HR plugin

Use when the user asks to install, preview, or deploy a live artifact (HTML template plus manifest) shipped with the HR plugin. Pre-flight validates the customer's Canvas schema has the item types and fields the artifact expects; installs to a local html file under the workspace artifacts folder for preview, or to Canvas as a live-artifact page via suggest_change for production. Templates ship immutable — this skill produces a customer-specific instance against their MCP connection.

Use when the user asks how something in CoworkCanvas works or has a natural-language question about the platform; when they want a step-by-step numbered walkthrough of a task via --howto, such as add a custom field, create an item type, set up an OAuth client, import bulk data, or configure MCP; when they ask what a platform term means via --define, covering vocabulary like slug, isCore, isFilterable, tsvector, suggest_change, item type, custom list, MCP, Workflow, Step, FormAssignment, authority_source, cites_authority_sources, obligation, the shared-core item types, and deprecated pre-refactor terms; or when they paste an error message or describe a symptom that needs diagnosing via --diagnose. Grounded in the bundled docs snapshot, every answer cites the specific doc file and section, and works offline. Questions of the form show me the X dashboard or where do I see X belong to coach-dashboard-link; this skill explains how dashboards work and how to create one.

Use when the user asks to run, or dry-run, an autopilot pass over their assigned-step queue — a headless, scheduled driver built to be fired by a schedule (Claude Cowork / Claude Code / ChatGPT Codex; /coach-setup registers it), running as the user. Scans via coach-workflow-scan, executes every ready step via coach-workflow-execute --headless (each drafts a suggestion for the user to review), posts a one-time ALL-UPPERCASE INPUT NEEDED placeholder suggestion on steps missing an input, re-checks those steps each run and drafts for real once the input arrives, skips already-handled steps, and emits one digest of what it drafted, what input it requested, what needs you, what is blocked, what awaits approval, and any rubber-stamp-approved placeholders to reopen. Never commits, never approves, never re-runs an already-handled step.

Use when the user asks to remove, reassign, or offboard a departing or transferring person across Canvas item assignments in bulk — or, with --report, to compile the handoff document for a person going on leave or transferring: every open work item they own with its state, next action, stakeholders, and outstanding workflow Steps. Change actions cover every audit, issue, risk, control, process, policy, and workflow Step the person is attached to, in one operation instead of clicking through each item, and always propose via suggest_change — admins approve the batch in Canvas. The report is read-only and shareable after redaction. Works on any instance with the shared core starter pack; run /coach-starter-pack first if pre-flight fails.

Use whenever the user asks to create, build, design, author, or set up a dashboard, report view, or data visualization page. Gathers the dashboard name, visibility, the underlying GraphQL query that feeds the widgets, and the widget definitions (stat-row, table, chart, filter-bar), then submits a single suggest_change suggestion against the dashboard target that creates the dashboard.

Use FIRST whenever the user says show me, let me see, where do I see, take me to, or open something in the product; asks to be sent a link to a dashboard with or without filters ('show me finance processes with no controls', 'link me to the RCM for the Q3 project, pending only', 'everything within two hops of the Order-to-Cash process'); asks which dashboards exist; or asks a question a system dashboard answers (overdue issues, stuck workflows, owner workload, SOX status, project coverage, AI suggestion outcomes, process coverage, what is connected to an item) and may want the number as well as the view. Resolves which dashboards this workspace surfaces with dashboardTypes, picks the right one from the 17-dashboard catalog, composes the canonical link or deep link (Processes, RCM, Universe full or focus mode), and when the ask exceeds the dashboard answers it with query_data. Read-only.

Use when the user asks to upload, attach, or add a file, document, evidence, or supporting material to a workflow step; to link or reference an external document URL on a step — a Google Doc, SharePoint file, Confluence page, OneDrive link, or any public web link; or to attach, archive, or file a document against an ITEM — a control, policy, authority_source, or audit — rather than a specific step. Also use for uploading straight into an item's DOCUMENT field, and for populating a form file field with the returned document id.

Use when the user asks to export, download, archive, snapshot, or bundle Canvas content — one item with all its workflows and data, a curated set, or a full tenant. The plugin's single export entry point. Redacted modes run the /coach-redact redaction pass before anything is written for sharing — internal review notes and coaching comments never leave Canvas without explicit user confirmation; raw mode is the verbatim local archive of a single item (no redaction, local archival only). Covers the shared core item types plus attached Workflows, Steps, and StepDocuments. Run /coach-starter-pack first if pre-flight fails.

Use when the user asks to create, add, build, or design a workflow-step form for missing inputs from someone who is not executing the workflow or step. Executor work belongs in step results. Validates field definitions and proposes the schema through suggest_change; filling an existing form is coach-form-fill.

Use whenever the user asks to populate, pre-fill, fill out, draft, or submit values for an existing step form. Proposes values via the submit_form action so the assignee sees the AI-suggested fill on the form page and can edit then submit in one click. Never use action update with form.values for fills — that lands the preview in the schema-diff UI on the step viewer instead of the form page.

Use whenever the user asks to create, add, draft, or open a new item of a known type (e.g., audit, risk, control, issue, policy, process). Works for any admin-configured item type: reads the type's schema via get_schema, gathers required fields interactively if not supplied, validates values against field definitions, and submits a single suggest_change action create suggestion for human approval.

Use whenever the user asks to update, change, edit, set, rename, correct, or archive an existing item (e.g., change a risk's owner, move the project to execution, archive a retired control). Works on any admin-configured item type: resolves the item by id or by type plus title search, shows the current values of the targeted fields, validates new values against the field definitions from get_schema, and submits a single suggest_change action update suggestion for human approval.

Use whenever the user asks to link, relate, connect, or tie one item to another (an audit to a risk, an issue to a control) — or to unlink one. Resolves each side by id or title, validates the kind (parent, child, sibling, related), and submits one itemrelationship suggestion via suggest_change for approval; --unlink mirrors the flow with a delete.

Use whenever the user asks to notify, nudge, remind, or email a stakeholder about a Canvas item or Step, or to build a distribution list for a report, attestation, or committee. The generic outbound-comms primitive: dl mode assembles a deduplicated recipient roster from Canvas fields plus Workday/Outlook directory lookups (named sets like board or audit-committee, or explicit role lists); draft mode composes the stakeholder email with the Canvas link and due date. Every draft passes the /coach-redact redaction pass and lands as a DRAFT — Gmail/Outlook create_draft or a clipboard file — never auto-sent; the user hits send. Needs the shared core starter pack (run /coach-starter-pack first if pre-flight fails).

Execute a read-only GraphQL query against the Canvas tenant via the query_data MCP tool. Translates a natural-language data request into a valid GraphQL query against the platform's queryReference catalog, runs it, and presents the results in a clean format. Handles pagination, full-text search, structured filters, and csv/jsonl export for large results. Use whenever the user asks to find, list, search, count, look up, or export items, workflows, steps, users, or any other queryable resource in the tenant. If the user says show me, where do I see, or take me to, and a system dashboard covers the ask, coach-dashboard-link goes first; use this skill for the data itself or when no dashboard fits. Any ask that walks two or more links in one go — an item to its workflows, their steps, the items linked to those steps, the templates those items use, the runs of those templates — is a graph traversal: run it as ONE universeFocus path-mode query, never a chain of per-item reads.

Use when the user asks to redact, scrub, or sanitize a staged directory of outbound content before export — the standalone entry point for ad-hoc redaction passes, and the plugin's single redaction engine: every skill that produces shareable output runs this same pass inline before anything leaves the workspace. Deterministic internal-only patterns are auto-removed, ambiguous ones surfaced for user confirmation, and a redact report written. Build-list rows 7, 30.

Use when an assembled document package leaves Canvas — board decks, regulator attestations, 302/906 certification packages, project reports. Renders markdown to docx+pdf via pandoc, hard-gates through the /coach-redact redaction pass (halts on needs_user), packages the cleared artifacts, and hands distribution to /coach-notify. --cite binds claims to live Canvas records. Section composition lives in the covering assureswarm.com/workflows workflows.

Use when the user asks to design, plan, or draft a Canvas schema — figuring out what item types and fields to set up for their domain; to add fields to an existing item type; to add a single new item type to an existing schema; to build the options for a SELECT or MULTISELECT field — an enum-style option list such as severity, status, frequency, regulators, regions, or audit-phase; or to export, back up, dump, or diff the current tenant's schema, or migrate it to another tenant. Five modes on one skill: the full design interview by default, plus --add-field, --add-type, --options, and --export for incremental changes.

Use when the user asks to validate, lint, or check a schema JSON file before pasting it into the Bulk Import admin page. Lints against the platform's bulk-import format — catching missing data wrapper, slug collisions, invalid field types (including the retired RELATION / RELATIONS), missing required keys, leftover relatedItemTypeSlug keys, and search-flag combinations rejected at import — and reports every issue with file path and field path.

Use when the user wants to report a security incident or vulnerability to CoworkCanvas (the vendor's security desk). Captures SOC 2 / ISO 27001 fields (detected_at, severity + rationale, affected systems/data, evidence), runs the /coach-redact redaction pass, then drafts via Gmail create_draft — drafts only, the user sends. Non-security helpdesk → /coach-ticket; to log the incident in your own tenant, create an issue item.

Use when the user asks to set up, connect, configure, or initialize the HR plugin in a workspace — or, with --verify, to verify, check, or confirm the tenant is set up properly before launch. Setup is one-time per workspace, idempotent and safe to re-run to refresh the schema snapshot or manage the autopilot schedule: detects available Canvas MCP servers, asks which company instance is theirs, probes the schema, writes .coworkcanvas/config.json plus a schema snapshot, and offers to register the recurring /coach-autopilot schedule. Verify runs the pre-launch readiness checklist and reports every gap with a specific remediation. Every other skill across the coach/sox/audit prefixes reads the config this writes.

Use when the user asks to apply, install, or bootstrap the starter pack — the canonical 7-item pack shared by every *canvas plugin (auditcanvas, soxcanvas, grccanvas, regcanvas): audit, issue, risk, control, process, policy, and authority_source item types. Optionally overlay audit, sox, reg, grc, or generic domain-specific seed data (sample authority_source items, regulator vocabularies). Produces a bulk-import JSON the admin pastes into the tenant's Bulk Import admin page; idempotent — re-running diffs the schema and emits only the delta.

Use when the user asks to open, file, or raise a support ticket with CoworkCanvas support because something is broken or blocking work; to reply to, follow up on, or update an existing support thread in Gmail; to check, list, or review the status of their support tickets and see which threads are waiting on them; or to send product feedback, a feature request, or an improvement idea for CoworkCanvas.

Use when the user asks for a tour, orientation, or introduction to CoworkCanvas. Role-tailored: names the 3 skills to learn first, walks through the 7 shared-core item types (audit, issue, risk, control, process, policy, authority_source), and points to the right sibling plugins for the user's role; the onboarding checklist artifact tracks progress through the tour.

Use whenever the user asks to assign, schedule, set deadlines, or pick approvers for the steps of a workflow. Sets approvers and due dates on a workflow instance via suggest_change against the step target — walking the steps, resolving users by name or email to user ids, and submitting one update suggestion per step that sets the approvers array and dueDate field.

Use whenever the user asks to attach, instantiate, apply, or run a workflow on an item (e.g., attach the standard execution workflow to this project). Instantiates the workflow under the parent item via suggest_change against the workflow target — resolving the parent by id or title, picking a workflow template by name from the available templates, and submitting a single suggestion that creates the instance with its steps auto-generated from the template.

Use whenever the user wants to author a workflow's step nodes and edges from scratch — either a one-off workflow directly under a single item, or, with --as-template, a reusable workflow template, blueprint, or pattern for the tenant's template catalog. One suggest_change per call: the workflow target (itemId plus diagramNodes and diagramEdges) for an instance, or the workflowtemplate target (name, itemTypeId, nodes, edges) for a template. Distinct from coach-workflow-attach, which instantiates an existing template rather than authoring one.

Execute a workflow step on the user's behalf. Reads the step via get_step_context, computes its direct upstream steps from the workflow's diagram edges, refuses to proceed until every upstream step is COMPLETED, performs the work the step's instructions describe, and submits the result via suggest_change for human approval. Use whenever the user asks to execute, run, work on, complete, or do a specific workflow step.

Use whenever the user asks to export, download, archive, snapshot, or bundle a workflow's data. Gathers the complete data of a workflow instance — every step's result, every form's submitted values, every uploaded or linked document — into a local directory: walks the workflow via query_data, downloads attached documents via download_document, and writes a structured local package the operator can archive or share. Read-only; never mutates the workflow.

Use when the user asks what to work on, to triage a queue, as the scan phase of an autopilot run — or to check progress across a portfolio or cycle, find stalled or overdue work, see what is at risk, or name who to nudge. Read-only in both directions. Mine mode classifies the current user's assigned steps into four doer-states plus an awaiting-my-approval line; sweep mode is the lead/PMO view over every owner's steps across one workflow, an item's workflows, or a whole item-type portfolio, bucketing overdue, due-soon, stalled, awaiting-reviewer, and unblocked steps with a nudge target for each and an optional critical path. Never mutates; pairs with coach-autopilot (which acts on the ready ones) and coach-notify (which sends the nudges).

Use when HR needs to select or execute recruiting, onboarding or offboarding workflows in the company's AssureSwarm instance, with restricted personnel information, authorized decisions and HR-to-IT handoffs.