vitya
ef3d38e79d
Aligns claude-skills with secrets-out-of-common etap-1 migration: the canonical home for plain-text local-dev secrets is now ~/.config/projects-secrets/, outside any git tree. setup-interns [v0.3.0 → v0.4.0, MINOR — write target changed]: - Phase 1 drops gitignore-sanity check (no longer needed) - Phase 2 plan block drops Gitignore line - Phase 3 backs up ~/.config/projects-secrets/interns.env if present - Phase 5 writes ~/.config/projects-secrets/interns.env (mkdir -p ahead) - Phase 6 cwd documentation: secrets path no longer relative to cwd; uses INTERNS_SECRETS_PATH env var (or ~/.config default) — independent - Common-mistakes drops "missing gitignore rule" entry using-interns [v0.2.0 → v0.2.1, PATCH — wording]: - Always-ask paths section reflects new canonical secrets home - Prerequisites text updates setup-interns write target interns-design.md (wiki concept): path refs updated for ASCII layer diagram, Layer 1 example block, Phase 5 description, comparison table, and final cross-cutting note. **/projects-secrets/** added to always-ask documentation pattern. dist/: setup-interns.skill + using-interns.skill rebuilt. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
using-interns
Runtime policy for the local interns MCP server. Delegates predictable bulk I/O and summarization tasks to cheap intern LLMs (DeepSeek / Kimi / Ollama-hosted) so Claude saves Anthropic quota.
using-interns governs usage of an installed server. Initial setup (pip install, .env write, MCP registration) is owned by setup-interns.
Full design: .wiki/concepts/interns-design.md (in this repo) — Layer 1 / 2 / 3 architecture, MVP catalog, always-ask paths, routing hints.
When it triggers
- CLAUDE.md contains
delegate to interns when allowed(added byproject-bootstrap1.6.0+). - User says: "use interns", "delegate to an intern", "разреши интернов", "allow interns", "go ahead with interns".
- Claude is about to read 3+ files, or one file > 400 lines, just to build context.
- Claude is about to update
.wiki/log.mdor write a session summary from a long transcript. - If
mcp__interns__*tools are missing, this skill delegates tosetup-internsbefore doing anything else.
What it does
- Picks the right intern for the task from a routing table (
bulk_text_readfor reads,transcript_distillfor summaries; future interns added in.common/config/interns/config.yaml). - Guards every call with a per-session permission grant that mirrors
project-disciplineRule 4 — ask-mode default, conversational grant / revoke, session-end reset. - Enforces always-ask paths —
.env,**/secrets/**,**/*.key,**/*.pem,**/.ssh/**,**/.aws/credentials,**/.netrcetc. — even when delegation is granted. Server-side enforcement plus a transitive rule: Claude can't bypass by reading the file with the localReadtool and forwarding the content. - Caps cost — calls with estimated cost > $0.10 always go to ask-mode regardless of grant.
- Tells Claude what NOT to delegate — architecture, debugging, auth / payments, final commit messages, final user-facing answers.
Permission grant cheat-sheet
| Phrase | Effect |
|---|---|
| (default) | Ask before every mcp__interns__* call. |
| "разреши интернов" / "allow interns" | Free delegation until session end (subject to always-ask paths + cost cap). |
| "отзови интернов" / "revoke interns" | Back to ask-mode. |
| (session ends) | Reset to ask-mode. The next session asks again. |
Tool quick reference
| Tool | Required args | Optional | Purpose |
|---|---|---|---|
mcp__interns__bulk_text_read |
paths: list[str], question: str |
max_tokens: int |
Read N files, answer with file:line citations. |
mcp__interns__transcript_distill |
paths: list[str], question: str |
max_tokens: int |
Distill transcript / log into structured action list. |
Pass paths, not file contents. The MCP server reads and applies the always-ask matcher server-side; forwarding content as a string arg bypasses the gate.
When NOT to use
- Architecture / design decisions — Claude's job.
- Debugging — cheap models miss subtle bugs.
- Auth / payments / PII / production data — recommendation, not enforced, but obvious.
- Final commit messages, PR descriptions, user-facing answers — don't sub-delegate the deliverable.
- A single 50-line file you can read yourself for free.
Full policy and examples in SKILL.md.
Install
From the repo root:
bash scripts/install.sh using-interns
Works on Windows under git-bash, Linux, macOS.
See also
setup-interns— companion, owns the server install +mcpServers.internsregistration.project-discipline— Rule 4 (per-session push grant) is the prior art for the grant mechanism here.using-projects-meta,using-context7— sisterusing-Xskills for other MCP servers (same shape)..wiki/concepts/interns-design.md— full architecture spec.