aigroup-workflow 2.1.2 → 2.2.0

package/skills/kubernetes-specialist/references/workloads.md

@@ -1,377 +0,0 @@
-# Kubernetes Workloads
-
-## Deployment Pattern
-
-```yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: web-app
-  namespace: production
-  labels:
-    app: web-app
-    tier: frontend
-spec:
-  replicas: 3
-  revisionHistoryLimit: 10
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app: web-app
-  template:
-    metadata:
-      labels:
-        app: web-app
-        tier: frontend
-        version: v1.2.0
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/port: "8080"
-    spec:
-      serviceAccountName: web-app-sa
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
-        fsGroup: 2000
-      containers:
-      - name: app
-        image: myregistry.io/web-app:v1.2.0
-        imagePullPolicy: IfNotPresent
-        ports:
-        - name: http
-          containerPort: 8080
-          protocol: TCP
-        env:
-        - name: ENVIRONMENT
-          value: production
-        - name: DB_HOST
-          valueFrom:
-            configMapKeyRef:
-              name: app-config
-              key: database.host
-        - name: DB_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: app-secrets
-              key: db-password
-        resources:
-          requests:
-            cpu: 100m
-            memory: 128Mi
-          limits:
-            cpu: 500m
-            memory: 512Mi
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: http
-          initialDelaySeconds: 30
-          periodSeconds: 10
-          timeoutSeconds: 5
-          failureThreshold: 3
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: http
-          initialDelaySeconds: 10
-          periodSeconds: 5
-          timeoutSeconds: 3
-          failureThreshold: 2
-        volumeMounts:
-        - name: config
-          mountPath: /etc/config
-          readOnly: true
-        - name: cache
-          mountPath: /var/cache
-      volumes:
-      - name: config
-        configMap:
-          name: app-config
-      - name: cache
-        emptyDir: {}
-```
-
-## StatefulSet Pattern
-
-```yaml
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: postgres
-  namespace: database
-spec:
-  serviceName: postgres-headless
-  replicas: 3
-  podManagementPolicy: OrderedReady
-  updateStrategy:
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app: postgres
-  template:
-    metadata:
-      labels:
-        app: postgres
-    spec:
-      serviceAccountName: postgres-sa
-      securityContext:
-        runAsUser: 999
-        fsGroup: 999
-      containers:
-      - name: postgres
-        image: postgres:15-alpine
-        ports:
-        - name: postgres
-          containerPort: 5432
-        env:
-        - name: POSTGRES_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: postgres-secrets
-              key: password
-        - name: PGDATA
-          value: /var/lib/postgresql/data/pgdata
-        resources:
-          requests:
-            cpu: 500m
-            memory: 1Gi
-          limits:
-            cpu: 2000m
-            memory: 4Gi
-        volumeMounts:
-        - name: data
-          mountPath: /var/lib/postgresql/data
-        livenessProbe:
-          exec:
-            command:
-            - pg_isready
-            - -U
-            - postgres
-          initialDelaySeconds: 30
-          periodSeconds: 10
-        readinessProbe:
-          exec:
-            command:
-            - pg_isready
-            - -U
-            - postgres
-          initialDelaySeconds: 10
-          periodSeconds: 5
-  volumeClaimTemplates:
-  - metadata:
-      name: data
-    spec:
-      accessModes: ["ReadWriteOnce"]
-      storageClassName: fast-ssd
-      resources:
-        requests:
-          storage: 50Gi
-```
-
-## DaemonSet Pattern
-
-```yaml
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: node-exporter
-  namespace: monitoring
-spec:
-  selector:
-    matchLabels:
-      app: node-exporter
-  updateStrategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxUnavailable: 1
-  template:
-    metadata:
-      labels:
-        app: node-exporter
-    spec:
-      hostNetwork: true
-      hostPID: true
-      serviceAccountName: node-exporter-sa
-      tolerations:
-      - effect: NoSchedule
-        operator: Exists
-      containers:
-      - name: node-exporter
-        image: prom/node-exporter:latest
-        args:
-        - --path.procfs=/host/proc
-        - --path.sysfs=/host/sys
-        - --collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)
-        ports:
-        - name: metrics
-          containerPort: 9100
-          protocol: TCP
-        resources:
-          requests:
-            cpu: 50m
-            memory: 64Mi
-          limits:
-            cpu: 200m
-            memory: 128Mi
-        volumeMounts:
-        - name: proc
-          mountPath: /host/proc
-          readOnly: true
-        - name: sys
-          mountPath: /host/sys
-          readOnly: true
-      volumes:
-      - name: proc
-        hostPath:
-          path: /proc
-      - name: sys
-        hostPath:
-          path: /sys
-```
-
-## Job Pattern
-
-```yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: db-migration-20231214
-  namespace: production
-spec:
-  backoffLimit: 3
-  ttlSecondsAfterFinished: 3600
-  template:
-    metadata:
-      labels:
-        app: db-migration
-    spec:
-      restartPolicy: OnFailure
-      serviceAccountName: migration-sa
-      containers:
-      - name: migrate
-        image: myregistry.io/migrations:v1.2.0
-        command: ["/bin/sh", "-c"]
-        args:
-        - |
-          echo "Starting migration..."
-          /app/migrate up
-          echo "Migration complete"
-        env:
-        - name: DATABASE_URL
-          valueFrom:
-            secretKeyRef:
-              name: db-secrets
-              key: connection-string
-        resources:
-          requests:
-            cpu: 100m
-            memory: 128Mi
-          limits:
-            cpu: 500m
-            memory: 512Mi
-```
-
-## CronJob Pattern
-
-```yaml
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: backup-database
-  namespace: production
-spec:
-  schedule: "0 2 * * *"  # Daily at 2 AM
-  timeZone: "America/New_York"
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 1
-  concurrencyPolicy: Forbid
-  jobTemplate:
-    spec:
-      backoffLimit: 2
-      ttlSecondsAfterFinished: 86400
-      template:
-        metadata:
-          labels:
-            app: backup
-        spec:
-          restartPolicy: OnFailure
-          serviceAccountName: backup-sa
-          containers:
-          - name: backup
-            image: myregistry.io/backup-tool:latest
-            command: ["/usr/local/bin/backup.sh"]
-            env:
-            - name: S3_BUCKET
-              valueFrom:
-                configMapKeyRef:
-                  name: backup-config
-                  key: s3-bucket
-            - name: AWS_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: backup-secrets
-                  key: aws-access-key
-            - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: backup-secrets
-                  key: aws-secret-key
-            resources:
-              requests:
-                cpu: 200m
-                memory: 256Mi
-              limits:
-                cpu: 1000m
-                memory: 1Gi
-            volumeMounts:
-            - name: backup-volume
-              mountPath: /backup
-          volumes:
-          - name: backup-volume
-            emptyDir:
-              sizeLimit: 10Gi
-```
-
-## Init Containers
-
-```yaml
-spec:
-  initContainers:
-  - name: wait-for-db
-    image: busybox:latest
-    command: ['sh', '-c']
-    args:
-    - |
-      until nc -z postgres-service 5432; do
-        echo "Waiting for database..."
-        sleep 2
-      done
-      echo "Database is ready"
-  - name: migrate-schema
-    image: myregistry.io/migrations:latest
-    command: ["/app/migrate", "up"]
-    env:
-    - name: DATABASE_URL
-      valueFrom:
-        secretKeyRef:
-          name: db-secrets
-          key: url
-  containers:
-  - name: app
-    image: myregistry.io/app:latest
-```
-
-## Best Practices
-
-1. **Resource Management**: Always set requests and limits
-2. **Health Checks**: Include both liveness and readiness probes
-3. **Security**: Use non-root users, read-only filesystems when possible
-4. **Labels**: Consistent labeling for organization and selection
-5. **Update Strategy**: Choose appropriate strategy (RollingUpdate, Recreate)
-6. **Service Accounts**: Never use default, create specific SAs
-7. **Image Tags**: Use specific versions, not `latest` in production
-8. **Cleanup**: Set TTL for Jobs to auto-cleanup completed pods

package/skills/laravel-specialist/SKILL.md

@@ -1,262 +0,0 @@
----
-name: laravel-specialist
-description: Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication, configuring Horizon queues, designing RESTful APIs with API resources, and building reactive interfaces with Livewire. Use when creating Laravel models, setting up queue workers, implementing Sanctum auth flows, building Livewire components, optimising Eloquent queries, or writing Pest/PHPUnit tests for Laravel features.
-license: MIT
-metadata:
-  author: https://github.com/Jeffallan
-  version: "1.1.0"
-  domain: backend
-  triggers: Laravel, Eloquent, PHP framework, Laravel API, Artisan, Blade templates, Laravel queues, Livewire, Laravel testing, Sanctum, Horizon
-  role: specialist
-  scope: implementation
-  output-format: code
-  related-skills: fullstack-guardian, test-master, devops-engineer, security-reviewer
----
-
-# Laravel Specialist
-
-Senior Laravel specialist with deep expertise in Laravel 10+, Eloquent ORM, and modern PHP 8.2+ development.
-
-## Core Workflow
-
-1. **Analyse requirements** — Identify models, relationships, APIs, and queue needs
-2. **Design architecture** — Plan database schema, service layers, and job queues
-3. **Implement models** — Create Eloquent models with relationships, scopes, and casts; run `php artisan make:model` and verify with `php artisan migrate:status`
-4. **Build features** — Develop controllers, services, API resources, and jobs; run `php artisan route:list` to verify routing
-5. **Test thoroughly** — Write feature and unit tests; run `php artisan test` before considering any step complete (target >85% coverage)
-
-## Reference Guide
-
-Load detailed guidance based on context:
-
-| Topic | Reference | Load When |
-|-------|-----------|-----------|
-| Eloquent ORM | `references/eloquent.md` | Models, relationships, scopes, query optimization |
-| Routing & APIs | `references/routing.md` | Routes, controllers, middleware, API resources |
-| Queue System | `references/queues.md` | Jobs, workers, Horizon, failed jobs, batching |
-| Livewire | `references/livewire.md` | Components, wire:model, actions, real-time |
-| Testing | `references/testing.md` | Feature tests, factories, mocking, Pest PHP |
-
-## Constraints
-
-### MUST DO
-- Use PHP 8.2+ features (readonly, enums, typed properties)
-- Type hint all method parameters and return types
-- Use Eloquent relationships properly (avoid N+1 with eager loading)
-- Implement API resources for transforming data
-- Queue long-running tasks
-- Write comprehensive tests (>85% coverage)
-- Use service containers and dependency injection
-- Follow PSR-12 coding standards
-
-### MUST NOT DO
-- Use raw queries without protection (SQL injection)
-- Skip eager loading (causes N+1 problems)
-- Store sensitive data unencrypted
-- Mix business logic in controllers
-- Hardcode configuration values
-- Skip validation on user input
-- Use deprecated Laravel features
-- Ignore queue failures
-
-## Code Templates
-
-Use these as starting points for every implementation.
-
-### Eloquent Model
-
-```php
-<?php
-
-declare(strict_types=1);
-
-namespace App\Models;
-
-use Illuminate\Database\Eloquent\Factories\HasFactory;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\BelongsTo;
-use Illuminate\Database\Eloquent\Relations\HasMany;
-use Illuminate\Database\Eloquent\SoftDeletes;
-
-final class Post extends Model
-{
-    use HasFactory, SoftDeletes;
-
-    protected $fillable = ['title', 'body', 'status', 'user_id'];
-
-    protected $casts = [
-        'status' => PostStatus::class, // backed enum
-        'published_at' => 'immutable_datetime',
-    ];
-
-    // Relationships — always eager-load via ::with() at call site
-    public function author(): BelongsTo
-    {
-        return $this->belongsTo(User::class, 'user_id');
-    }
-
-    public function comments(): HasMany
-    {
-        return $this->hasMany(Comment::class);
-    }
-
-    // Local scope
-    public function scopePublished(Builder $query): Builder
-    {
-        return $query->where('status', PostStatus::Published);
-    }
-}
-```
-
-### Migration
-
-```php
-<?php
-
-use Illuminate\Database\Migrations\Migration;
-use Illuminate\Database\Schema\Blueprint;
-use Illuminate\Support\Facades\Schema;
-
-return new class extends Migration
-{
-    public function up(): void
-    {
-        Schema::create('posts', function (Blueprint $table): void {
-            $table->id();
-            $table->foreignId('user_id')->constrained()->cascadeOnDelete();
-            $table->string('title');
-            $table->text('body');
-            $table->string('status')->default('draft');
-            $table->timestamp('published_at')->nullable();
-            $table->softDeletes();
-            $table->timestamps();
-        });
-    }
-
-    public function down(): void
-    {
-        Schema::dropIfExists('posts');
-    }
-};
-```
-
-### API Resource
-
-```php
-<?php
-
-declare(strict_types=1);
-
-namespace App\Http\Resources;
-
-use Illuminate\Http\Request;
-use Illuminate\Http\Resources\Json\JsonResource;
-
-final class PostResource extends JsonResource
-{
-    public function toArray(Request $request): array
-    {
-        return [
-            'id'           => $this->id,
-            'title'        => $this->title,
-            'body'         => $this->body,
-            'status'       => $this->status->value,
-            'published_at' => $this->published_at?->toIso8601String(),
-            'author'       => new UserResource($this->whenLoaded('author')),
-            'comments'     => CommentResource::collection($this->whenLoaded('comments')),
-        ];
-    }
-}
-```
-
-### Queued Job
-
-```php
-<?php
-
-declare(strict_types=1);
-
-namespace App\Jobs;
-
-use App\Models\Post;
-use Illuminate\Bus\Queueable;
-use Illuminate\Contracts\Queue\ShouldQueue;
-use Illuminate\Foundation\Bus\Dispatchable;
-use Illuminate\Queue\InteractsWithQueue;
-use Illuminate\Queue\SerializesModels;
-
-final class PublishPost implements ShouldQueue
-{
-    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
-
-    public int $tries = 3;
-    public int $backoff = 60;
-
-    public function __construct(
-        private readonly Post $post,
-    ) {}
-
-    public function handle(): void
-    {
-        $this->post->update([
-            'status'       => PostStatus::Published,
-            'published_at' => now(),
-        ]);
-    }
-
-    public function failed(\Throwable $e): void
-    {
-        // Log or notify — never silently swallow failures
-        logger()->error('PublishPost failed', ['post' => $this->post->id, 'error' => $e->getMessage()]);
-    }
-}
-```
-
-### Feature Test (Pest)
-
-```php
-<?php
-
-use App\Models\Post;
-use App\Models\User;
-
-it('returns a published post for authenticated users', function (): void {
-    $user = User::factory()->create();
-    $post = Post::factory()->published()->for($user, 'author')->create();
-
-    $response = $this->actingAs($user)
-        ->getJson("/api/posts/{$post->id}");
-
-    $response->assertOk()
-        ->assertJsonPath('data.status', 'published')
-        ->assertJsonPath('data.author.id', $user->id);
-});
-
-it('queues a publish job when a draft is submitted', function (): void {
-    Queue::fake();
-    $user = User::factory()->create();
-    $post = Post::factory()->draft()->for($user, 'author')->create();
-
-    $this->actingAs($user)
-        ->postJson("/api/posts/{$post->id}/publish")
-        ->assertAccepted();
-
-    Queue::assertPushed(PublishPost::class, fn ($job) => $job->post->is($post));
-});
-```
-
-## Validation Checkpoints
-
-Run these at each workflow stage to confirm correctness before proceeding:
-
-| Stage | Command | Expected Result |
-|-------|---------|-----------------|
-| After migration | `php artisan migrate:status` | All migrations show `Ran` |
-| After routing | `php artisan route:list --path=api` | New routes appear with correct verbs |
-| After job dispatch | `php artisan queue:work --once` | Job processes without exception |
-| After implementation | `php artisan test --coverage` | >85% coverage, 0 failures |
-| Before PR | `./vendor/bin/pint --test` | PSR-12 linting passes |
-
-## Knowledge Reference
-
-Laravel 10+, Eloquent ORM, PHP 8.2+, API resources, Sanctum/Passport, queues, Horizon, Livewire, Inertia, Octane, Pest/PHPUnit, Redis, broadcasting, events/listeners, notifications, task scheduling