Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add MadAppGang/magus/plugin install devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/madappgang/magus/dev)<a href="https://agentmods.dev/commands/madappgang/magus/dev"><img src="https://agentmods.dev/badge/commands/madappgang/magus/dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/madappgang/magus/dev"><img src="https://agentmods.dev/badge/commands/madappgang/magus/dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00037 | $0.12325 |
| Opus 5.5 | $0.00015 | $0.04930 |
| Sonnet 5.5 | $0.00007 | $0.02465 |
| Haiku 4.5 | $0.00004 | $0.01232 |
Grade A, and why
dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 20d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 1,261 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Depth determines WHAT happens (how many phases run).
Automation determines HOW it happens (how much user interaction).
Key principle: Match process weight to task complexity. A one-liner
fix should not trigger an 8-phase pipeline. A critical system feature
should not skip review.
<user_request> $ARGUMENTS </user_request>
<value_banner> Display this ONCE at the start of the command (not on subsequent uses in same session):
/dev:dev — Structured Feature Development
Beyond what Claude does natively, this command adds:
- 8-phase lifecycle with quality gates between each phase
- Adaptive depth: quick (just build) / standard (plan+build+test) / full (multi-model review + browser validation)
- Parallel multi-stack implementation with specialized agents
- Real browser validation with screenshot evidence (full mode)
For quick help without structure, just ask Claude directly. </value_banner>
<plan_mode_protocol> Plan mode and this command compete for the same turn, and plan mode wins by default: its system reminder is re-injected on EVERY turn while this file is expanded once.
The protocol itself is delivered by a hook, not from here — see hooks/plan-mode-protocol.ts, registered on UserPromptSubmit. It fires when /dev:dev is invoked and injects the adopt/announce rules as their own context block.
This is deliberate and was measured. An earlier revision carried the full protocol inline at this spot. DPM-1 found that across five sessions on the fixed tree, none of its language reached the model and the fixed tree was indistinguishable from the tree without it. Adding text to the once-expanded channel is fighting on the wrong axis. Do not move the protocol back into this file.
The one rule worth repeating here, because it is the whole point: if plan mode is active, SAY SO before Step 0 and adopt it as Phase 3. Never run silently. </plan_mode_protocol>
<resume_protocol> Resume runs BEFORE Step 0. Any one of these triggers it:
$ARGUMENTSleads with--resume, optionally followed by a session id. The flag elsewhere in a request ("add a --resume flag to the uploader") is a feature, not a resume.- A
<dev-resume-after-clear>block is in this conversation. The SessionStart hook (hooks/resume-after-clear.ts) wrote it because the context was cleared or compacted while a run was in progress. - The user's message is "Implement the following plan:" and the plan ends with a
<dev-flow>footer. That is the plan-approval dialog's "clear context" option handing an approved Phase 3 design into a fresh context.
Say in one line: "Resuming /dev:dev session {id} at {phase}." Then:
a. Locate the session. In priority order: the id in $ARGUMENTS; the session:
line of the <dev-flow> footer; the session named by <dev-resume-after-clear>;
otherwise the single directory under ai-docs/sessions/dev-feature-* whose
session-meta.json says status: in_progress. Several candidates → AskUserQuestion,
never guess. If the footer says session: not-created, run Phase 0 now with the
footer's feature, depth and automation (plan mode is over, so writes are permitted),
then continue at step c.
b. Restore the selections from disk, never by asking again. depth, automation
and feature from session-meta.json; iteration limits and selected models from
iteration-config.json when it exists. A session-meta.json without depth or
automation predates this protocol: take them from the footer, and only if there is
no footer either, ask once.
c. Materialise an approved plan that never reached disk — first, and with no tool
but Write. If a plan with a <dev-flow> footer is in context and
${SESSION_PATH}/architecture.md is missing, write the plan's ## Architecture
section (the whole plan when it has no such heading, footer excluded) to
${SESSION_PATH}/architecture.md before any other action. Then context.json: re-run
Phase 3 Step 3.5 (the stack-detector) when the Agent tool is available; when it is
not, write context.json yourself from the package manifests and the plan. A missing
delegation tool is not a blocker for this step and must never stop the resume —
measured: a run that paused here to "flag a blocker" left the approved plan on no
disk at all. That is Step 3.9 done late. Do not re-enter plan mode: the design was
approved, and ExitPlanMode was denied only so the clear could happen.
d. Derive the next phase from artifacts, not from the checkpoint. Walk the depth's
phase list (<scope_selection> → Depth → Phase mapping). The next phase is the first
whose required artifacts (the sets in ${CLAUDE_PLUGIN_ROOT}/hooks/phase-completion-validator.ts) are
missing or incomplete. A phase with some artifacts was interrupted: read what it
wrote (implementation-log.md, reviews/…) and finish it rather than redoing it. After
step c at Full depth the next work is Phase 3 Steps 3.10-3.13 (plan review and
consensus); at Standard it is Phase 4.
e. Continue the normal pipeline from there. Load the phase's instruction file
(<phase_loading_protocol>) and run to completion. Every rule in this command applies
unchanged: agent routing, file-based communication, evidence-based completion.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 20d ago Changed e1a8c9a43454
- 22d ago Changed · -37 lines d61505b22ab6
- 1mo ago Changed · +31 lines 26c48617afe4
- 1mo ago Changed · +66 lines 0115f3fa65b9
- 1mo ago Changed 6306fa64cb31
- 1mo ago First seen · 1,201 lines · 37 tokens per session scan A 3ef6921d49c9
dev is a command published in the GitHub repository MadAppGang/magus (13 stars, last pushed today), licensed MIT. It adds 37 tokens to every session and 12,325 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other commands, from other repositories
template
Manage issue templates for streamlined issue creation.
fest-show
Show festival progression (in-progress tasks, roadmap, and dependency view).
add-note
Add an internal or external note to a ConnectWise PSA ticket.
sync-linear
Sync current work with Linear ticket status.
dispatcher
Use when you want the orchestrator to pick the next repo to work on across your whole portfolio — it enumerates candidate repos below the confinement root, resolves free/busy from each repo's session.lock lease, ranks the FREE ones by backlog priority × staleness × readiness, recommends the single most worthwhile one…
workpm
A project-management workflow for coordinating multiple AI workers through five stages. It includes task assignment, shared activity logs, worker replacement, and final checks.