[ PACK 03 / PREMIUM PROMPTS ]

Software Development

Build and ship software with review and test steps.

STAFF IN THIS PACK: THEO / KIRA / IDRIS / JASON / ROOT / TORQUE / JERRY / KAYLE / PAUL / ORBIT / SATCHMO / ZACK
$149ONE-TIME PURCHASE

← ALL PACKS

[ PACK CONTENTS ]

46 playbooks, listed in full.

46 PLAYBOOKS — 6 BLUEPRINTS · 12 FEATURES · 16 TASKS · 7 CHAINS · 5 FOUNDATIONS

BLUEPRINTA coordinated product rollout from scaffold to ship.
FEATUREOne complex feature in an existing product, with its toolkit path documented.
TASKA bounded job for one agent in one session.
CHAINA multi-agent sequence with named handoffs.
FOUNDATIONFill-in-the-blank onboarding docs that give the staff your business context.

BLUEPRINTS/ 6

  • BLUEPRINT

    Scaffold, auth, bill, and deploy a SaaS in coordinated waves

    Theo, Idris, Root, Jason, Jerry, and Torque take a product from empty repo to a running, authenticated, billed, deployed, tested, and security-reviewed skeleton, with auth handed to a named specialist and a review step.

    STAFF THEO / IDRIS / ROOT / JASON / JERRY / TORQUE
    web-dev:create-next-projectorchestra:software-factoryorchestra:wave-coordinatorsigma-auth:setup-nextjsdev-ops:devops-scriptsdev-ops:wait-for-ciweb-dev:perf-audit
    REQUIRES INSTALLING: web-dev · orchestra · sigma-auth · dev-ops · review
  • BLUEPRINT

    Stand up a self-iterating build loop with a verification gate

    Root, Satchmo, Jason, and Kayle wire an unattended build-verify-ship loop scoped to a defined blast radius, with a stop condition and cost tracking for each run.

    STAFF ROOT / SATCHMO / JASON / KAYLE
    orchestra:software-factoryorchestra:wave-coordinatororchestra:coordinatorreview:free-roam-testingdev-ops:cost-tracking
    REQUIRES INSTALLING: orchestra · review · dev-ops
  • BLUEPRINT

    Rescue a legacy codebase: audit, refactor plan, staged migration

    Kayle, Jerry, Jason, and Root map a brownfield repo with systematic debugging and differential review, then produce a prioritized, staged detangling plan that sequences the risky changes behind the safe ones.

    STAFF KAYLE / JERRY / JASON / ROOT
    audit-context-building:audit-context-buildingdifferential-review:differential-reviewreview:hunter-skeptic-refereesuperpowers:systematic-debuggingdev-ops:wait-for-ci
    REQUIRES INSTALLING: audit-context-building* · differential-review* · review · superpowers* · dev-ops
  • BLUEPRINT

    Launch web and native builds sharing one backend and test suite

    Theo, Kira, Idris, and Jason build synchronized Next.js and React Native surfaces against one backend and one Playwright suite, so both clients share the same backend and test plan.

    STAFF THEO / KIRA / IDRIS / JASON
    web-dev:create-next-projectvercel-react-native-skillsweb-dev:generative-uiwebapp-testing
    REQUIRES INSTALLING: web-dev · vercel-react-native-skills* · webapp-testing* · dev-ops · review
  • BLUEPRINT

    Launch a product that is a web app and an MCP server on day one

    Orbit, Theo, Root, and Jason ship a product usable both as a normal web app and as a tool inside Claude Desktop, ChatGPT, Cursor, and VS Code from day one, published and CI-gated so the MCP surface ships and stays tested alongside the web app.

    STAFF ORBIT / THEO / ROOT / JASON
    plugin-dev:mcp-integrationmcp-dev:mcp-appsmcp-dev:create-mcp-appdev-ops:npm-publishdev-ops:wait-for-ci
    REQUIRES INSTALLING: plugin-dev* · mcp-dev · dev-ops · web-dev · review
  • BLUEPRINT

    Bootstrap a multi-agent dev org: coordinator, worker lanes, advisor gate

    Satchmo, Kayle, Root, and Zack set up a main-seat/worker-lane split with a second-opinion advisor gate, so cheaper and specialized executors each run under an explicit spec while the main seat keeps planning, review, verification, and git.

    STAFF SATCHMO / KAYLE / ROOT / ZACK
    orchestra:coordinatororchestra:wave-coordinatororchestra:advisorplugin-dev:agent-development
    REQUIRES INSTALLING: orchestra · plugin-dev* · review · dev-ops · plugin-kit

FEATURES/ 12

  • FEATURE

    Add passkey + Bitcoin wallet auth to an existing Next.js app

    Theo and Jerry add wallet and passkey sign-in with Siggy's Sigma Identity patterns and reviewed session and token handling before merge.

    STAFF THEO / JERRY / SIGGY
    sigma-auth:setup-nextjsbetter-auth-security-best-practicestwo-factor-authentication-best-practices
    REQUIRES INSTALLING: sigma-auth · better-auth-security-best-practices* · two-factor-authentication-best-practices* · web-dev · review
  • FEATURE

    Add 2FA / passkey step-up to existing auth

    Jerry and Theo add tested step-up auth and a device-authorization flow for CLI and desktop, then security-review the change before merge.

    STAFF JERRY / THEO / SIGGY
    two-factor-authentication-best-practicesemail-and-password-best-practicessigma-auth:device-authorization
    REQUIRES INSTALLING: two-factor-authentication-best-practices* · email-and-password-best-practices* · sigma-auth · review · web-dev
  • FEATURE

    Expose an existing app's core actions as an MCP server

    Orbit makes the product callable by any MCP host — Claude Desktop, ChatGPT, Cursor, VS Code — with a tool contract designed to be safe and discoverable.

    STAFF ORBIT
    plugin-dev:mcp-integrationmcp-dev:mcp-apps
    REQUIRES INSTALLING: plugin-dev* · mcp-dev
  • FEATURE

    Add an AI-rendered dashboard or form surface, safely

    Theo and Orbit build a generative-UI surface that renders from model output via json-render without raw HTML injection, so users get dashboards and forms that recompose around whatever data the model returns.

    STAFF THEO / ORBIT
    web-dev:generative-uimcp-dev:json-render-coremcp-dev:json-render-react
    REQUIRES INSTALLING: web-dev · mcp-dev
  • FEATURE

    Add an e2e suite and a merge-blocking coverage gate

    Jason and Root add Playwright end-to-end coverage and wire it as a CI gate that blocks merges.

    STAFF JASON / ROOT
    webapp-testingdev-ops:wait-for-ci
    REQUIRES INSTALLING: webapp-testing* · dev-ops · review
  • FEATURE

    Migrate a feature to Next.js 16 async APIs without breaking it

    Theo runs a codemod-driven migration to Turbopack and async APIs, with a react-doctor pass to catch re-render and hook regressions, so a feature keeps working across the platform major.

    STAFF THEO
    web-dev:nextjs-upgradereact-doctor
    REQUIRES INSTALLING: web-dev · react-doctor*
  • FEATURE

    Add Stripe billing and signature-verified webhooks to an app

    Theo builds subscription billing with idempotent, signature-verified webhook handling, Jason covers the event matrix with test cards, and Jerry security-reviews it, so retries and out-of-order events resolve to exactly one fulfillment.

    STAFF THEO / JASON / JERRY
    stripe:stripe-best-practicesstripe:test-cardsstatic-analysis:semgrep
    REQUIRES INSTALLING: stripe* · static-analysis* · web-dev · review
  • FEATURE

    Add realtime sync: live updates, presence, collaborative state

    Idris and Theo add live-updating UI with presence and shared state on Convex, without hand-rolling WebSocket plumbing.

    STAFF IDRIS / THEO
    convex-realtimeconvex-functions
    REQUIRES INSTALLING: convex-realtime* · convex-functions* · dev-ops · web-dev
  • FEATURE

    Add a validated, optimized file upload and storage pipeline

    Idris, Theo, and Torque add size-limited, validated file handling on Convex storage with images optimized on the way in, so uploads stay bounded and every stored image is already compressed for delivery.

    STAFF IDRIS / THEO / TORQUE
    convex-file-storagegemskills:optimize-images
    REQUIRES INSTALLING: convex-file-storage* · gemskills · dev-ops · web-dev
  • FEATURE

    Add a monitored background job / cron pipeline

    Idris and Root add scheduled, monitored work with job status and failure reporting on Convex cron, replacing fire-and-forget setTimeout calls.

    STAFF IDRIS / ROOT
    convex-cron-jobsdev-ops:devops-scripts
    REQUIRES INSTALLING: convex-cron-jobs* · dev-ops
  • FEATURE

    Add cost/token tracking and budget guardrails to an agentic feature

    Satchmo and Root instrument an agent workflow with per-request cost tracking and a budget ceiling, so each run records its spend and applies the configured limit.

    STAFF SATCHMO / ROOT
    dev-ops:cost-tracking
    REQUIRES INSTALLING: dev-ops · orchestra
  • FEATURE

    Wire up repo guardrails with Claude Code hooks

    Zack and Root add enforced pre-commit checks — lint, secret scans, format, type-check — that run automatically on every commit.

    STAFF ZACK / ROOT
    plugin-dev:hook-developmentcore:hook-manager
    REQUIRES INSTALLING: plugin-dev* · core · plugin-kit · dev-ops

TASKS/ 16

  • TASK

    Run a dependency + secrets audit before a release

    Paul produces a go/no-go release gate that reports known CVEs and leaked secrets for review before ship.

    STAFF PAUL
    static-analysis:semgrepstatic-analysis:codeqlreview:code-audit-scripts
    REQUIRES INSTALLING: static-analysis* · review
  • TASKFREE SAMPLE

    Run a full performance audit: Lighthouse, bundle, images

    Torque audits scripts, bundles, images, and render-blocking CSS, then returns a scored, prioritized fix list for review.

    STAFF TORQUE
    web-dev:perf-auditweb-dev:frontend-performance
    REQUIRES INSTALLING: web-dev
    READ THE FULL PLAYBOOK FREE →
  • TASK

    Security-scan a single PR before merge

    Jerry runs a severity-rated Semgrep and CodeQL scan of one diff and reports any injection, auth, and data-flow findings for review before merge.

    STAFF JERRY
    static-analysis:semgrepstatic-analysis:codeqlstatic-analysis:sarif-parsing
    REQUIRES INSTALLING: static-analysis* · review
  • TASK

    Differential review of a risky diff before merge

    Kayle runs a structured before/after risk read on a large change and returns a focused review of its highest-risk differences.

    STAFF KAYLE
    differential-review:differential-review
    REQUIRES INSTALLING: differential-review* · review
  • TASK

    Run a three-phase adversarial bug hunt

    Jerry, Kayle, and Jason run a Hunter-Skeptic-Referee pass that produces reproducible bug reports through separate discovery, challenge, and referee steps.

    STAFF JERRY / KAYLE / JASON
    review:hunter-skeptic-referee
    REQUIRES INSTALLING: review
  • TASK

    Backfill unit and integration coverage for an untested module

    Jason adds property-based tests for the happy path, edge cases, error conditions, and invariants, giving the module coverage for a later refactor.

    STAFF JASON
    webapp-testingproperty-based-testing
    REQUIRES INSTALLING: webapp-testing* · property-based-testing* · review
  • TASK

    Run a free-roam exploratory bug-discovery session on staging

    Jason explores staging outside the scripted test paths and returns a reproducible list of findings.

    STAFF JASON
    review:free-roam-testing
    REQUIRES INSTALLING: review
  • TASK

    Verify CI is green before proceeding

    Root checks CI status and blocks the next step until the pipeline is green.

    STAFF ROOT
    dev-ops:wait-for-ci
    REQUIRES INSTALLING: dev-ops
  • TASK

    Publish an npm package: version bump, changelog, release

    Root and Orbit run a clean, reproducible release with the version bumped, changelog written, and tag pushed in one pass, so the published package matches exactly what's in the repo.

    STAFF ROOT / ORBIT
    dev-ops:npm-publishcore:check-version
    REQUIRES INSTALLING: dev-ops · core · mcp-dev
  • TASK

    Publish an MCP server that installs cleanly for other teams

    Orbit runs the MCP publish checklist — npx compatibility, package.json fields, discovery metadata, install docs — so the server has the files and instructions needed for installation.

    STAFF ORBIT
    plugin-dev:mcp-integrationdev-ops:npm-publish
    REQUIRES INSTALLING: plugin-dev* · dev-ops · mcp-dev
  • TASK

    Build a codebase context map before a big audit

    Kayle produces a map of the codebase — module boundaries, data flow, entry points, external dependencies — so the next audit or refactor starts from a shared reference every reviewer can read.

    STAFF KAYLE
    audit-context-building:audit-context-building
    REQUIRES INSTALLING: audit-context-building* · review
  • TASK

    Cut page weight with an image and bundle optimization pass

    Torque compresses images and trims the largest bundle contributors, cutting page weight and JavaScript payload without a redesign or any change to how the product behaves.

    STAFF TORQUE
    gemskills:optimize-imagesweb-dev:perf-audit
    REQUIRES INSTALLING: gemskills · web-dev
  • TASK

    Wire Claude Code hooks for a repo's guardrails

    Zack and Root configure repo hooks so lint, secret, and format checks run automatically on every change.

    STAFF ZACK / ROOT
    plugin-dev:hook-developmentcore:hook-manager
    REQUIRES INSTALLING: plugin-dev* · core · plugin-kit · dev-ops
  • TASK

    Map the attack surface of a new service before a pentest

    Paul enumerates externally reachable inputs for a service before a pentest, so the review starts from a documented surface map of endpoints, headers, parameters, and upload paths.

    STAFF PAUL
    entry-point-analyzer:entry-point-analyzer
    REQUIRES INSTALLING: entry-point-analyzer* · review
  • TASK

    Scaffold a correctly structured internal Claude Code plugin

    Zack scaffolds a plugin with the directory layout that auto-discovery expects for skills, agents, hooks, and commands.

    STAFF ZACK
    plugin-dev:plugin-structureplugin-dev:skill-developmentplugin-dev:agent-development
    REQUIRES INSTALLING: plugin-dev* · plugin-kit
  • TASK

    Organize technical-control evidence for a SOC 2 audit

    Paul assembles and structures the technical-control evidence an auditor will ask for, so the audit opens with an organized evidence set mapped to each control in scope.

    STAFF PAUL
    product-skills:soc2-evidence-collection
    REQUIRES INSTALLING: product-skills · review

CHAINS/ 7

  • CHAINFREE SAMPLE

    Delivery chain: architecture plan to build to test to security audit

    Kayle plans the architecture, Theo builds, Jason tests, and Jerry security-audits — one feature carried end to end through four named specialists with a handoff at each stage. The canonical Kayle-to-Theo-to-Jason-to-Jerry chain.

    STAFF KAYLE / THEO / JASON / JERRY
    static-analysis:semgrepstatic-analysis:codeqlwebapp-testingdev-ops:wait-for-ci
    REQUIRES INSTALLING: static-analysis* · webapp-testing* · dev-ops · review · web-dev
    READ THE FULL PLAYBOOK FREE →
  • CHAIN

    Ship-a-feature-safely chain: build to perf audit to test to deploy

    Theo builds, Torque runs a perf audit, Jason tests, and Root deploys, with each handoff blocking the next, so a feature is measured for speed and covered by tests before it ever reaches a user.

    STAFF THEO / TORQUE / JASON / ROOT
    web-dev:create-next-projectweb-dev:perf-auditwebapp-testingdev-ops:wait-for-ci
    REQUIRES INSTALLING: web-dev · webapp-testing* · dev-ops · review
  • CHAIN

    Security incident response chain: sweep to audit to risk call to patch

    Paul sweeps for exposure, Jerry audits the affected code, Kayle makes the risk call, and Root ships the patch, so an incident moves through one ordered path with a single owner at each step.

    STAFF PAUL / JERRY / KAYLE / ROOT
    review:code-audit-scriptsstatic-analysis:semgrepstatic-analysis:codeqlaudit-context-building:audit-context-building
    REQUIRES INSTALLING: review · static-analysis* · audit-context-building* · dev-ops
  • CHAIN

    Platform upgrade chain: impact assessment to codemod to regression to verify

    Kayle assesses impact, Theo runs the codemod, Jason regression-tests, and Root verifies CI before deploy.

    STAFF KAYLE / THEO / JASON / ROOT
    audit-context-building:audit-context-buildingweb-dev:nextjs-upgradewebapp-testingdev-ops:wait-for-ci
    REQUIRES INSTALLING: audit-context-building* · web-dev · webapp-testing* · dev-ops · review
  • CHAIN

    Plugin context diet chain: measure, compress, verify, split, republish

    Satoshi measures and compresses the catalog, Jason proves routing survived it, Satoshi splits the plugin into a core plus optional modules, and Zack publishes and sweeps every downstream reference — reducing startup context for capabilities users do not invoke.

    STAFF SATOSHI / JASON / ZACK
    plugin-kit:agent-auditorplugin-kit:benchmark-skillsplugin-kit:plugin-module-splitcore:check-version
    REQUIRES INSTALLING: plugin-kit · core · review
  • CHAIN

    MCP productization chain: build to package to test contract to publish

    Orbit builds the MCP server, Zack shapes the command surface, Jason tests the tool contract, and Root publishes — turning an internal tool into an installable, tested, published MCP server.

    STAFF ORBIT / ZACK / JASON / ROOT
    plugin-dev:mcp-integrationplugin-dev:command-developmentwebapp-testingdev-ops:npm-publish
    REQUIRES INSTALLING: plugin-dev* · webapp-testing* · dev-ops · mcp-dev · plugin-kit · review
  • CHAIN

    Agent system bootstrap chain: design to author to review to benchmark

    Satchmo architects the agent, Zack authors it, Kayle reviews, and Jason benchmarks — so a new agent is designed, built, reviewed, and measured before it is used in a workflow.

    STAFF SATCHMO / ZACK / KAYLE / JASON
    plugin-dev:agent-developmentplugin-dev:skill-developmentplugin-kit:benchmark-skills
    REQUIRES INSTALLING: plugin-dev* · plugin-kit · orchestra · review

FOUNDATIONS/ 5

  • FOUNDATIONFREE SAMPLE

    Tech-stack manifest: languages, frameworks, infra, and who owns what

    A machine-readable manifest of the buyer's stack so every other playbook in this pack starts from documented facts about the languages, frameworks, infra, and ownership in play — the AGENTS.md-style onboarding doc used by the other playbooks.

    STAFF THEO / KIRA / IDRIS / JASON / ROOT / TORQUE / JERRY / KAYLE / PAUL / ORBIT / SATCHMO / ZACK
    core:runtime-context
    REQUIRES INSTALLING: core · web-dev · dev-ops · review · mcp-dev · orchestra · plugin-kit
    READ THE FULL PLAYBOOK FREE →
  • FOUNDATION

    CI/CD baseline doc: provider, required checks, deploy targets, secrets policy

    Root documents the pipeline provider, required checks, deploy targets, and secrets policy, so deploy and CI playbooks plug into the buyer's actual pipeline on their first run.

    STAFF ROOT
    dev-ops:wait-for-cidev-ops:devops-scripts
    REQUIRES INSTALLING: dev-ops
  • FOUNDATION

    Coding conventions and review-bar doc: lint rules, commit style, merge blockers

    A fill-in-the-blank doc capturing lint rules, commit style, PR size limits, and merge blockers, so review and test playbooks enforce the buyer's actual bar on every change they touch.

    STAFF JERRY / JASON / KAYLE
    review:code-audit-scripts
    REQUIRES INSTALLING: review
  • FOUNDATION

    Security and compliance profile: sensitive-data map, controls, sign-off owner

    Paul maps the sensitive data, applicable controls, sign-off owner, and residual risk via a gap analysis, so security tasks scope to the buyer's documented risk profile.

    STAFF PAUL
    product-skills:soc2-gap-analysis
    REQUIRES INSTALLING: product-skills · review
  • FOUNDATION

    Agent operating charter: installed staff, model tier, escalation path

    Satchmo and Root document which staff are installed, their budget and model tier, and the escalation path, so blueprint and chain playbooks know which agents exist in this org and when to escalate to a human.

    STAFF SATCHMO / ROOT
    dev-ops:cost-trackingorchestra:coordinator
    REQUIRES INSTALLING: dev-ops · orchestra

* THIRD-PARTY PLUGIN FROM AN EXTERNAL MARKETPLACE. INSTALL IT FROM THE LISTED SOURCE; IT IS NOT SOLD AS PART OF THIS PACK. HOVER ANY PLUGIN NAME FOR ITS INSTALL COMMAND.

Use the software development pack.

$149 ONE-TIME PURCHASE. FUTURE UPDATES INCLUDED. 3 FREE SAMPLES.

← BACK TO ALL PACKS