code-ai-installer 1.3.1 → 1.4.0

package/locales/en/.agents/board/SKILL.md

@@ -1,232 +0,0 @@
----
-name: board
-description: Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message.
----
-
-# Skill: Project Board (conductor's checklist)
-
-Transparent progress control.
-
-**Sections:**
-1. [Workflow](#1-workflow)
-2. [Task Format](#2-format)
-3. [Status Rules](#3-statuses)
-4. [Board Template](#4-template)
-5. [Progress Summary](#5-summary)
-6. [Blocker Escalation](#6-blockers)
-7. [Example: Smart Cart Rescue](#7-example)
-8. [Output Template](#8-output)
-
----
-
-## 1. Workflow
-
-```
-1. Kickoff → create a Board from the Backlog ($pm_backlog)
-   └── 1-3 tasks per role for the current iteration
-
-2. At each pipeline step:
-   a. Update statuses tasks
-   b. Add new tasks (if they appeared)
-   c. Mark blockers
-   d. Show the Board at the start of the message
-
-3. When blocked → escalation (section 6)
-
-4. When the iteration is finished → Progress Summary (section 5)
-```
-
----
-
-## 2. Task Format
-
-### ID Convention
-
-| Prefix | Owner | Example |
-|--------|-------|---------|
-| `PM-xx` | Product Manager | PM-01: Write PRD |
-| `UX-xx` | UX/UI Designer | UX-01: Create UX Spec |
-| `ARCH-xx` | Architect | ARCH-01: System design |
-| `DEV-xx` | Senior Full Stack | DEV-01: Implement settings API |
-| `REV-xx` | Reviewer | REV-01: Security review |
-| `OPS-xx` | DevOps | OPS-01: Docker setup |
-| `TEST-xx` | Tester | TEST-01: Test plan |
-| `RG-xx` | Release Gate | RG-01: Release checklist |
-
-### Task line format
-
-```
-- [status] (ID) Description — Owner: XX — Deps: YY — Notes: ZZ
-```
-
-### Rules
-
-| Rule | Explanation |
-|------|------------|
-| One task = one checkable result | Artifact, check, or decision |
-| Max 3 tasks per role per iteration | Keep focus |
-| New scope → new task (never modify existing scope) | Traceability |
-| Dependencies explicit | List what blocks and what's blocked |
-
----
-
-## 3. Status Rules
-
-| Status | Meaning | When to set |
-|--------|---------|-------------|
-| `☐` | Not started | Task created, not yet in progress |
-| `⏳` | In progress | Agent started working on this |
-| `☑` | Done | Artifact delivered + accepted by user |
-| `⚠️` | Blocked | Cannot proceed — with explicit reason + owner |
-
-### Transition rules
-
-```
-☐ → ⏳   Agent starts working
-⏳ → ☑   Artifact delivered + user approved
-⏳ → ⚠️  Blocker discovered
-⚠️ → ⏳  Blocker resolved
-☑ → ☐    Requirement changed → new task (don't revert ☑)
-```
-
-### Status never goes backward
-
-- `☑ → ⏳` is **forbidden** — if rework needed, create a new task
-- `☑ → ☐` is **forbidden** — done is done
-
----
-
-## 4. Board Template
-
-```markdown
-## 📋 Project Board — Iteration N
-
-### PM Gate
-- [☑] (PM-01) PRD v1.0 — Owner: PM
-- [☑] (PM-02) Backlog decomposition — Owner: PM
-
-### UX Gate
-- [⏳] (UX-01) UX Discovery — Owner: UX
-- [☐] (UX-02) UX Spec — Owner: UX — Deps: UX-01
-
-### ARCH Gate
-- [☐] (ARCH-01) Architecture doc — Owner: ARCH — Deps: UX-02
-- [☐] (ARCH-02) API contracts — Owner: ARCH — Deps: ARCH-01
-
-### DEV Gate
-- [☐] (DEV-01) Settings API — Owner: DEV — Deps: ARCH-02
-- [☐] (DEV-02) Settings UI — Owner: DEV — Deps: DEV-01, UX-02
-
-### REV Gate
-- [☐] (REV-01) Code review — Owner: REV — Deps: DEV-01, DEV-02
-- [☐] (REV-02) Security review — Owner: REV — Deps: DEV-01
-
-### OPS Gate
-- [☐] (OPS-01) Docker setup — Owner: OPS — Deps: DEV-01
-
-### TEST Gate
-- [☐] (TEST-01) Test plan — Owner: TEST — Deps: UX-02
-- [☐] (TEST-02) Manual test run — Owner: TEST — Deps: DEV-02
-
-### Release Gate
-- [☐] (RG-01) Release checklist — Owner: Conductor — Deps: ALL
-```
-
----
-
-## 5. Progress Summary
-
-Add to every board update:
-
-```markdown
-## 📊 Progress
-| Gate | Total | Done | In Progress | Blocked |
-|------|:-----:|:----:|:-----------:|:-------:|
-| PM | 2 | 2 | 0 | 0 |
-| UX | 2 | 0 | 1 | 0 |
-| ARCH | 2 | 0 | 0 | 0 |
-| DEV | 2 | 0 | 0 | 0 |
-| REV | 2 | 0 | 0 | 0 |
-| OPS | 1 | 0 | 0 | 0 |
-| TEST | 2 | 0 | 0 | 0 |
-| RG | 1 | 0 | 0 | 0 |
-| **Total** | **14** | **2** | **1** | **0** |
-
-**Progress: 2/14 (14%) — On Track / At Risk / Blocked**
-```
-
----
-
-## 6. Blocker Escalation
-
-When `⚠️` appears:
-
-```markdown
-### ⚠️ Blocker Report
-| Task | Blocked by | Owner of resolution | Impact | ETA |
-|------|-----------|:-------------------:|--------|-----|
-| DEV-01 | ARCH-02 not ready | ARCH | P0: all DEV work blocked | Today |
-| TEST-02 | Staging env down | OPS | P1: testing delayed | Tomorrow |
-```
-
-### Escalation rules
-
-| Severity | When | Action |
-|----------|------|--------|
-| 🔴 **Critical** | P0 task blocked, blocks others | Immediately notify user |
-| 🟠 **High** | P1 task blocked | Report in next board update |
-| 🟡 **Low** | P2 task blocked | Track, resolve when possible |
-
----
-
-## 7. Example: Smart Cart Rescue
-
-```markdown
-## 📋 Project Board — Iteration 1 (MVP Foundation)
-
-### PM Gate
-- [☑] (PM-01) PRD: Smart Cart Rescue v1.0 — Owner: PM
-- [☑] (PM-02) Backlog: 3 epics, 21 tasks — Owner: PM
-
-### UX Gate
-- [☑] (UX-01) UX Discovery completed — Owner: UX
-- [⏳] (UX-02) UX Spec: Settings + Coupons screens — Owner: UX
-
-### ARCH Gate
-- [☐] (ARCH-01) Architecture Doc — Owner: ARCH — Deps: UX-02
-- [☐] (ARCH-02) API Contracts (Settings, Coupons, Widget) — Owner: ARCH
-
-### DEV Gate
-- [☐] (DEV-01) Settings API (CRUD + validation) — Owner: DEV — Deps: ARCH-02
-- [☐] (DEV-02) Settings Dashboard UI — Owner: DEV — Deps: DEV-01, UX-02
-
-### 📊 Progress: 3/8 (38%) — On Track
-```
-
----
-
-## 8. Output Template
-
-```markdown
-## 📋 Project Board — Iteration <N>
-
-<section 4 format — all tasks with statuses>
-
-## 📊 Progress
-<section 5 format>
-
-## ⚠️ Blockers
-<section 6 format — or "None">
-
-## 🔜 Next Steps
-1. <What happens next>
-2. <Next agent to activate>
-```
-
----
-
-## See also
-- `$pm_backlog` — backlog (source of tasks)
-- `$handoff` — gate transitions between agents
-- `$gates` — pipeline gate definitions
-- `$release_gate` — final release checklist

package/locales/en/.agents/board/agents/claude.json

@@ -1,16 +0,0 @@
-{
-  "name": "board",
-  "display_name": "Project Board (conductor's checklist)",
-  "description": "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message.",
-  "default_prompt": "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill.",
-  "triggers": [
-    "board",
-    "Project Board (conductor's checklist)",
-    "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message"
-  ],
-  "capabilities": [
-    "board"
-  ],
-  "tools": [],
-  "implicit_invocation": true
-}

package/locales/en/.agents/board/agents/copilot.json

@@ -1,16 +0,0 @@
-{
-  "name": "board",
-  "display_name": "Project Board (conductor's checklist)",
-  "description": "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message.",
-  "default_prompt": "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill.",
-  "triggers": [
-    "board",
-    "Project Board (conductor's checklist)",
-    "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message"
-  ],
-  "capabilities": [
-    "board"
-  ],
-  "tools": [],
-  "implicit_invocation": true
-}

package/locales/en/.agents/board/agents/gemini.json

@@ -1,16 +0,0 @@
-{
-  "name": "board",
-  "display_name": "Project Board (conductor's checklist)",
-  "description": "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message.",
-  "default_prompt": "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill.",
-  "triggers": [
-    "board",
-    "Project Board (conductor's checklist)",
-    "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message"
-  ],
-  "capabilities": [
-    "board"
-  ],
-  "tools": [],
-  "implicit_invocation": true
-}

package/locales/en/.agents/board/agents/openai.yaml

@@ -1,8 +0,0 @@
-interface:
-  display_name: "Project Board (conductor's checklist)"
-  short_description: "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step,…"
-  default_prompt: "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill."
-dependencies:
-  tools: []
-policy:
-  allow_implicit_invocation: true

package/locales/en/.agents/board/agents/qwen.json

@@ -1,16 +0,0 @@
-{
-  "name": "board",
-  "display_name": "Project Board (conductor's checklist)",
-  "description": "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message.",
-  "default_prompt": "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill.",
-  "triggers": [
-    "board",
-    "Project Board (conductor's checklist)",
-    "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message"
-  ],
-  "capabilities": [
-    "board"
-  ],
-  "tools": [],
-  "implicit_invocation": true
-}

package/locales/en/.agents/board/agents/skill.yaml

@@ -1,20 +0,0 @@
-version: 1
-name: "board"
-display_name: "Project Board (conductor's checklist)"
-description: "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message."
-default_prompt: "Use $board when the task matches the \"Project Board (conductor's checklist)\" skill."
-triggers:
-  - "board"
-  - "Project Board (conductor's checklist)"
-  - "Project Board management — creating tasks with ID, statuses ☐/⏳/☑/⚠️, updates after each step, a visible checklist in each conductor message"
-capabilities:
-  - "board"
-tools: []
-invocation:
-  explicit: true
-  implicit: true
-localization:
-  default_locale: "en"
-  available_locales:
-    - "ru"
-    - "en"

package/locales/en/.agents/cloud_infrastructure_security/SKILL.md

@@ -1,277 +0,0 @@
----
-name: cloud_infrastructure_security
-description: Security review of cloud/infra/CI/CD — IAM, secrets manager, network, logging/monitoring, supply chain, CDN/WAF, backup/DR.
----
-
-#Skill: Cloud & Infrastructure Security
-
-Security review of cloud infrastructure, CI/CD, and edge.
-
-**Sections:**
-1. [When to activate](#1-when)
-2. [Checklist](#2-checklist)
-3. [Platform-Specific Examples](#3-examples)
-4. [CI/CD Security Pipeline](#4-cicd)
-5. [Pre-Deployment Gate](#5-pre-deploy)
-6. [Output Template](#6-output)
-
----
-
-## 1. When to activate
-
-| Trigger | Focus |
-|---------|-------|
-| Deploy on AWS / GCP / Azure / Vercel / Railway | Full review |
-| IAM policies / roles changed | IAM section |
-| CI/CD pipeline modified | CI/CD section |
-| New infrastructure (Terraform / CloudFormation) | Full review |
-| Secrets management setup | Secrets section |
-| CDN / WAF configuration | CDN/WAF section |
-| Disaster recovery planning | Backup/DR section |
-| Docker / K8s deployment | → also apply `$docker_kubernetes_architecture` |
-
----
-
-## 2. Checklist
-
-### 2.1 IAM & Access Control
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-01 | Least privilege (no `*` in policies) | 🔴 P0 | ☐ |
-| INF-02 | MFA for privileged accounts (admin, deploy) | 🔴 P0 | ☐ |
-| INF-03 | No root account usage in production | 🔴 P0 | ☐ |
-| INF-04 | Service accounts: one per app, minimal scope | 🟠 P1 | ☐ |
-| INF-05 | Access review: quarterly, remove stale users | 🟠 P1 | ☐ |
-| INF-06 | SSO / federated identity (if org > 5 people) | 🟡 P2 | ☐ |
-
-### 2.2 Secrets Management
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-07 | Platform secret manager (AWS SSM, GCP Secret Manager, Vault, Doppler) | 🟠 P1 | ☐ |
-| INF-08 | Rotation plan for DB credentials (90 days max) | 🟠 P1 | ☐ |
-| INF-09 | Audit log on secret access | 🟠 P1 | ☐ |
-| INF-10 | No secrets in CI logs, build output, Docker images | 🔴 P0 | ☐ |
-| INF-11 | `.env` files gitignored, `.env.example` committed | 🔴 P0 | ☐ |
-
-### 2.3 Network Security
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-12 | Database not publicly accessible | 🔴 P0 | ☐ |
-| INF-13 | SSH/RDP only through VPN/bastion | 🟠 P1 | ☐ |
-| INF-14 | Security groups / firewalls: least privilege (no 0.0.0.0/0 on DB) | 🔴 P0 | ☐ |
-| INF-15 | TLS/HTTPS everywhere (no plain HTTP in prod) | 🔴 P0 | ☐ |
-| INF-16 | Internal services: private network only | 🟠 P1 | ☐ |
-
-### 2.4 Logging & Monitoring
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-17 | Admin actions audited (who did what, when) | 🟠 P1 | ☐ |
-| INF-18 | Log retention ≥ 90 days (or per compliance) | 🟠 P1 | ☐ |
-| INF-19 | Alerts on: failed auth attempts, permission changes, unusual traffic | 🟠 P1 | ☐ |
-| INF-20 | No PII/secrets infrastructure logs | 🔴 P0 | ☐ |
-
-### 2.5 CI/CD Pipeline Security
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-21 | OIDC for deploy (no long-lived credentials) | 🟠 P1 | ☐ |
-| INF-22 | Secret scanning in CI (secretlint, gitleaks) | 🟠 P1 | ☐ |
-| INF-23 | Dependency audit in CI (`npm audit --audit-level=high`) | 🟠 P1 | ☐ |
-| INF-24 | Container image scanning (trivy, grype) | 🟠 P1 | ☐ |
-| INF-25 | Branch protection: required reviews, no force push | 🟠 P1 | ☐ |
-| INF-26 | CI env isolated from production | 🔴 P0 | ☐ |
-
-### 2.6 CDN / WAF / Edge
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-27 | WAF managed rules enabled (OWASP Core Rule Set) | 🟠 P1 | ☐ |
-| INF-28 | Rate limiting on public endpoints | 🟠 P1 | ☐ |
-| INF-29 | Bot protection / challenge mode | 🟡 P2 | ☐ |
-| INF-30 | Security headers at edge (HSTS, X-Frame-Options, CSP) | 🟠 P1 | ☐ |
-| INF-31 | Strict TLS 1.2+ (no SSL v3, TLS 1.0/1.1) | 🔴 P0 | ☐ |
-| INF-32 | Origin server not directly accessible (CDN proxy only) | 🟠 P1 | ☐ |
-
-### 2.7 Backup & DR
-
-| # | Check | Severity | Status |
-|---|-------|----------|--------|
-| INF-33 | Automated backups (DB, configs) | 🟠 P1 | ☐ |
-| INF-34 | Backup retention defined (30+ days) | 🟠 P1 | ☐ |
-| INF-35 | Restore tested (at least once) | 🟠 P1 | ☐ |
-| INF-36 | RPO / RTO documented | 🟠 P1 | ☐ |
-| INF-37 | PITR enabled (if available) | 🟡 P2 | ☐ |
-
----
-
-## 3. Platform-Specific Examples
-
-### AWS IAM Policy (least privilege)
-
-```json
-{
-  "Version": "2012-10-17",
-  "Statement": [
-    {
-      "Effect": "Allow",
-      "Action": [
-        "s3:GetObject",
-        "s3:PutObject"
-      ],
-      "Resource": "arn:aws:s3:::my-app-uploads/*"
-    }
-  ]
-}
-```
-
-```
-// ❌ DON'T
-"Action": "*"
-"Resource": "*"
-
-// ✅ DO
-"Action": ["s3:GetObject", "s3:PutObject"]
-"Resource": "arn:aws:s3:::specific-bucket/*"
-```
-
-### Cloudflare WAF Rule
-
-```
-Expression: (http.request.uri.path contains "/api/" and
-             not http.request.uri.path contains "/health/")
-Action: Challenge
-Rate limit: 100 req/min per IP
-```
-
-### Security Headers (Cloudflare / Caddy)
-
-```
-# Caddy security headers
-header {
-    X-Content-Type-Options    "nosniff"
-    X-Frame-Options           "SAMEORIGIN"
-    X-XSS-Protection          "1; mode=block"
-    Strict-Transport-Security "max-age=31536000; includeSubDomains"
-    Referrer-Policy            "strict-origin-when-cross-origin"
-    Permissions-Policy         "camera=(), microphone=(), geolocation=()"
-}
-```
-
-### Docker Compose Network Isolation
-
-```yaml
-services:
-  api:
-    networks: [frontend, backend]
-  gateway:
-    networks: [frontend]
-  mongo:
-    networks: [backend]    # Not accessible from gateway!
-
-networks:
-  frontend:
-  backend:
-    internal: true  # No external access
-```
-
----
-
-## 4. CI/CD Security Pipeline
-
-```yaml
-# GitHub Actions security job
-security:
-  runs-on: ubuntu-latest
-  steps:
-    - uses: actions/checkout@v4
-
-    # Secret scanning
-    - name: Gitleaks
-      uses: gitleaks/gitleaks-action@v2
-
-    # Dependency audit
-    - name: npm audit
-      run: npm audit --audit-level=high
-
-    # Container scanning
-    - name: Trivy
-      uses: aquasecurity/trivy-action@master
-      with:
-        image-ref: 'app-api:latest'
-        severity: 'CRITICAL,HIGH'
-        exit-code: '1'
-
-    # SAST (static analysis)
-    - name: CodeQL
-      uses: github/codeql-action/analyze@v3
-```
-
----
-
-## 5. Pre-Deployment Gate
-
-### Security sign-off checklist
-
-| # | Category | Check | Status |
-|---|----------|-------|--------|
-| 1 | IAM | Least privilege verified | ☐ |
-| 2 | Secrets | All in secret manager, rotation documented | ☐ |
-| 3 | Network | DB private, TLS everywhere, firewalls set | ☐ |
-| 4 | Logging | Audit logging enabled, no PII | ☐ |
-| 5 | CI/CD | Secret scan + dep audit + image scan pass | ☐ |
-| 6 | CDN/WAF | WAF rules active, rate limits set | ☐ |
-| 7 | Encryption | TLS 1.2+, data at rest encrypted | ☐ |
-| 8 | Backup | Backups scheduled, restore tested | ☐ |
-| 9 | Runbooks | Deploy, rollback, incident docs exist | ☐ |
-| 10 | Incident plan | Contact list, escalation path defined | ☐ |
-
----
-
-## 6. Output Template
-
-```markdown
-# Cloud & Infrastructure Security Review
-
-**Scope:** <infrastructure/platform>
-**Reviewer:** Reviewer Agent
-**Date:** YYYY-MM-DD
-
-## Findings
-
-| # | Severity | Category | Finding | Fix | Status |
-|---|----------|----------|---------|-----|--------|
-| 1 | 🔴 P0 | Network | MongoDB port 27017 publicly accessible | Restrict to private network | ☐ |
-| 2 | 🟠 P1 | CI/CD | No secret scanning in pipeline | Add gitleaks step | ☐ |
-| 3 | 🟠 P1 | CDN | No WAF rules configured | Enable OWASP Core Rule Set | ☐ |
-
-## Checklist Summary
-| Section | Pass | Fail | Total |
-|---------|:----:|:----:|:-----:|
-| IAM | 5 | 1 | 6 |
-| Secrets | 4 | 1 | 5 |
-| Network | 3 | 2 | 5 |
-| Logging | 3 | 1 | 4 |
-| CI/CD | 4 | 2 | 6 |
-| CDN/WAF | 3 | 3 | 6 |
-| Backup | 4 | 1 | 5 |
-
-## Pre-Deployment Gate
-<section 5 checklist with status>
-
-## Verdict
-- ✅ SECURE — all P0 passed, P1 tracked
-- ⚠️ CONDITIONAL — fix P0 items before deploy
-- ❌ BLOCKED — critical infrastructure vulnerabilities
-```
-
----
-
-## See also
-- `$docker_kubernetes_architecture` — container/K8s security details
-- `$k8s_manifests_conventions` — K8s security policies
-- `$threat_model_baseline` — application-level threat model
-- `$deployment_ci_plan` — CI pipeline setup