메뉴
Use when creating or modifying GitHub Actions workflows for Pawrrtal. Covers mandatory OctavianTocan actor gate, self-hosted runner defaults, pull_request_target exception, and where CI jobs must live. For VPS runner launch/cleanup, use runner-ops.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use when changing, extending, testing, or reviewing the Bun-backed Paw CLI package and its generated agent skills.
Use when writing or reviewing Pawrrtal Effect TypeScript code in backend-ts: API contracts, HttpApi handlers, services, repos, layers, tagged errors, Effect tests, streams, SQL, auth middleware, or vendor-source API checks.
Use when running the Bun-backed Paw CLI: local health, active context, shell completions, output modes, profiles, and verification of the supported command surface.
Turn a bad or long Pawrrtal work session into durable project learning. Use when the user says $retro, asks to learn from a session, says too much went wrong, or asks to create/update skills or rules from recent failures.
Use when touching Pawrrtal channels, providers, tools, plugins, subagents, context providers, turn orchestration, or code that decides where an integration should live. Enforces the split between generic kernel code, manifest plugins, trusted runtime adapters, provider adapters, channel adapters, and agent runtime primitives.
Operate Pawrrtal as a live service: prove the running commit, local origins, Cloudflared public URL, database schema, Telegram channel, and shutdown state. Use when checking whether Pawrrtal is live, deployed, reachable, healthy, broken in Telegram, safe to restart, or safe to take down.
| name | github-actions |
| description | Use when creating or modifying GitHub Actions workflows for Pawrrtal. Covers mandatory OctavianTocan actor gate, self-hosted runner defaults, pull_request_target exception, and where CI jobs must live. For VPS runner launch/cleanup, use runner-ops. |
Public repo on a self-hosted runner pool. Every workflow job needs the actor gate — even ubuntu-latest jobs.
VPS runner operations (start/cleanup scripts, volume paths) → runner-ops skill.
Rule files → .cursor/plugins/pawrrtal/rules/github-actions/.
if: >-
github.actor == 'OctavianTocan' &&
(github.event_name != 'pull_request' ||
github.event.pull_request.head.repo.full_name == github.repository)
Fork PRs and non-owner authors must not trigger workflows.
runs-on: [self-hosted, openclaw-mini, pawrrtal]
/mnt/HC_Volume_105512717/github-runners/pawrrtal-ephemeral/scripts/ephemeral-self-hosted-runners.sh start --count <N> --tag <name>scripts/ephemeral-self-hosted-runners.sh cleanup --count <N> --tag <name>Use ubuntu-latest only with a real reason (macOS/Windows/GPU/untrusted code already gated separately).
rebase.yml uses pull_request_target and never runs PR code; uses author_association instead of actor gate. See safe-pull-request-target.mdc.
Backend pytest, frontend vitest, Maestro E2E, sentrux, etc. belong on self-hosted + actor gate. Do not add ungated ubuntu-latest jobs "just once."
frontend/content/docs/handbook/ci/self-hosted-runner.md
runs-on uses self-hosted tags unless exception documentedpaths: filters when appropriate).github/workflows/ siblings