Settings file Claude Code
Agent settings configuring permissions, enabledPlugins.
Settings file Claude Code
Agent settings configuring permissions, enabledPlugins.
Skill Claude CodeCodex
Use when building, compiling, or publishing the Nexus Gateway AWS AMI / single-instance appliance (the nexus-ami/ Packer image) and registering it to AWS. Covers the full pipeline (Go cross-compile + UI + Prisma + Packer), the EC2 vCPU-quota trap that makes the default m5.4xlarge fail with VcpuLimitExceeded on fresh…
Skill Claude CodeCodex
Audit the Control Plane UI + Agent Dashboard against the design-token / CSS framework architecture, including the Tailwind v4 + shadcn surface and the prime-shadcn-tokens.css @theme {} palette. Detects theme/mode-breaking offenders: hex / rgba / hsla literals in .module.css, hex / rgba inside style={{}} blocks in…
Skill Claude CodeCodex
Use when fixing frontend bugs, UI errors, runtime crashes, or data display issues — traces page to API to backend to database, fixes mismatches, then verifies via curl login + DB queries.
Skill Claude CodeCodex
Review gaps between SDD documents (source of truth) and all related artifacts: architecture, requirements, OpenAPI specs, code implementation, and unit tests. Creates a plan and todo list to bring docs and code into alignment. Use when docs are out of sync with code, after code-heavy changes, or to audit spec-code…
Skill Claude CodeCodex
Install, enroll, start, and troubleshoot the Linux Nexus Agent on a target host until it connects to the Hub, installs the iptables redirect chain, listens on 19080, and produces trafficevent rows. Encodes every real failure mode hit deploying to an Ubuntu server and a kernel-6.17 Docker desktop on a censored (GFW)…
Skill Claude CodeCodex
Scan the repository for leaked secrets, PII, and production infrastructure before an open-source release — public IPs, non-allowlisted domains, emails/usernames, passwords, API keys, private keys, DB connection strings, device serials / fingerprints / machine IDs, EC2 internal hostnames. The detection is a…
Skill Claude CodeCodex
Run a full-system multi-role audit of the gateway using review prompts for 9 specialist roles — admin dashboard, client, API, architecture, security, compliance, and more. Findings from every role are remediated through the standard workflow. Trigger keywords: project review, multi-role review, full system audit…
Skill Claude CodeCodex
Bring the full Nexus Gateway local stack up from a clean clone — PostgreSQL + Valkey + NATS via docker-compose, four Go services (Hub / Control Plane / AI Gateway / Compliance Proxy), and the Control Plane UI (Vite). Encodes every gotcha a first-time OSS contributor hits so the model can drive the full bring-up…
Skill Claude CodeCodex
Full-surface smoke test for the AI Gateway + Control Plane. Tests every model in the catalog (non-stream + SSE + 2-turn cache), auto-manages routing rules (all OFF for P3; per-rule isolation for P4), cross-checks trafficevent DB rows, diffs Prometheus counters, and auto-fixes failures (investigate → edit code → build…
Skill Claude CodeCodex
Spec-writing for Spec-Driven Development (SDD) skill for writing requirement specifications before implementation. Use when starting a new feature, planning work, writing requirements, or designing a component. Trigger keywords: spec, specification, SDD, plan feature, write requirements, design feature, spec-driven…
Skill Claude CodeCodex
Run the full Nexus Gateway end-to-end test program (preflight + L1 smoke + L1 Go integration + L2 protocol + L3 AI-judge + L4 Playwright UI) via tests/run-all.sh and surface the unified markdown report. The single "did my change break something" entry point — covers 75 business flows across all five services, each…
Skill Claude CodeCodex
End-to-end smoke test for the Compliance Proxy. Use when the user wants to verify that the running compliance-proxy correctly MITM-intercepts HTTPS provider traffic on :3128, applies the compliance pipeline, and writes matching trafficevent rows (source = 'compliance-proxy') plus Prometheus counters. Trigger keywords…
Skill Claude CodeCodex
End-to-end synthetic test for the Cursor IDE Tier-1 protobuf normalizer (E46-S12). Sends a hand-rolled GetChatRequest protobuf to api2.cursor.sh through the deployment's compliance proxy on :3128 (the --proxy flag, or any proxy the user supplies), then verifies the resulting trafficeventnormalized row shows…
Skill Claude CodeCodex
End-to-end synthetic test for the Gemini Web (gemini.google.com) Tier-1 normalizer (E46-S12 + Tier 2 batchexecute detector). Sends a hand-rolled Google batchexecute POST (f.req= form-urlencoded JSON envelope) to gemini.google.com's StreamGenerate endpoint through the prod compliance proxy on :3128 (the --proxy flag)…
Skill Claude CodeCodex
End-to-end synthetic test for the OpenAI Responses-API ingress (E56). Sends 5 hand-rolled requests through the local AI Gateway on http://localhost:3050/v1/responses covering text non-stream, text SSE, function-call SSE, structured outputs (text.format jsonschema), and reasoning-effort=high non-stream. For each arm…
Skill Claude CodeCodex
Establish what a provider wire can and cannot carry, and fix the gateway when the answer is "we send the wrong form". Use when an upstream refuses a request (4xx/422 naming a content type, a field, a modality, a URL form), when a catalog capability is about to be written from a refusal, or when a codec translation is…
Cursor rule Cursor
Adversarial product review + less-is-more — challenge every proposed feature, knob, surface, menu item before building.
Cursor rule Cursor
Agent runtime: paths abstraction, traffic-upload level, audit empty-string stamping.
Cursor rule Cursor
Agent UI uses "traffic event" never "AI call"; agent has NO quota concept.
Cursor rule Cursor
AI Gateway / trafficevent changes require an ai-gateway smoke run before "done".
Cursor rule Cursor
Read the listed architecture doc BEFORE editing any subsystem.
Cursor rule Cursor
Quick index of project binding rules (canonical text in CLAUDE.md).
Cursor rule Cursor
Binding — code changes must update matching docs (architecture / feature / API / runbook / SDD) in the same diff.