toolbox

name: toolbox description: Pre/post dev toolbox — named bundles of skills/agents loaded before development work and councils of experts invoked after. Run /toolbox or the toolbox.py CLI to list, activate, initialize, export, import, and validate toolboxes. Invoke at the start or end of a dev session, when setting up a new repo, or when sharing toolboxes with a team. type: feature priority: 50 always_load: false

Named bundles of skills/agents that run before (pre) or after (post) a development task. Learn patterns from past work and propose new bundles. Invoke slash, pre-commit, session-end, or file-save.

Quick reference

Task	Command
Seed 5 starter toolboxes	`python src/toolbox.py init`
List available toolboxes	`python src/toolbox.py list`
Inspect one	`python src/toolbox.py show ship-it`
Activate (global)	`python src/toolbox.py activate ship-it`
Export for sharing	`python src/toolbox.py export ship-it`
Import a shared toolbox	`python src/toolbox.py import file.yaml`
Validate config	`python src/toolbox.py validate`

Starter templates

Name	When to use
ship-it	End-of-feature: 7-expert council on the change set
security-sweep	Security audit with guardrail blocking HIGH findings
refactor-safety	Refactors with graph-informed blast radius
docs-review	When touching Markdown or API docs
fresh-repo-init	Blank repo: run intent interview and scaffold

Data model

Global: ~/.claude/toolboxes.json. Per-repo (overrides global): <repo_root>/.toolbox.yaml.

Each toolbox declares:

pre — skills/agents to load before work starts
post — agents that form the council after work ends
scope.analysis — diff | full | graph-blast | dynamic
trigger — slash, pre_commit, session_end, or file_save glob
budget.max_tokens / budget.max_seconds — hard stop on runaway cost
dedup.policy — fresh (always re-run) or cached (reuse within window)
guardrail — if true, block commit on HIGH findings

Invoke when

User says "I'm done with this feature" or commits a feature branch.
User opens a fresh repo (triggers fresh-repo-init suggestion).
User touches security-sensitive paths (triggers security-sweep file_save).
User asks "what toolboxes do I have?" or "run the council".

Reasoning

See docs/toolbox/index.md, docs/toolbox/starters.md, and docs/toolbox/verdicts.md for the current toolbox contract, starter bundles, and guardrail behavior.