Menu
Load when you need the per-provider capability, versioning, and alias matrix for suve's CLI without reading the full docs/{aws,azure,gcloud}.md option tables. A one-page orientation; link out for per-command detail.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when restructuring the README or the GitHub Pages site generated from it — the left-nav/left-pane, section reorg, or per-provider command docs. Covers the build-docs-site.py split + literate-nav SUMMARY pipeline, its HTML-comment directives and site-only transforms (nav-group, site:skip, hero <h1>, asset ../ prefix, DOC_NAV grouping), the python-markdown gotchas GitHub hides, and the `mise docs-build` strict gate.
Use when authoring or backfilling the "## Highlights" section of a GitHub release — the human-written summary that prepends the auto-generated notes. Covers when a release earns highlights, the fixed format (bold lead + breaking-change note, `###` subsections, PR-referenced bullets), and the prepend-in-place mechanics.
Use when re-recording the CLI, TUI, or GUI demo GIFs after a UI change or a user-visible output change. Covers the record scripts, robust Playwright selectors, output-drift triggers, frame verification, and Git LFS.
Load when writing or reviewing Go that builds or transforms slices/maps. Prefer samber/lo, samber/lo/it, and stdlib slices/maps callback & iterator utilities over hand-rolled make + range + append; keep an explicit loop only where side effects or control flow are genuinely complex.
Load when adding or modifying a provider adapter, or when touching internal/provider/** or internal/domain/**. Captures the invariants that keep the provider-neutral seam honest: the neutral domain model, opaque version refs, the typed write/delete option pattern, interface segregation, and SDK confinement.
Load when wiring a top-level command group, adding a cloud, or touching internal/provider/registry.go, internal/provider/detect/, or internal/cli/commands/internal/client.go. Explains how a provider is selected (explicit groups plus env-detected flat aliases), how the registry composes backends, how each provider's scope is built, and the SDK-confinement boundary.
| name | suve-cli-map |
| description | Load when you need the per-provider capability, versioning, and alias matrix for suve's CLI without reading the full docs/{aws,azure,gcloud}.md option tables. A one-page orientation; link out for per-command detail. |
A condensed matrix of what each provider/service supports. For per-command options and examples, read the full docs: docs/aws.md, docs/gcloud.md, docs/azure.md.
| Provider | Service | Command | Versioning model | Staging | Service aliases | Activation env var |
|---|---|---|---|---|---|---|
| AWS | Parameter Store | suve aws param | Integer versions; #VERSION ~SHIFT | Yes | ssm, ps | AWS_PROFILE | AWS_ACCESS_KEY_ID | AWS_VAULT |
| AWS | Secrets Manager | suve aws secret | Opaque version id + staging labels; #VERSION :LABEL ~SHIFT (:AWSCURRENT/:AWSPREVIOUS) | Yes | sm, secretsmanager | same as above |
| Google Cloud | Secret Manager | suve gcloud secret | Integer versions (latest); no labels; #VERSION ~SHIFT | Yes (secret-only) | secrets, sm | GOOGLE_CLOUD_PROJECT |
| Azure | Key Vault | suve azure secret | Opaque ids; no labels; #VERSION ~SHIFT; modified time is second-granular | Yes | kv, keyvault | AZURE_KEYVAULT_NAME |
| Azure | App Configuration | suve azure param | Unversioned (single current value); last-write-wins | Yes | appconfig, ac, appcfg | AZURE_APPCONFIG_NAME |
suve <provider> <service> <command>.param / secret / stage form works when exactly one provider is
active for that service in the environment (see the
provider-selection-and-registry skill).add / edit / delete / status / diff / apply / reset /
tag / untag / export / import. The stage alias is stg.| Group | Aliases |
|---|---|
aws | (none) |
gcloud | gcp, google |
azure | az |
param alias.edit as a new version.