菜单
Use when creating or modifying GitHub Actions workflows for Pawrrtal. Covers mandatory OctavianTocan actor gate, self-hosted runner defaults, pull_request_target exception, and where CI jobs must live. For VPS runner launch/cleanup, use runner-ops.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when changing, extending, testing, or reviewing the Bun-backed Paw CLI package and its generated agent skills.
Use when writing or reviewing Pawrrtal Effect TypeScript code in backend-ts: API contracts, HttpApi handlers, services, repos, layers, tagged errors, Effect tests, streams, SQL, auth middleware, or vendor-source API checks.
Use when running the Bun-backed Paw CLI: local health, active context, shell completions, output modes, profiles, and verification of the supported command surface.
Turn a bad or long Pawrrtal work session into durable project learning. Use when the user says $retro, asks to learn from a session, says too much went wrong, or asks to create/update skills or rules from recent failures.
Use when touching Pawrrtal channels, providers, tools, plugins, subagents, context providers, turn orchestration, or code that decides where an integration should live. Enforces the split between generic kernel code, manifest plugins, trusted runtime adapters, provider adapters, channel adapters, and agent runtime primitives.
Operate Pawrrtal as a live service: prove the running commit, local origins, Cloudflared public URL, database schema, Telegram channel, and shutdown state. Use when checking whether Pawrrtal is live, deployed, reachable, healthy, broken in Telegram, safe to restart, or safe to take down.
| name | github-actions |
| description | Use when creating or modifying GitHub Actions workflows for Pawrrtal. Covers mandatory OctavianTocan actor gate, self-hosted runner defaults, pull_request_target exception, and where CI jobs must live. For VPS runner launch/cleanup, use runner-ops. |
Public repo on a self-hosted runner pool. Every workflow job needs the actor gate — even ubuntu-latest jobs.
VPS runner operations (start/cleanup scripts, volume paths) → runner-ops skill.
Rule files → .cursor/plugins/pawrrtal/rules/github-actions/.
if: >-
github.actor == 'OctavianTocan' &&
(github.event_name != 'pull_request' ||
github.event.pull_request.head.repo.full_name == github.repository)
Fork PRs and non-owner authors must not trigger workflows.
runs-on: [self-hosted, openclaw-mini, pawrrtal]
/mnt/HC_Volume_105512717/github-runners/pawrrtal-ephemeral/scripts/ephemeral-self-hosted-runners.sh start --count <N> --tag <name>scripts/ephemeral-self-hosted-runners.sh cleanup --count <N> --tag <name>Use ubuntu-latest only with a real reason (macOS/Windows/GPU/untrusted code already gated separately).
rebase.yml uses pull_request_target and never runs PR code; uses author_association instead of actor gate. See safe-pull-request-target.mdc.
Backend pytest, frontend vitest, Maestro E2E, sentrux, etc. belong on self-hosted + actor gate. Do not add ungated ubuntu-latest jobs "just once."
frontend/content/docs/handbook/ci/self-hosted-runner.md
runs-on uses self-hosted tags unless exception documentedpaths: filters when appropriate).github/workflows/ siblings