agentboot 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/.github/ISSUE_TEMPLATE/persona-request.md +62 -0
  2. package/.github/ISSUE_TEMPLATE/quality-feedback.md +67 -0
  3. package/.github/workflows/cla.yml +25 -0
  4. package/.github/workflows/validate.yml +49 -0
  5. package/.idea/agentboot.iml +9 -0
  6. package/.idea/misc.xml +6 -0
  7. package/.idea/modules.xml +8 -0
  8. package/.idea/vcs.xml +6 -0
  9. package/CLA.md +98 -0
  10. package/CLAUDE.md +230 -0
  11. package/CONTRIBUTING.md +168 -0
  12. package/LICENSE +191 -0
  13. package/NOTICE +4 -0
  14. package/PERSONAS.md +156 -0
  15. package/README.md +172 -0
  16. package/agentboot.config.json +207 -0
  17. package/bin/agentboot.js +17 -0
  18. package/core/gotchas/README.md +35 -0
  19. package/core/instructions/baseline.instructions.md +133 -0
  20. package/core/instructions/security.instructions.md +186 -0
  21. package/core/personas/code-reviewer/SKILL.md +175 -0
  22. package/core/personas/code-reviewer/persona.config.json +11 -0
  23. package/core/personas/security-reviewer/SKILL.md +233 -0
  24. package/core/personas/security-reviewer/persona.config.json +11 -0
  25. package/core/personas/test-data-expert/SKILL.md +234 -0
  26. package/core/personas/test-data-expert/persona.config.json +10 -0
  27. package/core/personas/test-generator/SKILL.md +262 -0
  28. package/core/personas/test-generator/persona.config.json +10 -0
  29. package/core/traits/audit-trail.md +182 -0
  30. package/core/traits/confidence-signaling.md +172 -0
  31. package/core/traits/critical-thinking.md +129 -0
  32. package/core/traits/schema-awareness.md +132 -0
  33. package/core/traits/source-citation.md +174 -0
  34. package/core/traits/structured-output.md +199 -0
  35. package/docs/ci-cd-automation.md +548 -0
  36. package/docs/claude-code-reference/README.md +21 -0
  37. package/docs/claude-code-reference/agentboot-coverage.md +484 -0
  38. package/docs/claude-code-reference/feature-inventory.md +906 -0
  39. package/docs/cli-commands-audit.md +112 -0
  40. package/docs/cli-design.md +924 -0
  41. package/docs/concepts.md +1117 -0
  42. package/docs/config-schema-audit.md +121 -0
  43. package/docs/configuration.md +645 -0
  44. package/docs/delivery-methods.md +758 -0
  45. package/docs/developer-onboarding.md +342 -0
  46. package/docs/extending.md +448 -0
  47. package/docs/getting-started.md +298 -0
  48. package/docs/knowledge-layer.md +464 -0
  49. package/docs/marketplace.md +822 -0
  50. package/docs/org-connection.md +570 -0
  51. package/docs/plans/architecture.md +2429 -0
  52. package/docs/plans/design.md +2018 -0
  53. package/docs/plans/prd.md +1862 -0
  54. package/docs/plans/stack-rank.md +261 -0
  55. package/docs/plans/technical-spec.md +2755 -0
  56. package/docs/privacy-and-safety.md +807 -0
  57. package/docs/prompt-optimization.md +1071 -0
  58. package/docs/test-plan.md +972 -0
  59. package/docs/third-party-ecosystem.md +496 -0
  60. package/domains/compliance-template/README.md +173 -0
  61. package/domains/compliance-template/traits/compliance-aware.md +228 -0
  62. package/examples/enterprise/agentboot.config.json +184 -0
  63. package/examples/minimal/agentboot.config.json +46 -0
  64. package/package.json +63 -0
  65. package/repos.json +1 -0
  66. package/scripts/cli.ts +1069 -0
  67. package/scripts/compile.ts +1000 -0
  68. package/scripts/dev-sync.ts +149 -0
  69. package/scripts/lib/config.ts +137 -0
  70. package/scripts/lib/frontmatter.ts +61 -0
  71. package/scripts/sync.ts +687 -0
  72. package/scripts/validate.ts +421 -0
  73. package/tests/REGRESSION-PLAN.md +705 -0
  74. package/tests/TEST-PLAN.md +111 -0
  75. package/tests/cli.test.ts +705 -0
  76. package/tests/pipeline.test.ts +608 -0
  77. package/tests/validate.test.ts +278 -0
  78. package/tsconfig.json +62 -0
@@ -0,0 +1,758 @@
1
+ # AgentBoot Delivery Methods — Analysis & Recommendations
2
+
3
+ How organizations install, configure, and use AgentBoot. Evaluated through the lens
4
+ of the real adoption challenge: an org with power users, skeptics, and non-engineers.
5
+
6
+ ---
7
+
8
+ ## The User Spectrum
9
+
10
+ Every organization adopting agentic development has these user segments:
11
+
12
+ | Segment | Profile | What They Need | Priority |
13
+ |---------|---------|---------------|----------|
14
+ | **Power Users** | Already use Claude Code daily, have custom CLAUDE.md, write their own agents | Composable primitives, not hand-holding. Control and extensibility. | HIGH |
15
+ | **Willing Adopters** | Engineers open to AI tools but haven't gone deep | Zero-config start, immediate value, gradual depth | HIGH |
16
+ | **Skeptics / Hold-outs** | Engineers resistant to AI tools, prefer their workflow | Proof of value without disrupting their workflow. Opt-in, not forced. | MEDIUM |
17
+ | **Non-Engineers** | PMs, designers, compliance, marketing | GUI-first, no terminal, structured forms | LOW (but in scope) |
18
+ | **IT / Platform Team** | Deploy tooling, enforce compliance, manage fleet | Centralized control, MDM, audit trail, zero-touch deployment | HIGH |
19
+
20
+ AgentBoot must serve all five — but through different channels, not one monolithic
21
+ installer.
22
+
23
+ ---
24
+
25
+ ## Delivery Methods
26
+
27
+ ### 1. Claude Code Plugin (Recommended Primary Channel)
28
+
29
+ **What it is:** AgentBoot packaged as a Claude Code plugin, installable from a
30
+ marketplace (public or private). Bundles skills, agents, hooks, rules, and MCP
31
+ servers into a single distributable unit.
32
+
33
+ **How it works:**
34
+ ```bash
35
+ # User adds the AgentBoot marketplace (once)
36
+ /plugin marketplace add agentboot/agentboot-marketplace
37
+
38
+ # User installs the AgentBoot plugin
39
+ /plugin install agentboot
40
+
41
+ # Or org IT force-enables it via managed settings
42
+ ```
43
+
44
+ **Plugin structure:**
45
+ ```
46
+ agentboot-plugin/
47
+ ├── .claude-plugin/
48
+ │ └── plugin.json # name, version, description
49
+ ├── agents/
50
+ │ ├── code-reviewer/CLAUDE.md
51
+ │ ├── security-reviewer/CLAUDE.md
52
+ │ └── test-generator/CLAUDE.md
53
+ ├── skills/
54
+ │ ├── review-code/SKILL.md
55
+ │ ├── review-security/SKILL.md
56
+ │ ├── gen-tests/SKILL.md
57
+ │ └── agentboot-setup/SKILL.md # Interactive setup wizard
58
+ ├── hooks/
59
+ │ └── hooks.json # Audit trail, compliance hooks
60
+ ├── .mcp.json # Knowledge base, domain tools
61
+ ├── .lsp.json # LSP servers (if any)
62
+ ├── settings.json # Default agent, permissions
63
+ └── README.md
64
+ ```
65
+
66
+ **Private marketplace for orgs:**
67
+
68
+ The org creates a private marketplace repo with their customized AgentBoot config:
69
+
70
+ ```json
71
+ // .claude-plugin/marketplace.json
72
+ {
73
+ "name": "acme-personas",
74
+ "displayName": "Acme Corp AI Personas",
75
+ "owner": { "name": "Acme Platform Team" },
76
+ "plugins": [
77
+ {
78
+ "name": "acme",
79
+ "source": "./plugins/acme",
80
+ "description": "Acme-customized AgentBoot with HIPAA compliance",
81
+ "version": "1.0.0"
82
+ }
83
+ ]
84
+ }
85
+ ```
86
+
87
+ Engineers install with:
88
+ ```bash
89
+ /plugin marketplace add acme-corp/acme-personas # private GitHub repo
90
+ /plugin install acme
91
+ ```
92
+
93
+ IT force-enables via managed settings:
94
+ ```json
95
+ {
96
+ "enabledPlugins": { "acme@acme-personas": true },
97
+ "extraKnownMarketplaces": ["https://github.com/acme-corp/acme-personas"]
98
+ }
99
+ ```
100
+
101
+ **Serves:**
102
+
103
+ | Segment | How |
104
+ |---------|-----|
105
+ | Power Users | Full access to plugin internals; can fork/extend |
106
+ | Willing Adopters | One command install; `/agentboot:review-code` works immediately |
107
+ | Skeptics | IT can force-enable; value appears without opt-in effort |
108
+ | IT / Platform | Centralized marketplace; version pinning; managed settings |
109
+
110
+ **Pros:**
111
+ - Native CC distribution — no external tooling needed
112
+ - Namespace isolation (`/agentboot:review-code`) prevents conflicts
113
+ - Version-controlled via marketplace with semantic versioning
114
+ - IT can force-enable via managed settings — zero developer setup
115
+ - `/reload-plugins` picks up updates without restart
116
+ - Settings.json in plugin sets default agent, permissions
117
+ - Private marketplace supports enterprise authentication (GitHub, GitLab, Bitbucket)
118
+ - Already the standard way CC users install extensions
119
+
120
+ **Cons:**
121
+ - Claude Code only — doesn't help Copilot/Cursor users
122
+ - Plugin skills are namespaced (`/agentboot:review-code` not `/review-code`)
123
+ - Requires CC 1.0.33+ (but this is already old)
124
+ - Plugin marketplace is relatively new; some orgs may not be familiar
125
+
126
+ **Verdict:** This should be the **primary delivery method** for Claude Code users. It
127
+ maps perfectly to AgentBoot's plugin architecture (agents + skills + hooks + MCP + rules).
128
+
129
+ ---
130
+
131
+ ### 2. CLI Tool (`agentboot`)
132
+
133
+ **What it is:** A Node.js CLI that scaffolds, builds, and syncs persona configurations.
134
+ The current approach but needs refinement.
135
+
136
+ **How it works:**
137
+ ```bash
138
+ # Bootstrap a new org personas repo
139
+ agentboot setup
140
+
141
+ # Interactive setup — asks org name, picks starter personas
142
+ agentboot setup --interactive
143
+
144
+ # Build compiled output
145
+ agentboot build
146
+
147
+ # Sync to target repos
148
+ agentboot sync
149
+
150
+ # Generate a Claude Code plugin from your config
151
+ agentboot export --format plugin
152
+
153
+ # Generate cross-platform output
154
+ agentboot export --format cross-platform
155
+ ```
156
+
157
+ **Key insight:** The CLI is the **build tool**, not the delivery mechanism. It produces
158
+ artifacts (plugins, .claude/ directories, copilot-instructions.md) that are delivered
159
+ through other channels.
160
+
161
+ **Serves:**
162
+
163
+ | Segment | How |
164
+ |---------|-----|
165
+ | Power Users | Full control over build pipeline; scriptable |
166
+ | Willing Adopters | `agentboot setup` gets them started |
167
+ | IT / Platform | CI/CD integration; `agentboot build && agentboot sync` in pipeline |
168
+
169
+ **Pros:**
170
+ - `npx` means zero install — try it immediately
171
+ - Scriptable for CI/CD pipelines
172
+ - Platform-agnostic output generation
173
+ - Can generate Claude Code plugins, Copilot instructions, Cursor config
174
+ - Familiar pattern for Node.js developers
175
+
176
+ **Cons:**
177
+ - Requires Node.js (not universal)
178
+ - Terminal-only — excludes non-engineers
179
+ - Another tool to learn for engineers who just want personas
180
+
181
+ **Verdict:** Essential for the **build/admin workflow** but not the end-user experience.
182
+ Engineers interact with the plugin or .claude/ output, not the CLI directly.
183
+
184
+ ---
185
+
186
+ ### 3. Git Template Repository (Current Approach)
187
+
188
+ **What it is:** The current AgentBoot repo is a GitHub template. Orgs create their
189
+ private personas repo from it.
190
+
191
+ **How it works:**
192
+ ```bash
193
+ gh repo create my-org/my-org-personas --template agentboot/agentboot --private --clone
194
+ cd my-org-personas
195
+ npm install
196
+ # Edit agentboot.config.json
197
+ npm run build
198
+ npm run sync
199
+ ```
200
+
201
+ **Serves:**
202
+
203
+ | Segment | How |
204
+ |---------|-----|
205
+ | Power Users | Full repo control; can customize everything |
206
+ | IT / Platform | Central governance repo; version-controlled |
207
+
208
+ **Pros:**
209
+ - Full ownership of the personas repo
210
+ - Git-based governance (PRs, reviews, history)
211
+ - Works without any AgentBoot runtime dependency
212
+ - Familiar GitHub template workflow
213
+
214
+ **Cons:**
215
+ - High setup friction — clone, install, configure, build, sync
216
+ - Requires understanding of the entire system before getting value
217
+ - End developers never see or interact with this repo
218
+ - Template repos can't receive upstream updates cleanly
219
+
220
+ **Verdict:** Good for the **platform team** that manages governance. But it's the
221
+ wrong entry point for individual developers. The template repo produces the plugin
222
+ or .claude/ output that developers actually consume.
223
+
224
+ ---
225
+
226
+ ### 4. Managed Settings / MDM (Enterprise IT Channel)
227
+
228
+ **What it is:** Organization IT deploys AgentBoot configuration to all developer
229
+ machines via MDM (Jamf, Intune, JumpCloud, Kandji) or Anthropic's server-managed
230
+ settings.
231
+
232
+ **Two sub-channels:**
233
+
234
+ **A. Endpoint-managed (MDM):**
235
+ ```
236
+ /Library/Application Support/ClaudeCode/
237
+ ├── managed-settings.json # Hooks, permissions, forced plugins
238
+ ├── managed-mcp.json # Required MCP servers
239
+ └── CLAUDE.md # Non-overridable instructions
240
+ ```
241
+ Deployed via Jamf/Intune profile. Strongest enforcement — OS-level file protection.
242
+
243
+ **B. Server-managed (no MDM required):**
244
+ Anthropic's server delivers configuration based on org membership. No endpoint
245
+ deployment needed. Configured via admin panel at platform.claude.com.
246
+
247
+ **How AgentBoot fits:**
248
+ ```bash
249
+ # CLI generates managed artifacts
250
+ agentboot export --format managed-settings
251
+
252
+ # Output:
253
+ # dist/managed/managed-settings.json
254
+ # dist/managed/managed-mcp.json
255
+ # dist/managed/CLAUDE.md
256
+
257
+ # IT deploys via MDM or uploads to Anthropic admin panel
258
+ ```
259
+
260
+ **Serves:**
261
+
262
+ | Segment | How |
263
+ |---------|-----|
264
+ | Skeptics | Guardrails and compliance hooks activate automatically — no opt-in |
265
+ | IT / Platform | Zero-touch deployment; strongest enforcement; audit trail |
266
+ | All Engineers | Baseline governance active on every machine |
267
+
268
+ **Pros:**
269
+ - Zero developer action required
270
+ - Strongest enforcement available (OS-level protection)
271
+ - Applies to ALL Claude Code sessions on the machine
272
+ - Cannot be overridden by any user or project config
273
+ - Server-managed option requires no MDM infrastructure
274
+ - Perfect for HARD guardrails (PHI scanning, credential blocking)
275
+
276
+ **Cons:**
277
+ - Only Claude Code (no Copilot/Cursor)
278
+ - Heavy IT involvement for endpoint-managed
279
+ - Managed settings are blunt — same config for all repos on machine
280
+ - Server-managed is newer; some features may be limited
281
+
282
+ **Verdict:** Essential for **compliance-first orgs**. AgentBoot should generate managed
283
+ artifacts as a first-class output. This is how skeptics and hold-outs get governed
284
+ without opting in.
285
+
286
+ ---
287
+
288
+ ### 5. MCP Server (`agentboot-mcp`)
289
+
290
+ **What it is:** AgentBoot exposed as an MCP server that any MCP-compatible agent can
291
+ consume. Provides persona invocation, trait lookup, governance status, and knowledge
292
+ base access as MCP tools and resources.
293
+
294
+ **How it works:**
295
+ ```json
296
+ // .mcp.json in any repo
297
+ {
298
+ "mcpServers": {
299
+ "agentboot": {
300
+ "type": "stdio",
301
+ "command": "npx",
302
+ "args": ["-y", "@agentboot/mcp-server", "--config", "./agentboot.config.json"]
303
+ }
304
+ }
305
+ }
306
+ ```
307
+
308
+ **MCP tools exposed:**
309
+ - `agentboot_review` — invoke a reviewer persona with structured output
310
+ - `agentboot_list_personas` — list available personas for current scope
311
+ - `agentboot_get_trait` — retrieve a trait definition
312
+ - `agentboot_check_compliance` — run compliance scan on input
313
+
314
+ **MCP resources exposed:**
315
+ - `agentboot:persona://code-reviewer` — full persona definition
316
+ - `agentboot:trait://critical-thinking` — trait content
317
+ - `agentboot:knowledge://compliance/hipaa` — domain knowledge
318
+
319
+ **Serves:**
320
+
321
+ | Segment | How |
322
+ |---------|-----|
323
+ | Power Users | Programmatic access; custom integrations |
324
+ | Copilot/Cursor Users | AgentBoot personas in non-CC agents |
325
+ | IT / Platform | Centralized persona serving; usage telemetry |
326
+
327
+ **Pros:**
328
+ - Cross-platform: works in Claude Code, Copilot, Cursor, Gemini CLI, any MCP client
329
+ - Single source of truth — no sync needed; personas served live
330
+ - Usage telemetry built-in (the server sees every invocation)
331
+ - Enables the "AgentBoot as a service" model
332
+ - MCP resources enable `@agentboot:persona://code-reviewer` in prompts
333
+
334
+ **Cons:**
335
+ - Requires running process (stdio server or HTTP endpoint)
336
+ - Higher latency than static files
337
+ - More complex to deploy than a plugin
338
+ - MCP support varies by platform (GA in CC and VS Code; preview elsewhere)
339
+
340
+ **Verdict:** The **cross-platform bridge**. When an org has both Claude Code and Copilot
341
+ users, the MCP server ensures everyone gets governed personas. Also enables advanced
342
+ integrations (CI/CD persona invocation, API access).
343
+
344
+ ---
345
+
346
+ ### 6. Direct `.claude/` Sync (Current Approach, Simplified)
347
+
348
+ **What it is:** AgentBoot's sync script writes compiled files directly to target repos'
349
+ `.claude/` directories. No plugin, no MCP server — just files in git.
350
+
351
+ **How it works:**
352
+ ```bash
353
+ agentboot sync # Writes .claude/ to all repos in repos.json
354
+ # Or in CI:
355
+ agentboot sync --mode github-api # Creates PRs via GitHub API
356
+ ```
357
+
358
+ **Serves:**
359
+
360
+ | Segment | How |
361
+ |---------|-----|
362
+ | All Engineers | .claude/ files are there when they clone the repo; zero setup |
363
+ | IT / Platform | Governance via PR review of sync commits |
364
+ | Skeptics | Files are present whether they want them or not |
365
+
366
+ **Pros:**
367
+ - Simplest mental model — files in a directory
368
+ - Works offline (no server, no plugin install)
369
+ - Version-controlled in the target repo
370
+ - No Claude Code plugin system dependency
371
+ - Works for any tool that reads .claude/ or copilot-instructions.md
372
+
373
+ **Cons:**
374
+ - Sync creates noise in target repos (files they didn't author)
375
+ - Merge conflicts when sync and manual changes collide
376
+ - No live updates — requires re-sync for persona changes
377
+ - Files can be modified in target repo (drift from hub)
378
+
379
+ **Verdict:** The **fallback/bootstrap method**. Works everywhere but lacks the polish
380
+ of plugin-based delivery. Good for initial deployment and for repos that can't use
381
+ plugins.
382
+
383
+ ---
384
+
385
+ ### 7. Cowork Plugins (Non-Engineers)
386
+
387
+ **What it is:** Claude's desktop app (Cowork) has its own plugin system for
388
+ non-technical users. Cowork plugins appear in a GUI with structured forms — no
389
+ terminal required.
390
+
391
+ **How it works:**
392
+ AgentBoot personas could be packaged as Cowork plugins that expose:
393
+ - Structured forms for invoking reviews ("paste your PRD here → get review")
394
+ - Compliance checking ("upload document → check for PII")
395
+ - Knowledge base Q&A ("ask the domain expert")
396
+
397
+ Cowork plugins are the same format as Claude Code plugins but appear in the
398
+ desktop GUI with form-based input rather than slash commands.
399
+
400
+ **Serves:**
401
+
402
+ | Segment | How |
403
+ |---------|-----|
404
+ | Non-Engineers | GUI with forms; no terminal; role-specific plugins |
405
+ | Willing Adopters | Gentle on-ramp; can graduate to CLI later |
406
+
407
+ **Pros:**
408
+ - Same plugin format as Claude Code — build once, deliver to both
409
+ - Structured forms feel like filling out a brief, not writing code
410
+ - Role-specific plugins (legal review, marketing copy, compliance check)
411
+ - Enterprise org can manage Cowork plugins centrally
412
+
413
+ **Cons:**
414
+ - Cowork is Anthropic-specific (no Copilot/Cursor equivalent)
415
+ - Plugin capabilities more limited than CLI (no git, limited file access)
416
+ - Non-engineers may not need the full persona governance system
417
+ - Cowork plugin ecosystem is newer; fewer examples
418
+
419
+ **Verdict:** A **bonus channel** for orgs that want to extend persona governance beyond
420
+ engineering. Same plugin, different surface. Low priority but comes almost free if
421
+ we're already building CC plugins.
422
+
423
+ ---
424
+
425
+ ### 8. VS Code / JetBrains Extension Surface
426
+
427
+ **What it is:** Claude Code runs inside VS Code and JetBrains IDEs. Plugins installed
428
+ in the CLI are automatically available in the IDE extension. No separate IDE extension
429
+ needed.
430
+
431
+ **How it works:**
432
+ - Engineer installs Claude Code VS Code extension
433
+ - Plugin installed via CLI (`/plugin install agentboot`) appears in IDE
434
+ - Slash commands available in VS Code's Claude Code panel
435
+ - Skills appear in the `/` autocomplete menu
436
+
437
+ **Serves:**
438
+
439
+ | Segment | How |
440
+ |---------|-----|
441
+ | Willing Adopters | IDE-first experience; never leave VS Code |
442
+ | Skeptics | AI review appears in their existing IDE workflow |
443
+
444
+ **Pros:**
445
+ - No separate installation — CC plugins work in IDE automatically
446
+ - Familiar IDE interface
447
+ - Code context (open files, selections) available to personas
448
+
449
+ **Cons:**
450
+ - Requires Claude Code extension (not standalone)
451
+ - JetBrains support is partial (no `/` IntelliSense for slash commands)
452
+ - Not a separate delivery method — it's the CC plugin surfaced in IDE
453
+
454
+ **Verdict:** Not a separate channel; it's where the CC plugin **appears**. But worth
455
+ noting because the IDE is where most developers spend their time.
456
+
457
+ ---
458
+
459
+ ## Recommended Strategy
460
+
461
+ ### Multi-Channel Architecture
462
+
463
+ ```
464
+ agentboot.config.json
465
+
466
+ ┌──────┴──────┐
467
+ │ CLI Build │
468
+ │ (agentboot build)
469
+ └──────┬──────┘
470
+
471
+ ┌────────────┼────────────────┐
472
+ │ │ │
473
+ ┌─────────▼──────┐ ┌──▼────────┐ ┌─────▼──────────┐
474
+ │ CC Plugin │ │ .claude/ │ │ Cross-Platform │
475
+ │ (marketplace) │ │ (direct) │ │ (SKILL.md, │
476
+ │ │ │ │ │ copilot, etc.) │
477
+ └───────┬────────┘ └─────┬─────┘ └───────┬────────┘
478
+ │ │ │
479
+ ┌───────▼────┐ ┌──────▼──────┐ ┌──────▼──────┐
480
+ │ CC + IDE │ │ Any CC repo │ │ Copilot / │
481
+ │ + Cowork │ │ (fallback) │ │ Cursor / │
482
+ │ │ │ │ │ Gemini CLI │
483
+ └────────────┘ └─────────────┘ └─────────────┘
484
+
485
+ ┌───────▼────────────┐
486
+ │ Managed Settings │
487
+ │ (MDM / Server) │
488
+ │ HARD guardrails │
489
+ └────────────────────┘
490
+
491
+ ┌───────▼────────────┐
492
+ │ MCP Server │
493
+ │ (cross-platform │
494
+ │ live serving) │
495
+ └────────────────────┘
496
+ ```
497
+
498
+ ### Phase 1: Foundation (Now → V1)
499
+
500
+ | Channel | Action | Effort |
501
+ |---------|--------|--------|
502
+ | **Git Template** | Already exists. Refine `agentboot.config.json` and build pipeline. | LOW |
503
+ | **CLI** | Implement `agentboot setup`, `build`, `sync`, `export --format plugin`. | MEDIUM |
504
+ | **Direct .claude/ sync** | Already designed. Implement Claude Code-native output. | MEDIUM |
505
+
506
+ ### Phase 2: Native Distribution (V1 → V1.5)
507
+
508
+ | Channel | Action | Effort |
509
+ |---------|--------|--------|
510
+ | **CC Plugin** | Package AgentBoot output as a CC plugin. Create private marketplace template. | MEDIUM |
511
+ | **Managed Settings** | Generate managed-settings.json and managed-mcp.json. Document MDM deployment. | LOW |
512
+
513
+ ### Phase 3: Cross-Platform & Enterprise (V1.5 → V2)
514
+
515
+ | Channel | Action | Effort |
516
+ |---------|--------|--------|
517
+ | **MCP Server** | Build `@agentboot/mcp-server` with persona invocation, trait lookup, compliance tools. | HIGH |
518
+ | **Server-Managed Settings** | Document integration with Anthropic's server-managed settings (no MDM). | LOW |
519
+ | **Cross-Platform Output** | Refine copilot-instructions.md and generic SKILL.md output for non-CC agents. | MEDIUM |
520
+
521
+ ### Phase 4: Broader Reach (V2+)
522
+
523
+ | Channel | Action | Effort |
524
+ |---------|--------|--------|
525
+ | **Cowork Plugins** | Package review/compliance personas for non-engineer use via desktop GUI. | LOW |
526
+ | **Public Marketplace** | Submit core AgentBoot plugin to official Anthropic marketplace. | LOW |
527
+
528
+ ---
529
+
530
+ ## Per-Segment Journey
531
+
532
+ ### Power User Journey
533
+ ```
534
+ 1. Discovers AgentBoot (GitHub, marketplace, word of mouth)
535
+ 2. `agentboot setup` → scaffolds org personas repo
536
+ 3. Edits agentboot.config.json, writes custom personas/traits
537
+ 4. `agentboot build && agentboot export --format plugin`
538
+ 5. Publishes to private marketplace
539
+ 6. Team installs via /plugin install
540
+ 7. Power user extends with custom agents, hooks, MCP servers
541
+ ```
542
+
543
+ ### Willing Adopter Journey
544
+ ```
545
+ 1. Tech lead says "install the AgentBoot plugin"
546
+ 2. /plugin marketplace add my-org/personas
547
+ 3. /plugin install my-org-agentboot
548
+ 4. Types /my-org-agentboot:review-code — gets structured review
549
+ 5. "Oh, this is useful" → starts exploring other personas
550
+ 6. Gradually becomes a power user
551
+ ```
552
+
553
+ ### Skeptic Journey
554
+ ```
555
+ 1. IT deploys managed settings via MDM (no developer action)
556
+ 2. Compliance hooks activate automatically in every CC session
557
+ 3. Developer notices audit trail messages but isn't disrupted
558
+ 4. PR bot runs /review-code automatically (via CI, not the developer)
559
+ 5. Skeptic sees review quality and starts invoking personas manually
560
+ 6. "OK, this actually helps" → grudging adoption
561
+ ```
562
+
563
+ ### Non-Engineer Journey
564
+ ```
565
+ 1. IT enables Cowork plugin for their department
566
+ 2. Opens Cowork desktop app → sees "Compliance Review" in sidebar
567
+ 3. Pastes a document → fills out a form → gets structured compliance review
568
+ 4. Never touches a terminal
569
+ ```
570
+
571
+ ### IT / Platform Team Journey
572
+ ```
573
+ 1. Evaluates AgentBoot → creates org personas repo from template
574
+ 2. Configures agentboot.config.json with org structure
575
+ 3. Builds and tests with pilot team (3-5 devs, 2-3 weeks)
576
+ 4. Generates managed settings for HARD guardrails
577
+ 5. Deploys managed settings via MDM
578
+ 6. Creates private marketplace with org-customized plugin
579
+ 7. Rolls out department by department
580
+ 8. Monitors via audit hooks and structured telemetry
581
+ ```
582
+
583
+ ---
584
+
585
+ ## Non-Claude Code Delivery
586
+
587
+ The methods above are CC-centric because CC has the richest extensibility surface.
588
+ For orgs using Copilot, Cursor, Gemini CLI, or a mix of tools, AgentBoot delivers
589
+ through different channels.
590
+
591
+ ### GitHub Copilot
592
+
593
+ **Delivery mechanisms:**
594
+
595
+ 1. **`copilot-instructions.md`** — AgentBoot's cross-platform build generates
596
+ `.github/copilot-instructions.md` which Copilot reads as always-on instructions.
597
+ This is the equivalent of CLAUDE.md. Synced to repos via `agentboot sync`.
598
+
599
+ 2. **Path-scoped `.instructions.md`** — Copilot supports per-directory instruction
600
+ files (`.github/instructions/*.instructions.md` with glob-scoped frontmatter).
601
+ AgentBoot generates these from gotchas rules and domain layers.
602
+
603
+ 3. **Prompt files (`.github/prompts/*.prompt.md`)** — Copilot's slash command
604
+ equivalent. AgentBoot generates these as the IDE invocation surface for personas.
605
+ Developers type `/review-code` in VS Code Copilot Chat.
606
+
607
+ 4. **Agent Skills (`skills/{name}/SKILL.md`)** — The agentskills.io format is
608
+ supported in Copilot CLI agent mode. AgentBoot's cross-platform SKILL.md output
609
+ works here directly.
610
+
611
+ 5. **Repository rules** — Copilot can auto-review every PR via native repository
612
+ rules. No Claude Code involved. The PR review persona is configured once in
613
+ GitHub repo settings.
614
+
615
+ 6. **Custom instructions (org-level)** — Copilot Enterprise supports org-level
616
+ custom instructions that apply to all repos. AgentBoot generates these from
617
+ the org-scope always-on instructions.
618
+
619
+ 7. **MCP servers** — Copilot supports MCP in VS Code (GA) and CLI. AgentBoot's
620
+ MCP server works here for live persona serving and knowledge base access.
621
+
622
+ **What Copilot lacks vs. CC:**
623
+ - No hooks (except CLI pre-prompt hook) — compliance enforcement is advisory only
624
+ - No managed settings/MDM — no HARD guardrail channel
625
+ - No per-persona model selection — Copilot chooses the model
626
+ - No agent memory — no self-improvement reflections
627
+ - No worktree isolation — no parallel reviewer execution
628
+ - No `context: fork` — no reviewer isolation from generation context
629
+
630
+ **Org connection for Copilot:**
631
+ The platform team runs `agentboot sync` to write generated files to target repos.
632
+ Developers clone the repo and the Copilot instructions are there. No plugin install,
633
+ no marketplace. It's the "repo already has it" model.
634
+
635
+ ### Cursor
636
+
637
+ **Delivery mechanisms:**
638
+
639
+ 1. **`.cursor/rules/`** — Cursor reads rule files from this directory. AgentBoot
640
+ generates these from always-on instructions and gotchas rules. Format is similar
641
+ to CC rules but in Cursor's directory.
642
+
643
+ 2. **`.cursorrules`** — Legacy single-file instructions. AgentBoot can generate
644
+ this as a flattened version of org + group + team instructions.
645
+
646
+ 3. **Agent Skills (`skills/{name}/SKILL.md`)** — Cursor supports the agentskills.io
647
+ format. AgentBoot's cross-platform SKILL.md output works here.
648
+
649
+ 4. **MCP servers** — Cursor supports MCP. AgentBoot's MCP server provides live
650
+ persona access.
651
+
652
+ **What Cursor lacks vs. CC:**
653
+ - No hooks — zero enforcement capability
654
+ - No managed settings — no HARD guardrails
655
+ - No agent/subagent system — personas are instruction-based only
656
+ - No org-level distribution mechanism — per-repo files only
657
+
658
+ **Org connection for Cursor:**
659
+ Same as Copilot — `agentboot sync` writes files to repos. No marketplace.
660
+
661
+ ### Gemini CLI
662
+
663
+ **Delivery mechanisms:**
664
+
665
+ 1. **`GEMINI.md`** — Gemini CLI reads this file for project instructions. AgentBoot
666
+ generates it from the same source as CLAUDE.md.
667
+
668
+ 2. **Agent Skills** — Gemini CLI supports the agentskills.io format.
669
+
670
+ 3. **MCP servers** — Gemini CLI supports MCP.
671
+
672
+ **Org connection:** Sync-based (files in repo).
673
+
674
+ ### Multi-Agent Organizations
675
+
676
+ When an org has developers using different tools:
677
+
678
+ ```
679
+ agentboot build
680
+ agentboot export --format all
681
+
682
+ dist/
683
+ ├── claude-code/ # Full native output (.claude/ directory)
684
+ ├── copilot/ # .github/copilot-instructions.md + prompts + skills
685
+ ├── cursor/ # .cursor/rules/ + .cursorrules + skills
686
+ ├── gemini/ # GEMINI.md + skills
687
+ ├── cross-platform/ # agentskills.io SKILL.md (works everywhere)
688
+ └── mcp/ # MCP server config (works everywhere)
689
+ ```
690
+
691
+ The sync script reads each repo's `platform` field from `repos.json` and writes
692
+ the appropriate format:
693
+
694
+ ```json
695
+ [
696
+ { "name": "org/api-service", "platform": "claude-code", "team": "api" },
697
+ { "name": "org/web-app", "platform": "copilot", "team": "web" },
698
+ { "name": "org/ml-pipeline", "platform": "cursor", "team": "data" }
699
+ ]
700
+ ```
701
+
702
+ The MCP server is the only channel that serves all platforms identically — same
703
+ persona definitions, same invocation, same output format. For orgs that want
704
+ uniform governance regardless of tool choice, the MCP server is the primary
705
+ delivery mechanism, with per-platform file sync as the secondary.
706
+
707
+ ---
708
+
709
+ ## Key Design Decisions
710
+
711
+ ### D-01: Plugin as primary, sync as fallback
712
+
713
+ The CC plugin is the primary delivery method because it uses the native distribution
714
+ mechanism, supports force-enable via managed settings, gets updates via `/reload-plugins`,
715
+ and isolates via namespace. The direct .claude/ sync is the fallback for repos that
716
+ can't use plugins or for cross-platform output.
717
+
718
+ ### D-02: CLI is a build tool, not a user tool
719
+
720
+ End developers never run `agentboot`. They consume the plugin or .claude/ output.
721
+ The CLI is for the platform team that manages the personas repo, runs builds in CI,
722
+ and publishes to marketplaces.
723
+
724
+ ### D-03: Managed settings for compliance, not convenience
725
+
726
+ Managed settings should only carry HARD guardrails — compliance hooks, credential
727
+ blocking, audit logging. Personas and skills are delivered via the plugin or .claude/
728
+ sync. Mixing governance and convenience in managed settings makes both harder to manage.
729
+
730
+ ### D-04: MCP server is the cross-platform bridge
731
+
732
+ When an org has Claude Code AND Copilot AND Cursor users, the MCP server is the only
733
+ channel that serves all three with the same persona definitions. It's higher effort but
734
+ the only path to true multi-agent governance.
735
+
736
+ ### D-05: Same plugin serves CC and Cowork
737
+
738
+ A Claude Code plugin automatically works in Cowork (the desktop app). This means
739
+ AgentBoot gets non-engineer reach for free when packaged as a plugin. Skills that make
740
+ sense for non-engineers (compliance review, document analysis) surface in the Cowork GUI
741
+ with structured forms.
742
+
743
+ ---
744
+
745
+ ## Sources
746
+
747
+ - [Create plugins — Claude Code Docs](https://code.claude.com/docs/en/plugins)
748
+ - [Plugins reference — Claude Code Docs](https://code.claude.com/docs/en/plugins-reference)
749
+ - [Create and distribute a plugin marketplace — Claude Code Docs](https://code.claude.com/docs/en/plugin-marketplaces)
750
+ - [Configure server-managed settings — Claude Code Docs](https://code.claude.com/docs/en/server-managed-settings)
751
+ - [Claude Code for Enterprise](https://claude.com/product/claude-code/enterprise)
752
+ - [Claude Code Organisation Rollout Playbook — systemprompt.io](https://systemprompt.io/guides/claude-code-organisation-rollout)
753
+ - [Cowork: Claude Code power for knowledge work](https://claude.com/product/cowork)
754
+ - [Use plugins in Cowork — Claude Help Center](https://support.claude.com/en/articles/13837440-use-plugins-in-cowork)
755
+ - [Manage Cowork plugins for your organization — Claude Help Center](https://support.claude.com/en/articles/13837433-manage-cowork-plugins-for-your-organization)
756
+ - [Claude Code Plugin Marketplace: npm for AI-Assisted Development Workflows — Medium](https://james-sheen.medium.com/claude-codes-plugin-marketplace-npm-for-ai-assisted-development-workflows-9685333bd400)
757
+ - [Official Claude Code Plugins — GitHub](https://github.com/anthropics/claude-plugins-official)
758
+ - [Claude Code Private Marketplace Demo — GitHub](https://github.com/mrlm-xyz/demo-claude-marketplace)