| name | local-dev |
| description | Operate local route/worktree topology and secret-safe credential handoffs. Use when configuring Portless, a development proxy, an isolated worktree route, or named-secret injection. |
Local Development
Operate the local topology or credential boundary that a repository cannot infer without live machine evidence.
Route
Read only the selected reference.
| Mode | Select when | Read |
|---|
topology | starting or resolving a Portless route, worktree-scoped route, development proxy, or reachability path | references/topology.md |
secrets | handing required credential names to an existing local injector without revealing values | references/secrets.md |
Select exactly one mode. Combine them only when a topology operation also needs an authorized named credential.
Do not use when
- A named injector or Agent Vault tool operation is requested; its provider-specific skill owns exact commands.
- Browser interaction rather than local reachability is requested;
local-http-browser-use owns the browser operation.
- The request is only generic sandbox selection or project-context writing with no route or secret boundary.
Workflow
- Inspect repository conventions, installed tools, configuration, and live status before selecting a mode.
- Read only the selected reference and keep machine-specific values in live configuration rather than canonical prose.
- Verify the resulting route, reachability path, or named-credential receipt from its authoritative local source.
Hard rules
- Do not store, print, summarize, or copy credential values. The
secrets mode may pass names and inject values only for the user's exact authorized operation.
- Do not freeze hostnames, ports, URLs, or paths in canonical content; discover them from config/status.
- Move filesystem cleanup targets to Trash with
/usr/bin/trash <path>; never permanently delete them. Confirmation does not authorize destructive Git or a cleanup command that bypasses Trash.
Output
Report the selected mode, live source of truth, verified route or safe credential identifiers, operation status, and any stop condition.
