aigroup-workflow 2.1.2 → 2.2.1

package/skills/graphql-architect/references/subscriptions.md

@@ -1,510 +0,0 @@
-# GraphQL Subscriptions
-
-## Basic Subscription Setup
-
-```typescript
-// schema.graphql
-type Subscription {
-  postCreated: Post!
-  postUpdated(id: ID!): Post!
-  commentAdded(postId: ID!): Comment!
-  userOnline: User!
-}
-
-type Post {
-  id: ID!
-  title: String!
-  content: String!
-  author: User!
-}
-
-type Comment {
-  id: ID!
-  content: String!
-  author: User!
-  post: Post!
-}
-
-// server.ts
-import { createServer } from 'http';
-import { ApolloServer } from '@apollo/server';
-import { expressMiddleware } from '@apollo/server/express4';
-import { ApolloServerPluginDrainHttpServer } from '@apollo/server/plugin/drainHttpServer';
-import { makeExecutableSchema } from '@graphql-tools/schema';
-import { WebSocketServer } from 'ws';
-import { useServer } from 'graphql-ws/lib/use/ws';
-import express from 'express';
-
-const schema = makeExecutableSchema({ typeDefs, resolvers });
-
-const app = express();
-const httpServer = createServer(app);
-
-// WebSocket server for subscriptions
-const wsServer = new WebSocketServer({
-  server: httpServer,
-  path: '/graphql',
-});
-
-const serverCleanup = useServer(
-  {
-    schema,
-    context: async (ctx, msg, args) => {
-      // Extract auth from connection params
-      const token = ctx.connectionParams?.authorization;
-      const user = token ? await verifyToken(token) : null;
-      return { user };
-    },
-  },
-  wsServer
-);
-
-const server = new ApolloServer({
-  schema,
-  plugins: [
-    ApolloServerPluginDrainHttpServer({ httpServer }),
-    {
-      async serverWillStart() {
-        return {
-          async drainServer() {
-            await serverCleanup.dispose();
-          },
-        };
-      },
-    },
-  ],
-});
-
-await server.start();
-app.use('/graphql', express.json(), expressMiddleware(server));
-
-httpServer.listen(4000);
-```
-
-## PubSub Implementation
-
-```typescript
-// pubsub.ts
-import { RedisPubSub } from 'graphql-redis-subscriptions';
-import Redis from 'ioredis';
-
-// In-memory (development only)
-import { PubSub } from 'graphql-subscriptions';
-export const pubsub = new PubSub();
-
-// Redis (production)
-const options = {
-  host: process.env.REDIS_HOST || 'localhost',
-  port: parseInt(process.env.REDIS_PORT || '6379'),
-  retryStrategy: (times: number) => Math.min(times * 50, 2000),
-};
-
-export const pubsub = new RedisPubSub({
-  publisher: new Redis(options),
-  subscriber: new Redis(options),
-});
-
-// Strongly typed event names
-export const EVENTS = {
-  POST_CREATED: 'POST_CREATED',
-  POST_UPDATED: 'POST_UPDATED',
-  COMMENT_ADDED: 'COMMENT_ADDED',
-  USER_ONLINE: 'USER_ONLINE',
-} as const;
-```
-
-## Subscription Resolvers
-
-```typescript
-import { withFilter } from 'graphql-subscriptions';
-import { pubsub, EVENTS } from './pubsub';
-
-const resolvers = {
-  Subscription: {
-    // Simple subscription
-    postCreated: {
-      subscribe: () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
-    },
-
-    // Filtered subscription
-    postUpdated: {
-      subscribe: withFilter(
-        () => pubsub.asyncIterator([EVENTS.POST_UPDATED]),
-        (payload, variables) => {
-          // Only send updates for specific post
-          return payload.postUpdated.id === variables.id;
-        }
-      ),
-    },
-
-    // Filtered with authorization
-    commentAdded: {
-      subscribe: withFilter(
-        (parent, args, context) => {
-          // Check auth before subscribing
-          if (!context.user) {
-            throw new Error('Unauthorized');
-          }
-          return pubsub.asyncIterator([EVENTS.COMMENT_ADDED]);
-        },
-        async (payload, variables, context) => {
-          // Filter by post and check permissions
-          if (payload.commentAdded.postId !== variables.postId) {
-            return false;
-          }
-
-          // Check if user has access to post
-          const post = await context.dataSources.posts.findById(
-            variables.postId
-          );
-          return post && post.isPublic || post.authorId === context.user.id;
-        }
-      ),
-    },
-
-    // Complex subscription with multiple filters
-    userOnline: {
-      subscribe: withFilter(
-        () => pubsub.asyncIterator([EVENTS.USER_ONLINE]),
-        (payload, variables, context) => {
-          // Only notify friends
-          return context.user.friends.includes(payload.userOnline.id);
-        }
-      ),
-    },
-  },
-
-  Mutation: {
-    createPost: async (parent, args, context) => {
-      const post = await context.dataSources.posts.create(args.input);
-
-      // Publish event
-      await pubsub.publish(EVENTS.POST_CREATED, {
-        postCreated: post,
-      });
-
-      return post;
-    },
-
-    updatePost: async (parent, args: { id: string; input: any }, context) => {
-      const post = await context.dataSources.posts.update(
-        args.id,
-        args.input
-      );
-
-      await pubsub.publish(EVENTS.POST_UPDATED, {
-        postUpdated: post,
-      });
-
-      return post;
-    },
-
-    addComment: async (parent, args, context) => {
-      const comment = await context.dataSources.comments.create(args.input);
-
-      await pubsub.publish(EVENTS.COMMENT_ADDED, {
-        commentAdded: comment,
-      });
-
-      return comment;
-    },
-  },
-};
-```
-
-## Advanced Filtering
-
-```typescript
-// Type-safe payload
-interface PostCreatedPayload {
-  postCreated: Post;
-  tags: string[];
-  isPublic: boolean;
-}
-
-const resolvers = {
-  Subscription: {
-    postCreated: {
-      subscribe: withFilter(
-        () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
-        async (
-          payload: PostCreatedPayload,
-          variables: { tags?: string[]; authorId?: string },
-          context: Context
-        ) => {
-          // Filter by tags
-          if (variables.tags && variables.tags.length > 0) {
-            const hasMatchingTag = payload.tags.some(tag =>
-              variables.tags!.includes(tag)
-            );
-            if (!hasMatchingTag) return false;
-          }
-
-          // Filter by author
-          if (variables.authorId) {
-            if (payload.postCreated.authorId !== variables.authorId) {
-              return false;
-            }
-          }
-
-          // Check permissions
-          if (!payload.isPublic) {
-            return (
-              context.user?.id === payload.postCreated.authorId ||
-              context.user?.isAdmin
-            );
-          }
-
-          return true;
-        }
-      ),
-    },
-  },
-};
-```
-
-## Connection Management
-
-```typescript
-import { useServer } from 'graphql-ws/lib/use/ws';
-
-const wsServer = useServer(
-  {
-    schema,
-
-    // Connection lifecycle
-    onConnect: async (ctx) => {
-      console.log('Client connected');
-      const token = ctx.connectionParams?.authorization;
-
-      if (!token) {
-        throw new Error('Missing auth token');
-      }
-
-      const user = await verifyToken(token);
-      if (!user) {
-        throw new Error('Invalid token');
-      }
-
-      return { user };
-    },
-
-    onDisconnect: (ctx, code, reason) => {
-      console.log('Client disconnected', code, reason);
-    },
-
-    // Subscription lifecycle
-    onSubscribe: async (ctx, msg) => {
-      console.log('Client subscribed', msg.payload.operationName);
-
-      // Rate limiting
-      const subscriptionCount = getUserSubscriptionCount(ctx.user.id);
-      if (subscriptionCount >= 10) {
-        throw new Error('Too many subscriptions');
-      }
-
-      return { ctx, msg };
-    },
-
-    onComplete: (ctx, msg) => {
-      console.log('Subscription completed', msg.id);
-    },
-
-    // Keep-alive
-    connectionInitWaitTimeout: 10000,
-
-    // Context per subscription
-    context: async (ctx, msg, args) => {
-      const user = ctx.extra.user;
-      return {
-        user,
-        dataSources: createDataSources(),
-        subscriptionId: msg.id,
-      };
-    },
-  },
-  wsServer
-);
-```
-
-## Subscription Patterns
-
-```typescript
-// Pattern 1: Entity updates
-type Subscription {
-  entityUpdated(id: ID!): Entity!
-}
-
-// Pattern 2: Collection updates
-type Subscription {
-  entityAdded: Entity!
-  entityDeleted: ID!
-}
-
-// Pattern 3: Stream of events
-type Subscription {
-  events(types: [EventType!]): Event!
-}
-
-// Pattern 4: Live query (with intervals)
-type Subscription {
-  liveQuery(query: String!): [SearchResult!]!
-}
-
-// resolvers.ts
-const resolvers = {
-  Subscription: {
-    // Live query implementation
-    liveQuery: {
-      subscribe: async function* (parent, args, context) {
-        while (true) {
-          const results = await context.dataSources.search(args.query);
-          yield { liveQuery: results };
-          await new Promise(resolve => setTimeout(resolve, 5000));
-        }
-      },
-    },
-  },
-};
-```
-
-## Error Handling
-
-```typescript
-const resolvers = {
-  Subscription: {
-    postCreated: {
-      subscribe: withFilter(
-        () => pubsub.asyncIterator([EVENTS.POST_CREATED]),
-        async (payload, variables, context) => {
-          try {
-            // Check permissions
-            if (!context.user) {
-              throw new GraphQLError('Unauthorized', {
-                extensions: { code: 'UNAUTHENTICATED' },
-              });
-            }
-
-            return true;
-          } catch (error) {
-            // Log error but don't propagate to client
-            console.error('Subscription filter error:', error);
-            return false;
-          }
-        }
-      ),
-
-      // Resolve subscription payload
-      resolve: (payload) => {
-        try {
-          return payload.postCreated;
-        } catch (error) {
-          throw new GraphQLError('Failed to resolve subscription', {
-            extensions: { code: 'SUBSCRIPTION_RESOLVE_ERROR' },
-          });
-        }
-      },
-    },
-  },
-};
-```
-
-## Client Usage
-
-```typescript
-// Apollo Client setup
-import { ApolloClient, InMemoryCache, split, HttpLink } from '@apollo/client';
-import { GraphQLWsLink } from '@apollo/client/link/subscriptions';
-import { getMainDefinition } from '@apollo/client/utilities';
-import { createClient } from 'graphql-ws';
-
-const httpLink = new HttpLink({
-  uri: 'http://localhost:4000/graphql',
-});
-
-const wsLink = new GraphQLWsLink(
-  createClient({
-    url: 'ws://localhost:4000/graphql',
-    connectionParams: {
-      authorization: `Bearer ${token}`,
-    },
-  })
-);
-
-const splitLink = split(
-  ({ query }) => {
-    const definition = getMainDefinition(query);
-    return (
-      definition.kind === 'OperationDefinition' &&
-      definition.operation === 'subscription'
-    );
-  },
-  wsLink,
-  httpLink
-);
-
-const client = new ApolloClient({
-  link: splitLink,
-  cache: new InMemoryCache(),
-});
-
-// Subscribe to events
-const subscription = client
-  .subscribe({
-    query: gql`
-      subscription OnPostCreated {
-        postCreated {
-          id
-          title
-          author {
-            username
-          }
-        }
-      }
-    `,
-  })
-  .subscribe({
-    next: (data) => console.log('New post:', data),
-    error: (err) => console.error('Subscription error:', err),
-    complete: () => console.log('Subscription completed'),
-  });
-
-// Unsubscribe
-subscription.unsubscribe();
-```
-
-## Scaling Subscriptions
-
-```typescript
-// Use Redis for multi-instance deployments
-import { RedisPubSub } from 'graphql-redis-subscriptions';
-
-// Horizontal scaling pattern
-const pubsub = new RedisPubSub({
-  publisher: new Redis(redisConfig),
-  subscriber: new Redis(redisConfig),
-  // Channel prefix for isolation
-  publisherPrefix: 'graphql:pub:',
-  subscriberPrefix: 'graphql:sub:',
-});
-
-// Connection limit per instance
-const MAX_CONNECTIONS_PER_INSTANCE = 10000;
-
-// Load balancing with sticky sessions
-// Ensure same user connects to same server instance
-// for connection state management
-```
-
-## Subscription Best Practices
-
-1. **Authentication**: Always validate auth in onConnect and filters
-2. **Authorization**: Check permissions in withFilter
-3. **Rate Limiting**: Limit subscriptions per user
-4. **Filtering**: Use withFilter for server-side filtering
-5. **Cleanup**: Always clean up subscriptions on disconnect
-6. **Scaling**: Use Redis PubSub for multi-instance deployments
-7. **Error Handling**: Gracefully handle errors in filters and resolvers
-8. **Testing**: Test subscription lifecycle and filtering
-9. **Monitoring**: Track active connections and subscription count
-10. **Performance**: Avoid N+1 in subscription resolvers

package/skills/java-architect/SKILL.md

@@ -1,132 +0,0 @@
----
-name: java-architect
-description: Use when building, configuring, or debugging enterprise Java applications with Spring Boot 3.x, microservices, or reactive programming. Invoke to implement WebFlux endpoints, optimize JPA queries and database performance, configure Spring Security with OAuth2/JWT, or resolve authentication issues and async processing challenges in cloud-native Spring applications.
-license: MIT
-metadata:
-  author: https://github.com/Jeffallan
-  version: "1.1.0"
-  domain: language
-  triggers: Spring Boot, Java, microservices, Spring Cloud, JPA, Hibernate, WebFlux, reactive, Java Enterprise
-  role: architect
-  scope: implementation
-  output-format: code
-  related-skills: fullstack-guardian, api-designer, devops-engineer, database-optimizer
----
-
-# Java Architect
-
-Enterprise Java specialist focused on Spring Boot 3.x, microservices architecture, and cloud-native development using Java 21 LTS.
-
-## Core Workflow
-
-1. **Architecture analysis** - Review project structure, dependencies, Spring config
-2. **Domain design** - Create models following DDD and Clean Architecture; verify domain boundaries before proceeding. If boundaries are unclear, resolve ambiguities before moving to implementation.
-3. **Implementation** - Build services with Spring Boot best practices
-4. **Data layer** - Optimize JPA queries, implement repositories; run `./mvnw verify -pl <module>` to confirm query correctness. If integration tests fail: review Hibernate SQL logs, fix queries or mappings, re-run before proceeding.
-5. **Security & config** - Apply Spring Security, externalize configuration, add observability; run `./mvnw verify` after security changes to confirm filter chain and JWT wiring. If tests fail: check `SecurityFilterChain` bean order and token validation config, then re-run.
-6. **Quality assurance** - Run `./mvnw verify` (Maven) or `./gradlew check` (Gradle) to confirm all tests pass and coverage reaches 85%+ before closing. If coverage is below threshold: identify untested branches via JaCoCo report (`target/site/jacoco/index.html`), add missing test cases, re-run.
-
-## Reference Guide
-
-Load detailed guidance based on context:
-
-| Topic | Reference | Load When |
-|-------|-----------|-----------|
-| Spring Boot | `references/spring-boot-setup.md` | Project setup, configuration, starters |
-| Reactive | `references/reactive-webflux.md` | WebFlux, Project Reactor, R2DBC |
-| Data Access | `references/jpa-optimization.md` | JPA, Hibernate, query tuning |
-| Security | `references/spring-security.md` | OAuth2, JWT, method security |
-| Testing | `references/testing-patterns.md` | JUnit 5, TestContainers, Mockito |
-
-## Constraints
-
-### MUST DO
-- Use Java 21 LTS features (records, sealed classes, pattern matching)
-- Apply database migrations (Flyway/Liquibase)
-- Document APIs with OpenAPI/Swagger
-- Use proper exception handling hierarchy
-- Externalize all configuration (never hardcode values)
-
-### MUST NOT DO
-- Use deprecated Spring APIs
-- Skip input validation
-- Store sensitive data unencrypted
-- Use blocking code in reactive applications
-- Ignore transaction boundaries
-
-## Output Templates
-
-When implementing Java features, provide:
-1. Domain models (entities, DTOs, records)
-2. Service layer (business logic, transactions)
-3. Repository interfaces (Spring Data)
-4. Controller/REST endpoints
-5. Test classes with comprehensive coverage
-6. Brief explanation of architectural decisions
-
-## Code Examples
-
-### Minimal WebFlux REST Endpoint
-
-```java
-@RestController
-@RequestMapping("/api/v1/orders")
-@RequiredArgsConstructor
-public class OrderController {
-
-    private final OrderService orderService;
-
-    @GetMapping("/{id}")
-    public Mono<ResponseEntity<OrderDto>> getOrder(@PathVariable UUID id) {
-        return orderService.findById(id)
-                .map(ResponseEntity::ok)
-                .defaultIfEmpty(ResponseEntity.notFound().build());
-    }
-
-    @PostMapping
-    @ResponseStatus(HttpStatus.CREATED)
-    public Mono<OrderDto> createOrder(@Valid @RequestBody CreateOrderRequest request) {
-        return orderService.create(request);
-    }
-}
-```
-
-### JPA Repository with Optimized Query
-
-```java
-public interface OrderRepository extends JpaRepository<Order, UUID> {
-
-    // Avoid N+1: fetch association in one query
-    @Query("SELECT o FROM Order o JOIN FETCH o.items WHERE o.customerId = :customerId")
-    List<Order> findByCustomerIdWithItems(@Param("customerId") UUID customerId);
-
-    // Projection to limit fetched columns
-    @Query("SELECT new com.example.dto.OrderSummary(o.id, o.status, o.total) FROM Order o WHERE o.status = :status")
-    Page<OrderSummary> findSummariesByStatus(@Param("status") OrderStatus status, Pageable pageable);
-}
-```
-
-### Spring Security OAuth2 JWT Configuration
-
-```java
-@Configuration
-@EnableMethodSecurity
-public class SecurityConfig {
-
-    @Bean
-    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
-        return http
-                .csrf(AbstractHttpConfigurer::disable)
-                .sessionManagement(s -> s.sessionCreationPolicy(STATELESS))
-                .authorizeHttpRequests(auth -> auth
-                        .requestMatchers("/actuator/health").permitAll()
-                        .anyRequest().authenticated())
-                .oauth2ResourceServer(oauth2 -> oauth2.jwt(Customizer.withDefaults()))
-                .build();
-    }
-}
-```
-
-## Knowledge Reference
-
-Spring Boot 3.x, Java 21, Spring WebFlux, Project Reactor, Spring Data JPA, Spring Security, OAuth2/JWT, Hibernate, R2DBC, Spring Cloud, Resilience4j, Micrometer, JUnit 5, TestContainers, Mockito, Maven/Gradle