Repository navigation
Add verify-cf skill for scripted Cloudflare CLI proofs - #18
Merged
Merged
Conversation
Scripted launch/doctor/drive/cleanup helpers and a feature map so agents can prove real ./cf --json behavior (starting with missing-creds) without touching a developer's .env. Co-authored-by: Jordan Partridge <jordan@partridge.rocks>
![lexi-chief-of-staff[bot]](https://avatars.githubusercontent.com/in/3490641?s=60&v=4){kind=small}
There was a problem hiding this comment.
Ship it.
- First verify- skill in the org; no conflicting patterns.
- Doctor + drive + isolate flow is sound and matches the documented agent JSON contract.
- Two small robustness gaps called out inline (symlink target, entrypoint name assumption) but neither blocks the stated use cases.
- Evidence layout and cleanup contract are correct; live-creds preconditioning is explicit.
Ready to merge.
jordanpartridge
marked this pull request as ready for review
October 14, 2026 05:08
There was a problem hiding this comment.
Blocking correctness issue in PHP version gate.
- PHP >=8.3 check fails on 8.4+ due to sort order (line 48 in bin/verify-cf).
- Minor: drive() assumes RUN_DIR exists from prior launch/doctor.
- Everything else is self-contained, follows the stated contract, and isolates setup mutations correctly.
- No other patterns in repo to contradict.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a project-local
verify-cfskill so agents can drive the real./cfbinary the way a user/agent does: launch deps, doctor health, run commands (prefer--json), capture exit/stdout/stderr evidence, and clean up isolate trees without deleting proof.What’s included
.cursor/skills/verify-cf/SKILL.md— launch / doctor / drive / evidence / cleanupbin/verify-cfhelper (executable).gitignoreProof run (this agent)
On this cloud VM (PHP 8.3 + Composer installed via apt as stand-in setup):
verify-cf launch→ readyverify-cf doctor→vendor=ok,cf_list=ok,live_creds=absentdrive zones --jsonwith creds unset → exit1, exact failure envelopecleanupleft evidence under.cursor/skills/verify-cf/artifacts/prove-*/Unverified on a machine that already has PHP/Composer: the apt install steps this stand-in performed.
Live
zones/ DNS / tunnel journeys needCLOUDFLARE_API_TOKEN+CLOUDFLARE_ACCOUNT_IDand remain mapped as precondition-gated.Follow-up
Use
/maintain-verification-skillas the app’s commands change.