VPNRouter

After every successful ship of a -rN candidate, run this skill to actually verify the new binary works — on the windows-brat TEST VM (192.168.0.106) over WinRM, NEVER the local dev box (see the STOP banner in the body). Downloads the freshly-shipped ZIP, deploys it onto brat, launches + drives it there via UIA over WinRM, screenshots each verification point, tails `vpnrouter*.log` for errors, and produces a PASS/FAIL report. Auto-triggered after `ship-rolling-candidate` completes. DO NOT skip even for "tiny" changes — past sessions shipped 12 candidates without local verification and the user caught it via screenshots. This skill makes "I forgot to test" impossible.

After every successful ship of a -rN candidate, run this skill to actually verify the new binary works — on the windows-brat TEST VM (192.168.0.106) over WinRM, NEVER the local dev box (see the STOP banner in the body). Downloads the freshly-shipped ZIP, deploys it onto brat, launches + drives it there via UIA over WinRM, screenshots each verification point, tails `vpnrouter*.log` for errors, and produces a PASS/FAIL report. Auto-triggered after `ship-rolling-candidate` completes. DO NOT skip even for "tiny" changes — past sessions shipped 12 candidates without local verification and the user caught it via screenshots. This skill makes "I forgot to test" impossible.

Ship a rolling release candidate vX.Y.Z-rN. Bumps AppVersion, builds Windows + triggers Mac/Linux CI, applies notes, marks prerelease, deletes previous candidate per rolling-rN policy.

Ship a rolling release candidate vX.Y.Z-rN. Bumps AppVersion, builds Windows + triggers Mac/Linux CI, applies notes, marks prerelease, deletes previous candidate per rolling-rN policy.

Promote a rolling -rN candidate to stable vX.Y.Z (no suffix). Bumps AppVersion, creates fresh tag without suffix, full rebuild + Mac/Linux CI, restores Latest, deletes -rN.

Adversarial multi-agent bug-hunt over a diff or subsystem. Fans out independent reviewers briefed with VPNRouter invariants, verifies each claim against code, and appends survivors to plans/OPEN-DEFECTS.md (the cut-stable gate ledger). Run before a stable cut and after any non-trivial feature.

Diagnose VPNRouter config / connectivity issues by reading the user's config.yaml + current.json + recent vpnrouter*.log. Trace ConfigMode → Vless.Servers → outbounds → flow. Catches silent leaks, ConfigMode mismatches, missing proxy outbounds.

Promote a rolling -rN candidate to stable vX.Y.Z (no suffix). Bumps AppVersion, creates fresh tag without suffix, full rebuild + Mac/Linux CI, restores Latest, deletes -rN.

Find and fix UI overflow on narrow VPNRouter Avalonia windows. Wraps bare-string CheckBox.Content / Button.Content in TextBlock with TextWrapping="Wrap". Verifies design tokens from Styles/Tokens.axaml.

Diagnose VPNRouter config / connectivity issues by reading the user's config.yaml + current.json + recent vpnrouter*.log. Trace ConfigMode → Vless.Servers → outbounds → flow. Catches silent leaks, ConfigMode mismatches, missing proxy outbounds.

Process a Codex Design (Codex.ai/design) handoff bundle URL. Fetches gzipped tar, extracts to /tmp, reads README + chats + AdvancedMode.html / SimpleMode.html before implementing. Maps design tokens to existing Avalonia Tokens.axaml.

Use this skill at the START of any v3.0 refactor task (or any task that touches VPNRouter.Core/Services, VPNRouter.App/ViewModels, VPNRouter.Android/AndroidApp.*, or any other surface listed in `plans/v3.0-refactor-roadmap.md`). It wraps the per-task lifecycle defined in `plans/v3.0-execution-methodology.md`: brief → branch → impl → verify → outcome → commit. Use it whenever the user says "start Phase 1 task X", "begin v3.0 work on Y", "run task <task-id>", "do the <feature> refactor", or whenever you're about to make a >30-line code change. Skill blocks the work from proceeding if any of the 6 verification gates fail, and writes the post-mortem outcome section automatically once gates pass. Use it for refactor work, audit follow-ups, and any internal cleanup the user has approved. Do NOT use it for user-reported bug hotfixes that bypass v3.0 (those go through ship-rolling-candidate instead) or for one-line typo fixes (overkill for those).

Bump build script version examples in README.md + README.ru.md after a release. Keeps "powershell build.ps1 -Version 'X.Y.Z-rN'" + "./build-mac.sh X.Y.Z-rN" snippets in sync with current candidate.

Use this skill at the START of any v3.0 refactor task (or any task that touches VPNRouter.Core/Services, VPNRouter.App/ViewModels, VPNRouter.Android/AndroidApp.*, or any other surface listed in `plans/v3.0-refactor-roadmap.md`). It wraps the per-task lifecycle defined in `plans/v3.0-execution-methodology.md`: brief → branch → impl → verify → outcome → commit. Use it whenever the user says "start Phase 1 task X", "begin v3.0 work on Y", "run task <task-id>", "do the <feature> refactor", or whenever you're about to make a >30-line code change. Skill blocks the work from proceeding if any of the 6 verification gates fail, and writes the post-mortem outcome section automatically once gates pass. Use it for refactor work, audit follow-ups, and any internal cleanup the user has approved. Do NOT use it for user-reported bug hotfixes that bypass v3.0 (those go through ship-rolling-candidate instead) or for one-line typo fixes (overkill for those).

Process a Claude Design (claude.ai/design) handoff bundle URL. Fetches gzipped tar, extracts to /tmp, reads README + chats + AdvancedMode.html / SimpleMode.html before implementing. Maps design tokens to existing Avalonia Tokens.axaml.

Bump build script version examples in README.md + README.ru.md after a release. Keeps "powershell build.ps1 -Version 'X.Y.Z-rN'" + "./build-mac.sh X.Y.Z-rN" snippets in sync with current candidate.