Help us improve
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
Share bugs, ideas, or general feedback.
By subagentceo
Operator-side IT admin plugin: scriptable CRUD over vendor API tokens for Cloudflare, Turbopuffer, Neon, Parallel.ai, and Nimbleway. Implements the OSEC3 long-lived-minter pattern with macOS keychain bootstrap. Replaces browser-click token mint flows with deterministic CLI flows that never leak secret values into agent context.
npx claudepluginhub subagentceo/knowledge-engineering --plugin macos-it-adminCRUD over Parallel.ai (parallel.ai) API keys covering both Search and Task plans. Use when rotating PARALLEL_API_KEY, listing keys for audit, scoping a new key to a specific plan, or revoking a compromised key. Uses the OSEC3 minter pattern with PARALLEL_TOKEN_MINTER from macOS keychain.
CRUD over Turbopuffer API keys. UNIQUE among the 5 vendors in this plugin — Turbopuffer exposes NO admin REST API and NO MCP connector, so all token operations are browser-driven via turbopuffer.com/dashboard/api-keys. This skill documents the operator-paste flow with anti-silent-failure scaffolding; it does NOT automate the browser, because doing so requires screenshotting the one-shot value (the 2026-05-17 anti-pattern).
CRUD over Cloudflare API tokens using the OSEC3 long-lived-minter pattern. Use when rotating CLOUDFLARE_API_TOKEN, listing existing tokens for audit, updating a token's permissions, or revoking a compromised token. Never operates on the dashboard via browser; all operations go through the Cloudflare REST API with values piped directly into gh secret set + wrangler secrets-store.
CRUD over Neon API keys using the OSEC3 minter pattern. Use when rotating NEON_API_KEY, listing existing keys for audit, creating a per-environment scoped key, or revoking a compromised key. Operates via Neon REST API (api.neon.tech/api/v2/api_keys) with a long-lived NEON_TOKEN_MINTER from macOS keychain.
CRUD over Nimbleway (Nimble) admin API tokens, used by the Nimble MCP connector for crawl/extract/agent operations. Uses the OSEC3 minter pattern with NIMBLEWAY_TOKEN_MINTER from macOS keychain. Operations cover the Nimble admin API (api.webit.live or app.nimbleway.com depending on the product surface).
Share bugs, ideas, or general feedback.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge.
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Memory compression system for Claude Code - persist context across sessions
Standalone image generation plugin using Nano Banana MCP server. Generates and edits images, icons, diagrams, patterns, and visual assets via Gemini image models. No Gemini CLI dependency required.
Streamline people operations — recruiting, onboarding, performance reviews, compensation analysis, and policy guidance. Maintain compliance and keep your team running smoothly.
Prospect, craft outreach, and build deal strategy faster. Prep for calls, manage your pipeline, and write personalized messaging that moves deals forward.
Create content, plan campaigns, and analyze performance across marketing channels. Maintain brand voice consistency, track competitors, and report on what's working.
Write feature specs, plan roadmaps, and synthesize user research faster. Keep stakeholders updated and stay ahead of the competitive landscape.
Per-merged-PR audit follow-up generator. Reads the session transcript at ~/.claude/projects/<dir>/<session-id>.jsonl, computes tool-call waste/latency/throughput stats for the work that landed a given PR, and emits a templated follow-up PR body plus the top 3 highest-impact findings as issue bodies. Dogfoods OAUDIT family: build-use-iterate-improve the merge process itself by surfacing where the agent wasted calls.
Code-intelligence + document tooling for mirroring HTML/PDF documentation (e.g. anthropic.com/sitemap.xml pages): HTML, TypeScript, and JavaScript language servers (VS Code's extracted servers + typescript-language-server) plus the official Model Context Protocol PDF server. Binaries are pinned as repo devDependencies and invoked via npx.
Operator-side IT admin plugin for GitHub-tier operations: claude-code OAuth rotation, repo→org secret promotion, secrets parity audit, branch-protection ruleset CRUD, and a security-aware linter for Claude Code Action workflows (.github/workflows/claude*.yml). Dogfoods OSEC1/OSEC2/OSEC3 (secret model), OIT1 (minter pattern), and OAUTO13 (workflow security baseline) into a single plugin that exercises the full claude-code plugin spec: skills + hooks + monitors + agents + MCP server.
Personalized platform-engineering plugin for the operator: AlloyDB Omni install, Docker MCP profile wiring, Voyage+Turbopuffer+AlloyDB embeddings architecture, and citation/test/outcome discipline. Modeled after subagentceo/knowledge-work-plugins/cowork-plugin-management.
Solo-founder chassis for shipping a Claude-powered product. Multi-agent research orchestrator + 28 vendor doc mirrors + 16+ MCP tools across 5 lanes + Cloudflare Sandbox runner + Neon-branched per-PR previews. OAuth-only.
This repo is a fork-and-ship chassis, not a one-off project. The intent (per PRODUCTRD.md) is that another founder clones the repo, swaps the seed prompts and vendor list, and inherits everything else: the verify chain, the heartbeat memory layer, the auto-merge loop, the citation discipline, the operator runbooks, and the OAuth-only posture.
| Surface | What | Where |
|---|---|---|
| Orchestrator | Opus 4.7 (1M context) — 4 sub-agents over @anthropic-ai/claude-agent-sdk | src/agent/run.ts |
| MCP tools | 16+ tools across 5 lanes: engineering_*, blog_*, support_*, llms_*, vendor_* + search_tools | src/mcp/ |
| Vendor mirror | 28 vendor doc surfaces (anthropics, cloudflare, neon, stripe, twilio, workos, elevenlabs, aws, openfeature, gcp, ...) — 1,369 anthropics docs alone | vendor/ |
| Crawler | crawlee + llms.txt / html-index / sitemap.xml discovery; preflight-304 idempotency | scripts/crawl-vendors.ts |
| Worker runner | Cloudflare Sandbox + Durable Objects for per-task ephemeral execution (scaffolded) | infra/cloudflare/ |
| Neon branching | Per-PR Neon DB branches via cloudflare-preview.yml | migrations/, scripts/migrate-neon.ts |
| Frontend | outcomesdk.com Cloudflare Worker — pretext-driven SPA over vendor/ markdown | frontend/ |
| Heartbeat memory | Cross-session orchestration state | seeds/memory/heartbeat/ |
| Feature flags | OpenFeature + Cloudflare Flagship provider | src/lib/openfeature.ts |
| Plugin manifest | 3 Anthropic marketplaces (official, knowledge-work, community) | .claude/plugins.json |
unset ANTHROPIC_API_KEY # OAuth-only — fails closed if this is set
export CLAUDE_CODE_OAUTH_TOKEN=... # mint via `claude setup-token`
npm install
npm run verify # mcp + tf + citations + gates + libs + freshness + project
npm run dev "trivial test query" # local orchestrator turn
See DEVELOPER.md for the full first-time setup + day-to-day workflows.
| Doc | When to read |
|---|---|
CLAUDE.md | A Claude session starting in this repo — load-bearing context auto-loaded by claude |
DEVELOPER.md | First-time setup; adding a vendor / lane / skill / test |
RUNBOOK.md | Using Claude Opus 4.7 1M context as the web orchestrator |
CONTRIBUTING.md | Forking-founder onboarding + PR discipline |
docs/architecture.md | Runtime topology |
docs/governance.md | Branch ruleset + auto-merge state machine |
docs/security.md | OSV-Scanner dependency-vuln gate posture |
docs/context-management.md | Token counting, cache boundary, settingSources, safety hooks |
docs/CONVENTIONS.md | Outcome-driven Conventional Commits |
docs/PROJECT.md | Cowork-style project manifest |
docs/pending.md | Live action dashboard — operator + agent queue |
docs/operator-runbooks/README.md | Claude-in-Chrome operator runbooks (CF API token, GH PAT, etc.) |
PRODUCTRD.md | Chassis intent + functional requirements |
SUBPROCESSORS.md | Vendor inventory for fork-time re-evaluation |
| Lane | Source | Tools |
|---|---|---|
engineering | anthropic.com/engineering | engineering_{index,fetch,search} |
blog | claude.com/blog | blog_{index,fetch,search} |
support | support.claude.com | support_{collections,collection,article} |
llms | namespaces under *.claude.com/llms.txt, anthropic.com/llms.txt, vendor llms.txts | llms_{namespaces,fetch,grep} |
vendor | the local vendor/ mirror (28 surfaces) | vendor_{list,fetch,grep} |
Plus search_tools for progressive disclosure across the surfaces.
The full lane-to-tool map is in docs/architecture.md. Per-lane docs at docs/lanes/{engineering,blog,support,llms,vendor}/index.md.
| Sub-agent | Tools | Purpose |
|---|---|---|
npm-research | 4 npm-registry MCP tools | Primary npm data; cites registry URLs |
verifier | 12 knowledge-bridge tools (excl. vendor_*) | Independent grader vs docs/rubric.md |
crawl-curator | 3 vendor_* tools | Per-vendor crawl.json audits + drift detection |