Guides dependency evaluation, selection, and lifecycle management for software projects. Covers package health assessment (OpenSSF Scorecard, maintenance signals, popularity metrics), vendoring vs forking decisions, major version upgrade strategies, automated update tooling (Dependabot, Renovate), supply chain security (SLSA, Sigstore, SBOM, provenance), monorepo dependency patterns, and agentic workflows for dependency operations. Use when evaluating new packages, adding dependencies, upgrading major versions, configuring automated updates, auditing dependency health, making vendor-or-fork decisions, or securing the software supply chain. Triggers: dependency, package, npm install, pip install, cargo add, upgrade, update, vendoring, fork, supply chain, SBOM, SLSA, Dependabot, Renovate, lockfile, vulnerability, dependency health, monorepo dependencies.
Dev environment hygiene for agentic development. Prevents global package pollution, version drift, PATH entropy, and lockfile conflicts across Python, Node.js, and system tooling. Covers installation best practices, audit workflows, cleanup playbooks, and cross-platform patterns (Windows + macOS). Use when installing packages, configuring MCP servers, setting up toolchains, debugging import/resolution errors, or cleaning up polluted environments.
Botcore system architecture — component topology, data flow, security boundaries, and extension points. Covers core package structure, plugin registry flow, MCP server factory, agent orchestrator, memory subsystem, connector middleware stack, and cross-cutting concerns (audit, auth, config). Use when understanding how components connect, tracing request flow, planning new plugins or connectors, debugging integration issues, or reviewing architecture decisions. Triggers: architecture, component, data flow, request flow, middleware, plugin registry, MCP factory, orchestrator topology, connector stack, system diagram, how does botcore work.
Core design principles and architectural tenets for the botcore ecosystem. Covers the foundational decisions that shape all implementation: CommandResult contract, opt-in composability, connector boundaries, meta-tool token efficiency, scoped memory, constrained agency, and plugin protocol. Use when making implementation decisions, reviewing designs for consistency, evaluating trade-offs, or onboarding to the project philosophy. Triggers: principles, design philosophy, why, trade-off, decision, architecture decision, CommandResult, connector boundary, composability, constrained agency.
Create, maintain, and validate agent skills following the Agent Skills open standard (agentskills.io). Covers SKILL.md format, frontmatter fields (open standard + Claude Code extensions), progressive disclosure, hooks, resource scripts, naming conventions, routing tables, and automated quality checks. Use when creating new skills, auditing existing skills, fixing lint errors, adding hooks to skills, or writing resource scripts for deterministic offloading. Triggers: create skill, new skill, skill lint, audit skills, SKILL.md, hooks, resource scripts, progressive disclosure, Agent Skills, open standard, skill architecture, deterministic offloading.
Provides comprehensive accessibility review, guidance, and implementation patterns for WCAG 2.1+ AA compliance. Covers keyboard navigation, ARIA roles and states, screen reader support, assistive technology analysis, compliance frameworks (Section 508, ADA, EN 301 549, EAA, ACA, CVAA), UX component patterns, and accessible content authoring. Use when building interactive components, auditing UI for accessibility, implementing focus management, reviewing designs or specs against WCAG, mapping issues to compliance frameworks, or creating accessibility checklists. Triggers: accessibility, a11y, WCAG, ARIA, keyboard navigation, screen reader, assistive technology, focus management, inclusive design, compliance, Section 508, ADA.
Guides configuration of botcore agent teams in botcore.toml. Covers AgentConfig fields (name, role, model, skills, connectors, connector_commands, memory_scope, permissions, system_prompt, is_lead), AgentsPluginConfig (default_model, max_agents), permission profiles, system prompt authoring, MCP tool access, connector command resolution, and multi-agent team composition patterns. Use when creating agent teams, writing agent configs, authoring system prompts, setting permissions, or debugging agent configuration issues.
Provides API design guidance for REST, GraphQL, and gRPC services covering naming conventions, resource modeling, versioning strategies, error handling (RFC 9457), pagination patterns, OpenAPI 3.1 specification authoring, security (OAuth 2.1, rate limiting), and agent-friendly design patterns including MCP tool integration. Use when designing new APIs, reviewing API contracts, choosing between REST/GraphQL/gRPC, implementing error handling or pagination, writing OpenAPI specs, or making APIs consumable by AI agents. Triggers: API design, REST, GraphQL, gRPC, OpenAPI, error handling, pagination, versioning, API security, agent-friendly API, MCP tools, API-first.