hamzaish

agent
Security Audit
Warn
Health Warn
  • License — License: AGPL-3.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Warn
  • process.env — Environment variable access in _archive/v0/dashboard/src/lib/connectors/gsc.ts
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Get into Builder Mode — an AI-native startup factory you point Claude Code (or Cursor/Codex/Windsurf) at.

README.md

🏭 Hamzaish

Unlock your Builder Mode with a Claude Code setup that does more than just code, learns from every build and remembers every lesson.

Open source
Secure by default
Works with Claude Code
PRs welcome

📚 128 practices · 🤖 32 agents · 🛠️ 29 skills & commands · 📖 39 playbooks

Every count real · every item linked · every claim marked ✅ proven / 🟡 partial / ⏳ research-baked → What's inside

Hamzaish — puts you in Builder Mode, with a live eval run as proof

Shipped through it so far: 4 live products and an npm package → the showcase.


Welcome to Builder Mode

Builder Mode — momentum first, strategy second

Every builder knows the moment: it's 11pm, you have an idea, and your hands are itching to build. Then the "right way" kicks in — business plans, market sizing, twenty validation interviews — and by the time the strategy funnel is done with you, the spark is dead. Strategy-first kills more builders than bad ideas ever did.

That advice was written for a world where building was expensive. That world is gone. With AI, building is cheap, fast, and reversible — the thing you ship is the test.

So I've made it my mission to simplify the builder spirit into a momentum-first, strategy-second mode: Builder Mode. The idea is to enable millions to start leveraging AI to build better, build faster, and build more — to build aggressively with instinct, validate iteratively, and scale with strategy.

But most solo projects don't die in the build — they die in everything after it: the security review, the launch, pricing, first customers, knowing when to kill. Hamzaish is Builder Mode as a working system — the Claude Code setup that doesn't stop at code. It runs the whole lifecycle — Ideate → MVP → Launch → Sell → Scale → Kill-or-double-down — with stage-specific agents, playbooks distilled from real ships, and a brain that carries every lesson into your next product.

Read the full mission: Builder Mode and The full philosophy →

Quickstart — first win in 5 minutes

One command (installs Bun if missing, clones, sets up — read it first):

curl -fsSL https://raw.githubusercontent.com/hamza-ali-shahjahan/hamzaish/main/install.sh | sh
…or set it up by hand

You need Bun and Claude Code.

git clone https://github.com/hamza-ali-shahjahan/hamzaish.git
cd hamzaish
bun run setup        # idempotent — creates YOUR factory, never touches existing data

Then open Claude Code and type:

/builder-mode a tip calculator for freelancers

Watch it scaffold a local-first product that runs in 60 seconds — zero accounts, zero config. Add your stack (Stripe, Resend, Supabase…) only when you want it with /go-live, and ship when you're ready. (The 10-minute guided version →)

Safety: scaffolded products run agent-generated code inside a devcontainer, secrets are gitignored from commit zero, and nothing auto-pushes off your machine. (Full threat model →)

What you get

  • 32 agents organized by lifecycle stage — idea validation, architecture, scope-guarding, security review, landing copy, SEO, pricing, cold outreach, retention, kill-or-double-down. Not just builders: the after-the-build crew.
  • A pre-launch security gate that blocks. 59 concrete checks (auth, authz, data exposure, secrets) with a forced BLOCK/CLEAR verdict.
  • 39 playbooks + 128 distilled practices — launch sequencing, first-100-customers, pricing, production ops. Short, sourced, and honestly badged: proven by a real ship, or marked research-baked until it is.
  • A brain that remembers. SQLite-indexed learnings, decisions, and anti-patterns, searchable from any session via /brain-ask. Your second product starts smarter than your first. (brain/)
  • Sane infra defaults — Next.js + Supabase + Stripe + Resend + PostHog + Sentry, free-tier-first, pre-wired in every scaffold. (the stack, and the accounts you set up once →)
  • Portfolio discipline/portfolio-pulse across everything you run; quarterly kill-or-double-down so zombie projects don't eat your year.

Go deeper

Your first product in 10 minutes · Architecture · Philosophy · Where it's heading · Security model · Contributing · Changelog


What's inside

Everything below maps 1:1 to the repo's folders — the counts are the filesystem, not the marketing.

📚 The practices ledger (128)

BEST-PRACTICES.md — 128 practices for shipping products with Claude Code: 26 ✅ proven by real ships and dated incidents · 3 🟡 partially proven · 99 ⏳ research-baked from named sources. Anti-patterns lead — each one cost us something real. Every line links to its deep-dive playbook and its source.

🤖 The agents (32)

One router + 31 stage agents under factory/agents/. Each is a markdown SKILL.md your Claude Code session invokes by intent — the routing table lives in CLAUDE.md.

💡 Idea stage (7)

Agent What it does
idea-generator Generate startup ideas grounded in your patterns, current trends, and validated demand signals
problem-sharpener Turn vague observations into testable hypotheses with specific who/when/severity/workaround
devils-advocate Build the strongest case AGAINST an idea; hunt disconfirming evidence
market-researcher TAM/SAM/SOM, trends, buyer landscape — anchored in citable public data, not vibes
competitor-mapper Map the landscape by tier (direct/indirect/acquirer/adjacent) and argue why each could win
customer-discovery Target profile, prospect list, interview script, outreach setup
interview-synthesizer Synthesize interview batches into evidence-for vs evidence-against

🏗️ MVP stage (5)

Agent What it does
architect Define the architecture BEFORE a line is written — CLAUDE.md, scope.md, 1-page ADR
builder Drive build sessions with enforced discipline: read context first, one topic per session
scope-guardian Block scope creep — every feature ask pressure-tested against scope.md
security-reviewer Pre-launch review: auth, data exposure, input validation, dependency vulns
metric-framework-designer North star, activation, retention targets, Sean Ellis — defined BEFORE launch

🚀 Launch stage (9)

Agent What it does
brand-story-builder Positioning, story, voice, naming, visual primitives
landing-page-copywriter Hero + value props + social proof + objections + CTA, anchored on validated pain
seo-strategist Content hubs, target keywords, internal linking, schema, technical baseline
keyword-researcher Real keyword data from GSC + Ahrefs Webmaster + DataForSEO
content-marketer Content calendars and drafts — blog, social, LinkedIn, threads
launch-strategist Product Hunt, Hacker News, X, LinkedIn, newsletters — sequenced for compounding signal
cold-outreach First 100 customers by hand: sourcing → personalized messages → cadence → tracking
pricing-strategist Packaging, tiers, anchor, monthly vs annual, free vs trial
community-builder Discord/Slack/forum, waitlist nurture, early-user comms

📈 Scale stage (6)

Agent What it does
growth-loops Design acquisition/monetization/engagement loops (Reforge framework)
retention-analyst Retention curves, churn drivers, leaky-bucket vs activation-problem diagnosis
pricing-optimizer Post-PMF pricing iteration from real willingness-to-pay data
support-triage Categorize, prioritize, draft responses; bug vs user-error vs feature-request
moat-builder Workflow lock-in, data network effects, domain depth, integration depth
compliance-auditor SOC2 / GDPR / HIPAA / CCPA gap analysis with prioritized remediation

🗂️ Portfolio (4) + the router

Agent What it does
portfolio-conductor Where attention goes today — "if you had 4 hours, spend them here"
telemetry-aggregator Metrics across all products in a single view
cross-product-learner What's working that should propagate; what's failing in similar ways
kill-or-double-down Quarterly hard calls: kill, maintain, or double down — forced verdicts
_orchestrator The routing brain that picks the right agent for the request

🛠️ The skills & commands (29)

17 skills + 12 commands under factory/skills/ and factory/commands/ — auto-discovered by Claude Code after bun run setup. Most commands wrap a skill of the same name; the deeper protocol lives in the skill's folder.

Invoke What it does
/builder-mode The front door — enter Builder Mode: default is just build; strategy rails are opt-in, skip anytime. (Alias: /hamzaish — same engine.)
/scaffold One-shot a new product: folders, starter, config, CLAUDE.md, scope, PRD skeleton
/validate Full validation pass: sharpening, devil's advocate, market sizing, competitor map, discovery plan
/ideate Generate ideas grounded in your portfolio patterns + current trends
/work-on Enter a product workspace with full context loaded
/portfolio-pulse All products: one table, top 3 priorities, on-fire, don't-touch
/product-pulse One product: metrics, stage, blockers, the #1 action today
/kill-or-keep Quarterly review with forced verdicts for every product
/launch-plan Full launch playbook: PH, HN, X, LinkedIn, email warm-up, outreach, pricing, brand assets
/web-launch Verification-gated website launch: per-project workbook, refuse-to-launch sign-off gate, post-launch monitoring
(skill) launch-gotchas Library of real launch failure modes — indexation, redirects, analytics undercounting — with the fix for each
(skill) pseo-at-scale Programmatic-SEO discipline for 100s–10,000s of templated pages: thin-content prevention, indexation ramp
/release Cut a polished GitHub Release from the changelog at a major-cycle boundary
/keyword-research Clustered keyword brief from GSC + Ahrefs Webmaster + DataForSEO
/seo-aeo-bootstrap Ship the SEO + AEO foundation: llms.txt, AI-bot robots.txt, JSON-LD, sitemap, meta block
/name-product End-to-end naming pipeline: brief → competitors → generate → clear → select → lock
/name-clearance Clear a name BEFORE buying the domain: collision, trademark signal, availability
/competitor-research Map the competitive landscape; persists per-product so it compounds
/go-live Guided, stateful stack provisioning — deep-links, key validation, .env.local writes, resumable; then hands to /security-check/ship
/security-check Fast security baseline: tracked secrets, vulnerable Actions, workflow permissions
/ship The single deploy action — gates on /security-check, promotes reviewed commits to production
/checkpoint Named save-point commit between auto-commits
/brain-ask Search every learning, decision, playbook, and product doc — ranked citations
/brain-ingest Refresh the brain's SQLite FTS5 index
/learn-loop Impact-score the cycle's learnings; promote only the top few into guardrails
(skills) product-pulse · seo-aeo-bootstrap Skills without a command wrapper yet — invoke by name in Claude Code

📖 The playbooks (39)

Short (300–800 words), sourced, stage-gated. The practices ledger is the scannable index over these.

Stage Playbooks
💡 Idea (5) The Mom Test · Jobs-to-be-Done · Problem-Statement Rubric · TAM/SAM/SOM · YC Startup School notes
🏗️ MVP (6) Security Checklist — 80+ checks · Architecture Decisions · AI-Native Dev Loop · Scope Document · Measurement Framework · Sean Ellis Survey
🚀 Launch (10) First 100 Customers · Hacker News Launch · Product Hunt Launch · Pricing · Cold Outreach Templates · SEO+AEO Foundation · SEO Content Strategy · OSS Publishing Checklist · Output Validation for Code-Gen Tools · Lenny's Frameworks Distilled
📈 Scale (7) 100→1000 Customers · Production Operations · Abuse & Cost Controls · Churn Reduction · Growth Loops (Reforge) · Moat Building · Enterprise Readiness
🧭 Founder's wisdom (4) $100K ARR Tactics · Gary Tan / YC era advice · Paul Graham essays · Solopreneur Stack 2026
🤖 AI-native (6) Eval-Driven Development · Founder's Playbook distilled · Auth Go-Live · Go-Live Provisioning · MCP Servers per Product · Hermes & Fallback Models

💛 Built on a thousand generosities

Hamzaish — the credits roll

We stand on giants, and we're loud about it.
Read the full credits →


How it's different

Now that you've seen what's inside — the side-by-side:

gstack / BMAD / SuperClaude AutoGPT / MetaGPT / crewAI Hamzaish
Scope build-stage setup agent framework you build on full company lifecycle
After "code is done" you're on your own you're on your own launch, sell, scale, kill rails
Memory across projects per-session per-run persistent brain + learnings loop
Form config + tools Python framework markdown-first method, forkable

Architecture

brain/        — identity, principles, learnings, anti-patterns, decisions, ingested knowledge
factory/      — agents (idea/ mvp/ launch/ scale/ portfolio/), skills, commands, playbooks
products/     — one folder per product: metadata + learnings ONLY (code stays in private repos)
meta/         — changelog, retros, evals, the self-improvement loop
stack/        — tech defaults + the set-up-once accounts guide
templates/    — Next.js starter + doc templates

Product code is never in this repo — only metadata and learnings. Your code (the moat) stays private; locations are wired via a git-ignored code-paths.local.json. So the repo is safe to share without exposing anyone's secret sauce. (the public/private boundary →)

The discipline

  1. Build is the default — validate before irreversible bets. Cheap, fast, reversible ships are validation. Before expensive moves: ~5 target-profile conversations. The hard rule: never skip it silentlybun run check-validation <slug> records the debt. (The wp-to-astro lesson, encoded.)
  2. Scope is the moat. Every product's scope.md says what it does AND deliberately doesn't.
  3. Persistent context. Every product gets a CLAUDE.md; every decision is logged in decisions/.
  4. Measurement before launch. North-star, activation, retention, false-positive shape — defined before the first user.
  5. The factory is a product. If it can't ship product #1 through, fix the factory before adding slots.
  6. Honest copy. Every outward-facing word is true and verifiable when it ships; aspiration is labelled, never present-tense. What's proven vs. promising is tracked in the honest ledger.

The self-improvement loop

Every working session appends learnings to brain/learnings/. At major-cycle boundaries, /learn-loop scores candidates on five axes (rubric) and promotes only the top few into load-bearing guardrails — a skill rule, a playbook step, an anti-pattern, a line in the practices ledger. Quarterly, /kill-or-keep runs on Hamzaish itself and re-checks each promoted guardrail: deliver the predicted gain, or get sunset. The factory compounds; it doesn't ossify.

Budget posture: free tiers and pay-per-query by default; every subscription needs written ROI in a product's decisions/. (the bootstrapped stack →)

Built on, and informed by

The backbone is hard-won venture experience — the Business-SWAT roles, opportunities, and mentors that came with years at Disrupt.com, taking things from zero to one before AI made building cheap. On that foundation, the patterns studied and credited — Addy Osmani's spec→ship discipline, Karpathy's eval-driven flywheel, gbrain (knowledge graph), Anthropic's Founder's Playbook (lifecycle framing), hermes-agent (self-improving skills), openclaw (multi-channel gateway), and ponytail (multi-agent portability) — sharpened that instinct and 10×'d the AI and agentic-building learning on top of it. Study material lives in references/, never imported.

The full credits, and the roll

License

TL;DR — free for builders. Don't take it closed-source and sell it. Commercial license on request.

AGPL-3.0 — see LICENSE. Copyright © 2026 Hamza Ali.

In plain English: use, study, modify, and self-host freely. If you run a modified version as a network service, your source must be AGPL too — the factory stays open for solo builders; nobody quietly turns it into a closed product. Commercial license available for closed-source use — contact below.


Built in public by Hamza Ali[email protected]. The factory's repo runs on the factory's own discipline.

Reviews (0)

No results found