audit
On-demand security audit — OWASP, secrets, dependencies, IaC security
Execute plans using fresh subagents with review gates
> /plugin marketplace add lgbarn/shipyard > /plugin install shipyard@shipyard
How it fires
How this command gets triggered: by you, by Claude, or both.
/buildContext preview
What this command does when you run it.
Execute plans using fresh subagents with review gates
description: "Execute plans using fresh subagents with review gates" disable-model-invocation: true argument-hint: "[phase-number] [--plan N] [--light]"
You are executing the Shipyard build workflow. Follow these steps precisely.
<prerequisites>
1. Verify `.shipyard/` exists. If not, tell the user to run `/shipyard:init` first. 2. Read `.shipyard/ROADMAP.md` and locate the target phase. 3. Read `.shipyard/STATE.json` for current context. 4. Load all plan files from `.shipyard/phases/{N}/plans/`. 5. Check which plans have already been completed (have SUMMARY.md files in `.shipyard/phases/{N}/results/`). 6. If all plans are complete, inform the user and suggest `/shipyard:ship` or next phase.
**Detection:** Check the `SHIPYARD_TEAMS_ENABLED` environment variable (exported by `scripts/team-detect.sh`). This variable is set to `true` when `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`.
**Prompt (conditional):** If `SHIPYARD_TEAMS_ENABLED=true`, use `AskUserQuestion` with exactly two options:
Question text: "Teams available. Use team mode (parallel teammates) or agent mode (subagents)?"
**Silent fallback:** If `SHIPYARD_TEAMS_ENABLED` is `false` or unset, silently set `dispatch_mode` to `agent` with no prompt (zero overhead).
**Variable storage:** Store the result as `dispatch_mode` (value: `team` or `agent`). This variable is referenced by all subsequent dispatch steps.
**Note:** In team mode, single-agent steps (verifier, auditor, simplifier, documenter) still use Task dispatch -- team overhead is not justified for one agent. Team mode applies only to multi-agent steps (builders per wave, reviewers per wave).
</prerequisites>
<execution>
Follow **State Update Protocol** (update `.shipyard/STATE.json` and `.shipyard/HISTORY.md` via state-write.sh; see `docs/PROTOCOLS.md`) -- set:
Follow **Checkpoint Protocol** (create a named git tag for rollback safety at key pipeline stages; see `docs/PROTOCOLS.md`) -- create `pre-build-phase-{N}` checkpoint.
Group plans by wave number. Execute waves sequentially, plans within a wave in parallel.
**If dispatch_mode is agent:**
For each incomplete plan in this wave, dispatch a **builder agent** (subagent_type: "shipyard:builder") with context per **Agent Context Protocol** (pass PROJECT.md, config.json, working directory, branch, and worktree status to all agents; see `docs/PROTOCOLS.md`):
**Builder agent instructions:**
shipyard(phase-{N}): {task description} # Build Summary: Plan {W}.{P}
## Status: {complete|partial|failed}
## Tasks Completed
- Task 1: {title} - {status} - {files changed}
- Task 2: {title} - {status} - {files changed}
## Files Modified
- {file path}: {what changed}
## Decisions Made
- {any implementation decisions and rationale}
## Issues Encountered
- {any problems and how they were resolved}
## Verification Results
- {results of running acceptance criteria checks}**Lesson Seeding:** Document all discoveries thoroughly in "Issues Encountered" and "Decisions Made":
These entries will be used as pre-populated suggestions when capturing lessons at ship time.
**If dispatch_mode is team:**
1. `TeamCreate(name: "shipyard-build-phase-{N}-wave-{W}")` -- create a team scoped to this wave 2. For each incomplete plan in the wave, `TaskCreate` with:
3. `TaskUpdate` to pre-assign each task to a specific teammate name (e.g., `builder-{W}-{P}`) BEFORE spawning 4. For each task, `Task(team_name: "shipyard-build-phase-{N}-wave-{W}", name:
A Claude Code plugin for structured project execution. Plan work in phases, build with parallel agents and TDD, review with security audits and quality gates, and ship with confidence.
Repo: lgbarn/shipyard
On-demand security audit — OWASP, secrets, dependencies, IaC security
Explore requirements through Socratic dialogue and capture project definition
Investigate bugs and failures with systematic root-cause analysis