Cheatsheet

brew install go-task                               # backbone exposes all operational surfaces via taskfiles; install this first
task bootstrap:toolchain                           # install cli toolchain
task bootstrap:mvn                                 # configure maven settings to allow access to GitHub Packages
task lefthook:install                              # install git hooks configured in .config/lefthook.yml

task bootstrap:licence-install                     # install the licence file on your machine
task bootstrap:licence-secure                      # secure the licence file and directory

task bootstrap:platform-config                     # configure interactive platform-config.yml (DNS, ECS, NAT)
task bootstrap:dotenvrc                            # generate .envrc.local from API keys and secrets

task docker:restart -- floci jaeger postgres       # restart listed docker containers
task docker:start -- floci jaeger postgres
task docker:stop -- floci jaeger postgres
task docker:status                                 # docker container status and ports for all services

task dev:floci                                     # create Floci development resources
task seed:floci                                    # seed Floci development resources
task seed:it:up                                    # IT fixtures (Floci Cognito + Postgres)

task build:nuke                                    # delete the Maven build cache + stop mvn daemons
task build:clean
task build:compile
task build:package
task build:install

task test:unit
task test:integration
task test:integration MODULE=services/auth-service # run a specific module's integration tests
task test:all                                      # run all unit and integration tests
task test:static                                   # PMD/SpotBugs/Checkstyle + OWASP (NVD); OSS Index: -- -Doss.index.analyzer.enabled=true

mert start                                         # run all quarkus dev services locally

task dev:scaffold -- <service-name> [--with-rds]   # scaffold a new quarkus service [optional rds persistence]
task dev:audit                                     # run a single quarkus dev service locally
task dev:auth
task dev:actor
task dev:document
task dev:notification
task dev:bff                                       # actor-bff BFF application
task dev:web                                       # web-actor static/stateless ui

task quarkus:status                                # local quarkus server port contention
task quarkus:kill                                  # kill all local quarkus servers

task metrics:restart                               # restart Prometheus + Grafana; regenerate configs and dashboards
task metrics:start
task metrics:stop

task metrics:prometheus-start
task metrics:prometheus-stop
task metrics:prometheus-config
task metrics:grafana-start
task metrics:grafana-stop
task metrics:grafana-dashboard

task bootstrap:github-licence                      # publish the licence file as GHA secret BACKBONE_LICENCE
task bootstrap:github-env                          # publish .envrc.local entries as matching GHA vars/secrets
task bootstrap:github-ci                           # prompt and publish GHA vars/secrets for CI 

task cdk:build
task cdk:test
task cdk:synth
task cdk:diff

task cdk:install                                   # install Node dependencies and verify cdklocal
task cdk:bootstrap                                 # Floci cdklocal bootstrap

task cdk:deploy-all                                # deploy all stacks (Floci)
task cdk:deploy-ecr
task cdk:deploy-cognito
task cdk:deploy-domain
task cdk:deploy-network
task cdk:deploy-datastore
task cdk:deploy-security
task cdk:deploy-runtime

task cdk:destroy-all
task cdk:destroy-runtime

task cdk:install                                   # npm install in infra/ (CI and real AWS)
task aws:bootstrap                                 # CDKToolkit in workload region (backbone-sandbox profile) + us-east-1
task aws:bootstrap-xray                            # X-Ray OTLP → CloudWatch Logs (once per account/region)

task aws:deploy-all                                # deploy all stacks (AWS)
task aws:deploy-ecr                                # deploy ECR stack (INT)
task aws:deploy-cognito                            # deploy Cognito (INT needs GitHubRole first)
task aws:deploy-domain                             # deploy Domain stack (requires manual DNS updates)

task aws:deploy-observability                      # deploy Observability stack only (AMP + AMG)
task aws:grant-observability -- [email protected]    # grant AMG workspace Admin (after deploy/hibernate)

task aws:hibernate                                 # delete non-prod runtime + foundation tier CFN stacks (cost-optimisation)