+
+```typescript
+// Disconnect instead of close
+await browser.disconnect();
+
+// Retrieve and reconnect
+const sessions = await puppeteer.sessions(env.MYBROWSER);
+const freeSession = sessions.find(s => !s.connectionId);
+
+if (freeSession) {
+  const browser = await puppeteer.connect(env.MYBROWSER, freeSession.sessionId);
+}
+```
+
+## PDF Generation
+
+```typescript
+const browser = await puppeteer.launch(env.MYBROWSER);
+const page = await browser.newPage();
+
+await page.setContent(`
+  <!DOCTYPE html>
+  <html>
+    <head>
+      <style>
+        body { font-family: Arial; padding: 50px; }
+        h1 { color: #2c3e50; }
+      </style>
+    </head>
+    <body>
+      <h1>Certificate</h1>
+      <p>Awarded to: <strong>John Doe</strong></p>
+    </body>
+  </html>
+`);
+
+const pdf = await page.pdf({
+  format: 'A4',
+  printBackground: true,
+  margin: { top: '1cm', right: '1cm', bottom: '1cm', left: '1cm' }
+});
+
+await browser.close();
+
+return new Response(pdf, {
+  headers: { 'Content-Type': 'application/pdf' }
+});
+```
+
+## Durable Objects for Persistent Sessions
+
+```typescript
+export class Browser {
+  state: DurableObjectState;
+  browser: any;
+  lastUsed: number;
+
+  constructor(state: DurableObjectState, env: Env) {
+    this.state = state;
+    this.lastUsed = Date.now();
+  }
+
+  async fetch(request: Request, env: Env) {
+    if (!this.browser) {
+      this.browser = await puppeteer.launch(env.MYBROWSER);
+    }
+
+    this.lastUsed = Date.now();
+    await this.state.storage.setAlarm(Date.now() + 10000);
+
+    const page = await this.browser.newPage();
+    const url = new URL(request.url).searchParams.get('url');
+    await page.goto(url);
+    const screenshot = await page.screenshot();
+    await page.close();
+
+    return new Response(screenshot, {
+      headers: { 'Content-Type': 'image/png' }
+    });
+  }
+
+  async alarm() {
+    if (Date.now() - this.lastUsed > 60000) {
+      await this.browser?.close();
+      this.browser = null;
+    } else {
+      await this.state.storage.setAlarm(Date.now() + 10000);
+    }
+  }
+}
+```
+
+## AI-Powered Web Scraper
+
+```typescript
+import { Ai } from '@cloudflare/ai';
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+    const page = await browser.newPage();
+    await page.goto('https://news.ycombinator.com');
+    const content = await page.content();
+    await browser.close();
+
+    const ai = new Ai(env.AI);
+    const response = await ai.run('@cf/meta/llama-3-8b-instruct', {
+      messages: [
+        {
+          role: 'system',
+          content: 'Extract top 5 article titles and URLs as JSON'
+        },
+        { role: 'user', content: content }
+      ]
+    });
+
+    return Response.json(response);
+  }
+};
+```
+
+## Crawler with Queues
+
+```typescript
+export default {
+  async queue(batch: MessageBatch<any>, env: Env): Promise<void> {
+    const browser = await puppeteer.launch(env.MYBROWSER);
+
+    for (const message of batch.messages) {
+      const page = await browser.newPage();
+      await page.goto(message.body.url);
+
+      const links = await page.evaluate(() => {
+        return Array.from(document.querySelectorAll('a')).map(a => a.href);
+      });
+
+      for (const link of links) {
+        await env.QUEUE.send({ url: link });
+      }
+
+      await page.close();
+      message.ack();
+    }
+
+    await browser.close();
+  }
+};
+```
+
+## Configuration
+
+### Timeout
+```typescript
+await page.goto(url, {
+  timeout: 60000,  // 60 seconds max
+  waitUntil: 'networkidle2'
+});
+
+await page.waitForSelector('.content', { timeout: 45000 });
+```
+
+### Viewport
+```typescript
+await page.setViewport({ width: 1920, height: 1080 });
+```
+
+### Screenshot Options
+```typescript
+const screenshot = await page.screenshot({
+  type: 'png',       // 'png' | 'jpeg' | 'webp'
+  quality: 90,       // JPEG/WebP only
+  fullPage: true,    // Full scrollable page
+  clip: {            // Crop
+    x: 0, y: 0,
+    width: 800,
+    height: 600
+  }
+});
+```
+
+## Limits & Pricing
+
+### Free Plan
+- 10 minutes/day
+- 3 concurrent browsers
+- 3 new browsers/minute
+
+### Paid Plan
+- 10 hours/month included
+- 30 concurrent browsers
+- 30 new browsers/minute
+- $0.09/hour overage
+- $2.00/concurrent browser overage
+
+### Cost Optimization
+1. Use `disconnect()` instead of `close()`
+2. Enable Keep-Alive (10 min max)
+3. Pool tabs with browser contexts
+4. Cache auth state with KV
+5. Implement Durable Objects cleanup
+
+## Best Practices
+
+### Session Management
+- Always use `disconnect()` for reuse
+- Implement session pooling
+- Track session IDs and states
+
+### Performance
+- Cache content in KV
+- Use browser contexts vs multiple browsers
+- Choose appropriate `waitUntil` strategy
+- Set realistic timeouts
+
+### Error Handling
+- Handle timeout errors gracefully
+- Check session availability before connecting
+- Validate responses before caching
+
+### Security
+- Validate user-provided URLs
+- Implement authentication
+- Sanitize extracted content
+- Set appropriate CORS headers
+
+## Troubleshooting
+
+**Timeout Errors:**
+```typescript
+await page.goto(url, {
+  timeout: 60000,
+  waitUntil: 'domcontentloaded'  // Faster than networkidle2
+});
+```
+
+**Memory Issues:**
+```typescript
+await page.close();  // Close pages
+await browser.disconnect();  // Reuse session
+```
+
+**Font Rendering:**
+Use supported fonts (Noto Sans, Roboto, etc.) or inject custom:
+```html
+<link href="https://fonts.googleapis.com/css2?family=Poppins" rel="stylesheet">
+```
+
+## Key Methods
+
+### Puppeteer
+- `puppeteer.launch(binding)` - Start browser
+- `puppeteer.connect(binding, sessionId)` - Reconnect
+- `puppeteer.sessions(binding)` - List sessions
+- `browser.newPage()` - Create page
+- `browser.disconnect()` - Disconnect (keep alive)
+- `browser.close()` - Close (terminate)
+- `page.goto(url, options)` - Navigate
+- `page.screenshot(options)` - Capture
+- `page.pdf(options)` - Generate PDF
+- `page.content()` - Get HTML
+- `page.evaluate(fn)` - Execute JS
+
+## Resources
+
+- Docs: https://developers.cloudflare.com/browser-rendering/
+- Puppeteer: https://pptr.dev/
+- Examples: https://developers.cloudflare.com/workers/examples/