knowledge-engineering

Code-intelligence + document tooling for mirroring HTML/PDF documentation (e.g. anthropic.com/sitemap.xml pages): HTML, TypeScript, and JavaScript language servers (VS Code's extracted servers + typescript-language-server) plus the official Model Context Protocol PDF server. Binaries are pinned as repo devDependencies and invoked via npx.

Personalized platform-engineering plugin for the operator: AlloyDB Omni install, Docker MCP profile wiring, Voyage+Turbopuffer+AlloyDB embeddings architecture, and citation/test/outcome discipline. Modeled after subagentceo/knowledge-work-plugins/cowork-plugin-management.

Operator-side IT admin plugin for GitHub-tier operations: claude-code OAuth rotation, repo→org secret promotion, secrets parity audit, branch-protection ruleset CRUD, and a security-aware linter for Claude Code Action workflows (.github/workflows/claude*.yml). Dogfoods OSEC1/OSEC2/OSEC3 (secret model), OIT1 (minter pattern), and OAUTO13 (workflow security baseline) into a single plugin that exercises the full claude-code plugin spec: skills + hooks + monitors + agents + MCP server.

Operator-side IT admin plugin: scriptable CRUD over vendor API tokens for Cloudflare, Turbopuffer, Neon, Parallel.ai, and Nimbleway. Implements the OSEC3 long-lived-minter pattern with macOS keychain bootstrap. Replaces browser-click token mint flows with deterministic CLI flows that never leak secret values into agent context.

Per-merged-PR audit follow-up generator. Reads the session transcript at ~/.claude/projects/<dir>/<session-id>.jsonl, computes tool-call waste/latency/throughput stats for the work that landed a given PR, and emits a templated follow-up PR body plus the top 3 highest-impact findings as issue bodies. Dogfoods OAUDIT family: build-use-iterate-improve the merge process itself by surfacing where the agent wasted calls.