magician

agent
Security Audit
Pass
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 10 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Full-stack SDLC plugin for Claude Code & Codex — from idea to merged PR, autonomously. 25 skills, a local code knowledge-graph, cross-session memory, parallel agent orchestration, and an absolute destructive-command guard.

README.md
magician — full-stack SDLC for Claude Code

Version
Claude Code
Codex
License
Sponsor

From idea to merged PR — autonomously, grounded in your code, gated only where it matters.

25 skills · a local code knowledge-graph · cross-session memory · parallel agent orchestration · an absolute destructive-command guard · zero required network calls or dependencies

✦ What it is

Most AI coding tools make you describe the stack, pick templates, and babysit context. magician inspects your project on every session start, assembles targeted knowledge for each technology it finds, grounds itself in a local graph of your code, and runs the whole software lifecycle — design → plan → build → verify → review → ship — pausing only at the decisions that are genuinely yours.

One command · idea → PR

/manifest
Gather requirements → design → TDD plan → parallel build → verify → review → PR. You approve the plan; it does the rest.

Already exists? Transform it

/transmute
Comprehend a feature from its live usage, code, or docs — then port it elsewhere or integrate / swap it in place behind a parity contract.

⚡ The flow

magician SDLC pipeline: research → design → plan → build → verify → review → ship

Approve the plan once — then it executes autonomously, re-gating only on real side effects (writes to shared state, commits, push, PRs, deploys). Reads, searches, tests, and knowledge-graph lookups never interrupt you.

How it works — detailed diagrams (manifest flow · dynamic inspector · self-learning)

The manifest flow — full autonomous SDLC

flowchart TD
    A["/manifest"] --> B{"scope OK?"}
    B -- too large --> C["decompose into sub-projects"]
    B -- ok --> D["/conjure — design dialogue"]
    D --> E["approved spec"]
    E --> F["/blueprint — plan + parallelism map"]
    F --> G["/portal — git worktree isolation"]
    G --> H["/orchestrate — parallel agents"]
    H --> I["/ward — TDD throughout"]
    I --> J["/certify — tests + browser"]
    J --> K{all green?}
    K -- no --> H
    K -- yes --> L["/scrutinize — review + remediate"]
    L --> N["/seal — PR + loop until merged"]
    style A fill:#6c63ff,color:#fff
    style D fill:#6c63ff,color:#fff
    style F fill:#6c63ff,color:#fff
    style H fill:#43e97b,color:#000
    style I fill:#43e97b,color:#000
    style J fill:#43e97b,color:#000
    style L fill:#43e97b,color:#000
    style N fill:#4facfe,color:#000

Human gates (4 only): scope confirm → spec approval → plan approval → ship. Everything else: autonomous.

Dynamic project inspector — no manual stack selection

flowchart LR
    A["session start"] --> B["scan project files"]
    B --> C{"detect markers"}
    C --> D["package.json · tsconfig"]
    C --> E["pom.xml · *.xcodeproj"]
    C --> F["go.mod · Cargo.toml · pyproject"]
    C --> G["pubspec.yaml · project.godot"]
    D --> L["assign archetype + inject context"]
    E --> L
    F --> L
    G --> L
    L --> M["session ready in < 2s"]
    style A fill:#0d1117,color:#ccc,stroke:#555
    style M fill:#43e97b,color:#000

Polyglot stacks (Next.js + FastAPI + Go) get full coverage automatically — no pack selection.

Self-learning — intelligence grows each session

flowchart TD
    A["session ends"] --> B["Stop hook: chronicle"]
    B --> C["git log + diff (observable only)"]
    C --> D["write chronicle entry"]
    D --> E{"pattern seen 3x?"}
    E -- yes --> G["offer: create skill via /inscribe"]
    E -- no --> I["next session"]
    G --> I
    I --> K["load recent entries as context —\ncumulative intelligence without replay"]
    style B fill:#f7971e,color:#000
    style D fill:#f7971e,color:#000
    style G fill:#43e97b,color:#000
    style K fill:#6c63ff,color:#fff

🧠 What makes it different

🤖 Real autonomy, not a prompt

Turns on Claude Code auto mode (magician-ui automode) — its classifier auto-approves reads and request-aligned work and gates writes, deploys, force-push, and destructive ops, honoring boundaries you state in chat. Approve the plan, then step back.

🗺 Grounded in your code

A local knowledge-graph (kg, stdlib, no network) indexes your repo into ranked file:line retrieval + change blast-radius — so agents fetch exactly what they need instead of grepping whole files. Fewer tokens, shared across agents, zero context loss.

🔒 An absolute safety floor

A PreToolUse hard gate blocks catastrophic commands before permission rules even run — it overrides allow-rules, fires in every mode, and has no escape hatch. rm -rf / never executes here.

🧾 Evidence over claims

No "done / fixed / passing" without a verification command run this turn whose output was read — and a subagent's task is only done when the VCS diff shows it, not when the agent says "success."

🧭 Remembers across sessions

Per-project .workspace/ (team-shared via git) plus a machine-global reference store loaded into every session. Context follows you across repos; conventions survive context compaction.

🔌 MCP-free integrations

Jira & Confluence over their REST APIs via bundled CLIs — throttle-aware, bulk-safe, one command per call. No MCP server to run, no per-call prompts.

🔒 Safety — an absolute destructive-command guard  new in 4.6.0

Security is infrastructure, not advice.

A PreToolUse(Bash|PowerShell) hook inspects every shell command and unconditionally blocks the catastrophic ones. Because it exits before Claude Code evaluates permission rules, the block overrides allow rules and fires in every mode — default · acceptEdits · auto · bypass — with no escape hatch by design.

🗑 Filesystem wipes

rm -rf / · ~ · $HOME · --no-preserve-root · system roots

💽 Disk & device destruction

dd of=/dev/… · mkfs · wipefs · blkdiscard · shred /dev/… · diskutil erase…

⛓ Device / critical-file overwrite

redirection onto /dev/sd* · over /etc/passwd · shadow · sudoers · fstab

💣 Fork bombs

:(){ :|:& };: and self-replicating variants

🔑 Recursive perms on system roots

chmod -R / chown -R on / · ~ · /etc · /usr

🕳 Opaque exec & repo loss

download piped into a shell · base64 -d → shell · eval "$(…)" · git clean -x

Wrappers (sudo, env, timeout, …) and sh -c '…' payloads are unwrapped first; a dangerous command merely named in a quoted argument (like a commit message) is not mistaken for execution. Honest scope: a denylist can't catch every obfuscation, so this is a deterministic floor layered under OS sandboxing, auto-mode's classifier, and model judgment — not a complete sandbox. Verified against a 90-case block/allow matrix.

🛠 Skills

25 skills, each with modern frontmatter (allowed-tools · disable-model-invocation · argument-hint · context: fork) that scales reasoning effort to the task. Approval gates use the structured AskUserQuestion tool, not prose.

⚙️ Core SDLC

/manifest · /conjure · /blueprint · /ward · /unravel · /certify

🎛 Orchestration

/orchestrate · /weave · /portal · /seal

🛡 Review & security

/scrutinize · /divine · /sentinel

🧠 Intelligence

/knowledge-graph · /chronicle · /statusline

🔗 Integration

/jira · /confluence

🔬 Research · Quality · Meta

/magic · /transmute · /accelerate · /deploy · /autopsy · /almanac · /inscribe
Full skill catalog — what each one does
Skill Purpose
/manifest Full autonomous SDLC — 4 human gates (scope · spec · plan · ship); runs conjure → blueprint → portal → orchestrate → certify → scrutinize → seal
/conjure Structured design dialogue with a visual browser companion — 4 modes; HARD-GATE: no code until the spec is approved
/blueprint Turns an approved spec into a TDD task plan with a parallelism map + a verbatim Global-Constraints header every task inherits
/ward TDD engine — red → green → refactor, one behavior at a time; the RED test must fail for the reason under test
/unravel Systematic debugging — hypothesis before evidence; read the trace fully, reproduce first, instrument boundaries; not done until the original symptom is gone
/certify Full verification loop — tests · types · lint · build · browser check; evidence before any success claim
/orchestrate Multi-agent build from a blueprint — parallel waves + a per-task two-stage review (spec then quality), confirmed from the VCS diff
/weave Composes + runs a large multi-item delivery as one native Workflow with all guardrails (TDD per unit · kg grounding · certify · adversarial review)
/scrutinize Three specialist reviewers in parallel (correctness · security · simplification), consolidated then remediated
/divine Research-grounded code review — detects PR/MR/branch context, gates depth, 4 lenses, adversarially verifies findings, severity-ranked report
/sentinel Security scan — OWASP Top 10, secret detection, injection surfaces, dependency + git-history audit (read-only, forked context)
/knowledge-graph Local code knowledge-graph + cache (kg CLI, stdlib) — ranked file:line (BM25 + Personalized PageRank), neighbors, blast-radius
/chronicle Memory & context steward — session history, global reference store, live context size + a pre-compaction resume capsule
/statusline Magician CLI UI — a local, zero-token status line (context % · rot warning · sparkline · model/git/cost · active skill · 🧠 effort)
/jira · /confluence Atlassian over REST via bundled CLIs (no MCP) — read/search, create/update (write-gated), throttle-aware, first-run token setup
/magic Research, analysis & consulting — web + docs + local files; saves findings that feed conjure/blueprint/unravel
/transmute Comprehend an existing feature → PORT or INTEGRATE it, behind a parity contract + quality gateways
/accelerate Performance profiling — baseline-first, measure → optimize → re-measure
/deploy CI/CD pipeline create/update/monitor (GitHub Actions · GitLab CI · CircleCI) with a background CI-red watcher
/autopsy Blameless post-mortem — timeline · 5-Whys · action items
/almanac One-time workspace init — .workspace/, lean CLAUDE.md, .gitignore, MCP suggestions
/inscribe Author a new reusable skill; suggested by the pattern detector after repeated requests
/portal Git worktree isolation for a feature, with post-merge cleanup

🚀 Install

Claude Code

/plugin marketplace add https://github.com/Alexander-Tyagunov/magician
/plugin install magician@magician
Restart if prompted, then initialize your workspace with /almanac.

Codex

codex plugin marketplace add Alexander-Tyagunov/magician
Enable magician in the Codex Plugins UI, restart, then: “Set up Magician in this workspace.”

Codex loads adapter skills from .codex-plugin/skills/, preserving magician's gates while mapping to Codex tools. If it doesn't appear, add [plugins."magician@magician"]\nenabled = true to ~/.codex/config.toml.

🗂 Workspace — team memory

.workspace/
├── shared/         ← git-committed (whole team)
│   ├── specs/       design specs   (/conjure)
│   ├── plans/       impl plans      (/blueprint)
│   ├── research/    findings        (/magic)
│   ├── decisions/   ADRs
│   └── postmortems/ (/autopsy)
└── local/          ← always gitignored
    ├── prefs.md     personal prefs
    └── session.md   pre-compaction state
Teammates share shared/ via git; each machine keeps its own local/. A machine-global reference store loads into every session, so context follows you across repos.

Subagents never inherit your conversation — every handoff ships a self-contained context contract (goal · scope · inputs-by-path · constraints · return format), so nothing is lost across agents, workflows, or teams.

🧰 Bundled CLIs  (on PATH when the plugin is enabled)

kg

Local code knowledge-graph + cache — kg initkg query "<topic>" / kg blast <file>. Stdlib, no network.

jira · confluence

MCP-free Atlassian REST clients — throttle-aware, bulk-safe, one command per call.

magician-ui

Manage the CLI UI status line + allow (read-only auto-approve) + automode (auto mode) — safe, backed-up settings.json edits.

magician-scan · ctx

Standalone security scan for CI · self-managed context (size tracking + pre-compaction resume capsule).

❤ Support this work

If magician saves you time, consider sponsoring — it funds new skills, broader framework lore, and community support.

❤ Sponsor on GitHub →


MIT © Alexander Tyagunov · built for Claude Code & Codex

Reviews (0)

No results found