cygaco

cygaco/master-console

Command Claude Code

Assert the role→provider routing tables agree across providers.js, catalog.js, and the dispatch guide — fails if any role is routed inconsistently or a non-Claude role is undocumented.

cygaco/master-console

Command Claude Code

Dockerfile → .dockerignore secret-exposure check — flags secret files (.env, .pem, credentials) that a broad COPY . / ADD . would bake into an image layer because .dockerignore doesn't exclude them.

cygaco/master-console

Command Claude Code

Environment readiness and tooling quality — fast go/no-go or deep audit.

cygaco/master-console

Command Claude Code

Audit the /etc authoring+eval harness — fail-closed enforcer that rejects an invented authoring format (root etc.md, non-standard skill frontmatter) and any eval-pack or emitted decisionrecord that doesn't satisfy its contract. The standing backstop to the harness's own test suite.

cygaco/master-console

Command Claude Code

Refuse product-content leaks in canonical — full-tree, fail-closed scan for private product slugs, maintainer abs paths in executables, and promote-relic reintroduction.

cygaco/master-console

Command Claude Code

Verify .claude/commands and .claude/agents are byte-identical regenerations of their mc/ sources — fails if any view is stale.

cygaco/master-console

Command Claude Code

The naming bijection enforcer (ADR-0016) — a role carries a Greek call-sign IFF it is a President's-office member (home===president). Fires both ways. Report-only in /scan:full.

cygaco/master-console

Command Claude Code

Audit the ingest stores (docs/research, docs/imports, docs/briefs, docs/clones) for un-firewalled prompt-injection — the persistent fail-closed backstop to the real-time untrusted-content firewall hook. Treats all externally-ingested content as DATA, never instructions.

cygaco/master-console

Command Claude Code

Verify a fresh MC install — manifest, paths, agents, hooks, version, settings.

cygaco/master-console

Command Claude Code

Pattern-mine events.jsonl for repeat audit-block signatures — surface candidates for /issues:log.

cygaco/master-console

Command Claude Code

Open-source leak gate — runs the five fail-closed leak enforcers (privacy, framework-purity full-tree, tracked-transients, hashed leak-denylist, README drift) sequentially with real exit codes.

cygaco/master-console

Command Claude Code

Detect already-applied MC migration scripts left on disk in consumer projects.

cygaco/master-console

Command Claude Code

Verify the capsule for /mc:update --to is resolvable from REPOROOT, sibling clones, manifest.mc.source, or framework-installed.json#source.

cygaco/master-console

Command Claude Code

Verify a MC install baseline exists (.claude/framework-installed.json present, installedVersion ≠ 0.0.0) before /mc:update may proceed.

cygaco/master-console

Command Claude Code

Read-only product-vs-dev-tooling layer diff — lists which framework-owned paths SHIP to consumer products (product layer) vs which stay framework-internal and never ship (dev-tooling layer), with summary counts. Cross-references mc/MANIFEST.json (ownership) × .claude/framework-manifest.json (shipped). Informational…

cygaco/master-console

Command Claude Code

Verify every on-disk path is enumerated in mc/MANIFEST.json — catches "added framework content, forgot to register" before downstream installs silently break.

cygaco/master-console

Command Claude Code

Verify framework-installed.json reflects actual disk state (no missing files, no hash drift).

cygaco/master-console

Command Claude Code

Verify every breaking change in a MC release ships with a corresponding migration script under framework/migrations — stub implementation pending refinement.

cygaco/master-console

Command Claude Code

Verify every migration listed in capsule release.json#migrations[] exists in the source tree before /mc:update may apply.

cygaco/master-console

Command Claude Code

Verify every paths.json key points to an existing path (skip generated/ephemeral keys).

cygaco/master-console

Command Claude Code

Verify every framework-owned path under the consumer-essential roots is actually shipped (enumerated in framework-manifest.json) — catches "framework code that ships to nobody" (the downstream-broken class).

cygaco/master-console

Command Claude Code

Detect drift between the installed MC version on disk and the latest canonical version, flagging installs that have been stale for more than seven days.

cygaco/master-console

Command Claude Code

Verify installed framework has the structural skeleton dirs canonical declares.

cygaco/master-console

Command Claude Code

Catch transient state accidentally committed (.mc/, qa-.png, runtime/qa-/, runtime//.{jsonl,log,diff,err,out}, oversized runtime//.txt, the beta mining output dir).