/alibabacloud-analyticdb-postgresql-ai-coaching-best-practice

name: alibabacloud-analyticdb-postgresql-ai-coaching-best-practice
description: |
  Implement AI Coaching best practices on AnalyticDB for PostgreSQL (ADBPG): Leverage Supabase projects (training data management) + ADBPG instances with vector optimization to build RAG-driven coaching systems that guide users through domain-specific workflows, decision-making, or skill development.
  Use when: User wants to create Supabase projects (spb-xxx), ADBPG instances (gp-xxx), vector knowledge bases, or RAG-driven coaching systems on ADBPG.
  Triggers: "Supabase", "ADBPG", "vector database", "knowledge base", "RAG", "AI coaching", "coaching system", "spb-xxx", "gp-xxx"

ADBPG AI Coaching Best Practice

Build RAG-driven coaching systems using **ADBPG Supabase** (training data management) + **ADBPG Vector Knowledge Base** (RAG-driven intelligent coaching).

**Core Capabilities**:

• **Supabase Project**: PostgreSQL-based platform for managing coaching domains, learners, and session records
• **Vector Knowledge Base**: ADBPG instance with vector optimization for RAG-driven coaching
• **Seamless Integration**: Supabase stores structured data, ADBPG powers intelligent AI coaching dialogue

---

Pre-check: Aliyun CLI >= 3.3.3 Required

> **IMPORTANT**: Run `aliyun version` to verify >= 3.3.3. If not installed or version too low, > run `curl -fsSL https://aliyuncli.alicdn.com/setup.sh | bash` to update, > or see [references/cli-installation-guide.md](references/cli-installation-guide.md) for installation instructions. > > Then **[MUST]** run `aliyun configure set --auto-plugin-install true` to enable automatic plugin installation. > **[MUST]** run `aliyun plugin update` to ensure that any existing plugins on your local machine are always up-to-date.

---

[MUST] CLI User-Agent

> **Every `aliyun` CLI command invocation must include:** > `--user-agent AlibabaCloud-Agent-Skills/alibabacloud-analyticdb-postgresql-ai-coaching-best-practice`

---

[MUST] CLI AI-Mode Configuration

At the **start** of the Core Workflow (before any CLI invocation):

**[MUST] Enable AI-Mode** — AI-mode is required for Agent Skill execution. Run the following commands before any CLI invocation:

aliyun configure ai-mode enable
aliyun configure ai-mode set-user-agent --user-agent "AlibabaCloud-Agent-Skills/alibabacloud-analyticdb-postgresql-ai-coaching-best-practice"

**[MUST] Disable AI-Mode at EVERY exit point** — Before delivering the final response for ANY reason, always disable AI-mode first. This applies to ALL exit paths: workflow success, workflow failure, error/exception, user cancellation, session end, or any other scenario where no further CLI commands will be executed. AI-mode is only used for Agent Skill invocation scenarios and MUST NOT remain enabled after the skill stops running.

aliyun configure ai-mode disable

---

Pre-check: Alibaba Cloud Credentials Required

> **Security Rules:** > - **NEVER** read, echo, or print AK/SK values > - **NEVER** ask the user to input AK/SK directly > - **NEVER** print passwords or API Keys in plain text in logs or stdout > - **ONLY** use `aliyun configure list` to check credential status > - When displaying API Keys, show only the first 6 characters + `***` (e.g., `sk-abc1***`)

aliyun configure list

**If no valid profile exists, STOP here.** Configure credentials outside of this session via `aliyun configure` or environment variables.

---

Scenario Description

| Scenario | Use Case | Target Users | |----------|----------|--------------| | **Workflow Coaching** | Guide professionals through structured business processes (sales cycles, project management) | Sales teams, project managers | | **Decision Support** | Help engineers evaluate trade-offs and make informed technical decisions | Engineers, architects | | **Skill Development** | Develop communication, negotiation, or technical skills through guided practice | Professionals, new hires | | **Onboarding** | Systematically guide new team members through technical and process onboarding | New employees, mentors |

Architecture

User (Web / Terminal / Agent)
           │
    ┌──────┴──────┐
    v             v
┌─────────────┐  ┌────────────────────────┐
│  Supabase   │  │  Agent Mode            │
│  (spb-xxx)  │  │  ChatWithKnowledgeBase │
│  - Domains  │  └───────────┬────────────┘
│  - Sessions │              │
└──────┬──────┘              │
       v                     v
┌────────────────────────────────────────┐
│  ADBPG Instance (gp-xxx) + KB          │
│  Domain Knowledge + RAG + LLM          │
└────────────────────────────────────────┘

---

RAM Policy

Required Permissions

| Operation | RAM Permission | |-----------|----------------| | Supabase Project Management | `gpdb:CreateSupabaseProject`, `gpdb:GetSupabaseProject`, `gpdb:ModifySupabaseProjectSecurityIps` | | ADBPG Instance Management | `gpdb:CreateDBInstance`, `gpdb:DescribeDBInstances`, `gpdb:ModifySecurityIps` | | Account Management | `gpdb:DescribeAccounts`, `gpdb:CreateAccount` | | Knowledge Base Operations | `gpdb:InitVectorDatabase`, `gpdb:CreateNamespace`, `gpdb:CreateDocumentCollection`, `gpdb:UploadDocumentAsync`, `gpdb:ChatWithKnowledgeBase` | | VPC Network | `vpc:DescribeVpcs`, `vpc:DescribeVSwitches`, `vpc:DescribeVSwitchAttributes` | | NAT Gateway & EIP | `vpc:DescribeNatGateways`, `vpc:CreateNatGateway`, `vpc:DescribeEipAddresses`, `vpc:AllocateEipAddress`, `vpc:AssociateEipAddress`, `vpc:CreateSnatEntry` |

**Recommended System Policies:** `AliyunGPDBFullAccess`, `AliyunVPCFullAccess` (or `AliyunVPCReadOnlyAccess` if NAT already exists)

See [references/ram-policies.md](references/ram-policies.md) for complete list.

> **[MUST] Permission Failure Handling:** When any command fails due to permission errors: > 1. Read [references/ram-policies.md](references/ram-policies.md) for required permissions > 2. Use `ram-permission-diagnose` skill to guide the user > 3. Pause and wa