dev

dev is a command for Claude Code from MadAppGang/magus. It costs 37 tokens per session (12,325 once invoked), scanned A, original, MIT.

A command that develops a software feature through several planning, building, testing, review, and validation stages.

In plain words
What is it for?
Delegating feature work to specialist agents, coordinating multiple stacks, and validating the result in a browser when needed.
Why use it?
It gives larger changes a structured process with checks between stages and different levels of depth.

Command for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions CLAUDE.md; names the AskUserQuestion tool.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the dev plugin — 19 skills, 15 commands, 12 agents shipped together

Good fit Delegating feature work to specialist agents, coordinating multiple stacks, and validating the result in a browser when needed.

Compare 6 commands from other repositories ↓
Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add MadAppGang/magus
Claude Code
/plugin install dev

Made for: Claude Code.

Or install dev, the plugin that ships this one along with the rest of its 19 skills, 15 commands, 12 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dev

README.md
[![agentmods](https://agentmods.dev/badge/commands/madappgang/magus/dev/github.svg)](https://agentmods.dev/commands/madappgang/magus/dev)
Your own site
<a href="https://agentmods.dev/commands/madappgang/magus/dev"><img src="https://agentmods.dev/badge/commands/madappgang/magus/dev/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for dev

Your own site · 80×15
<a href="https://agentmods.dev/commands/madappgang/magus/dev"><img src="https://agentmods.dev/badge/commands/madappgang/magus/dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 37 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 12,325 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00037 $0.12325
Opus 5.5 $0.00015 $0.04930
Sonnet 5.5 $0.00007 $0.02465
Haiku 4.5 $0.00004 $0.01232

Measured 20d ago against content hash e1a8c9a43454, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 20d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dev/commands/dev.md · 1,261 lines

How it starts

The opening of the file, as written. The whole thing — 1,261 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Depth determines WHAT happens (how many phases run).
Automation determines HOW it happens (how much user interaction).

Key principle: Match process weight to task complexity. A one-liner
fix should not trigger an 8-phase pipeline. A critical system feature
should not skip review.

<user_request> $ARGUMENTS </user_request>

<value_banner> Display this ONCE at the start of the command (not on subsequent uses in same session):

/dev:dev — Structured Feature Development Beyond what Claude does natively, this command adds:

  • 8-phase lifecycle with quality gates between each phase
  • Adaptive depth: quick (just build) / standard (plan+build+test) / full (multi-model review + browser validation)
  • Parallel multi-stack implementation with specialized agents
  • Real browser validation with screenshot evidence (full mode)

For quick help without structure, just ask Claude directly. </value_banner>

<plan_mode_protocol> Plan mode and this command compete for the same turn, and plan mode wins by default: its system reminder is re-injected on EVERY turn while this file is expanded once.

The protocol itself is delivered by a hook, not from here — see hooks/plan-mode-protocol.ts, registered on UserPromptSubmit. It fires when /dev:dev is invoked and injects the adopt/announce rules as their own context block.

This is deliberate and was measured. An earlier revision carried the full protocol inline at this spot. DPM-1 found that across five sessions on the fixed tree, none of its language reached the model and the fixed tree was indistinguishable from the tree without it. Adding text to the once-expanded channel is fighting on the wrong axis. Do not move the protocol back into this file.

The one rule worth repeating here, because it is the whole point: if plan mode is active, SAY SO before Step 0 and adopt it as Phase 3. Never run silently. </plan_mode_protocol>

<resume_protocol> Resume runs BEFORE Step 0. Any one of these triggers it:

  1. $ARGUMENTS leads with --resume, optionally followed by a session id. The flag elsewhere in a request ("add a --resume flag to the uploader") is a feature, not a resume.
  2. A <dev-resume-after-clear> block is in this conversation. The SessionStart hook (hooks/resume-after-clear.ts) wrote it because the context was cleared or compacted while a run was in progress.
  3. The user's message is "Implement the following plan:" and the plan ends with a <dev-flow> footer. That is the plan-approval dialog's "clear context" option handing an approved Phase 3 design into a fresh context.

Say in one line: "Resuming /dev:dev session {id} at {phase}." Then:

a. Locate the session. In priority order: the id in $ARGUMENTS; the session: line of the <dev-flow> footer; the session named by <dev-resume-after-clear>; otherwise the single directory under ai-docs/sessions/dev-feature-* whose session-meta.json says status: in_progress. Several candidates → AskUserQuestion, never guess. If the footer says session: not-created, run Phase 0 now with the footer's feature, depth and automation (plan mode is over, so writes are permitted), then continue at step c. b. Restore the selections from disk, never by asking again. depth, automation and feature from session-meta.json; iteration limits and selected models from iteration-config.json when it exists. A session-meta.json without depth or automation predates this protocol: take them from the footer, and only if there is no footer either, ask once. c. Materialise an approved plan that never reached disk — first, and with no tool but Write. If a plan with a <dev-flow> footer is in context and ${SESSION_PATH}/architecture.md is missing, write the plan's ## Architecture section (the whole plan when it has no such heading, footer excluded) to ${SESSION_PATH}/architecture.md before any other action. Then context.json: re-run Phase 3 Step 3.5 (the stack-detector) when the Agent tool is available; when it is not, write context.json yourself from the package manifests and the plan. A missing delegation tool is not a blocker for this step and must never stop the resume — measured: a run that paused here to "flag a blocker" left the approved plan on no disk at all. That is Step 3.9 done late. Do not re-enter plan mode: the design was approved, and ExitPlanMode was denied only so the clear could happen. d. Derive the next phase from artifacts, not from the checkpoint. Walk the depth's phase list (<scope_selection> → Depth → Phase mapping). The next phase is the first whose required artifacts (the sets in ${CLAUDE_PLUGIN_ROOT}/hooks/phase-completion-validator.ts) are missing or incomplete. A phase with some artifacts was interrupted: read what it wrote (implementation-log.md, reviews/…) and finish it rather than redoing it. After step c at Full depth the next work is Phase 3 Steps 3.10-3.13 (plan review and consensus); at Standard it is Phase 4. e. Continue the normal pipeline from there. Load the phase's instruction file (<phase_loading_protocol>) and run to completion. Every rule in this command applies unchanged: agent routing, file-based communication, evidence-based completion.

Read the full file on GitHub · 1,261 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 20d ago Changed e1a8c9a43454
  2. 22d ago Changed · -37 lines d61505b22ab6
  3. 1mo ago Changed · +31 lines 26c48617afe4
  4. 1mo ago Changed · +66 lines 0115f3fa65b9
  5. 1mo ago Changed 6306fa64cb31
  6. 1mo ago First seen · 1,201 lines · 37 tokens per session scan A 3ef6921d49c9

Subscribe to this mod's changes

dev is a command published in the GitHub repository MadAppGang/magus (13 stars, last pushed today), licensed MIT. It adds 37 tokens to every session and 12,325 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.