Master Console
This repository also configures its own agents. See what master-console tells them →
Command Claude Code
Assert the role→provider routing tables agree across providers.js, catalog.js, and the dispatch guide — fails if any role is routed inconsistently or a non-Claude role is undocumented.
Command Claude Code
Dockerfile → .dockerignore secret-exposure check — flags secret files (.env, .pem, credentials) that a broad COPY . / ADD . would bake into an image layer because .dockerignore doesn't exclude them.
Command Claude Code
Environment readiness and tooling quality — fast go/no-go or deep audit.
Command Claude Code
Audit the /etc authoring+eval harness — fail-closed enforcer that rejects an invented authoring format (root etc.md, non-standard skill frontmatter) and any eval-pack or emitted decisionrecord that doesn't satisfy its contract. The standing backstop to the harness's own test suite.
Command Claude Code
Refuse product-content leaks in canonical — full-tree, fail-closed scan for private product slugs, maintainer abs paths in executables, and promote-relic reintroduction.
Command Claude Code
Verify .claude/commands and .claude/agents are byte-identical regenerations of their mc/ sources — fails if any view is stale.
Command Claude Code
The naming bijection enforcer (ADR-0016) — a role carries a Greek call-sign IFF it is a President's-office member (home===president). Fires both ways. Report-only in /scan:full.
Command Claude Code
Audit the ingest stores (docs/research, docs/imports, docs/briefs, docs/clones) for un-firewalled prompt-injection — the persistent fail-closed backstop to the real-time untrusted-content firewall hook. Treats all externally-ingested content as DATA, never instructions.
Command Claude Code
Verify a fresh MC install — manifest, paths, agents, hooks, version, settings.
Command Claude Code
Pattern-mine events.jsonl for repeat audit-block signatures — surface candidates for /issues:log.
Command Claude Code
Open-source leak gate — runs the five fail-closed leak enforcers (privacy, framework-purity full-tree, tracked-transients, hashed leak-denylist, README drift) sequentially with real exit codes.
Command Claude Code
Detect already-applied MC migration scripts left on disk in consumer projects.
Command Claude Code
Verify the capsule for /mc:update --to is resolvable from REPOROOT, sibling clones, manifest.mc.source, or framework-installed.json#source.
Command Claude Code
Verify a MC install baseline exists (.claude/framework-installed.json present, installedVersion ≠ 0.0.0) before /mc:update may proceed.
Command Claude Code
Read-only product-vs-dev-tooling layer diff — lists which framework-owned paths SHIP to consumer products (product layer) vs which stay framework-internal and never ship (dev-tooling layer), with summary counts. Cross-references mc/MANIFEST.json (ownership) × .claude/framework-manifest.json (shipped). Informational…
Command Claude Code
Verify every on-disk path is enumerated in mc/MANIFEST.json — catches "added framework content, forgot to register" before downstream installs silently break.
Command Claude Code
Verify framework-installed.json reflects actual disk state (no missing files, no hash drift).
Command Claude Code
Verify every breaking change in a MC release ships with a corresponding migration script under framework/migrations — stub implementation pending refinement.
Command Claude Code
Verify every migration listed in capsule release.json#migrations[] exists in the source tree before /mc:update may apply.
Command Claude Code
Verify every paths.json key points to an existing path (skip generated/ephemeral keys).
Command Claude Code
Verify every framework-owned path under the consumer-essential roots is actually shipped (enumerated in framework-manifest.json) — catches "framework code that ships to nobody" (the downstream-broken class).
Command Claude Code
Detect drift between the installed MC version on disk and the latest canonical version, flagging installs that have been stale for more than seven days.
Command Claude Code
Verify installed framework has the structural skeleton dirs canonical declares.
Command Claude Code
Catch transient state accidentally committed (.mc/, qa-.png, runtime/qa-/, runtime//.{jsonl,log,diff,err,out}, oversized runtime//.txt, the beta mining output dir).
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: