On-call intelligence for DevOps and platform teams. Local-first AI agent over your tools — HITL-gated, MCP-native, AGPL-3.0.
Command Claude Code
Authoring built-in Nimbus agents (catchup, expert, impact, ghost, conflicts, huddle, janitor, preflight, why, glossary, decisions, ownership, pre-mortem, negotiate): file location, the read-only/HITL-free shape invariant (and pre-mortem's narrowly-bounded exception to it), parallel sub-agent decomposition via…
Command Claude Code
Authoritative reference for the Nimbus codebase: subsystem responsibilities, package layout, IPC conventions, non-negotiable design rules, and where to put new code. Use when writing a feature, adding a file, designing an IPC method, wiring a connector, working with the engine/HITL/Vault, naming/placing code, deciding…
Command Claude Code
Phase 5 T4 CI/CD data layer: the four DORA calculators (deployment frequency, lead time, change failure rate, MTTR), the pre-deploy preflight check, the post-deploy annotation pipeline, the [metrics.dora. ] + [ci.service. ] nimbus.toml schema, URN-based repo + PagerDuty binding, the OpenAPI surface (/v1/metrics/dora…
Command Claude Code
The bun scripts, CLI subcommands, and env-var overrides for developing, testing, building, packaging, and releasing Nimbus. Use when asking how to run a script, which coverage gate covers a subsystem, what env var overrides the LLM model, before a bun add (the dependency-safety pre-flight), or when wiring CI gates /…
Command Claude Code
Complete reference for authoring first-party MCP connectors: package layout, mandatory tool surface, manifest structure, credential injection, the sync handler contract, item ID format, HITL declaration, contract tests, and coverage gates. Use when creating or modifying a connector, deciding which tools to expose…
Command Claude Code
Phase 6 Slice 7 (Wave 7a) data-warehouse / BI connectors and the cross-warehouse lineage graph: the six read-only connectors (Snowflake, Tableau, Looker, Power BI, Monte Carlo, Bigeye), the datamodel / dashboard / dataqualitytest item types, the metadata-only ("no cell values") contract, the V40 graphrelationtype…
Command Claude Code
Authoring SQLite migrations in the Nimbus Gateway: file location + V numbering, the runner contract (transaction wrapping, pre-migration backups, ledger recording), the append-only/forward-only schema rule, large-backfill batching, the schemamigrations ledger, the new-table checklist, and FTS5/vec0 virtual-table…
Command Claude Code
S1 "Local Brain" — the Egress Ledger & nimbus prove. The always-on, append-only, BLAKE3-chained ledger of every authorized outbound action (invariant I29 / static D22): one egressledger row is appended from engine/executor.ts ToolExecutor.gate() BEFORE connectors.dispatch — a denied gate writes a…
Command Claude Code
Hybrid 384/1536-dim embedding routing (Phase 5 T6 PR 3): PROSEHEAVYTYPES, EMBEDDINGDIMLOCAL/EMBEDDINGDIMOPENAI, the RoutingEmbeddingPipeline wrapper, dual-table search (vecitems384 + vecitems1536 via vectorSearchChunksDual), the V30 migration (1536-dim table + dim-aware delete triggers), the nimbus index reembed CLI +…
Command Claude Code
Phase 6 Team federation + identity/access. Federation: the consent-scoped, leak-proof federated query gate (invariant I17 / static D13, federation/query-gate.ts), shared scoped namespaces + per-peer RBAC grants (namespace-store.ts), mDNS discovery + out-of-band peer pairing (discovery.ts / peer-pairing.ts)…
Command Claude Code
Pointer index from "where does X live?" to file path, for the Nimbus monorepo. Use when the user asks where a subsystem, HITL gate, vault key, migration, Tauri allowlist, agent, connector, or RPC handler lives — or when about to grep for an entry-point. Faster than Glob for high-traffic files. Curated by hand and lags…
Command Claude Code
The local HTTP API write surface + the WRITEROUTEALLOWLIST / bearer-auth / per-token rate-limit / audit-on-rejection pipeline that protects it (invariant I13). Use when adding/modifying an HTTP POST/PUT/DELETE handler, debating whether a route belongs on the local socket vs the HTTP API, wiring a CI integration that…
Command Claude Code
The two implicit-knowledge extraction pipelines behind nimbus glossary and nimbus decisions (Spine S1 "Local Brain") — packages/gateway/src/glossary/ and packages/gateway/src/decisions/. Covers the shared four-stage pass shape (discover → score/prioritize → LLM consolidate/extract → reconcile), the : source-type…
Command Claude Code
The full-body store and the connector index-depth chokepoint (schema V48 + V49): item.body / item.bodypreview / item.bodycomplete, the BODYMAXPROSE 16,384 vs 512 cap split, the two-arm IndexedItemBodyInput union, and upsertIndexedItemForSync — the single site every connector's item write must go through so…
Command Claude Code
Complete reference for the Nimbus Gateway IPC layer: JSON-RPC 2.0 conventions, all method namespaces, notification + streaming patterns, the Tauri allowlist, error codes, and the checklist for adding a new method. Use when adding an IPC method, designing a notification, wiring an IPC call from CLI/UI, choosing a…
Command Claude Code
How to run the local CI-parity pre-flight before pushing a Nimbus PR, why test:ci is not enough, and the workflow guardrails. Use this skill when the user asks "what should I run before pushing", "why did my PR fail CI", "how do I avoid CI failures", "pre-flight" / "preflight", "which gates does CI run", when wiring a…
Command Claude Code
The Nimbus invariant triple rule + security-defense lifecycle: production wiring + docs entry + enforcement test. Use when adding, modifying, or auditing a structural security defense — HITL action types, extension integrity checks, Vault redaction, ALLOWEDMETHODS entries, any new gating mechanism — or asking "is this…
Command Claude Code
Phase 6 Slice 8 — Share & Virality. The single outbound-share chokepoint (invariant I27 / static D21, share/share-gate.ts createShare()): default + caller redaction, the LOCAL owner approves the exact redacted preview via the share.publish HITL action, the body is signed with the Vault-only share.signing.privkey…
Command Claude Code
The Tauri renderer-callable IPC method allowlist (invariant I7). Use when exposing a new Gateway IPC method to the desktop UI, removing/renaming a renderer-callable method, marking a method long-running (no-timeout), classifying a notification for cross-window rebroadcast, auditing whether the renderer can reach an…
Command Claude Code
Complete testing reference for Nimbus: which test layer to use, file naming/location, coverage gates, isolation rules, and ready-to-use patterns (HITL, IPC, Vault, connectors, UI components, E2E CLI). Use when writing a test, deciding where it belongs or which tool to use, checking coverage requirements, mocking the…
Command Claude Code
The envelope that wraps every LLM-facing tool result in Nimbus (invariant I11). Use when adding an agent surface, registering a Mastra tool, exposing an MCP-backed tool to the LLM, building a sub-agent worker, deciding whether to wrapToolOutput, or auditing a path where tool output reaches the conversational model…