bind-workspacelisted
Install: claude install-skill tboome33/obsidian-mcp-router
# bind-workspace
A deterministic script. Every step has ONE canonical prompt (below, in English) and ONE tool call. Ask, wait, act — never skip a step, never guess an answer, never bind a vault the user did not name in THIS conversation.
**Language rule.** The prompts below are the canonical text. Detect the user's language from their messages: if it is not English, translate each prompt faithfully into that language (same sentences, same choices, same order). Vault names are never translated.
**The model this implements — the user's own words, and nothing else.** A workspace has ONE primary vault, always read-write. It may have secondary vaults, each in one of three modes: **read-only strict** (`locked`), **read-only with writes on request** (`soft`, the default — a write must carry `confirmSecondaryWrite: true`, set only after the user said yes), **read-write** (`writable`). Outside workspaces, only the vaults in `openVaults` answer, everywhere.
Tools: `list_vaults` (detect what is open), `confirm_workspace_binding` (bind), `set_secondary_vault_mode` (one call per secondary).
## Step 1 — where we are
Call `list_vaults`.
- If the user named ONE vault and a mode ("make `X` read-only for this project", "mets `X` en lecture seule pour ce projet"): `X` is `workspaceBinding.vault` → *"`X` is this workspace's primary vault, and a primary is always read-write — a mode applies to a secondary only."* and stop. `X` is in `workspaceBinding.also` → Step 8, for `X` alone (the user