harborclerk: Skill for Claude Code

Acceptance run

Drives a running instance through every product claim the API tier can check (docs/superpowers/specs/2026-09-16-acceptance-suite-design.md), then turns the result into docs/reports/YYYY-MM-DD-acceptance-<host>.md and a PR. All commands run from the repository root.

Preflight

1. The instance must be up. On the mini it is the native app on http://localhost:8100:

   curl -s http://localhost:8100/api/system/health | jq '{status, build, enable_cli_access}'
   

   status must be healthy. Note build; the report records it.
2. Credentials come from Keychain, never from a prompt or a file:
   • admin login: service harbor-clerk-acceptance, account = the admin email;
   • the machine user's GitHub token: account harborclerk-bot, service github-token.

   security find-generic-password -s harbor-clerk-acceptance | sed -n 's/.*"acct"<blob>="\(.*\)"/admin: \1/p'
   

   If either is missing, stop and say which one.
3. Decide the mode. Folder-scoped is the default and is safe on any instance. It adds and removes four watched folders (the fixtures, an empty one, one with a single document, one for H2), soft-deletes one of its own documents, creates and deletes two conversations, and leaves audit rows and soft-deleted keys; no other document is touched. Wipe mode (HC_ACCEPTANCE_WIPE=1) empties the instance and is only for the mini: it also needs HC_ACCEPTANCE_DISPOSABLE=1, a loopback HC_API_BASE, and at most 500 documents on the instance.
4. Only on the mini, pass the native app's config so the CLI-gate checks can flip and restore enable_cli_access; set CONFIG_JSON empty elsewhere (the suite refuses it for a remote instance anyway). The Ask checks use the model that is active; with HC_ACCEPTANCE_DISPOSABLE=1 or HC_ACCEPTANCE_ALLOW_MODEL_SWAP=1 they may activate the smallest downloaded model when none is; it then stays active and becomes the app's persisted default (activation writes llm_model_id to config.json).