claude-autopm 2.8.1 → 2.8.3

package/packages/plugin-cloud/commands/cloud-cost-optimize.md

@@ -0,0 +1,243 @@
+# cloud:cost-optimize
+
+Analyze and optimize cloud infrastructure costs across AWS, Azure, and GCP.
+
+## Description
+
+Performs comprehensive cost analysis and provides optimization recommendations:
+- Identify unused and underutilized resources
+- Right-sizing recommendations for compute instances
+- Storage class optimization opportunities
+- Reserved instance and savings plan analysis
+- Network data transfer optimization
+- Serverless vs. traditional compute comparisons
+
+## Required Documentation Access
+
+**MANDATORY:** Before executing cost optimization, query Context7 for best practices:
+
+**Documentation Queries:**
+- `mcp://context7/aws/cost-optimization` - AWS Cost Optimization strategies
+- `mcp://context7/azure/cost-management` - Azure Cost Management best practices
+- `mcp://context7/gcp/pricing-optimization` - GCP pricing and cost optimization
+- `mcp://context7/terraform/cost-estimation` - Terraform cost estimation patterns
+- `mcp://context7/finops/cost-optimization` - FinOps cost optimization frameworks
+
+**Why This is Required:**
+- Ensures recommendations follow cloud provider pricing models
+- Applies latest cost optimization techniques
+- Validates against FinOps best practices
+- Prevents over-optimization that impacts performance
+
+## Usage
+
+```bash
+/cloud:cost-optimize [options]
+```
+
+## Options
+
+- `--provider <aws|azure|gcp|all>` - Cloud provider to analyze (default: all)
+- `--category <compute|storage|network|database|all>` - Resource category (default: all)
+- `--threshold <amount>` - Minimum monthly savings to report (default: $10)
+- `--apply` - Automatically apply low-risk optimizations
+- `--report <path>` - Generate detailed cost report
+- `--period <7d|30d|90d>` - Analysis period (default: 30d)
+
+## Examples
+
+### Full Cost Analysis
+```bash
+/cloud:cost-optimize
+```
+
+### AWS Compute Optimization
+```bash
+/cloud:cost-optimize --provider aws --category compute
+```
+
+### Auto-Apply Safe Optimizations
+```bash
+/cloud:cost-optimize --apply --threshold 50
+```
+
+### Generate 90-Day Cost Report
+```bash
+/cloud:cost-optimize --period 90d --report ./cost-optimization.md
+```
+
+## Optimization Categories
+
+### Compute Optimization
+- Right-sizing over-provisioned instances
+- Spot/preemptible instance opportunities
+- Auto-scaling configuration improvements
+- Serverless migration candidates
+- Reserved instance/savings plan recommendations
+
+### Storage Optimization
+- Lifecycle policy for infrequent access data
+- Cold storage migration opportunities
+- Unused volume detection and deletion
+- Snapshot retention optimization
+- Block storage to object storage migration
+
+### Network Optimization
+- Data transfer cost reduction strategies
+- CDN usage optimization
+- NAT gateway cost reduction
+- Cross-region traffic minimization
+- VPN vs. Direct Connect analysis
+
+### Database Optimization
+- Right-sizing database instances
+- Read replica optimization
+- Backup retention policy optimization
+- Serverless database opportunities
+- Connection pooling improvements
+
+## Implementation
+
+This command uses specialized cloud agents:
+
+1. **@aws-cloud-architect** - AWS cost analysis
+2. **@azure-cloud-architect** - Azure cost analysis
+3. **@gcp-cloud-architect** - GCP cost analysis
+4. **@terraform-infrastructure-expert** - IaC cost estimation
+
+The command:
+1. Queries Context7 for cost optimization patterns
+2. Analyzes current resource utilization
+3. Compares against pricing models and alternatives
+4. Generates prioritized recommendations
+5. Optionally applies automated optimizations
+6. Projects cost savings with implementation timeline
+
+## Risk Levels
+
+### Low Risk (Auto-Apply Safe)
+- Delete unused volumes and snapshots
+- Apply storage lifecycle policies
+- Enable auto-scaling where configured
+- Update security group descriptions
+
+### Medium Risk (Review Required)
+- Right-size instances (25%+ reduction)
+- Migrate to spot instances
+- Change storage classes
+- Consolidate resources
+
+### High Risk (Manual Approval)
+- Terminate running instances
+- Major architecture changes
+- Cross-region migrations
+- Database sizing changes
+
+## Output Format
+
+### Console Output
+```
+💰 Cloud Cost Optimization Analysis
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Current Monthly Cost: $4,250
+Potential Savings: $1,180 (27.8%)
+
+AWS Optimization Opportunities
+  Compute
+    💰 $420/mo - Right-size 8 over-provisioned EC2 instances
+    💰 $180/mo - Convert 3 instances to spot
+    💰 $90/mo - Enable auto-scaling for development environments
+
+  Storage
+    💰 $120/mo - Move 500GB to Glacier Deep Archive
+    💰 $60/mo - Delete 15 unused EBS volumes
+
+  Network
+    💰 $80/mo - Optimize CloudFront distribution
+
+Azure Optimization Opportunities
+  Compute
+    💰 $150/mo - Right-size 4 VMs
+    💰 $80/mo - Reserved instance for production VMs
+
+Summary by Risk Level
+  🟢 Low Risk: $240/mo (auto-apply with --apply)
+  🟡 Medium Risk: $680/mo (review recommended)
+  🔴 High Risk: $260/mo (manual approval required)
+
+Recommended Actions
+  1. Apply low-risk optimizations immediately
+  2. Review medium-risk recommendations with team
+  3. Plan high-risk changes for next maintenance window
+
+Projected Timeline
+  Immediate: $240/mo savings
+  Week 1: $920/mo cumulative savings
+  Month 1: $1,180/mo total savings
+```
+
+### Report Output
+Generates detailed markdown report with:
+- Executive summary with ROI analysis
+- Detailed findings by provider and category
+- Cost trend analysis
+- Prioritized recommendation list with implementation steps
+- Risk assessment matrix
+- Projected savings timeline
+
+## Related Commands
+
+- `/cloud:validate` - Validate infrastructure before optimization
+- `/cloud:deploy` - Deploy optimized infrastructure
+- `/cloud:monitor` - Monitor cost trends over time
+
+## Best Practices
+
+1. **Regular Analysis**: Run monthly cost optimization reviews
+2. **Start Small**: Apply low-risk optimizations first
+3. **Monitor Impact**: Track actual vs. projected savings
+4. **Document Decisions**: Record why certain optimizations weren't applied
+5. **Automate**: Schedule automated optimization for non-production environments
+
+## Auto-Apply Rules
+
+When using `--apply`, only these optimizations are automatically applied:
+
+✅ **Safe Optimizations**
+- Delete unattached EBS volumes (>30 days old)
+- Delete old snapshots beyond retention policy
+- Apply storage lifecycle policies
+- Tag untagged resources
+- Enable cost allocation tags
+
+❌ **Blocked from Auto-Apply**
+- Instance type changes
+- Instance termination
+- Database modifications
+- Network topology changes
+- Any production resource changes
+
+## Troubleshooting
+
+### Missing Cost Data
+- Ensure Cost Explorer is enabled (AWS)
+- Enable billing export (Azure, GCP)
+- Wait 24-48 hours for data population
+
+### Incomplete Recommendations
+- Check IAM/RBAC permissions for cost APIs
+- Verify CloudWatch/Monitoring metrics are enabled
+- Ensure resource tagging is consistent
+
+### Optimization Failures
+- Review resource dependencies before applying
+- Check for attached resources (volumes, IPs)
+- Verify no active workloads on target resources
+
+## Version History
+
+- v2.0.0 - Initial Schema v2.0 release with Context7 integration
+- Automated low-risk optimizations
+- Multi-cloud support
+- FinOps best practices integration

package/packages/plugin-cloud/commands/cloud-validate.md

@@ -0,0 +1,196 @@
+# cloud:validate
+
+Validate cloud infrastructure configuration and credentials across AWS, Azure, and GCP.
+
+## Description
+
+Performs comprehensive validation of cloud infrastructure setup including:
+- Cloud provider credentials and authentication
+- IAC configuration files (Terraform, CloudFormation, ARM templates)
+- Resource naming conventions and tagging compliance
+- Security best practices and compliance checks
+- Cost optimization opportunities
+
+## Required Documentation Access
+
+**MANDATORY:** Before executing validation, query Context7 for best practices:
+
+**Documentation Queries:**
+- `mcp://context7/aws/best-practices` - AWS Well-Architected Framework
+- `mcp://context7/azure/best-practices` - Azure Cloud Adoption Framework
+- `mcp://context7/gcp/best-practices` - Google Cloud Architecture Framework
+- `mcp://context7/terraform/validation` - Terraform validation and testing patterns
+- `mcp://context7/security/cloud-security` - Cloud security hardening guidelines
+
+**Why This is Required:**
+- Ensures validation follows cloud provider best practices
+- Applies latest security recommendations
+- Validates against current compliance standards
+- Prevents misconfigurations and vulnerabilities
+
+## Usage
+
+```bash
+/cloud:validate [options]
+```
+
+## Options
+
+- `--provider <aws|azure|gcp|all>` - Cloud provider to validate (default: all)
+- `--scope <credentials|config|security|cost|all>` - Validation scope (default: all)
+- `--fix` - Attempt to fix issues automatically
+- `--report <path>` - Generate validation report at specified path
+- `--strict` - Fail on warnings (default: fail on errors only)
+
+## Examples
+
+### Validate All Cloud Providers
+```bash
+/cloud:validate
+```
+
+### Validate AWS Configuration Only
+```bash
+/cloud:validate --provider aws --scope config
+```
+
+### Validate with Auto-Fix
+```bash
+/cloud:validate --provider azure --fix
+```
+
+### Generate Security Validation Report
+```bash
+/cloud:validate --scope security --report ./security-audit.md
+```
+
+## Validation Checks
+
+### Credentials
+- ✅ AWS credentials in ~/.aws/credentials or environment
+- ✅ Azure CLI authentication status
+- ✅ GCP service account or user credentials
+- ✅ Permission scope and access levels
+- ✅ Credential rotation compliance
+
+### Configuration
+- ✅ Terraform/IaC syntax validation
+- ✅ Provider version compatibility
+- ✅ Backend configuration (state management)
+- ✅ Variable definitions and defaults
+- ✅ Module source verification
+
+### Security
+- ✅ Public exposure risks (S3 buckets, security groups)
+- ✅ Encryption at rest and in transit
+- ✅ IAM/RBAC policy compliance
+- ✅ Network security (VPC, NSG, firewall rules)
+- ✅ Secret management practices
+
+### Cost Optimization
+- ✅ Resource sizing recommendations
+- ✅ Unused or underutilized resources
+- ✅ Reserved instance opportunities
+- ✅ Storage class optimization
+- ✅ Network data transfer costs
+
+## Implementation
+
+This command uses specialized cloud agents to perform validation:
+
+1. **@aws-cloud-architect** - AWS validation
+2. **@azure-cloud-architect** - Azure validation
+3. **@gcp-cloud-architect** - GCP validation
+4. **@terraform-infrastructure-expert** - IaC validation
+
+The command:
+1. Queries Context7 for provider-specific best practices
+2. Executes validation scripts for each provider
+3. Aggregates results and generates reports
+4. Optionally applies fixes for common issues
+5. Provides actionable recommendations
+
+## Exit Codes
+
+- `0` - All validations passed
+- `1` - Validation warnings found (fail with --strict)
+- `2` - Validation errors found
+- `3` - Critical security issues found
+- `4` - Configuration errors prevent validation
+
+## Output Format
+
+### Console Output
+```
+☁️  Cloud Infrastructure Validation
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+AWS Validation
+  ✅ Credentials: Valid (us-east-1)
+  ✅ Configuration: 12 resources validated
+  ⚠️  Security: 2 warnings (S3 bucket encryption)
+  ✅ Cost: No optimization opportunities
+
+Azure Validation
+  ✅ Credentials: Valid (subscription: prod-001)
+  ✅ Configuration: 8 resources validated
+  ✅ Security: All checks passed
+  💰 Cost: 3 optimization opportunities found
+
+GCP Validation
+  ✅ Credentials: Valid (project: my-project)
+  ✅ Configuration: 15 resources validated
+  ✅ Security: All checks passed
+  ✅ Cost: No optimization opportunities
+
+Summary
+  Total Resources: 35
+  ✅ Passed: 33
+  ⚠️  Warnings: 2
+  ❌ Errors: 0
+  💰 Cost Savings: ~$120/month
+```
+
+### Report Output (Markdown)
+Generates comprehensive markdown report with:
+- Executive summary
+- Detailed findings by provider
+- Security compliance matrix
+- Cost optimization recommendations
+- Remediation steps with code examples
+
+## Related Commands
+
+- `/cloud:deploy` - Deploy validated infrastructure
+- `/cloud:cost-analysis` - Detailed cost analysis
+- `/cloud:security-scan` - Deep security scanning
+- `/infra-deploy` - Infrastructure deployment
+
+## Best Practices
+
+1. **Run Before Deployment**: Always validate before deploying changes
+2. **CI/CD Integration**: Include in pipeline for automated checks
+3. **Regular Audits**: Schedule weekly validation runs
+4. **Fix Warnings**: Address warnings before they become errors
+5. **Document Exceptions**: Track validation exceptions with justification
+
+## Troubleshooting
+
+### Authentication Failures
+- Verify cloud CLI installation (aws-cli, azure-cli, gcloud)
+- Check credential files and environment variables
+- Ensure proper permissions and access scopes
+
+### Configuration Errors
+- Run `terraform fmt` and `terraform validate`
+- Check provider version compatibility
+- Verify module sources and versions
+
+### Performance Issues
+- Use `--provider` flag to limit scope
+- Run validations in parallel for large infrastructures
+- Cache provider API responses when possible
+
+## Version History
+
+- v2.0.0 - Initial Schema v2.0 release with Context7 integration