Appaloft skill

The Appaloft Skill is the full product entrypoint for AI agents. It maps to the same Appaloft operation catalog as the CLI, HTTP API, Web console, and future MCP tools; the difference is that its target user is an AI agent.

It is not a new business operation and not an appaloft deploy wrapper. It translates user intent into existing Appaloft operations and chooses CLI, HTTP/API, Web, or future MCP based on the active agent environment.

For GitHub Actions, the skill must keep three modes separate: Pure SSH Action is the default BYOS SSH path and does not require an Appaloft console or ids; Self-hosted Server Action calls an existing self-hosted console/API through control-plane-url and appaloft-token without running the CLI or SSH; Product-grade Preview is owned by Appaloft Cloud or a self-hosted control plane with preview policy, GitHub App webhooks, comments/checks, cleanup retry, scheduler, audit, and quota.

Install the full Appaloft skill:

npx skills add appaloft/appaloft

The installer only copies skill files. It does not deploy an app, create resources, call APIs, or wrap the CLI. Appaloft does not provide a separate npm skill installer, which keeps the boundary clear between skill installation and the appaloft CLI.

The full skill covers every entrypoint in the Appaloft CLI operation catalog, including:

• project, server, environment, and resource lifecycle;
• source/runtime/network/health/access/variable/resource profile configuration;
• deploy, preview cleanup, plan, logs, events, retry, redeploy, and rollback;
• domain binding, certificate, and default access;
• dependency resources, backup/restore, and resource dependency binding;
• storage volumes, scheduled tasks, runtime control, and terminal sessions;
• runtime usage, runtime monitoring, operator work, audit events, and retention;
• organization, auth bootstrap, deploy tokens, providers, plugins, upgrade, and database maintenance.

The complete CLI map ships with the package at skills/appaloft/references/cli-entrypoints.md.

• Do not read .env, private keys, token files, cloud credentials, deploy tokens, SSH material, cookies, or unmasked secrets.
• Do not bypass Appaloft by mutating Docker, SSH, databases, proxies, or provider SDKs directly.
• Do not invent agent-only operations; every action maps to an existing CLI/API/Web/MCP operation.
• Do not assume hosted artifact storage. By default, deployment still targets the user's selected BYOS destination.

The complete governing source lives in docs/agent/appaloft-skill.md. The standard skill source is skills/appaloft; deploy protocol and entrypoint boundaries live under skills/appaloft/references/.