Epic: agent DX batch — CI speed, run skills, release/CI runbooks

[ElbertePlinio]

Batch: make the workspace faster and easier for agents — cached release builds, per-app run skills, and codified release/CI runbooks. CI stays the trust anchor (cross-platform builds, clean-env proof, signing secrets, phone-visible checks); skills drive it, never replace it.

Scope

CI speed (release builds were 12–35 min from scratch; pickscribe with caching does 5–10 min)

• CI: cache Rust builds in release workflow, drop duplicate test compile pickforge#182 — rust-cache in release.yml + drop duplicate test compile in ci.yml
• CI: cache Rust builds in release workflow pickgauge#30 — rust-cache in release.yml

Per-app run skills (launch quirks stop getting relearned per session)

• Agent DX: project run skill (dev launch + headless verify) pickforge#183
• Agent DX: project run skill (dev launch + headless verify) pickscribe#35
• Agent DX: project run skill (dev launch + headless verify) pickgauge#31

Workspace skills (canonical in this repo, symlinked into workspace .claude/skills/)

• Workspace skills: release runbook + CI driver (canonical here, symlinked into workspace) #18 — release runbook + CI driver skills

PR plan

• PR 1 — pickforge CI (rust-cache + llvm-cov dedupe) → closes pickforge#182
• PR 2 — pickgauge CI (rust-cache) → closes pickgauge#30
• PR 3 — platform skills + workspace symlinks → closes Workspace skills: release runbook + CI driver (canonical here, symlinked into workspace) #18
• PR 4–6 — run skill per app → closes pickforge#183 / pickscribe#35 / pickgauge#31

PRs 1–2 are independent two-line changes; 3 lands before 4–6 so the run skills can follow the same thin-wrapper pattern.

Considered, not in this batch

• Pin bun-version in CI instead of latest (reproducibility) — cheap, fold into PRs 1–2 if wanted
• teleprompter has no GitHub remote and no CI — push it and adopt the standard workflows?
• Workspace root as a GitHub repo (versioned AGENTS.md / skills / scripts) — deferred; symlink pattern covers skill discovery for now

Current status: Planned
Next action: PR 1 (pickforge CI)

[ElbertePlinio]

Progress:

• pickforge#182 — merged (pickforge#184)
• pickgauge#30 — PR ci: cache Rust builds in release workflow pickgauge#32 open, review round 2 in flight (round 1 P1 fixed: rust-cache scoped to src-tauri)
• Workspace skills: release runbook + CI driver (canonical here, symlinked into workspace) #18 — PR feat: workspace release and ci skills with cross-repo linking #20 open, review in flight. Child-repo skill discovery validated (needed per-repo symlinks — parent traversal doesn't apply to skills; link script handles it)
• run skills: 3 builders working in parallel worktrees, PRs next

Next: merge #32/#20 when clean, open run-skill PRs.

[ElbertePlinio]

Progress:

• pickforge#182 → #184 merged
• pickgauge#30 → #32 merged
• Workspace skills: release runbook + CI driver (canonical here, symlinked into workspace) #18 → feat: workspace release and ci skills with cross-repo linking #20 merged (release + ci skills live, links refreshed)
• run skills: PRs open — pickforge#185, pickscribe#36, pickgauge#33. Review round 1 found real isolation gaps in the lab-launch pattern (lab still opened real pickforge.db, registered pickforge:// handler, read real CLI credentials, could rewrite autostart). Fix in flight on all three: sandboxed lab home (PICKFORGE_HOME / HOME+XDG overrides), free-display scan, narrower gitignore. pickscribe was review-clean but gets the same hardening for consistency.

Next: push fixes, re-review, merge all three.

[ElbertePlinio]

Progress:

• pickforge#182 → #184 merged
• pickgauge#30 → #32 merged
• Workspace skills: release runbook + CI driver (canonical here, symlinked into workspace) #18 → feat: workspace release and ci skills with cross-repo linking #20 merged
• pickforge#183 → #185 merged (5 review rounds — real hardening each round)
• pickscribe#35 → #36 merged
• pickgauge#31 → #33: final review round in flight, merge next

Notable: reviews + live verification hardened the lab pattern well beyond the original spec — sandboxed lab home (PICKFORGE_HOME/HOME+XDG+XDG_RUNTIME_DIR), per-display labtest identifiers (concurrent labs collided in practice), per-checkout state file, environ/cwd-scoped cleanup kills. wl-copy reaching the real compositor via the inherited runtime dir was the sneakiest catch.