mcd-git

Before you start: read this whole install prompt, tell me in a few lines what this skill does and what installing it involves, and wait for my go-ahead before you do anything else. Prerequisites: Account and token required before any real use: a McDonald's China MCP token. The listing is free, and activating the token is described upstream as free. Get the token yourself, in person, because it needs mobile phone number verification: go to https://open.mcd.cn/mcp , sign in with your mobile phone number, open the console at the top right, click Activate, agree to the service agreement, and copy the token. Then configure the McDonald's China MCP server: name mcd-mcp, type streamablehttp, URL https://mcp.mcd.cn , header Authorization: Bearer <your token>, or set the MCD_MCP_TOKEN environment variable where the skill reads it that way. Keep the token only in your own private client configuration or environment: never commit it, never share it, and never paste it into a shared chat. Upstream states a limit of 600 requests per minute per token (429 above that). This skill also needs a machine where your agent can run shell commands, plus Python 3.9 or later. The mcd-git command line tool is installed separately from this skill copy: the SKILL.md installs it, when missing, with uv tool install git+https://github.com/zhutoumeme/mcd-git or pip install "git+https://github.com/zhutoumeme/mcd-git" (runtime dependencies rich==14.3.0 and qrcode==8.2, pinned exactly in pyproject.toml; note that this upstream install command fetches the repository as it currently stands on GitHub, while installing from this pinned checkout keeps the exact version recorded here). Configure the token for the tool yourself: the MCD_MCP_TOKEN environment variable first, or a token file at ~/.config/mcd-mcp/token on macOS and Linux, %APPDATA%\mcd-mcp\token on Windows, or under XDG_CONFIG_HOME. Never send the token in a chat: the SKILL.md forbids asking for it there, and the tool reads it only from the environment or that file and never prints it. With no token, every command also runs with --demo on synthetic data and orders nothing. Install "mcd-git" for me. It drives a small git style command line tool that talks to the McDonald's China MCP for you: cart, cheapest rebuild, locked order, and an order, a cancellation or a coupon claim only through the tool's own preview and confirmation gate. Repository: https://github.com/zhutoumeme/mcd-git (the skill is the whole repository at the pinned commit, SKILL.md at its root: 101 files, listed in the fingerprints below) Pinned version: install the code at commit cb1601dad6dc2ed44034fd15bb8dbccaf9d438af exactly. Do not substitute a newer version. If this commit is unreachable, stop and tell me. 1. Clone https://github.com/zhutoumeme/mcd-git into a temporary folder, check out commit cb1601dad6dc2ed44034fd15bb8dbccaf9d438af, and and copy the whole repository folder from that checkout, excluding the .git folder. Then compare every file in the folder with the fingerprints recorded for this listing on 2026-10-18: [FINGERPRINTS] - .gitignore: SHA-256 51b8fb0b0d55ea3474f433cdbc98ecf7ab7a63e2999dc7a15e6bfc55e779c0db - CHANGELOG.md: SHA-256 fc0ebefb56371a8ee7bb88c3001e5275e568e17a019887d712d3fb005ac6cfcc - CONTEST_DECLARATION.md: SHA-256 cd28101bcb29cc8fb24b372fe91ce6b42c4a1487a54e01f7ade0c8c6a84241b7 - LICENSE: SHA-256 cf218d0a19127d2b0923dd5074ec0448e0df4969a266fdadef3c12d8e24cfefa - MCP_INTEGRATION.md: SHA-256 6c90242b8e8d5959dd049176416a1ad73ca0c093eaaa0d53fb7b905d07d778f6 - README.md: SHA-256 a802bf85789971581821b5216ee8013c2b4081183235821730dcb2e0f760265b - SKILL.md: SHA-256 7e280dd8d3faa3eb85cb2a2575b258615c78188e3de3fc09a6823fb7b29e5ebe - assets/add.svg: SHA-256 7ca2de617767d91afc281040c50e4ec688d503ad01a6f30e3b9fd313805bf49f - assets/badges/demo.svg: SHA-256 0c40cc109268e3842a0df0f5b3a1546ef5b575bafbadca00cbf830f97b3b6f4b - assets/badges/license.svg: SHA-256 ae1c53b81ee0b5e4eedb9988bc92aa7c3f544e0d3779353e0a4c6b0329e57e18 - assets/badges/mcp.svg: SHA-256 9f7923f727e39b0ae400f1e134c974059f7efcf31ce125521f8f417928f48b24 - assets/badges/python.svg: SHA-256 9d7870961e488300dcc854851528785510375534987b36cf64a7c098b76f06f1 - assets/badges/unofficial.svg: SHA-256 c1e9c6b5d7df65f7630ad4a6b000f871456287981202b224a40861b9e7493f4d - assets/card-demo.svg: SHA-256 27382e1b2b6219be2d8b9f1671a1edea586e91e8b2b231bc83c77daf4520d172 - assets/card-grid-demo.svg: SHA-256 c19f756886697a62e45b9948e643cafe3a1734b46ce0561778b09383a8e71bf1 - assets/card-receipt-demo.svg: SHA-256 cb3f70697c6da6ee15c93ea4c06bd1f0f579cef6e98d120d9bfcf61dac0ecabb - assets/card-receipt.svg: SHA-256 ee2cf2c169ebf021f8090ef806727e69a233a013766eddaafd656ff5ab8f9e51 - assets/card.svg: SHA-256 b3dc4dca3af50ed13ccec9dd285e9a17eac67ebff14b8f975f4df67be7011126 - assets/cherry-pick.svg: SHA-256 479c7ea9ddd6fc9fd4f93dad0c47a51b7eb22a2663a0acd0617144443ea213a9 - assets/commit.svg: SHA-256 41a8cb2c04b316a329434976ff88f9ed69c7902175229dce9a663e2a58cb79c4 - assets/demo.gif: SHA-256 a4b2f17876574d5d77f992d9f3a7028079c3bf8ae9d323ee3a9b5ce92303e556 - assets/diff.svg: SHA-256 a5209a5d4580a67ad5016791b5f8493b2d509f34e3c171ad41c315704c7dc72a - assets/help.svg: SHA-256 fc1a6d7185845d627c4fd1090b81656faad08db6455311344cb6f8272c4d5290 - assets/init.svg: SHA-256 047ad04d5a6e2ecf8edb4aca25966e3d6731d4bf1970e2d1c93c0b857f70ac0a - assets/log-graph.svg: SHA-256 bde21bf80fa38c3fbcf757bb3fda6913316303c5f3c0b1bbdeef985f1d484035 - assets/log-stat.svg: SHA-256 0d6a5c50535f53d3fe2aa27acf177478ab1c4af39cab60ef2721d416f918fa99 - assets/pull.svg: SHA-256 648f60990feb3a8ce2049ce7f9f2b7f99f0bed90d81dbc4e24332c87c27bc457 - assets/push.svg: SHA-256 bdc66156be90fdb68f6a56b7ca10bef99ac54b060992b3ae7a753eeb2e181774 - assets/rebase.svg: SHA-256 df6ef71ecbea1c0bedfa6293975a2f665a68c363f028c3232f4869e1699cd834 - assets/show.svg: SHA-256 a6f573e99505ccbe1e631c14a8d6f170e8320c810d8d9c21da216c1cf85efbe7 - assets/status.svg: SHA-256 e1df8bfa9eb38c4d79f9ffcb96dccfe3bb063855864f82d5d6ad979ec89e020a - mcp-config.example.json: SHA-256 7644e429708a6aa8ceb09505dcd0fc9a092b3608e974767360f4c158cb1047dd - pyproject.toml: SHA-256 51a0b12880252da6c268bbe9155cd94b99bf13596924d52e2f61df1dc92f5b3b - scripts/demo.tape: SHA-256 335474d1099feada5d41950d3a4602464bc04b80959a27435059dda2261ef653 - scripts/make_screenshots.py: SHA-256 79453b65bedf97b8c8c3fb9fded4271a82f40459dfe7145a293851fdba209d95 - src/mcd_git/__init__.py: SHA-256 3a8d2427e8838fd0b54a33808877258fdd8d6b6a0477ad69715ce50f43bec5a8 - src/mcd_git/__main__.py: SHA-256 5af614ce6a01c1564ddab0718f9cf9177c9ec10bdcef28568d1a3418940c7bb7 - src/mcd_git/api.py: SHA-256 70f87fbc8a9a24686350df441221b1c35d28139c80fd573c3459f13af6f7c060 - src/mcd_git/card.py: SHA-256 12b17c23457c1d0fb99e22a16e9400608c22ae52157fff1348b1b5207645419a - src/mcd_git/card_receipt.py: SHA-256 243a88e6f68808a5cda7ba9165ce441e3b8a4f9c5e25665ce379d94f508069ac - src/mcd_git/card_skyline.py: SHA-256 3e2d1761945c4245969eeda63de01998f974064406f4ecc76eac4b724d704989 - src/mcd_git/cart.py: SHA-256 02e2bff7667f17ad1e2bce8ce4ee7d8064a193ae209f60ec0e42d240738d9438 - src/mcd_git/cli.py: SHA-256 a178b52b5eb71acc2aee5c894ee9bc82379db9b3f54817bdf793640aff411ab5 - src/mcd_git/commands/__init__.py: SHA-256 9ad01af24755abed2776d5adbc8079eaae3790eedf0c71e1063e3c63db34ebd8 - src/mcd_git/commands/card.py: SHA-256 070dabe6c212e9762dcc584c9804a1f745f52bfc375db53e4045dec022f998db - src/mcd_git/commands/cherry_pick.py: SHA-256 01692962bc207e2cdb065c5b3f929a215c0751bd9a2712f7f0727d60bc4606b4 - src/mcd_git/commands/commit.py: SHA-256 cb39317ef66328b040cbf85b6aeaf4950f6419fe5eea8e9fc905391d662a1dd1 - src/mcd_git/commands/common.py: SHA-256 5b1ffeea4cc2e80852c0cfd973fd82df23f0b94fed15186b958e187c4591c75f - src/mcd_git/commands/completion.py: SHA-256 d63d989db669c753e584dd2e8e254a25a4fecad0a94103cc0b504b708838fc5b - src/mcd_git/commands/diff.py: SHA-256 b3d47332eeaa8df22527070eb0e3fbb4cfe670f1ea577563a65ea4b1841139dc - src/mcd_git/commands/fetch.py: SHA-256 f0ddfce470ab1df6ea763ed359769cfb0894f48bf0ec136992485cbd8b671743 - src/mcd_git/commands/help.py: SHA-256 f45dd39a29807840c64b0219f413ed141e5ed292cca48b9bb9b5ffb787940e90 - src/mcd_git/commands/init.py: SHA-256 6784af80c59df72891c8120588bc43945dc5e013e3d354c9d4ff852ddc545565 - src/mcd_git/commands/log.py: SHA-256 127cc7bcd1538a7d3df5c0b0c5fc9154ed3087fe1196ad2638c1f9e06d743bef - src/mcd_git/commands/log_stat.py: SHA-256 30a2b18f32cb0ae875051af887c7fcb0f683b83f6664151d53510745d6292ca7 - src/mcd_git/commands/pull.py: SHA-256 27461a3a1b4f4f5333b0699445758d4bcb4f538c1c7c2a76ffe1b2f7652c795e - src/mcd_git/commands/push.py: SHA-256 eac687279955c918333c7e381d6636b1b2619a4e48bb8987e0b8eb0bf80ff19f - src/mcd_git/commands/rebase.py: SHA-256 54585849e6b3f0112afceebaae719a22073bdfac9c290e0be1011a1d5474a25c - src/mcd_git/commands/revert.py: SHA-256 bad93c9736f29ee6eb70e7b72fae75d3a138e9639be75e4ad0ebe2dafad81056 - src/mcd_git/commands/stage.py: SHA-256 03f53340bf651460b8be415d4c1072e1f78e8229e1ce51a3cf1617f2a7924ba9 - src/mcd_git/commands/status.py: SHA-256 276a8188af0f716ebe151035c5b57326f77b2496d68f650237b90111674b5933 - src/mcd_git/complete.py: SHA-256 ae7e76295e57061a247ee0ec3c9f905c7d42ff0ee59b14c84ce56cc2dc860bb8 - src/mcd_git/completion.py: SHA-256 22bba9ff55cb8c4ed79e80c949334f8b6a331bd03720d3542eaa93c395d3d3b8 - src/mcd_git/context.py: SHA-256 d001b2e5717d1cb3b6eafa28dd4b50b28427176ff629bcfb651d0250bdb844b9 - src/mcd_git/demo/__init__.py: SHA-256 8ccf43897d9c034c1d81bd911812c44e24c83e878f264205507790abb5cbcdc0 - src/mcd_git/demo/client.py: SHA-256 2c6b9d7457c01dfa34e95ac608f60069f9bb9c2bf6eb598fe02b726562b59355 - src/mcd_git/demo/world.py: SHA-256 056556df688d53e5716b845470f5c79138b6831012dfef05e28720843f040fbe - src/mcd_git/entry.py: SHA-256 2ade2eb82fd7879f35e635050307f42d4ac4656983ca5d017471b2e31ef52dc3 - src/mcd_git/errors.py: SHA-256 1f91edd125b0f8bc81566399b4e49d1fe99c965f806a8285f34533443598b0d0 - src/mcd_git/gate.py: SHA-256 0d30ccdb1720adef7b4a13389314d7573452f7d862db2d3fe39f7a61b3ccfc52 - src/mcd_git/history.py: SHA-256 28d220904b4cd77aeb6dac7eefa85c70a71de5295de2399b42f8e1ca3aab2a36 - src/mcd_git/ledger.py: SHA-256 b0e0da090b84876bdfc0b7c447c57cf22fce42b0dacde6deba7d32cc9c5ac852 - src/mcd_git/mcp_client.py: SHA-256 3b4c2ad8314827975b946f754f2b1b52eba368fd1e747be12c44b3cb812e2129 - src/mcd_git/menucache.py: SHA-256 41e583571b681b24343a6e634f6cc2dab298c0cc0dba8bc85cbfeefdc6ba3d37 - src/mcd_git/money.py: SHA-256 0024314d750b5960486b2f9abb96aab272e089716a8da79e78f69ef1141f0207 - src/mcd_git/optimizer.py: SHA-256 a604eced0d871683b8e50eaacdebfeee6a592c5e452cd7d74f1c5084b3e5ff6b - src/mcd_git/render.py: SHA-256 7bc8419641405be88fc435a8345b07d0d0835dc1e0c59a8ecf4dff54905be108 - src/mcd_git/state.py: SHA-256 e81812f816e090b34647c3eabad8eb526861d87d380a2d6be3b4f4f6d518406c - src/mcd_git/stats.py: SHA-256 167d5d8f108cfe258c7fdd902b3051f9f56f9165ce458943b261ae7c0da276e5 - src/mcd_git/textnorm.py: SHA-256 2cba2480f885830cc4ad962f0bf9182c2d69fe943203fd12429651e95b2bafe2 - tests/__init__.py: SHA-256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 - tests/conftest.py: SHA-256 f855d97f28b9b70868a0adde7187895a5f32d506aae3cb3987aaf997fb926e61 - tests/test_card.py: SHA-256 094809d21c860f21f1cf5cc58815945bd8fdc3c9a30b99b08ec389927962f471 - tests/test_card_styles.py: SHA-256 be57659f445d44499da1ea211dccb545815cf2460db790b22eae60bdf613cd1c - tests/test_cart_state.py: SHA-256 a5c19a3f2c9da38c9329445116ff573c0276b36d7eb0335997d5b5a7b4c9389f - tests/test_cli_ux.py: SHA-256 72c3e8e6289b5b6107f93cb1a2e3a22fa8c69d8a804655d1a40a0d4a6db84692 - tests/test_client.py: SHA-256 9def0896e0b09ca970d1174ae954f7542fb6c6775f2f0da6916172b30b0c789b - tests/test_complete.py: SHA-256 bac7f26acf119c1a087c3084a5dc8bee8d3eb2c1c18938db5a3c6ec1b7639b07 - tests/test_completion.py: SHA-256 fffb1b2852c80478f4b87286e5e594903e906f04dc837c01924fd2ed2619f85c - tests/test_completion_e2e.py: SHA-256 58b7bcb6b494ee2a45c1b2c24c99130043cb539558f9462a162ba5b04aff3207 - tests/test_demo_e2e.py: SHA-256 a38c2a4f426c45247d1f053894f2b38be95f971f8f60c0e965a82f9185ef1a7a - tests/test_ledger.py: SHA-256 315408ad2f6c4ba73c555e3a1175704477bfa357afdc62f0d8c98590c5ce4611 - tests/test_log_stat.py: SHA-256 0395f482b0c3bc1427095c2d266f6123329f0d0863c34f1e4be9df5d6dfb4ab6 - tests/test_menu_cache.py: SHA-256 cfc51f28fdbb8e91fccdd82ecd1a9541b9fe2a9813ff270d15d750ed577a0bfd - tests/test_menu_cart.py: SHA-256 457491be656690e03d1ae0fc4d1a2ae02ddf8b628eef7e31498de27d8aa0385d - tests/test_optimizer.py: SHA-256 b76cb21a29677ae3c0b248e09b46faac2d2d1fe7a838fa0ee960cccb7b138d41 - tests/test_parsing.py: SHA-256 b019609693be52d5461b88df9be0f930441b16253d2ed677083da543b524c71e - tests/test_paths.py: SHA-256 f9230d898175dd6edab12f0815702901ff12bdab8ff9fa94b602751a94ba357f - tests/test_pull_gate.py: SHA-256 2997f0038336a91a9a78ee8cf8b9c08495828f76d91d17ebd73550acaf457dbf - tests/test_push_gate.py: SHA-256 2e3a7bee305611d5c5072a316eeb57cc4e10f88824433b966ade0305ce21a745 - tests/test_qr.py: SHA-256 c30be7716a82dd530bfe6b411525483c59035a3339449ca53dd5bcf67766f473 If a file does not match, it changed since the listing was prepared: do not install it yet, tell me what you found and let me decide. 2. Read SKILL.md in full (and every other file in the folder) and tell me in plain words: what the skill does when used, which services it connects to, whether it reads or sends any personal information or keys, and anything that seems unusual. Stop on any red flag and tell me before going further. Confirm these points from the files: - The repository holds SKILL.md, the mcd-git Python package under src/mcd_git/ (cli, api, a gated mcp_client, cart, optimizer, state, ledger, menu cache, card renderers, a synthetic demo world, and one module per git style command under commands/), pyproject.toml (runtime dependencies rich==14.3.0 and qrcode==8.2 only), tests/, assets/ (SVG and GIF illustrations), scripts/ (a demo tape and a screenshot maker), README.md, CHANGELOG.md, MCP_INTEGRATION.md, LICENSE and mcp-config.example.json. The agent drives it only as git mcd ... --json (or the equivalent mcd-git entry point); the SKILL.md forbids the agent from calling the McDonald's write tools directly, even if a McDonald's connector is configured in the same environment. - At use time, the tool's only network destination is the McDonald's China MCP server: the URL is hardcoded in the code as https://mcp.mcd.cn, it cannot be changed by an environment variable, other hosts or protocols are refused before any request, redirects are not followed, and the token is only ever put in the Authorization header to that host (the code also scrubs the token out of error text). The calls send your store search (city and keyword must be given together), your item names or codes and customisations, quantities, pickup mode and time, and remarks for delivery; for delivery it reads the delivery addresses already saved on your account and keeps only an address id and a masked hint locally. Menu results, coupons, prices, order status and your last ten orders are returned to your machine. The payment link the server returns (payH5Url, on m.mcd.cn) is handed to you to pay yourself; the tool never pays and never polls order status. - Three write actions exist, all behind the tool's code level confirmation gate (gate.py issues the approval; mcp_client.py refuses any other write tool outright, including mall-create-order, draw-lottery, party-order-create and delivery-create-address, which this tool never calls). push calls create-order only after a preview showing store, pickup mode and time, tableware, every item, coupons and the payable amount, and only when you explicitly agree: it then runs the exact next command with --confirm <commit hash>, creating a pending payment order that you pay yourself before its deadline. revert calls cancel-order the same way, with a cancellation reason you choose. pull calls auto-bind-coupons only after a preview naming every claimable coupon: it claims all of them at once, because the interface cannot claim a subset, and it must never be run on a timer or in a loop. If a push reports uncertainty about whether the order was created, the rule is to check with log first and never blindly push again. - Local writes on your machine, under ~/.config/mcd-git/ by default (or %APPDATA%\mcd-git on Windows, or XDG_CONFIG_HOME; the README states directory permission 700 and file permission 600): state.json (chosen store, cart, order commits, pushed orders), ledger.json (a card only ledger: order time, status, item names and quantities, original, discount and paid amounts and pickup way; the order id is stored only as a hash, and no store, phone number, address, pickup code or payment link is stored, per the README), menu-cache.json (item codes, names, types and store, read locally for tab completion without any network call), and the contribution card SVG written to the path you choose. The SKILL.md forbids the agent from committing or uploading that card anywhere or setting up scheduled runs of it. Nothing is sent anywhere during installation of this skill copy itself; the only download at install time is the repository from GitHub at the pinned commit, plus the separate tool install disclosed in the prerequisites if you ask for it. The listing and the token are free; you pay only an order you confirm, on the official payment link. 3. When I say "yes, install", install it as a skill: copy the whole folder into the agent's skills directory, in a folder named "mcd-git", keeping every file (.gitignore, CHANGELOG.md, CONTEST_DECLARATION.md, LICENSE, MCP_INTEGRATION.md, README.md, SKILL.md, assets/add.svg, assets/badges/demo.svg, assets/badges/license.svg, assets/badges/mcp.svg, assets/badges/python.svg, assets/badges/unofficial.svg, assets/card-demo.svg, assets/card-grid-demo.svg, assets/card-receipt-demo.svg, assets/card-receipt.svg, assets/card.svg, assets/cherry-pick.svg, assets/commit.svg, assets/demo.gif, assets/diff.svg, assets/help.svg, assets/init.svg, assets/log-graph.svg, assets/log-stat.svg, assets/pull.svg, assets/push.svg, assets/rebase.svg, assets/show.svg, assets/status.svg, mcp-config.example.json, pyproject.toml, scripts/demo.tape, scripts/make_screenshots.py, src/mcd_git/__init__.py, src/mcd_git/__main__.py, src/mcd_git/api.py, src/mcd_git/card.py, src/mcd_git/card_receipt.py, src/mcd_git/card_skyline.py, src/mcd_git/cart.py, src/mcd_git/cli.py, src/mcd_git/commands/__init__.py, src/mcd_git/commands/card.py, src/mcd_git/commands/cherry_pick.py, src/mcd_git/commands/commit.py, src/mcd_git/commands/common.py, src/mcd_git/commands/completion.py, src/mcd_git/commands/diff.py, src/mcd_git/commands/fetch.py, src/mcd_git/commands/help.py, src/mcd_git/commands/init.py, src/mcd_git/commands/log.py, src/mcd_git/commands/log_stat.py, src/mcd_git/commands/pull.py, src/mcd_git/commands/push.py, src/mcd_git/commands/rebase.py, src/mcd_git/commands/revert.py, src/mcd_git/commands/stage.py, src/mcd_git/commands/status.py, src/mcd_git/complete.py, src/mcd_git/completion.py, src/mcd_git/context.py, src/mcd_git/demo/__init__.py, src/mcd_git/demo/client.py, src/mcd_git/demo/world.py, src/mcd_git/entry.py, src/mcd_git/errors.py, src/mcd_git/gate.py, src/mcd_git/history.py, src/mcd_git/ledger.py, src/mcd_git/mcp_client.py, src/mcd_git/menucache.py, src/mcd_git/money.py, src/mcd_git/optimizer.py, src/mcd_git/render.py, src/mcd_git/state.py, src/mcd_git/stats.py, src/mcd_git/textnorm.py, tests/__init__.py, tests/conftest.py, tests/test_card.py, tests/test_card_styles.py, tests/test_cart_state.py, tests/test_cli_ux.py, tests/test_client.py, tests/test_complete.py, tests/test_completion.py, tests/test_completion_e2e.py, tests/test_demo_e2e.py, tests/test_ledger.py, tests/test_log_stat.py, tests/test_menu_cache.py, tests/test_menu_cart.py, tests/test_optimizer.py, tests/test_parsing.py, tests/test_paths.py, tests/test_pull_gate.py, tests/test_push_gate.py, tests/test_qr.py). 4. Verify with no network calls: frontmatter valid, files in place. 5. Report what was installed, where, and what I still need to do myself (for example: get the McDonald's China MCP token myself at https://open.mcd.cn/mcp with my mobile phone number if I do not have one, put it only in my own private MCP client configuration or environment variable and never paste it into a shared chat, install Python if it is missing, and set up the mcd-mcp connector to https://mcp.mcd.cn if it is not configured; using the skill is a separate step that only starts when I ask for it, and any order, coupon claim or booking happens only as disclosed above). GitHub is optional: if I have a GitHub account or the gh CLI, you may use it; otherwise public access is fine. Never require it unless it's in the prerequisites above. Rules: don't touch anything outside the temp folder and the install target. If anything looks off, stop and ask me.