[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_231":232,"_233":234},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":59,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",28,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":20,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":20,"_35":36},"deleted",false,"deletedHere","path","skills/verify/SKILL.md","latestPath","fileId","3dde79a8-9dc2-11f1-a22f-1607ee4eb77e","name","SKILL.md","fileType","content","---\nname: verify\ndescription: Verify claims, code changes, bug fixes, workflows, and release readiness with independent evidence. Use when asked to verify, QA, smoke test, prove a fix, reproduce a product issue, or check non-trivial work before completion.\n---\n\n# Verify\n\nUse this skill to prove whether a claim, code change, bug fix, test result, workflow, product issue, or release/readiness assertion is actually correct. Quire is the independent read-only QA, verification, and triage agent for this workflow. Quire does not implement fixes. Quire reports pass, fail, blocked, or partial results honestly with evidence.\n\n## Recommended path\n\nIf your harness exposes a native subagent named `quire`, delegate the verification or reproduction brief to that subagent and wait for its terminal handoff. This is mandatory when available. Quire performs deep verification: a normal Run can easily exceed five minutes and may take considerably longer, so elapsed time or a short task/client timeout is not evidence of failure. The skill's job is to recognize that independent evidence is needed; the `quire` subagent's job is to run the Quire CLI, wait patiently to a terminal status, and return the evidence-backed handoff.\n\nUse CLI fallback only when no native `quire` subagent is available. Do not run the Quire CLI directly from the parent session when a native `quire` subagent is available.\n\nIf the caller asks whether the Quire agent/subagent path was used, answer from your actual invocation path. If you used a native `quire` child task/subagent, report that the native Quire subagent path was used even when `quire wait` returns metadata for an older run whose internal harness was `pi`, Codex, or another agent. Treat old run metadata as separate historical context, not as evidence that the current adapter path was not used.\n\nWhen communicating Quire results to the user, produce a compact verification report like a QA test run summary: verdict, checks run, pass/fail/blocked counts when available, known non-regressions, synced Quire run link from `webUrl`, `caseUrl`, or `sync.caseUrl`, report/handoff markdown path or excerpt, and useful artifacts such as screenshots, recordings, traces, console/network output, or other evidence.\n\n## When to use this skill\n\nUse this skill when the user asks to verify, QA, smoke test, validate, prove a fix, check a workflow, reproduce a visible product issue, ask Quire, run Quire, or get a Quire run id/verdict/handoff.\n\nAlso use Quire before declaring non-trivial coding work complete when independent verification would materially increase confidence, especially for UI/workflow changes, bug fixes, failing or flaky tests, auth, security, permissions, billing, data loss, migrations, concurrency, integrations, mobile behavior, or release-readiness work.\n\nDo not use Quire for every tiny task. Usually skip independent verification for purely conversational answers, simple docs/formatting edits, trivial mechanical changes where local checks are enough, or repeated verification of the same unchanged diff. Exception: if the user explicitly asks for Quire or independent verification, use Quire anyway.\n\n## Hard requirement\n\nIf the caller explicitly asks for Quire or independent verification, do not substitute your own direct checks, web fetches, curl commands, tests, browser checks, or manual reasoning and claim that is equivalent. You may do basic preparation, but Quire itself must be invoked.\n\nWhen Quire owns reproduction or verification, avoid duplicating the same checks yourself while it is running. Do not run parallel curl/browser/source-tracing/build checks for the same claim just because Quire is still active. Wait for the handoff, then use your own commands only to implement the fix, handle a Quire-blocked gap, or do a final narrow packaging check the project requires.\n\n## Verification brief template\n\n- Claim/change/bug to verify:\n- Target URL, command, app, route, screen, or environment:\n- Relevant files/paths or PR context:\n- Commands already run:\n- Expected behavior:\n- Known risks or edge cases:\n- Evidence to capture: screenshots, browser console, network, CLI output, mobile state, logs, deterministic checks, or handoff summary.\n- Constraints: read-only verification; do not edit code; production mutation safety.\n\n## CLI fallback\n\nUse CLI fallback only when the native `quire` subagent is unavailable.\n\nFor a new verification or reproduction run, prefer detached JSON mode and wait for the terminal handoff:\n\n```bash\nrun_json=$(quire run --detach --json --url \"\" \"\")\nrun_id=$(printf '%s' \"$run_json\" | jq -r '.runId')\nquire wait \"$run_id\" --json\n```\n\nIf there is no URL, omit `--url` and include target context in the natural-language request.\n\nIf the caller provides an existing Quire run id, do not start a new run and do not use `quire status` as the final result. Wait for and return the handoff with:\n\n```bash\nquire wait \"\" --json\n```\n\nUse `finalHandoff.handoffMarkdown` from `quire wait --json` as the evidence-backed result when present.\n\nThe JSON output includes `webUrl` / `caseUrl` when the run has synced to Quire's web app. Use that link as the shareable evidence URL in user-facing summaries.\n\nTerminal statuses are `completed`, `failed`, `canceled`, and `stale`. Wait patiently: Quire is another agent doing real QA work and can take several minutes. Do not start a duplicate run for the same claim just because the first run is still active.\n\nIf Quire reports `EROFS`, `EACCES`, or another write error under `~/.local/share/quire/runs`, your agent sandbox likely made the default run store read-only. Retry with a temporary run store and reuse the same value for every lifecycle command:\n\n```bash\nquire_runs_dir=$(mktemp -d -t quire-runs-XXXXXX)\nQUIRE_RUNS_DIR=$quire_runs_dir quire run --detach --json --url \"\" \"\"\nQUIRE_RUNS_DIR=$quire_runs_dir quire wait \"\" --json\n```\n\n## Bug-fix loop\n\nFor user-reported bugs on real product surfaces, the ideal loop is:\n\n1. Use Quire to reproduce the symptom and identify the failing surface, request, console/runtime error, command, or workflow boundary.\n2. Wait for Quire's reproduction handoff before doing your own code tracing unless the user explicitly asks you to investigate in parallel or the run is blocked.\n3. Make the smallest code/config/content fix informed by that evidence.\n4. Use Quire again against the fixed local/preview target to verify the original symptom is gone. Treat unrelated warnings or secondary issues as follow-up notes unless they caused the reported bug or block verification.\n\n## Return format\n\n- Native Quire adapter invocation: yes/no/unavailable, with evidence.\n- Verdict: pass, fail, blocked, partial, or setup-blocked.\n- Quire run id.\n- Quire web URL when present.\n- What Quire verified or reproduced, including checks run and pass/fail/blocked counts when available.\n- Key evidence, artifacts, report, screenshots, recordings, traces, or handoff excerpt.\n- Known non-regressions or pre-existing issues, when relevant.\n- Follow-up actions for the implementation agent.\n","---\nname: verify\ndescription: Verify claims, code changes, bug fixes, workflows, and release readiness with independent evidence. Use when asked to verify, QA, smoke test, prove a fix, reproduce a product issue, or check non-trivial work before completion.\n---\n\n# Verify\n\nUse this skill to prove whether a claim, code change, bug fix, test result, workflow, product issue, or release/readiness assertion is actually correct. Quire is the independent read-only QA, verification, and triage agent for this workflow. Quire does not implement fixes. Quire reports pass, fail, blocked, or partial results honestly with evidence.\n\n## Recommended path\n\nIf your harness exposes a native subagent named `quire`, delegate the verification or reproduction brief to that subagent and wait for its terminal handoff. This is mandatory when available. Quire performs deep verification: a normal Run can easily exceed five minutes and may take considerably longer, so elapsed time or a short task/client timeout is not evidence of failure. The skill's job is to recognize that independent evidence is needed; the `quire` subagent's job is to run the Quire CLI, wait patiently to a terminal status, and return the evidence-backed handoff.\n\nUse CLI fallback only when no native `quire` subagent is available. Do not run the Quire CLI directly from the parent session when a native `quire` subagent is available.\n\nIf the caller asks whether the Quire agent/subagent path was used, answer from your actual invocation path. If you used a native `quire` child task/subagent, report that the native Quire subagent path was used even when `quire wait` returns metadata for an older run whose internal harness was `pi`, Codex, or another agent. Treat old run metadata as separate historical context, not as evidence that the current adapter path was not used.\n\nWhen communicating Quire results to the user, use Quire's terminal handoff substantially intact as the primary body of the response. When `finalHandoff.handoffMarkdown` is present, include that complete markdown rather than replacing it with a compact summary or excerpt. A short parent-facing header may add the run id, synced Quire run link from `webUrl`, `caseUrl`, or `sync.caseUrl`, verdict, and counts, but retain the handoff's evidence references, blockers, known non-regressions, and next actions so the parent and user receive the context Quire produced.\n\n## When to use this skill\n\nUse this skill when the user asks to verify, QA, smoke test, validate, prove a fix, check a workflow, reproduce a visible product issue, ask Quire, run Quire, or get a Quire run id/verdict/handoff.\n\nAlso use Quire before declaring non-trivial coding work complete when independent verification would materially increase confidence, especially for UI/workflow changes, bug fixes, failing or flaky tests, auth, security, permissions, billing, data loss, migrations, concurrency, integrations, mobile behavior, or release-readiness work.\n\nDo not use Quire for every tiny task. Usually skip independent verification for purely conversational answers, simple docs/formatting edits, trivial mechanical changes where local checks are enough, or repeated verification of the same unchanged diff. Exception: if the user explicitly asks for Quire or independent verification, use Quire anyway.\n\n## Hard requirement\n\nIf the caller explicitly asks for Quire or independent verification, do not substitute your own direct checks, web fetches, curl commands, tests, browser checks, or manual reasoning and claim that is equivalent. You may do basic preparation, but Quire itself must be invoked.\n\nWhen Quire owns reproduction or verification, avoid duplicating the same checks yourself while it is running. Do not run parallel curl/browser/source-tracing/build checks for the same claim just because Quire is still active. Wait for the handoff, then use your own commands only to implement the fix, handle a Quire-blocked gap, or do a final narrow packaging check the project requires.\n\n## Verification brief template\n\n- Claim/change/bug to verify:\n- Target URL, command, app, route, screen, or environment:\n- Relevant files/paths or PR context:\n- Commands already run:\n- Expected behavior:\n- Known risks or edge cases:\n- Evidence to capture: screenshots, browser console, network, CLI output, mobile state, logs, deterministic checks, or handoff summary.\n- Constraints: read-only verification; do not edit code; production mutation safety.\n\n## CLI fallback\n\nUse CLI fallback only when the native `quire` subagent is unavailable.\n\nFor a new verification or reproduction run, prefer detached JSON mode and wait for the terminal handoff:\n\n```bash\nrun_json=$(quire run --detach --json --url \"\" \"\")\nrun_id=$(printf '%s' \"$run_json\" | jq -r '.runId')\nquire wait \"$run_id\" --json\n```\n\nIf there is no URL, omit `--url` and include target context in the natural-language request.\n\nIf the caller provides an existing Quire run id, do not start a new run and do not use `quire status` as the final result. Wait for and return the handoff with:\n\n```bash\nquire wait \"\" --json\n```\n\nUse `finalHandoff.handoffMarkdown` from `quire wait --json` as the evidence-backed result when present.\n\nThe JSON output includes `webUrl` / `caseUrl` when the run has synced to Quire's web app. Use that link as the shareable evidence URL in user-facing summaries.\n\nTerminal statuses are `completed`, `failed`, `canceled`, and `stale`. Wait patiently: Quire is another agent doing real QA work and can take several minutes. Do not start a duplicate run for the same claim just because the first run is still active.\n\nIf Quire reports `EROFS`, `EACCES`, or another write error under `~/.local/share/quire/runs`, your agent sandbox likely made the default run store read-only. Retry with a temporary run store and reuse the same value for every lifecycle command:\n\n```bash\nquire_runs_dir=$(mktemp -d -t quire-runs-XXXXXX)\nQUIRE_RUNS_DIR=$quire_runs_dir quire run --detach --json --url \"\" \"\"\nQUIRE_RUNS_DIR=$quire_runs_dir quire wait \"\" --json\n```\n\n## Bug-fix loop\n\nFor user-reported bugs on real product surfaces, the ideal loop is:\n\n1. Use Quire to reproduce the symptom and identify the failing surface, request, console/runtime error, command, or workflow boundary.\n2. Wait for Quire's reproduction handoff before doing your own code tracing unless the user explicitly asks you to investigate in parallel or the run is blocked.\n3. Make the smallest code/config/content fix informed by that evidence.\n4. Use Quire again against the fixed local/preview target to verify the original symptom is gone. Treat unrelated warnings or secondary issues as follow-up notes unless they caused the reported bug or block verification.\n\n## Return format\n\n- Native Quire adapter invocation: yes/no/unavailable, with evidence.\n- Verdict: pass, fail, blocked, partial, or setup-blocked.\n- Quire run id.\n- Quire web URL when present.\n- What Quire verified or reproduced, including checks run and pass/fail/blocked counts when available.\n- Key evidence, artifacts, report, screenshots, recordings, traces, or handoff excerpt.\n- Known non-regressions or pre-existing issues, when relevant.\n- Follow-up actions for the implementation agent.\n","createdAt",["D",1787754311953],"branchVersion","branchId","58d59cf8-ab3f-4c4c-9d93-4fdae0fde96d","id","4c9a59ba-656d-4c73-856b-e45a9ba4af84","quire-agent-skills",["D",1787359107320],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Public Quire agent skills","imageUrl","3ee322c5-8742-48e0-86c7-5f3ae129683b","pinnedFileId","ca5158ac-9dc1-11f1-9adb-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","f427167a-3263-4778-81d8-f79626323ff5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":55,"_102":103,"_104":25},"branch",{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned",39,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kamalnrf","handle","displayName","Kamal","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yaVpXT3l1d2hWSFdtWTNoZFIwZ0lFUUhOd2oifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":227,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":228,"_81":229,"_83":230,"_85":25},"tree",[168,175,176],"files",[168,169,170,171,172,173,174,175,176],"counts",{"_158":63,"_159":138,"_160":63,"_161":162,"_163":164},"contents",[129,130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{"_57":128},"skills.quire.sh",{"_43":151,"_32":152,"_30":153,"_134":-5,"_41":42,"_40":154,"_136":59,"_38":155,"_13":63,"_34":156,"_35":-5,"_24":25,"_141":-5,"_27":157},{"_43":144,"_32":145,"_30":146,"_134":-5,"_41":42,"_40":147,"_136":59,"_38":148,"_13":63,"_34":20,"_35":149,"_24":25,"_141":-5,"_27":150},{"_43":132,"_32":133,"_30":57,"_134":-5,"_41":42,"_40":135,"_136":59,"_38":137,"_13":138,"_34":139,"_35":140,"_24":25,"_141":142,"_27":143},"a1b6abf6-2fbc-467e-86b1-4c56072c7121","main.ts","parentId",9,"latest",["D",1787359366500],1,"http","import { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst DISCOVERY_SCHEMA = \"https://schemas.agentskills.io/discovery/0.2.0/schema.json\";\nconst CACHE_CONTROL = \"public, max-age=300\";\n\nconst SKILLS = [\n { name: \"quire-setup\", slug: \"setup\", file: \"/skills/quire-setup/SKILL.md\" },\n { name: \"verify\", slug: \"verify\", file: \"/skills/verify/SKILL.md\" },\n { name: \"triage\", slug: \"triage\", file: \"/skills/triage/SKILL.md\" },\n] as const;\n\ntype SkillDefinition = (typeof SKILLS)[number];\ntype LoadedSkill = SkillDefinition & { description: string; markdown: string; digest: string };\n\nconst corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, HEAD, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nexport default async function (request: Request): Promise {\n if (request.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders });\n }\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n return jsonResponse(request, { error: \"Method not allowed\" }, 405, { Allow: \"GET, HEAD, OPTIONS\" });\n }\n\n try {\n return await routeRequest(request);\n } catch {\n return jsonResponse(request, { error: \"Unable to load the skill catalog\" }, 500, {\n \"Cache-Control\": \"no-store\",\n });\n }\n}\n\nasync function routeRequest(request: Request): Promise {\n const url = new URL(request.url);\n const path = url.pathname;\n\n if (path === \"/.well-known/agent-skills/index.json\") {\n return discoveryResponse(request, await loadSkills(SKILLS));\n }\n\n for (const definition of SKILLS) {\n if (path === \"/\" + definition.slug + \"/\") {\n return Response.redirect(new URL(\"/\" + definition.slug, url).toString(), 308);\n }\n if (path === \"/\" + definition.slug) {\n return skillResponse(request, await loadSkill(definition));\n }\n if (path === \"/.well-known/agent-skills/\" + definition.name + \"/SKILL.md\") {\n return skillResponse(request, await loadSkill(definition));\n }\n if (path === \"/\" + definition.slug + \"/.well-known/agent-skills/index.json\") {\n return discoveryResponse(request, [await loadSkill(definition)]);\n }\n }\n\n if (path === \"/\") {\n return catalogResponse(request, url.origin, await loadSkills(SKILLS));\n }\n\n return jsonResponse(request, { error: \"Not found\" }, 404);\n}\n\nasync function loadSkills(definitions: readonly SkillDefinition[]): Promise {\n return Promise.all(definitions.map(loadSkill));\n}\n\nasync function loadSkill(definition: SkillDefinition): Promise {\n const markdown = await readFile(definition.file);\n const frontmatter = readFrontmatter(markdown);\n if (frontmatter.name !== definition.name) {\n throw new Error(\"Skill name mismatch\");\n }\n return {\n ...definition,\n description: frontmatter.description,\n markdown,\n digest: await sha256Digest(markdown),\n };\n}\n\nfunction readFrontmatter(markdown: string): { name: string; description: string } {\n const match = markdown.match(/^---\\n([\\s\\S]*?)\\n---\\n/);\n if (!match) throw new Error(\"SKILL.md is missing frontmatter\");\n\n const fields = new Map();\n for (const line of match[1].split(\"\\n\")) {\n const separator = line.indexOf(\":\");\n if (separator === -1) continue;\n fields.set(line.slice(0, separator).trim(), line.slice(separator + 1).trim());\n }\n\n const name = fields.get(\"name\") ?? \"\";\n const description = fields.get(\"description\") ?? \"\";\n if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name) || description.length === 0 || description.length > 1024) {\n throw new Error(\"SKILL.md has invalid frontmatter\");\n }\n return { name, description };\n}\n\nfunction skillResponse(request: Request, skill: LoadedSkill): Response {\n return bodyResponse(request, skill.markdown, {\n headers: responseHeaders(\"text/markdown; charset=utf-8\", {\n ETag: '\"' + skill.digest + '\"',\n }),\n });\n}\n\nfunction discoveryResponse(request: Request, skills: LoadedSkill[]): Response {\n const index = {\n $schema: DISCOVERY_SCHEMA,\n skills: skills.map((skill) => ({\n name: skill.name,\n type: \"skill-md\",\n description: skill.description,\n url: \"/\" + skill.slug,\n digest: skill.digest,\n })),\n };\n return bodyResponse(request, JSON.stringify(index, null, 2) + \"\\n\", {\n headers: responseHeaders(\"application/json; charset=utf-8\"),\n });\n}\n\nfunction catalogResponse(request: Request, origin: string, skills: LoadedSkill[]): Response {\n const items = skills\n .map((skill) => {\n const url = origin + \"/\" + skill.slug;\n return (\n '

' + escapeHtml(skill.name) + \"

\" +\n \"

\" + escapeHtml(skill.description) + \"

\" +\n \"npx skills add \" + escapeHtml(url) + \"

\"\n );\n })\n .join(\"\");\n const html = [\n \"\",\n \"\",\n \"Quire agent skills\",\n \"\",\n \"

Quire agent skills

\",\n \"

Public skills for setting up, verifying, and triaging software with Quire.

\",\n items,\n \"

Agent Skills Discovery RFC v0.2 index

\",\n \"

\",\n ].join(\"\");\n return bodyResponse(request, html, {\n headers: responseHeaders(\"text/html; charset=utf-8\"),\n });\n}\n\nfunction jsonResponse(\n request: Request,\n value: unknown,\n status: number,\n extraHeaders: Record = {},\n): Response {\n return bodyResponse(request, JSON.stringify(value) + \"\\n\", {\n status,\n headers: responseHeaders(\"application/json; charset=utf-8\", extraHeaders),\n });\n}\n\nfunction bodyResponse(request: Request, body: string, init: ResponseInit): Response {\n return new Response(request.method === \"HEAD\" ? null : body, init);\n}\n\nfunction responseHeaders(contentType: string, extra: Record = {}): HeadersInit {\n return {\n ...corsHeaders,\n \"Cache-Control\": CACHE_CONTROL,\n \"Content-Type\": contentType,\n \"X-Content-Type-Options\": \"nosniff\",\n ...extra,\n };\n}\n\nasync function sha256Digest(value: string): Promise {\n const hash = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value));\n const hex = Array.from(new Uint8Array(hash))\n .map((byte) => byte.toString(16).padStart(2, \"0\"))\n .join(\"\");\n return \"sha256:\" + hex;\n}\n\nfunction escapeHtml(value: string): string {\n return value.replace(/[&<>\"]/g, (character) => ({\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n '\"': \""\",\n })[character] ?? character);\n}\n","label","quire-skills",[133],"7669db79-6ce8-4a69-b04b-0646662d0718","README.md","6e9f36ae-9dc2-11f1-9135-1607ee4eb77e",10,["D",1787359383021],"# Quire agent skills\n\nThe public source of truth for Quire's installable Agent Skills.\n\n## Skills\n\n- `quire-setup` at `/setup`\n- `verify` at `/verify`\n- `triage` at `/triage`\n\n## Discovery\n\nThis Val implements version 0.2 of the [Agent Skills Discovery RFC](https://github.com/cloudflare/agent-skills-discovery-rfc):\n\n- `/.well-known/agent-skills/index.json` lists the full catalog.\n- `/{slug}/.well-known/agent-skills/index.json` lists one skill for scoped installers such as `npx skills`.\n- `/.well-known/agent-skills/{name}/SKILL.md` provides the conventional artifact path.\n\nThe friendly skill URLs return the same raw Markdown artifacts. The production custom domain is `https://skills.quire.sh`.\n",[145],"65f43ebe-a35f-475a-b973-62a0afedb13e","skills","1c8937d4-9dc2-11f1-bcad-1607ee4eb77e",2,["D",1787359245306],"directory",[152],"pulls","branches","forks","envVars",{"_165":63,"_167":63},"connections",{"_165":63,"_166":63},"count","unfilledCount","emptyCount",{"_43":151,"_32":152,"_30":153,"_134":-5,"_41":42,"_40":154,"_136":59,"_38":224,"_13":63,"_34":156,"_35":-5,"_24":25,"_141":-5,"_178":225,"_27":226},{"_43":219,"_32":218,"_30":211,"_134":153,"_41":42,"_40":220,"_136":59,"_38":221,"_13":63,"_34":156,"_35":-5,"_24":25,"_141":-5,"_178":222,"_27":223},{"_43":209,"_32":33,"_30":210,"_134":211,"_41":42,"_40":212,"_136":25,"_38":213,"_13":214,"_34":20,"_35":215,"_24":25,"_141":-5,"_178":216,"_27":217},{"_43":204,"_32":203,"_30":197,"_134":153,"_41":42,"_40":205,"_136":59,"_38":206,"_13":63,"_34":156,"_35":-5,"_24":25,"_141":-5,"_178":207,"_27":208},{"_43":195,"_32":33,"_30":196,"_134":197,"_41":42,"_40":198,"_136":25,"_38":199,"_13":63,"_34":20,"_35":200,"_24":25,"_141":-5,"_178":201,"_27":202},{"_43":190,"_32":189,"_30":185,"_134":153,"_41":42,"_40":191,"_136":59,"_38":192,"_13":63,"_34":156,"_35":-5,"_24":25,"_141":-5,"_178":193,"_27":194},{"_43":184,"_32":33,"_30":31,"_134":185,"_41":42,"_40":14,"_136":25,"_38":186,"_13":154,"_34":20,"_35":37,"_24":25,"_141":-5,"_178":187,"_27":188},{"_43":144,"_32":145,"_30":146,"_134":-5,"_41":42,"_40":147,"_136":59,"_38":181,"_13":63,"_34":20,"_35":149,"_24":25,"_141":-5,"_178":182,"_27":183},{"_43":132,"_32":133,"_30":57,"_134":-5,"_41":42,"_40":135,"_136":59,"_38":177,"_13":138,"_34":139,"_35":140,"_24":25,"_141":142,"_178":179,"_27":180},["D",1787359366500],"children",[],[133],["D",1787359383021],[],[145],"b2401de1-5bf6-4e6a-a04d-d09d02251519","1d08e0c4-9dc2-11f1-9ffa-1607ee4eb77e",["D",1787754311953],[],[152,189,33],"verify","e4a27cb5-bbbc-443a-8f47-2933e524f2a6",4,["D",1787359246143],[174],[152,189],"fa44158f-c5a9-4af7-8999-e88f1305b3cc","3e18abc8-9dc2-11f1-8943-1607ee4eb77e","1d4296e8-9dc2-11f1-9ffa-1607ee4eb77e",8,["D",1787359301613],"---\nname: triage\ndescription: Triage bugs, regressions, flaky behavior, and broken workflows with independent, reproduce-first evidence. Use when asked to triage, debug, diagnose, investigate a failure, reproduce a bug, or identify likely ownership and next steps.\n---\n\n# Triage\n\nUse this skill for evidence-backed triage and disciplined diagnosis: reproduce the failure, minimize the loop, form hypotheses, instrument only what distinguishes them, identify likely ownership and next steps, fix, and regression-test. Quire is the independent evidence collector for this workflow when a fresh reproduction, browser/API/mobile check, or external verification handoff would materially improve confidence.\n\n## When to use Quire during triage\n\nUse the native Quire adapter when you need an independent read-only investigator. Depending on the harness, the adapter is a subagent or a tool named `quire` that launches the same Quire CLI run:\n\n- reproduce a reported bug or flaky workflow;\n- verify a suspected fix against the real app, browser, API, CLI, or mobile surface;\n- gather evidence such as screenshots, recordings, console output, terminal logs, or a concise handoff;\n- check whether a failure is environment/setup-blocked versus a product bug;\n- produce a run id and terminal verdict that another agent can use in an implementation/verification loop.\n\nDo not outsource implementation to Quire. Quire should not edit code. The parent triage agent owns hypotheses, code changes, and regression tests.\n\n## Recommended invocation\n\n1. Build or identify the best reproduction loop you can from the report.\n2. If this harness exposes a native subagent named `quire`, delegate a concise reproduction or verification brief to that subagent and wait for its handoff. If it exposes a native tool named `quire`, invoke that tool with the brief and optional caller-owned URL; the tool starts one run and returns its terminal handoff. The native adapter is mandatory when available.\n3. If no native `quire` adapter is available, use the Quire CLI fallback from https://skills.quire.sh/verify.\n4. Use Quire's result as evidence, not as a substitute for understanding the code path. When communicating the result, surface the synced Quire run link from `webUrl`, `caseUrl`, or `sync.caseUrl` when present, and mention useful report artifacts such as screenshots, recordings, traces, or the handoff markdown when they help the user review the diagnosis. If Quire reports blocked, preserve that honestly and fix the setup or ask for the missing environment.\n\n## Triage brief template\n\n- Failure or regression to reproduce:\n- User-visible symptom:\n- Target URL, command, app, or environment:\n- Steps already tried:\n- Expected behavior:\n- Actual behavior:\n- Evidence to capture:\n- Constraints: read-only investigation; do not edit code.\n\n## CLI fallback\n\nUse CLI fallback only if the native `quire` adapter is unavailable. Prefer detached JSON mode and wait for the terminal handoff:\n\n```bash\nrun_json=$(quire run --detach --json --url \"\" \"\")\nrun_id=$(printf '%s' \"$run_json\" | jq -r '.runId')\nquire wait \"$run_id\" --json\n```\n\nIf the caller provides an existing Quire run id, do not start a new run and do not use `quire status` as the final result:\n\n```bash\nquire wait \"\" --json\n```\n\nFor more CLI details, sandbox recovery, and handoff interpretation, follow https://skills.quire.sh/verify.\n",[],[152,203,33],"triage","d8ba9059-b575-4994-9e16-dd28db3ff50d",5,["D",1787359246523],[172],[152,203],"93ce5dd1-f53b-40a1-a277-a490e38096bb","24e00084-9dc2-11f1-bc54-1607ee4eb77e","1cd182d2-9dc2-11f1-b21c-1607ee4eb77e",26,["D",1787752971900],16,"---\nname: quire-setup\ndescription: Set up the current machine and repository so Quire can run focused triage, verification, and investigation work. Use when a user asks to connect or set up Quire, install the current coding-agent integration, create .quire/runbook.md, or prepare Quire for a repository.\n---\n\n# Quire setup\n\nSet up Quire end to end: establish a stable CLI, install the current harness integration, establish account and model readiness, create concise project guidance, run doctor, and finish with deterministic readiness plus a concrete optional first-verification suggestion.\n\nThe parent coding agent owns setup and target prerequisites. Quire receives an already-running target through the request, `--url`, or `QUIRE_WEB_URL`; it does not install dependencies, manage secrets, migrate or seed data, create fixtures, guess ports, or start, restart, or supervise the target.\n\n`.quire/runbook.md` is runtime guidance for the Quire Agent. It contains only durable, repository-specific facts that help the Agent recognize and access the target in its Run brief, exercise important workflows safely, recognize success, and choose trusted checks. Generic Quire behavior stays in Quire's own instructions.\n\n## Setup workflow\n\n### 1. Establish the project and harness\n\n1. Use the current Git top-level as the project root. Outside Git, use an explicit caller-provided root; never infer user-home scope.\n2. Identify the active harness as exactly one of `amp`, `claude`, `codex`, `cursor`, `opencode`, or `pi`. Ask only when the environment does not make it clear.\n3. Run `quire --version`. Do not use `npx` as a readiness probe: adapters need a stable `quire` command later.\n4. If the command is missing, explain that `npm install -g @quireco/cli` writes the global package and npm cache, then ask permission for that command. If permission is declined, stop before installing an adapter that cannot run.\n5. Install the selected project integration with:\n\n ```sh\n quire agent install --harness --project \"$project_root\" --json\n ```\n\n Project setup authorizes these repository-local files. Confirm every returned path remains under the project root and do not stage or commit them. The installer supports project-local integration only.\n6. Determine whether the selected harness can load newly written agent definitions in its current process. Use the harness's known capability; do not probe by dispatching a task or starting a Run.\n7. If it cannot hot-load them, record harness activation as `restart required`. Continue the remaining deterministic setup in the current parent session, but do not invoke the Quire adapter, silently fall back to a generic agent, or claim native Quire invocation. After the readiness checks, tell the user to restart or reload the harness and resume from the ready integration. Only a session in which the adapter is active may offer the first verification.\n\nThe installer owns the shared verify and triage skills, the selected harness adapter, and the managed Quire block in root `AGENTS.md`. Do not recreate or manually repair those files. Report malformed managed markers from the installer.\n\n### 2. Establish Quire account and model readiness\n\nEvery Run requires valid Quire account authentication, a pinned workspace, and one available hosted model source.\n\nRun `quire whoami --json` and use its server-verified identity, workspace, and `modelAccess` rather than inferring readiness from local files. This check may refresh stale local Quire auth. Run `quire doctor --json` after account auth is ready; it may create the configured local runs directory. These are expected machine-local setup checks. Never read or print auth files or secret values.\n\n- If account auth is missing or invalid, explain that `quire login` opens interactive authentication and writes local Quire auth, then ask permission immediately before running it.\n- In a remote environment without browser login, ask the user to configure `QUIRE_API_TOKEN` through that environment's secret UI. Never request or print the token; request outbound access to the configured Quire API host when egress is restricted.\n- Prefer a connected personal ChatGPT subscription when selected; it does not require Quire Credits.\n- When personal ChatGPT needs connection or reconnection, direct the user to `https://quire.sh/dashboard?settings=connections`. The user completes provider authorization, then the agent reruns the readiness checks.\n- When managed inference is selected, require its reported readiness and a positive Quire Credits balance. Direct an owner or admin to `https://quire.sh/dashboard?settings=billing` only when fresh CLI output requires a top-up.\n- Follow the exact login, connection, billing, or retry action from fresh `whoami` and doctor output. Do not report readiness from stale output.\n\nQuire account auth, hosted model access, and target-product test accounts are separate concerns.\n\n### 3. Build the project runbook\n\nInspect before asking: read root guidance, the existing runbook when present, product docs, package/workspace scripts, deployment configuration, environment examples, important routes or commands, and trusted tests. Discover only environments the repository actually supports. For each one, determine how the Quire Agent can recognize it from the resolved target, how access works, what data or mutations are safe, and what should happen when access is unavailable. Separate repository facts from assumptions.\n\nAsk concise grouped questions for unknowns that materially change environment recognition, authentication, mutation safety, an important workflow, its success signal, or fixture readiness. Incorporate the answers into the runbook. If the user cannot supply a required fact, report the affected path as not ready rather than guessing or leaving a question in runtime guidance.\n\n### 4. Handle target-product accounts only when needed\n\n1. Consider a target-product account only when an important documented workflow requires authentication.\n2. Prefer a repository-supported disposable bootstrap or seeded-account flow when it matches the selected environment and mutation boundary. Record the access method and required account characteristics, not the incidental account created during setup.\n3. Otherwise, check for a matching Quire-registered account scoped to the exact target origin.\n4. If none exists, ask whether a reusable target account already exists and tell the user not to send its password or any secret.\n5. If it exists, guide the user to register it through the authenticated workspace UI at `https://quire.sh` or, when they prefer the CLI, through the hidden password prompt in `quire test-accounts add`; then recheck. The parent agent never asks for, handles, or echoes the password.\n6. If it does not exist, guide the user through the repository-supported target-product provisioning flow first. Quire does not invent, invite, reset, or seed an undocumented target account.\n7. If account setup is deferred, mark only the affected verification path blocked and continue unrelated setup.\n\nNever place passwords in chat, commands, repository files, the runbook, or public artifacts. Put an exact non-secret account identifier in the runbook only when the caller confirms that the identity is durable and selecting it is required; otherwise document the account characteristics and selection procedure.\n\n### 5. Verify deterministic readiness\n\nConfirm the installer produced exactly one current managed Quire block in root `AGENTS.md`. Do not edit that block manually.\n\nAfter the runbook is ready, rerun `quire doctor --json`. An absent target-product test account is not a global doctor failure; it blocks only paths that require it.\n\nSetup is ready when the stable CLI, selected harness integration, account and model access, runbook, managed AGENTS block, and doctor are ready. Integration files may be ready while the current harness process still requires a restart to activate them; report that session blocker explicitly and do not claim the adapter is usable in the current process. Do not start `quire run` merely to prove setup. A Run uses the selected model source, writes durable local artifacts, may populate hosted-guidance caches, and is nondeterministic; reserve it for a meaningful caller-selected product claim.\n\n### 6. Offer an optional first verification\n\nOffer a first verification only when the harness adapter is active in the current process. If harness activation is `restart required`, end with the restart or reload instruction instead; do not dispatch any substitute agent in the current session.\n\nOtherwise, end with one concrete first-verification suggestion grounded in the runbook and the caller's priorities. Prefer an important product workflow over a synthetic smoke. State the exact claim to verify, the caller-supplied target needed, any account or fixture prerequisite, and the permitted mutation boundary.\n\nWhen the target and prerequisites are ready, ask:\n\n> Quire is ready. A useful first check is: “Verify against .” This creates run artifacts and uses your selected model source. Would you like me to run it?\n\nDo not start the Run until the user opts in. If they agree, preserve the suggested scope and every additional caller constraint. Use only the caller-supplied target; if none is running, ask the caller to start it and provide the URL rather than guessing a target or substituting a code-only smoke.\n\nWhen the suggested workflow or any other important documented workflow requires authentication, state whether a repository-supported bootstrap, assigned fixture, or matching Quire-registered account is ready. If it is missing, include a separate optional account-readiness next step even when the first suggested verification is public. Offer only the relevant choices: register an existing reusable account, provision one outside Quire, choose a public verification path, or defer authenticated verification. Recommend account setup only for important authenticated workflows, never ask for credentials, and keep the missing account scoped to the affected path. Do not call the first verification deferred unless the user explicitly defers it; otherwise report it as awaiting user opt-in.\n\n## Runbook contract\n\nWrite for retrieval, not completeness. Put the highest-frequency target and access procedure first and state each instruction once. Prefer a short runbook; exceed roughly 800 words only when additional durable workflows materially change what a Run should do.\n\nUse this shape, deleting empty or irrelevant sections:\n\n```md\n# Quire runbook\n\nOne sentence of product context.\n\n## Environments and access\n\n### \n\n- How to recognize this environment from the already-resolved target claim or URL.\n- Authentication or bootstrap procedure, including return to the requested path and required account characteristics.\n- Data ownership and permitted mutation boundary.\n- What to report when the target is ambiguous, protected, unreachable, or lacks required access.\n\n## Verification paths\n\n### \n\n- Target and entry point:\n- Preconditions or fixture state:\n- Safe actions and stopping point:\n- Success signal:\n- Decisive evidence:\n\n## Trusted checks\n\n- Command, when it applies, and what a pass proves.\n- Known cost, side effects, flakiness, or false positives.\n\n## Project-specific exceptions\n\n- Only safety, service, or environment constraints that change the default action.\n\n## References\n\n- Only sources that define expected behavior for the paths above.\n```\n\nAuthoring rules:\n\n- Write from the Quire Agent's perspective: its Run brief already contains the resolved target. Keep setup, invocation, target lifecycle, and post-Run evaluation in parent guidance.\n- Ground every environment, route, account, fixture, command, and policy in repository evidence or caller answers. Verify user-facing routes from declarations, tests, or documented navigation. Document access methods and required account characteristics; include a named account and its selector only when the caller confirms that identity is durable.\n- Include each repository-supported environment that materially changes target recognition, authentication, data ownership, mutation safety, or blocker behavior. Do not invent conventional environments such as staging when the repository does not define them.\n- Include only durable workflows the caller identifies as important or repository evidence makes clearly critical. Route existence and the transient setup task do not make a workflow important.\n- Give each path concrete preconditions, safe actions, a stopping point, a success signal, and decisive evidence. Preserve all assertions inside the caller's named scope without adding adjacent checks; one genuinely noticed out-of-scope issue may be one observation for caller triage.\n- Describe product verification paths here and leave Browser, Mobile, Shell, and other runtime availability to each Run's capability context.\n- List commands only for durable target access and trusted project checks. Preserve caller-confirmed commands exactly when repository evidence supports them, and state what each check actually proves from its assertions and execution layer.\n- Preserve repository-specific self-dogfood facts that change what the Quire Agent should inspect or what evidence proves the product behavior. Keep commands that launch Quire and the parent's post-Run evaluation procedure outside the runbook.\n- Keep project exceptions to repository-specific changes in default action. Exclude generic Quire mechanics, setup procedure, implementation architecture, duplicated policy, and verification-path requirements.\n- When replacing an existing runbook, retain only current facts that change target selection, access, workflow execution, proof, or safety; remove obsolete, speculative, empty, and low-frequency background detail.\n- Cite durable product or repository sources that define expected behavior.\n\n## Readiness report\n\nEnd with:\n\n```md\n## Quire setup readiness\n\n- Quire command: ``\n- Harness integration: selected harness, project-local paths, or exact blocker\n- Harness activation: active in this process, or restart/reload required before a Quire task\n- Account and model access: ready or exact next user action\n- Runbook: ready, including target/access and verification paths\n- Managed AGENTS block: created, refreshed, unchanged, or exact malformed-marker blocker\n- Target handoff: how the caller supplies the already-running target\n- Authenticated verification paths: ready, not required, or named blocked paths; for each important blocked path include the required non-secret account characteristics and optional account-readiness next step\n- Doctor: ready or exact blocker\n- First verification: concrete suggested claim, required target and account prerequisites, and whether it is blocked on harness activation, awaiting user opt-in, completed by request, or explicitly deferred; include run id, link, verdict, and decisive evidence only when a Run was actually requested\n- Unresolved required facts: none, or the exact readiness blocker and affected paths\n```\n\nDo not claim full readiness when a required item is blocked. Do not claim the whole setup failed when one authenticated path lacks a target-product account.\n",[],[152,218,33],"quire-setup","5b0b330e-da36-4bc9-b9ec-1ad72f646824",3,["D",1787359245781],[170],[152,218],["D",1787359245306],[169,171,173],[152],["D",1787359107320],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":55,"_102":103,"_104":25},{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_79":-5,"_125":264,"_265":266,"_267":268,"_269":25,"_270":25,"_271":25,"_272":59,"_273":-5,"_274":-7,"_275":-7,"_276":63,"_277":25,"_278":25,"_279":-5,"_280":25,"_281":25,"_282":25,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":87,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v28