Description
Replace placeholder and stale guidance in create-blueprint, initial-setup, setup-fleet-management, and verify-deployment with executable cloned-repo workflows. Keep credentials safe and cover every intentionally supported lane without treating current telemetry shape as in scope.
Acceptance Criteria
- #1 The credential reference is exhaustive for supported env surfaces, labels every secret including private-git and Sigil tokens, and explicitly marks unsupported lanes
- #2 No skill references PYROSCOPE_ENABLED; profiling uses the effective SELFOBS_ENABLED, DRY_RUN, and GC_PYROSCOPE triplet gate
- #3 create-blueprint has field, identity/collision, selection, workload-wiring, and worked multi-construct procedures with no placeholder TODO
- #4 setup-fleet-management has a public schema/example-driven setup and concrete read-only verification procedure with no internal-source TODO
- #5 verify-deployment preflights gcx/context, provides exact parameterized queries plus a UI/API fallback, and waits for the declared emission interval rather than promising 1-2 ticks
- #6 Trigger descriptions stay synthkit-specific and realistic expected/non-expected prompt tests pass
- #7 Independent isolated forward tests complete blueprint creation, source and container dry-run, setup re-entry, and no-credential verification stop behavior; skips are reported separately
Definition of Done
- #1 make gate (build vet test race rw-proto-check spdx-check forbidden-words)
- #2 make blueprint-schema (only if a blueprint field or construct/workload config struct changed)
- #3 DRY_RUN=true go run ./cmd/synthkit -once -dump — inventory diffed against signals/
Implementation Plan
-
Audit the four installed skills against their task acceptance criteria and the current checkout/env/control surfaces.
-
Replace placeholders and stale procedures with executable checkout-based flows, exhaustive credential/status guidance, and realistic trigger metadata/tests.
-
Run isolated forward tests for blueprint creation, setup re-entry, source/container dry runs, and credential-free verification stops; report skips separately.
Implementation Notes
Completed the four operational skill procedures and metadata. Credential coverage now matches every .env.example key, labels all secrets including private Git and Sigil, removes stale profiling guidance, and supplies concrete blueprint, Fleet, and interval-aware verification workflows. Metadata prompt routing, helper safety tests, YAML/shell/plugin parsing, isolated source and locally built container dry runs, idempotent setup re-entry, and credential-free verification stop behavior passed. Live Grafana landing and Fleet registration remain intentionally unverified because this campaign has no live credentials or external-write authority.
Root integration: CodeRabbit reviews 7 and 8 completed within the eight-review cap; valid secret-handling, Faro redaction, metadata, and documentation findings were corrected. make gate and default plus focused dry-run inventories passed. No blueprint schema regeneration was required because no blueprint/config field changed.
Final Summary
Completed and forward-tested all four operational skills in 265ecd9 (pushed via dab60de): exhaustive credential routing, safe secret helpers, current profiling/Fleet procedures, concrete blueprint and verification flows, trigger tests, and isolated source/container/setup re-entry proofs. Live Grafana landing and Fleet registration remain explicitly unverified because the run had no live credentials or external-write authority.