Agent Skills

astrale-domain

Create, modify, test, migrate, or debug Astrale Domains: Schema, Policies, Action/Workflow runtime, integrations, Views, Datasets, and deployment. For a new Domain follow the phased workflow; for focused work load only the relevant references.

Install

npx skills add https://github.com/astrale-os/cli --skill astrale-domain
SKILL.md

Astrale Domain

Load detailed domain knowledge from the references that matches the goal.

Kernel boundary

  • Use Schema, executable evidence, and the SDK's Domain linter as guardrails.
  • Domain source imports Core and DSL authoring values only through the matching semantic @astrale-os/sdk/* subpath. Do not import @astrale-os/kernel-core or @astrale-os/kernel-dsl directly, and do not replace them with a flat SDK root barrel.
  • Keep authorization in Schema-owned Policy and callable auth mode; handlers execute only admitted calls and do not define a second authorization model.
  • Choose each existential Policy Node extent deliberately: node() for topology-owned matching, node(Class) for a polymorphic Class family, or node.exact(Class) for exact identity.
  • Treat the installed SDK's public exports and the current Domain source as authoritative for API syntax.

Intent Router

Use this router to load only the references owned by the current task. For new Domains, also use the phased workflow below; an existing public scaffold already satisfies its foundation phase.

  • Scaffold, deploy, install, test, or configure TypeScript for a domain: read references/development.md.
  • Author schema, vocabulary, properties, Class/Edge choices, or review a schema: read references/schema.md first. Always read it for schema work.
  • Implement handlers, callable bindings, kernel calls, graph reads/writes, or cross-domain calls: read references/runtime.md.
  • Wrap an external API, define an Integration/Provider, receive webhooks, or design side-effect/retry behavior: read references/integrations.md.
  • Decide whether to reuse/import a native Astrale domain instead of modeling a capability yourself: read references/domains.md.
  • Model sign-in users, invite/register existing people, or assign Shell groups: read references/users.md.
  • Secure a Domain, Function, View, client call, public endpoint, identity, delegation, authentication mode, or Policy: read references/policies.md.
  • Build or review browser views, mounted UI, View access, View resolution, or frontend design: read references/views.md and apply astrale-frontend-design for product-interface layout, interaction, and copy.
  • Plan or qualify an installed Schema revision, data transition, or backfill: read references/migration.md.
  • Optimize graph access, reduce round trips, choose indexes/queries, or review call patterns for latency: read references/performance.md.
  • Author or update demo data — the Datasets under tests/ the Studio draws and proves policies on: read references/datasets.md.
  • Write tests, fixtures, demo flows, or smoke-test scenarios: read references/testing.md.
  • Diagnose a failing live domain, issuer/discovery confusion, invocation routing, or runtime drift: read references/debugging.md.

New Domain Creation Workflow

For a request to create, build, prototype, or make a POC of a Domain, follow the applicable phases in order and load a reference only when its phase begins.

  1. Foundation: Inspect the workspace first. When no public scaffold exists, read references/development.md; read references/domains.md only when deciding whether to reuse a native Domain. When the workspace already declares the SDK, deployment adapter, Application, and Runtime, keep that plumbing and move directly to Schema.
  2. Schema: Before authoring the schema, read references/schema.md; for sign-in users and groups, also read references/users.md before inventing identity or onboarding vocabulary.
  3. Callables: Before implementing callables, read references/runtime.md and references/policies.md. If an external system is involved, also read references/integrations.md.
  4. Views: When the Domain owns a browser surface, read references/views.md before designing or implementing it. Views are Schema declarations, not fields on the SDK Domain definition.
  5. Demo data: For a Domain with a meaningful sample graph, author a small Dataset under tests/, referenced from astrale.config.ts. Read references/datasets.md first; do not invent graph data for an API-only Domain or expand a focused edit into unrelated demo work.
  6. Completion: Read references/testing.md; exercise the delivered public callables with representative success and applicable refusal inputs, then run the relevant tests, typecheck, lint, and build. Verify packaging when delivering a consumable package and live behavior when claiming deployment or integration success.

Read references/migration.md, references/performance.md, and references/debugging.md only when the domain's lifecycle or current problem calls for them.

Always-On Workflow

  1. Inspect the current repo or scaffold before trusting API syntax from memory.
  2. For live behavior, use references/debugging.md and prove the deployed/installed/runtime path before treating source edits as effective.
  3. When a Schema change affects existing Datasets, keep them valid and representative in the same change. Read references/datasets.md; examples complement tests rather than exhaust every case.

Related skills

entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb

Search skills and MCP servers

Fuzzy search across 23,137 skills and servers