greenpau
- 74 skills
- 0 followers
- 6 hours ago last updated
- ▌ Implementation Coverage · greenpau bundleImplement or review tested Go coverage profile parsing, deterministic merging, statement-weighted totals, per-file results, minimum thresholds, coverage artifact handling, and canonical go tool cover HTML generation. Use when changing pkg/coverage, coverage-related app behavior, coverage.out or coverage.html compatibility, or coverage tests.
- ▌ Implementation Reporting · greenpau bundleImplement or review tested live console and artifact reports, including compatibility test HTML, summary JSON, JUnit XML, index HTML, escaping, redaction, deterministic ordering, duration quality, secure permissions, atomic publication, and manifest metadata. Use when changing pkg/report, report-mode behavior, or report projections consumed by humans and CI.
- ▌ Implementation Test Pipeline · greenpau bundleImplement or review tested child-process execution, raw stream capture, bounded TestEvent and BuildEvent framing, occurrence-aware result aggregation, timing, incompleteness, cancellation, and exit behavior. Use when changing pkg/runner, pkg/protocol, pkg/result, run orchestration, or tests for Go event handling and child failures.
- ▌ Authdbctl · greenpau bundleMaintain cmd/authdbctl commands, flags, configuration, terminal input, management retries, output, and executable E2E tests. Use authentication-client for the reusable portal login protocol.
- ▌ Threat Hunting · greenpau bundlego-authcrunch threat-hunting workflow for security audits, vulnerability triage, and deep review of authentication and authorization boundaries. Use when auditing the package for security issues, validating external vulnerability reports, reviewing authn/authz bypasses, ACL/path matching, redirects, token/cookie/session handling, OAuth/SAML/LDAP/KMS flows, input parsing, concurrency, secret logging, dependency vulnerabilities, or producing security findings and remediation plans.
- ▌ Identity Public Keys · greenpau bundleMaintain user-owned GPG and SSH public-key parsing, profile API registration, identity database persistence, format compatibility, and maintained OpenPGP dependencies. Excludes portal signing-key publication and admin private-key export.
- ▌ Authentication Client · greenpau bundleMaintain pkg/authclient portal login, its reusable configuration parser, native login transport, password/TOTP challenges, API key authentication, real-portal E2E tests, opaque credential files, and cmd/authdbctl authentication wiring. Use when embedding authentication in another CLI such as caddy-authenticator; this client does not use the admin API.
- ▌ Refresh Token Identity · greenpau bundleMaintain refresh-token login evidence, MFA completion, sandbox redemption, immutable local identity, credential-version invalidation, and transactional current-identity checks in AuthCrunch.
- ▌ Release And Versioning · greenpau bundleMaintain AuthCrunch VERSION authority, versioned synchronization, patch/minor release commands, CI artifact identities, and GoReleaser publication. Use for version checks, release automation, or release preparation.
- ▌ OAUTH Identity Provider · greenpau bundleMaintain upstream OAuth identity-provider directive parsers, shared configuration dispatch, OAuth/OIDC discovery, JWKS and static public PEM verification, EdDSA/Ed25519 token validation, key refresh, and real portal OAuth E2E tests. Excludes portal signing-key publication.
- ▌ Refresh Token Transports · greenpau bundleChange AuthCrunch refresh/logout HTTP routes, secure cookies, native JSON credential transport, browser Web Locks, continuation pages, fresh login, or cross-tab session coordination.
- ▌ Skill Authoring Patterns · greenpau bundleCreate, rewrite, review, or validate go-authcrunch repo-local skills, agents/openai.yaml metadata, AGENTS.md routing, and focused implementation or workflow skills.
- ▌ Authentication Portal Jwks · greenpau bundleMaintain portal public signing-key discovery at .well-known/jwks.json, reusable admin API directive parsing, opt-in admin private-key export, KMS key serialization, asymmetric issuer selection, base-path routing, and JWT verification tests. Excludes upstream OAuth provider JWKS consumption.
- ▌ Authentication Portal Oidc · greenpau bundleMaintain the reusable pkg/oidc OpenID Provider, its public interfaces and methods, and the local-user authentication portal adapter, including client registration, discovery, code/PKCE, consent, ID-token keys, UserInfo, revocation, and conformance tests. Excludes upstream OAuth identity providers and portal refresh-token transport.
- ▌ Authentication Portal Themes · greenpau bundleBuild, customize, or update AuthCrunch authentication portal themes using Go HTML templates, CSS, logos, favicons, banners, and backgrounds. Use for filesystem template overrides and their UI/static-asset configuration; the embedded React profile application has a separate build.
- ▌ Refresh Token Implementation · greenpau bundleImplement or change AuthCrunch portal refresh configuration, opaque token families, atomic rotation, replay revocation, issuance claims, store adapters, and portal lifecycle. Use for portal refresh tokens, not upstream OAuth token renewal.
- ▌ Authentication Portal Cookies · greenpau bundleMaintain portal cookie configuration, reusable cookie directive parsing, common prefixes and explicit names, domain attributes, factory issuance/deletion, and cookie interoperability with OIDC, refresh, OAuth, and gatekeepers.
- ▌ Local Password Authentication · greenpau bundleMaintain local password creation, bcrypt imports, duplicate detection, changes, resets, credential revocation, and server-side authentication in pkg/identity, including bcrypt work equalization and timing-enumeration regression tests.
- ▌ Configuration · greenpau bundlecaddy-security Caddyfile configuration generation for the security app and authenticate or authorize HTTP directives. Use when creating, reviewing, or modifying Caddyfile configs for authentication portals, authorization policies, identity stores, OAuth or SAML identity providers, SSO app providers, users, registration flows, messaging, credentials, secrets, or runtime replacement in this repository.
- ▌ Testing And CI · greenpau bundlecaddy-security repository testing and CI workflow guidance, including Go test command selection, Makefile report targets, Caddyfile parser/adapt fixture tests, runtime resolution fixtures, coverage artifacts, and GitHub Actions build/release/CLA behavior. Use when choosing or running tests, adding or updating test coverage, interpreting CI failures, reproducing GitHub Actions locally, or documenting validation for this Go/Caddy module.
- ▌ Configuration Users · greenpau bundlecaddy-security local user account Caddyfile configuration. Use when creating, reviewing, or modifying local identity store user entries, usernames, display names, email addresses, plaintext or bcrypt passwords, overwrite behavior, roles, static API key prefixes and payloads, and secret-backed user attributes.
- ▌ Configuration Crypto · greenpau bundlecaddy-security crypto directive configuration for authentication portals and authorization policies. Use when creating, reviewing, or debugging crypto Caddyfile lines, JWT signing or verification keys, token names and lifetimes, key IDs, HMAC/RSA/ECDSA key loading, auto-generated keys, env or secrets-backed crypto values, System API crypto keys for remote Basic/API-key authentication, and authenticate/authorize key compatibility.
- ▌ Configuration Secrets · greenpau bundlecaddy-security secrets manager Caddyfile configuration. Use when creating, reviewing, or modifying security secrets blocks, external security.secrets modules, static secrets manager examples, AWS secrets manager examples, secret IDs, secret-backed user data, authdbctl-generated password or API key hashes, secret-backed crypto keys, and integration with runtime replacement.
- ▌ Configuration Sso App · greenpau bundlecaddy-security SSO app Caddyfile configuration for Single Sign-On with SAML. Use when creating, reviewing, or modifying sso provider blocks, AWS SAML app drivers, SAML entity IDs, signing certificates, PKCS8 private keys, SSO metadata locations, authentication portal enablement, /apps/sso endpoints, and AWS role naming.
- ▌ Scripts And Automation · greenpau bundlecaddy-security repository automation, Makefile target selection, local build/test/report/coverage commands, local go-authcrunch go.mod replacement shim workflow, asset and documentation update scripts, release/version workflows, generated artifact handling, and guardrails for dependency, devbuild, cleanup, and release actions. Use when choosing, running, documenting, or updating repository scripts and Make targets; troubleshooting CI/build/test automation; coordinating caddy-security development with local go-authcrunch changes; refreshing Caddyfile/config fixtures; deciding whether generated outputs belong in a change; or preparing releases for this Go/Caddy module.
- ▌ Configuration Messaging · greenpau bundlecaddy-security messaging provider Caddyfile configuration. Use when creating, reviewing, or modifying messaging email provider or messaging file provider blocks, SMTP settings, passwordless email, senders, BCC addresses, message templates, root directories, and registration email wiring.
- ▌ Authentication Portal API · greenpau bundlecaddy-security authentication portal JSON API and admin/server API guidance. Use when building, reviewing, or debugging programmatic login clients, Portal API calls, Accept: application/json behavior, sandbox challenge sequences, /beacon, /whoami JSON/probe/id_token responses, refresh token API behavior, enable admin api, /api/server metadata/realms/info endpoints, and API-oriented authentication troubleshooting.
- ▌ Break Fix Troubleshooting · greenpau bundlecaddy-security break-fix triage and support-report workflow. Use when diagnosing reported configuration, deployment, or runtime failures; analyzing Caddyfiles, Caddy logs, redirect loops, login failures, authorization denials, OAuth/OIDC/SAML/LDAP/local-user issues, module-version mismatches, or secret/runtime placeholder problems; preparing GitHub issue Markdown files for .github/ISSUE_TEMPLATE/break-fix.md under tmp/breakfix/; or identifying gaps in repository skills after troubleshooting.
- ▌ Configuration Credentials · greenpau bundlecaddy-security reusable generic credentials Caddyfile configuration. Use when creating, reviewing, or modifying security credentials blocks for reusable username/password credentials, optional domains, SMTP or email messaging authentication, registration email provider credentials, environment placeholders, or secret-backed credential values.
- ▌ Configuration Authorization · greenpau bundlecaddy-security authorization policy Caddyfile configuration. Use when creating, reviewing, or modifying security authorization policy blocks, route-level authorize directives, ACL rules, allow or deny shortcuts, bypass rules, crypto verification keys, auth redirects, bearer token validation, basic or API key auth proxy settings, user identity fields, and injected claim headers.
- ▌ Configuration Registrations · greenpau bundlecaddy-security user registration Caddyfile configuration. Use when creating, reviewing, or modifying user registration blocks, registration titles and codes, dropbox files, terms and privacy links, accepted email domains, MX checks, email provider wiring, admin notification addresses, and identity store targets.
- ▌ Configuration Authentication · greenpau bundlecaddy-security authentication portal Caddyfile configuration. Use when creating, reviewing, or modifying security authentication portal blocks, route-level authenticate directives, portal crypto, enabled identity stores, OAuth or SAML identity providers, SSO app providers, trusted redirects, source address validation, or portal wiring. For cookies, UI, and user transforms use the focused authentication subskills.
- ▌ Configuration Saml Providers · greenpau bundlecaddy-security SAML login identity-provider Caddyfile configuration. Use when creating, reviewing, or debugging saml identity provider blocks for authentication portal login, especially Azure AD or JumpCloud SAML IdPs, ACS URLs, IdP metadata and signing certificates, entity IDs, SAML realms, clock-skew issues, role claims, and portal enablement. Do not use for sso provider app-side SAML SSO blocks.
- ▌ Configuration Identity Stores · greenpau bundlecaddy-security local and LDAP identity store Caddyfile configuration. Use when creating, reviewing, or modifying local identity store blocks, LDAP identity store blocks, local user records, store shortcuts, realms, user files, LDAP bind settings, servers, search filters, attributes, groups, recovery settings, support links, fallback roles, and login icons.
- ▌ Configuration OAUTH Providers · greenpau bundlecaddy-security OAuth and OIDC identity provider Caddyfile configuration. Use when creating, reviewing, or modifying oauth identity provider blocks, Azure, GitHub, Google, LinkedIn, Discord, Facebook, Okta, Cognito, GitLab, Nextcloud, or generic OAuth providers, client IDs and secrets, scopes, id token cookies, icons, PKCE toggles, user group filters, JWKS keys, and portal enablement.
- ▌ Configuration Authentication UI · greenpau bundlecaddy-security authentication portal UI Caddyfile configuration. Use when creating, reviewing, or modifying authentication portal ui blocks, templates, metadata, private links, static assets, themes, languages, logos, auto_redirect_url, custom CSS, custom JavaScript, or custom HTML header injection.
- ▌ Configuration HTTP Integrations · greenpau bundlecaddy-security HTTP integration Caddyfile configuration. Use when creating, reviewing, or modifying route-level authenticate and authorize directives, portal and protected route separation, matcher forms, same-host or split-host auth wiring, auth URL routing and alignment, auth-path collisions such as upstream /auth routes, dedicated auth hosts with root-mounted portals, portal-owned path prefixes to avoid, or unnecessary global Caddy directive-order overrides.
- ▌ Configuration Runtime Resolution · greenpau bundlecaddy-security runtime replacement guidance for Caddyfile configuration. Use when creating, reviewing, or modifying configs that rely on Caddy replacer placeholders, env placeholders, secrets manager lookups, resolved Caddyfile fixtures, runtime credential resolution, unresolved token checks, or caddyfile_resolve behavior.
- ▌ Configuration Authentication Cookies · greenpau bundlecaddy-security authentication portal cookie Caddyfile configuration. Use when creating, reviewing, or modifying authentication portal cookie directives, cookie domains, paths, lifetimes, SameSite, insecure cookies, guessed or stripped domains, token cookie names, cookie name prefixes, access token cookie validation, or authcrunch cookie defaults.
- ▌ Configuration Authentication User Transforms · greenpau bundlecaddy-security authentication portal user transform Caddyfile configuration. Use when creating, reviewing, or modifying authentication portal transform user blocks, transform matchers, ACL condition syntax, add or overwrite role actions, drop matched role actions, MFA requirements, block or deny transforms, transform UI links, or authcrunch claim replacement placeholders.
- ▌ Skill Authoring · greenpau bundleCreate or revise repo-local skills connected by actionable routing statements from AGENTS.md through broad and increasingly specialized skills. Use when documenting AgentX engineering knowledge, adding or routing a skill, reorganizing the skill hierarchy, or auditing that every skill is reachable and useful to contributors.
- ▌ Coding Directives · greenpau bundleGo coding standards and implementation directives for the terminal-first AgentX client. Use when creating, modifying, or reviewing Go code, runtime architecture, conformance status, package boundaries, configuration, constructors, errors, concurrency, security, persistence, protocol types, adapters, or tests.
- ▌ Implementation MCP Lsp · greenpau bundleImplement Model Context Protocol configuration, transport and connection lifecycle, OAuth, elicitation, channel permissions, result normalization, and plugin-provided language servers. Use when implementing external capability servers or editor-intelligence providers.
- ▌ Source Code Management · greenpau bundleCreate, review, or revise repository-compliant commit messages and commit-message files. Use when summarizing source changes for version control, choosing a change indicator, checking commit-message structure, or when the user asks to create a commit message for changes in this repository.
- ▌ Implementation Continuity · greenpau bundleImplement conversation continuity across incremental persistence, resume, branching, rewind, compaction, context pressure, and crash recovery. Use when defining what survives a turn or process, rebuilding a session from durable events, or reducing context without losing authoritative history.
- ▌ Implementation Operations · greenpau bundleImplement operational services surrounding the semantic runtime, including credentials and providers, networking and proxies, portable filesystem/process/terminal ownership, cleanup, diagnostics, telemetry, usage, feature evaluation, and updates. Use when implementing platform boundaries or proving that operational failures cannot corrupt a session.
- ▌ Implementation Multi Agent · greenpau bundleImplement delegated-agent and team execution while preserving agent-definition precedence, tool and permission filtering, explicit background-task durability boundaries, transcript ownership, resume behavior, worktree isolation, team identity, mailboxes, coordinator policy, and result synthesis. Use when implementing or reviewing the Agent capability, local or remote workers, forked context, teammates, teams, coordinator mode, cross-agent messaging, permission relays, orphan cleanup, or asynchronous agent results.
- ▌ Implementation Query Model · greenpau bundleImplement the shared conversation turn engine, API-bound message projection, model streaming, retry and fallback, stop processing, derived progress/prompt assistance, speculative execution, and continuation decisions. Use when implementing or reviewing prompt submission, recursive model/tool turns, streamed content assembly, usage accounting, model recovery, structured output, token/turn limits, prompt suggestions, speculation, or API-safe conversation normalization.
- ▌ Implementation Architecture · greenpau bundleDevelop, review, or extend AgentX across its complete application architecture. Use when tracing a requirement across runtime domains, deciding which implementation subskill owns a behavior, changing cross-domain boundaries, or auditing project coverage.
- ▌ Implementation Auth Network · greenpau bundleImplement credential-source selection, OAuth and cloud-provider authentication, API client construction, proxy and TLS behavior, streaming and non-streaming requests, retries, fallback, and file transfer. Use when implementing the model/account network boundary or diagnosing transport and authentication behavior.
- ▌ Implementation Headless Sdk · greenpau bundleImplement noninteractive execution and the structured SDK stream, including provider-free native session management, CLI mode inference and validation, stdin acquisition, text/JSON/NDJSON output, the serialized headless turn runner, correlated control requests, permission races, replay and deduplication, task/result ordering, and protocol-clean shutdown. Use for print mode, native session inventory or deletion, automation, SDK clients, structured I/O, or headless lifecycle behavior.
- ▌ Implementation Runtime Core · greenpau bundleImplement the shared session runtime from process startup through context composition and the recursive model loop. Use when defining runtime ownership, tracing a turn across bootstrap, state, and query boundaries, or deciding whether a core behavior belongs to startup/settings, live state/context, or model orchestration.
- ▌ Implementation Task Runtime · greenpau bundleImplement asynchronous work and its distinct durability classes, including local shells, local and remote agents, teammates, workflows, monitors, main-session backgrounding, output storage, polling, notifications, cancellation, crash windows, recovery hints, and garbage collection. Use when work must outlive a model call or be resumed, stopped, inspected, or reported later.
- ▌ Implementation Tool Catalog · greenpau bundleImplement the complete model-callable capability catalog, its deterministic registry assembly, per-tool semantic contracts, feature and profile gates, and output limits. Use when adding, porting, filtering, classifying, or testing a built-in, MCP, shell, file, web, task, coordination, planning, worktree, or optional tool.
- ▌ Implementation Observability · greenpau bundleImplement usage and cost accounting, privacy filtering, diagnostics, logs, traces, metrics, feature-evaluation evidence, health reporting, disk fallback, and update-check observation. Use when adding an event, sink, counter, profiler, diagnostic command, or operational alert without making observability a correctness dependency.
- ▌ Implementation Plugins Hooks · greenpau bundleImplement plugin manifests, marketplaces, installation registries, dependency and policy checks, cache lifecycle, component loading, and the complete hook event protocol. Use when implementing extension packaging, plugin updates, or lifecycle interception around runtime events.
- ▌ Implementation Remote Bridge · greenpau bundleImplement remote-control bridging and remote session placement while preserving session identity, worker leases, ordered replay, permission and control relays, reconnect behavior, and local safety authority. Use when implementing or reviewing environment-backed or environment-less bridges, bridge daemons and REPL remote control, Hybrid WebSocket/HTTP or CCR SSE transports, remote viewers, direct-connect servers, SSH sessions, or teleport/resume across machines.
- ▌ Implementation Skills Output · greenpau bundleImplement or diagnose repo-local skill discovery from .codex/skills; skill invocation and isolation; prompt listing; and output-style discovery and prompt transformation. Use when skills are missing, unexpectedly unavailable, malformed, or rooted incorrectly, or when implementing reusable instruction packages or user-selected response styles.
- ▌ Implementation State Context · greenpau bundleImplement process bootstrap facts, observable application state, state-change reactions, working-directory identity, and model context assembly. Use when implementing session state, selectors, permission context storage, prompt precedence, cached and volatile prompt sections, repository context, or model token limits.
- ▌ Implementation Tool Protocol · greenpau bundleImplement the common protocol for model-callable tools, including descriptors, aliases, schema and semantic validation, hook ordering, permission composition, scheduling, progress, cancellation, output persistence, and result pairing. Use when implementing or auditing the execution framework shared by all tools.
- ▌ Implementation User Surfaces · greenpau bundleImplement the observable product surfaces that adapt the shared session runtime to an interactive terminal, headless CLI, structured SDK stream, or feature-gated optional experience. Use when selecting a product entry surface, preserving cross-surface semantics, or deciding which specialized surface contract must be loaded.
- ▌ Implementation Commands Input · greenpau bundleImplement user-invoked command discovery and execution together with prompt normalization, slash parsing, skill argument expansion, attachments, pasted content, hooks, and queued input priorities. Use when porting slash commands, input submission, command palettes, plugin or skill commands, remote-safe routing, or mid-turn user messages.
- ▌ Implementation Extension Plane · greenpau bundleImplement the session-scoped extension plane that discovers, attributes, filters, names, merges, and invalidates commands, skills, output styles, plugins, hooks, MCP providers, and language servers. Use when deciding how extension contributions become reachable without weakening core runtime contracts.
- ▌ Implementation Terminal Engine · greenpau bundleImplement the retained-mode terminal renderer and interactive input stack, including layout, frame diffing, ANSI lifecycle, keyboard and mouse parsing, focus, selection, prompt editing, keybindings, Vim mode, paste handling, and durable prompt history. Use for terminal rendering, editor behavior, shortcut resolution, input protocol, or history implementation.
- ▌ Implementation Interactive Repl · greenpau bundleImplement the interactive terminal session adapter: setup dialogs, REPL application state, guarded prompt dispatch, command queues, local and remote session adapters, cancellation, message projection, streaming display, fullscreen transcript, overlays, and dialog focus. Use for interactive conversation or terminal UI behavior above the renderer.
- ▌ Implementation Startup Settings · greenpau bundleImplement startup configuration, settings precedence, managed policy, remote policy refresh, settings synchronization, trust-sensitive derivation, and live reload. Use when implementing or auditing any behavior whose effective value depends on settings source, policy authority, startup ordering, or configuration changes.
- ▌ Implementation Conformance Audit · greenpau bundleAudit or refresh AgentX implementation coverage, route reachability, contract traceability, diagram validity, and conformance evidence. Use after changing application source, AGENTS.md, an implementation skill, a Draw.io diagram, or a runtime boundary that changes documented behavior.
- ▌ Implementation Memory Compaction · greenpau bundleImplement context-pressure management and derived memory, including persistent file memory, relevance recall, shared team-memory synchronization, automatic dream consolidation, token estimation, automatic and manual compaction, session-memory compaction, microcompaction, context collapse, restoration, and cleanup. Use when retaining useful knowledge or reducing model context without confusing derived artifacts with authoritative history.
- ▌ Implementation Capability Runtime · greenpau bundleImplement the capability boundary that turns model requests into validated, authorized, observable, and recoverable work. Use when tracing a tool call through registry resolution, permissions, hooks, sandboxing, execution, result normalization, or long-lived task creation.
- ▌ Implementation Platform Lifecycle · greenpau bundleImplement portable filesystem, process, terminal, executable, lock, notification, sleep-prevention, updater-mechanism, signal, and shutdown behavior. Use when implementing an operating-system adapter, owning external resources, handling cancellation or exit, or defining safe degradation on unsupported platforms.
- ▌ Implementation Distributed Runtime · greenpau bundleImplement execution that crosses process, worktree, machine, or service boundaries while preserving the shared session, capability, permission, task, and transcript contracts. Use for remote control, bridge sessions, reconnect and replay, subagents, teams, coordinators, mailboxes, worktrees, or distributed cancellation and result synthesis.
- ▌ Implementation Permissions Sandbox · greenpau bundleImplement permission modes, scoped rules, path and shell analysis, approval decisions, auto-mode safety, protected resources, and operating-system sandbox selection. Use when implementing or reviewing whether a capability may run, what must prompt, and which isolation boundary applies.
- ▌ Implementation Transcript Recovery · greenpau bundleImplement the append-only session transcript and recovery protocol, including native session inventory and deletion, message graph links, sidechains, metadata events, deduplication, write queues, branches, tombstones, compact and snip relinking, resume, fork, worktree restoration, and compatibility repair. Use when persisting, enumerating, deleting, or rebuilding a conversation after interruption.
- ▌ Implementation Optional Experiences · greenpau bundleImplement optional or build-specific user experiences without weakening the core runtime, including persistent assistant/viewer mode, paged remote assistant history, voice push-to-talk and transcription, terminal companions, and supported external-build stubs. Use when implementing, gating, disabling, or testing these experiences.