{"id":50062577,"url":"https://github.com/nddev-it-com/rldyour-claudecode","last_synced_at":"2026-06-30T03:00:49.539Z","repository":{"id":358684883,"uuid":"1231429433","full_name":"NDDev-it-com/rldyour-claudecode","owner":"NDDev-it-com","description":"rldyour AI CLI configuration for Claude Code: plugin marketplace, MCP/LSP, Serena memory, security review, browser/design workflows, and reviewer agents.","archived":false,"fork":false,"pushed_at":"2026-06-23T16:37:20.000Z","size":2296,"stargazers_count":2,"open_issues_count":2,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-23T17:15:32.501Z","etag":null,"topics":["agpl-3","ai-agents","ai-cli","anthropic","browser-automation","claude-code","claude-code-plugin","design-system","developer-tools","hooks","lsp","marketplace","mcp","model-context-protocol","nddev","plugins","rldyour","sdlc","security-tools","serena"],"latest_commit_sha":null,"homepage":"https://github.com/NDDev-it-com/rldyour-claudecode","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/NDDev-it-com.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2026-05-07T00:36:41.000Z","updated_at":"2026-06-19T15:57:03.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/NDDev-it-com/rldyour-claudecode","commit_stats":null,"previous_names":["nddev-it-com/rldyour-claudecode"],"tags_count":260,"template":false,"template_full_name":null,"purl":"pkg:github/NDDev-it-com/rldyour-claudecode","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NDDev-it-com%2Frldyour-claudecode","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NDDev-it-com%2Frldyour-claudecode/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NDDev-it-com%2Frldyour-claudecode/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NDDev-it-com%2Frldyour-claudecode/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/NDDev-it-com","download_url":"https://codeload.github.com/NDDev-it-com/rldyour-claudecode/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NDDev-it-com%2Frldyour-claudecode/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34950332,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-30T02:00:05.919Z","response_time":92,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["agpl-3","ai-agents","ai-cli","anthropic","browser-automation","claude-code","claude-code-plugin","design-system","developer-tools","hooks","lsp","marketplace","mcp","model-context-protocol","nddev","plugins","rldyour","sdlc","security-tools","serena"],"created_at":"2026-05-21T20:06:12.330Z","updated_at":"2026-06-30T03:00:49.530Z","avatar_url":"https://github.com/NDDev-it-com.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# rldyour-claudecode\n\n`rldyour-claudecode` is the rldyour AI CLI configuration for Claude Code: plugin marketplace, MCP/LSP, Serena memory, security review, browser/design workflows, and reviewer agents. It is a controlled catalog for the owner's own plugins, MCP servers, skills, subagents, slash commands, hooks, rules, and workflows. Nothing is treated as enabled or correct unless the owner explicitly decides it.\n\n## Current Baseline\n\n| Field | Value |\n|---|---|\n| Adapter version | `1.7.18` |\n| Runtime baseline | Claude Code `2.1.196` (`@anthropic-ai/claude-code`) |\n| GitHub release tag | `1.7.18` |\n\nRuntime pin sources: `package.json`, `references/claude-baseline.json`, `config/mcp-runtime-versions.env`. Compatibility floor: `v2.1.146+`.\n\n## What This Repository Provides\n\nThis is a configuration package for Claude Code, not a fork of the upstream Anthropic Claude Code runtime. It provides a structured plugin marketplace (`marketplace.json`) with ten first-party plugins covering SDLC orchestration, MCP transport, Serena-first semantic code workflow, security review, browser/design automation, LSP routing, and architecture-quality rules. The adapter does not ship a modified Claude Code binary and does not touch any user account beyond what normal Claude Code plugin and MCP configuration requires.\n\n## Native Boundaries\n\nClaude Code reads these native config surfaces from this repository:\n\n- `.claude-plugin/marketplace.json` - active installable plugin catalog with per-entry relative sources (`source: \"./plugins/\u003cname\u003e\"`); this repo intentionally does not use `metadata.pluginRoot`.\n- `plugins/\u003cplugin\u003e/.claude-plugin/plugin.json` - plugin manifest. Each manifest declares `dependencies` as an array; `rldyour-mcps` is the base layer (no dependencies); all other plugins depend on it; `rldyour-flow` additionally depends on `rldyour-serena-mcp`.\n- Manifest-linked files: `skills/\u003cskill\u003e/SKILL.md`, `agents/\u003cagent\u003e.md`, `commands/\u003cname\u003e.md`, `hooks/hooks.json`, `.mcp.json`, `references/`, `scripts/`.\n\nSource-only files (not automatically projected to the runtime): `docs/`, `config/`, `.serena/`, `AGENTS.md`, `.claude/CLAUDE.md`. Durable AI context files are tracked on `main`; runtime-local Serena state remains ignored.\n\nExtension surfaces active in this adapter: skills, slash commands, subagents, hook scripts, MCP server definitions (via `rldyour-mcps`), and one LSP integration (via `rldyour-lsps`).\n\n## Install / Update / ry-repair\n\n**System install (owner workstation):**\n\n```bash\nclaude plugin marketplace add /path/to/rldyour-claudecode\nclaude plugin install rldyour-mcps@rldyour-claudecode\nclaude plugin install rldyour-serena-mcp@rldyour-claudecode\nclaude plugin install rldyour-flow@rldyour-claudecode\n# ...repeat for each enabled plugin\n```\n\nAfter changing `marketplace.json`, a plugin manifest, hooks, skills, agents, or `.mcp.json`, restart Claude Code so the runtime reloads plugin definitions.\n\n**Owner full-auto launcher** (`cl` alias installed via `scripts/install_yolo_launchers.sh --apply` in the root control-plane repo):\n\n```bash\nclaude --dangerously-skip-permissions\n```\n\n**Convergence / repair:**\n\n```bash\n# /ry-repair runs inside Claude Code (skill from rldyour-flow plugin)\n# offline/check mode:\nplugins/rldyour-flow/scripts/flow_post_task_state.py\n```\n\n**Runtime doctor / plugin validation:**\n\n```bash\nclaude plugin validate .\nfor p in plugins/*/; do claude plugin validate \"$p\"; done\nscripts/validate_marketplace.sh\n```\n\n**First-time repository state check on a fresh checkout:**\n\n```bash\ngit status -sb\n```\n\n## Active Catalog\n\n\u003c!-- inventory:begin --\u003e\n\u003c!-- Generated by scripts/generate_inventory.py - run `python3 scripts/generate_inventory.py` to refresh. Do not edit by hand. --\u003e\n\n**10 first-party plugins** (38 skills, 11 slash commands, 8 subagents, 9 hook scripts in 2 manifests, 47 scripts total, 16 references). CI: 11 workflows + 1 dependabot config. Serena memories: 24.\n\n| Plugin | Version | Skills | Commands | Agents | Hooks | Scripts | References | MCP | LSP |\n|---|---|---|---|---|---|---|---|---|---|\n| `rldyour-mcps` | `1.7.18` | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 |\n| `rldyour-explore` | `1.7.18` | 2 | 1 | 1 | 0 | 0 | 0 | 0 | 0 |\n| `rldyour-serena-mcp` | `1.7.18` | 2 | 0 | 1 | 4 | 3 | 0 | 0 | 0 |\n| `rldyour-security` | `1.7.18` | 2 | 1 | 0 | 0 | 0 | 0 | 0 | 0 |\n| `rldyour-browser` | `1.7.18` | 6 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |\n| `rldyour-design` | `1.7.18` | 5 | 1 | 0 | 0 | 0 | 0 | 0 | 0 |\n| `rldyour-lsps` | `1.7.18` | 4 | 0 | 0 | 0 | 2 | 3 | 0 | 1 |\n| `rldyour-flow` | `1.7.18` | 8 | 7 | 6 | 5 | 7 | 7 | 0 | 0 |\n| `rldyour-orchestrator` | `1.7.18` | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |\n| `rldyour-rules` | `1.7.18` | 7 | 1 | 0 | 0 | 0 | 6 | 0 | 0 |\n\n\u003c!-- inventory:end --\u003e\n\nRun `python3 scripts/generate_inventory.py` to refresh counts.\n\nPlugin briefs:\n\n- **`rldyour-mcps`** - single-owner MCP transport (11 pinned servers: Serena, Sequential Thinking, Chrome DevTools, Context7, DeepWiki, Grep, shadcn, Dart/Flutter, Figma, OpenAI Docs, GitHub).\n- **`rldyour-serena-mcp`** - Serena-first semantic code workflow, numbered fact-only `.serena` memory sync via `flow-memory-sync` subagent, lifecycle hooks (UserPromptSubmit, PreToolUse:Bash, PostToolUse:Bash, Stop).\n- **`rldyour-flow`** - autonomous SDLC orchestration with seven slash commands (`ry-init`, `ry-start`, `ry-newp`, `ry-review`, `ry-deploy`, `ry-sync`, `ry-repair`), six reviewer subagents (architecture/quality/consistency/integration/verification/security tracks), advisory SessionStart, PreToolUse:Bash, PostToolUse:Bash, and Stop hooks, scoped context packs, instruction docs sync, and post-task synchronization.\n- **`rldyour-explore`** - deep multi-source research via `ry-explore` subagent (`model: opus[1m]`, `effort: max`) and tech/web research skills routing through Context7, DeepWiki, Grep, and authoritative web sources.\n- **`rldyour-security`** - non-blocking OWASP Top 10 2025 secure-implementation guidance plus the `ry-sec-review` defensive review skill.\n- **`rldyour-browser`** - provider-routed browser workflows for Webwright, Playwright CLI, and Chrome DevTools MCP.\n- **`rldyour-design`** - Figma → code, centralized token-based design system, strict Feature-Sliced Design frontend architecture, shadcn/ui, ReactBits, and browser-validation workflows.\n- **`rldyour-lsps`** - language-server routing, health checks, brew-first setup profiles, and Serena LSP integration guidance.\n- **`rldyour-orchestrator`** - macOS cmux orchestrator/worker role skills (opt-in; not the default execution mode).\n- **`rldyour-rules`** - quality-first engineering rules, architecture boundaries, implementation discipline, dependency compatibility (SLSA Level 2, SBOM, lockfile discipline), verification gates, project-instruction policy, MADR 4.0.0 ADR policy, and `ry-rules-review`.\n\nMCP permissions and model policy: declared in `plugins/rldyour-flow/references/` and `config/rldyour-contract.json`; projected to `docs/contract-matrix.md`.\n\n## Browser / Design / DevTools Routing\n\nThree browser providers are active in this adapter, each with a distinct role:\n\n- **Webwright** (`rldyour-browser` skills) - primary autonomous browser workflow skill for end-to-end web task automation, validation, and data extraction.\n- **Playwright CLI** (`rldyour-browser` skills) - CLI-driven Playwright test automation, spec generation, and assertion workflows.\n- **Chrome DevTools MCP** (`rldyour-mcps`, server `chrome-devtools`) - low-level DevTools Protocol access for performance profiling, network inspection, console capture, screenshot, and heap snapshots; always served through the pinned MCP server.\n\nDesign workflows route through `rldyour-design`: Figma → code via the Figma MCP server, centralized design tokens, Feature-Sliced Design frontend architecture, shadcn/ui component integration, ReactBits patterns, and browser-validation confirmation steps.\n\nSkill routing: Claude Code resolves the correct provider through skill descriptions; both Russian and English trigger phrases are included in every `SKILL.md` description block for consistent routing across owner prompts.\n\n## Repository Context / Serena Memory\n\n`main` tracks product history and durable AI context together: plugin manifests, skills, agents, commands, hooks, scripts, references, docs, CI, `AGENTS.md`, `.claude/CLAUDE.md`, `.serena/project.yml`, and `.serena/memories/**`. Runtime-local Serena cache, reviews, diagnostics, markers, locks, local project files, browser artifacts, and secrets remain ignored and must not be committed.\n\nThis is the default rldyour-owned repository policy. In external or colleague-owned repositories, `.rldyour/project-policy.json` is the executable source of truth and may disable tracked AI context or change instruction-doc tracking rules.\n\nSerena memory domains are governed by `config/rldyour-contract.json` (root control-plane). Memory freshness is enforced by the `rldyour-serena-mcp` Stop hook and by post-task sync (`ry-sync` / `flow-post-task-sync`). Only numbered, fact-only `.serena/memories/*.md` files are stored; plans, chat history, and speculation are never committed to memory.\n\nTracked context validation commands:\n\n```bash\ngit status -sb\npython3 scripts/validate_repository_context_policy.py --strict\npython3 scripts/validate_no_fullrepo_residue.py --strict\npython3 scripts/validate_serena_memory_schema.py --scope all --strict-mode strict-all\npython3 scripts/validate_serena_memory_semantics.py --scope all --strict-current-facts --strict-metadata-dates --strict-evidence-commits\n```\n\nLocal product repositories that consume this marketplace can install the rldyour Git pre-push guard:\n\n```bash\nscripts/install_local_git_hooks.sh --dry-run\nscripts/install_local_git_hooks.sh --apply\n```\n\nThe guard is branch-aware: source branches allow durable AI context while still blocking secrets, runtime markers, browser artifacts, and local env files.\n\n## Security Boundary\n\nSecrets, tokens, cookies, and private keys are never stored in this repository. MCP server definitions are pinned with exact package versions in `plugins/rldyour-mcps/.mcp.json`; `@latest` and unpinned `uvx --from` specs are explicitly prohibited. MCP trust boundary: servers listed in `rldyour-mcps` are the only approved external tool providers; any new server requires an intentional version pin and capability smoke test before being added to the manifest.\n\nOwner full-auto posture: the standard launch mode is `claude --dangerously-skip-permissions` (the `cl` launcher alias). This is explicitly owner-directed; it is not appropriate for shared workstations or multi-user environments. Permissions configured in Claude Code user settings are not a sandbox - they are advisory defaults that the owner has consciously overridden.\n\nHook scripts are advisory enforcement gates. The single registered Stop hook (`rldyour-flow/hooks/stop_lifecycle_dispatcher.sh`, 45 s timeout) computes post-task state and emits guidance; the main workflow (not the hook) performs memory sync, commits, pushes, and git synchronization.\n\nEvery callable skill includes compact Russian and English trigger phrases in `SKILL.md` frontmatter so routing remains deterministic and auditable. Repository documentation is written in English; owner-facing communication defaults to Russian unless explicitly changed.\n\n## Validation\n\n**Fast / static (no network, no installed tools required):**\n\n```bash\npython3 scripts/validate_contract.py\npython3 scripts/generate_contract_matrix.py --check\npython3 scripts/validate_skill_routing.py\npython3 scripts/validate_plugin_versions.py\npython3 scripts/validate_instruction_docs.py --require-agent-docs\npython3 -m py_compile scripts/*.py\ngit diff --check \u0026\u0026 git diff --cached --check\n```\n\n**Adapter-deep (requires local checkout, no live network):**\n\n```bash\nclaude plugin validate .\nfor p in plugins/*/; do claude plugin validate \"$p\"; done\nscripts/validate_marketplace.sh\nplugins/rldyour-flow/scripts/flow_post_task_state.py | python3 -m json.tool\nplugins/rldyour-serena-mcp/scripts/serena_memory_state.py | python3 -m json.tool\nplugins/rldyour-flow/scripts/instruction_docs_state.py --json | python3 -m json.tool\npython3 scripts/release_manifest.py\n```\n\n**Installed-runtime smoke tests (requires Claude Code and MCP runtimes):**\n\n```bash\nscripts/smoke_mcp_runtime.sh                         # MCP servers reachable + pins parsed (~30s)\nscripts/smoke_mcp_capabilities.sh                    # JSON-RPC initialize + tools/list per server (~2m cold)\nscripts/smoke_mcp_capabilities.sh --server \u003cname\u003e    # narrow to one server\nscripts/smoke_mcp_capabilities.sh --skip-uvx         # skip slow uvx cold-starts\nscripts/smoke_hooks.sh                               # Serena + flow hook scripts dry-run\nscripts/smoke_serena_memory_taxonomy.sh              # analyzer schema/targets + memory freshness\n```\n\n**Live-network:**\n\n```bash\npython3 scripts/check_mcp_runtime_versions.py        # detect drift against config/mcp-runtime-versions.env\n```\n\nNOT_PROVEN policy: any validation that requires a live network call, a running Claude Code session, or an installed MCP runtime reports `NOT_PROVEN` when those are unavailable; it does not fail the static lane. CI runs `claude plugin validate`, JSON/Python/shell syntax checks, and frontmatter verification on every push and pull request via `.github/workflows/validate.yml`. The scheduled `dependency-check.yml` monitors pinned MCP runtime versions for upstream drift.\n\n## Release / Rollback\n\nReleases are tag-driven: each public product version requires a matching numeric GitHub Release at `github.com/NDDev-it-com/rldyour-claudecode/releases`. A `VERSION` file bump alone is not sufficient - the GitHub Release must exist.\n\nMarketplace release version lives in `VERSION`. Per-plugin behavior versions stay in `plugins/\u003cplugin\u003e/.claude-plugin/plugin.json`. Release notes live in `CHANGELOG.md` (Keep-a-Changelog format).\n\n```bash\npython3 scripts/release_manifest.py                 # build release metadata bundle\nscripts/collect_diagnostics.sh                      # local diagnostics bundle for failure triage\n```\n\nReference documents:\n\n- `docs/adr/` - Architecture Decision Records (MADR 4.0.0). Twelve ADRs cover irreversible decisions: tracked-on-main context policy, dual-doc split, bilingual descriptions, reviewer transport, local GitHub MCP, ownership boundaries, MCP pinning, CI baseline, release/tag conventions, macOS egress trust gap, hook freshness invariants, and the owner full-auto standard. Start with `docs/adr/README.md`.\n- `docs/release-process.md` - versioning, CHANGELOG, release evidence, `claude plugin tag --push` flow.\n- `docs/rollback-restore.md` - safe restore from previous tags or tracked context snapshots.\n- `docs/dependency-updates.md` - pinned MCP runtime update policy.\n- `docs/observability.md` - diagnostics, CI artifacts, hook lifecycle debugging, failure triage.\n\nDefault version movement is patch (`+0.0.1`) after a public GitHub Release exists. Minor (`+0.1.0`) and major (`+1.0.0`) bumps are owner-directed decisions only and are coordinated through the root control-plane release orchestrator.\n\n## Support / License\n\n**License:** [AGPL-3.0-or-later](LICENSE). This project and all first-party marketplace plugins are licensed under the GNU Affero General Public License v3.0 or later.\n\n**Author:** Danil Silantyev (github:rldyourmnd), CEO NDDev.\n\n**Issues:** [github.com/NDDev-it-com/rldyour-claudecode/issues](https://github.com/NDDev-it-com/rldyour-claudecode/issues) - bug reports, regression evidence, missing-component requests.\n\n**Discussions:** [github.com/NDDev-it-com/rldyour-claudecode/discussions](https://github.com/NDDev-it-com/rldyour-claudecode/discussions) - general questions, workflow advice, plugin behaviour clarifications, sharing usage patterns.\n\n**Releases:** [github.com/NDDev-it-com/rldyour-claudecode/releases](https://github.com/NDDev-it-com/rldyour-claudecode/releases) - numeric product tags (`X.Y.Z`) with release notes from CHANGELOG.\n\n**Security contact:** Report vulnerabilities via [GitHub Security Advisories](https://github.com/NDDev-it-com/rldyour-claudecode/security/advisories) for this repository. Do not open public issues for security reports.\n\nThis is a personal marketplace - response time is best-effort, no SLA. Feel free to fork and tailor to your own workflow.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnddev-it-com%2Frldyour-claudecode","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnddev-it-com%2Frldyour-claudecode","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnddev-it-com%2Frldyour-claudecode/lists"}