Back to skills
SKILL.md
Cqs Bootstrap
ASecurityOne-command setup for cqs in a new project — skills, tears infrastructure, CLAUDE.md, init, index.
- 18 stars
- 0 votes
- 0 copies
- 0 views
- Added November 7, 2026
Works with
Security analysis
100/100npx -y skills add jamie8johnson/cqs --skill cqs-bootstrap --agent claude-codeAre you the author of Cqs Bootstrap?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/jamie8johnson-cqs-bootstrap)---
name: cqs-bootstrap
description: One-command setup for cqs in a new project — skills, tears infrastructure, CLAUDE.md, init, index.
disable-model-invocation: false
argument-hint: "[project_path]"
---
# Bootstrap Project
Fully self-contained setup for cqs in a new project. After running this, the project has semantic search, notes, continuity tracking, and all skills working.
## Prerequisites
- `cqs` binary installed (check with `which cqs`)
- Project has a git repo initialized
- Running inside Claude Code in the target project directory (or pass project path as argument)
## Process
### Phase 1: Tears Infrastructure
1. Check if files already exist — **don't overwrite**
2. Create `docs/` directory if needed
3. Write each file:
#### docs/notes.toml
```toml
# Notes - unified memory for AI collaborators
# Surprises (prediction errors) worth remembering
# sentiment: DISCRETE values only: -1, -0.5, 0, 0.5, 1
# -1 = serious pain, -0.5 = notable pain, 0 = neutral, 0.5 = notable gain, 1 = major win
[[note]]
sentiment = 0
text = "Project bootstrapped with cqs tears infrastructure."
mentions = ["docs/notes.toml", "PROJECT_CONTINUITY.md"]
```
#### PROJECT_CONTINUITY.md
```markdown
# Project Continuity
## Right Now
(active task - update when starting something)
### What happened this session
### Tracked issues
### What's next
## Parked
(threads to revisit later)
## Open Issues
## Architecture
(version, languages, tests, key tech decisions)
```
#### ROADMAP.md
```markdown
# Roadmap
<!-- When this grows past ~100 lines, archive completed phases to docs/roadmap-archive.md -->
## Current Phase
### Done
- [ ] ...
### Next
- [ ] ...
```
### Phase 2: Skills
4. Create `.claude/skills/` directory
5. Copy all portable skills from `/mnt/c/Projects/cqs/.claude/skills/`:
- `cqs` — unified CLI dispatcher (search, graph, quality, notes, infrastructure — all subcommands)
- `cqs-bootstrap` — this skill (for nested projects)
- `cqs-batch` — batch mode: persistent Store + Embedder, stdin commands, JSONL output, pipeline syntax
- `cqs-plan` — task planning with scout data + task-type templates
- `cqs-verify` — exercise all command categories, catch regressions
- `before-edit` — run before modifying a function (impact + test-map + explain → checklist)
- `investigate` — run before starting a task (scout + gather → implementation brief)
- `check-my-work` — run after changes (review diff → risk checklist)
- `update-tears` — session state capture
- `groom-notes` — note cleanup
- `docs-review` — check docs for staleness
- `reindex` — rebuild index with stats
- `troubleshoot` — diagnose common cqs issues
- `migrate` — handle schema version upgrades
- `land` — land a ready branch: push, PR, pinned CI watch, squash-merge, issue verification, cleanup
- `idle` — the idle work loop: enumerate issues + triage rows, classify, pick, dispatch
- `archeo` — comment-archaeology sweep: TODO/FIXME/deferral language → issues or trivial fixes
- `recall-gate` — retrieval recall gate with dead-gold triage + binary A/B regression test
- `red-team` — adversarial testing against cqs
- `audit` — code audit with parallel category agents
- `pr` — WSL-safe PR creation (always --body-file)
- `release` — version bump, changelog, publish, GitHub release
6. Create `.claude/agents/` directory
7. Copy all agent definitions from `/mnt/c/Projects/cqs/.claude/agents/`:
- `investigator` — pre-implementation investigation (scout + gather → brief)
- `code-reviewer` — diff review (review + impact → risk report)
- `test-finder` — test coverage lookup (test-map + impact → coverage report)
- `implementer` — implementation with cqs checkpoints (scout before, review after)
- `lane-implementer` — implementation lane with the full gate battery baked in (private target dir, all-targets clippy, targeted tests, provenance lint, commit-don't-push)
- `explorer` — codebase exploration via cqs semantic search
- `auditor` — code audit agent with cqs tools built in
- `seam-auditor` — composition adversary (finds two correct units whose join lies)
- `property-auditor` — property-based testing lane (proptest: invariant + generator finds the input examples miss)
- `interleaving-auditor` — concurrency adversary (loom/stress: finds the schedule that breaks a shared invariant)
### Phase 3: cqs Init & Index
8. Run `cqs init` (creates `.cqs/` directory with database)
9. Run `cqs index` (indexes all source files + notes)
10. Verify with `cqs stats` — should show chunk count > 0
### Phase 4: .gitignore
11. Add `.cqs/` to `.gitignore` if not already present (the index database is local, not shared)
### Phase 5: CLAUDE.md Integration
12. If CLAUDE.md exists, **append** the cqs sections below. If it doesn't exist, create it with these sections plus a basic header.
**Check for existing sections first** — don't duplicate if the user already has cqs config in their CLAUDE.md.
#### Sections to add to CLAUDE.md:
```markdown
## Read First
* `PROJECT_CONTINUITY.md` -- what's happening right now
* `docs/notes.toml` -- observations indexed by cqs (warnings, patterns)
* `ROADMAP.md` -- what's done, what's next
## Skills
Project skills in `.claude/skills/`. Use `/skill-name` to invoke.
Skills are auto-discovered — they appear in `/` autocomplete automatically.
## Code Intelligence — When to Use What
**Use these cqs commands at the right moments.** They replace multiple manual searches with a single call. Workflow skills are even easier:
- `/before-edit <function>` — impact + tests + callers → modification checklist
- `/investigate <task>` — scout + gather → implementation brief
- `/check-my-work` — review current diff → risk assessment
### Before modifying a function:
```bash
cqs impact <function_name> --json
```
### Before writing tests:
```bash
cqs test-map <function_name> --json
```
### Before starting any implementation task:
```bash
cqs scout "task description" --json
```
### Exploring unfamiliar code:
```bash
cqs onboard "concept" --json
cqs gather "query" --json
```
### Searching (use instead of grep/glob):
```bash
cqs "search query" --json
cqs "function_name" --name-only --json
cqs "query" --include-type function --json # filter by chunk type
cqs "query" --exclude-type test --json # exclude chunk types
cqs read <path>
cqs read --focus <function>
```
### Full command reference
- `cqs scout "description"` — pre-investigation dashboard: search + callers/tests counts + staleness + notes
- `cqs task "description"` — one-shot implementation context: scout + code + impact + placement + notes
- `cqs explain <fn>` — function card: signature, callers, callees, similar
- `cqs callers <fn>` / `cqs callees <fn>` — call graph navigation (add `--cross-project` for multi-repo)
- `cqs deps <type>` — type dependencies
- `cqs impact <fn> --type-impact` — impact analysis with type dependencies
- `cqs similar <fn>` — find similar code
- `cqs related <fn>` — co-occurrence: shared callers, callees, types
- `cqs where "description"` — placement suggestion
- `cqs trace <source> <target>` — shortest call path
- `cqs context <file>` — module overview
- `cqs impact-diff [--base REF]` — diff-aware impact
- `cqs review` — diff review with risk scoring
- `cqs ci [--base REF] [--gate high|medium|off]` — CI gate
- `cqs blame <fn>` — semantic git blame
- `cqs dead` — find dead code
- `cqs health` — codebase quality snapshot
- `cqs stale` — check index freshness
- `cqs notes add/update/remove/list` — manage project notes
- `cqs stats` — index statistics
- `cqs batch` — batch mode with pipeline syntax
- `cqs brief <file>` — one-line-per-function summary
- `cqs affected [--base REF]` — diff -> changed functions -> callers -> tests
- `cqs neighbors <fn>` — embedding-space nearest neighbors
- `cqs plan "description"` — task planning with templates
- `cqs test-map <fn>` — find tests that exercise a function
- `cqs doctor [--fix]` — check model, index, hardware
- `cqs diff <ref>` / `cqs drift <ref>` — semantic diff/drift
- `cqs suggest` — auto-suggest notes from patterns
- `cqs chat` — interactive REPL
- `cqs audit-mode on/off` — toggle audit mode
- `cqs gc` — clean stale index entries
Run `cqs watch --serve` in a separate terminal (or a systemd user service) to keep the index fresh AND serve fast daemon queries; `cqs index` for one-time refresh. `CQS_NO_DAEMON=1` forces CLI mode.
### Result trust — what you can act on without re-reading
cqs results carry calibration metadata. Act on it directly instead of paying a defensive re-read tax for what's already answered:
- **Edge provenance** (`edge_kind` on `callers`/`callees`/`impact` entries): `call` is syntactic ground truth; `macro_heuristic` / `doc_reference` are guesses (a token-tree match or a mention in prose, not a real call). Weight a heuristic edge lower than a `call` edge without opening the file. Absent ⇒ `call`.
- **Dead verdicts** (`cqs dead --verdict`): the tool classifies its own output — `test-only` / `low-confidence-live` / `known-gap` / `dead`. Trust the verdict; only `dead` is a confident absence claim. Use `Type::method` qualified queries to disambiguate same-named functions.
- **Ranking provenance** (`rank_signals` per JSON result): why a hit ranked — `dense` (concept match) / `fts` (literal-string match) / `name_match` / `note_boost`. A concept match justifies reading the chunk; a string match on a conceptual query is a known false friend; a `note_boost` is a prior opinion, not evidence. Suppress with `--no-rank-signals` on tight-budget calls.
When working inside a git worktree, `cqs search` (and a bare query) is **overlay-aware by default** — it reflects *your* uncommitted/committed edits, not the parent branch's index (opt out with `--no-overlay` or `CQS_WORKTREE_OVERLAY=0`). The overlay is search-only: graph and scout commands (`callers`, `impact`, `scout`, `gather`, `dead`, …) still serve the parent index in a worktree, so re-read the actual files before acting on their output there.
## Audit Mode
Before audits or fresh-eyes reviews:
`cqs audit-mode on` to exclude notes and force direct code examination.
After: `cqs audit-mode off` or let it auto-expire (30 min default).
## Continuity (Tears)
"Update tears" = capture state before context compacts.
* `PROJECT_CONTINUITY.md` -- right now, parked, blockers, open questions, pending
* `docs/notes.toml` -- observations with sentiment (indexed by cqs)
**Use `cqs notes add` to add notes** — it is available immediately. Direct file edits require `cqs index` to sync to SQLite.
**Sentiment is DISCRETE** — only 5 valid values: -1, -0.5, 0, 0.5, 1
```
### Phase 6: Verify
13. Run `cqs stats` to confirm indexing worked
14. Test a search: `cqs "main entry point" --json` (should return results)
15. Report summary: files created, chunks indexed, skills installed
## Rules
- **Never overwrite** existing files — skip with a message
- **Append, don't replace** CLAUDE.md content
- **Ask before** modifying `.gitignore` if it has complex rules
- If `cqs` binary isn't found, stop and tell the user to install it first
Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.