AgentStack
MCP verified MIT Self-run

Claude Code Blueprint

mcp-faizkhairi-claude-code-blueprint · by faizkhairi

A battle-tested, framework-agnostic reference architecture for Claude Code. Beginner-friendly with graduated adoption (minimal / standard / core / full presets). 11 agents, 17 skills, 10 hooks, 5 rules -- with reasoning behind every decision.

No reviews yet
0 installs
22 views
0.0% view→install

Install

$ agentstack add mcp-faizkhairi-claude-code-blueprint

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Claude Code Blueprint? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Claude Code Blueprint

Prevent the most common AI coding mistakes — a library of ready-to-copy files (CLAUDE.md, hooks, agents) you mix into your own project to make Claude Code more reliable.

60 seconds to start. Copy one file. Add more as your project grows. Works with any language, any framework, any skill level.

[](https://github.com/faizkhairi/claude-code-blueprint/stargazers) [](https://github.com/faizkhairi/claude-code-blueprint/network/members) [](LICENSE) [](https://docs.anthropic.com/en/docs/claude-code) [](CONTRIBUTING.md)

12 agents · 17 skills · 12 hooks · 6 rules — copy only what you need, or install a preset (minimal / standard / core / full)

[English](README.md) | [日本語](i18n/README.ja.md) | [한국어](i18n/README.ko.md) | [简体中文](i18n/README.zh.md)


> Heads up before you copy: This is a reference repo, not a project template — you'll copy files OUT of it into your own project. Don't run Claude Code inside this repository (it'll load this blueprint's CLAUDE.md instead of yours). See [GETTING-STARTED.md](GETTING-STARTED.md) for the full walkthrough.


Quick Start

Do this first. Copy one file into your project and you're done in 60 seconds:

# In your project root
curl -o CLAUDE.md https://raw.githubusercontent.com/faizkhairi/claude-code-blueprint/main/CLAUDE.md

That gives Claude Code four behavioral rules that prevent the most common AI coding mistakes: Verify-After-Complete · Diagnose-First · Plan-First · Verify-Before-Exit-Plan. That's the whole first step — try it, then come back for more.

Want more than CLAUDE.md? (hooks, agents, settings)

Once CLAUDE.md is working, add the rest. Easiest path -- run the installer from a cloned/forked copy:

./setup.sh --preset=standard

Or let Claude do it -- paste into a Claude Code session: "Set up the Claude Code Blueprint. Copy CLAUDE.md to my project root, set up hooks and settings in ~/.claude/. Show me each step."

For every install option (fork / clone / cherry-pick / presets) plus a verification checklist, see [SETUP.md](SETUP.md).

New to Claude Code, or want the guided version? The [beginner guide](GETTING-STARTED.md) walks you through the same thing step by step. Curious who this is for? See [Who Is This For](#who-is-this-for) below.


What It Costs You (Token Budget)

Every file you copy is a recurring per-session context cost. Here is what each component costs and when it loads, so you can decide what to add. Numbers are measured from the actual files (~4 characters per token):

| Component | Token Cost | When It Loads | |-----------|-----------|---------------| | CLAUDE.md | ~2,300 | Every session start | | An always-on rule (session-lifecycle) | ~700 | Every session | | A path-scoped rule (testing, schema, api) | ~850-1,450 | Only when editing matching files — otherwise zero | | A skill (review-full, test-check, deploy-check) | ~480-1,070 | Only when its trigger phrase is used | | Hooks (all of them) | Zero | They run outside Claude's context | | An agent (per spawn) | Full context window | Only when you invoke it |

The economics: hooks cost zero tokens, and path-scoped rules cost nothing until you touch a matching file. The recurring baseline is just CLAUDE.md (~2,300 tokens, roughly 3-5% of a typical session) — and a single prevented redo cycle saves far more than that. See the [full breakdown and savings math](docs/BENCHMARKS.md#token-cost-per-component).


Who Is This For?

Any developer, any framework, any skill level. The blueprint configures Claude Code's behavior -- it doesn't care what language or framework your project uses.

| You Are | Start Here | Time to Value | |---------|-----------|---------------| | Complete beginner | [Start Here](GETTING-STARTED.md#new-to-claude-code-start-here) | 1 minute: just copy CLAUDE.md | | Solo dev, small project | [CLAUDE.md](CLAUDE.md) + 2 hooks | 5 minutes | | Small startup (2-5 devs) | Above + shared rules + 2-3 agents | See [Team Setup](GETTING-STARTED.md#setting-up-for-teams) | | Established team (5+ devs) | Full blueprint, adapted | Fork, customize, commit shared config | | Learning to code | [GETTING-STARTED.md](GETTING-STARTED.md) only | Ignore agents/skills/memory until comfortable | | Coming from another tool | [CROSS-TOOL-GUIDE.md](docs/CROSS-TOOL-GUIDE.md) | Concepts transfer; see Copilot/Cursor in depth sections |

Your Progression

Grow as you need to: start with CLAUDE.md (above), add a few hooks, then add agents/skills/rules as your workflow matures. The core preset is a good middle step. The exact order is in the [Recommended adoption path](#recommended-adoption-path) below, and [Presets](docs/PRESETS.md) has ready-to-copy configurations for each tier.


What Makes This Different

Other repos dump dozens of agents on you. We give you 12 -- and explain why each one exists.

| This Blueprint | Generic Config Repos | |---------------|---------------------| | Every component has a [battle story](docs/WHY.md) explaining why it exists | Configs without context | | [4 behavioral rules](CLAUDE.md) that prevent AI coding mistakes | Lists of settings to copy | | [Cross-tool guide](docs/CROSS-TOOL-GUIDE.md) for 10 other tools (Copilot, Cursor, Cline, Roo Code, OpenCode, and more) | Single-tool only | | [Beginner-friendly](GETTING-STARTED.md) with 6 adoption personas | Assumed expertise | | [Smoke-tested hooks](hooks/test-hooks.sh) with 43 automated tests | Untested scripts | | Safety-first: [config placement guide](GETTING-STARTED.md#where-config-belongs-project-vs-personal), privacy warnings, [graceful degradation](agents/README.md#agents-are-not-infallible) | No safety guidance | | [Framework-agnostic](FAQ.md#what-framework-or-language-does-this-work-with): works with any language and stack | Assumes a specific language/framework |


What's Inside

12 Agents -- Specialized subagents with model tiering (opus/sonnet/haiku)

 

| Agent | Model | Role | |-------|-------|------| | project-architect | opus | System design, architecture decisions, technology choices | | backend-specialist | sonnet | API endpoints, services, database operations, middleware | | frontend-specialist | sonnet | UI components, state management, forms, styling | | code-reviewer | sonnet | Code quality, patterns, best practices (read-only) | | security-reviewer | sonnet | OWASP Top 10, auth flaws, injection attacks (read-only) | | db-analyst | sonnet | Schema analysis, query optimization, migration planning (read-only) | | devops-engineer | sonnet | Deployment configs, CI/CD, Docker, infrastructure (read-only) | | qa-tester | sonnet | Unit tests, integration tests, E2E tests | | verify-plan | sonnet | 7-point mechanical plan verification (read-only) | | docs-writer | haiku | README, API docs, changelogs, architecture docs | | api-documenter | haiku | OpenAPI specs, integration guides (read-only) | | architecture-reviewer | sonnet | Dependency direction, god files, dead code, modularity (read-only) |

See [agents/README.md](agents/README.md) for permission modes, cost estimates, and maxTurns.

17 Skills -- Natural-language-triggered workflows (no slash commands needed)

 

| Category | Skills | Triggers | |----------|--------|----------| | Code Quality | review-full, review-diff | "is this secure?", "scan diff", "check for vulnerabilities" | | Testing | test-check, e2e-check | "run the tests", "browser test", "are tests passing?" | | Deployment | deploy-check | "deploy", "push to prod", "ready to ship" | | Planning | sprint-plan, elicit-requirements | "let's build", "new feature", multi-step tasks | | Session | load-session, save-session, session-end, save-diary | Session start/end, "save", "bye", "done" | | Project | scaffold-project, register-project, status, changelog | "new project", "status", "changelog" | | Database | db-check | "check the schema", "validate models" | | Utilities | tech-radar | "what's new?", "should we upgrade?" |

See [skills/README.md](skills/README.md) for customization and placeholder variable setup.

12 Hooks -- Deterministic lifecycle automation (always fire, unlike CLAUDE.md rules which the model can deprioritize)

 

| Event | Hook | Purpose | |-------|------|---------| | SessionStart | session-start.sh | Inject workspace context | | PreToolUse (Bash) | block-git-push.sh | Protect remote repos | | PreToolUse (Write/Edit) | protect-config.sh | Guard linter/build configs | | PostToolUse (Write/Edit) | notify-file-changed.sh | Verify reminder | | PostToolUse (Bash) | post-commit-review.sh | Post-commit review | | PreCompact | precompact-state.sh | Serialize state to disk | | Stop | security check + cost-tracker.sh + session-checkpoint.sh | Last defense + metrics | | SessionEnd | session-checkpoint.sh | Guaranteed final save |

Plus 2 utility scripts: verify-mcp-sync.sh (MCP config checker) and status-line.sh (branch/project status), both deployed by the full preset. The 13th file in the folder is test-hooks.sh — the local test harness, run via bash hooks/test-hooks.sh to verify all hooks. It's the only one not deployed to ~/.claude/hooks/, and isn't counted in the "12 hooks" total.

Run bash hooks/test-hooks.sh to verify all hooks pass (43 automated tests).

See [hooks/README.md](hooks/README.md) for the full lifecycle, testing guide, and design principles.

6 Rules -- Path-scoped behavioral constraints (load only when editing matching files)

 

| Rule | Activates On | Purpose | |------|-------------|---------| | api-endpoints | **/server/api/**/*.{js,ts} | API route conventions | | database-schema | **/prisma/**, **/drizzle/**, **/migrations/** | Schema design patterns | | testing | **/*.test.*, **/*.spec.* | Test writing conventions | | testing-general | **/*.test.*, **/*.spec.* | Framework-agnostic testing conventions (companion to testing) | | session-lifecycle | Always | Session start/end behaviors | | memory-session | **/memory/** | Memory repository session management |

See [rules/README.md](rules/README.md) for creating custom rules.

Also included:

| Component | Purpose | |-----------|---------| | [CLAUDE.md](CLAUDE.md) | Battle-tested behavioral rules template | | [Settings Template](examples/settings-template.json) | Full hook + permission configuration | | [Memory System](memory/) | Built-in opt-in: Claude remembers preferences and session context across runs (git-ignored for privacy) |


Philosophy

  1. Hooks for enforcement, CLAUDE.md for guidance -- Hooks fire deterministically every time. CLAUDE.md instructions are followed most of the time, but not guaranteed -- the model can forget or deprioritize a rule. If something MUST happen, make it a hook.
  1. Agent-scoped knowledge, not global bloat -- Design principles live in the frontend agent, not in every session's context. Security patterns live in the security-reviewer, not in CLAUDE.md.
  1. Context is currency -- Every token loaded into context is a token not available for your code. Keep MEMORY.md under 100 lines. Extract to topic files. Use path-scoped rules so irrelevant rules don't load.
  1. Hooks are free, context is cheap -- The 12 hook scripts cost zero tokens (they run outside Claude's context). CLAUDE.md adds ~2,300 tokens per session -- roughly 1-5% of a typical session. The blueprint saves more tokens than it costs by preventing redo cycles. See [BENCHMARKS.md](docs/BENCHMARKS.md#token-cost-per-component).
  1. Battle-tested over theoretical -- Every rule in this repo exists because something went wrong without it. The "WHY" matters more than the "WHAT".

Getting Started

[Quick Start](#quick-start) above is the fast path -- copy CLAUDE.md and you're going in 60 seconds. For the next step, pick the doc that fits you: new to Claude Code? Read [GETTING-STARTED.md](GETTING-STARTED.md) (concepts + a guided walkthrough). Just want the install commands and presets? Go straight to [SETUP.md](SETUP.md) (every option + a verification checklist).

Then grow into the rest with this order:

Recommended adoption path

  1. Start with [CLAUDE.md](CLAUDE.md) -- the behavioral rules template. Biggest impact with zero setup.
  2. Add 2-3 hooks -- [protect-config.sh](hooks/protect-config.sh) + [notify-file-changed.sh](hooks/notify-file-changed.sh) + [cost-tracker.sh](hooks/cost-tracker.sh). Copy to ~/.claude/hooks/ and wire into [settings.json](examples/settings-template.json).
  3. Read [WHY.md](docs/WHY.md) to understand the reasoning -- adapt, don't blindly copy.
  4. Add agents as your workflow matures -- start with verify-plan and code-reviewer.
  5. Set up the [memory system](memory/) when you need cross-session persistence — opt-in during ./setup.sh (answer Y).

Deep Dives

| | | | |:--|:--|:--| | [Architecture](docs/ARCHITECTURE.md) | [Settings Guide](docs/SETTINGS-GUIDE.md) | [Battle Stories](docs/WHY.md) | | System design, hook lifecycle, component relationships | Every env var, permission, and hook explained with rationale | The incidents and lessons behind every component | | [Benchmarks](docs/BENCHMARKS.md) | [Presets](docs/PRESETS.md) | [Cross-Tool Guide](docs/CROSS-TOOL-GUIDE.md) | | Token savings, cost impact, quality metrics | Ready-to-copy configs for solo, team, and CI/CD | Copilot, Cursor, Cline, Roo Code, OpenCode, and more (10 other tools) | | [FAQ](FAQ.md) | [Getting Started](GETTING-STARTED.md) | [Troubleshooting](TROUBLESHOOTING.md) | | Top community questions answered | From zero to productive in 30 minutes | Common issues and fixes | | [Setup Guide](SETUP.md) | [Case Studies](docs/CASE-STUDIES.md) | [Roadmap](docs/ROADMAP.md) | | Automated installer + verification checklist | Adopter stories and before/after metrics (submission-driven — be the first) | Project direction and what's next | | [Self-Monitoring](docs/SELF-MONITORING.md) | | | | Optional patterns: gitleaks pre-commit + memory-curator agent | | |


Common Questions

Works with my framework? Yes. The blueprint is framework-agnostic -- it configures Claude Code, not your stack. [More...](FAQ.md#what-framework-or-language-does-this-work-with)

Too advanced for me? No. Start with one file (CLAUDE.md). Add more only when you need it. [More...](FAQ.md#im-a-juniorintermediate-developer-is-this-for-me)

Which plan do I need? Works on Pro, Max, Team, Enterprise, and API. Hooks are free on all plans. [More...](FAQ.md#which-claude-code-plan-do-i-need-does-this-work-with-pro--max--api)

A colleague sent you this? Start here: [quickstart for referrals](FAQ.md#a-colleague-sent-me-this-link-what-do-i-do-first).


Plugin Compatibility

 

This blueprint is designed as a standalone configuration -- no plugins required. In fact, plugins can interfere with a custom setup:

Known issues:

  • Plugins that modify CLAUDE.md may overwrite your custom behavioral rules
  • Plugins that add hooks on the same events (e.g., Stop, PreToolUse) will stack with your hooks -- this can cause slowdowns or conflicting instructions
  • Plugins that inject context consume tokens from your context window, leaving less room for your agents and memory system
  • MCP server plugins work well alongside this setup -- they add tools, not rules, so there's no conflict

Recommendation: If you adopt this blueprint, audit your installed plugins and disable any that:

  1. Override CLAUDE.md or settings.json hooks
  2. Inject prompts on SessionStart (conflicts with your session-lifecycle rule)
  3. Add broad permissions that bypass your permission restrictions

Custom setup > generic plugins, because your setup encodes YOUR project's domain knowledge. A plugin can't know your architecture, your team's conventions, or your productio

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.