claude-autopm 2.8.1 → 2.8.3

package/packages/plugin-devops/plugin.json

@@ -0,0 +1,302 @@
+{
+  "name": "@claudeautopm/plugin-devops",
+  "version": "2.0.0",
+  "schemaVersion": "2.0",
+  "displayName": "DevOps & Infrastructure",
+  "description": "DevOps, CI/CD, containers, and infrastructure automation specialists with comprehensive commands, rules, and scripts",
+  "category": "devops",
+  "metadata": {
+    "category": "DevOps & CI/CD",
+    "author": "ClaudeAutoPM Team",
+    "license": "MIT",
+    "homepage": "https://github.com/rafeekpro/ClaudeAutoPM",
+    "repository": {
+      "type": "git",
+      "url": "git+https://github.com/rafeekpro/ClaudeAutoPM.git",
+      "directory": "packages/plugin-devops"
+    },
+    "size": "~18 KB (gzipped)",
+    "required": false,
+    "tags": ["devops", "docker", "github", "ci-cd", "observability", "ssh", "traefik", "containers"]
+  },
+  "agents": [
+    {
+      "name": "azure-devops-specialist",
+      "file": "agents/azure-devops-specialist.md",
+      "category": "ci-cd",
+      "description": "Azure DevOps pipelines, workflows, and work item management",
+      "version": "2.0.0",
+      "tags": ["azure", "devops", "pipelines", "ci-cd", "work-items"],
+      "mcp": ["azure-cli"],
+      "context7": [
+        "/microsoftdocs/azure-docs",
+        "/microsoftdocs/architecture-center"
+      ]
+    },
+    {
+      "name": "docker-containerization-expert",
+      "file": "agents/docker-containerization-expert.md",
+      "category": "containers",
+      "description": "Docker containerization, Dockerfile optimization, and Docker Compose",
+      "version": "2.0.0",
+      "tags": ["docker", "containers", "dockerfile", "compose", "multi-stage"],
+      "mcp": ["docker"],
+      "context7": [
+        "/docker/docs",
+        "/docker/compose"
+      ]
+    },
+    {
+      "name": "github-operations-specialist",
+      "file": "agents/github-operations-specialist.md",
+      "category": "ci-cd",
+      "description": "GitHub Actions workflows, repository management, and automation",
+      "version": "2.0.0",
+      "tags": ["github", "actions", "workflows", "ci-cd", "automation"],
+      "mcp": ["github"],
+      "context7": [
+        "/actions/toolkit",
+        "/actions/starter-workflows"
+      ]
+    },
+    {
+      "name": "mcp-context-manager",
+      "file": "agents/mcp-context-manager.md",
+      "category": "tooling",
+      "description": "Model Context Protocol server management and context optimization",
+      "version": "2.0.0",
+      "tags": ["mcp", "context", "optimization", "model-context-protocol"],
+      "mcp": [],
+      "context7": []
+    },
+    {
+      "name": "observability-engineer",
+      "file": "agents/observability-engineer.md",
+      "category": "monitoring",
+      "description": "Prometheus, Grafana, logging, tracing, and observability stack",
+      "version": "2.0.0",
+      "tags": ["observability", "prometheus", "grafana", "monitoring", "tracing"],
+      "mcp": ["prometheus", "grafana"],
+      "context7": [
+        "/prometheus/prometheus",
+        "/grafana/grafana"
+      ]
+    },
+    {
+      "name": "ssh-operations-expert",
+      "file": "agents/ssh-operations-expert.md",
+      "category": "infrastructure",
+      "description": "SSH operations, key management, tunneling, and security",
+      "version": "2.0.0",
+      "tags": ["ssh", "security", "tunneling", "keys", "remote-access"],
+      "mcp": [],
+      "context7": [
+        "/websites/aws_amazon"
+      ]
+    },
+    {
+      "name": "traefik-proxy-expert",
+      "file": "agents/traefik-proxy-expert.md",
+      "category": "networking",
+      "description": "Traefik reverse proxy, load balancing, and service discovery",
+      "version": "2.0.0",
+      "tags": ["traefik", "proxy", "load-balancer", "service-discovery", "ssl"],
+      "mcp": [],
+      "context7": [
+        "/traefik/traefik"
+      ]
+    }
+  ],
+  "commands": [
+    {
+      "name": "workflow-create",
+      "file": "commands/workflow-create.md",
+      "description": "Create GitHub Actions workflow with best practices",
+      "category": "ci-cd",
+      "tags": ["github", "actions", "workflow", "ci-cd"],
+      "requiredAgents": ["github-operations-specialist"],
+      "context7": [
+        "/actions/toolkit",
+        "/actions/starter-workflows"
+      ]
+    },
+    {
+      "name": "docker-optimize",
+      "file": "commands/docker-optimize.md",
+      "description": "Optimize Docker images for size, security, and performance",
+      "category": "containers",
+      "tags": ["docker", "optimization", "security", "multi-stage", "buildkit"],
+      "requiredAgents": ["docker-containerization-expert"],
+      "context7": [
+        "/docker/docs",
+        "/docker/compose"
+      ]
+    },
+    {
+      "name": "ci-pipeline-create",
+      "file": "commands/ci-pipeline-create.md",
+      "description": "Create production-ready CI/CD pipelines for multiple platforms",
+      "category": "ci-cd",
+      "tags": ["ci-cd", "pipeline", "github-actions", "azure-devops", "gitlab"],
+      "requiredAgents": ["github-operations-specialist", "azure-devops-specialist", "docker-containerization-expert"],
+      "context7": [
+        "/docker/docs",
+        "/kubernetes/kubernetes",
+        "/actions/toolkit"
+      ]
+    }
+  ],
+  "rules": [
+    {
+      "name": "github-operations",
+      "file": "rules/github-operations.md",
+      "priority": "high",
+      "description": "GitHub operations standards and best practices",
+      "tags": ["github", "actions", "pr", "automation"],
+      "appliesTo": ["commands", "agents"],
+      "enforcesOn": ["github-operations-specialist"]
+    },
+    {
+      "name": "docker-first-development",
+      "file": "rules/docker-first-development.md",
+      "priority": "medium",
+      "description": "Docker-first development workflow and containerization standards",
+      "tags": ["docker", "containers", "development", "workflow"],
+      "appliesTo": ["commands", "agents"],
+      "enforcesOn": ["docker-containerization-expert"]
+    },
+    {
+      "name": "devops-troubleshooting-playbook",
+      "file": "rules/devops-troubleshooting-playbook.md",
+      "priority": "high",
+      "description": "DevOps troubleshooting methodologies and debugging strategies",
+      "tags": ["devops", "troubleshooting", "debugging", "monitoring"],
+      "appliesTo": ["commands", "agents"],
+      "enforcesOn": ["observability-engineer", "docker-containerization-expert"]
+    },
+    {
+      "name": "ci-cd-kubernetes-strategy",
+      "file": "rules/ci-cd-kubernetes-strategy.md",
+      "priority": "high",
+      "description": "CI/CD pipeline strategies for Kubernetes deployments",
+      "tags": ["ci-cd", "kubernetes", "deployment", "automation"],
+      "appliesTo": ["commands", "agents"],
+      "enforcesOn": ["github-operations-specialist", "azure-devops-specialist"]
+    }
+  ],
+  "hooks": [
+    {
+      "name": "pre-docker-build",
+      "file": "hooks/pre-docker-build.js",
+      "type": "pre-command",
+      "description": "Validate Dockerfile best practices before building",
+      "blocking": true,
+      "tags": ["docker", "validation", "security", "best-practices"],
+      "triggers": ["docker:build", "docker:optimize", "docker-compose:up"]
+    }
+  ],
+  "scripts": [
+    {
+      "name": "docker-build-multistage",
+      "file": "scripts/examples/docker-build-multistage.sh",
+      "description": "Multi-stage Docker build with BuildKit optimization",
+      "type": "example",
+      "executable": true,
+      "category": "docker",
+      "tags": ["docker", "build", "multi-stage", "optimization"]
+    },
+    {
+      "name": "github-workflow-validate",
+      "file": "scripts/examples/github-workflow-validate.sh",
+      "description": "GitHub Actions workflow validation and syntax check",
+      "type": "example",
+      "executable": true,
+      "category": "github",
+      "tags": ["github", "actions", "validation", "workflow"]
+    },
+    {
+      "name": "prometheus-health-check",
+      "file": "scripts/examples/prometheus-health-check.sh",
+      "description": "Prometheus health check and metrics validation",
+      "type": "example",
+      "executable": true,
+      "category": "monitoring",
+      "tags": ["prometheus", "monitoring", "health-check", "metrics"]
+    },
+    {
+      "name": "docker-compose-validate",
+      "file": "scripts/examples/docker-compose-validate.sh",
+      "description": "Docker Compose configuration validation",
+      "type": "example",
+      "executable": true,
+      "category": "docker",
+      "tags": ["docker", "compose", "validation", "health-check"]
+    },
+    {
+      "name": "ssh-key-setup",
+      "file": "scripts/examples/ssh-key-setup.sh",
+      "description": "SSH key generation and setup with ED25519",
+      "type": "example",
+      "executable": true,
+      "category": "ssh",
+      "tags": ["ssh", "security", "keys", "ed25519"]
+    }
+  ],
+  "features": {
+    "containerization": {
+      "enabled": true,
+      "description": "Docker containerization and orchestration"
+    },
+    "ci_cd": {
+      "enabled": true,
+      "description": "GitHub Actions and Azure DevOps pipelines"
+    },
+    "observability": {
+      "enabled": true,
+      "description": "Prometheus, Grafana, and monitoring stack"
+    },
+    "networking": {
+      "enabled": true,
+      "description": "Traefik proxy and load balancing"
+    },
+    "security": {
+      "enabled": true,
+      "description": "SSH operations and security hardening"
+    },
+    "context_management": {
+      "enabled": true,
+      "description": "MCP server and context optimization"
+    }
+  },
+  "dependencies": [],
+  "peerPlugins": [
+    "@claudeautopm/plugin-core"
+  ],
+  "mcpServers": {
+    "recommended": [
+      "docker",
+      "github",
+      "azure-cli",
+      "prometheus",
+      "grafana"
+    ],
+    "optional": []
+  },
+  "keywords": [
+    "claudeautopm",
+    "plugin",
+    "devops",
+    "docker",
+    "github",
+    "ci-cd",
+    "azure-devops",
+    "observability",
+    "prometheus",
+    "grafana",
+    "ssh",
+    "traefik",
+    "containers",
+    "automation"
+  ],
+  "compatibleWith": ">=3.0.0"
+}

package/packages/plugin-devops/rules/github-operations.md

@@ -0,0 +1,92 @@
+# GitHub Operations Rule
+
+Standard patterns for GitHub CLI operations across all commands.
+
+## CRITICAL: Repository Protection
+
+**Before ANY GitHub operation that creates/modifies issues or PRs:**
+
+```bash
+# Check if remote origin is the AutoPM template repository
+remote_url=$(git remote get-url origin 2>/dev/null || echo "")
+if [[ "$remote_url" == *"rlagowski/autopm"* ]] || [[ "$remote_url" == *"rlagowski/autopm.git"* ]]; then
+  echo "❌ ERROR: You're trying to sync with the AutoPM template repository!"
+  echo ""
+  echo "This repository (rlagowski/autopm) is a template for others to use."
+  echo "You should NOT create issues or PRs here."
+  echo ""
+  echo "To fix this:"
+  echo "1. Fork this repository to your own GitHub account"
+  echo "2. Update your remote origin:"
+  echo "   git remote set-url origin https://github.com/YOUR_USERNAME/YOUR_REPO.git"
+  echo ""
+  echo "Or if this is a new project:"
+  echo "1. Create a new repository on GitHub"
+  echo "2. Update your remote origin:"
+  echo "   git remote set-url origin https://github.com/YOUR_USERNAME/YOUR_REPO.git"
+  echo ""
+  echo "Current remote: $remote_url"
+  exit 1
+fi
+```
+
+This check MUST be performed in ALL commands that:
+
+- Create issues (`gh issue create`)
+- Edit issues (`gh issue edit`)
+- Comment on issues (`gh issue comment`)
+- Create PRs (`gh pr create`)
+- Any other operation that modifies the GitHub repository
+
+## Authentication
+
+**Don't pre-check authentication.** Just run the command and handle failure:
+
+```bash
+gh {command} || echo "❌ GitHub CLI failed. Run: gh auth login"
+```
+
+## Common Operations
+
+### Get Issue Details
+
+```bash
+gh issue view {number} --json state,title,labels,body
+```
+
+### Create Issue
+
+```bash
+# ALWAYS check remote origin first!
+gh issue create --title "{title}" --body-file {file} --label "{labels}"
+```
+
+### Update Issue
+
+```bash
+# ALWAYS check remote origin first!
+gh issue edit {number} --add-label "{label}" --add-assignee @me
+```
+
+### Add Comment
+
+```bash
+# ALWAYS check remote origin first!
+gh issue comment {number} --body-file {file}
+```
+
+## Error Handling
+
+If any gh command fails:
+
+1. Show clear error: "❌ GitHub operation failed: {command}"
+2. Suggest fix: "Run: gh auth login" or check issue number
+3. Don't retry automatically
+
+## Important Notes
+
+- **ALWAYS** check remote origin before ANY write operation to GitHub
+- Trust that gh CLI is installed and authenticated
+- Use --json for structured output when parsing
+- Keep operations atomic - one gh command per action
+- Don't check rate limits preemptively

package/packages/plugin-devops/scripts/examples/docker-build-multistage.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# Docker multi-stage build example with optimization
+# Usage: ./docker-build-multistage.sh [image-name] [tag]
+
+set -euo pipefail
+
+IMAGE_NAME="${1:-myapp}"
+TAG="${2:-latest}"
+DOCKERFILE="${DOCKERFILE:-Dockerfile}"
+
+echo "🐳 Building multi-stage Docker image: ${IMAGE_NAME}:${TAG}..."
+
+# Check Docker is installed
+if ! command -v docker &> /dev/null; then
+    echo "❌ Docker not found. Please install it first."
+    exit 1
+fi
+
+# Build with BuildKit for better caching and performance
+export DOCKER_BUILDKIT=1
+
+echo "📦 Building image with BuildKit optimization..."
+docker build \
+    --build-arg BUILDKIT_INLINE_CACHE=1 \
+    --tag "${IMAGE_NAME}:${TAG}" \
+    --file "${DOCKERFILE}" \
+    .
+
+# Get image size
+IMAGE_SIZE=$(docker images "${IMAGE_NAME}:${TAG}" --format "{{.Size}}")
+echo "✅ Image built successfully: ${IMAGE_NAME}:${TAG} (Size: ${IMAGE_SIZE})"
+
+# Optional: Security scan with Trivy if available
+if command -v trivy &> /dev/null; then
+    echo "🔒 Running security scan with Trivy..."
+    trivy image --severity HIGH,CRITICAL "${IMAGE_NAME}:${TAG}"
+fi
+
+# Optional: Show image layers
+echo "📊 Image layers:"
+docker history "${IMAGE_NAME}:${TAG}" --no-trunc --human
+
+echo "✅ Build complete: ${IMAGE_NAME}:${TAG}"

package/packages/plugin-devops/scripts/examples/docker-compose-validate.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+# Docker Compose validation and health check
+# Usage: ./docker-compose-validate.sh [compose-file]
+
+set -euo pipefail
+
+COMPOSE_FILE="${1:-docker-compose.yml}"
+
+echo "🐳 Validating Docker Compose configuration: ${COMPOSE_FILE}..."
+
+# Check docker-compose is installed
+if ! command -v docker-compose &> /dev/null && ! docker compose version &> /dev/null; then
+    echo "❌ docker-compose not found. Please install it first."
+    exit 1
+fi
+
+# Use 'docker compose' or 'docker-compose' based on availability
+if docker compose version &> /dev/null 2>&1; then
+    COMPOSE_CMD="docker compose"
+else
+    COMPOSE_CMD="docker-compose"
+fi
+
+# Validate compose file syntax
+echo "📋 Validating Compose file syntax..."
+if $COMPOSE_CMD -f "${COMPOSE_FILE}" config > /dev/null; then
+    echo "  ✓ Compose file syntax is valid"
+else
+    echo "  ❌ Compose file has syntax errors"
+    exit 1
+fi
+
+# Show parsed configuration
+echo ""
+echo "📊 Parsed configuration:"
+$COMPOSE_CMD -f "${COMPOSE_FILE}" config --services
+
+# Check for common issues
+echo ""
+echo "🔍 Checking for common issues..."
+
+# Check for missing environment variables
+if grep -q '\${[A-Z_]*}' "${COMPOSE_FILE}"; then
+    echo "  ⚠️  Warning: Compose file contains environment variable references"
+    echo "     Make sure all required variables are set in .env file"
+fi
+
+# Check for volume definitions
+VOLUMES=$($COMPOSE_CMD -f "${COMPOSE_FILE}" config --volumes 2>/dev/null | wc -l)
+if [ "$VOLUMES" -gt 0 ]; then
+    echo "  ✓ Volumes defined: ${VOLUMES}"
+    $COMPOSE_CMD -f "${COMPOSE_FILE}" config --volumes
+fi
+
+# Check for network definitions
+NETWORKS=$($COMPOSE_CMD -f "${COMPOSE_FILE}" config --networks 2>/dev/null | wc -l)
+if [ "$NETWORKS" -gt 0 ]; then
+    echo "  ✓ Networks defined: ${NETWORKS}"
+fi
+
+# If compose stack is running, check health
+if $COMPOSE_CMD -f "${COMPOSE_FILE}" ps | grep -q "Up"; then
+    echo ""
+    echo "📊 Running services status:"
+    $COMPOSE_CMD -f "${COMPOSE_FILE}" ps
+
+    # Check logs for errors (last 50 lines)
+    echo ""
+    echo "📋 Recent logs (last 50 lines):"
+    $COMPOSE_CMD -f "${COMPOSE_FILE}" logs --tail=50
+fi
+
+echo ""
+echo "✅ Docker Compose validation complete"

package/packages/plugin-devops/scripts/examples/github-workflow-validate.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# GitHub Actions workflow validation
+# Usage: ./github-workflow-validate.sh [workflow-file]
+
+set -euo pipefail
+
+WORKFLOW_FILE="${1:-.github/workflows/*.yml}"
+
+echo "🔍 Validating GitHub Actions workflows..."
+
+# Check GitHub CLI is installed
+if ! command -v gh &> /dev/null; then
+    echo "❌ GitHub CLI not found. Please install it first."
+    echo "   Visit: https://cli.github.com/"
+    exit 1
+fi
+
+# Check if logged in
+if ! gh auth status &> /dev/null; then
+    echo "❌ Not logged into GitHub CLI. Please run: gh auth login"
+    exit 1
+fi
+
+# Validate workflow syntax
+echo "📋 Checking workflow syntax..."
+for workflow in .github/workflows/*.yml .github/workflows/*.yaml 2>/dev/null; do
+    if [ -f "$workflow" ]; then
+        echo "  ✓ Validating: $workflow"
+        # Check YAML syntax
+        if command -v yamllint &> /dev/null; then
+            yamllint "$workflow" || echo "    ⚠️  YAML lint warnings found"
+        fi
+
+        # Validate with GitHub Actions
+        if gh workflow view "$(basename "$workflow")" &> /dev/null; then
+            echo "    ✓ Workflow exists on GitHub"
+        else
+            echo "    ⚠️  Workflow not found on GitHub (may not be pushed yet)"
+        fi
+    fi
+done
+
+# List all workflows
+echo ""
+echo "📊 Available workflows:"
+gh workflow list
+
+echo "✅ Workflow validation complete"

package/packages/plugin-devops/scripts/examples/prometheus-health-check.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# Prometheus health and metrics check
+# Usage: ./prometheus-health-check.sh [prometheus-url]
+
+set -euo pipefail
+
+PROMETHEUS_URL="${1:-http://localhost:9090}"
+
+echo "📊 Checking Prometheus health at ${PROMETHEUS_URL}..."
+
+# Check Prometheus is reachable
+if ! curl -sf "${PROMETHEUS_URL}/-/healthy" > /dev/null; then
+    echo "❌ Prometheus is not healthy or not reachable"
+    exit 1
+fi
+
+echo "✅ Prometheus is healthy"
+
+# Check readiness
+if curl -sf "${PROMETHEUS_URL}/-/ready" > /dev/null; then
+    echo "✅ Prometheus is ready"
+else
+    echo "⚠️  Prometheus is not ready yet"
+fi
+
+# Get Prometheus version
+echo ""
+echo "📋 Prometheus build info:"
+curl -s "${PROMETHEUS_URL}/api/v1/status/buildinfo" | jq -r '.data'
+
+# Check targets
+echo ""
+echo "🎯 Checking scrape targets..."
+TARGETS=$(curl -s "${PROMETHEUS_URL}/api/v1/targets" | jq -r '.data.activeTargets | length')
+echo "  Active targets: ${TARGETS}"
+
+# Check alerting rules
+echo ""
+echo "🚨 Checking alert rules..."
+ALERT_GROUPS=$(curl -s "${PROMETHEUS_URL}/api/v1/rules" | jq -r '.data.groups | length')
+echo "  Alert rule groups: ${ALERT_GROUPS}"
+
+# Check active alerts
+ACTIVE_ALERTS=$(curl -s "${PROMETHEUS_URL}/api/v1/alerts" | jq -r '.data.alerts | map(select(.state == "firing")) | length')
+if [ "$ACTIVE_ALERTS" -gt 0 ]; then
+    echo "  ⚠️  Active firing alerts: ${ACTIVE_ALERTS}"
+    curl -s "${PROMETHEUS_URL}/api/v1/alerts" | jq -r '.data.alerts[] | select(.state == "firing") | "    - " + .labels.alertname + ": " + .annotations.summary'
+else
+    echo "  ✅ No firing alerts"
+fi
+
+# Check TSDB status
+echo ""
+echo "💾 TSDB status:"
+curl -s "${PROMETHEUS_URL}/api/v1/status/tsdb" | jq -r '.data'
+
+echo ""
+echo "✅ Prometheus health check complete"