greenpau

Maintain the opt-in encrypted Documents API, immutable account ownership, SQLite ciphertext storage, chunk transactions, recipient key envelopes, configuration parser, and TLS/browser cryptographic tests. The separately maintained React application has its…

Apply AuthCrunch coding contracts when creating, modifying, or reviewing repository code. Covers package ownership, dedicated configuration parsers, public APIs, validation, errors, logging, serialization, and security boundaries, and routes to the owning…

Implement the separately maintained Documents React client for AuthCrunch encrypted storage, recovery keys, chunk upload/download, recipient sharing, and safe session handling. Does not implement manager/profile APIs or provision the backend.

Maintain AuthCrunch's YAML HTTP contract, deterministic JSON/YAML exports, Scalar reference and local server. Use after HTTP-facing source/configuration changes, source-review drift, or API reference tooling changes.

Maintain go-authcrunch Make targets, pinned Go tools, build/test orchestration, maintenance scripts, generated artifacts, and embedded UI refresh workflows.

Maintain conditional authentication challenge policies, reusable authchal and user-transform FromDirectives parsers, safe claim substitution, GitHub ID/organization transforms, registered-factor inventory, passwordless WebAuthn selection, verified AMR access…

Maintain optional cross-device portal login, its directive parser, QR and polling UI, approving-browser binding, single-use transfers, MFA and provider evidence, logout invalidation, and TLS/browser tests.

Maintain authenticated local profile APIs, user authentication-flow preferences and UI integration, canonical account selection, atomic identity-bound operations, browser origin checks, and credential-management TLS tests.

Audit or refresh AgentX implementation coverage, route reachability, contract traceability, diagram validity, and conformance evidence. Use after changing application source, AGENTS.md, an implementation skill, a Draw.io diagram, or a runtime boundary that…

Go coding standards and implementation directives for the terminal-first AgentX client. Use when creating, modifying, or reviewing Go code, runtime architecture, conformance status, package boundaries, configuration, constructors, errors, concurrency,…

Implement credential-source selection, OAuth and cloud-provider authentication, API client construction, proxy and TLS behavior, streaming and non-streaming requests, retries, fallback, and file transfer. Use when implementing the model/account network…

Implement conversation continuity across incremental persistence, resume, branching, rewind, compaction, context pressure, and crash recovery. Use when defining what survives a turn or process, rebuilding a session from durable events, or reducing context…

Implement noninteractive execution and the structured SDK stream, including provider-free native session management, CLI mode inference and validation, stdin acquisition, text/JSON/NDJSON output, the serialized headless turn runner, correlated control…

Implement the shared conversation turn engine, API-bound message projection, model streaming, retry and fallback, stop processing, derived progress/prompt assistance, speculative execution, and continuation decisions. Use when implementing or reviewing prompt…

Implement process bootstrap facts, observable application state, state-change reactions, working-directory identity, and model context assembly. Use when implementing session state, selectors, permission context storage, prompt precedence, cached and volatile…

Implement the append-only session transcript and recovery protocol, including native session inventory and deletion, message graph links, sidechains, metadata events, deduplication, write queues, branches, tombstones, compact and snip relinking, resume, fork,…

Choose or maintain repository Make/script workflows, builds, dependency selection, generated artifacts, and security CLI tools. Routes release work and documents local administration and standalone login commands.

Choose and run unit, E2E, Caddyfile fixture, automation, and CI checks for caddy-security. Use for coverage requirements, test evidence, failures, and report workflows; official OP conformance remains opt-in.

Configure and verify optional cross-device portal login, QR activation, explicit approval, browser binding, cancellation, and lifecycle through Caddy. Native login and external provider configuration retain their own owners.

Implement or review caddy-security Go code, Caddy modules, parsers, lifecycle, and HTTP delegation. Use for app/plugin boundaries, authcrunch integration, errors, logging, and code conventions.

Configure portal cookie names, prefixes, domains, paths, attributes, and refresh overrides. Use for cookie precedence and coordination with authorization token discovery.

Configure authentication portals, backend selection, redirect trust, refresh, and portal wiring. Delegates cookies, UI, transforms, crypto, and OIDC provider details to focused skills.

Configure portal UI templates, static assets, themes, languages, links, and custom CSS/JS/HTML. Use for branding and refresh-aware templates; transform-generated links belong to user transforms.

Mount authenticate and authorize handlers, separate portal and protected routes, align auth URLs, and preserve trusted proxy metadata. Use for path conflicts, split hosts, public JWKS, and route ordering.

Operate and revise tested development and release automation. Use when selecting or changing Make commands, fixture checks, native CI, cross-builds, generated outputs, dependencies, packaging, or releases.

Design and review tested package contracts and route implementation or automation work. Use when changing CLI or run/report behavior, crossing package boundaries, or selecting a specialized runtime, reporting, coverage, or CI workflow.

Implement and review Go coverage evidence and exact policy decisions. Use when changing profile parsing or merging, statement-weighted totals, thresholds, canonical coverage HTML, or explicit Git baseline comparisons.

Implement and review tested presentations and secure artifact publication. Use when changing console output, HTML assets, JSON or JUnit projections, escaping, redaction, managed file protections, or manifests.

Implement and review tested execution, event normalization, and authoritative outcomes. Use when changing runner, protocol, result, runstatus, cancellation, offline evidence selection, or exit precedence.

Apply tested Go design and verification conventions. Use when implementing or reviewing packages, APIs, errors, concurrency, serialization models, secure paths, or their tests.

Create, port, revise, or audit tested repo-local skills and their engineering contracts. Use when changing skill ownership, task routes, metadata, source-grounded guidance, or durable lessons from a working session.

Draft and review tested commit messages and message files. Use when summarizing an intended commit, choosing an indicator, or checking the required subject and Before/After/Tests/More info structure.