devops-code-reviewReviews pipeline YAML and Dockerfiles against merged guidelines and org compliance requirements. Checks pipeline structure, stage ordering, runner configuration, scan stages, and Dockerfile security. Uses YAML LSP for syntax validation. Outputs structured findings with severity levels (blocker, sugg
commit-push-prUse when committing, pushing, and raising a PR — stages changed files, writes a Conventional Commits message, pushes to the remote branch, creates a GitHub PR via gh CLI, then posts the PR URL to configured Slack or Teams channels for review. Channel targets are configurable via .commit-push-pr.json
devops-config-resolverResolves the DevOps agent configuration by reading .devops-agent.json and applying a 5-level resolution order: per-invocation override > directory mapping > auto-detection > config defaults > plugin defaults. Enforces governance constraints including approved platforms, registries, and languages bef
devops-guardrailsUse at the start and end of every DevOps coding session — thin adapter invoking shared guardrails gates with DevOps-specific context. Adds Dockerfile security checks (root USER → P0, missing HEALTHCHECK → P1), hardcoded registry credentials → P0. Coverage skipped (null). Uses hadolint/actionlint/che
devops-dockerfile-generationGenerates hardened, multi-stage, non-root Dockerfiles for five application stacks: .NET, Node.js, Java, Go, and Python. Applies org-approved base images, layer optimization, OCI labels, health checks, and .dockerignore generation. Supports standalone invocation and auto-invocation from the pipeline
devops-guidelines-ingestionReads and merges DevOps pipeline coding guidelines from three layers: platform module defaults, team custom guidelines, and per-invocation overrides. Uses section-level (## heading) replacement for deterministic merging. The merged document is injected into agent context and used by all downstream s
devops-platform-detectionAuto-detects the CI/CD platform (GitHub Actions or Azure DevOps) in use by scanning project files for platform-specific signals. Returns the detected platform, confidence level, and all signals found, with priority ordering when multiple platforms are present.
devops-template-repo-fetchFetches org pipeline patterns from the configured template repository. Reads templateRepo.url, branch, and path from config; performs a shallow clone or API fetch; and extracts runner labels, stage ordering, action versions, scan configurations, and Dockerfile patterns. Template patterns override pl