toolbox

name	toolbox
description	Pre/post dev toolbox — named bundles of skills/agents loaded before development work and councils of experts invoked after. Run /toolbox or the toolbox.py CLI to list, activate, initialize, export, import, and validate toolboxes. Invoke at the start or end of a dev session, when setting up a new repo, or when sharing toolboxes with a team.
type	feature
priority	50
always_load	false

toolbox

Named bundles of skills/agents that run before (pre) or after (post) a development task. Learn patterns from past work and propose new bundles. Invoke slash, pre-commit, session-end, or file-save.

Quick reference

Task	Command
Seed 5 starter toolboxes	python src/toolbox.py init
List available toolboxes	python src/toolbox.py list
Inspect one	python src/toolbox.py show ship-it
Activate (global)	python src/toolbox.py activate ship-it
Export for sharing	python src/toolbox.py export ship-it
Import a shared toolbox	python src/toolbox.py import file.yaml
Validate config	python src/toolbox.py validate

Starter templates

Name	When to use
ship-it	End-of-feature: 7-expert council on the change set
security-sweep	Security audit with guardrail blocking HIGH findings
refactor-safety	Refactors with graph-informed blast radius
docs-review	When touching Markdown or API docs
fresh-repo-init	Blank repo: run intent interview and scaffold

Data model

Global: ~/.claude/toolboxes.json. Per-repo (overrides global): <repo_root>/.toolbox.yaml.

Each toolbox declares:

• pre — skills/agents to load before work starts
• post — agents that form the council after work ends
• scope.analysis — diff | full | graph-blast | dynamic
• trigger — slash, pre_commit, session_end, or file_save glob
• budget.max_tokens / budget.max_seconds — hard stop on runaway cost
• dedup.policy — fresh (always re-run) or cached (reuse within window)
• guardrail — if true, block commit on HIGH findings

Invoke when

• User says "I'm done with this feature" or commits a feature branch.
• User opens a fresh repo (triggers fresh-repo-init suggestion).
• User touches security-sensitive paths (triggers security-sweep file_save).
• User asks "what toolboxes do I have?" or "run the council".

Reasoning

See docs/toolbox/index.md, docs/toolbox/starters.md, and docs/toolbox/verdicts.md for the current toolbox contract, starter bundles, and guardrail behavior.