Use when building, compiling, or publishing the Nexus Gateway AWS AMI / single-instance appliance (the nexus-ami/ Packer image) and registering it to AWS. Covers the full pipeline (Go cross-compile + UI + Prisma + Packer), the EC2 vCPU-quota trap that makes the default m5.4xlarge fail with VcpuLimitExceeded on fresh…
Use when fixing frontend bugs, UI errors, runtime crashes, or data display issues — traces page to API to backend to database, fixes mismatches, then verifies via curl login + DB queries.
Review gaps between SDD documents (source of truth) and all related artifacts: architecture, requirements, OpenAPI specs, code implementation, and unit tests. Creates a plan and todo list to bring docs and code into alignment. Use when docs are out of sync with code, after code-heavy changes, or to audit spec-code…
Install, enroll, start, and troubleshoot the Linux Nexus Agent on a target host until it connects to the Hub, installs the iptables redirect chain, listens on 19080, and produces trafficevent rows. Encodes every real failure mode hit deploying to an Ubuntu server and a kernel-6.17 Docker desktop on a censored (GFW)…
Scan the repository for leaked secrets, PII, and production infrastructure before an open-source release — public IPs, non-allowlisted domains, emails/usernames, passwords, API keys, private keys, DB connection strings, device serials / fingerprints / machine IDs, EC2 internal hostnames. The detection is a…
Run a full-system multi-role audit of the gateway using review prompts for 9 specialist roles — admin dashboard, client, API, architecture, security, compliance, and more. Findings from every role are remediated through the standard workflow. Trigger keywords: project review, multi-role review, full system audit…
Bring the full Nexus Gateway local stack up from a clean clone — PostgreSQL + Valkey + NATS via docker-compose, four Go services (Hub / Control Plane / AI Gateway / Compliance Proxy), and the Control Plane UI (Vite). Encodes every gotcha a first-time OSS contributor hits so the model can drive the full bring-up…
Full-surface smoke test for the AI Gateway + Control Plane. Tests every model in the catalog (non-stream + SSE + 2-turn cache), auto-manages routing rules (all OFF for P3; per-rule isolation for P4), cross-checks trafficevent DB rows, diffs Prometheus counters, and auto-fixes failures (investigate → edit code → build…
Spec-writing for Spec-Driven Development (SDD) skill for writing requirement specifications before implementation. Use when starting a new feature, planning work, writing requirements, or designing a component. Trigger keywords: spec, specification, SDD, plan feature, write requirements, design feature, spec-driven…
Run the full Nexus Gateway end-to-end test program (preflight + L1 smoke + L1 Go integration + L2 protocol + L3 AI-judge + L4 Playwright UI) via tests/run-all.sh and surface the unified markdown report. The single "did my change break something" entry point — covers 75 business flows across all five services, each…
End-to-end smoke test for the Compliance Proxy. Use when the user wants to verify that the running compliance-proxy correctly MITM-intercepts HTTPS provider traffic on :3128, applies the compliance pipeline, and writes matching trafficevent rows (source = 'compliance-proxy') plus Prometheus counters. Trigger keywords…
End-to-end synthetic test for the Cursor IDE Tier-1 protobuf normalizer (E46-S12). Sends a hand-rolled GetChatRequest protobuf to api2.cursor.sh through the deployment's compliance proxy on :3128 (the --proxy flag, or any proxy the user supplies), then verifies the resulting trafficeventnormalized row shows…
End-to-end synthetic test for the Gemini Web (gemini.google.com) Tier-1 normalizer (E46-S12 + Tier 2 batchexecute detector). Sends a hand-rolled Google batchexecute POST (f.req= form-urlencoded JSON envelope) to gemini.google.com's StreamGenerate endpoint through the prod compliance proxy on :3128 (the --proxy flag)…
End-to-end synthetic test for the OpenAI Responses-API ingress (E56). Sends 5 hand-rolled requests through the local AI Gateway on http://localhost:3050/v1/responses covering text non-stream, text SSE, function-call SSE, structured outputs (text.format jsonschema), and reasoning-effort=high non-stream. For each arm…
Establish what a provider wire can and cannot carry, and fix the gateway when the answer is "we send the wrong form". Use when an upstream refuses a request (4xx/422 naming a content type, a field, a modality, a URL form), when a catalog capability is about to be written from a refusal, or when a codec translation is…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: