Ops Client

Ops Client

Overview

Operate and verify real desktop client windows. Treat platform automation as adapter-specific: the current built-in evidence path is macOS-first, while Windows and Linux require an available platform adapter before equivalent claims can be made. Use implement-frontend for UI code changes.

Workflow

1. Identify the specified client target and action scope: app name, repository path, package/app directory, process, PID, visible window, platform, requested evidence, and whether observation, capture, launch, restart, focus, or a named semantic interaction is explicitly authorized.
2. Run a capability preflight and record available/unavailable/unknown for:

• process enumeration and runtime-source inspection;
• window enumeration with stable window identifiers;
• window-specific screenshot capture;
• Accessibility/control-tree inspection and semantic actions;
• background-safe operation without stealing mouse/focus;
• app launch/restart and permission state.

1. If working from a repository, confirm whether it contains a desktop/client app by checking manifests and source layout such as src-tauri/, tauri.conf.*, Electron configs, native targets, package scripts, justfile tasks, or README run instructions.
2. Confirm the startup command and runtime source before verification: dev command, debug bundle, release app, Electron/native run command, or Not found/Not verified when unclear.
3. Select the platform adapter:

• macOS: identify process/PID and matching CGWindowID; capture with screencapture -x -l when available; use macOS Accessibility for semantic controls.
• Windows: require an available UI Automation/window-capture adapter and stable HWND/process evidence; otherwise use Degraded Evidence mode.
• Linux: require an available AT-SPI/window-manager capture adapter and stable window/process evidence; otherwise use Degraded Evidence mode.

1. Identify the exact real window by process owner, PID, title, bounds, and platform identifier. Do not substitute browser preview evidence.
2. Capture and inspect the real window using the selected adapter before making visual claims.
3. Within the explicitly authorized action scope, prefer background-safe Accessibility/control-tree actions on named controls over coordinate clicks. Verification or capture alone never authorizes pressing a control.
4. Rebuild/restart the intended client instance after relevant UI, bundle, native, or Accessibility changes before re-verifying.
5. Report unsupported platform claims explicitly rather than emulating them with a browser page or cropped screenshot.
6. Use Client Debug Evidence only when the caller supplies an already-isolated client-layer reproduction whose requested output is direct client evidence. Otherwise route unexplained or cross-system root-cause requests back to the caller for diagnosis before operating the client. For an accepted evidence task, verify the real process/window/build source, collect direct client evidence, clean disposable task state, and return the evidence to the caller.

Modes

• Capability Preflight: verify platform, permissions, process/window enumeration, capture, Accessibility, and restart support before operation.
• Launch Review: identify the repository-owned client app and startup command before running or verifying it.
• Window Evidence: prove process, runtime, real-window identity, platform adapter, and screenshot source.
• Interaction: use Accessibility/control-tree paths before coordinate clicks.
• AI-Operable UI Evidence: verify semantic controls and stable names so agents can identify critical actions reliably.
• Client Debug Evidence: only after caller delegation of an already-isolated client-layer evidence request, reproduce on the verified real client instance, capture process/window/build/control evidence, test one client-layer hypothesis at a time, and return evidence to the caller without owning the final cross-system root cause.
• Degraded Evidence: when the required platform adapter or permission is missing, report only process/repository evidence that can be proven and list exact blocked claims.

Do Not Use For

• Plain browser pages, web previews, form workflows, downloads, or browser console/network checks; use ops-browser.
• Frontend implementation, desktop webview architecture, IPC layering, or design-system work; use implement-frontend.
• Ordinary repository discovery unless the user asks for client launch review, real-window verification, or browser-preview invalidation.
• Browser preview evidence when the task requires proof from a Tauri, Electron, or native desktop runtime.
• Repository onboarding or map discovery; use repo-map.
• Future implementation planning; use the host's built-in planning.
• Local dirty-tree review or commit readiness; use repo-review.
• Security-only review; use audit-security.
• Cross-system root-cause coordination for a frozen, stale, non-responsive, or dev-versus-release failure; use the host's built-in diagnosis, which may delegate real-client evidence collection here.

Hard Rules

• Do not claim cross-platform support from a macOS-only procedure.
• Treat observation, capture, launch, restart, focus, and control interaction as separate scopes. A verification request does not authorize launch, restart, focus change, or pressing controls; require an exact target and action before changing client state.
• Stop before credentials, account switching, permission grants, destructive or irreversible actions, purchases, or external submission unless the user explicitly authorizes that exact action and target.
• Do not treat browser previews, dev server pages, region screenshots, or app-like web tabs as desktop-client evidence unless the user explicitly asks for browser-only checking.
• Do not start or restart a client before confirming the startup command source and whether it could disturb an existing app instance, active window, unsaved state, or user workflow.
• Do not assume Accessibility or screen-capture permission. Verify the action succeeds or mark it unavailable.
• Do not steal the user's mouse, move the pointer, activate unrelated windows, or coordinate-click unless no stable control path exists, the target window is revalidated, and the risk is acceptable.
• Prefer semantic controls, accessible names, labels, roles, stable automation identifiers, and repository-supported test ids for critical controls.
• On macOS, verify CGWindowID, owner/PID/title/bounds, and capture result before calling a screenshot real-window evidence.
• On Windows or Linux, require the platform adapter's stable window/process identifier and capture provenance; do not reuse macOS terminology or commands.
• If only a process can be proven, do not infer that the requested window is visible, current, or running the new build.
• For code changes that add accessibility or automation surfaces, use implement-frontend or the relevant native implementation skill; return here for runtime verification.
• Re-verify the target process, runtime source, and window after rebuild/restart; stale windows do not prove current code.
• Confirm only direct client facts. Do not claim a final cause across frontend, IPC, Rust, database, packaging, or platform layers, and do not decide a permanent fix; return the evidence to the caller.
• Remove disposable task state such as temporary probes, injected instrumentation, test windows, and launched test instances when safe. Retain screenshots, logs, traces, and other handoff evidence until they are embedded, archived, or explicitly accepted by the handoff owner; report retained artifact paths/identifiers, embedded evidence, removed disposable state, and anything left running.
• Say Not supported when no adapter exists for the requested platform capability and Not verified when the adapter exists but the check was not completed.

Output Contract

Report platform and selected adapter, capability preflight, specified client target, authorized action scope, repository/client ownership evidence, startup command or Not found, target process/runtime, stable real-window identity, screenshot source/provenance, interaction method, Client Debug Evidence and handoff owner when relevant, permission or adapter gaps, restart/rebuild status, cleanup status, and all Not supported or Not verified claims.

References

• See [references/usage.md](references/usage.md) for trigger guidance and workflow details.
• See [references/eval-cases.md](references/eval-cases.md) for trigger and quality evals.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: idaibin
• Source: idaibin/skills
• License: Apache-2.0
• Homepage: https://skills.sh/idaibin/skills

Install and usage instructions live in the source repository linked above.