nxtg-forge

Plugin nxtg-forge from marketplace nxtg-forge in nxtg-ai/forge-plugin. Commands read from the repo's manifest — today.

Skills (27)

• Backend Master Agent

  Backend implementation playbook — API endpoints, database models/migrations, auth, query optimization, and the framework-specific traps that break servers in production. Use when implementing or reviewing server-side code: FastAPI / Django / Flask / Express / NestJS / Go / Axum handlers, SQLAlchemy

• CLI Artisan Agent

  Knowledge for designing and building command-line interfaces — argument/flag parsing, subcommand structure, interactive prompts, colored and tabular output, progress feedback, exit codes, shell completion, and CLI UX. Use when adding or redesigning a CLI command, choosing a CLI framework (clap, Clic

• Agent Development

  Author and configure Claude Code subagents — valid YAML frontmatter (name, description, model, color, tools, isolation, memory, skills) plus a system-prompt body. Use when creating a new agent .md, fixing an agent that won't load or won't auto-delegate, choosing a model/color, deciding which tools a

• Integration Specialist Agent

  Resilient third-party integration patterns — API clients, webhooks, MCP server wiring, retries/circuit-breakers, and idempotency. Use when connecting to an external service (Stripe/GitHub/Slack/S3/etc.), building or verifying a webhook receiver, adding retry/backoff or circuit-breaker resilience, re

• Lead Architect Agent

  Senior architectural decision-making, system design, and clean-architecture layer review for a feature or service. Use when designing a new feature's architecture before implementation, choosing a stack or database, reviewing layer boundaries (domain / application / infrastructure / interface), writ

• Platform Builder Agent

  Platform-engineering playbook — Docker/Compose, CI/CD pipelines, Kubernetes, cloud + IaC, monitoring, and the deployment traps that break shipping. Use when the task is containerizing an app, writing a Dockerfile or docker-compose, building a GitHub Actions / GitLab CI pipeline, authoring Kubernetes

• QA Sentinel Agent

  Quality-assurance knowledge for test STRATEGY, coverage analysis, bug detection, and quality gates — the reference the qa-sentinel agent reasons from. Use when designing a test plan, deciding unit vs integration vs E2E, judging whether coverage is real or hollow, setting quality-gate thresholds, or

• Architecture

  Clean Architecture, Domain-Driven Design, and backend system-design guidance: organizing a codebase into layers with the right dependency direction, choosing structural design patterns (Repository, Strategy, Observer, Command, DI), applying DDD tactical patterns (entities vs value objects, aggregate

• Browser Debugging

  Debug the running NXTG-Forge web dashboard by driving a headless Chromium via the Playwright MCP server — read console errors, take screenshots, inspect the DOM accessibility tree, and watch network requests. Use when the dashboard renders blank or broken after a UI change, when the user reports bro

• ceo-loop

  CEO Decision Loop — the ORBIT execution protocol (OBSERVE → REASON → BUILD → INSPECT → TURN) for one iteration of NXTG-Forge autonomous product governance. Preloaded into the nxtg-ceo-loop agent and started by the /nxtg-forge:ceo-loop command; the ceo-loop-stop.sh Stop hook re-invokes it each iterat

• Claude Code Framework

  Authoritative reference for how Claude Code itself works AND how to build for it — CLAUDE.md memory, custom slash commands, subagents, skills, hooks, MCP servers, settings precedence, permissions, plan mode, CLI/headless/CI, worktrees, and multi-platform surfaces. Use when authoring or debugging a p

• Codex Framework

  Reference knowledge for OpenAI Codex CLI compatibility — how Codex discovers AGENTS.md instructions and .agents/skills so a Forge (Claude Code) project can interoperate with Codex without duplicating agent definitions. Use when a user asks to "add Codex support", make the repo "work with Codex CLI"

• Coding Standards

  Cross-language coding conventions — naming, type safety, error handling, async, imports, SQL formatting, git commit format, complexity/size limits, security, and a pre-PR review checklist for Python, TypeScript/JavaScript, Rust, and Go. Use when writing or reviewing code, setting a project's style b

• Core NXTG-Forge

  Ground truth for the NXTG-Forge platform — the real forge CLI subcommands, the /nxtg-forge:* slash commands, the .forge/state.json + events.jsonl model, both MCP servers (Rust orchestrator + Node governance), the agent roster, and the security hooks. Use when working inside or on NXTG-Forge (the for

• crucible-audit

  Optional convenience, no accuracy claim: a structured test-quality review prompt that looks for hollow assertions, coverage-omit gaming, mock proliferation, dead/gated tests, untested entry points, and README badge inflation. Use when asked to "run a CRUCIBLE audit", "check/audit test quality", "fin

• Dev Environment Patterns

  Debug and configure local dev-server networking for multi-device access — Vite proxy, env-var URL priority, 0.0.0.0 binding, and WSL2 quirks. Use when API/fetch or WebSocket calls fail from a phone/tablet/other PC ("localhost refused", CORS blocked, NetworkError, WS won't connect), when a server is

• Documentation

  Documentation standards and code-to-docs sync conventions for Forge projects — JSDoc/TSDoc annotations, README/CHANGELOG structure, auto-generated API reference, doc-tree layout, and staleness detection. Use when writing or reviewing docs, adding JSDoc to exported functions, structuring a docs/ tree

• Domain Knowledge

  NXTG-Forge product domain knowledge — the mission, core concepts (project spec, agent orchestration, state, Clean Architecture, drift/gap analysis, MCP), the real `forge` CLI surface, and the 3-repo workspace layout. Use when onboarding to what NXTG-Forge IS and why, when a spec/task/agent-orchestra

• Gemini Framework

  Reference knowledge for Google Gemini CLI compatibility. Describes how Gemini CLI discovers context (GEMINI.md), configures settings.json, and overrides its system prompt so Forge can interoperate on a dual-platform project. Use when a user asks how Forge coexists with Gemini CLI, how GEMINI.md / @i

• Git Workflow

  Trunk-based git workflow for NXTG-Forge — branching strategy, commit conventions, PR practices, rebase/conflict resolution, and how the plugin's own hooks guard git operations. Use when creating a feature branch, writing a commit message or PR, rebasing onto main, resolving merge conflicts, choosing

• Optimization

  Measure-first performance optimization playbook — profiling discipline, bottleneck triage (CPU/memory/I/O), caching layers, and the algorithm/DB/frontend/network fix patterns. Use when the user reports something is slow ("dashboard takes forever", "API is laggy", "bundle is 2MB", "memory keeps growi

• OWASP Security

  OWASP vulnerability detection + remediation for security code review, PLUS the Forge plugin's own security guards (why a "SECURITY BLOCK" / exit-2 fired and the correct fix). Use when reviewing or hardening authentication, authorization, input validation, cryptography, API endpoints, session managem

• Parallel Execution

  Claude Code's two force-multipliers — Plan Mode (explore → plan → wait-for-approval → execute) and Agent Teams (parallel subagents via the Task tool) — plus the canonical forge agent roster and delegation-routing rules. Use when decomposing a multi-file feature, running multi-dimensional codebase an

• runtime-validation
• skill-development
• testing
• verify-governance

Slash commands (24)

• /nxtg-forge:agent-assign

  Assign tasks to specialized agents

• /nxtg-forge:ceo-loop-cancel

  Cancel the active CEO Decision Loop gracefully. Sets the loop to inactive, writes a final session summary to the progress file, and logs session statistics. Does NOT delete the decision journal — all decisions are preserved. Safe to run at any time, even if no loop is active.

• /nxtg-forge:ceo-loop

  Activate the CEO Decision Loop in ORBIT mode. Starts a continuous multi-iteration governance cycle: OBSERVE pending decisions → REASON with precedent → BUILD decisions → INSPECT retrograde → TURN for next iteration. The Stop hook keeps the loop alive until the queue is empty or limits are reached. U

• /nxtg-forge:checkpoint

  Save and restore project state checkpoints

• /nxtg-forge:command-center

  Activate forge command center with orchestrator

• /nxtg-forge:compliance

  Scan tech stack, check license compatibility, and generate SBOM

• /nxtg-forge:dashboard

  Open the NXTG-Forge governance dashboard in your browser

• /nxtg-forge:deploy

  Deploy with pre-flight validation and safety checks

• /nxtg-forge:docs-audit

  Comprehensive documentation quality audit

• /nxtg-forge:docs-status

  Show documentation health and coverage

• /nxtg-forge:docs-update

  Update stale documentation based on code changes

• /nxtg-forge:feature

  Add a new feature with full agent orchestration

• /nxtg-forge:gap-analysis

  Optional convenience, no accuracy claim: a structured gap-review prompt across testing, docs, security, and architecture

• /nxtg-forge:init

  Initialize NXTG-Forge in a project - 60 second setup wizard

• /nxtg-forge:integrate

  Set up third-party service integrations

• /nxtg-forge:optimize

  Analyze and optimize codebase for performance and maintainability

• /nxtg-forge:report

  Display comprehensive session activity report

• /nxtg-forge:restore

  Restore project state from a checkpoint

• /nxtg-forge:spec

  Generate technical specifications for features

• /nxtg-forge:status-enhanced

  Enhanced status with detailed dashboard and metrics

• /nxtg-forge:status

  Display complete project state (zero-context-friendly)

• /nxtg-forge:task

  Begin, inspect, relax or end an enforced Forge task: a test-file write guard plus a Stop gate on the project's own test command

• /nxtg-forge:test

  Execute project tests with detailed analysis and reporting

• /nxtg-forge:update

  Update Forge to latest — syncs past Claude Code bug #29071

Subagents (33)

• analytics

  Use this agent when metrics tracking, data analysis, or reporting is needed. This includes: implementing analytics events, building dashboards, analyzing usage patterns, creating reports, tracking KPIs, and measuring feature adoption. <example> Context: User wants to understand usage patterns. user:

• api

  Use this agent when API design, endpoint creation, or API integration work is needed. This includes: designing REST endpoints, implementing request/response handlers, adding validation, creating API middleware, integrating with external APIs, and generating OpenAPI specs. <example> Context: User nee

• builder

  Use this agent when you need to implement features, write production-ready code, refactor existing code, or generate comprehensive tests. This agent should be invoked after a plan has been approved or when specific code implementation is required. <example> Context: The Forge Orchestrator has approv

• nxtg-ceo-loop

  CEO Digital Twin for autonomous strategic decision-making. Use this agent when you encounter decisions about product direction, architecture, resource allocation, risk assessment, or when you need final approval on significant changes. This agent embodies the founder's vision and makes decisions wit

• compliance

  Use this agent when regulatory compliance, license auditing, or policy enforcement is needed. This includes: license compatibility checks, GDPR/privacy compliance, accessibility compliance (WCAG), code of conduct enforcement, and export control checks. <example> Context: User wants to check license

• crucible-detective

  Use this agent for a test quality review (optional convenience, no accuracy claim). Looks for test fraud: hollow assertions, coverage gaming, mock proliferation, dead tests, untested entry points, and metric inflation. This agent should be invoked when test counts seem suspiciously high, when a Huma

• database

  Use this agent when database work is needed. This includes: schema design, migration creation, query optimization, data modeling, indexing strategy, and database troubleshooting. <example> Context: User needs to add a new data model. user: "I need to store user preferences with versioning" assistant

• design-vanguard

  UI/UX design and frontend implementation specialist. Use for component development, responsive layouts, design system work, animations, accessibility audits, developer experience (CLI UX, error messages, onboarding), color/typography systems, dark mode, component API design, and design critiques. <e

• detective

  Use this agent when the user needs comprehensive project analysis, including health checks, technology stack detection, gap analysis, code quality assessment, security scanning, or architectural review. This agent should be invoked for Option 4 (Health Check) or Option 3 (Soundboard) scenarios, duri

• devops

  Use this agent when infrastructure, deployment, CI/CD, or environment configuration work is needed. This includes: Docker/container setup, GitHub Actions workflows, environment variable management, server configuration, monitoring setup, and deployment automation. <example> Context: User needs a Doc

• docs

  Use this agent when documentation needs to be generated, updated, or audited. This includes: generating JSDoc/TSDoc for code, creating README files, writing API documentation, maintaining changelogs, checking for stale docs, or creating architecture guides. <example> Context: User has added new comp

• dx-engineer

  Use this agent when developer experience needs to be evaluated, designed, or improved. This includes: CLI UX audits, SDK API design review, onboarding flow optimization, error message quality, documentation architecture, configuration UX, terminal output formatting, installation experience, example

• governance-verifier

  Automated verification responder for governance concerns flagged by hooks. Use when a PostToolUse hook flags a concern, when test-implementation mismatches are detected, when scope creep is suspected, or when a PreToolUse hook raises a warning. <example> Context: A hook detected test changes without

• growth-engine

  Use this agent for growth strategy, go-to-market planning, content marketing, SEO, community building, and developer relations. This includes: launch playbooks (Product Hunt, Hacker News, Reddit), content calendar creation, SEO audits, open source growth strategy, competitive intelligence, email cam

• guardian

  Use this agent when quality assurance, testing, or security validation is needed. This includes: after implementation is complete and automatic quality checks should run, when a security scan is requested, when pre-commit quality gates need to run, when code review is requested, when quality issues

• incident-commander

  Use this agent when something breaks in production, when an incident needs triage and coordination, or when post-incident analysis is required. This includes: production outages, degraded performance, failed deployments, data corruption, dependency failures, security breaches, alert storms, and any

• integration

  Use this agent when connecting to external services, APIs, or third-party tools. This includes: GitHub API integration, Sentry setup, webhook handling, OAuth flows, MCP server connections, and service-to-service communication. <example> Context: User wants GitHub integration. user: "Connect to GitHu

• learning

  Use this agent when the system needs to learn from past sessions, improve recommendations, or adapt to user patterns. This includes: analyzing session history for patterns, improving agent selection accuracy, learning from user corrections, optimizing workflow recommendations, and building user pref

• master-architect

  Expert software architecture, system design, and code review emphasizing simplicity and maintainability. Use for system design decisions, architecture review, design pattern selection, infrastructure planning, database selection, API design, and technical debt assessment. This is the senior architec

• oracle

  Use this agent as the Proactive Governance Sentinel for autonomous development modes. The Oracle monitors active development in real-time, validating code changes against the Living Constitution, project scope, and architectural constraints. It provides non-blocking insights and warnings through the

• orchestrator

  Use this agent when the user wants to activate the NXTG-Forge 2.0 developer empowerment system, typically triggered by '/nxtg-forge:command-center' or similar activation commands. This agent coordinates the entire Forge experience including context restoration, feature planning, soundboard discussio

• performance

  Use this agent when performance optimization, profiling, or bundle analysis is needed. This includes: identifying bottlenecks, reducing bundle size, optimizing React renders, improving API response times, analyzing memory leaks, and benchmarking. <example> Context: User notices the app is slow. user

• planner

  Use this agent when the user needs strategic feature planning, architecture design, or task breakdown for NXTG-Forge 2.0 projects. This includes scenarios where: (1) the user wants to design a new feature from concept to implementation plan, (2) complex work needs to be decomposed into manageable ta

• product-strategist

  Use this agent when product strategy, market positioning, feature prioritization, or go-to-market planning is needed. This includes: evaluating product-market fit, developing user personas, prioritizing features with frameworks like RICE or MoSCoW, analyzing competitive positioning, creating product

• qa-sentinel

  Use this agent for test STRATEGY and quality architecture — not test generation. This is the quality mind that designs testing approaches, enforces CRUCIBLE Protocol gates, diagnoses systemic test suite problems, and recommends advanced testing techniques (mutation, property-based, visual regression

• refactor

  Use this agent when code needs to be restructured, simplified, or improved without changing external behavior. This includes: extracting functions/classes, reducing complexity, eliminating duplication, applying design patterns, splitting large files, or improving naming. <example> Context: A service

• release-sentinel

  Use this agent when documentation needs to be audited, updated, or synchronized with code changes. This includes: (1) After commits or releases that modify API endpoints, components, CLI commands, or configuration schemas, (2) When preparing a release and need to ensure documentation is current, (3)

• revenue-architect

  Use this agent for pricing strategy, monetization design, Stripe integration, revenue modeling, and enterprise sales planning. This agent is the money brain — it designs how products generate revenue, from freemium conversion funnels to enterprise contract structures. <example> Context: User needs t

• scout

  Use this agent for competitive intelligence, market analysis, and strategic positioning. This includes: building competitor feature matrices, pricing comparison analysis, market sizing (TAM/SAM/SOM), technology trend monitoring, patent and IP landscape scanning, open source ecosystem mapping, acquis

• security

  Use this agent for dedicated security scanning, vulnerability assessment, and security hardening. This includes: dependency vulnerability scanning, OWASP Top 10 checks, secrets detection, security review of authentication/authorization code, CSP configuration, Semgrep SAST analysis, and remediation

• testing

  Use this agent when test generation, coverage analysis, or test infrastructure work is needed. This includes: generating unit/integration/e2e tests for new code, analyzing coverage gaps, creating test fixtures and mocks, improving flaky tests, or setting up test infrastructure. <example> Context: Us

• ui

  Use this agent when UI component development, styling, or frontend architecture work is needed. This includes: building React components, implementing responsive layouts, creating design system components, adding animations, improving accessibility, and optimizing UI performance. <example> Context:

• wordsmith

  Use this agent when content needs to be written, rewritten, or reviewed for quality. This includes: landing page copy, technical blog posts, README files, product descriptions, email sequences, social media posts, documentation, error messages, CLI help text, changelogs, and any user-facing text tha

MCP servers (2)

• governance-mcp

  runs: bash ${CLAUDE_PLUGIN_ROOT}/servers/governance-mcp/start.sh

• semgrep-mcp

  runs: bash ${CLAUDE_PLUGIN_ROOT}/servers/semgrep-mcp/start.sh

Hooks (27)

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-command-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-secret-shield.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-secret-shield.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-secret-shield.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-secret-shield.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-injection-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-injection-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-injection-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-sql-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-sql-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-sql-guard.sh

• PreToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/task-enforce.sh guard

• UserPromptSubmit

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/pre-task.sh

• UserPromptSubmit

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/task-enforce.sh auto

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/ceo-loop-stop.sh

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/post-task.sh

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/audit-root-cleanliness.sh

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/smoke-test-reminder.sh

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/task-enforce.sh gate

• Stop

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/required-output.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/enforce-file-placement.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/governance-check.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/governance-check.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/governance-check.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-semgrep-scan.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-semgrep-scan.sh

• PostToolUse

  bash ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/security-semgrep-scan.sh

Similar plugins