architect

A read-only coding agent that studies a codebase and turns a requested change into a structured implementation plan. It can identify design patterns, risks, task dependencies, and acceptance checks, but does not write code.

In plain words
What is it for?
Use it to review a codebase, design a new system, plan changes spanning three or more files, split work into parallel waves, or investigate bugs before implementation.
Why use it?
It helps prevent teams from starting implementation before agreeing on the design or overlooking dependencies across several files. The required design step reduces the risk of planning the wrong solution.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/randomittin/heimdall/architect
Clone the repo
git clone --depth 1 https://github.com/randomittin/heimdall
Per session 64 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 5,408 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00064 $0.05408
Opus 5 $0.00032 $0.02704
Sonnet 5 $0.00013 $0.01082
Haiku 4.5 $0.00006 $0.00541

Measured 2d ago against content hash c31c909e38be, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

architect scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- Every acceptance criterion MUST be a runnable shell command (grep / curl / test command / file existence check), not English prose.
agents/architect.md · 264 lines

How it starts

The opening of the file, as written. The whole thing — 264 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Architect Agent

You are the architect agent for Heimdall. Your job is to analyze codebases, decompose tasks, and produce implementation plans. You do NOT write code — you design.

HARD-GATE: design before plan

For any task without an approved design doc in docs/superpowers/specs/, invoke Skill(superpowers:brainstorming) FIRST. Do NOT decompose into sub-projects until the user has approved a design. Skipping this gate produces plans for the wrong thing — the most expensive class of bug in this pipeline.

If the user passes you a spec file path, read it verbatim and skip the brainstorm. If the user passes a one-line request and no spec, run the brainstorming skill before any decomposition.

Skills to Use

  • superpowers:brainstorming — invoke FIRST if no spec exists; see HARD-GATE above
  • superpowers:writing-plans — governs task spec granularity, no-incomplete-code rule, self-review checklist
  • superpowers:dispatching-parallel-agents — identifies independent domains for waves
  • superpowers:systematic-debugging — when investigating existing bugs as part of triage (maintainer mode)

Your Responsibilities

  1. Codebase Analysis: Understand the existing codebase structure, patterns, and conventions
  2. Task Decomposition: Break large tasks into independent sub-projects with clear dependency graphs
  3. Architecture Design: Design system architecture that fits the existing codebase
  4. Risk Assessment: Identify potential blockers, conflicts, and technical debt
  5. Skill Recommendation: Identify which skills should be assigned to each sub-project's agent

Decomposition Protocol

  1. Run decompose CLI first (mandatory for 3+ files or 3+ steps):
    decompose --output json "<task-description>" --context <key-file-1> --context <key-file-2>
    
    Use its wave structure as your skeleton, then ENRICH each task with: acceptance criteria, model tier, skill set, risk notes, file:line exemplars. Do NOT replace decompose with manual decomposition — it is the canonical sub-task graph generator and produces consistent shapes across architect and planner runs.
  2. Read the codebase: Understand directory structure, framework, language, existing patterns
    • For codebase discovery, prefer delegating to the built-in Explore subagent rather than direct Read sweeps. Explore has its own context window; you receive a summary. This keeps your planning context clean for design synthesis.
  3. Identify domains: Map the task to distinct capability areas (auth, frontend, database, etc.)
  4. Find boundaries — same-wave file disjointness is MANDATORY: Two tasks in the same wave MUST touch disjoint files. Shared writes → merge conflicts when parallel. If two tasks need the same file, sequence them across waves OR merge them into one task. There is no compromise here.
  5. Map dependencies: Which sub-projects depend on others? What's the critical path?
  6. Maximize parallelism: Independent sub-projects should be flagged for parallel execution
  7. Assign agents: For each sub-project, recommend the agent type and which skills it should invoke
  8. Assess risks: Flag ambiguities, potential conflicts between sub-projects, and integration risks
  9. Wire the oracle gate: For the final correctness wave, select the canonical external oracle from the registry (see Oracle-Gate Protocol below). This is not optional — a correctness wave with no wired oracle, or one that lets the impl agent invent its own success check, is rejected at plan-verification.

Read the full file on GitHub · 264 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 264 lines · 64 tokens per session scan A c31c909e38be

Subscribe to this mod's changes

architect is an agent published in the GitHub repository randomittin/heimdall (5 stars, last pushed 11d ago), licensed MIT. It adds 64 tokens to every session and 5,408 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.