[standard] G-SKLL | Bring up a whole oracle node on a remote host — provision the user, install the full toolchain (maw-js, arra-oracle-skills, arra-oracle MCP v3, omx), create the oracle repo, and stand up its Claude-leader + omx-coder team. Idempotent, dry-run by default. Use when user says "oracle-up", "bring up an oracle", "new oracle node", "provision oracle on <host>", or wants a fresh self-sufficient oracle on a remote machine. Do NOT trigger for local identity setup (use /awaken), repo-only creation (use /bud), or cloning for dev (use /incubate).
SKILL.md
/oracle-up — Bring Up a Whole Oracle Node
"/bud makes a body, /awaken gives a soul — /oracle-up puts the body on a host, hands it tools, and wakes its team."
Provisions a remote user, installs the full oracle toolchain, creates the oracle repo, and brings up
the standard team (Claude leader + 2 omx coders + 1 sonnet digger) — the proven noah/world.wg recipe.
Idempotent. Dry-run by default. Each phase verifies before the next. Real mutation only with --apply.
Then verify: ssh <user>@<host> 'whoami && sudo -n true && echo SUDO-OK'.
⚠ fail2ban hazard: user-onboard's verify phase ssh's in before the user can log in →
publickey failures → can self-ban your IP (esp. bantime=-1). Recover via the out-of-band path:
fail2ban-client set sshd unbanip <ip>; persist ignoreip for the trusted subnet.
gh repo create <org>/<name> --private
# on host as <user>: clone into ~/Code, scaffold ψ/ + CLAUDE.md (or maw bud / run /awaken)
P6 — Team (the-team-is-a-file, 3-file pattern)
Write charterψ/teams/<name>-team.yaml (lead claude48 + coder-1/2 omx + digger sonnet) and
engine map.maw/maw.config.80.json (commit both; live state in ~/.claude/teams/ is never committed). Spawn:
maw wake <org>/<name> --wt coder-1 -e omx --session <s> # org-qualified REQUIRED
maw wake <org>/<name> --wt coder-2 -e omx --session <s>
maw wake <org>/<name> --wt digger -e sonnet --session <s>
# lead = claude48
Verify isolation by cwd (walk each pane pid→cwd; distinct paths), never trust the roster.
Or just /team-up --gather (reads the charter). maw swarm = shared cwd (read-only); maw wake --wt = isolated (writers).
P7 — Token
maw token use <name> if a Claude token is already in the host pass-store (maw token ls), else note + skip.
