[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-apache-magpie-setup-shared-config-sync":3,"mdc--9884sv-key":40,"related-org-apache-magpie-setup-shared-config-sync":1796,"related-repo-apache-magpie-setup-shared-config-sync":1951},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":22,"repoUrl":23,"updatedAt":24,"license":25,"forks":26,"topics":27,"repo":35,"sourceUrl":38,"mdContent":39},"magpie-setup-shared-config-sync","sync shared Claude configuration","Commit + push the user's shared Claude config to the\n`~\u002F.claude-config` private dotfile-style sync repo. Inspects\nfor uncommitted local edits and unpushed commits, drafts a\ncommit message, and after explicit approval commits and\npushes. Runs `git pull --rebase` first if the local checkout\nis behind, so a push never overwrites concurrent work from\nanother machine. Bootstraps the repo when it is missing:\nclones the default private remote if it exists, or creates a\nnew private remote + scaffolds the minimal layout if it does\nnot. Never force-pushes; never rewrites already-pushed\nhistory; never creates a public remote; never modifies files\noutside `~\u002F.claude-config\u002F` (except the confirmed fresh-host\nsymlink wiring into `~\u002F.claude\u002F`).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"apache","Apache Software Foundation","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fapache.png",[12,16,19],{"name":13,"slug":14,"type":15},"Productivity","productivity","tag",{"name":17,"slug":18,"type":15},"Configuration","configuration",{"name":20,"slug":21,"type":15},"Engineering","engineering",61,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fmagpie","2026-08-01T05:43:42.754146","Apache-2.0",42,[28,8,29,30,31,32,33,34],"agent-skills","automation","claude-code","cve","security","vulnerability-disclosure","vulnerability-management",{"repoUrl":23,"stars":22,"forks":26,"topics":36,"description":37},[28,8,29,30,31,32,33,34],"Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shipping; Agentic Autonomous (auto-merge) on the roadmap.","https:\u002F\u002Fgithub.com\u002Fapache\u002Fmagpie\u002Ftree\u002FHEAD\u002Fskills\u002Fsetup-shared-config-sync","---\n# SPDX-License-Identifier: Apache-2.0\n# https:\u002F\u002Fwww.apache.org\u002Flicenses\u002FLICENSE-2.0\nname: magpie-setup-shared-config-sync\nfamily: setup\nmode: Meta\ndescription: |\n  Commit + push the user's shared Claude config to the\n  `~\u002F.claude-config` private dotfile-style sync repo. Inspects\n  for uncommitted local edits and unpushed commits, drafts a\n  commit message, and after explicit approval commits and\n  pushes. Runs `git pull --rebase` first if the local checkout\n  is behind, so a push never overwrites concurrent work from\n  another machine. Bootstraps the repo when it is missing:\n  clones the default private remote if it exists, or creates a\n  new private remote + scaffolds the minimal layout if it does\n  not. Never force-pushes; never rewrites already-pushed\n  history; never creates a public remote; never modifies files\n  outside `~\u002F.claude-config\u002F` (except the confirmed fresh-host\n  symlink wiring into `~\u002F.claude\u002F`).\nwhen_to_use: |\n  Invoke when the user says \"sync my Claude config\", \"push my\n  ~\u002F.claude-config\", \"commit shared Claude config\", or after\n  modifying a file in `~\u002F.claude-config\u002F` (scripts, CLAUDE.md,\n  commands, sync.sh). Also invoke on a fresh host with no\n  `~\u002F.claude-config\u002F` yet (\"set up my shared config\", \"bootstrap\n  my claude-config repo\") — the skill clones the default remote\n  or creates it. Also appropriate after\n  `setup-isolated-setup-update` surfaces drift on a script the\n  user keeps in `~\u002F.claude-config\u002F` and wants propagated to\n  other machines.\ncapability:\n  - capability:intake\n  - capability:platform\nlicense: Apache-2.0\n---\n\n\u003C!-- Placeholder convention (see AGENTS.md#placeholder-convention-used-in-skill-files):\n     \u003Cproject-config> → adopting project's `.apache-magpie\u002F` directory -->\n\n# setup-shared-config-sync\n\nThis skill propagates local edits in `~\u002F.claude-config\u002F` to the\nsync repo's remote, so other machines can pull them. It is the\ncounterpart to the periodic `git pull --rebase --autostash` that\nthe framework's example `sync.sh` runs on a timer — that direction\npulls *upstream* into the local clone; this skill pushes *local*\nmodifications upstream.\n\n## Adopter overrides\n\nBefore running the default behaviour documented\nbelow, this skill consults\n[`.apache-magpie-local\u002Fsetup-shared-config-sync.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md) (personal, gitignored) and [`.apache-magpie-overrides\u002Fsetup-shared-config-sync.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md) (committed, project-wide)\nin the adopter repo if it exists, and applies any\nagent-readable overrides it finds. See\n[`docs\u002Fsetup\u002Fagentic-overrides.md`](..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md)\nfor the contract — what overrides may contain, hard\nrules, the reconciliation flow on framework upgrade,\nupstreaming guidance.\n\n**Hard rule**: agents NEVER modify the snapshot under\n`\u003Cadopter-repo>\u002F.apache-magpie\u002F`. Local modifications\ngo in the override file. Framework changes go via PR\nto `apache\u002Fmagpie`.\n\n---\n\n## Snapshot drift\n\nAlso at the top of every run, this skill compares the\ngitignored `.apache-magpie.local.lock` (per-machine\nfetch) against the committed `.apache-magpie.lock`\n(the project pin). On mismatch the skill surfaces the\ngap and proposes\n[`\u002Fmagpie-setup upgrade`](..\u002Fsetup\u002Fupgrade.md).\nThe proposal is non-blocking — the user may defer if\nthey want to run with the local snapshot for now. See\n[`docs\u002Fsetup\u002Finstall-recipes.md` § Subsequent runs and drift detection](..\u002F..\u002Fdocs\u002Fsetup\u002Finstall-recipes.md#subsequent-runs-and-drift-detection)\nfor the full flow.\n\nDrift severity:\n\n- **method or URL differ** → ✗ full re-install needed.\n- **ref differs** (project bumped tag, or `git-branch`\n  local is behind upstream tip) → ⚠ sync needed.\n- **`svn-zip` SHA-512 mismatches the committed\n  anchor** → ✗ security-flagged; investigate before\n  upgrading.\n\n---\n## Hardcoded path\n\nThe sync repo lives at `~\u002F.claude-config\u002F`. This is the convention\ndocumented in\n[`docs\u002Fsetup\u002Fsecure-agent-setup.md` → Syncing user-scope config across machines](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#syncing-user-scope-config-across-machines).\nAdopters who maintain a sync repo at a different path will need to\nfork this skill — the path is intentionally not parameterised\nbecause the doc specifies one canonical location and forking the\nskill is cleaner than per-invocation path-passing.\n\n## The default remote\n\nWhen the skill has to **bootstrap** a missing `~\u002F.claude-config\u002F`\n(see [Bootstrapping a missing `~\u002F.claude-config\u002F`](#bootstrapping-a-missing-claude-config)),\nit resolves the remote it clones-or-creates in this order:\n\n1. **An explicit URL the user passed this invocation** (e.g.\n   *\"bootstrap from `git@gitlab.com:me\u002Fclaude-config.git`\"*) —\n   wins over everything.\n2. **The default GitHub convention** — `git@github.com:\u003Chandle>\u002Fclaude-config.git`,\n   the SSH form the doc's\n   [Setting up a fresh host](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#setting-up-a-fresh-host)\n   snippet uses. `\u003Chandle>` comes from `gh api user --jq .login`\n   (requires an authenticated `gh`). The repo name is `claude-config`.\n\nIf neither resolves — `gh` is missing or unauthenticated **and**\nthe user gave no URL — ask the user for the remote URL rather than\nguessing. Any remote the skill *creates* is **private** (see the\ngolden rules); never public.\n\n## Golden rules\n\n- **Never force-push.** No `--force`, no `--force-with-lease`, no\n  `--no-verify`, no rewriting commits already pushed to the\n  remote. The sync repo is the source of truth between machines;\n  rewriting its history risks losing work made on another\n  machine that has not yet been pulled here.\n- **Never modify a file outside `~\u002F.claude-config\u002F`.** This skill\n  is scoped strictly to that one directory. If the user's\n  intended change is to a file in `~\u002F.claude\u002F` directly (not via a\n  symlink into `~\u002F.claude-config\u002F`), surface that and stop — the\n  user wants a different action, not this skill. The **one**\n  carved-out exception is the fresh-host symlink wiring during\n  bootstrap (`ln -sfn ~\u002F.claude-config\u002F... ~\u002F.claude\u002F...`), and\n  only after the user confirms it — see\n  [Bootstrapping a missing `~\u002F.claude-config\u002F`](#bootstrapping-a-missing-claude-config).\n- **Any remote the skill creates is private.** When bootstrap has\n  to create a new remote (`gh repo create`), it always passes\n  `--private` — never public, never `--internal` without the user\n  asking. `~\u002F.claude\u002FCLAUDE.md` carries personal collaboration\n  preferences and the scripts may reference internal paths; a\n  public config repo leaks both. This mirrors the doc's *\"a\n  **private** git repository (private, not public …)\"* rule.\n- **Confirm before creating or pushing to a new remote.** Creating\n  a GitHub repo and pushing the first commit is an outward-facing,\n  hard-to-reverse action. Bootstrap surfaces the exact plan — repo\n  name, `--private` visibility, remote URL, the files it will\n  scaffold — and waits for explicit approval before running\n  `gh repo create` \u002F the initial `git push`. **Cloning** an\n  already-existing remote is lower-risk (a read that writes only\n  into the new `~\u002F.claude-config\u002F` checkout) and may proceed\n  without a separate confirmation, though the skill still reports\n  what it cloned.\n- **Never clobber a non-repo `~\u002F.claude-config\u002F`.** If the path\n  exists but is not a git working tree, stop and surface it — do\n  not `rm` it or `git init` over it. Bootstrap only ever *creates*\n  a `~\u002F.claude-config\u002F` that was entirely absent.\n- **Pull-with-rebase first.** If `git fetch` shows the local\n  checkout is behind the remote, run `git pull --rebase --autostash`\n  *before* the commit + push. Concurrent work from another\n  machine takes precedence; the local commit lands on top.\n  This matches what the example `sync.sh` does for the periodic\n  pull.\n- **Draft the commit message; never auto-send.** For every\n  uncommitted modification, the skill drafts a one-line commit\n  subject (plus a 2–4 line body if the change merits it) and\n  shows it to the user for approval. The user replies with\n  *\"go\"* \u002F *\"yes\"* \u002F edits \u002F *\"split into two commits\"* etc.\n  before any `git commit` runs.\n- **Use the `Generated-by:` trailer per AGENTS.md.** Commits\n  authored by an agent on the user's behalf carry\n  `Generated-by: \u003Cagent> (\u003Cmodel>)` at the end of the body,\n  where `\u003Cagent>` and `\u003Cmodel>` are the actual agent and\n  model you are running as (e.g. `Claude (Opus 4.8)`,\n  `OpenCode (Big Pickle)`) — do not hardcode either, and\n  never use `Co-Authored-By:`. See\n  [AGENTS.md → Commit and PR conventions](..\u002F..\u002FAGENTS.md#commit-and-pr-conventions)\n  for the canonical wording.\n- **Stop on lock conflict.** The example `sync.sh` uses\n  `flock --nonblock` on `~\u002F.claude-config\u002F.sync.lock` so two\n  concurrent sync runs do not race. If `.sync.lock` is held, do\n  not steal the lock — surface the conflict and stop. The other\n  process is likely the user's recurring sync timer.\n\n## Bootstrapping a missing `~\u002F.claude-config\u002F`\n\nReached from [Walk-through step 1](#walk-through) when the sync\nrepo is **entirely absent**. The goal is a working\n`~\u002F.claude-config\u002F` git checkout wired to a private remote; the\nskill gets there by either cloning the default remote (if it\nalready exists) or creating it (if it does not). It never touches\nanything outside the new checkout except the confirmed fresh-host\nsymlink wiring at the end.\n\n### Step B1 — resolve the remote\n\nResolve the default remote per\n[The default remote](#the-default-remote): an explicit URL the\nuser passed, else `git@github.com:\u003Chandle>\u002Fclaude-config.git` with\n`\u003Chandle>` from `gh api user --jq .login`. If neither resolves\n(`gh` missing\u002Funauthenticated **and** no URL given), ask the user\nfor the remote URL and stop until they provide one — do not guess\na handle.\n\n### Step B2 — does the remote exist?\n\n- **GitHub default:** `gh repo view \u003Chandle>\u002Fclaude-config` — exit\n  `0` ⇒ exists, non-zero ⇒ does not exist (or no access; if the\n  error is auth\u002Fpermission rather than \"not found\", surface it and\n  stop rather than assuming absence).\n- **Explicit non-GitHub URL:** `git ls-remote \u003Curl>` — exit `0` ⇒\n  exists, non-zero ⇒ does not exist \u002F unreachable.\n\n### Step B3a — remote exists → clone\n\n`git clone \u003Curl> ~\u002F.claude-config`. This is the low-risk path\n(a read that only writes the new checkout), so it may proceed\nwithout a separate create-confirmation — report the clone result.\nThen continue to [Step B4 — fresh-host symlink wiring](#step-b4--fresh-host-symlink-wiring)\nand resume the sync walk-through from step 2 (typically\n*\"in sync, nothing to do\"*).\n\n### Step B3b — remote does not exist → create + scaffold + push\n\nCreating an outward-facing remote is confirm-first (golden rule).\n**Surface the full plan and wait for explicit approval** — the\nrepo name, `--private` visibility, the remote URL, and the files\nto be scaffolded. On approval:\n\n1. **Create the private remote.**\n   - GitHub: `gh repo create \u003Chandle>\u002Fclaude-config --private --description \"Personal Claude Code shared config (synced across machines)\"`\n     (no `--clone`, no auto-init — the local scaffold below becomes\n     the first commit).\n   - Non-GitHub explicit URL: the skill cannot create the remote;\n     tell the user to create an **empty private** repo at that URL\n     and re-invoke.\n2. **Init + scaffold the minimal layout** under\n   `~\u002F.claude-config\u002F`, matching the doc's\n   [Layout](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#layout) and\n   [A minimal `sync.sh`](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#a-minimal-syncsh):\n\n   ```text\n   git init -b main ~\u002F.claude-config\n   ~\u002F.claude-config\u002F\n   ├── README.md      # what's in the repo + per-machine install steps\n   ├── sync.sh        # the pull\u002Fcommit\u002Fpush helper (chmod +x)\n   ├── scripts\u002F       # (empty; hooks land here as the user adopts them)\n   └── .gitignore     # excludes .sync.lock and any *.credentials* \u002F secrets\n   ```\n\n   `sync.sh` is the verbatim script from the doc's\n   [A minimal `sync.sh`](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#a-minimal-syncsh)\n   section. `.gitignore` must at minimum carry `.sync.lock` (the\n   `flock` file) so the lock never gets committed.\n3. **Initial commit + push.** `git add` the scaffolded files\n   individually (never `git add -A` — golden rule), commit with the\n   `Generated-by:` trailer, `git remote add origin \u003Curl>`, then\n   `git push -u origin main`.\n\n### Step B4 — fresh-host symlink wiring\n\nThe new (or freshly cloned) checkout only *protects* this host once\nits tracked artifacts are symlinked into `~\u002F.claude\u002F`. This is the\n**one** write outside `~\u002F.claude-config\u002F` the skill performs, and\nonly after the user confirms. Offer to run the\n[Setting up a fresh host](..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#setting-up-a-fresh-host)\nwiring (the `ln -sfn ~\u002F.claude-config\u002F… ~\u002F.claude\u002F…` block, which\n`mv`s any pre-existing real file to `.bak` before symlinking). If\nthe user declines, point them at that doc section to do it\nthemselves. Only wire the artifacts the checkout actually\ncontains — on a brand-new scaffold there may be nothing under\n`scripts\u002F` yet, so this step is often a no-op beyond `CLAUDE.md`.\n\n## Walk-through\n\n1. **`cd ~\u002F.claude-config`** and verify it is a git working tree\n   pointing at a private remote.\n   - If the directory **does not exist** at all, do not stop —\n     **bootstrap** it: jump to\n     [Bootstrapping a missing `~\u002F.claude-config\u002F`](#bootstrapping-a-missing-claude-config),\n     then resume the sync walk-through from step 2.\n   - If the directory **exists but is not a git repo**, surface\n     that and stop (per the golden rule — never clobber a non-repo\n     path). The user has a stray `~\u002F.claude-config\u002F`; they resolve\n     it, then re-invoke.\n   - If it is a git repo, continue to step 2.\n\n2. **`git fetch origin`** to learn the remote's current state.\n   Report:\n   - commits behind upstream (will be pulled in step 4),\n   - commits ahead of upstream (already-committed local work\n     that has not yet been pushed),\n   - uncommitted working-tree modifications (`git status --short`),\n   - untracked files the user may want to either add or\n     `.gitignore`.\n\n3. **Decide the action.** The four reachable states:\n   - **In sync, nothing to do.** No uncommitted changes, no\n     unpushed commits, not behind. Report and stop.\n   - **Push-only.** Already-committed local work needs to land\n     on the remote, but no behind \u002F no uncommitted edits.\n     Pull-with-rebase is unnecessary; go straight to push.\n   - **Commit-then-push.** Uncommitted edits exist. Walk each\n     modified file with the user (diff + draft commit message\n     + approval), commit each batch the user accepts, then\n     push.\n   - **Pull-then-commit-then-push.** Uncommitted edits *and*\n     behind upstream. Run `git pull --rebase --autostash`\n     first; if rebase succeeds cleanly, proceed to the\n     commit-then-push flow. If rebase conflicts, stop and\n     surface — conflicts in `~\u002F.claude-config\u002F` are the user's\n     to resolve, not the skill's.\n\n4. **Pull-with-rebase (when applicable).** Run\n   `git pull --rebase --autostash`. Report what changed\n   (commits pulled, files touched).\n\n5. **Stage + commit (when applicable).** For each modification\n   the user approves:\n   - `git add \u003Cfile>` for the specific file (never `git add -A`\n     or `git add .` — the sync repo is the user's most personal\n     directory and `git add -A` risks staging an editor swap\n     file or a `.DS_Store` you forgot to gitignore),\n   - `git commit -m '\u003Csubject>' -m '\u003Cbody>'` with the\n     approved message. Always include a\n     `Generated-by: \u003Cagent> (\u003Cmodel>)` trailer in the body\n     per AGENTS.md — the actual agent and model you are\n     running as, not a hardcoded value.\n\n6. **Push.** `git push` to the upstream branch. No `--force`.\n   If push is rejected (non-fast-forward) it means another\n   machine pushed concurrently after our `git fetch` in step 2;\n   stop, surface, and recommend re-invoking the skill (which\n   will repeat the fetch + pull-with-rebase). Do not retry\n   in-flight.\n\n## After the push lands\n\nReport:\n- which commit SHA is now on the remote,\n- a one-line summary of what was pushed (so the user can\n  confirm in their terminal scrollback),\n- whether other-machine pulls are needed (the timer-driven\n  `sync.sh` on the user's other hosts will pick the change up\n  on its own next run; the skill does not need to nag about\n  this).\n\nIf the modifications touched a file under\n`~\u002F.claude-config\u002Fscripts\u002F` that is symlinked from\n`~\u002F.claude\u002Fscripts\u002F`, also note that the change is *immediately*\nlive on this host — the symlink resolves to the just-modified\nfile. No re-`cp` needed.\n",{"data":41,"body":48},{"name":4,"family":42,"mode":43,"description":6,"when_to_use":44,"capability":45,"license":25},"setup","Meta","Invoke when the user says \"sync my Claude config\", \"push my\n~\u002F.claude-config\", \"commit shared Claude config\", or after\nmodifying a file in `~\u002F.claude-config\u002F` (scripts, CLAUDE.md,\ncommands, sync.sh). Also invoke on a fresh host with no\n`~\u002F.claude-config\u002F` yet (\"set up my shared config\", \"bootstrap\nmy claude-config repo\") — the skill clones the default remote\nor creates it. Also appropriate after\n`setup-isolated-setup-update` surfaces drift on a script the\nuser keeps in `~\u002F.claude-config\u002F` and wants propagated to\nother machines.\n",[46,47],"capability:intake","capability:platform",{"type":49,"children":50},"root",[51,59,105,112,152,179,183,189,236,241,290,293,299,325,331,363,449,482,488,918,928,955,962,1008,1014,1067,1073,1099,1105,1124,1313,1318,1395,1401,1724,1730,1735,1760],{"type":52,"tag":53,"props":54,"children":56},"element","h1",{"id":55},"setup-shared-config-sync",[57],{"type":58,"value":55},"text",{"type":52,"tag":60,"props":61,"children":62},"p",{},[63,65,72,74,80,82,88,90,96,98,103],{"type":58,"value":64},"This skill propagates local edits in ",{"type":52,"tag":66,"props":67,"children":69},"code",{"className":68},[],[70],{"type":58,"value":71},"~\u002F.claude-config\u002F",{"type":58,"value":73}," to the\nsync repo's remote, so other machines can pull them. It is the\ncounterpart to the periodic ",{"type":52,"tag":66,"props":75,"children":77},{"className":76},[],[78],{"type":58,"value":79},"git pull --rebase --autostash",{"type":58,"value":81}," that\nthe framework's example ",{"type":52,"tag":66,"props":83,"children":85},{"className":84},[],[86],{"type":58,"value":87},"sync.sh",{"type":58,"value":89}," runs on a timer — that direction\npulls ",{"type":52,"tag":91,"props":92,"children":93},"em",{},[94],{"type":58,"value":95},"upstream",{"type":58,"value":97}," into the local clone; this skill pushes ",{"type":52,"tag":91,"props":99,"children":100},{},[101],{"type":58,"value":102},"local",{"type":58,"value":104},"\nmodifications upstream.",{"type":52,"tag":106,"props":107,"children":109},"h2",{"id":108},"adopter-overrides",[110],{"type":58,"value":111},"Adopter overrides",{"type":52,"tag":60,"props":113,"children":114},{},[115,117,128,130,139,141,150],{"type":58,"value":116},"Before running the default behaviour documented\nbelow, this skill consults\n",{"type":52,"tag":118,"props":119,"children":121},"a",{"href":120},"..\u002F..\u002Fdocs\u002Fsetup\u002Fagentic-overrides.md",[122],{"type":52,"tag":66,"props":123,"children":125},{"className":124},[],[126],{"type":58,"value":127},".apache-magpie-local\u002Fsetup-shared-config-sync.md",{"type":58,"value":129}," (personal, gitignored) and ",{"type":52,"tag":118,"props":131,"children":132},{"href":120},[133],{"type":52,"tag":66,"props":134,"children":136},{"className":135},[],[137],{"type":58,"value":138},".apache-magpie-overrides\u002Fsetup-shared-config-sync.md",{"type":58,"value":140}," (committed, project-wide)\nin the adopter repo if it exists, and applies any\nagent-readable overrides it finds. See\n",{"type":52,"tag":118,"props":142,"children":143},{"href":120},[144],{"type":52,"tag":66,"props":145,"children":147},{"className":146},[],[148],{"type":58,"value":149},"docs\u002Fsetup\u002Fagentic-overrides.md",{"type":58,"value":151},"\nfor the contract — what overrides may contain, hard\nrules, the reconciliation flow on framework upgrade,\nupstreaming guidance.",{"type":52,"tag":60,"props":153,"children":154},{},[155,161,163,169,171,177],{"type":52,"tag":156,"props":157,"children":158},"strong",{},[159],{"type":58,"value":160},"Hard rule",{"type":58,"value":162},": agents NEVER modify the snapshot under\n",{"type":52,"tag":66,"props":164,"children":166},{"className":165},[],[167],{"type":58,"value":168},"\u003Cadopter-repo>\u002F.apache-magpie\u002F",{"type":58,"value":170},". Local modifications\ngo in the override file. Framework changes go via PR\nto ",{"type":52,"tag":66,"props":172,"children":174},{"className":173},[],[175],{"type":58,"value":176},"apache\u002Fmagpie",{"type":58,"value":178},".",{"type":52,"tag":180,"props":181,"children":182},"hr",{},[],{"type":52,"tag":106,"props":184,"children":186},{"id":185},"snapshot-drift",[187],{"type":58,"value":188},"Snapshot drift",{"type":52,"tag":60,"props":190,"children":191},{},[192,194,200,202,208,210,220,222,234],{"type":58,"value":193},"Also at the top of every run, this skill compares the\ngitignored ",{"type":52,"tag":66,"props":195,"children":197},{"className":196},[],[198],{"type":58,"value":199},".apache-magpie.local.lock",{"type":58,"value":201}," (per-machine\nfetch) against the committed ",{"type":52,"tag":66,"props":203,"children":205},{"className":204},[],[206],{"type":58,"value":207},".apache-magpie.lock",{"type":58,"value":209},"\n(the project pin). On mismatch the skill surfaces the\ngap and proposes\n",{"type":52,"tag":118,"props":211,"children":213},{"href":212},"..\u002Fsetup\u002Fupgrade.md",[214],{"type":52,"tag":66,"props":215,"children":217},{"className":216},[],[218],{"type":58,"value":219},"\u002Fmagpie-setup upgrade",{"type":58,"value":221},".\nThe proposal is non-blocking — the user may defer if\nthey want to run with the local snapshot for now. See\n",{"type":52,"tag":118,"props":223,"children":225},{"href":224},"..\u002F..\u002Fdocs\u002Fsetup\u002Finstall-recipes.md#subsequent-runs-and-drift-detection",[226,232],{"type":52,"tag":66,"props":227,"children":229},{"className":228},[],[230],{"type":58,"value":231},"docs\u002Fsetup\u002Finstall-recipes.md",{"type":58,"value":233}," § Subsequent runs and drift detection",{"type":58,"value":235},"\nfor the full flow.",{"type":52,"tag":60,"props":237,"children":238},{},[239],{"type":58,"value":240},"Drift severity:",{"type":52,"tag":242,"props":243,"children":244},"ul",{},[245,256,274],{"type":52,"tag":246,"props":247,"children":248},"li",{},[249,254],{"type":52,"tag":156,"props":250,"children":251},{},[252],{"type":58,"value":253},"method or URL differ",{"type":58,"value":255}," → ✗ full re-install needed.",{"type":52,"tag":246,"props":257,"children":258},{},[259,264,266,272],{"type":52,"tag":156,"props":260,"children":261},{},[262],{"type":58,"value":263},"ref differs",{"type":58,"value":265}," (project bumped tag, or ",{"type":52,"tag":66,"props":267,"children":269},{"className":268},[],[270],{"type":58,"value":271},"git-branch",{"type":58,"value":273},"\nlocal is behind upstream tip) → ⚠ sync needed.",{"type":52,"tag":246,"props":275,"children":276},{},[277,288],{"type":52,"tag":156,"props":278,"children":279},{},[280,286],{"type":52,"tag":66,"props":281,"children":283},{"className":282},[],[284],{"type":58,"value":285},"svn-zip",{"type":58,"value":287}," SHA-512 mismatches the committed\nanchor",{"type":58,"value":289}," → ✗ security-flagged; investigate before\nupgrading.",{"type":52,"tag":180,"props":291,"children":292},{},[],{"type":52,"tag":106,"props":294,"children":296},{"id":295},"hardcoded-path",[297],{"type":58,"value":298},"Hardcoded path",{"type":52,"tag":60,"props":300,"children":301},{},[302,304,309,311,323],{"type":58,"value":303},"The sync repo lives at ",{"type":52,"tag":66,"props":305,"children":307},{"className":306},[],[308],{"type":58,"value":71},{"type":58,"value":310},". This is the convention\ndocumented in\n",{"type":52,"tag":118,"props":312,"children":314},{"href":313},"..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#syncing-user-scope-config-across-machines",[315,321],{"type":52,"tag":66,"props":316,"children":318},{"className":317},[],[319],{"type":58,"value":320},"docs\u002Fsetup\u002Fsecure-agent-setup.md",{"type":58,"value":322}," → Syncing user-scope config across machines",{"type":58,"value":324},".\nAdopters who maintain a sync repo at a different path will need to\nfork this skill — the path is intentionally not parameterised\nbecause the doc specifies one canonical location and forking the\nskill is cleaner than per-invocation path-passing.",{"type":52,"tag":106,"props":326,"children":328},{"id":327},"the-default-remote",[329],{"type":58,"value":330},"The default remote",{"type":52,"tag":60,"props":332,"children":333},{},[334,336,341,343,348,350,361],{"type":58,"value":335},"When the skill has to ",{"type":52,"tag":156,"props":337,"children":338},{},[339],{"type":58,"value":340},"bootstrap",{"type":58,"value":342}," a missing ",{"type":52,"tag":66,"props":344,"children":346},{"className":345},[],[347],{"type":58,"value":71},{"type":58,"value":349},"\n(see ",{"type":52,"tag":118,"props":351,"children":353},{"href":352},"#bootstrapping-a-missing-claude-config",[354,356],{"type":58,"value":355},"Bootstrapping a missing ",{"type":52,"tag":66,"props":357,"children":359},{"className":358},[],[360],{"type":58,"value":71},{"type":58,"value":362},"),\nit resolves the remote it clones-or-creates in this order:",{"type":52,"tag":364,"props":365,"children":366},"ol",{},[367,392],{"type":52,"tag":246,"props":368,"children":369},{},[370,375,377,390],{"type":52,"tag":156,"props":371,"children":372},{},[373],{"type":58,"value":374},"An explicit URL the user passed this invocation",{"type":58,"value":376}," (e.g.\n",{"type":52,"tag":91,"props":378,"children":379},{},[380,382,388],{"type":58,"value":381},"\"bootstrap from ",{"type":52,"tag":66,"props":383,"children":385},{"className":384},[],[386],{"type":58,"value":387},"git@gitlab.com:me\u002Fclaude-config.git",{"type":58,"value":389},"\"",{"type":58,"value":391},") —\nwins over everything.",{"type":52,"tag":246,"props":393,"children":394},{},[395,400,402,408,410,416,418,424,426,432,434,440,442,448],{"type":52,"tag":156,"props":396,"children":397},{},[398],{"type":58,"value":399},"The default GitHub convention",{"type":58,"value":401}," — ",{"type":52,"tag":66,"props":403,"children":405},{"className":404},[],[406],{"type":58,"value":407},"git@github.com:\u003Chandle>\u002Fclaude-config.git",{"type":58,"value":409},",\nthe SSH form the doc's\n",{"type":52,"tag":118,"props":411,"children":413},{"href":412},"..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#setting-up-a-fresh-host",[414],{"type":58,"value":415},"Setting up a fresh host",{"type":58,"value":417},"\nsnippet uses. ",{"type":52,"tag":66,"props":419,"children":421},{"className":420},[],[422],{"type":58,"value":423},"\u003Chandle>",{"type":58,"value":425}," comes from ",{"type":52,"tag":66,"props":427,"children":429},{"className":428},[],[430],{"type":58,"value":431},"gh api user --jq .login",{"type":58,"value":433},"\n(requires an authenticated ",{"type":52,"tag":66,"props":435,"children":437},{"className":436},[],[438],{"type":58,"value":439},"gh",{"type":58,"value":441},"). The repo name is ",{"type":52,"tag":66,"props":443,"children":445},{"className":444},[],[446],{"type":58,"value":447},"claude-config",{"type":58,"value":178},{"type":52,"tag":60,"props":450,"children":451},{},[452,454,459,461,466,468,473,475,480],{"type":58,"value":453},"If neither resolves — ",{"type":52,"tag":66,"props":455,"children":457},{"className":456},[],[458],{"type":58,"value":439},{"type":58,"value":460}," is missing or unauthenticated ",{"type":52,"tag":156,"props":462,"children":463},{},[464],{"type":58,"value":465},"and",{"type":58,"value":467},"\nthe user gave no URL — ask the user for the remote URL rather than\nguessing. Any remote the skill ",{"type":52,"tag":91,"props":469,"children":470},{},[471],{"type":58,"value":472},"creates",{"type":58,"value":474}," is ",{"type":52,"tag":156,"props":476,"children":477},{},[478],{"type":58,"value":479},"private",{"type":58,"value":481}," (see the\ngolden rules); never public.",{"type":52,"tag":106,"props":483,"children":485},{"id":484},"golden-rules",[486],{"type":58,"value":487},"Golden rules",{"type":52,"tag":242,"props":489,"children":490},{},[491,525,581,636,682,727,764,803,877],{"type":52,"tag":246,"props":492,"children":493},{},[494,499,501,507,509,515,517,523],{"type":52,"tag":156,"props":495,"children":496},{},[497],{"type":58,"value":498},"Never force-push.",{"type":58,"value":500}," No ",{"type":52,"tag":66,"props":502,"children":504},{"className":503},[],[505],{"type":58,"value":506},"--force",{"type":58,"value":508},", no ",{"type":52,"tag":66,"props":510,"children":512},{"className":511},[],[513],{"type":58,"value":514},"--force-with-lease",{"type":58,"value":516},", no\n",{"type":52,"tag":66,"props":518,"children":520},{"className":519},[],[521],{"type":58,"value":522},"--no-verify",{"type":58,"value":524},", no rewriting commits already pushed to the\nremote. The sync repo is the source of truth between machines;\nrewriting its history risks losing work made on another\nmachine that has not yet been pulled here.",{"type":52,"tag":246,"props":526,"children":527},{},[528,539,541,547,549,554,556,561,563,569,571,580],{"type":52,"tag":156,"props":529,"children":530},{},[531,533,538],{"type":58,"value":532},"Never modify a file outside ",{"type":52,"tag":66,"props":534,"children":536},{"className":535},[],[537],{"type":58,"value":71},{"type":58,"value":178},{"type":58,"value":540}," This skill\nis scoped strictly to that one directory. If the user's\nintended change is to a file in ",{"type":52,"tag":66,"props":542,"children":544},{"className":543},[],[545],{"type":58,"value":546},"~\u002F.claude\u002F",{"type":58,"value":548}," directly (not via a\nsymlink into ",{"type":52,"tag":66,"props":550,"children":552},{"className":551},[],[553],{"type":58,"value":71},{"type":58,"value":555},"), surface that and stop — the\nuser wants a different action, not this skill. The ",{"type":52,"tag":156,"props":557,"children":558},{},[559],{"type":58,"value":560},"one",{"type":58,"value":562},"\ncarved-out exception is the fresh-host symlink wiring during\nbootstrap (",{"type":52,"tag":66,"props":564,"children":566},{"className":565},[],[567],{"type":58,"value":568},"ln -sfn ~\u002F.claude-config\u002F... ~\u002F.claude\u002F...",{"type":58,"value":570},"), and\nonly after the user confirms it — see\n",{"type":52,"tag":118,"props":572,"children":573},{"href":352},[574,575],{"type":58,"value":355},{"type":52,"tag":66,"props":576,"children":578},{"className":577},[],[579],{"type":58,"value":71},{"type":58,"value":178},{"type":52,"tag":246,"props":582,"children":583},{},[584,589,591,597,599,605,607,613,615,621,623,634],{"type":52,"tag":156,"props":585,"children":586},{},[587],{"type":58,"value":588},"Any remote the skill creates is private.",{"type":58,"value":590}," When bootstrap has\nto create a new remote (",{"type":52,"tag":66,"props":592,"children":594},{"className":593},[],[595],{"type":58,"value":596},"gh repo create",{"type":58,"value":598},"), it always passes\n",{"type":52,"tag":66,"props":600,"children":602},{"className":601},[],[603],{"type":58,"value":604},"--private",{"type":58,"value":606}," — never public, never ",{"type":52,"tag":66,"props":608,"children":610},{"className":609},[],[611],{"type":58,"value":612},"--internal",{"type":58,"value":614}," without the user\nasking. ",{"type":52,"tag":66,"props":616,"children":618},{"className":617},[],[619],{"type":58,"value":620},"~\u002F.claude\u002FCLAUDE.md",{"type":58,"value":622}," carries personal collaboration\npreferences and the scripts may reference internal paths; a\npublic config repo leaks both. This mirrors the doc's ",{"type":52,"tag":91,"props":624,"children":625},{},[626,628,632],{"type":58,"value":627},"\"a\n",{"type":52,"tag":156,"props":629,"children":630},{},[631],{"type":58,"value":479},{"type":58,"value":633}," git repository (private, not public …)\"",{"type":58,"value":635}," rule.",{"type":52,"tag":246,"props":637,"children":638},{},[639,644,646,651,653,658,660,666,668,673,675,680],{"type":52,"tag":156,"props":640,"children":641},{},[642],{"type":58,"value":643},"Confirm before creating or pushing to a new remote.",{"type":58,"value":645}," Creating\na GitHub repo and pushing the first commit is an outward-facing,\nhard-to-reverse action. Bootstrap surfaces the exact plan — repo\nname, ",{"type":52,"tag":66,"props":647,"children":649},{"className":648},[],[650],{"type":58,"value":604},{"type":58,"value":652}," visibility, remote URL, the files it will\nscaffold — and waits for explicit approval before running\n",{"type":52,"tag":66,"props":654,"children":656},{"className":655},[],[657],{"type":58,"value":596},{"type":58,"value":659}," \u002F the initial ",{"type":52,"tag":66,"props":661,"children":663},{"className":662},[],[664],{"type":58,"value":665},"git push",{"type":58,"value":667},". ",{"type":52,"tag":156,"props":669,"children":670},{},[671],{"type":58,"value":672},"Cloning",{"type":58,"value":674}," an\nalready-existing remote is lower-risk (a read that writes only\ninto the new ",{"type":52,"tag":66,"props":676,"children":678},{"className":677},[],[679],{"type":58,"value":71},{"type":58,"value":681}," checkout) and may proceed\nwithout a separate confirmation, though the skill still reports\nwhat it cloned.",{"type":52,"tag":246,"props":683,"children":684},{},[685,696,698,704,706,712,714,718,720,725],{"type":52,"tag":156,"props":686,"children":687},{},[688,690,695],{"type":58,"value":689},"Never clobber a non-repo ",{"type":52,"tag":66,"props":691,"children":693},{"className":692},[],[694],{"type":58,"value":71},{"type":58,"value":178},{"type":58,"value":697}," If the path\nexists but is not a git working tree, stop and surface it — do\nnot ",{"type":52,"tag":66,"props":699,"children":701},{"className":700},[],[702],{"type":58,"value":703},"rm",{"type":58,"value":705}," it or ",{"type":52,"tag":66,"props":707,"children":709},{"className":708},[],[710],{"type":58,"value":711},"git init",{"type":58,"value":713}," over it. Bootstrap only ever ",{"type":52,"tag":91,"props":715,"children":716},{},[717],{"type":58,"value":472},{"type":58,"value":719},"\na ",{"type":52,"tag":66,"props":721,"children":723},{"className":722},[],[724],{"type":58,"value":71},{"type":58,"value":726}," that was entirely absent.",{"type":52,"tag":246,"props":728,"children":729},{},[730,735,737,743,745,750,755,757,762],{"type":52,"tag":156,"props":731,"children":732},{},[733],{"type":58,"value":734},"Pull-with-rebase first.",{"type":58,"value":736}," If ",{"type":52,"tag":66,"props":738,"children":740},{"className":739},[],[741],{"type":58,"value":742},"git fetch",{"type":58,"value":744}," shows the local\ncheckout is behind the remote, run ",{"type":52,"tag":66,"props":746,"children":748},{"className":747},[],[749],{"type":58,"value":79},{"type":52,"tag":91,"props":751,"children":752},{},[753],{"type":58,"value":754},"before",{"type":58,"value":756}," the commit + push. Concurrent work from another\nmachine takes precedence; the local commit lands on top.\nThis matches what the example ",{"type":52,"tag":66,"props":758,"children":760},{"className":759},[],[761],{"type":58,"value":87},{"type":58,"value":763}," does for the periodic\npull.",{"type":52,"tag":246,"props":765,"children":766},{},[767,772,774,779,781,786,788,793,795,801],{"type":52,"tag":156,"props":768,"children":769},{},[770],{"type":58,"value":771},"Draft the commit message; never auto-send.",{"type":58,"value":773}," For every\nuncommitted modification, the skill drafts a one-line commit\nsubject (plus a 2–4 line body if the change merits it) and\nshows it to the user for approval. The user replies with\n",{"type":52,"tag":91,"props":775,"children":776},{},[777],{"type":58,"value":778},"\"go\"",{"type":58,"value":780}," \u002F ",{"type":52,"tag":91,"props":782,"children":783},{},[784],{"type":58,"value":785},"\"yes\"",{"type":58,"value":787}," \u002F edits \u002F ",{"type":52,"tag":91,"props":789,"children":790},{},[791],{"type":58,"value":792},"\"split into two commits\"",{"type":58,"value":794}," etc.\nbefore any ",{"type":52,"tag":66,"props":796,"children":798},{"className":797},[],[799],{"type":58,"value":800},"git commit",{"type":58,"value":802}," runs.",{"type":52,"tag":246,"props":804,"children":805},{},[806,819,821,827,829,835,837,843,845,851,853,859,861,867,869,875],{"type":52,"tag":156,"props":807,"children":808},{},[809,811,817],{"type":58,"value":810},"Use the ",{"type":52,"tag":66,"props":812,"children":814},{"className":813},[],[815],{"type":58,"value":816},"Generated-by:",{"type":58,"value":818}," trailer per AGENTS.md.",{"type":58,"value":820}," Commits\nauthored by an agent on the user's behalf carry\n",{"type":52,"tag":66,"props":822,"children":824},{"className":823},[],[825],{"type":58,"value":826},"Generated-by: \u003Cagent> (\u003Cmodel>)",{"type":58,"value":828}," at the end of the body,\nwhere ",{"type":52,"tag":66,"props":830,"children":832},{"className":831},[],[833],{"type":58,"value":834},"\u003Cagent>",{"type":58,"value":836}," and ",{"type":52,"tag":66,"props":838,"children":840},{"className":839},[],[841],{"type":58,"value":842},"\u003Cmodel>",{"type":58,"value":844}," are the actual agent and\nmodel you are running as (e.g. ",{"type":52,"tag":66,"props":846,"children":848},{"className":847},[],[849],{"type":58,"value":850},"Claude (Opus 4.8)",{"type":58,"value":852},",\n",{"type":52,"tag":66,"props":854,"children":856},{"className":855},[],[857],{"type":58,"value":858},"OpenCode (Big Pickle)",{"type":58,"value":860},") — do not hardcode either, and\nnever use ",{"type":52,"tag":66,"props":862,"children":864},{"className":863},[],[865],{"type":58,"value":866},"Co-Authored-By:",{"type":58,"value":868},". See\n",{"type":52,"tag":118,"props":870,"children":872},{"href":871},"..\u002F..\u002FAGENTS.md#commit-and-pr-conventions",[873],{"type":58,"value":874},"AGENTS.md → Commit and PR conventions",{"type":58,"value":876},"\nfor the canonical wording.",{"type":52,"tag":246,"props":878,"children":879},{},[880,885,887,892,894,900,902,908,910,916],{"type":52,"tag":156,"props":881,"children":882},{},[883],{"type":58,"value":884},"Stop on lock conflict.",{"type":58,"value":886}," The example ",{"type":52,"tag":66,"props":888,"children":890},{"className":889},[],[891],{"type":58,"value":87},{"type":58,"value":893}," uses\n",{"type":52,"tag":66,"props":895,"children":897},{"className":896},[],[898],{"type":58,"value":899},"flock --nonblock",{"type":58,"value":901}," on ",{"type":52,"tag":66,"props":903,"children":905},{"className":904},[],[906],{"type":58,"value":907},"~\u002F.claude-config\u002F.sync.lock",{"type":58,"value":909}," so two\nconcurrent sync runs do not race. If ",{"type":52,"tag":66,"props":911,"children":913},{"className":912},[],[914],{"type":58,"value":915},".sync.lock",{"type":58,"value":917}," is held, do\nnot steal the lock — surface the conflict and stop. The other\nprocess is likely the user's recurring sync timer.",{"type":52,"tag":106,"props":919,"children":921},{"id":920},"bootstrapping-a-missing-claude-config",[922,923],{"type":58,"value":355},{"type":52,"tag":66,"props":924,"children":926},{"className":925},[],[927],{"type":58,"value":71},{"type":52,"tag":60,"props":929,"children":930},{},[931,933,939,941,946,948,953],{"type":58,"value":932},"Reached from ",{"type":52,"tag":118,"props":934,"children":936},{"href":935},"#walk-through",[937],{"type":58,"value":938},"Walk-through step 1",{"type":58,"value":940}," when the sync\nrepo is ",{"type":52,"tag":156,"props":942,"children":943},{},[944],{"type":58,"value":945},"entirely absent",{"type":58,"value":947},". The goal is a working\n",{"type":52,"tag":66,"props":949,"children":951},{"className":950},[],[952],{"type":58,"value":71},{"type":58,"value":954}," git checkout wired to a private remote; the\nskill gets there by either cloning the default remote (if it\nalready exists) or creating it (if it does not). It never touches\nanything outside the new checkout except the confirmed fresh-host\nsymlink wiring at the end.",{"type":52,"tag":956,"props":957,"children":959},"h3",{"id":958},"step-b1-resolve-the-remote",[960],{"type":58,"value":961},"Step B1 — resolve the remote",{"type":52,"tag":60,"props":963,"children":964},{},[965,967,972,974,979,981,986,988,993,995,1000,1002,1006],{"type":58,"value":966},"Resolve the default remote per\n",{"type":52,"tag":118,"props":968,"children":970},{"href":969},"#the-default-remote",[971],{"type":58,"value":330},{"type":58,"value":973},": an explicit URL the\nuser passed, else ",{"type":52,"tag":66,"props":975,"children":977},{"className":976},[],[978],{"type":58,"value":407},{"type":58,"value":980}," with\n",{"type":52,"tag":66,"props":982,"children":984},{"className":983},[],[985],{"type":58,"value":423},{"type":58,"value":987}," from ",{"type":52,"tag":66,"props":989,"children":991},{"className":990},[],[992],{"type":58,"value":431},{"type":58,"value":994},". If neither resolves\n(",{"type":52,"tag":66,"props":996,"children":998},{"className":997},[],[999],{"type":58,"value":439},{"type":58,"value":1001}," missing\u002Funauthenticated ",{"type":52,"tag":156,"props":1003,"children":1004},{},[1005],{"type":58,"value":465},{"type":58,"value":1007}," no URL given), ask the user\nfor the remote URL and stop until they provide one — do not guess\na handle.",{"type":52,"tag":956,"props":1009,"children":1011},{"id":1010},"step-b2-does-the-remote-exist",[1012],{"type":58,"value":1013},"Step B2 — does the remote exist?",{"type":52,"tag":242,"props":1015,"children":1016},{},[1017,1043],{"type":52,"tag":246,"props":1018,"children":1019},{},[1020,1025,1027,1033,1035,1041],{"type":52,"tag":156,"props":1021,"children":1022},{},[1023],{"type":58,"value":1024},"GitHub default:",{"type":58,"value":1026}," ",{"type":52,"tag":66,"props":1028,"children":1030},{"className":1029},[],[1031],{"type":58,"value":1032},"gh repo view \u003Chandle>\u002Fclaude-config",{"type":58,"value":1034}," — exit\n",{"type":52,"tag":66,"props":1036,"children":1038},{"className":1037},[],[1039],{"type":58,"value":1040},"0",{"type":58,"value":1042}," ⇒ exists, non-zero ⇒ does not exist (or no access; if the\nerror is auth\u002Fpermission rather than \"not found\", surface it and\nstop rather than assuming absence).",{"type":52,"tag":246,"props":1044,"children":1045},{},[1046,1051,1052,1058,1060,1065],{"type":52,"tag":156,"props":1047,"children":1048},{},[1049],{"type":58,"value":1050},"Explicit non-GitHub URL:",{"type":58,"value":1026},{"type":52,"tag":66,"props":1053,"children":1055},{"className":1054},[],[1056],{"type":58,"value":1057},"git ls-remote \u003Curl>",{"type":58,"value":1059}," — exit ",{"type":52,"tag":66,"props":1061,"children":1063},{"className":1062},[],[1064],{"type":58,"value":1040},{"type":58,"value":1066}," ⇒\nexists, non-zero ⇒ does not exist \u002F unreachable.",{"type":52,"tag":956,"props":1068,"children":1070},{"id":1069},"step-b3a-remote-exists-clone",[1071],{"type":58,"value":1072},"Step B3a — remote exists → clone",{"type":52,"tag":60,"props":1074,"children":1075},{},[1076,1082,1084,1090,1092,1097],{"type":52,"tag":66,"props":1077,"children":1079},{"className":1078},[],[1080],{"type":58,"value":1081},"git clone \u003Curl> ~\u002F.claude-config",{"type":58,"value":1083},". This is the low-risk path\n(a read that only writes the new checkout), so it may proceed\nwithout a separate create-confirmation — report the clone result.\nThen continue to ",{"type":52,"tag":118,"props":1085,"children":1087},{"href":1086},"#step-b4--fresh-host-symlink-wiring",[1088],{"type":58,"value":1089},"Step B4 — fresh-host symlink wiring",{"type":58,"value":1091},"\nand resume the sync walk-through from step 2 (typically\n",{"type":52,"tag":91,"props":1093,"children":1094},{},[1095],{"type":58,"value":1096},"\"in sync, nothing to do\"",{"type":58,"value":1098},").",{"type":52,"tag":956,"props":1100,"children":1102},{"id":1101},"step-b3b-remote-does-not-exist-create-scaffold-push",[1103],{"type":58,"value":1104},"Step B3b — remote does not exist → create + scaffold + push",{"type":52,"tag":60,"props":1106,"children":1107},{},[1108,1110,1115,1117,1122],{"type":58,"value":1109},"Creating an outward-facing remote is confirm-first (golden rule).\n",{"type":52,"tag":156,"props":1111,"children":1112},{},[1113],{"type":58,"value":1114},"Surface the full plan and wait for explicit approval",{"type":58,"value":1116}," — the\nrepo name, ",{"type":52,"tag":66,"props":1118,"children":1120},{"className":1119},[],[1121],{"type":58,"value":604},{"type":58,"value":1123}," visibility, the remote URL, and the files\nto be scaffolded. On approval:",{"type":52,"tag":364,"props":1125,"children":1126},{},[1127,1171,1266],{"type":52,"tag":246,"props":1128,"children":1129},{},[1130,1135],{"type":52,"tag":156,"props":1131,"children":1132},{},[1133],{"type":58,"value":1134},"Create the private remote.",{"type":52,"tag":242,"props":1136,"children":1137},{},[1138,1159],{"type":52,"tag":246,"props":1139,"children":1140},{},[1141,1143,1149,1151,1157],{"type":58,"value":1142},"GitHub: ",{"type":52,"tag":66,"props":1144,"children":1146},{"className":1145},[],[1147],{"type":58,"value":1148},"gh repo create \u003Chandle>\u002Fclaude-config --private --description \"Personal Claude Code shared config (synced across machines)\"",{"type":58,"value":1150},"\n(no ",{"type":52,"tag":66,"props":1152,"children":1154},{"className":1153},[],[1155],{"type":58,"value":1156},"--clone",{"type":58,"value":1158},", no auto-init — the local scaffold below becomes\nthe first commit).",{"type":52,"tag":246,"props":1160,"children":1161},{},[1162,1164,1169],{"type":58,"value":1163},"Non-GitHub explicit URL: the skill cannot create the remote;\ntell the user to create an ",{"type":52,"tag":156,"props":1165,"children":1166},{},[1167],{"type":58,"value":1168},"empty private",{"type":58,"value":1170}," repo at that URL\nand re-invoke.",{"type":52,"tag":246,"props":1172,"children":1173},{},[1174,1179,1181,1186,1188,1194,1196,1207,1209,1221,1225,1230,1232,1241,1243,1249,1251,1256,1258,1264],{"type":52,"tag":156,"props":1175,"children":1176},{},[1177],{"type":58,"value":1178},"Init + scaffold the minimal layout",{"type":58,"value":1180}," under\n",{"type":52,"tag":66,"props":1182,"children":1184},{"className":1183},[],[1185],{"type":58,"value":71},{"type":58,"value":1187},", matching the doc's\n",{"type":52,"tag":118,"props":1189,"children":1191},{"href":1190},"..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#layout",[1192],{"type":58,"value":1193},"Layout",{"type":58,"value":1195}," and\n",{"type":52,"tag":118,"props":1197,"children":1199},{"href":1198},"..\u002F..\u002Fdocs\u002Fsetup\u002Fsecure-agent-setup.md#a-minimal-syncsh",[1200,1202],{"type":58,"value":1201},"A minimal ",{"type":52,"tag":66,"props":1203,"children":1205},{"className":1204},[],[1206],{"type":58,"value":87},{"type":58,"value":1208},":",{"type":52,"tag":1210,"props":1211,"children":1216},"pre",{"className":1212,"code":1214,"language":58,"meta":1215},[1213],"language-text","git init -b main ~\u002F.claude-config\n~\u002F.claude-config\u002F\n├── README.md      # what's in the repo + per-machine install steps\n├── sync.sh        # the pull\u002Fcommit\u002Fpush helper (chmod +x)\n├── scripts\u002F       # (empty; hooks land here as the user adopts them)\n└── .gitignore     # excludes .sync.lock and any *.credentials* \u002F secrets\n","",[1217],{"type":52,"tag":66,"props":1218,"children":1219},{"__ignoreMap":1215},[1220],{"type":58,"value":1214},{"type":52,"tag":1222,"props":1223,"children":1224},"br",{},[],{"type":52,"tag":66,"props":1226,"children":1228},{"className":1227},[],[1229],{"type":58,"value":87},{"type":58,"value":1231}," is the verbatim script from the doc's\n",{"type":52,"tag":118,"props":1233,"children":1234},{"href":1198},[1235,1236],{"type":58,"value":1201},{"type":52,"tag":66,"props":1237,"children":1239},{"className":1238},[],[1240],{"type":58,"value":87},{"type":58,"value":1242},"\nsection. ",{"type":52,"tag":66,"props":1244,"children":1246},{"className":1245},[],[1247],{"type":58,"value":1248},".gitignore",{"type":58,"value":1250}," must at minimum carry ",{"type":52,"tag":66,"props":1252,"children":1254},{"className":1253},[],[1255],{"type":58,"value":915},{"type":58,"value":1257}," (the\n",{"type":52,"tag":66,"props":1259,"children":1261},{"className":1260},[],[1262],{"type":58,"value":1263},"flock",{"type":58,"value":1265}," file) so the lock never gets committed.",{"type":52,"tag":246,"props":1267,"children":1268},{},[1269,1274,1275,1281,1283,1289,1291,1296,1298,1304,1306,1312],{"type":52,"tag":156,"props":1270,"children":1271},{},[1272],{"type":58,"value":1273},"Initial commit + push.",{"type":58,"value":1026},{"type":52,"tag":66,"props":1276,"children":1278},{"className":1277},[],[1279],{"type":58,"value":1280},"git add",{"type":58,"value":1282}," the scaffolded files\nindividually (never ",{"type":52,"tag":66,"props":1284,"children":1286},{"className":1285},[],[1287],{"type":58,"value":1288},"git add -A",{"type":58,"value":1290}," — golden rule), commit with the\n",{"type":52,"tag":66,"props":1292,"children":1294},{"className":1293},[],[1295],{"type":58,"value":816},{"type":58,"value":1297}," trailer, ",{"type":52,"tag":66,"props":1299,"children":1301},{"className":1300},[],[1302],{"type":58,"value":1303},"git remote add origin \u003Curl>",{"type":58,"value":1305},", then\n",{"type":52,"tag":66,"props":1307,"children":1309},{"className":1308},[],[1310],{"type":58,"value":1311},"git push -u origin main",{"type":58,"value":178},{"type":52,"tag":956,"props":1314,"children":1316},{"id":1315},"step-b4-fresh-host-symlink-wiring",[1317],{"type":58,"value":1089},{"type":52,"tag":60,"props":1319,"children":1320},{},[1321,1323,1328,1330,1335,1337,1341,1343,1348,1350,1354,1356,1362,1364,1370,1372,1378,1380,1386,1388,1394],{"type":58,"value":1322},"The new (or freshly cloned) checkout only ",{"type":52,"tag":91,"props":1324,"children":1325},{},[1326],{"type":58,"value":1327},"protects",{"type":58,"value":1329}," this host once\nits tracked artifacts are symlinked into ",{"type":52,"tag":66,"props":1331,"children":1333},{"className":1332},[],[1334],{"type":58,"value":546},{"type":58,"value":1336},". This is the\n",{"type":52,"tag":156,"props":1338,"children":1339},{},[1340],{"type":58,"value":560},{"type":58,"value":1342}," write outside ",{"type":52,"tag":66,"props":1344,"children":1346},{"className":1345},[],[1347],{"type":58,"value":71},{"type":58,"value":1349}," the skill performs, and\nonly after the user confirms. Offer to run the\n",{"type":52,"tag":118,"props":1351,"children":1352},{"href":412},[1353],{"type":58,"value":415},{"type":58,"value":1355},"\nwiring (the ",{"type":52,"tag":66,"props":1357,"children":1359},{"className":1358},[],[1360],{"type":58,"value":1361},"ln -sfn ~\u002F.claude-config\u002F… ~\u002F.claude\u002F…",{"type":58,"value":1363}," block, which\n",{"type":52,"tag":66,"props":1365,"children":1367},{"className":1366},[],[1368],{"type":58,"value":1369},"mv",{"type":58,"value":1371},"s any pre-existing real file to ",{"type":52,"tag":66,"props":1373,"children":1375},{"className":1374},[],[1376],{"type":58,"value":1377},".bak",{"type":58,"value":1379}," before symlinking). If\nthe user declines, point them at that doc section to do it\nthemselves. Only wire the artifacts the checkout actually\ncontains — on a brand-new scaffold there may be nothing under\n",{"type":52,"tag":66,"props":1381,"children":1383},{"className":1382},[],[1384],{"type":58,"value":1385},"scripts\u002F",{"type":58,"value":1387}," yet, so this step is often a no-op beyond ",{"type":52,"tag":66,"props":1389,"children":1391},{"className":1390},[],[1392],{"type":58,"value":1393},"CLAUDE.md",{"type":58,"value":178},{"type":52,"tag":106,"props":1396,"children":1398},{"id":1397},"walk-through",[1399],{"type":58,"value":1400},"Walk-through",{"type":52,"tag":364,"props":1402,"children":1403},{},[1404,1473,1524,1605,1622,1694],{"type":52,"tag":246,"props":1405,"children":1406},{},[1407,1416,1418],{"type":52,"tag":156,"props":1408,"children":1409},{},[1410],{"type":52,"tag":66,"props":1411,"children":1413},{"className":1412},[],[1414],{"type":58,"value":1415},"cd ~\u002F.claude-config",{"type":58,"value":1417}," and verify it is a git working tree\npointing at a private remote.",{"type":52,"tag":242,"props":1419,"children":1420},{},[1421,1450,1468],{"type":52,"tag":246,"props":1422,"children":1423},{},[1424,1426,1431,1433,1437,1439,1448],{"type":58,"value":1425},"If the directory ",{"type":52,"tag":156,"props":1427,"children":1428},{},[1429],{"type":58,"value":1430},"does not exist",{"type":58,"value":1432}," at all, do not stop —\n",{"type":52,"tag":156,"props":1434,"children":1435},{},[1436],{"type":58,"value":340},{"type":58,"value":1438}," it: jump to\n",{"type":52,"tag":118,"props":1440,"children":1441},{"href":352},[1442,1443],{"type":58,"value":355},{"type":52,"tag":66,"props":1444,"children":1446},{"className":1445},[],[1447],{"type":58,"value":71},{"type":58,"value":1449},",\nthen resume the sync walk-through from step 2.",{"type":52,"tag":246,"props":1451,"children":1452},{},[1453,1454,1459,1461,1466],{"type":58,"value":1425},{"type":52,"tag":156,"props":1455,"children":1456},{},[1457],{"type":58,"value":1458},"exists but is not a git repo",{"type":58,"value":1460},", surface\nthat and stop (per the golden rule — never clobber a non-repo\npath). The user has a stray ",{"type":52,"tag":66,"props":1462,"children":1464},{"className":1463},[],[1465],{"type":58,"value":71},{"type":58,"value":1467},"; they resolve\nit, then re-invoke.",{"type":52,"tag":246,"props":1469,"children":1470},{},[1471],{"type":58,"value":1472},"If it is a git repo, continue to step 2.",{"type":52,"tag":246,"props":1474,"children":1475},{},[1476,1485,1487],{"type":52,"tag":156,"props":1477,"children":1478},{},[1479],{"type":52,"tag":66,"props":1480,"children":1482},{"className":1481},[],[1483],{"type":58,"value":1484},"git fetch origin",{"type":58,"value":1486}," to learn the remote's current state.\nReport:",{"type":52,"tag":242,"props":1488,"children":1489},{},[1490,1495,1500,1513],{"type":52,"tag":246,"props":1491,"children":1492},{},[1493],{"type":58,"value":1494},"commits behind upstream (will be pulled in step 4),",{"type":52,"tag":246,"props":1496,"children":1497},{},[1498],{"type":58,"value":1499},"commits ahead of upstream (already-committed local work\nthat has not yet been pushed),",{"type":52,"tag":246,"props":1501,"children":1502},{},[1503,1505,1511],{"type":58,"value":1504},"uncommitted working-tree modifications (",{"type":52,"tag":66,"props":1506,"children":1508},{"className":1507},[],[1509],{"type":58,"value":1510},"git status --short",{"type":58,"value":1512},"),",{"type":52,"tag":246,"props":1514,"children":1515},{},[1516,1518,1523],{"type":58,"value":1517},"untracked files the user may want to either add or\n",{"type":52,"tag":66,"props":1519,"children":1521},{"className":1520},[],[1522],{"type":58,"value":1248},{"type":58,"value":178},{"type":52,"tag":246,"props":1525,"children":1526},{},[1527,1532,1534],{"type":52,"tag":156,"props":1528,"children":1529},{},[1530],{"type":58,"value":1531},"Decide the action.",{"type":58,"value":1533}," The four reachable states:",{"type":52,"tag":242,"props":1535,"children":1536},{},[1537,1547,1557,1575],{"type":52,"tag":246,"props":1538,"children":1539},{},[1540,1545],{"type":52,"tag":156,"props":1541,"children":1542},{},[1543],{"type":58,"value":1544},"In sync, nothing to do.",{"type":58,"value":1546}," No uncommitted changes, no\nunpushed commits, not behind. Report and stop.",{"type":52,"tag":246,"props":1548,"children":1549},{},[1550,1555],{"type":52,"tag":156,"props":1551,"children":1552},{},[1553],{"type":58,"value":1554},"Push-only.",{"type":58,"value":1556}," Already-committed local work needs to land\non the remote, but no behind \u002F no uncommitted edits.\nPull-with-rebase is unnecessary; go straight to push.",{"type":52,"tag":246,"props":1558,"children":1559},{},[1560,1565,1567],{"type":52,"tag":156,"props":1561,"children":1562},{},[1563],{"type":58,"value":1564},"Commit-then-push.",{"type":58,"value":1566}," Uncommitted edits exist. Walk each\nmodified file with the user (diff + draft commit message\n",{"type":52,"tag":242,"props":1568,"children":1569},{},[1570],{"type":52,"tag":246,"props":1571,"children":1572},{},[1573],{"type":58,"value":1574},"approval), commit each batch the user accepts, then\npush.",{"type":52,"tag":246,"props":1576,"children":1577},{},[1578,1583,1585,1589,1591,1596,1598,1603],{"type":52,"tag":156,"props":1579,"children":1580},{},[1581],{"type":58,"value":1582},"Pull-then-commit-then-push.",{"type":58,"value":1584}," Uncommitted edits ",{"type":52,"tag":91,"props":1586,"children":1587},{},[1588],{"type":58,"value":465},{"type":58,"value":1590},"\nbehind upstream. Run ",{"type":52,"tag":66,"props":1592,"children":1594},{"className":1593},[],[1595],{"type":58,"value":79},{"type":58,"value":1597},"\nfirst; if rebase succeeds cleanly, proceed to the\ncommit-then-push flow. If rebase conflicts, stop and\nsurface — conflicts in ",{"type":52,"tag":66,"props":1599,"children":1601},{"className":1600},[],[1602],{"type":58,"value":71},{"type":58,"value":1604}," are the user's\nto resolve, not the skill's.",{"type":52,"tag":246,"props":1606,"children":1607},{},[1608,1613,1615,1620],{"type":52,"tag":156,"props":1609,"children":1610},{},[1611],{"type":58,"value":1612},"Pull-with-rebase (when applicable).",{"type":58,"value":1614}," Run\n",{"type":52,"tag":66,"props":1616,"children":1618},{"className":1617},[],[1619],{"type":58,"value":79},{"type":58,"value":1621},". Report what changed\n(commits pulled, files touched).",{"type":52,"tag":246,"props":1623,"children":1624},{},[1625,1630,1632],{"type":52,"tag":156,"props":1626,"children":1627},{},[1628],{"type":58,"value":1629},"Stage + commit (when applicable).",{"type":58,"value":1631}," For each modification\nthe user approves:",{"type":52,"tag":242,"props":1633,"children":1634},{},[1635,1676],{"type":52,"tag":246,"props":1636,"children":1637},{},[1638,1644,1646,1651,1653,1659,1661,1666,1668,1674],{"type":52,"tag":66,"props":1639,"children":1641},{"className":1640},[],[1642],{"type":58,"value":1643},"git add \u003Cfile>",{"type":58,"value":1645}," for the specific file (never ",{"type":52,"tag":66,"props":1647,"children":1649},{"className":1648},[],[1650],{"type":58,"value":1288},{"type":58,"value":1652},"\nor ",{"type":52,"tag":66,"props":1654,"children":1656},{"className":1655},[],[1657],{"type":58,"value":1658},"git add .",{"type":58,"value":1660}," — the sync repo is the user's most personal\ndirectory and ",{"type":52,"tag":66,"props":1662,"children":1664},{"className":1663},[],[1665],{"type":58,"value":1288},{"type":58,"value":1667}," risks staging an editor swap\nfile or a ",{"type":52,"tag":66,"props":1669,"children":1671},{"className":1670},[],[1672],{"type":58,"value":1673},".DS_Store",{"type":58,"value":1675}," you forgot to gitignore),",{"type":52,"tag":246,"props":1677,"children":1678},{},[1679,1685,1687,1692],{"type":52,"tag":66,"props":1680,"children":1682},{"className":1681},[],[1683],{"type":58,"value":1684},"git commit -m '\u003Csubject>' -m '\u003Cbody>'",{"type":58,"value":1686}," with the\napproved message. Always include a\n",{"type":52,"tag":66,"props":1688,"children":1690},{"className":1689},[],[1691],{"type":58,"value":826},{"type":58,"value":1693}," trailer in the body\nper AGENTS.md — the actual agent and model you are\nrunning as, not a hardcoded value.",{"type":52,"tag":246,"props":1695,"children":1696},{},[1697,1702,1703,1708,1710,1715,1717,1722],{"type":52,"tag":156,"props":1698,"children":1699},{},[1700],{"type":58,"value":1701},"Push.",{"type":58,"value":1026},{"type":52,"tag":66,"props":1704,"children":1706},{"className":1705},[],[1707],{"type":58,"value":665},{"type":58,"value":1709}," to the upstream branch. No ",{"type":52,"tag":66,"props":1711,"children":1713},{"className":1712},[],[1714],{"type":58,"value":506},{"type":58,"value":1716},".\nIf push is rejected (non-fast-forward) it means another\nmachine pushed concurrently after our ",{"type":52,"tag":66,"props":1718,"children":1720},{"className":1719},[],[1721],{"type":58,"value":742},{"type":58,"value":1723}," in step 2;\nstop, surface, and recommend re-invoking the skill (which\nwill repeat the fetch + pull-with-rebase). Do not retry\nin-flight.",{"type":52,"tag":106,"props":1725,"children":1727},{"id":1726},"after-the-push-lands",[1728],{"type":58,"value":1729},"After the push lands",{"type":52,"tag":60,"props":1731,"children":1732},{},[1733],{"type":58,"value":1734},"Report:",{"type":52,"tag":242,"props":1736,"children":1737},{},[1738,1743,1748],{"type":52,"tag":246,"props":1739,"children":1740},{},[1741],{"type":58,"value":1742},"which commit SHA is now on the remote,",{"type":52,"tag":246,"props":1744,"children":1745},{},[1746],{"type":58,"value":1747},"a one-line summary of what was pushed (so the user can\nconfirm in their terminal scrollback),",{"type":52,"tag":246,"props":1749,"children":1750},{},[1751,1753,1758],{"type":58,"value":1752},"whether other-machine pulls are needed (the timer-driven\n",{"type":52,"tag":66,"props":1754,"children":1756},{"className":1755},[],[1757],{"type":58,"value":87},{"type":58,"value":1759}," on the user's other hosts will pick the change up\non its own next run; the skill does not need to nag about\nthis).",{"type":52,"tag":60,"props":1761,"children":1762},{},[1763,1765,1771,1773,1779,1781,1786,1788,1794],{"type":58,"value":1764},"If the modifications touched a file under\n",{"type":52,"tag":66,"props":1766,"children":1768},{"className":1767},[],[1769],{"type":58,"value":1770},"~\u002F.claude-config\u002Fscripts\u002F",{"type":58,"value":1772}," that is symlinked from\n",{"type":52,"tag":66,"props":1774,"children":1776},{"className":1775},[],[1777],{"type":58,"value":1778},"~\u002F.claude\u002Fscripts\u002F",{"type":58,"value":1780},", also note that the change is ",{"type":52,"tag":91,"props":1782,"children":1783},{},[1784],{"type":58,"value":1785},"immediately",{"type":58,"value":1787},"\nlive on this host — the symlink resolves to the just-modified\nfile. No re-",{"type":52,"tag":66,"props":1789,"children":1791},{"className":1790},[],[1792],{"type":58,"value":1793},"cp",{"type":58,"value":1795}," needed.",{"items":1797,"total":1950},[1798,1816,1832,1843,1856,1869,1887,1898,1908,1919,1929,1939],{"slug":1799,"name":1799,"fn":1800,"description":1801,"org":1802,"tags":1803,"stars":1813,"repoUrl":1814,"updatedAt":1815},"datafusion-python","write Apache DataFusion Python code","Use when the user is writing datafusion-python (Apache DataFusion Python bindings) DataFrame or SQL code. Covers imports, data loading, DataFrame operations, expression building, SQL-to-DataFrame mappings, idiomatic patterns, and common pitfalls.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1804,1807,1810],{"name":1805,"slug":1806,"type":15},"Data Analysis","data-analysis",{"name":1808,"slug":1809,"type":15},"Python","python",{"name":1811,"slug":1812,"type":15},"SQL","sql",593,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fdatafusion-python","2026-07-12T08:36:04.957626",{"slug":1817,"name":1817,"fn":1818,"description":1819,"org":1820,"tags":1821,"stars":1829,"repoUrl":1830,"updatedAt":1831},"bydbql","generate and execute BanyanDB BydbQL queries","Generate, validate, and optionally execute read-only BanyanDB BydbQL for STREAM, MEASURE, TRACE, and PROPERTY resources. Use when the user asks to query BanyanDB, translate natural language to BydbQL, inspect BanyanDB schema or data, validate BydbQL, or fetch raw BanyanDB records.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1822,1825,1828],{"name":1823,"slug":1824,"type":15},"Analytics","analytics",{"name":1826,"slug":1827,"type":15},"Database","database",{"name":1811,"slug":1812,"type":15},344,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fskywalking-banyandb","2026-07-12T08:31:01.294423",{"slug":1833,"name":1833,"fn":1834,"description":1835,"org":1836,"tags":1837,"stars":1829,"repoUrl":1830,"updatedAt":1842},"compiling","compile and build BanyanDB projects","Compile and build the SkyWalking BanyanDB project. Use when the user asks to compile, build, or generate code for this project.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1838,1841],{"name":1839,"slug":1840,"type":15},"Build","build",{"name":20,"slug":21,"type":15},"2026-07-12T08:31:06.373309",{"slug":1844,"name":1844,"fn":1845,"description":1846,"org":1847,"tags":1848,"stars":1829,"repoUrl":1830,"updatedAt":1855},"gh-pull-request","create GitHub pull requests for BanyanDB","Create a GitHub pull request for SkyWalking BanyanDB. Use when the user asks to create a PR, submit changes, or open a pull request.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1849,1852],{"name":1850,"slug":1851,"type":15},"GitHub","github",{"name":1853,"slug":1854,"type":15},"Pull Requests","pull-requests","2026-07-12T08:31:03.792415",{"slug":1857,"name":1857,"fn":1858,"description":1859,"org":1860,"tags":1861,"stars":1829,"repoUrl":1830,"updatedAt":1868},"vendor-update","update Go and Node.js vendor dependencies","Upgrade Go\u002FNode.js vendor dependencies and sync tool versions. Use whenever the user says \"upgrade dependencies\", \"update vendors\", \"vendor update\", \"run vendor-upgrade\", \"bump dependencies\", \"update packages\", or asks to run the `vendor-update` Make target. This skill also checks `scripts\u002Fbuild\u002Fversion.mk` after upgrading to see if any tracked tool versions need updating too, and removes stale binaries from `bin\u002F` when versions change.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1862,1865],{"name":1863,"slug":1864,"type":15},"Go","go",{"name":1866,"slug":1867,"type":15},"Node.js","node-js","2026-07-12T08:31:02.555555",{"slug":1870,"name":1870,"fn":1871,"description":1872,"org":1873,"tags":1874,"stars":1884,"repoUrl":1885,"updatedAt":1886},"cayenne-cgen","generate Cayenne entity Java classes","Use this skill whenever the user wants to (re)generate Cayenne entity Java classes from a DataMap. Trigger on phrases like 'generate Java classes', 'regenerate entities', 'run cgen', 'create the entity classes', 'why is the Artist class missing fields', 'where did the `_Abstract*` classes come from', 'sync the entity classes with the model', or any request to materialize Java from the DataMap. Also trigger as a follow-up after modeling changes (someone added an entity, attribute, or relationship and now the Java side is stale). This skill exclusively uses the `mcp__cayenne__cgen_run` MCP tool — it does NOT use `mvn cayenne:cgen` or the Gradle cgen task.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1875,1878,1881],{"name":1876,"slug":1877,"type":15},"Data Modeling","data-modeling",{"name":1879,"slug":1880,"type":15},"Java","java",{"name":1882,"slug":1883,"type":15},"ORM","orm",343,"https:\u002F\u002Fgithub.com\u002Fapache\u002Fcayenne","2026-07-12T08:32:33.575211",{"slug":1888,"name":1888,"fn":1889,"description":1890,"org":1891,"tags":1892,"stars":1884,"repoUrl":1885,"updatedAt":1897},"cayenne-db-import","import database schema into Cayenne DataMaps","Use this skill when the user wants to import database schema metadata into a Cayenne DataMap — the *model\u002Fmapping only*, not names or Java classes. Trigger on phrases like 'reverse engineer the database', 'import the schema', 'generate a DataMap from my DB', 'add the new tables from the DB into the model', 'import the customer table', 'create entities from these tables', or any request to read database metadata to populate or update a DataMap's XML. This is for *full schema* or *bulk table* import; one-off a-la-carte entity additions belong in the cayenne-modeling skill. IMPORTANT — scope: this imports the mapping ONLY; it does not clean up the Object-layer names or (re)generate Java classes. When the user wants their whole project brought in line with the DB ('sync my project with the database', 'my schema changed, update everything', 'update my entities\u002Fclasses from the DB'), that is the end-to-end `cayenne-full-db-sync` skill, which runs this import and then name cleanup and class generation. To regenerate classes alone use `cayenne-cgen`. The skill runs reverse engineering directly via the `mcp__cayenne__dbimport_run` MCP tool when a DBConnector is already configured; otherwise it opens the CayenneModeler GUI via `mcp__cayenne__open_project` to configure the connection first.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1893,1894,1895,1896],{"name":1826,"slug":1827,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},{"name":1811,"slug":1812,"type":15},"2026-07-19T05:40:33.655062",{"slug":1899,"name":1899,"fn":1900,"description":1901,"org":1902,"tags":1903,"stars":1884,"repoUrl":1885,"updatedAt":1907},"cayenne-full-db-sync","synchronize Cayenne projects with database","Use this skill when the user wants to bring their WHOLE Cayenne project in line with the database in one shot — the mapping, the Object-layer names, and the generated Java classes together. This is the end-to-end 'sync with the DB' workflow, and it orchestrates three skills in order: `cayenne-db-import` (import schema metadata into the DataMap) → `cayenne-model-naming` (polish the just-imported names) → `cayenne-cgen` (regenerate Java classes). Trigger on holistic phrases like 'sync my project with the database', 'sync with the DB', 'my schema changed, update everything', 'update my entities\u002Fclasses from the database', 'reverse engineer and regenerate the classes', 'import the new tables and rebuild the entities', 'full DB sync', 'bring the model and classes up to date with the DB'. The distinguishing signal is scope: the user wants the whole project (mapping + names + Java code), not just one stage. For the *model\u002Fmapping only* (no name cleanup, no class generation) use `cayenne-db-import`; to (re)generate classes alone use `cayenne-cgen`; to clean names alone use `cayenne-model-naming`. Uses the `mcp__cayenne__dbimport_run` and `mcp__cayenne__cgen_run` MCP tools via the sub-skills; does NOT use Maven or Gradle goals.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1904,1905,1906],{"name":1826,"slug":1827,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},"2026-07-19T06:03:49.112969",{"slug":1909,"name":1909,"fn":1910,"description":1911,"org":1912,"tags":1913,"stars":1884,"repoUrl":1885,"updatedAt":1918},"cayenne-model-naming","clean up Cayenne object-layer names","Use this skill to clean up Object-layer names in a Cayenne DataMap — ObjEntity, ObjAttribute, and ObjRelationship names, plus DbRelationship names (the first-class unit of relationship cleanup — every FK has one whether or not an ObjRelationship was generated; the ObjRelationship name is synced to it when one exists) — so they read as descriptive, consistent Java. Trigger on phrases like 'clean up the model names', 'fix the entity names', 'these names look ugly', 'make the names descriptive', 'normalize the ObjEntity\u002Fattribute\u002Frelationship names', 'why is this relationship called team1', 'rename entities to be consistent', 'the import produced Gametype instead of GameType'. Invoke it on an explicit user request, or as a manual follow-up after a `cayenne-db-import` to polish the just-imported additions — it is never triggered automatically. IMPORTANT: this is a LIGHT polish pass — CayenneModeler's reverse-engineering already produces good names for the common case; only improve the specific things its deterministic algorithm cannot (run-together names with no separators like `gametype`, meaningless numbered names like `team1` from multiple relationships between two tables, and a common entity prefix that leaks into relationship names like `aaOrders`). Do NOT rewrite names that are already correct. This is Obj-layer naming polish; for structural model edits use `cayenne-modeling`, and for regenerating classes afterward use `cayenne-cgen`.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1914,1915,1916,1917],{"name":1876,"slug":1877,"type":15},{"name":1826,"slug":1827,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},"2026-07-22T05:35:32.342548",{"slug":1920,"name":1920,"fn":1921,"description":1922,"org":1923,"tags":1924,"stars":1884,"repoUrl":1885,"updatedAt":1928},"cayenne-modeler","manage Cayenne projects with CayenneModeler","Use this skill when the user explicitly wants to open CayenneModeler (the GUI) on a Cayenne project, or when the modeling task is inherently visual — reverse engineering (delegated to cayenne-db-import), bulk relationship layout, multi-entity visual refactoring. Trigger on phrases like 'open the Modeler', 'open in CayenneModeler', 'launch the GUI', 'edit visually', 'show me the project in the Modeler'. Do NOT trigger as a fallback for ordinary a-la-carte XML edits — those belong in the cayenne-modeling skill, which is faster and doesn't require the user to context-switch.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1925,1926,1927],{"name":1876,"slug":1877,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},"2026-07-12T08:32:37.199428",{"slug":1930,"name":1930,"fn":1931,"description":1932,"org":1933,"tags":1934,"stars":1884,"repoUrl":1885,"updatedAt":1938},"cayenne-modeling","edit and extend Cayenne ORM models","Use this skill whenever the user wants to edit, inspect, or extend the Cayenne ORM model in a project — adding or modifying entities, attributes, relationships, embeddables, named queries, stored procedures, or DataNodes. Trigger on phrases like 'add an ObjEntity', 'add a DbEntity', 'add a relationship', 'expose this column as an attribute', 'create a new DataMap', 'add a named query', 'create an embeddable', 'add a stored procedure', 'change the attribute type', 'mark this column as nullable', 'rename this entity', or any mention of a Cayenne `*.map.xml` or `cayenne-*.xml` file. Also trigger when the user references modeling concepts (ObjEntity, DbEntity, ObjAttribute, DbAttribute, ObjRelationship, DbRelationship, Embeddable, dbEntityName, deleteRule, db-attribute-path, db-relationship-path, defaultPackage) in the context of a Cayenne-using app. This is the *primary* skill for a-la-carte ORM model manipulation — direct XML edits, not the Modeler GUI.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1935,1936,1937],{"name":1826,"slug":1827,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},"2026-07-19T05:40:32.6889",{"slug":1940,"name":1940,"fn":1941,"description":1942,"org":1943,"tags":1944,"stars":1884,"repoUrl":1885,"updatedAt":1949},"cayenne-query","write and modify Cayenne database queries","Use this skill whenever the user wants to write or modify a Cayenne query — fetching entities by criteria, joining, prefetching to avoid N+1, ordering, paginating, aggregating, or running raw SQL through Cayenne. Trigger on phrases like 'query for X', 'fetch all artists where ...', 'write an ObjectSelect', 'use SQLSelect', 'use SelectById', 'add a prefetch', 'get distinct values', 'count rows', 'find by ID', 'load by primary key', 'build a Cayenne expression', 'why am I getting N+1', 'how do I paginate', 'select a single column', 'select columns into a DTO', 'named query in the DataMap'. Do NOT trigger for modeling changes (use cayenne-modeling) or runtime bootstrap (use cayenne-runtime).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1945,1946,1947,1948],{"name":1826,"slug":1827,"type":15},{"name":1879,"slug":1880,"type":15},{"name":1882,"slug":1883,"type":15},{"name":1811,"slug":1812,"type":15},"2026-07-12T08:32:35.072322",108,{"items":1952,"total":2049},[1953,1968,1984,1998,2014,2026,2036],{"slug":1954,"name":1954,"fn":1955,"description":1956,"org":1957,"tags":1958,"stars":22,"repoUrl":23,"updatedAt":1967},"generate-cve-json","generate CVE JSON documents","Generate a CVE 5.x JSON document from an \u003Ctracker> tracking\nissue, ready to paste into the Vulnogram `#source` tab of the ASF CVE tool\nat https:\u002F\u002Fcveprocess.apache.org\u002Fcve5\u002F\u003CCVE-ID>#source. The conversion is\ndeterministic: same issue in, same JSON bytes out. Handles multiple\ncredits (one per line) and multiple references (URLs extracted from the\nissue's \"Public advisory URL\" and \"PR with the fix\" fields; the\n\"Security mailing list thread\" field is treated as internal-only and\nnever exported).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1959,1962,1964],{"name":1960,"slug":1961,"type":15},"Compliance","compliance",{"name":1963,"slug":32,"type":15},"Security",{"name":1965,"slug":1966,"type":15},"Technical Writing","technical-writing","2026-07-12T08:35:41.218722",{"slug":1969,"name":1969,"fn":1970,"description":1971,"org":1972,"tags":1973,"stars":22,"repoUrl":23,"updatedAt":1983},"magpie-audit-finding-fix","fix findings from code audit tools","For a batch of findings from a non-security audit tool\n(`\u003Caudit-tool>` — ruff \u002F flake8 \u002F mypy \u002F pylint \u002F CodeQL \u002F\nApache Verum \u002F Apache Caer \u002F equivalent; full list in the body)\nagainst `\u003Cupstream>`, draft the smallest fix for each finding.\nRe-runs the tool after each batch to confirm the findings are\ncleared. Produces a commit and a hand-back artefact; never opens\na PR on autopilot or merges.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1974,1977,1980],{"name":1975,"slug":1976,"type":15},"Audit","audit",{"name":1978,"slug":1979,"type":15},"Code Analysis","code-analysis",{"name":1981,"slug":1982,"type":15},"Debugging","debugging","2026-07-12T08:35:13.930479",{"slug":1985,"name":1985,"fn":1986,"description":1987,"org":1988,"tags":1989,"stars":22,"repoUrl":23,"updatedAt":1997},"magpie-ci-runner-audit","audit GitHub Actions workflow runner compatibility","Read-only audit of GitHub Actions workflow runner compatibility\nfor one repository, an explicit repository set, one Apache project\nwith multiple repositories, or the full Apache GitHub org. Finds\nobsolete GitHub-hosted runner labels and macOS runner\u002Ftool\narchitecture mismatches. Produces TSV evidence files; never edits\nworkflows, opens PRs, or posts comments.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1990,1991,1994],{"name":1975,"slug":1976,"type":15},{"name":1992,"slug":1993,"type":15},"CI\u002FCD","ci-cd",{"name":1995,"slug":1996,"type":15},"GitHub Actions","github-actions","2026-07-12T08:34:30.320965",{"slug":1999,"name":1999,"fn":2000,"description":2001,"org":2002,"tags":2003,"stars":22,"repoUrl":23,"updatedAt":2013},"magpie-committer-onboarding","onboard Apache project committers","Post-vote committer and PMC onboarding for Apache projects.\nWalks the nominator through every step from ICLA check to\nwelcome announcement for both incubating podlings and\ngraduated top-level projects.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2004,2007,2010],{"name":2005,"slug":2006,"type":15},"Management","management",{"name":2008,"slug":2009,"type":15},"Operations","operations",{"name":2011,"slug":2012,"type":15},"Process Documentation","process-documentation","2026-07-12T08:33:35.628029",{"slug":2015,"name":2015,"fn":2016,"description":2017,"org":2018,"tags":2019,"stars":22,"repoUrl":23,"updatedAt":2025},"magpie-contributor-activity-sweep","generate contributor activity reports","Read-only GitHub activity card for a named contributor on \u003Cupstream>.\nFetches PR authorship, code-review activity, issues, and PR\u002Fissue\ncomments over a configurable window. Limited to GitHub-visible\nactivity — the body documents the off-GitHub tracks the nominator\nmust supply separately. No readiness verdict is produced; use\ncontributor-nomination for a full nomination brief.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2020,2021,2022],{"name":1823,"slug":1824,"type":15},{"name":1850,"slug":1851,"type":15},{"name":2023,"slug":2024,"type":15},"Reporting","reporting","2026-07-12T08:33:41.715859",{"slug":2027,"name":2027,"fn":2028,"description":2029,"org":2030,"tags":2031,"stars":22,"repoUrl":23,"updatedAt":2035},"magpie-contributor-nomination","generate contributor nomination briefs","Read-only nomination brief for a named GitHub contributor on\n\u003Cupstream>. Aggregates GitHub activity across all contribution\ntracks plus maintainer-supplied off-GitHub signal, and flags\nvendor-neutrality context — the evidence a PMC needs to open\na committer or PMC nomination thread.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2032,2033,2034],{"name":20,"slug":21,"type":15},{"name":1850,"slug":1851,"type":15},{"name":2023,"slug":2024,"type":15},"2026-07-12T08:33:39.211745",{"slug":2037,"name":2037,"fn":2038,"description":2039,"org":2040,"tags":2041,"stars":22,"repoUrl":23,"updatedAt":2048},"magpie-contributor-sentiment","measure contributor sentiment on GitHub repositories","Measures contributor-sentiment signals on \u003Cupstream> over a\nconfigurable window: thread tone (first-response classification),\ntime-to-first-reply (median hours), first-PR retention\n(second-PR rate), and reviewer load (Gini coefficient). Compares\neach signal against a pre-adoption baseline and produces a\nstructured gate report used to decide whether a skill family is\nready to advance from experimental to stable.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[2042,2043,2046,2047],{"name":1823,"slug":1824,"type":15},{"name":2044,"slug":2045,"type":15},"Communications","communications",{"name":20,"slug":21,"type":15},{"name":1850,"slug":1851,"type":15},"2026-07-12T08:34:09.204167",71]