.skill-staging/hono-api/SKILL.md
Use when working on a Hono backend or reviewing Hono API structure, especially in repos where Hono owns the transport layer and shared packages hold business logic. Covers route modules, middleware, request validation, runtime adapters, and Hono-specific pitfalls like OpenAPI/version mismatches.
npx skillsauth add pavanakurathi/pavn hono-apiInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill when the task is about the Hono API layer itself: routes, middleware, request/response boundaries, runtime behavior, or API documentation. In this repo, Hono should stay in apps/api; packages/* should stay pure business logic and must not depend on Context, route wiring, or transport details.
apps/api: Hono app, route registration, auth/session checks, tenant headers, request parsing, response shaping, OpenAPI docs.packages/*: business rules, DB access, notifications, geofence logic, reusable schemas/types that are transport-agnostic.apps/api/src/index.ts or middleware modules.Request/Response-style behavior and avoid Node-only patterns unless the runtime truly requires them.For this repo, default to this structure:
apps/api/src/index.tsapps/api/src/routes/*.tsapps/api/src/middleware/*.tspackages/scheduling-timekeeping, packages/geofence, packages/auth, packages/notifications, packages/databaseDo not move Hono request handling into packages. Packages should accept plain inputs and return plain data or throw domain errors.
Use @hono/zod-openapi only with care.
createRoute must be compatible with the installed @hono/zod-openapi and zod versions./openapi.json fails, check version compatibility before debugging every route by hand.In this repo specifically, read references/hono-notes.md before changing OpenAPI behavior.
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
development
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
development
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
development
End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.