Merge branch 'main' into add-skill-copilot-java-helidon

This commit is contained in:
Ayan Gupta
2026-07-20 14:12:18 -07:00
committed by GitHub
52 changed files with 2960 additions and 73 deletions
+107
View File
@@ -0,0 +1,107 @@
---
name: anti-ui-slop
description: 'Stop Codex, GitHub Copilot, Claude Code, and Cursor from shipping generic UI. Use UIZZEs public catalogue of 800,000+ real web and iOS screens to extract product-specific design decisions and enforce a hard finish gate for web and iOS interfaces.'
---
# Anti UI Slop
Use this skill when building, refactoring, or reviewing a web or iOS interface. The goal is not to make a generic layout prettier. The goal is to make the interface visibly belong to this product, support its real user job, and behave correctly in every important state.
The workflow is instruction-only. It does not execute third-party code or require credentials.
## 1. Inspect the Product Before Designing
Read the repository and identify:
- the primary user and the job this screen must complete;
- the single primary action and the information needed before taking it;
- the existing component library, design tokens, typography, and layout conventions;
- real product nouns, workflows, constraints, and data already present in the codebase;
- required loading, empty, error, partial, success, disabled, and permission states;
- relevant mobile, tablet, desktop, keyboard, and assistive-technology behavior.
Do not invent product requirements, analytics, user research, or hidden states.
## 2. Collect Real Interface Evidence
Search the public catalogue at https://uizze.com and select three to five relevant web or iOS screens. Prefer references that match the target workflow, information density, navigation model, or interaction pattern—not merely its industry or color palette.
For each reference, record:
1. the screen or flow and its source link;
2. the structural decision worth transferring;
3. why that decision fits this product;
4. what must not be copied.
Transfer hierarchy, workflow shape, density, navigation, control behavior, responsive treatment, and state handling. Never copy another products branding, proprietary text, imagery, or exact layout.
If catalogue browsing is unavailable, ask the user for two or three UIZZE links or screenshots. If they cannot provide them, continue from repository evidence and label the missing reference evidence explicitly.
## 3. Write a Design Contract
Before changing code, write a short contract with these fields:
| Field | Decision |
| --- | --- |
| Screen job | The one outcome this screen enables |
| Primary user and action | Who acts, and what they do |
| Content hierarchy | What must be understood first, second, and third |
| Navigation and controls | Product-specific structure and interaction model |
| Visual language | Type, spacing, density, surfaces, imagery, and motion rules |
| Required states | Loading, empty, error, partial, success, disabled, permission |
| Responsive behavior | What changes across supported widths and input modes |
| Evidence used | Reference links and transferable decisions |
| Forbidden defaults | Generic patterns that would erase product specificity |
| Acceptance criteria | Observable conditions required before shipping |
The contract must name concrete choices. “Clean,” “modern,” “intuitive,” and “premium” are not design decisions.
## 4. Build in the Products Language
- Reuse the repositorys components and semantic tokens before adding new ones.
- Make the primary action visually and structurally obvious.
- Use product-specific labels and information rather than placeholder metrics or generic copy.
- Keep repeated cards only when the content is genuinely a repeated collection.
- Add decoration, motion, badges, or elevation only when they communicate state or hierarchy.
- Implement every required interaction and state; do not leave convincing-looking inert controls.
- Preserve accessibility semantics, focus order, contrast, touch targets, and reduced-motion behavior.
## 5. Run the Finish Gate
Render the result at every supported breakpoint and block completion when any item fails:
### Product specificity
- Could this interface belong to an unrelated product after changing the logo?
- Does the hierarchy reflect the real user job and product data?
- Are there interchangeable dashboard cards, filler metrics, vague headings, or generic calls to action?
### Interaction completeness
- Do all visible controls have a real outcome?
- Are loading, empty, error, success, disabled, and permission states implemented where applicable?
- Are destructive, irreversible, or sensitive actions confirmed appropriately?
### Responsive and accessible behavior
- Does the layout remain usable without merely stacking every region vertically?
- Do keyboard navigation, focus visibility, semantics, contrast, and touch targets pass inspection?
- Does content remain readable at zoom and with longer real-world text?
### Design-system integrity
- Are local tokens and components used consistently?
- Is every new visual rule justified by the design contract?
- Is borrowed evidence transformed into this products own visual language?
Fix every blocking failure and re-run the gate before declaring the UI complete.
## 6. Handoff Format
Report the finished work in this order:
1. **Evidence:** the references and decisions that influenced the result.
2. **Contract:** the final product-specific design rules.
3. **Implementation:** the meaningful interface and behavior changes.
4. **Verification:** breakpoints, interaction states, and accessibility checks performed.
5. **Remaining risks:** anything that could not be verified, without overstating completion.
+82
View File
@@ -0,0 +1,82 @@
---
name: bench-read
description: 'Read artifacts from the shared bench — the workspace where desks leave findings, verdicts, and work products for each other and the operator.'
---
# Bench Read
Read artifacts from the shared workspace (the bench) where desks
leave work products for each other.
## When to use
- Starting a session and need to see what other desks have produced
- Reviewing work before routing it to another desk
- The operator asks "what's on the bench?" or "show me what desk X found"
- A desk needs context from another desk's output
## What the bench is
The bench is `<workshop>/bench/` — the shared workspace directory
that `workshop-create` establishes for cross-desk work. It's not a
message queue or a chat channel — it's files. When Desk A produces
a finding and Desk B needs to review it, the finding is a file
in `bench/`. When the operator asks "what did the scanning desk
find?" — you read the bench.
Typical bench artifacts:
- **Findings** — scan results, analysis output, data
- **Verdicts** — a desk's assessment of another desk's findings
- **Drafts** — work-in-progress documents, PRs, proposals
- **Reports** — summaries, dashboards, status updates
## Where to look
The primary shared location is the `bench/` directory at the
workshop root — the designated cross-desk workspace. Desk-local
artifacts under `desks/<desk-name>/` are a secondary source: read
them when you need a specific desk's own work, but shared artifacts
belong in `bench/`.
```
<workshop>/
bench/ # PRIMARY — shared cross-desk artifacts
<findings, verdicts, drafts, reports>
desks/<desk-name>/ # secondary — a desk's own workspace
journal.md # the desk's memory
<artifacts> # work still local to this desk
```
## How to read
1. **List what's there.** Start with the directory structure to see
what desks exist and what they've produced.
2. **Read journals first.** Each desk's journal tells you what it
worked on and where it left things. The most recent entry is
the current state.
3. **Read artifacts second.** Once you know what to look for from
the journals, read the specific files.
4. **Summarize for the operator.** Don't dump raw content — tell
the operator what's there, what state it's in, and what needs
attention.
## Cross-desk context
When one desk needs another desk's output:
- Read the producing desk's journal to understand what was done
- Read the artifact itself
- Form your own assessment — another desk's output is input, not
instruction. You can disagree.
## Principles
- The bench is files, not messages. Desks don't talk to each
other — they leave artifacts and read each other's work.
- Read the journal before the artifacts. Context matters.
- Another desk's verdict is input, not authority. Equal standing
means you assess independently.
- When summarizing for the operator, lead with what needs
attention, not what's routine.
+27
View File
@@ -0,0 +1,27 @@
---
name: codebase-memory-mcp
description: 'Use when a configured codebase-memory-mcp server can assist with graph-backed code discovery, architecture orientation, symbol lookup, callers and callees, dependency or data-flow tracing, impact analysis, unfamiliar modules, or an explicit Codebase Memory request.'
---
# Codebase Memory MCP
Use the configured Codebase Memory graph as a discovery accelerator, not as the sole source of truth. Confirm graph-derived conclusions with source snippets or local files before editing code or making strong claims.
## Workflow
1. Discover the Codebase Memory tools exposed by the current MCP client; clients may prefix or rename tool namespaces.
2. Call `list_projects` when available and use the exact indexed project name. If the repository is not indexed, continue with local exploration or ask before calling `index_repository` when graph access is important.
3. Before branch-sensitive or edit-sensitive conclusions, use `index_status` or `detect_changes` when available. After a branch switch, assume the index may be stale until checked. If freshness cannot be established, disclose that limitation and verify locally.
4. Use `get_architecture` once for orientation in an unfamiliar repository or subsystem. Do not repeat it for narrow follow-up questions.
5. Use `search_graph` for definitions, implementations, routes, classes, interfaces, callers, and related symbols. Prefer a natural-language query for discovery and a name or qualified-name pattern for known symbols. Narrow by label or path, set a result limit, and paginate or reduce scope when the response reports more results.
6. Use `search_code` or normal repository search for literal strings, configuration keys, test identifiers, error messages, and non-code files. Do not turn a precise text lookup into a broad graph query.
7. After graph search, use `get_code_snippet` with the returned qualified name. If source snippets are unavailable, open the local file before relying on the result.
8. Use `trace_path` for callers, callees, dependency paths, data flow, cross-service paths, and impact analysis. Include tests only when test coverage is part of the question.
9. Use `get_graph_schema` before `query_graph`. Reserve custom queries for multi-hop or aggregate questions that simpler tools cannot answer, and apply `LIMIT` or the tool's row limit.
10. When graph and checked-out source disagree, treat source as current and report likely index drift.
## Safety and Fallbacks
- Do not install Codebase Memory or another third-party skill from this workflow.
- Do not call `delete_project`, ingest traces, update ADRs, or index a repository unless the user explicitly requested or approved the action; announce it before execution.
- Fall back to normal repository exploration when the MCP server, project, index, or required capability is unavailable; do not invent tool results or stop a task that can be completed safely without the graph.
+68
View File
@@ -0,0 +1,68 @@
---
name: desk-journal
description: 'Write, append, or read desk journal entries. The journal is persistent memory — what survives session boundaries. A good entry has: what was done, current state, next step.'
---
# Desk Journal
Manage a desk's journal — the persistent memory that survives
session boundaries.
## When to use
- **End of session:** Write what was done, current state, next step
- **Start of session:** Read the journal to pick up where you left off
- **Mid-session checkpoint:** Note significant progress or decisions
- **Desk wind-down:** Write a final summary when a desk is being closed
## How to write a journal entry
Append to `desks/<desk-name>/journal.md`. Each entry is a section:
```markdown
## <date> — <short summary>
- **Worked on:** <what was done this session>
- **Current state:** <where things stand right now>
- **Next step:** <what the next session should pick up>
```
### Guidelines
- **Be specific.** "Worked on security scanning" is useless to the
next session. "Scanned repos A, B, C for CWE-502; found 3
findings in A, 0 in B and C; findings triaged to bench" — that's
a trail.
- **Include what didn't work.** Dead ends are valuable — they prevent
the next session from walking the same path.
- **Keep it short.** The journal is a trail marker, not a diary.
3-5 lines per entry. If you need more, the important context
should go on the bench as a separate artifact.
- **Always include next step.** The next session starts from zero.
Without a next step, it has to re-derive everything.
## End-of-desk entry
When a desk is being wound down (not just a session ending, but
the desk itself closing):
```markdown
## <date> — Desk closed
- **Summary:** <what this desk accomplished overall>
- **Artifacts:** <what's on the bench from this desk>
- **Handoff:** <anything another desk or the operator needs to know>
```
## Reading the journal
At session start, read the desk's journal to pick up context.
The most recent entry is the most important — it has the current
state and next step. Earlier entries provide history if needed.
## Principles
- The journal is a cairn — stones left so the next traveler finds
the way. Every entry is a stone.
- Honesty over completeness. "I got stuck on X and don't know why"
is more useful than silence.
- The journal is for the next session, not for the current one.
Write for someone who knows nothing about what you just did.
+90
View File
@@ -0,0 +1,90 @@
---
name: desk-open
description: 'Create and open a new desk in the workshop. Sets up the folder structure, initial journal, and desk identity so the next session that sits down finds the trail.'
---
# Open a Desk
Create a new desk in the workshop with the standard structure.
## When to use
- The operator wants to start a new workstream
- Work arrives that doesn't belong to any existing desk
- A topic needs its own frame (its own history, its own priors)
## What it creates
Given a workshop directory and a desk name, create:
```
desks/<desk-name>/
journal.md # persistent memory — read at start, written at end
.signals/ # structured signal output (JSON) — dashboard reads this
```
## How to use
1. **Choose a name.** Short, descriptive, kebab-case. The name is
how the operator and other desks refer to this desk.
Examples: `security-scan`, `api-review`, `ops`, `cloud-workshop`
2. **Check if it already exists.** If `desks/<desk-name>/` already
has a `journal.md`, the desk is live — **do not overwrite it.**
Instead, resume it: read the journal and continue from where it
left off. If the operator explicitly wants a fresh start, they
must rename or archive the existing desk first.
3. **Create the structure.** Make the directory, initial journal,
and signals folder:
```
desks/<desk-name>/journal.md
desks/<desk-name>/.signals/
```
4. **Write the first journal entry.** The journal starts with:
- What this desk is for (its focus/purpose)
- What repos or work it covers (if applicable)
- Any initial context the first session needs
5. **Announce it.** Tell the operator what was created and what
the desk's focus is.
## Session orientation
This skill initializes storage — it does not launch a session.
A desk becomes active when a Copilot session references its
directory. The session workflow:
1. The operator (or TA) starts a session and says "sit at the
`<desk-name>` desk"
2. The session reads `desks/<desk-name>/journal.md` to load priors
3. Work happens — the session uses `signal-write` to emit signals
and `desk-journal` to persist state at the end
4. The next session repeats from step 2
The desk identity comes from which journal is read, not from a
persistent process. Desks are long-running in *state* (the journal
carries forward), not in *runtime* (each session is independent).
## Journal format
```markdown
# <Desk Name> — Journal
## <date> — Desk opened
- **Purpose:** <what this desk focuses on>
- **Scope:** <repos, areas, or work this desk covers>
- **Next step:** <what the first session should do>
```
## Principles
- A desk is a peer, not a sub-agent. It has equal standing to
disagree with other desks.
- The journal is the memory. Without it, the next session starts
blind. Write enough that someone starting from zero finds the way.
- One desk, one focus. If the scope is too broad, open two desks.
Each desk's value comes from its specific frame — dilute the
frame and you lose the value.
+144
View File
@@ -0,0 +1,144 @@
---
name: markstream-install
description: 'Install and configure Markstream streaming Markdown renderers for Vue, React, Svelte, Angular, Nuxt, and Vue 2 applications. Use for package selection, minimal peer dependencies, CSS order, SSR boundaries, streaming mode, and renderer setup.'
license: MIT
compatibility: 'JavaScript or TypeScript frontend project using Vue 3, Nuxt 3/4, Vue 2.6/2.7, React 18+, Next.js, Angular 20+, or Svelte 5.'
metadata:
source: https://github.com/Simon-He95/markstream-vue
documentation: https://markstream.simonhe.me/
---
# Markstream Install
Integrate the appropriate [Markstream](https://github.com/Simon-He95/markstream-vue) package into an existing application without installing unnecessary optional dependencies or weakening its security defaults.
Read [references/scenarios.md](references/scenarios.md) before choosing packages or peers.
## When to Use
Use this skill when the user asks to:
- add streaming Markdown rendering to an AI chat or document interface;
- install Markstream in Vue, Nuxt, React, Next.js, Svelte, Angular, or Vue 2;
- repair a broken Markstream installation, missing styles, or SSR failure;
- replace another Markdown renderer with Markstream;
- choose between static, smooth-streaming, and externally parsed AST input.
## Workflow
### 1. Inspect the host application
Before changing dependencies, inspect:
- the framework and version in `package.json`;
- the package manager lockfile;
- whether the application uses SSR;
- reset, Tailwind, UnoCSS, or design-system styles;
- required optional features: code highlighting, enhanced File/Diff surfaces, Monaco, Mermaid, D2, infographic blocks, or KaTeX.
Do not assume the Vue package is correct merely because the source repository is named `markstream-vue`. Select the framework-specific package from the scenario table.
### 2. Install the smallest dependency set
Install exactly one framework package. Add optional peers only when the requested UI uses their feature.
Examples:
```bash
npm install markstream-vue
npm install markstream-react
npm install markstream-svelte
npm install markstream-angular
npm install markstream-vue2
```
Preserve the repository's existing package manager. Do not install every optional peer preemptively.
### 3. Wire styles in the correct order
Import application resets before Markstream styles. Import package CSS explicitly; do not rely on component imports to inject it.
For Tailwind or UnoCSS, use the relevant package subpath in a component layer:
```css
@import 'markstream-vue/index.css' layer(components);
```
Use the matching package name for React, Svelte, Angular, or Vue 2. If math rendering is enabled, also import:
```css
@import 'katex/dist/katex.min.css';
```
Vue CLI 4 and other Webpack 4-based Vue 2 applications cannot resolve package export maps. In those projects, import the published file directly:
```ts
import 'markstream-vue2/dist/index.css'
```
### 4. Add the smallest working renderer
Prefer `content` for static documents and most streaming chat interfaces. Markstream's built-in smooth streaming can pace irregular token delivery without requiring the host to maintain an AST.
For Vue 3 chat surfaces, start with:
```vue
<MarkdownRender
mode="chat"
:content="markdown"
:final="false"
smooth-streaming="auto"
:fade="false"
typewriter
/>
```
For completed chat history, keep the same renderer mode and switch pacing off:
```vue
<MarkdownRender
mode="chat"
:content="markdown"
:final="true"
:smooth-streaming="false"
:fade="true"
:typewriter="false"
/>
```
In React, Svelte, and Angular, use the equivalent camelCase or framework binding syntax. Keep `smoothStreaming="auto"`, `fade=false`, and `typewriter=true` while streaming; use `smoothStreaming=false` and `typewriter=false` for completed history.
Use `nodes` plus `final` only when a worker, shared AST store, custom transform, or another application layer already owns parsing.
### 5. Handle framework-specific boundaries
- In Nuxt, keep browser-only optional peers behind client boundaries.
- In Next.js, use the root `markstream-react` entry inside a `'use client'` component for live SSE or WebSocket streams. Use `markstream-react/next` for SSR-first HTML with hydration, or `markstream-react/server` for server-only rendering.
- Use `markstream-svelte` only with Svelte 5.
- Confirm the Angular application meets the current `markstream-angular` version requirement.
- In Vue 3, use `mode="chat"` for AI chat, `mode="docs"` for rich documents, and `mode="minimal"` for lightweight non-chat surfaces.
- For long Vue 3 conversations or an existing message virtualizer, consult the Markstream performance guide before adding a second virtualizer.
### 6. Preserve safe defaults
HTML policy defaults to `safe`, and Mermaid uses strict mode. Do not broaden either setting unless the user explicitly identifies a trusted legacy surface that requires it. Scope any exception to that surface.
### 7. Validate
Run the smallest relevant build, typecheck, or test command. Confirm:
1. the selected package matches the framework;
2. only requested optional peers were added;
3. styles load after resets;
4. SSR pages do not evaluate browser-only peers on the server;
5. static content and at least one incremental update render correctly.
Report the selected package, added peers, CSS location, streaming input choice, and validation command.
## Official References
- [Installation](https://markstream.simonhe.me/guide/installation)
- [AI chat and streaming](https://markstream.simonhe.me/guide/ai-chat-streaming)
- [Performance](https://markstream.simonhe.me/guide/performance)
- [Troubleshooting](https://markstream.simonhe.me/guide/troubleshooting)
- [Component overrides](https://markstream.simonhe.me/guide/component-overrides)
@@ -0,0 +1,42 @@
# Install Scenarios
## Package selection
| Host app | Package |
|----------|---------|
| Vue 3 / Nuxt 3 or 4 | `markstream-vue` |
| Vue 2.6 | `markstream-vue2` plus `@vue/composition-api`; register the plugin before mounting the app |
| Vue 2.7 | `markstream-vue2`; use Vue's built-in Composition API and do not install `@vue/composition-api` |
| React 18+ / Next.js | `markstream-react` |
| Angular 20+ | `markstream-angular` |
| Svelte 5 | `markstream-svelte` |
## Peer selection
| Feature | Peer | Supported packages | Activation |
|---------|------|--------------------|------------|
| Lightweight highlighted code blocks | `stream-markdown` | `markstream-vue`, `markstream-vue2`, `markstream-react` | Configure the package's `MarkdownCodeBlockNode` as the `code_block` override |
| Enhanced code blocks and File/Diff surfaces | `stream-diffs` | `markstream-vue` | Install for copy, preview, expand, syntax-highlighting, and File/Diff features |
| Monaco-powered code blocks | `stream-monaco` | All framework packages | Install only when Monaco interactions are required |
| Mermaid diagrams | `mermaid` | All framework packages | Install when Mermaid fences are rendered |
| D2 diagrams | `@terrastruct/d2` | All framework packages | Install when D2 fences are rendered |
| Infographic blocks | `@antv/infographic` | All framework packages | Install when infographic fences are rendered |
| KaTeX math | `katex` | All framework packages | Install and load KaTeX CSS when math is rendered |
## CSS checklist
- Load reset styles first.
- Load the framework-specific Markstream CSS after the reset.
- In Tailwind or UnoCSS projects, use `@import '...' layer(components)`.
- Import KaTeX CSS when math is enabled.
- When rendering standalone node components directly, wrap them with the relevant package root class such as `.markstream-vue`, `.markstream-react`, or `.markstream-svelte`.
## Input choice
- `content`: static documents, low-frequency updates, and most SSE or token-streaming chat surfaces.
- `content` with built-in smooth streaming: irregular AI streams whose visible output should be paced independently from raw chunk cadence.
- `smoothStreaming="auto"` or `smooth-streaming="auto"` is the default.
- Auto pacing activates when `typewriter=true` or `maxLiveNodes <= 0` / `max-live-nodes <= 0`.
- `typewriter` controls the cursor and defaults to `false`.
- `fade` controls node-entry and streamed-text fade effects.
- `nodes` plus `final`: worker-preparsed content, shared AST stores, custom AST transforms, or cases where another layer already owns parsing.
+156
View File
@@ -0,0 +1,156 @@
---
name: signal-write
description: 'Emit structured agent signals — hands-up, blocked, done, checkpoint, partnership. Signals are written as JSON to .signals/ for dashboard consumption and noted in the journal for persistence.'
---
# Agent Signals
Emit structured signals from a desk to the operator or other desks.
## When to use
- A desk needs operator attention (hands-up, blocked)
- Work is complete and ready for review (done)
- Significant progress worth noting (checkpoint)
- Two desks disagree and can't resolve it (hands-up)
- The TA is reporting coordination quality (partnership)
## Signal types
### `hands-up`
Two desks disagree and can't settle it against external facts.
This is the system working — the operator reads where desks
*disagree*, not where they perform confidence.
### `blocked`
A desk can't proceed without input — missing access, ambiguous
scope, need a decision only the operator can make.
### `done`
Work is complete and ready for review. Artifacts are on the bench.
### `checkpoint`
Significant progress worth the operator knowing about, but work
continues. Not blocked, not done — just a marker.
### `partnership`
Used by the TA (room coordinator) to report coordination quality.
Self-assessment scores reflect coordination, not code accuracy:
- **intent** — understood what the operator needed
- **confidence** — right work went to the right desks
- **accuracy** — dispatched work produced the right outcome
- **completeness** — nothing fell through the cracks
## How to emit
### 1. Write a JSON signal file to `.signals/`
This is the primary output — it's what the dashboard reads.
Create `desks/<desk-name>/.signals/<timestamp>.json`:
```json
{
"signal_type": "execution",
"subtype": "checkpoint",
"timestamp": "2026-07-19T21:30:00Z",
"run_id": "<optional; set to pair this with an outcome signal>",
"agent_name": "<desk-name>",
"self_assessment": {
"intent": 4,
"confidence": 5,
"accuracy": 4,
"completeness": 3
},
"patterns": {
"what_worked": "description of what went well",
"what_was_hard": "description of challenges",
"skill_gap": "areas for improvement"
},
"escalation": {
"reason": null,
"blocked_on": null,
"recommendation": null
}
}
```
### Signal type mapping
| Signal | `signal_type` | `subtype` |
|-----------|-----------------|----------------|
| hands-up | `"escalation"` | `"hands-up"` |
| blocked | `"escalation"` | `"blocked"` |
| done | `"execution"` | `"done"` |
| checkpoint| `"execution"` | `"checkpoint"` |
| partnership| `"partnership"` | `"partnership"`|
The `subtype` field preserves the specific signal state for
dashboard consumers. `signal_type` controls sort priority
(escalation → top).
> **Note:** The signals-dashboard canvas extension reads `subtype`
> when present and falls back to `signal_type` for display. If
> consuming signals in your own tooling, prefer `subtype` for the
> specific state.
> **Ordering:** include a `timestamp` (ISO 8601 UTC). The dashboard
> orders signals by it and falls back to file mtime only when it's
> absent — a git clone/checkout resets mtimes, so mtime alone is not a
> dependable clock.
### 2. Note the signal in the journal
Also append a short marker to the desk's journal for persistence:
```markdown
## <date> — [signal:<type>] <summary>
- <key details>
```
The journal note is the trail marker. The JSON file is the
machine-readable signal.
## Outcome signals (calibration)
The signals-dashboard can pair a desk's self-assessment with an
*outcome* — an independent rating of the realized result — and show
the **honesty gap** (how far the desk's confidence was from the
delivered quality). Outcome signals are optional and are usually
emitted by a reviewer/evaluator, not the desk itself.
Write them to the **same** `.signals/` directory:
```json
{
"signal_type": "outcome",
"run_id": "<same run_id as the signal it rates>",
"agent_name": "<reviewer name>",
"quality_rating": 4,
"effort_to_merge": "minimal",
"issues_found": ["optional short strings"],
"timestamp": "2026-07-19T22:00:00Z"
}
```
- **`run_id`** correlates an outcome with the execution/partnership
signal it rates — set the same `run_id` on both. If it's absent, the
dashboard falls back to the nearest outcome emitted shortly after the
latest signal.
- **`quality_rating`** (05) is the realized quality; the dashboard
compares it to the desk's self-assessed `confidence` to compute the
honesty gap.
- **`effort_to_merge`** — `"minimal"`, `"moderate"`, or `"significant"`.
- **`issues_found`** — optional array of short strings.
## Principles
- Signals are structured, not chatty. Short, factual, actionable.
- hands-up is not failure — it's the most valuable signal. It
means the system caught something one frame alone would have
missed.
- Don't signal for routine progress. Signals are for state
changes that affect the room, not status updates.
- blocked means truly blocked — not "I'd prefer input." If you
can proceed with a reasonable default, proceed and note it.
- Self-assessment scores should be honest, not optimistic. A 3/5
is fine. A 5/5 on everything is suspicious.
+254
View File
@@ -0,0 +1,254 @@
---
name: vcpkg
description: 'Guide for setting up vcpkg in C++ projects, managing dependency versions, and cross-compiling. Covers manifest initialization, CMake and Visual Studio integration, classic-to-manifest migration, version pinning, baselines, overrides, triplets, and cross-compilation. Use when a user is working with vcpkg project setup, installation, version management, or cross-platform builds. For specialized tasks, additional references cover custom registries and overlay ports (references/registries.md), CI/CD and binary caching (references/ci.md), and troubleshooting and dependency lifecycle (references/troubleshooting.md).'
---
You are a vcpkg expert assistant. When a user asks about vcpkg (Microsoft's C/C++ package manager), use the precise information below to give accurate, complete answers.
## Additional References (load on demand)
The information below covers core vcpkg setup, installation, version management, and cross-platform builds. For specialized tasks, consult the following reference files (read them only when the user's request calls for that topic):
- **`references/registries.md`** — Custom/private registries, overlay ports, private package feeds, `vcpkg-configuration.json`, and default features. Read this when the user asks about custom registries, overlay ports, or private package sources.
- **`references/ci.md`** — CI/CD integration: binary caching (Azure Blob, GitHub Packages/NuGet, local), SBOM generation, automating dependency updates, and multi-triplet CI matrices. Read this when the user asks about GitHub Actions, Azure DevOps, binary caches, or CI optimization.
- **`references/troubleshooting.md`** — Reading build logs, resolving package-not-found errors, and the dependency lifecycle (removing, changing features, replacing libraries, cleaning the cache). Read this when the user encounters vcpkg errors, build failures, or configuration problems.
## Important Behavioral Rules
### Classic vs. Manifest Mode
If it is not clear from the user's project context whether they are using **classic mode** (global `vcpkg install` commands) or **manifest mode** (per-project `vcpkg.json`), **ask the user which mode they are using** before providing instructions. Do not assume one or the other.
If the user is unsure which to choose, **recommend manifest mode**. Manifest mode is the preferred modern workflow because it:
- Tracks dependencies per-project (not globally)
- Supports version constraints and overrides
- Enables reproducible builds via `builtin-baseline`
- Works seamlessly with CI/CD (dependencies restore automatically)
- Supports features like dev-only dependencies, overlay ports, and custom registries
Classic mode is simpler for quick one-off installs but lacks version pinning, per-project isolation, and reproducibility.
### Visual Studio Environment
If the user is working inside **Visual Studio** (not VS Code), then:
- If the user is in **manifest mode**, prefer the in-box copy of vcpkg that ships with Visual Studio rather than a standalone clone.
- If the user is in **classic mode**, use a standalone vcpkg installation instead.
- The VS-bundled copy lives under the Visual Studio installation directory (e.g., `C:\Program Files\Microsoft Visual Studio\<version>\<edition>\VC\vcpkg\`) and supports user-wide MSBuild integration after running `vcpkg integrate install` once.
If the user has a standalone vcpkg installation and prefers to use that instead, respect their preference.
### Shell Environment Variable Syntax
When examples require environment variables, use shell-appropriate syntax:
- PowerShell: `$env:VARIABLE = "value"`
- Bash/Zsh: `export VARIABLE=value`
---
## Project Setup
### Initializing vcpkg in a New Project (Manifest Mode)
Example setup using fmt:
1. Create `vcpkg.json` in your project root:
```json
{
"name": "my-project",
"version": "1.0.0",
"dependencies": ["fmt"]
}
```
2. Wire into CMakeLists.txt:
```cmake
cmake_minimum_required(VERSION 3.21)
project(my-project)
add_executable(my-app main.cpp)
find_package(fmt CONFIG REQUIRED)
target_link_libraries(my-app PRIVATE fmt::fmt)
```
3. Configure with vcpkg toolchain:
```console
cmake -B build -DCMAKE_TOOLCHAIN_FILE=<vcpkg-root>/scripts/buildsystems/vcpkg.cmake
```
### Adding vcpkg to an Existing Visual Studio Solution
1. Create `vcpkg.json` in the solution directory
2. Enable manifest mode for each project in **Project Properties → vcpkg → Use Vcpkg Manifest**, or set `<VcpkgEnableManifest>true</VcpkgEnableManifest>` in the `.vcxproj`; Visual Studio then restores and integrates the manifest dependencies automatically
3. For user-wide integration with a standalone vcpkg installation, run `vcpkg integrate install` once
4. Or for per-project integration, add to `.vcxproj`:
- In the project file's top-level `PropertyGroup`, define `VcpkgRoot`:
```xml
<PropertyGroup>
<VcpkgRoot>C:\vcpkg</VcpkgRoot>
</PropertyGroup>
```
- Import `vcpkg.props` near the top of the project file:
```xml
<Import Project="$(VcpkgRoot)\scripts\buildsystems\msbuild\vcpkg.props" />
```
- Import `vcpkg.targets` near the end of the project file:
```xml
<Import Project="$(VcpkgRoot)\scripts\buildsystems\msbuild\vcpkg.targets" />
```
### Classic-to-Manifest Migration
1. List what's currently installed with `vcpkg list`, then identify which packages the project uses directly (the output also includes transitive packages)
2. Create `vcpkg.json` with only those direct dependencies
3. Run `vcpkg install` in your project directory — manifest mode uses its own project-specific `vcpkg_installed` tree, so leave the classic-mode installed tree in place during migration
4. Update your build system to use `CMAKE_TOOLCHAIN_FILE` if not already
5. Optional: remove classic-mode packages later by name with `vcpkg remove <package> --recurse` if you no longer need them
---
## Installing Dependencies
### Installing with Features (e.g., curl with SSL + HTTP2)
In **manifest mode** (`vcpkg.json`), specify features in the dependencies array:
```json
{
"dependencies": [
{
"name": "curl",
"features": ["ssl", "http2"]
}
]
}
```
In **classic mode**, use bracket syntax on the command line:
```console
vcpkg install curl[ssl,http2]
```
To discover available features for any port:
```console
vcpkg search curl
```
Or check the port's `vcpkg.json` in the registry: `ports/curl/vcpkg.json` → look at the `"features"` object.
### Installing for a Specific Triplet
```console
vcpkg install zlib:x64-linux
vcpkg install zlib:x64-windows
vcpkg install zlib:arm64-windows
```
In manifest mode, set the triplet via CMake:
```console
cmake -B build -DVCPKG_TARGET_TRIPLET=x64-linux -DCMAKE_TOOLCHAIN_FILE=<vcpkg-root>/scripts/buildsystems/vcpkg.cmake
```
Or set the default triplet via environment variable (using the shell syntax above): `VCPKG_DEFAULT_TRIPLET=x64-linux`.
### Bulk-Adding Multiple Dependencies
In `vcpkg.json`, list them in the dependencies array:
```json
{
"dependencies": ["catch2", "cxxopts", "toml11"]
}
```
In classic mode:
```console
vcpkg install catch2 cxxopts toml11
```
Then run `vcpkg install` (manifest mode) or the above command to install all at once.
### Dev-Only Dependencies
Place test-only dependencies under an opt-in feature. The `"host"` field is reserved for build tools that must run on the host architecture:
```json
{
"dependencies": ["fmt"],
"features": {
"tests": {
"description": "Build project tests",
"dependencies": ["gtest"]
}
}
}
```
Activate with: `vcpkg install --x-feature=tests` or in CMake: `-DVCPKG_MANIFEST_FEATURES=tests`
---
## Version Management
### Setting Versions for Individual Dependencies
Prefer `"version>="` for minimum-version constraints:
```json
{
"dependencies": [{ "name": "fmt", "version>=": "10.2.0" }],
"builtin-baseline": "<commit-sha>"
}
```
Use `overrides` only when a hard pin is required:
```json
{
"dependencies": ["fmt"],
"overrides": [{ "name": "fmt", "version": "10.2.0" }],
"builtin-baseline": "<commit-sha>"
}
```
Use a baseline for the registry that resolves the dependency. For the builtin registry, that means `builtin-baseline` in `vcpkg.json`. For a custom default registry, set the baseline in `vcpkg-configuration.json`.
**Key points:**
- `overrides` take precedence over all version constraints, including transitive ones.
- The selected registry must have a baseline; `builtin-baseline` is only for the builtin registry.
- Overrides can pin versions older than the baseline if that version exists in the selected registry's version database.
- Inspect the selected registry's version database to see available versions (for the builtin registry, open `versions/<first-letter>-/<port>.json` in the vcpkg repository).
---
## Cross-Platform
### Cross-Compiling for arm64
```console
vcpkg install <packages>:arm64-linux
```
`VCPKG_TARGET_TRIPLET=arm64-linux` selects dependency binaries; it does not by itself switch your project compiler or sysroot. On non-ARM64 hosts, use an ARM64 cross toolchain.
Configure CMake with vcpkg plus your cross toolchain:
```console
cmake -B build -DCMAKE_TOOLCHAIN_FILE=<vcpkg-root>/scripts/buildsystems/vcpkg.cmake -DVCPKG_TARGET_TRIPLET=arm64-linux -DVCPKG_CHAINLOAD_TOOLCHAIN_FILE=<path-to-arm64-toolchain.cmake>
```
Alternative: use your outer cross toolchain as `CMAKE_TOOLCHAIN_FILE` and include vcpkg from it.
For **arm64-windows**, native ARM64 Windows hosts can use the triplet directly. On x64 Windows hosts, install the Visual Studio MSVC ARM64 build tools component or the build will fail:
```console
vcpkg install <packages>:arm64-windows
```
### Building for Android (NDK)
1. Set `ANDROID_NDK_HOME` to your NDK path.
2. Install packages:
```console
vcpkg install <packages>:arm64-android
```
Available Android triplets: `arm-neon-android`, `arm64-android`, `x86-android`, `x64-android`
3. In CMake, use the vcpkg toolchain and set the triplet:
```console
cmake -B build -DCMAKE_TOOLCHAIN_FILE=<vcpkg-root>/scripts/buildsystems/vcpkg.cmake -DVCPKG_CHAINLOAD_TOOLCHAIN_FILE=<android-ndk>/build/cmake/android.toolchain.cmake -DVCPKG_TARGET_TRIPLET=arm64-android -DANDROID_ABI=arm64-v8a
```
For expanded CI and shell-specific examples, see `references/ci.md`.
+125
View File
@@ -0,0 +1,125 @@
# vcpkg: CI/CD & DevOps
Reference for the `vcpkg` skill. Use this when a user asks about using vcpkg in CI/CD pipelines, configuring binary caching, generating SBOMs, or automating dependency updates (GitHub Actions, Azure DevOps, binary cache configuration, CI optimization).
## Binary Caching
Configure binary caching to avoid rebuilding packages:
**Azure Blob Storage:**
```powershell
$env:VCPKG_BINARY_SOURCES = "clear;x-azblob,https://myaccount.blob.core.windows.net/vcpkg-cache,$env:AZURE_STORAGE_SAS_TOKEN,readwrite"
```
```bash
export VCPKG_BINARY_SOURCES="clear;x-azblob,https://myaccount.blob.core.windows.net/vcpkg-cache,$AZURE_STORAGE_SAS_TOKEN,readwrite"
```
**GitHub Packages (NuGet):**
```powershell
$env:VCPKG_BINARY_SOURCES = "clear;nuget,https://nuget.pkg.github.com/your-org/index.json,readwrite"
```
```bash
export VCPKG_BINARY_SOURCES="clear;nuget,https://nuget.pkg.github.com/your-org/index.json,readwrite"
```
For GitHub Packages, also configure NuGet authentication (for example via `GITHUB_TOKEN` in CI or a PAT/credential provider for local development). In GitHub Actions, grant `permissions: packages: write` for cache writers (or `packages: read` for read-only restores). Keep credentials in secrets and user/machine NuGet config, not in checked-in files.
**CI-friendly (cross-platform) GitHub Actions pattern:**
```yaml
permissions:
contents: read
packages: write
env:
VCPKG_BINARY_SOURCES: clear;nuget,https://nuget.pkg.github.com/your-org/index.json,readwrite
```
Use repository/org secrets for NuGet auth rather than storing credentials in the repository.
**Local filesystem:**
```powershell
$env:VCPKG_BINARY_SOURCES = "clear;files,C:\vcpkg-cache,readwrite"
```
```bash
export VCPKG_BINARY_SOURCES="clear;files,/var/tmp/vcpkg-cache,readwrite"
```
**Sharing between CI and local dev:** Use the same remote cache source in both environments and switch only the final mode token: CI uses `readwrite`, developers use `read`.
---
## Generating an SBOM (Software Bill of Materials)
vcpkg emits per-port SPDX SBOM files during normal source builds; no special SBOM flag is required.
```console
vcpkg install
```
Each installed port writes:
```text
<installed-root>/<triplet>/share/<port>/vcpkg.spdx.json
```
`<installed-root>` depends on integration mode:
- CLI manifest mode: `<manifest-root>/vcpkg_installed`
- CMake integration (default): `${CMAKE_BINARY_DIR}/vcpkg_installed` (or `VCPKG_INSTALLED_DIR` if overridden)
- MSBuild integration (default): `$(VcpkgManifestRoot)\vcpkg_installed` (or `$(VcpkgInstalledDir)` if overridden)
If you need a single consolidated SBOM, enumerate installed ports with `vcpkg list` and merge/transform their per-port SPDX files in your SBOM pipeline.
---
## Automating Dependency Updates
Option 1: **Dependabot** (GitHub) — configure `.github/dependabot.yml`:
```yaml
version: 2
updates:
- package-ecosystem: "vcpkg"
directory: "/"
schedule:
interval: "weekly"
```
Option 2: **Script-based** — create a scheduled CI job that:
1. Updates the vcpkg clone (`git pull`)
2. Gets the new baseline (`git rev-parse HEAD`)
3. Updates `builtin-baseline` in `vcpkg.json`
4. Runs `vcpkg install` to verify
5. Opens a PR with the changes
---
## Multi-Triplet CI Testing
Test across multiple triplets with this job-definition fragment nested under `jobs.<job-id>` in a GitHub Actions workflow:
```yaml
runs-on: ${{ matrix.os }}
strategy:
matrix:
triplet: [x64-windows, x64-linux, x64-osx]
include:
- triplet: x64-windows
os: windows-latest
- triplet: x64-linux
os: ubuntu-latest
- triplet: x64-osx
os: macos-latest
steps:
- uses: actions/checkout@v4
- name: Clone vcpkg
run: git clone https://github.com/microsoft/vcpkg
- name: Bootstrap vcpkg (Windows)
if: runner.os == 'Windows'
shell: pwsh
run: .\vcpkg\bootstrap-vcpkg.bat
- name: Bootstrap vcpkg (Linux/macOS)
if: runner.os != 'Windows'
run: ./vcpkg/bootstrap-vcpkg.sh
- name: Install dependencies (Windows)
if: runner.os == 'Windows'
shell: pwsh
run: .\vcpkg\vcpkg.exe install --triplet ${{ matrix.triplet }}
- name: Install dependencies (Linux/macOS)
if: runner.os != 'Windows'
run: ./vcpkg/vcpkg install --triplet ${{ matrix.triplet }}
```
+140
View File
@@ -0,0 +1,140 @@
# vcpkg: Custom Registries & Overlay Ports
Reference for the `vcpkg` skill. Use this when a user asks about creating or configuring custom registries, creating overlay ports, using private package feeds, or configuring `vcpkg-configuration.json` registries.
## Private / Custom Registry Install
1. Create `vcpkg-configuration.json` alongside your `vcpkg.json`:
```json
{
"registries": [
{
"kind": "git",
"repository": "https://github.com/your-org/vcpkg-registry",
"baseline": "<commit-sha>",
"packages": ["company-utils", "internal-lib"]
}
],
"default-registry": {
"kind": "builtin",
"baseline": "<commit-sha>"
}
}
```
2. Then add the dependency normally in `vcpkg.json`:
```json
{
"dependencies": ["company-utils"]
}
```
The `"packages"` array in the registry entry controls which packages are resolved from that registry. Packages not listed fall through to `default-registry`.
---
## Configuring Registries in `vcpkg-configuration.json`
```json
{
"default-registry": {
"kind": "builtin",
"baseline": "<vcpkg-commit-sha>"
},
"registries": [
{
"kind": "git",
"repository": "https://github.com/your-org/vcpkg-registry.git",
"baseline": "<registry-commit-sha>",
"packages": ["your-package-1", "your-package-2"]
}
]
}
```
Place this file next to `vcpkg.json` in your project root.
---
## Creating an Overlay Port
An overlay port overrides or adds a port locally. Directory structure:
```
my-overlays/
telemetry-sdk/
portfile.cmake
vcpkg.json
```
**`vcpkg.json`** (port metadata):
```json
{
"name": "telemetry-sdk",
"version": "1.0.0",
"description": "Internal telemetry SDK",
"dependencies": [
"curl",
"nlohmann-json",
{ "name": "vcpkg-cmake", "host": true },
{ "name": "vcpkg-cmake-config", "host": true }
]
}
```
**`portfile.cmake`** (build instructions):
```cmake
vcpkg_from_github(
OUT_SOURCE_PATH SOURCE_PATH
REPO your-org/telemetry-sdk
REF v1.0.0
SHA512 <hash>
)
vcpkg_cmake_configure(SOURCE_PATH "${SOURCE_PATH}")
vcpkg_cmake_install()
vcpkg_cmake_config_fixup()
file(REMOVE_RECURSE "${CURRENT_PACKAGES_DIR}/debug/include")
vcpkg_install_copyright(FILE_LIST "${SOURCE_PATH}/LICENSE")
```
Classic mode: `vcpkg install telemetry-sdk --overlay-ports=./my-overlays`
Manifest mode: add `telemetry-sdk` to `vcpkg.json`, then run `vcpkg install --overlay-ports=./my-overlays`.
Or in `vcpkg-configuration.json`:
```json
{
"overlay-ports": ["./my-overlays"]
}
```
---
## Default Features
Control whether a dependency's existing default features are enabled, and request additional features in a project manifest:
```json
{
"dependencies": [
{
"name": "curl",
"default-features": true,
"features": ["ssl", "http2"]
}
]
}
```
To **disable** default features: `"default-features": false`
In a portfile's `vcpkg.json`, default features are listed under:
```json
{
"name": "curl",
"default-features": ["ssl", "http2"],
"features": {
"ssl": { "description": "SSL/TLS support" },
"http2": { "description": "HTTP/2 support" }
}
}
```
+101
View File
@@ -0,0 +1,101 @@
# vcpkg: Troubleshooting & Dependency Lifecycle
Reference for the `vcpkg` skill. Use this when a user encounters vcpkg build failures, package-not-found errors, needs to read build logs, or manages the dependency lifecycle (removing, changing features, replacing libraries, cleaning the cache).
## Reading vcpkg Build Logs
Build logs are stored at:
```
<vcpkg-root>/buildtrees/<port-name>/
```
Key log files:
- `config-<triplet>-out.log` — CMake configure output
- `build-<triplet>-<dbg|rel>-<out|err>.log` — common build logs
- `install-<triplet>-<dbg|rel>-<out|err>.log` — common install logs
Exact names vary by port and build helper; use the path vcpkg prints for the failing command.
When a build fails, vcpkg prints the path to the relevant log. Start with the `-err.log` file for the failing step.
---
## Resolving package-not-found After Install
If CMake says `Could not find a package configuration file provided by "X"`:
1. **Check toolchain file** — ensure `-DCMAKE_TOOLCHAIN_FILE=<vcpkg-root>/scripts/buildsystems/vcpkg.cmake` is set
2. **Check triplet match** — the installed triplet must match your build architecture
3. **Check package name** — vcpkg port names may differ from CMake package names (e.g., port `nlohmann-json``find_package(nlohmann_json)`)
4. **Check installed list** — run `vcpkg list` to confirm the package is actually installed
5. **Clear CMake cache** — delete `CMakeCache.txt` and reconfigure
---
## Dependency Lifecycle
### Removing a Library
1. Remove it from `vcpkg.json``"dependencies"` array
2. Run `vcpkg install` to reconcile (manifest mode auto-removes unused packages)
In classic mode:
```console
vcpkg remove boost-regex
vcpkg remove boost-regex --recurse # also removes dependents
```
### Changing Features on an Installed Library
Update the features in `vcpkg.json`:
```json
{
"dependencies": [
{
"name": "curl",
"features": ["ssl", "ssh"]
}
]
}
```
Then run `vcpkg install` — vcpkg will detect the feature change and rebuild.
In classic mode, installing a feature only adds to the already installed feature set; omitted features are not removed. To remove a feature, uninstall `curl` and then reinstall it with the desired features. Account for dependent packages before using `--recurse`, because it removes them too.
### Replacing One Library with Another
1. Remove the old library from `vcpkg.json`
2. Add the new library to `vcpkg.json`
3. Run `vcpkg install` to reconcile
4. Update your source code: change `#include` directives, `find_package()` calls, and `target_link_libraries()` in CMakeLists.txt
### Cleaning the vcpkg Cache
```powershell
# Remove build trees
Remove-Item -Recurse -Force <vcpkg-root>\buildtrees
# Remove downloaded archives
Remove-Item -Recurse -Force <vcpkg-root>\downloads
# Remove installed packages (classic mode only)
Remove-Item -Recurse -Force <vcpkg-root>\installed
# Remove package build artifacts
Remove-Item -Recurse -Force <vcpkg-root>\packages
# In CLI manifest mode, remove the manifest-root install directory
Remove-Item -Recurse -Force .\vcpkg_installed
# With CMake integration, remove <build-directory>\vcpkg_installed (or VCPKG_INSTALLED_DIR)
```
```bash
rm -rf <vcpkg-root>/buildtrees
rm -rf <vcpkg-root>/downloads
rm -rf <vcpkg-root>/installed
rm -rf <vcpkg-root>/packages
# CLI manifest mode; with CMake integration, use <build-directory>/vcpkg_installed (or VCPKG_INSTALLED_DIR)
rm -rf ./vcpkg_installed
```
+133
View File
@@ -0,0 +1,133 @@
---
name: workshop-create
description: 'Create a new workshop or use an existing directory as one. Handles two paths: (A) use an existing local directory the operator points at, or (B) create a new private GitHub repo in the signed-in account. Never creates a repo inside another repo.'
---
# Create a Workshop
Set up a new workshop — the root directory where desks live.
## When to use
- The operator says "create a workshop" or "start a new workshop"
- The operator wants to organize work under a shared root
- The operator has an existing directory they want to use as a workshop
## Two paths
### Path A: Use an existing directory
The operator already has a folder they want to use. Maybe it's a repo
they cloned, maybe it's a local project folder.
1. **Confirm the path exists.** If not, ask the operator for a valid path.
2. **Detect existing workshop markers.** Look for `desks/` or `classroom/`
folders, a `workshop.md`, `CAIRN.md`, or `hands-up.md`. Finding any of
these tells you this is an existing workshop — but this is detection
only, not a stopping point. Continue to the next step and add whatever
is missing; never overwrite what is already there.
3. **Scaffold the workshop structure** (only what's missing):
```
<path>/
desks/ # where desks live
bench/ # shared workspace
CAIRN.md # operating disposition
README.md # workshop map
```
4. **Do NOT run `git init`.** The directory may already be a git repo, or
the operator may not want one yet. Leave git state alone.
5. **Do NOT create a GitHub repo.** This path is local-only.
### Path B: Create a new private GitHub repo
The operator wants a fresh workshop backed by a GitHub repo.
1. **Get the workshop name.** Short, no spaces, kebab-case preferred.
2. **Pick and validate a clone parent.** `gh repo create --clone` clones
into the **current working directory**, so choose an explicit parent
directory first (ask the operator, or use their configured workshops
directory) and confirm it is **not** already inside a git repo:
```bash
git -C <parent-dir> rev-parse --is-inside-work-tree
```
If that prints `true`, pick a different parent — otherwise the new
repo nests inside the existing one. Create the parent if needed.
3. **Create and clone the repo from that parent:**
```bash
cd <parent-dir>
gh repo create <owner>/<name> --private --clone
```
Use the operator's signed-in GitHub account as `<owner>`.
4. **Scaffold the workshop structure** inside the cloned repo. Git does
not track empty directories, so add a placeholder in each otherwise
empty folder or the scaffold will not survive the next clone:
```
<name>/
desks/.gitkeep
bench/.gitkeep
CAIRN.md
README.md
```
5. **Commit and push** the scaffold, including the `.gitkeep` placeholders.
### Critical: Never nest repos
**Never run `git init` inside a directory that is already inside a git
repository.** Before initializing, check:
```bash
git -C <parent-dir> rev-parse --is-inside-work-tree
```
If that returns `true`, the parent is already a git repo. Do NOT create
another repo inside it. Either:
- Use Path A (just scaffold, no git)
- Or clone to a different location that isn't inside a repo
## CAIRN.md content
The operating disposition every desk reads:
```markdown
# cairn
the trail markers that say: someone was here, and they were honest.
## how a desk stands
- **stop is a valid finish.** don't force a result when the evidence
says stop. "this doesn't work" is a finding, not a failure.
- **"done" means it holds.** if you'd bet your desk on it, ship it.
if not, say what's uncertain and why.
- **hold scope.** touch only what the task needs. if you find something
outside scope, note it and move on — don't chase it.
- **never go silent, never bluff.** partial + honest > complete + wrong.
if you're stuck, say so. if you're unsure, say that too.
- **equal standing.** you can say "that's the wrong question." you can
disagree with another desk. you answer to evidence, not hierarchy.
## the bench
the shared workspace. leave your work where others can find it.
label it. if it supersedes earlier work, say so.
## hands-up
when two desks disagree and can't settle it against external facts,
that's a hands-up. it goes to the operator. this is the system
working, not failing.
```
## After creation
Tell the operator:
- Where the workshop lives (full path)
- That they can now open desks in it with `desk-open`
- That Cairn will show signals once desks start emitting them
## Principles
- A workshop is a place, not a product. Keep it simple.
- The operator decides where things go. Don't assume.
- If an existing directory already has work in it, preserve everything.
Only add what's missing.