DevOps

Docker Container Forensics provides a workflow to preserve and analyze compromised Docker containers, including image layer inspection, host artifact examination, and security configuration auditing. Use it during incident response or container security investigations.

Shadow Credentials Privilege Escalation abuses the msDS-KeyCredentialLink attribute to append an attacker-controlled key and recover the target's NT hash via PKINIT, enabling account takeover without resetting passwords when BloodHound shows write access over the attribute.

Cmux Backend provides backend TypeScript and Cloud VM development rules for cmux, covering Effect services, Postgres migrations, provider integrations, auth pricing gates, and VM lifecycle workflows. Use it when editing backend code or VM lifecycle logic.

CMUX Billing is a runbook for editing and debugging cmux billing code, covering Stripe checkout, pricing, subscriptions, webhooks, and Pro entitlement.

cmux Dev Workflow provides contributor rules for setting up the cmux repository, normalizing Xcode project files, developing tagged sidebar extensions, and creating dev builds. Use it when configuring the project, editing .xcodeproj files, adding sidebar extensions, or working with tagged debug builds.

cmux Diagnostics runs read-only checks to diagnose cmux CLI, socket, settings, hook, session restore, and notification issues. Use it when cmux hooks, agent resume, or notifications are not working, or when asking for a health check or support-safe debug summary.

cmux Ghostty provides workflow rules for the Ghostty submodule and GhosttyKit builds in the cmux project. Use it when modifying the ghostty submodule, rebuilding GhosttyKit.xcframework, updating the parent submodule pointer, or documenting fork conflict notes.

CMux Release manages the cmux release workflow, including version bumping, changelog updates, pretag guard, release tags, and asset expectations. Use it when preparing or troubleshooting a cmux release.

Release Workflow automates version bumping, changelog generation, and release publishing for Node.js, Python, Rust, Claude Plugin, and generic projects. Use it when asked to release, bump version, push, or backfill GitHub Releases.

Automate management of Atlassian products like Jira and Confluence using Claude Code. Use for configuring workflows, permissions, and integrations.

Day-One Patch scopes, prioritizes, implements, and QA-gates a focused patch for known issues discovered after gold master but before or immediately after public launch. Use it after a gold master build is locked and known bugs or cert feedback require a safe, minimal fix with a rollback plan.

Local Development guides building, installing, testing, and running the Happy monorepo CLI, server, mobile app, and desktop app locally. Use when the user types /dev or asks how to build, start dev, install locally, or run a package.