Setup Wizard Generator

Generates an interactive bash wizard: a script that walks a human, step

by step, through a manual procedure that is tedious to do by hand and tedious

to re-explain every time. It opens each URL, says exactly what to click and

copy, captures the values, writes them where they belong (.env, GitHub

secrets), confirms at every stage, and shows how many stages are left.

Ported from mattpocock/skills' MIT-licensed wizard skill.

When to Use

• Provisioning infrastructure or third-party services (Stripe, Supabase,

DNS, OAuth apps) where only a human can click through the dashboard

• Setting up credentials, CI secrets, or repo variables
• One-off migrations or cutovers with irreversible human-gated steps
• Any procedure the user will hand to a teammate to run

Do NOT use for steps the agent can perform itself — do those directly.

Prerequisites

• bash; gh CLI only if stages write GitHub secrets/variables
• The library template: templates/template.sh in this skill's directory

Procedure

1. Scope the procedure

Work out every manual step the human must take and every value captured

along the way. Read the repo first, don't ask cold:

• Setup: .env, .env.example, README, docker-compose*, framework

config, and .github/workflows/ (every secrets. / vars.* reference

is a value the wizard must produce).

• Migration/cutover: the current state, the target state, and the

irreversible actions between them.

Show the user the ordered stage list and the values each produces; they may

add, drop, or reorder. Done when every stage is named in order and, for each

captured value, you know (a) where the human gets it, (b) where it's written

(.env, a GitHub secret, both, or nowhere), and (c) whether it's secret

(hidden entry) or public.

2. Map each stage's journey

For each stage, write the precise path a human follows: which URL to open,

what to do there, where the value is shown — e.g. "Dashboard → Developers →

API keys → Reveal test key → copy". Where you don't know the current UI or

exact command, say so and check the docs or ask — never invent steps that

may not exist.

3. Author the wizard

Copy templates/template.sh (from this skill's directory) to the target

path. Replace the example stage with one stage per step, in dependency

order. Set TOTAL_STAGES to the number of stages you wrote.

Library helpers: stage, say/step/note/warn, open_url,

ask/ask_secret, write_env, set_secret/set_var, pause/confirm,

banner, finish. The library above the STAGES marker is identical in

every wizard — never hand-edit it; that consistency is the point.

Hold the bar the template sets: open the URL before asking for its value,

ask_secret for anything secret, write_env every persisted value,

set_secret only what CI actually needs, and confirm before anything

irreversible. Each stage clears the screen — keep one focused task per

stage so nothing the human needs scrolls away.

A wizard is ephemeral by default: save it to a scratch or scripts/ path,

delete it when the job's done. Commit it only when the user wants a

repeatable setup path living in the repo.

4. Verify and hand off

• bash -n <script>; run shellcheck if available; chmod +x <script>.
• Do NOT run it end-to-end yourself: it opens browsers and blocks on human

input. Trace it statically: every value from step 1 is captured and lands

where step 1 said, and every set_secret name exactly matches a

secrets.* reference in CI.

• Tell the user how to run it. If it's repeatable, commit it and link it

from the README.

Pitfalls

1. Editing the library section. Everything above the STAGES marker is

the wizard library; author only below it.

1. Inventing dashboard paths. Third-party UIs drift. If unsure of the

click path, verify against current docs or flag it as approximate.

1. set_secret for values CI doesn't use. Only push to GitHub secrets

what a workflow actually references.

1. Running the wizard yourself. It blocks on human input; static tracing

plus bash -n is the verification.

1. One mega-stage. Screen clearing per stage means a long stage scrolls

critical instructions away; split it.

Verification

• [ ] Stage list confirmed with the user before authoring
• [ ] bash -n passes; script is executable
• [ ] Every captured value traced to its declared destination
• [ ] Every set_secret name matches a CI secrets.* reference
• [ ] Library section untouched from the template