FC

felvieira/claude-skills-fv

Developer tools
24 stars Quality 60 Trend 32

🇧🇷 Versão em Português · 🌎 English version

Overview

🇧🇷 Versão em Português · 🌎 English version A complete team of software specialists inside your coding agent. Every task is routed to the right specialist, run on the right model, and shipped at production quality. - — skill 88 (Anatomy) added: detailed interactive isometric figures (SVG, WebGL shaders, 3D) that explain technical concepts as real physical machines with pure Node engine and geometric collision audit. - — skill 86 gets decision guides (film types, six styles with a signature move, pure-function effects in fx.mjs, per-agent action table). - — skill 86 can prove a film is deterministic (check-film.mjs), listen to a track for tempo, downbeat and drops and cut whole bars (beats.mjs), and review frames with clean-context reviewers that score seven dimensions. - — skill 84 gets a briefing engine (idea → verified facts → shot pack, briefing-qa.mjs rejects numbers without a source) and ten clip-type prompt templates.

README

🇧🇷 Versão em Português · 🌎 English version

Dev Team Kit — 87 Specialist Skills for Coding Agents

A complete team of software specialists inside your coding agent.
Every task is routed to the right specialist, run on the right model, and shipped at production quality.

✨ What’s new

  • v2.103.0 — skill 88 (Anatomy) added: detailed interactive isometric figures (SVG, WebGL shaders, 3D) that explain technical concepts as real physical machines with pure Node engine and geometric collision audit.
  • v2.102.0 — skill 86 gets decision guides (film types, six styles with a signature move, pure-function effects in fx.mjs, per-agent action table).
  • v2.99.0 — skill 86 can prove a film is deterministic (check-film.mjs), listen to a track for tempo, downbeat and drops and cut whole bars (beats.mjs), and review frames with clean-context reviewers that score seven dimensions.
  • v2.98.0 — skill 84 gets a briefing engine (idea → verified facts → shot pack, briefing-qa.mjs rejects numbers without a source) and ten clip-type prompt templates.
  • v2.97.0 — skill 86 ships a 1080p reference film (“Relay”) and a quality bar, with motion blur and a scored soundtrack.

See CHANGELOG.md for the full version history.

Language Link
🌎 English docs/WIKI.md
🇧🇷 Português docs/WIKI.pt-BR.md

Every skill, subagent, command, policy, plugin and MCP tool documented — in the format of aihero.dev’s “5 Agent Skills I Use Every Day”.


📊 Quality Bench — measured results, not marketing claims

We tested every skill and subagent with a published rubric. 53 isolation scenarios + 3 end-to-end tests. Same model, same prompt — with and without the kit. Numbers are measured, code is real, results are auditable.

Language Link Highlights
🌎 English analyze-doc/index.en.html 92.6% pass rate · +1.84 avg delta · 53/53 E2E green
🇧🇷 Português analyze-doc/index.pt-BR.html Mesmo relatório em PT-BR

Includes before/after with full output text, per-skill delta scores, process-based test results, and v2.10.1 fix verification. Methodology in eval-bench/.


Why It Matters (For Anyone)

If you use AI to build product — whether you’re an experienced dev, an indie hacker shipping SaaS, or someone who only knows how to describe what they want — this kit changes the game. In plain language, here’s what it does:

💰 Saves your API bill (up to 70%)

AI loves to read everything: the entire output of an npm install, repeated stack traces, huge file lists. All of that turns into tokens, which turn into money. The kit automatically compresses that noise before sending it to the model — you only pay for what matters.

🧠 Understands what you want before it starts coding

Instead of a generic agent that “guesses” the implementation, the kit has an orchestrator that reads your request, classifies the complexity, and assembles the minimum sufficient pipeline. If you’re vague, it asks. If you’re clear, it runs. It never makes things up.

🗂️ Persistent memory across sessions

Most agents forget everything when you close the window. This one remembers: what you decided, which files matter, the patterns your project follows, the bugs that came up before. Result: less rework, fewer tokens spent re-contextualizing, and far sharper answers each session. It also remembers what didn’t work (state: rejected + the reason, so the agent doesn’t re-try a dead end), survives context compaction with a recovery packet, and can share that memory with Codex, Grok Build and other agents.

🤖 Autonomous mode — fire and forget

Hand off a complex task with /auto or /loop and go grab a coffee. The agent runs, tests, fixes, validates and only stops when it’s ready, working and tested. There’s a safety circuit: if it gets stuck on the same error 3 times, it detects and warns — no burning API for nothing.

🖼️ Professional image generation, no placeholders

Landing page with a gray “image here” box? Never again. The kit integrates fal.ai with prompts written by a generative-AI specialist — you describe the scene, the system translates it into a technical prompt, and delivers production-ready images. Illustrations, hero images, icons, mockups, all consistent with your brand.

🔒 Security before deploy, not after the leak

A security auditor thinks like an attacker and reviews the code before it reaches production. Critical findings come with a proof of concept. No more discovering vulnerabilities on the customer’s account.

🧪 Tests that actually prove it works

A QA engineer that follows the “prove-it” principle: if you say it works, prove it with a test. No “looks ok”. Covers happy path, failure paths, edge cases and regressions.

🎨 Design and copy that sell

  • Designer with competitive analysis: looks at competitors and recommends what converts
  • Copywriter specialized in marketing: ready-to-ship copy for landing pages, email, ads
  • SEO that optimizes before Google indexes — your site is born findable

🚀 From zero to deploy without hiring 5 freelancers

Backend, frontend, mobile (Tauri), observability, analytics, accessibility (WCAG), refactoring, release, canary deployments (v2.12+), documentation — 81 specialists in total (85 installed skill directories; ID 16 is reserved). Each task goes to the right professional, on the right AI model (Haiku for simple, Sonnet for medium, Opus for architecture) — you don’t pay Opus to generate boilerplate.

🔌 Works with everything you already use

Native Claude Code plugin + universal MCP server that runs in Cursor, Windsurf, Copilot, Gemini CLI and any MCP-compatible agent. Zero vendor lock-in. Switched tools? Your team comes with you.

🆓 Free, Apache-2.0, open source

No subscription. No trial. No hidden premium tier. Clone it, install it, use it forever — including in commercial projects. Apache-2.0 with a NOTICE file enforces attribution downstream: anyone repackaging the kit must preserve credit to the people whose ideas shaped it.


What It Is

The Dev Team Kit is a set of 79 specialized skills that turns any compatible coding agent into a complete development team — with orchestrator, backend, frontend, QA, security, deploy, design, copy, SEO, observability, blog publishing automation and more.

What you get:

  • Structured pipeline — every task goes through the right steps, in the right order, no improvising
  • QA, Security and Reviewer mandatory — no delivery ships without validation
  • Automatic model routing — haiku for boilerplate, sonnet for implementation, opus for architecture
  • Lifecycle hooks — the agent detects vague context, re-reads files before editing, monitors token cost
  • Built-in MCP server — 38 tools exposed for any MCP client
  • Persistent memory — working set, context pack, learned skills with confidence scoring accumulated per project
  • Multi-platform install — Claude Code, Cursor, Windsurf, Copilot, Gemini CLI and more

Built on Context Engineering principles

The kit’s architecture maps to the context engineering hierarchy: individual skills are atoms, templates are molecules, learned-skills + working-set are cells, dispatched subagents are organs, and protocol-shell-composed programs are the emergent field layer. New in v1.1: typed protocol shells for 3 pilot subagents, I/O schemas in schemas/skill-io/, iteration scoring in the auto-loop circuit breaker, and declarative programs/ definitions. See docs/WIKI.md → Context Engineering Stack.

5-min tour: docs/SKILLS-OVERVIEW.md — every skill, mode, subagent and policy in one navigable page (aihero.dev format).


Quick Install

Mode 1 — Global Plugin (Claude Code)

Installs the 87 skills and hooks globally. Works in any project with no extra configuration.

# Via Claude Code CLI
claude plugin install https://github.com/felvieira/claude-skills-fv

What gets installed globally: skills, hooks, commands (/audit-repo, /devkit-install-fv, /plan-feature, /review-release, /inventory-assets).

Mode 2 — Full Kit Per Repo (via command)

With the plugin installed, run inside the repo you want to configure:

/devkit-install-fv

This installs the full .bot/: MCP server, policies, templates, docs, hooks, learned-skills and multi-platform configs.

Mode 3 — Direct Bash

git clone https://github.com/felvieira/claude-skills-fv /tmp/dev-team-kit
bash /tmp/dev-team-kit/setup/install.sh /path/to/project

If the kit is already in .bot/, you can also run directly from the installed repo:

bash .bot/setup/install.sh

The installer ships setup/ and every kit directory under .bot/. Supports non-interactive profile flags:

  • --profile lean — installs without MCP and heavy scripts
  • --no-input — no prompts, uses defaults
  • --yes — accepts everything automatically

In the table below, treat dev-team-kit as 38 tools backed by the 87 skills (87 installed skill directories; ID 16 is reserved). The MCP exposes 38 tools backed by the installed skills.

Install Modes Compared

What gets installed Global Plugin /devkit-install-fv Direct Bash
87 skills ✅ ✅ ✅
Hooks (lifecycle) ✅ ✅ ✅
Slash commands ✅ ✅ ✅
Policies ❌ ✅ ✅
MCP server (38 tools) ❌ ✅ ✅
Handoff templates ❌ ✅ ✅
Docs + repo-audit ❌ ✅ ✅
Multi-platform configs ❌ ✅ ✅
Learned skills per project ❌ ✅ ✅

Supported Platforms

Platform Skills Hooks MCP Slash Commands Notes
Claude Code ✅ ✅ ✅ ✅ full support — native plugin
Codex ✅ ✅ ✅ ❌ hooks via .codex/hooks.json (open the session at the repo root) or the Codex plugin; no slash commands — use the CLI scripts
Grok Build ✅ via AGENTS.md ⚠️ opt-in ✅ ❌ ignores the Claude plugin ([compat.claude] hooks = false); install-memory-hooks.mjs --runtime grok registers memory (+ optional guards)
Cursor ✅ via .bot/ ❌ ✅ ❌ skills via AGENTS.md, MCP via config
Windsurf ✅ via .bot/ ❌ ✅ ❌ skills via rules, MCP via .windsurf/mcp.json
GitHub Copilot ✅ via .bot/ ❌ ❌ ❌ skills via .github/copilot-instructions.md
Gemini CLI ✅ via .bot/ ❌ ✅ ❌ skills via GEMINI.md, MCP via .gemini/settings.json
OpenCode ✅ via .bot/ ❌ ✅ ❌ skills via AGENTS.md
Antigravity ✅ via .bot/ ❌ ✅ ❌ skills via local config

For platforms without native hooks, the same rules live in policies/hooks.md — the agent applies them manually.

Operating systems

The hooks, guards, trigger evals, subagent conduct block and the media tools (skills 84, 85, 86, including a real render with ffmpeg + Chromium) run in CI on Linux (Validate), macOS and Windows (Cross-OS) on every push. That job caught three portability bugs that the Linux run could not see, all fixed in v2.102.0: /freeze denied files inside a frozen folder when the path went through a symlink (macOS /var → /private/var); 15 scripts exited silently, doing nothing, when started through a symlinked path; and the conduct sync tool did not understand CRLF line endings from a Windows autocrlf checkout. Not yet exercised on a real agent: the new tools under Cursor, Gemini CLI or OpenCode (they are plain Node, so nothing depends on the agent, but only Claude Code, Codex and Grok Build were driven for real).

What works where

“Verified” means it ran against the real agent (Grok 1.0.41, Codex 0.155) and not only in the kit’s tests.

Feature Claude Code Codex Grok Build Cursor · Gemini · OpenCode · others
Full hook set (gates, sensors) ✅ ✅ (.codex/hooks.json) ❌ by design ❌
Learned-skill injection ✅ ✅ ✅ verified — profile memory-deferred (Grok drops UserPromptSubmit context, so it is delivered on the first PostToolUse) read .bot/learned-skills/ by hand (AGENTS.md)
Post-compaction recovery ✅ ✅ tested on real rollouts; no real compaction observed ✅ verified (/compact → packet → delivered once) ❌
/careful, /freeze guards ✅ slash commands ✅ verified — apply_patch arrives as {command: }, the guard reads its paths and Codex shows the block; toggle with the CLI ✅ verified — install with --guards, toggle with the CLI ❌
skill-usage (real usage report) ✅ ✅ ❌ (needs the full PostToolUse logger) ❌
Trigger evals (--split, --compare) ✅ ✅ ✅ ✅ (plain Node, no agent needed)

Agents without slash commands drive the guards from the shell: node scripts/session-guard-cli.mjs careful on|off, freeze |off, status. To add the guards to Grok or a global Codex install: node scripts/install-memory-hooks.mjs --runtime grok --guards --apply.


The 87 Specialists

Management and Coordination

# Skill What it does
08 Context Manager tracks focus, open tasks, hot files and handoffs across sessions
09 Orchestrator defines the minimum sufficient pipeline, delegates to specialists, adapts on rejection
10 Documenter records decisions, API contracts, operations, Repo-Wikis, functional tracks and searchable offline HTML
11 Reviewer validates the final delta before release — quality, scope and risk
17 Image Generator generates and adapts visual assets via fal.ai with t2i, i2i, rembg and Tauri icons support
18 Repo Auditor full snapshot of the repo — stack, conventions, risks, entry points and tech debt
19 Asset Librarian catalogs logos, icons, fonts, visual tokens and reusable assets
20 Observability SRE defines structured logs, metrics, tracing, alerts and rollback plan
21 Data Analytics defines tracking events, naming, funnels and product KPIs
22 Accessibility Specialist reviews WCAG 2.2, keyboard navigation, HTML semantics and motion reduction
23 Migration & Refactor Specialist runs incremental migrations, feature flags and safe rollback
24 Release Manager organizes changelog, release notes, versioning and gradual rollout
25 AI Integration Architect designs AI adapters, gateways, streaming, fallbacks and inference cost
26 Prompt Engineer writes and iterates prompts, reusable templates and few-shot strategies
27 Video Integration Specialist integrates generative video with focus on UX, latency and output formats
28 CLAUDE.md Generator generates a smart CLAUDE.md for projects consuming the kit
30 Cost Tracker tracks token cost and API calls per session, per skill and per model tier
31 Session Summary consolidates a session summary for clean handoff between long sessions
32 Smart Suggestions suggests the next most impactful action based on the project’s real state
33 Detective Spec reverse-engineers executable specs from legacy code — modules, business rules, flows, retroactive ADRs, zero writes outside _detective_sdd/
35 Skill Author meta-skill to create, edit, eval and optimize the kit’s own skills — sustains the kit as it grows past 79 specialists
38 Architecture Deepener finds deepening opportunities (deletion test, deep modules) using domain glossary + architecture vocabulary; pairs with skill 23 (Migration & Refactor) for execution
39 Program Router decides which programs/*.yml pipeline to run from task classification — works alongside the orchestrator (ad-hoc) and the intent-classifier hook (suggestion)
40 Parallel Dispatcher fans out N independent slices/reviews to subagents correctly, avoiding the skill-vs-agent trap; scatter-gather with worktree isolation
44 Zoom Out builds a module map and topology of the codebase — complements smart-suggestions with a structural bird’s-eye view
45 Handoff Context prospective handoff between sessions/agents — packages what the next session needs to continue without re-deriving context
65 Using Git Worktrees workspace isolation via git worktree — detects existing isolation, prefers native tooling (EnterWorktree/ExitWorktree or the kit’s /worktree dispatcher) before raw git worktree add, mandatory test baseline before releasing the task for work
80 Jev Opportunity Scout scans the current codebase for fragile semantic decisions (substring classification, keyword lists, prompt-and-parse LLM calls) and reports concrete migration candidates to a typed Jev/TypeSafe System One judgment — file/line, right primitive (Choice/Noul/Score), example call, real cost. Read-only; never installs or calls the API itself
87 Reverse Engineer Anything (REA) examines shipped binaries, APKs, ASARs and app/runtime evidence via the external REA toolkit; normal source-repository analysis stays with Detective Spec (33)

Repo-Wiki: documentation generated in the target project

When the Documenter skill runs inside a project, Repo-Wiki uses the current directory as its target and writes to docs/repo-wiki/ in that same project by default. The output includes Markdown, a coverage report, and a navigable offline HTML site:

/docs/repo-wiki/README.md
/docs/repo-wiki/overview.md
/docs/repo-wiki/architecture.md
/docs/repo-wiki/workflows.md
/docs/repo-wiki/boundaries.md
/docs/repo-wiki/database.md
/docs/repo-wiki/verification.md
/docs/repo-wiki/modules/
/docs/repo-wiki/report.json
/docs/repo-wiki/site/index.html

The overview summarizes the project’s purpose, audience, technologies and versions, entrypoints, useful commands, structure, and documentation limits. The architecture page contains an evidence-backed module map and Mermaid organogram; workflows, boundaries/contracts, database applicability, module deep dives, and execution verification are separate tracks. The HTML site supports offline search and filtering across all tracks without external requests. Snippets with known secret patterns are rejected and sanitized in the evidence renderer.

Use --repo, --output, and --site for explicit destinations. Run node scripts/run-repo-wiki-runtime.mjs --repo . --output docs/repo-wiki/runtime.json --allow-execution when local build/test evidence is authorized, then pass --runtime docs/repo-wiki/runtime.json to the generator. --mode Drift writes a delta report without rewriting docs; --mode Focused --focus narrows the inventory. The generator and builder return the effective absolute paths (repo, markdown_dir, report, site, and index), and the skill handoff must show them to the user together with inventoried/reviewed files, pending tracks and verification results. The documentation must not merely say “docs generated.”

Product and Design

# Skill What it does
01 PO writes spec, user stories, acceptance criteria and sets priority
02 UI/UX Designer defines layout, token system, responsiveness and usage heuristics
29 Design Intelligence researches competitors, captures screenshots, analyzes visual trends and ships a strategic dossier for UI/UX
36 Web Asset Generator favicons (multi-size), PWA icons (incl. maskable), Open Graph and Twitter card images, manifest and meta tag snippets — derived from a logo or brand text
56 Responsive Conversion converts desktop-first UI to working mobile, fixes broken layout (why a flex/grid child won’t fill 100%, dvh vs vh, safe area, horizontal scroll), and owns modal/bottom-sheet and destructive-confirmation patterns
57 Mobile UX Foundations thumb-zone ergonomics (where navigation may live), dark mode physiology (#121212, never pure black), perceived performance (skeleton vs. spinner by duration band), and auth/onboarding/permission UX (passkeys, NIST password rules, permission priming)
58 i18n & Localization prepares a product for another language, region or writing direction before a translator exists: string externalization, plural via platform API, locale formatters, +30% text expansion, RTL with logical properties, and pseudolocale/RTL as regression tests
59 Closed-Loop Revenue closes the chain from ad click to margin: identity (GCLID/UTM/transaction_id/CRM), backend as the source of revenue truth, reconciliation with a declared tolerance, break-even ROAS derived from real contribution margin, and offline conversion so lead-gen bidding learns from closed deals rather than submitted forms
51 UX Research qualitative discovery — user interview scripts, research-based persona, journey mapping (moments of truth, pain point, opportunity), information architecture (card sort, tree test) and usability testing (SUS score, task success rate)
64 Scroll Storytelling full scrollytelling page architecture — where scroll is the narrative timeline, not a list of fade-in sections. At least 4 device families, photographic-by-default visual world, no continuous camera flythrough unless explicitly requested. Includes a zero-dependency vanilla JS/CSS runtime engine
73 SaaS Conversion Playbook audits and designs a SaaS/app subscription conversion funnel — playbook A (consumer/personal-result) vs. B (B2B tool/PLG) classification, onboarding screens, activation event, full paywall, in-app triggers and email lifecycle, with real benchmark targets (R/1K, TTV, trial-to-paid by commercial model) instead of guesswork
78 Business Discovery plain-language interview with a non-technical business owner (Shopify, WhatsApp, spreadsheets) that produces a self-contained HTML data map (interactive Sankey), a prioritized opportunity list, and a 30-day setup plan — 9 business archetypes, “no developer” branch with a freelancer-hiring path
79 React useEffect Review checklist of when NOT to use useEffect, distilled from React’s own “You Might Not Need an Effect” doc — decision tree, 9 side-by-side antipatterns (derived state, filtering in Effect, reset-via-Effect, event logic in Effect, Effect chains, notifying a parent, lifting data up, fetch without cleanup, duplicate dev-mode init) and their fixes (useMemo, key prop, useSyncExternalStore, lifting state up, cleanup-safe fetch hook)

Development

# Skill What it does
03 Backend Engineer REST/GraphQL APIs, contracts, auth, validation, database and integrations
04 Frontend Engineer React/Next.js, state, API calls, performance and app experience
12 Motion Designer animations, transitions, micro-interactions and coherent visual behavior
15 Mobile / Tauri optional extension for desktop and mobile apps with Tauri + React Native
60 App Reference Architecture blueprint for new apps needing login + payment + push + web app + Android APK from one Next.js + Tauri codebase — dual auth, dual payment (Stripe + Google Play IAP), dual push, static-export build script, Docker/CI-CD, distilled from 3 real production apps
74 Web3D Scene Runtime structured scene description (camera, lights, GLB slots, materials, particles) → real interactive 3D scene in the browser: WebGPURenderer with automatic WebGL2 fallback, navigable camera + raycasting, measured budget (Draco/KTX2, LOD, dispose, reduced-motion, static fallback). Closes the handoff skills 68/69 never had — a certified .glb that only ever reached Unity/Unreal, never a page
47 Pattern Conformity detects and codifies an existing codebase’s coding conventions (naming, structure, error handling, testing, async, DI, API design) into memory/patterns.md so new code matches house style
52 UI Polish the small details that make a UI read as refined instead of “ok” — concentric border radius, optical alignment, shadow vs. border, tabular numbers, scale-on-press, hit area, stagger on entry/exit animation
75 FFmpeg Media mechanical video/audio editing via local ffmpeg scripts — cut, join, caption burn, loudness normalization, silence detection, redaction, aspect-ratio fit, sync. Executes an edit, never decides one (no aesthetic judgment); closes the gap skill 27 explicitly leaves open for post-production
76 Diagram Validated generates deterministic SVG for 14 UML diagram types + architecture/flow across 12 named styles, validates geometry (orphan arrow, overlapping label, out-of-canvas node), then does a visual PNG readback before declaring done. “Evaluate, don’t assert” — completion backed by validator + render evidence, not the model’s own visual judgment
77 Frontend Slides HTML single-file decks on a fixed 1920×1080 stage that scales uniformly (letterbox, never reflow) — 12 named style presets, a 3-preview discovery phase (show, don’t describe) before building the full deck, PPTX import, PDF export, Vercel deploy

Content and Discovery

Deep SEO audits (Claude Code, opt-in): AgriciDaniel/claude-seo provides /seo audit , local, ecommerce, hreflang, Google and agent-readiness workflows when separately installed. Skill 14 remains the cross-client fallback; the kit does not install the external plugin or its always-on edit hook. Install and capability guide.

# Skill What it does
13 Marketing Copy product copy, CTAs, landing pages, brand voice and conversion messaging
14 SEO Specialist technical/on-page SEO, local, products, hreflang and GEO; optional Claude Code plugin for full-site auditing
61 Content Growth Engine content as an acquisition system, not a publishing calendar: search intent from sales calls and support tickets (never from search volume alone), clusters ordered by commercial intent, an AI-citation baseline measured against a fixed prompt set, realistic production cadence sized against actual capacity, a refresh quota so the library doesn’t rot, sales objections turned into bottom-funnel pages, and success measured in pipeline — not sessions
48 Research Prep multi-source technical research before writing docs/PRDs/ADRs/articles — official docs + GitHub + Stack Overflow + papers, scored by authority, output to memory/research/.md; feeds skills 10, 01, 26, 41
49 Context Budget audits loaded context weight (skills, agents, MCP descriptions, rules, CLAUDE.md) — estimates tokens per component, headroom available and overflow alerts. Distinct from skill 30 (cost-tracker) which tracks runtime completion costs
50 Direct Response Copy direct-response copy — trigger-word headlines, ads, sales emails, Instagram captions, VSL scripts and sales pages built on proven direct-response frameworks (AIDA, PAS, 4 Ps), distinct from skill 13’s broader brand/landing copy
54 Video Analysis analyzes existing video content — downloads, extracts frames, transcribes audio and answers questions about what happens on screen, without generating anything new
55 Marketing Reporting & Analytics marketing analytics ops — campaign reporting, GA4/GTM technical setup, marketing data-infrastructure audit, dashboard assembly across ad platforms and CRM

Quality and Delivery

# Skill What it does
63 Mobile Paywall & Checkout UI/UX of plan selection and payment checkout in mobile apps — billing-architecture decision (Play Billing vs. external PSP, not purely visual), the flow periodicity → plan → coupon → pay → authenticate → confirm, target-plan hierarchy without manipulation, payment states with the rule that “returned from 3DS” is neither approved nor declined by itself, and a coupon field collapsed by default — a visible field signals a better price exists and sends coupon-less users hunting for one
62 Persona-Driven Issue Audit mass-audits an existing product via simulated personas end to end to PR, and runs even with zero personas pre-written: infers proto-personas from the repo itself (routes, forms, error copy), offers a non-blocking human confirmation window, then a fresh-context tester per persona, issue dedup by route + root cause (never title), a solution-analysis agent that comments cause and trade-offs without fixing, a fleet of up to 10 parallel workers, each taking one issue to PR (high confidence) or wontfix/needs-human with a specific reason, review with the same bar as any other PR, and a light human triage for what survives — no automatic merge
05 QA Engineer unit, integration, E2E tests, coverage and critical edge cases
06 Security Reviewer OWASP Top 10, headers, CORS, CSRF, XSS, injection and data exposure
34 Static Analysis automated security and bug scan via Semgrep + CodeQL with SARIF output, severity triage and CI integration — feeds findings to skill 06
37 TDD Engineer red-green-refactor enforced; combats horizontal slicing anti-pattern (writing all tests before all impl); 1 test → 1 impl → repeat. Pairs with skill 38 for deep module identification
53 Doubt-Driven Review real-time adversarial review — submits every non-trivial decision to a fresh-context reviewer biased to REFUTE, complementing skill 11 (final gate) rather than replacing it
07 Deploy Engineer containerization, CI/CD, blue-green rollout, rollback and infra as code

Publishing and Automation (v2.11.0+)

# Skill What it does
41 Blog Publisher composer skill — receives text/topic → writes HTML post → generates images (via skill 17 fal.ai or skill 42 Playwright) → commits/pushes to your blog repo → returns public URL. Multi-user via ~/.dev-team-kit/blog-config.json.
42 Blog Screenshot Playwright-based capture for posts: viewports per destination (cover/hero/mobile), cookie banner removal, FOUT prevention, naming convention compatible with skill 41
43 Canary Deployment gradual rollout (1%/10%/50%/100%) + 7-metric watch + automatic rollback. 3 strategies (traffic-based, feature flag, blue-green). Sits between skill 24 (release-manager) and skill 07 (deploy-docker). v2.12.0.
46 Post-Deploy Canary Monitor continuous post-100% monitoring after a canary completes — watches error budget, latency and anomaly signals, opens a postmortem trigger on regression

Setup (one-time per user):

# Create your blog repo + GitHub Pages + config
node scripts/init-blog-repo.mjs \
  --path=/abs/path/to/blog \
  --user= \
  --repo=blog \
  --create-github

# Then in any Claude Code session:
# "publica um post sobre "  → skill 41 takes it from there

The init script creates ~/.dev-team-kit/blog-config.json so the skill knows where to publish. See scripts/init-blog-repo.mjs and templates/blog/ for details.

Game Development (v2.68.0+)

# Skill What it does
66 Game Architecture Design architecture, design review and numeric balancing of games — the decision layer before any engine code. Paradigm selection (rich entity vs. data-driven vs. prototype), combat/skill/AI/narrative/UI/PCG system design, GDD/mechanic/level critique backed by evidence, and executable numeric modeling of economy, progression and drop rate
67 Game Engine Development real engine code implementation — Unity C# and Unreal C++: MonoBehaviour, ScriptableObject, object pooling, state machines, ECS, Actor/UPROPERTY/UFUNCTION components, performance optimization (profiling, batching, LOD, culling, GC) and multiplayer networking

3D/2D Character Pipeline (v2.69.0+)

# Skill What it does
68 Character Animation 3D content/asset pipeline for humanoid 3D character animation via AccuRIG + headless Blender + motion AI — rigging, bpy CLI as an “animation compiler”, retargeting via quaternion delta relative to rest pose, and a comparative map of 10 motion-AI technologies
69 Character Pipeline 2D 2D character pipeline and character-to-runtime orchestration — the five 2D sprite/animation production strategies, the MotionPlan.json contract (LLM as intent/timing director, never a bone-rotation generator), native 2D generation, and skeletal 2D rigging tool selection

Campaign Production (v2.71.0+)

# Skill What it does
70 Campaign Research Strategy researches market, competitors, audience and consumer voice to form a verifiable strategic base before copy or visual direction — produces an evidence ledger, authorized claims, prioritized opportunities and guardrails
71 Campaign Copywriting transforms a research strategy with evidence ledger into traceable, distinct, channel-appropriate copy routes — never re-researches, never invents claims
72 Campaign Visual Direction converts approved strategy and copy into visual concept, continuity bible, reference roles and structured shot intents — separates identity references from language references, reserves text/UI for deterministic overlays

AI Video, Illustration and Code-Rendered Motion

# Skill What it does
84 AI Video Direction directs a generated-video production end to end: story, scene engine and acting tasks, character sheets and location plates, one prompt per clip (Seedance via Higgsfield), frame-by-frame QA, repair and post (native speech, per-sequence score, loudness). Since v2.98.0 it starts from a briefing engine (idea → verified facts → shot pack; briefing-qa.mjs rejects any number, price or testimonial without a source) and ships ten clip-type prompt templates. Money is spent only after each cheap step is approved
85 Illustration Studio consistent icon sets and illustrations as SVG, with a linter (svg-icon-lint.mjs: palette, contrast, stroke weight, anchor points) and an exporter (sprite, React components, contact sheet) that refuses a set with errors
86 Code Motion Film motion-design films written as a program: the page exposes seek(t), headless Chromium captures each frame and ffmpeg encodes it, so renders are deterministic and a fix is one edited line. Includes a dependency doctor that installs and proves the stack, closed-form springs, a beat grid and a synthesized score, check-film.mjs (clean source, same frame in any seek order, closed loop), beats.mjs (tempo, downbeat, drops, whole-bar cuts), clean-context reviewers with scores, motion blur and supersampling, film-type/style/effect guides and a 1080p reference film with an 11-point quality bar. Gallery texts stay in a local library, never in the repo
88 Anatomy builds crafted, highly detailed, interactive isometric figures (SVG, WebGL shaders, 3D) that explain technical concepts as real physical machines — four-tone shading, correct painter’s order, card frame with live readout, pure Node engine (kit/), and an automated audit (audit.mjs) proving zero collisions

Main Pipeline

flowchart LR
    A[Task] --> B[Orchestrator 09]
    B --> C[Context Manager 08]
    B --> D[Minimum sufficient pipeline]
    D --> E[Specialists 01–48]
    E --> F[QA 05 + Security 06 + Reviewer 11]
    F --> G[Deploy 07 or Release 24]
    B --> H[Model routing per step]

Common Pipelines

Task type Pipeline
Full feature PO → UI/UX → Backend → Frontend → Motion → Copy → SEO → QA → Security → Reviewer → Deploy
Bug fix Backend → QA → Security → Reviewer → Deploy
Critical hotfix Backend → Security → Reviewer → Deploy
UI improvement UI/UX → Frontend → Motion → QA → Security → Reviewer → Deploy
Landing page Copy → Design Intelligence → UI/UX → Frontend → SEO → QA → Reviewer
AI integration Repo Auditor → AI Architect → Prompt Engineer → Backend → Observability → QA → Security → Reviewer
Formal release Reviewer → Observability SRE → Release Manager → Deploy

Model Routing — Right Model for Each Step

Tier Model When to use
Fast haiku boilerplate, rename, microcopy, templates, formatting
Balanced sonnet implementation, tests, debug, integration, design
Deep opus architecture, security review, orchestration, critical decisions

Automatic enforcement (Claude Code):

  • EnterPlanMode → hook suggests /model opus
  • ExitPlanMode → hook suggests /model sonnet
  • Subagent without explicit model → hook warns and suggests tier by keywords

On other environments: follow policies/model-routing.md manually.


Hook System — Intelligence on Lifecycle Events

Hook Event What it does Profile
pre-execution-gate UserPromptSubmit detects vague prompt and confirms before acting standard, strict
keyword-detector UserPromptSubmit injects relevant skill or learned skill automatically standard, strict
context-guard-stop Stop warns at 50% (non-blocking) and blocks at 75% with smart summary all
persistent-mode Stop blocks stop while a pipeline is active all
pre-tool-enforcer PreToolUse re-reads before editing, suggests code intelligence tools all
investigate-first-guard PreToolUse intercepts AskUserQuestion, blocks self-discoverable questions (github user, branch, package manager, port…) and tells the model to run the command first standard, strict
session-start SessionStart restores state from previous session and injects skill-discovery standard, strict
post-tool-verifier PostToolUse detects debugging patterns, suggests extracting a learned skill standard, strict
model-routing-hook PreToolUse suggests model swap on plan mode and validates subagent spawns standard, strict
simplify-ignore PreToolUse + PostToolUse protects simplify-ignore-start/end blocks from auto-simplification standard, strict
claim-verifier PostToolUse detects unverified result claims (“email sent”, “deploy OK”, “tests passed”) — passes free if there’s exit code 0 / HTTP 200 / query result standard, strict
context-turn-counter UserPromptSubmit suggests /compact every 25 turns, intelligent handoff at 50 using the memory vault standard, strict
pre-build-gate UserPromptSubmit detects creation intent and injects the “decide before you code” checklist per discipline (acceptance / api-contract / schema / ui-design / deploy) — brings the /auto phase gates to passive mode standard, strict
auto-skillify UserPromptSubmit every 20 turns, asks whether recent activity is worth a learned-skill (3 criteria) — codification cadence, absorbed from hivemind standard, strict
topic-shift-detector UserPromptSubmit warns when the subject changed (infra→data) so the old topic doesn’t inflate token cost silently standard, strict
intent-classifier UserPromptSubmit classifies prompt intent to route enrichment standard, strict
memory-curator SessionStart (async) autonomous vault maintenance: decay/archive/dedup in pure JS, delegates the semantic part to the present agent standard, strict
session-event-logger multiple telemetry of hook events to .bot/*.jsonl for /insights; secrets are redacted by value shape before truncation standard, strict
precompact-capture PreCompact before the host compacts the conversation, stores a ≤4 KiB packet (objective, declared open items, verification commands with the result read from the transcript, git state); reads Claude Code and Codex transcripts, writes nothing for an unknown format all
compaction-recover UserPromptSubmit / PostToolUse hands that packet back once, with a freshness verdict (“unchanged” / “CHANGED since capture”) and an untrusted-data frame; the dispatcher only spawns it when a packet exists all

29 hook scripts are registered in hooks/scripts/runtime-dispatcher.mjs (plus the shared libs utils, memory-lib and compaction-lib) — the table above lists the user-facing ones. Toggle any via DEVKIT_DISABLED_HOOKS or the minimal profile.

Memory beyond Claude Code

Hooks only run where they are registered. Codex loads .codex/hooks.json (it registers PreCompact too); Grok Build ignores the Claude plugin ([compat.claude] hooks = false) and only reads ~/.grok/hooks/*.json. For agents that don’t speak this kit’s vocabulary, the dispatcher has a memory profile — learned-skill injection and pre-compaction capture only, no prompt/tool gates (~130 ms per prompt instead of ~750 ms measured). Grok discards the context a UserPromptSubmit hook returns, so its install uses memory-deferred: the context is stored at prompt time and delivered once on the first PostToolUse (verified end to end against Grok 1.0.41, including post-/compact recovery from its chat_history.jsonl):

node scripts/install-memory-hooks.mjs --runtime grok            # dry-run
node scripts/install-memory-hooks.mjs --runtime grok --apply    # writes only ~/.grok/hooks/dev-team-kit-memory.json
node scripts/learned-skills-to-ai-memory.mjs --project    # dry-run; --apply publishes learned-skills to ai-memory via docker exec
node scripts/memory-secrets-scan.mjs                            # which agent transcripts carry credentials (type and count, never the value)
node scripts/eval-memory-recall.mjs --strict                    # injection eval: positives carry the answer, negative controls inject zero

Per-agent compatibility (what was verified and what was not) is in policies/compaction-recovery.md; learned-skill states, freshness and accepted formats in policies/learned-skills.md.

The optional Docker ai-memory backend is not silently upgraded when you reinstall the kit: its SQLite migrations are forward-only. Inspect without changes: node scripts/ai-memory-setup.mjs --check. Upgrade a recognized kit-owned server with a new, external backup archive: node scripts/ai-memory-setup.mjs --upgrade --backup-to /absolute/new/ai-memory.tar.gz (or bash setup/install.sh --upgrade-ai-memory --backup-to ). See policies/memory-backends.md for Windows host CLI upgrades, unknown-container refusal and rollback.

Hook Profiles

Controlled by the env variable DEVKIT_HOOK_PROFILE (default: standard):

Profile Active hooks
minimal context-guard-stop, persistent-mode, pre-tool-enforcer
standard all
strict all
  • DEVKIT_HOOK_PROFILE — sets the active profile (minimal, standard or strict)
  • DEVKIT_DISABLED_HOOKS — comma-separated list of hookIds to disable regardless of profile

Context Guard — Strategic Compact

The context-guard-stop hook operates on two levels:

  • 50% — non-blocking warning: suggests /compact while there’s still margin
  • 75% — smart block: shows current task hint, files edited in the session and decisions from the working set before blocking

Context and catalog cost — measured inventory, not host telemetry

The kit now separates bytes stored on disk from the payload a host actually sends to a model. The current local inventory is:

Scope On-disk inventory chars ÷ 4 estimate
86 skill descriptions 56,398 chars / 57,056 UTF-8 bytes ~14,100 proxy tokens
Catalog entries (name + description) 57,991 chars / 58,649 bytes ~14,498 proxy tokens
Root instruction candidates (GLOBAL.md, AGENTS.md, CLAUDE.md) 19,804 chars / 19,981 bytes host loading not observed
SessionStart source 12,480 chars / 12,518 bytes emitted payload not observed

The token figures are proxies, not measured provider or host tokens. Capture an actual systemMessage and pass it to scripts/skill-health.mjs or scripts/skill-catalog-budget.mjs with --observed to measure the observed payload. A smoke capture of the hook produced 423 chars; that is still not provider token telemetry. Complete SKILL.md bodies are lazy and must not be counted as fixed catalog cost without host evidence.

The catalog compactor is dry-run by default. Its current proposal removes 28,703 description characters (~7,176 proxy tokens per turn), but would drop 89 positive-fixture trigger lines. It therefore preserves complete trigger lines, reports the affected fixtures and blocks normal --apply until the losses are reviewed. Do not use --apply during an audit.

The generated inventory and flags are in docs/skill-health.md. Verify routing and trigger coverage with:

node scripts/eval-triggers.mjs --strict       # 86/86
node scripts/eval-plugin-routing.mjs          # 44/44
node --test scripts/tests/*.test.mjs          # 121 passed, 0 failed, 6 skipped

Subagents — Specialists Dispatchable via the Task Tool

The kit ships 16 Claude Code subagents in .claude/agents/, ready to dispatch with the Task tool or invoke from the prompt.

Every agent ends with the same Conduct block, generated from one source (policies/subagent-conduct.md) and guarded by a test: investigate before claiming and say what was not verified, return a self-contained report, batch independent reads, stay within the request. Agents that can write also confirm before anything destructive or visible to others (no --no-verify, no discarding unknown files), never weaken a test to make it pass, and clean up what they created. Agents without a dispatch tool (Codex, Grok, Cursor, Gemini, OpenCode) use the file as a role prompt (see AGENTS.md).

Core (5)

Subagent When to use Tools
code-reviewer PR review, finished feature or any code before merge Read, Grep, Glob, Bash
security-auditor Auth flows, input handling, deps, CORS, headers, pre-deploy Read, Grep, Glob, Bash
test-engineer Write tests, fill coverage gaps, validate regressions Read, Grep, Glob, Bash, Edit, Write
orchestrator Classify a complex task, build pipeline, resolve skill overlap all
debugger Bug, unexpected behavior, failure you can’t explain — uses Evidence Ledger + anti-rationalization table Read, Grep, Glob, Bash, Edit

Detective Spec (4) — phases of /detective-spec

Subagent When to use Tools
detective-contracts Phase 2: extract module contracts (API, deps, invariants, consumers) from legacy code — read-only Read, Grep, Glob, Bash
detective-business-rules Phase 3: extract hidden business rules from validations, magic constants, state transitions, tests — read-only Read, Grep, Glob, Bash
detective-flows Phase 4: reconstruct end-to-end flows (entry → side effects) with edge cases and mutated state — read-only Read, Grep, Glob, Bash
detective-adrs Phase 5: infer retroactive ADRs and synthesize overview + traceability — read-only Read, Grep, Glob, Bash

Static Analysis (5) — pipeline of skill 34

Subagent When to use Tools
semgrep-scanner Multi-language repo: parallel Semgrep scans by language category, aggregate SARIF Read, Grep, Glob, Bash
semgrep-triager >20 findings batch: classify TP/FP/needs-investigation reading source context, propose fixes Read, Grep, Glob, Write
codeql-runner Bug needs interprocedural taint tracking: orchestrate CodeQL database build + queries Read, Grep, Glob, Bash
sarif-parsing Multiple SARIF sources: parse, dedup, aggregate into single report (Semgrep + CodeQL + others) Read, Glob, Bash, Write
variant-analysis Confirmed bug → hunt variants of same pattern, generate reusable custom rule for CI Read, Grep, Glob, Bash, Write

Content (1)

Subagent When to use Tools
anti-ai-writing New prose entering the repo: detects the 29 AI-generated writing patterns in docs, PRDs, copy, changelogs Read, Grep, Glob, Write

Quality (1)

Subagent When to use Tools
silent-failure-hunter Review-only: hunts silent failures — empty catch{}, .catch(() => []), lost stack traces, fallbacks that hide failure, missing rollback Read, Grep, Glob, Bash

Invocation example:

Dispatch the code-reviewer subagent to review changes in src/auth/login.ts
Use the debugger subagent to investigate the crash TypeError: Cannot read properties of undefined in api/users.ts

Subagents are copied to the consuming repo’s .claude/agents/ by install.sh. See docs/skill-guides/subagents.md for the full guide on when to use each.


MCP Server — 38 Tools for Any MCP Client

{
  "mcpServers": {
    "dev-team-kit": {
      "command": "node",
      "args": [".bot/mcp-server/dist/index.js"],
      "env": {
        "FAL_KEY": "fal-...",
        "BRAVE_SEARCH_KEY": "BSA...",
        "FIRECRAWL_KEY": "fc-..."
      }
    }
  }
}

Works in Claude Code, Windsurf, Gemini CLI, Cursor and any MCP client.

Block Tools Examples
Knowledge 14 classify task, build pipeline, summarize diff, build context pack
Execution 6 competitor search (Brave), scraping (Playwright/Firecrawl), image generation (fal.ai)
Persistence 12 save context, working set, cost, learned skills and session guardrails
Session Intelligence 4 compress verbose output, read session JSONL log, list seen files/errors

See mcp-server/README.md for full tool documentation.


API Keys Required

Key What it’s for Where to get it
FAL_KEY image generation (skill 17, MCP moodboards) fal.ai/dashboard/keys
BRAVE_SEARCH_KEY competitor research (skill 29, MCP) brave.com/search/api
FIRECRAWL_KEY advanced scraping (optional) firecrawl.dev

The installer prompts for each key and saves them in the project’s .env.local.


Daily Ergonomics

  • read docs/quickstart.md to get into the flow fast
  • reuse docs/repo-audit/current.md before exploring the repo
  • use devkit_context_pack to start a task without re-reading half the repo
  • use devkit_diff_brief to resume work or prep a review
  • use devkit_working_set to persist hot files and next steps
  • use commands/ as operational shortcuts
  • consult docs/skill-call-matrix.md when there’s overlap between skills
  • consult docs/skill-guides/ only on demand
  • consult docs/skill-guides/ideation-frameworks.md — SCAMPER, HMW, First Principles, JTBD for the ideation phase
  • consult docs/skill-guides/skill-discovery.md — decision tree to pick the right skill per task type
  • consult docs/skill-guides/context-engineering.md — context hierarchy, trust levels and packing strategies
  • consult docs/skill-guides/autonomous-loop.md — /auto protocol for autonomous execution

Slash Commands — Shortcuts by Development Phase

Command What it does Skills activated
/spec Spec a feature with acceptance criteria PO (01)
/plan Classify task and build pipeline Orchestrator (09)
/build Implement with the project stack Backend (03) + Frontend (04)
/test Write and run tests QA (05)
/review Final review + security audit Reviewer (11) + Security (06)
/simplify Simplify and refactor code Migration & Refactor (23)
/ship Release and deploy Release Manager (24) + Deploy (07)
/pipeline Full end-to-end pipeline Orchestrator (09) → all
/best Best practices, clean code and DRY audit Reviewer (11) + Security (06) + QA (05)
/auto Autonomous agent — runs full task without intervention All needed + circuit breaker
/loop Multi-agent autonomous orchestrator (auto-loop v2) — claude + codex, parallel via worktree, polishing pass scripts/auto-loop/
/worktree Creates isolated git worktree, copies .env*, validates env in background —
/detective-spec Reverse-engineer specs from a legacy codebase — extracts contracts without touching the code Detective Spec (33)
/catalog-project Synthesizes repo-audit + detective-spec + product narrative (summary/plans/FAQ) + session history + operational data (envs/addresses/metrics) into .project-memory/manifest.yaml — feeds the project-brain cross-repo catalog Repo Auditor (18) + Detective Spec (33)
/grill-me Relentless interrogation of an idea/plan — one question + suggested answer per turn PO (01) Deep Interview
/to-prd Convert current conversation into a PRD published in the issue tracker (label needs-triage) PO (01) PRD mode
/to-issues Break PRD into N independent issues (vertical slices) and publish to tracker Orchestrator (09) + vertical-slices
/pipeline-discovery FULL discovery flow: grill-me → to-prd → to-issues → loop+TDD → ship Orchestrator (09) coordinated, all skills
/constitution Bootstrap/update memory/constitution.md with governing principles (Code Quality, Testing, UX, Performance, Security) — hierarchical authority over PRD/plan/ADRs PO (01) governance mode
/checklist Generate contextual checklist per feature (“unit tests for English”) — Completeness, Clarity, Consistency, Coverage, Edge Cases PO (01) + validation
/analyze Cross-artifact consistency check (read-only) — constitution → specs → plan → issues. Findings classified CRITICAL/HIGH/MEDIUM/LOW Reviewer (11) audit mode
/humanize Remove 29 AI writing patterns from any prose (docs, PRDs, copy, changelogs). Self-audits before final version. Documenter (10) editor mode
/consolidate-memory Memory vault janitor — merge duplicates, archive stale, prune index. Snapshot-first safe workflow. Context Manager (08) janitor mode
/run-program Execute declarative YAML pipeline (programs/*.yml) with human gates, parallel/conditional steps, variable substitution Orchestrator (09) executor mode
/swarm TOTAL AUTONOMY: prompt → PR mergeable. Worktree isolado + Ralph loop (fresh context per story) + 4-agent parallel review + self-fix CRITICAL/HIGH + auto PR. v2.0.0 All skills coordinated

/loop — Auto-Loop v2 (Multi-Agent Orchestrator)

scripts/auto-loop/ is an autonomous orchestrator that ships tasks ready, working, polished and tested. Run it overnight, wake up to a PR ready to merge.

# Basic usage (single run, claude agent)
node scripts/auto-loop "your task here"

# Pick the agent
node scripts/auto-loop "task" --agent codex
node scripts/auto-loop "task" --agent claude

# Isolated worktree + parallel (3 tasks in 3 worktrees)
node scripts/auto-loop --worktree --parallel 3 -- "task A" -- "task B" -- "task C"

# Configurable polishing pass (default: standard)
node scripts/auto-loop "task" --polish=full

# Fine-grained control
node scripts/auto-loop "task" --max-tokens 200000 --stop-when "tests cover the new endpoint"

v2 features:

Feature Detail
Multi-agent adapters for claude --print and codex exec, common interface, swap via --agent
Integrated worktree creates -auto-worktrees// on branch auto/, preserved if committed
Parallel mode --worktree --parallel N runs N isolated runners, aggregates logs by run-id
Polishing pass --polish=none|light|standard|full — simplify + review (+ security-review + test on full) before commit
Cross-OS prevent-sleep macOS caffeinate, Linux systemd-inhibit, Windows SetThreadExecutionState
JSONL debug log .auto/runs//debug.jsonl with full error.cause chain
Classified backoff permanent aborts, retryable exponential (60s→600s, 5x), agent-reported retries immediately
Graceful interrupt 1× Ctrl+C = finish iteration and exit clean, 2× = SIGKILL with rollback
Robust resume session.json with prompt/model/agent/branch — rerun asks update/new branch/quit
Token cap --max-tokens N aborts mid-run with clean commit if valid
Stop-when --stop-when "" — agent reports `STOP_WHEN_MET: true

Circuit breaker: same error 3x, stall (3 iterations without git diff), budget exhausted, or task blocked — stops automatically.

Exit codes: 0 ok / 1 usage / 2 permanent error / 3 retryable exhausted / 4 breaker tripped / 5 stall / 6 token cap / 7 polish incomplete / 130 interrupted / 99 fatal.

Production-ready:

  • 21 smoke tests under scripts/tests/auto-loop/, all green. Run: node scripts/tests/auto-loop/run-all.mjs.
  • Cross-platform (macOS, Linux, Windows) — adapters spawn through the shell on Windows so npm-installed .cmd launchers resolve.
  • Each run writes .auto/runs//status.json with {iterations, commits, exitCode, worktreePath, ...} for parallel parents and external tooling to consume.
  • Opt-in real-LLM smoke: node scripts/tests/auto-loop/smoke-real.mjs (manual, costs tokens).

What changed 2026-04-30 → 2026-05-01:

  • Initial v2 release on 04-30: multi-agent (claude + codex), integrated worktree, parallel mode, polishing pass, gnhf-inspired flags (--max-tokens, --stop-when, prevent-sleep, JSONL log, classified backoff, 2-stage Ctrl+C, robust resume), bilingual docs.
  • Gap fixes shipped 05-01: codex E2E test with fake CLI shim (zero tokens), polish skill-path verification + retry path test, runner+worktree integration test, status.json wired into parallel summary (was showing - placeholders), Windows portability fixes (gitDiffSinceBaseline no longer POSIX-only; adapters resolve .cmd/.bat launchers).
  • Tests: 17 → 21, all passing. Commands and exit codes unchanged.

Global Governance

  • GLOBAL.md is the highest instruction layer
  • policies/ standardize execution, risk, persistence, quality and evaluation
  • templates/ reduce variation in handoff, plan, review and rejection
  • policies/tool-safety.md — safe usage of write, network, MCP and external actions
  • policies/model-routing.md — model tiers, enforcement and integration with cost-tracker
  • policies/evals.md — minimum evidence for structural changes to the kit
  • policies/search-first.md — research mandatory before implementing (feature, bugfix, integration, refactor)
  • policies/iterative-retrieval.md — progressive retrieval in 3 rounds for delegated subagents and skills
  • policies/anti-rationalization.md — common rationalization tables + rebuttals per critical skill
  • policies/source-driven.md — mandatory source hierarchy for framework/lib decisions
  • policies/confusion-management.md — STOP-NAME-OPTIONS-WAIT protocol for detected confusion
  • policies/context-engineering.md — 5-level context hierarchy and 3 trust levels

Instruction Hierarchy

  1. GLOBAL.md
  2. policies/*.md
  3. skills/*/SKILL.md
  4. templates/*.md

Real Repo Structure

.
├── .claude/              ← slash commands (/spec, /plan, /build, /test, /review, /simplify, /ship, /pipeline, /best, /auto, /loop)
│   └── commands/
├── .claude-plugin/       ← Claude Code plugin manifest
│   └── plugin.json
├── .github/              ← CI workflows (validate-plugin, validate)
│   └── workflows/
├── AGENTS.md
├── CLAUDE.md
├── GLOBAL.md
├── README.md
├── commands/             ← slash commands (/audit-repo, /devkit-install-fv, ...)
├── docs/
│   ├── quickstart.md
│   ├── repo-audit/
│   ├── skill-guides/
│   └── skill-call-matrix.md
├── evals/
├── hooks/                ← lifecycle hooks for Claude Code
│   ├── hooks.json
│   ├── config.json
│   └── scripts/
├── mcp-server/           ← MCP server with 38 tools
├── patterns/ai-integration/
├── personas/             ← agent personas (code-reviewer, security-auditor, test-engineer)
├── policies/             ← model-routing, tool-safety, cost-optimization, evals
├── scripts/              ← generate-image.py and utilities
├── setup/                ← multi-platform install.sh
├── skills/               ← 79 specialists (*/SKILL.md)
├── src/                  ← reusable hooks, stores, components and middleware
└── templates/            ← handoff, plan, review, rejection

Installed Structure in the Consumer Repo

When installed via /devkit-install-fv or setup/install.sh:

consumer-repo/
├── AGENTS.md
├── CLAUDE.md
├── GEMINI.md
├── .mcp.json                     ← Claude Code project MCPs
├── .claude/settings.json         ← hooks registered
├── .claude/commands/             ← slash commands (/spec, /plan, /build, /loop, ...)
├── .claude/agents/               ← subagents dispatchable via Task tool
├── .github/copilot-instructions.md
├── .windsurf/rules/dev-team-kit.md
├── .windsurf/mcp.json
├── .gemini/settings.json
└── .bot/
    ├── GLOBAL.md
    ├── commands/                 ← operational commands (/audit-repo, /devkit-install-fv, ...)
    ├── docs/                     ← skill-guides, repo-audit, quickstart
    ├── evals/
    ├── hooks/                    ← lifecycle hooks
    ├── learned-skills/           ← project-accumulated knowledge (score 0-1, weekly decay, auto-archived in .archive/ below 0.3)
    ├── mcp-server/               ← compiled and ready
    ├── patterns/ai-integration/
    ├── personas/                 ← code-reviewer, security-auditor, test-engineer
    ├── policies/
    ├── scripts/
    ├── setup/
    ├── skills/
    └── templates/

The consumer repo also receives .claude/commands/ (48 slash commands) at the root, installed by setup/install.sh.


Quick Validation

pytest scripts/tests -q
node scripts/check-consistency.mjs
cd mcp-server && npm run build
bash scripts/smoke-install.sh

Design checkers — run these in the consumer repo

These verify the design rules instead of merely stating them. Point them at the app you’re building, not at this kit:

node scripts/check-design-generic.mjs src/    # indigo default, system-ui, AI gradient, pure black, 100vh
node scripts/check-contrast.mjs src/          # WCAG ratio computed, in BOTH themes
node bench/ab/score-design.mjs   # 0–100 score per arm, to compare across kit versions

Both exit 1 on failure (--warn reports only, --json for programmatic use). The design-anchor-guard hook applies the first set at write time and blocks a visual file carrying the statistical-default signature — escape hatch is a design-anchor: allow comment in the file.

Caveat worth knowing: check-contrast reads #hex and rgb() tokens. Colours declared in hsl(), oklch() or var() are skipped and still need manual verification.


Contributing

Want to add a skill, fix a bug or propose an improvement? See the full guide in CONTRIBUTING.md.

Quick summary:

  1. Create the skill in skills/NN-name/SKILL.md and register it in plugin.json
  2. For slash commands, add them to .claude/commands/ and register in plugin.json
  3. Run node scripts/check-consistency.mjs before committing
  4. Open a PR with an entry in CHANGELOG.md

Changelog

Full release history in CHANGELOG.md.


/swarm — Total Autonomy (v2.0.0+)

The only command that takes you from prompt → PR mergeable without human intervention.

/swarm "implement social auth with Google + GitHub"

The kit:

  1. Creates isolated git worktree
  2. Generates PRD + breaks into stories
  3. Ralph loop: implements each story with fresh context (no contamination)
  4. 4 parallel review agents: code + security + tests + anti-AI-writing
  5. Synthesizes findings with severity decision matrix
  6. Self-fixes CRITICAL/HIGH automatically
  7. Creates PR with synthesis as comment, rebased on main

You come back to a PR ready for review.

When to use vs other commands

Command Worktree Fresh ctx per story Multi-agent review Self-fix Auto-PR Use case
/auto optional ❌ ❌ ❌ ❌ Small task, prompt-based
/loop optional ❌ ❌ ❌ ❌ Medium task, subprocess
/run-program X depends ❌ depends ❌ ❌ Declarative pipeline with gates
/swarm always ✅ ✅ ✅ ✅ Total autonomy: prompt → PR

Inputs

/swarm "implement feature X"           # free text
/swarm fix #142                        # GitHub issue
/swarm --prd docs/prd/auth.md          # existing PRD
/swarm --resume                # continue stopped run

Autonomous + /swarm = manda e esquece

In ~/.claude/dev-team-kit-config.json set intent_classifier.autonomous: true:

  • Hook detects feature intent → auto-suggests /swarm
  • Claude auto-executes (no gates pause)
  • You come back to a PR ready

Cleanup

Worktree NEVER deleted automatically. After PR merged:

git worktree remove .swarm//workspace
rm -rf .swarm/

Full protocol: policies/swarm-protocol.md.


Auto-Orchestration (v1.8.0+)

The kit detects intent from your prompt and suggests the appropriate program automatically — you don’t have to remember to invoke /run-program manually.

You say: "I need to add social auth to the app"
   ↓
[intent-classifier hook]
   → detects feature pattern → emits: /run-program spec-driven-development
   ↓
[Claude] invokes skill 39 (program-router)
   → asks via AskUserQuestion: dry-run / direto / ad-hoc / cancelar
   ↓
You choose → program executes with human gates where defined

4 autonomy levels

Level Behavior When to use
0 — Manual Hook disabled. You invoke /run-program manually. Full control, exploration
1 — Passive Hook suggests. Claude shows it and waits. Nothing auto-executes. Quer só sugestão, decide tudo manualmente
2 — Active (DEFAULT since v1.9.0) Hook suggests + Claude auto-runs --dry-run (shows plan). Human gates inside program still pause. Default: less friction, full safety via gates
3 — Autonomous Hook suggests + Claude auto-runs with --auto-yes (gates auto-approve). CI / cron only. High risk if program has destructive bash:.

Active vs Autonomous — the key difference:

  • Active = “show me the plan automatically, but pause at gates so I can approve them during execution”
  • Autonomous = “execute everything without asking me anything”

The real difference is whether human gates during execution stay active.

Configure your level

// hook config (via /update-config or settings.json)
{
  "intent_classifier": {
    "enabled": true,         // false = Level 0 (manual)
    "auto_dry_run": true,    // DEFAULT v1.9.0+ — Level 2 Active
    "autonomous": false,     // true = Level 3 (autonomous, CI only)
    "suppress": []           // program ids to never suggest
  }
}

Edit ~/.claude/settings.json (Windows: C:\Users\\.claude\settings.json), save, and restart Claude Code.

Set up Level 3 (Autonomous) — your machine only (user-wide)

⚠ Zero human confirmations. Use only in non-interactive contexts (CI, scheduled tasks). Recomended: put this in user-wide config so the repo default stays Active (safer). File: ~/.claude/dev-team-kit-config.json

{
  "intent_classifier": {
    "enabled": true,
    "autonomous": true,
    "suppress": [
      "adversarial-dev",       // tem bash que mexe em $ARTIFACTS_DIR/app
      "comprehensive-review"   // postaria em PR sem revisão humana
    ]
  }
}

Pre-flight checklist before enabling Autonomous:

  • [ ] Backup do repo / working tree limpa
  • [ ] Programs perigosos no suppress list
  • [ ] CI/cron tem timeout (ex: máx 30min)
  • [ ] Logs persistentes em .run-program/*.log.json acessíveis para debug pós-mortem
  • [ ] git push --force proibido (ver policies/tool-safety.md)
  • [ ] Notification webhook em caso de falha

Set up Level 0 (Manual) — disable completely

{
  "intent_classifier": {
    "enabled": false
  }
}

Override temporário via env var

# bash/zsh — uma sessão só
export DEVKIT_INTENT_CLASSIFIER_AUTONOMOUS=true
claude

# powershell
$env:DEVKIT_INTENT_CLASSIFIER_AUTONOMOUS="true"; claude

Full reference: policies/auto-orchestration.md.

6 intent patterns detected

Your prompt mentions… Suggested program
“criar feature”, “spec-driven”, “constitution” spec-driven-development
“ideia vaga”, “discovery”, “preciso de PRD” pipeline-discovery
“review crítico”, “5-agent”, “comprehensive review” comprehensive-review
“from scratch”, “greenfield”, “do zero” adversarial-dev
“legacy”, “legado”, “reverse engineering” detective-spec
“auto-loop”, “autônomo”, “fire and forget” loop-polishing

Skip auto: informational prompts (“o que é…”), trivial (“fix typo”), or already a /slash command.


Acknowledgements

This kit is the result of looking at a lot of prior art and re-implementing the ideas that fit our skill-kit model. Nothing here is copied code — each item below was reimagined as policy, skill, or zero-dep script in our own conventions. Links lead to the upstream projects that inspired each direction.

Full third-party attribution (license + scope) is in NOTICE, preserved per Apache-2.0 §4(d).

Project Feature in this kit Version
github/spec-kit Inspired the /constitution, /analyze, /checklist commands and the spec-driven workflow v1.3.0+
anombyte93/prd-taskmaster Inspired the 13-check PRD quality validation taxonomy v1.2.1
algorithmicsuperintelligence/optillm Inspired the inference-time compute patterns doc (MoA, Self-Consistency, BoN, PlanSearch, SPL, RTO) v1.3.0
mattpocock/skills Inspired the /grill-me, /to-prd, /to-issues commands v1.4.0+
davidkimai/Context-Engineering Inspired protocol shells (Pareto-lang), atom→field taxonomy, and the programs layer v1.1.0
rohitg00/agentmemory Inspired the 4-tier memory consolidation model and privacy filter v1.2.0
ClickUp Agent Prompting Guide Inspired the Five Building Block framework and A→B→C layering v1.2.0
sandeco/reversa Inspired the Detective Spec pipeline (skill 33) v1.6.0
aihero.dev Inspired the documentation format used in WIKI / SKILLS-OVERVIEW v1.5.0
sopaco/deepwiki-rs Inspired the Documenter Repo-Wiki mode: staged code analysis, C4 composition, domain research, local knowledge chunking, provenance, cache and integrity reporting v2.77.0
Anthropic Skills (anthropic-skills:*) Inspired policies/mcp-builder-patterns.md, policies/memory-consolidation.md, /consolidate-memory v1.5.0
Superpowers (superpowers:*) Inspired policies/verification-before-completion.md, policies/receiving-code-review.md, parallelization framing v1.5.0
Claude Code Setup Inspired the --recommend-automation mode in the Repo Auditor skill v1.5.0
Claude MD Management Inspired the audit mode in the CLAUDE.md generator skill v1.5.0
blader/humanizer + Wikipedia: Signs of AI writing Inspired the 29 anti-AI writing patterns and /humanize command v1.4.1, v2.12
coleam00/archon Inspired the program engine primitives + the adversarial-dev and comprehensive-review patterns v1.7.0
claudioemmanuel/squeez Inspired the cross-call output dedup approach (MinHash + Jaccard) and the public benchmark methodology v2.9.0
bytedance/deer-flow Inspired three conventions: observability trace tags, skill manifest frontmatter v2, and progressive skill loading framing v2.10.0
multica-ai/andrej-karpathy-skills Inspired the “Goal-Driven Execution” pillar (the 4th principle missing from our policy set) v2.10.2
anthropics/skills/frontend-design Inspired the aesthetic anchors framework and the “ban generic fonts” rule in the UI/UX skill v2.12.0
AgriciDaniel/claude-seo Inspired the GEO/AEO section in the SEO skill (Generative/Answer Engine Optimization) v2.12.0
garrytan/gstack Inspired the /canary skill (3 strategies, 7 metrics, automatic rollback) v2.12.0
obra/superpowers Inspired the “Iron Law” framing and rationalization prevention table v2.12.0
anthropics/financial-services Inspired the vertical-plugin architectural pattern (documented for future adoption) v2.12.0
openai/codex-plugin-cc Inspired the Codex integration guide (we don’t reimplement — users install the plugin directly) v2.12.0
alirezarezvani/claude-skills Inspired programmatic skill quality scoring and the trigger eval format v2.12.0
Tencent/TencentDB-Agent-Memory Inspired the symbolic-memory (Mermaid canvas + node_id drill-down) and memory-pyramid (L0→L3) policies v2.14.0
bojieli/ai-agent-book Inspired KV-cache-aware prompt construction, persistent-memory prompt-injection risk + sidecar tool-call validation, cross-vendor handoff trajectory portability, 4-destination learning-signal routing, agentic failure-layer taxonomy, and the MAST failure taxonomy + “new information” test before fan-out unreleased
Hanako — Loops and Graphs Inspired the false-edge validator rule (“and then” is not a dependency), the return envelope with SCOPE (return the unit, not the batch), split_by on parallel blocks, the closed lane in the permission ladder, and the bad_plan fix destination unreleased
Birgitta Böckeler (Thoughtworks) — Harness Engineering: Build a Reliable AI Agent in 6 Layers Second piece by an author already cited for harness-categories; after gap analysis against the kit, inspired the task-contract schema, structured tool-response shape + named permission ladder, fix-destination failure taxonomy, and the “accepted outputs / human review minutes” target metric unreleased
vshulcz/deja-vu Inspired the PreCompact recovery packet (policies/compaction-recovery.md), the rejected/superseded/stale learned-skill states and freshness line, working-tree-aware ranking, the negative-control memory eval and the value-shape redaction + transcript audit. Not adopted: the command-warning hook (its own measurement found no effect), the Go binary, 35-agent parsers and embeddings. Its published numbers were not independently verified v2.86.0
wheresryan22/anatomy Interactive isometric SVG figures as physical machines, four-tone shader, pure Node engine (kit/), geometric collision audit, and WebGL/3D layers (skill 88) v2.103.0
zazencodes/zazencodes-season-3 Multi-agent software factory architecture: spec-writer, builder in worktree with port allocation, 4D parallel review board with PASS/CHANGES, approver risk gate (/factory) v2.103.0
Every entry above is an idea-level inspiration. We do not bundle code from these projects; our implementations are independent and aligned with this kit’s zero-runtime-dep, markdown-first conventions. When a project’s approach didn’t fit (LangGraph runtime, proxy servers, Python CLIs, etc.), we said so in NOTICE.

License & attribution

Licensed under the Apache License, Version 2.0. See LICENSE for the full text and NOTICE for the third-party attribution that must be preserved in any redistribution.

If you fork, repackage, or build on top of this kit: keep NOTICE intact. The people listed there shaped the patterns inside — attribution is the only thing the license asks of you.


🇧🇷 Leia em Português

View this README on GitHub

Recommended Tools

Try a different keyword or remove a filter.

Install

npx skillfish add felvieira/claude-skills-fv