aurakit — плагин для Claude Code: что делает и как установить

<div align="center">

<img src="assets/hero.svg" width="900" alt="AuraKit — One command. Full stack. Zero compromise.">

<br/>

[![Version](https://img.shields.io/npm/v/%40smorky85/aurakit?style=flat-square&color=a855f7&label=AuraKit)](https://www.npmjs.com/package/@smorky85/aurakit)
[![Claude Code](https://img.shields.io/badge/Claude_Code-Native_Skill-7c3aed?style=flat-square&logo=anthropic&logoColor=white)](https://claude.ai/code)
[![License: MIT](https://img.shields.io/badge/license-MIT-22c55e?style=flat-square)](LICENSE)
[![Stars](https://img.shields.io/github/stars/smorky850612/Aurakit?style=flat-square&color=f59e0b&logo=github)](https://github.com/smorky850612/Aurakit/stargazers)
[![npm monthly](https://img.shields.io/npm/dm/%40smorky85/aurakit?style=flat-square&color=cb3837&label=installs%2Fmo&logo=npm)](https://www.npmjs.com/package/@smorky85/aurakit)
[![npm total](https://img.shields.io/npm/dt/%40smorky85/aurakit?style=flat-square&color=cb3837&label=total%20installs&logo=npm)](https://www.npmjs.com/package/@smorky85/aurakit)
[![Node](https://img.shields.io/badge/node-%3E%3D18-339933?style=flat-square&logo=node.js&logoColor=white)](package.json)

<br/>

<h3>46 Modes &nbsp;·&nbsp; 10 Hooks &nbsp;·&nbsp; 23 Agents &nbsp;·&nbsp; 6-Layer Security &nbsp;·&nbsp; 8 Languages &nbsp;·&nbsp; ~55% Token Savings</h3>

<p>
<a href="#-before--after">Before & After</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-quick-start">Quick Start</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-46-modes">46 Modes</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-quality-tiers">Tiers</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#%EF%B8%8F-how-it-works">Pipeline</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-6-layer-security">Security</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-new-in-v65">New in v6.5</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-why-aurakit">Why AuraKit</a>&nbsp;&nbsp;·&nbsp;&nbsp;
<a href="#-faq">FAQ</a>
</p>

</div>

---

## What is AuraKit?

**One command. Full-stack app. Production-ready.**

AuraKit is a [Claude Code](https://claude.ai/code) skill that replaces 20+ manual instructions with a single `/aura` command. It auto-detects what you need, scans your project, generates code with security checks on every file, and commits — all in one shot.

```bash
npx @smorky85/aurakit        # Install once (~30 seconds, auto-installs jq)
/aura build: login with JWT  # That's it. AuraKit handles the rest.
```

> [!TIP]
> **30-second install** → `npx @smorky85/aurakit` or `bash install.sh` (v2.0), then type `/aura` in any project. jq, Python, and git are auto-detected and installed if missing.

---

## 🔄 Before & After

<table>
<tr>
<th width="50%">❌ Without AuraKit</th>
<th width="50%">✅ With AuraKit</th>
</tr>
<tr>
<td>

```
You: "Build a login API"
Claude: *generates code*
You: "Wait, add input validation"
Claude: *regenerates*
You: "You forgot error handling"
Claude: *patches*
You: "Check for SQL injection"
Claude: *patches again*
You: "Now write tests"
Claude: *generates tests*
You: "The types are wrong..."
(30 min later, still going)
```

</td>
<td>

```bash
/aura build: login with JWT

# AuraKit automatically:
# → Scans your project stack (Scout/Haiku)
# → Plans file-by-file build order
# → Generates with SEC-01~15 rules
# → Validates types + security + tests
# → Commits: feat(auth): add login
# Done. One command. ~3 minutes.
```

</td>
</tr>
</table>

---

## ⚡ Quick Start

**1 — Install** (choose one)

```bash
# macOS (Homebrew)
brew install smorky85/tap/aurakit

# All platforms (npm)
npx @smorky85/aurakit

# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash

# Windows
npx @smorky85/aurakit

# From source
bash install.sh
```

> [!NOTE]
> All install methods auto-activate L3~L5 security hooks. **install.sh v2.0** auto-detects and installs: `jq` (winget/scoop/choco/brew/apt/dnf/yum/apk/pacman), checks Node.js, Python, and git. Configures settings.json via Python-first (jq fallback). Installs the AuraKit Nexus status bar.

**2 — Use**

```bash
# Recommended for daily use (hooks enforce security without per-action dialogs)
claude --dangerously-skip-permissions

/aura build: login with JWT        # BUILD mode (English)
/aura 로그인 기능 만들어줘         # BUILD mode (Korean · auto-detect)
/aura fix: TypeError in auth.ts    # FIX mode
/aura 코드 정리해줘                # CLEAN mode
/aura Vercel 배포 설정해줘         # DEPLOY mode
/aura 코드 리뷰해줘               # REVIEW mode
/aura! 버튼 색상 변경              # QUICK mode · ~60% fewer tokens
```

> [!WARNING]
> **What `--dangerously-skip-permissions` means:** Claude won't ask for confirmation on each tool use. This is intentional — AuraKit's hooks (`bash-guard.js`, `security-scan.sh`) replace per-action dialogs with automated enforcement. **Without `install.sh`, security relies only on L1/L2 (agent role isolation + tool blocklist).**
>
> **Safer first-time alternative:** Run `claude` without the flag. Claude will ask for permission on each Write/Edit/Bash call.

> [!IMPORTANT]
> Security rules in `~/.claude/rules/aurakit-security.md` are **always active** — applied to every Claude Code session automatically, even without running `/aura`.

**3 — Update** (existing users)

```bash
# Recommended — always fetches the latest version from npm
npx @smorky85/aurakit@latest

# From source (if you cloned the repo)
git pull origin main && bash install.sh

# One-liner (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/smorky850612/Aurakit/main/install.sh | bash
```

> [!TIP]
> Running the update command re-runs `install.sh` automatically — hooks, skills, and security rules are all refreshed in place. Your `.aura/` project data (memory, instincts, snapshots) is **never overwritten**.

---

## 🧬 DNA — 8 Core Principles

> AuraKit enforces these 8 principles in every mode, every turn, every output. Any response that violates them is not AuraKit.

<div align="center">

| # | Principle | Guarantee | Mechanism |
|:-:|:----------|:----------|:----------|
| **1** | ⚡ **FAST** | Faster than any skill | Session cache · ConfigHash · QUICK mode · Progressive Load |
| **2** | ✨ **FLASHY** | Most informative CLI output | StatusLine · Next Actions · Token Report · Pipeline display |
| **3** | 🔐 **SECURE** | Genuinely top-tier security | 6-layer gates · 10 hooks · SEC-01~15 · bash-guard · security-scan |
| **4** | 💰 **THRIFTY** | Max token savings even on Opus | Tiered Model · Fail-Only output · Progressive Load · Session cache |
| **5** | ♾️ **IMMORTAL** | Survives context loss | 65% compact guard · Snapshots · PostCompact restore · Session resume |
| **6** | 🧠 **EVOLVING** | Gets smarter with every use | Instinct learning · instinct:evolve · Pattern sharing |
| **7** | 🌐 **UNIVERSAL** | Any platform, any language | 8 languages · 46 modes · 23 agents · 5 platforms · Non-dev QUICK mode |
| **8** | 🏆 **TOP-TIER** | Best skill, no comparison | Sum of the above 7 |

</div>

---

## 🏆 Why AuraKit?

> "I can just prompt Claude myself" — Yes, but you'll repeat the same 20 instructions every session.

| | Manual Prompting | CLAUDE.md File | **AuraKit v6.5.0** |
|:---|:---:|:---:|:---:|
| Security enforcement | Hope for the best | Rules, no enforcement | **10 hooks enforce at write-time** |
| Context survival | Lost on compact | Partial | **Snapshot + PostCompact auto-restore** |
| Token efficiency | Wasteful | Manual | **~55% ECO · ~75% MAX (estimated)** |
| Code review | Manual | Manual | **4 agents in parallel** |
| Multi-language | English only | English only | **8 languages · 56+ commands** |
| Learns over time | Starts fresh | Starts fresh | **Instinct engine auto-saves patterns** |
| jq / tools | Manual setup | Manual setup | **Auto-installed on first run** |
| Install time | — | 30 min writing rules | **~30 seconds** |

---

## 🎯 46 Modes

AuraKit detects your intent from natural language. Use a namespace prefix (`build:`, `fix:`) when the mode is ambiguous.

### 5 Core Modes — covers 90% of daily use

| Mode | Invoke | What It Does |
|:-----|:-------|:-------------|
| **BUILD** | `/aura build: ...` or just describe it | Discovery → micro-plan → generate → triple verify → commit |
| **FIX** | `/aura fix: ...` or paste the error | Root-cause analysis → minimal change → verify |
| **REVIEW** | `/aura review:` | 4 parallel agents → VULN-NNN report, A–F grade |
| **CLEAN** | `/aura clean:` | Dead code removal, 250-line splits, deduplication |
| **DEPLOY** | `/aura deploy:` | Framework detect → env setup → deploy config → security recheck |

<details>
<summary><strong>📋 40 Extended Modes</strong> — Quality · Planning · Platform · Utility · Autopus-ADK · Auto</summary>

<br/>

**Quality & Testing**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **GAP** | `gap:`, match rate | Design ↔ implementation gap analysis (Match Rate %) |
| **ITERATE** | `iterate:`, auto-fix | Auto-improve until Match Rate ≥ 90% (max 5 cycles) |
| **TDD** | `tdd:`, test-first | 🔴 RED → 🟢 GREEN → 🔵 REFACTOR · coverage ≥ 70–90% |
| **QA** | `qa:`, docker logs | Zero-Script QA via real Docker log analysis |
| **QA:E2E** | `qa:e2e:setup` | Playwright E2E — auth / CRUD / responsive / CI pipeline |
| **DEBUG** | `debug:`, 5-why | 4-phase systematic debugging with root-cause tracing |

**Planning & Design**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **PM** | `pm:`, PRD, discovery | OST + JTBD + Lean Canvas + PRD · 5 PM agents in parallel |
| **PLAN** | `plan:`, 계획 | Structured plan → `.aura/docs/plan-*.md` |
| **DESIGN** | `design:`, DB 설계 | DB + API + UI workers parallel → cross-consistency check |
| **REPORT** | `report:`, 완료 보고서 | 4-perspective value report (user/biz/tech/ops) |
| **PIPELINE** | `pipeline:`, 개발 순서 | 9-phase guide: Starter / Dynamic / Enterprise |
| **BRAINSTORM** | `brainstorm:`, HMW | HMW + priority matrix → actionable ideas |

**Advanced Operations**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **ORCHESTRATE** | `orchestrate:`, leader | Leader / Swarm / Council / Watchdog multi-agent patterns |
| **BATCH** | `batch:[A,B,C]` | Up to 5 features in parallel Git Worktrees |
| **LOOP** | `batch:loop:` `until:pass` | Autonomous iteration loop until condition met |
| **FINISH** | `finish:`, squash | Branch squash merge + Worktree cleanup |
| **ARCHIVE** | `archive:`, archive:list | Archive features without deleting |

**Platform Specialists**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **MOBILE** | `mobile:`, react native | React Native / Expo specialized pipeline |
| **DESKTOP** | `desktop:`, electron | Electron / Tauri specialized pipeline |
| **BAAS** | `baas:`, supabase | Supabase / Firebase / bkend integration guide |
| **PAYMENT** | `payment:`, stripe, polar, toss | Stripe · LemonSqueezy · Polar · TossPayments · StepPay — full subscription billing pipeline **(default PRO tier)** |

**Intelligence & Configuration**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **INSTINCT** | `instinct:show` | View / manage / evolve learned project patterns |
| **LANG** | `lang:python`, `lang:go` | Force language-specific code reviewer (10 languages) |
| **MCP** | `mcp:setup`, `mcp:list` | Install & configure 14 MCP server types |
| **CONTENT** | `content:`, 블로그 | Blog, market research, IR deck, tech docs, email, social |
| **STATUS** | `status`, 현재 상태 | Current work state from `.aura/snapshots/` |
| **STATUS:HEALTH** | `status:health` | Health Dashboard — Match Rate · security score · coverage · Tech Debt |
| **CONFIG** | `config:set` | Manage `.aura/config.json` settings |

**Utility**

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **STYLE** | `style:`, learning | Switch output persona: learning / expert / concise |
| **SNIPPETS** | `snippets:`, 스니펫 | Save and reuse prompt templates |
| **QUICK (`!`)** | `/aura! request` | Protocol-minimal, single file, ~60% token savings |
| **BUILD_RESOLVER** | *(auto on V1 fail)* | Language-specific build error resolver (7 languages) |

**Autopus-ADK Modes** *(absorbed v6.5)*

| Mode | Trigger | What It Does |
|:-----|:--------|:-------------|
| **SPEC** | `spec:new`, `spec:` | EARS-format spec → `spec.md` + `acceptance.md` (Given/When/Then) |
| **LORE** | `lore:commit`, `lore:` | 9-trailer decision commit (Constraint/Rejected/Confidence/…/Related) |
| **ANNOTATE** | `annotate:`, `ax:` | @AX inline annotations (NOTE/WARN/ANCHOR/TODO · `[AUTO]` prefix · CYCLE tracking) |
| **EXPERIMENT** | `experiment:`, `xloop:` | XLOOP autonomous experiment loop (measure→change→decide, circuit breaker N=10) |
| **EXPLAIN** | `explain:`, 어떻게 동작 | Step-by-step code explanation (learning-first) |
| **ROLLBACK** | `rollback:`, undo | Safe revert with git status confirmation before reset |
| **MIGRATE** | `migrate:`, upgrade | Version migration pipeline — dependency upgrades + breaking change handling |
| **ESCALATE** | `escalate:` | Promote current task to Opus sub-agent · auto-return to base tier after |

</details>

---

## 📊 Quality Tiers

| Tier | Invoke | Scout | Builder | Reviewer | TestRunner | Savings (est.) |
|:-----|:-------|:------|:--------|:---------|:-----------|:---------------|
| **QUICK** | `/aura! request` | — | Sonnet | — | — | ~60% |
| **ECO** *(default)* | `/aura request` | Haiku | Sonnet | Sonnet | Haiku | ~55% |
| **PRO** | `/aura pro request` | Haiku | **Sonnet+Amplifier v2** | Sonnet | Haiku | ~20% |
| **MAX** | `/aura max request` | Sonnet | **Opus** | **Opus** | Sonnet | ~0% |

- **QUICK** — Color changes, text edits, single-file tweaks
- **ECO** — Feature development, most daily work *(recommended)*
- **PRO** — Auth, payments, complex business logic (Sonnet+Amplifier v2, Opus removed)
- **MAX** — Security audits, architecture design, production-critical features

> [!NOTE]
> All token savings figures are **estimates** based on tier routing and context load reduction. Context load reduction (v5.1 82KB → v6 20KB) is **measured**. Independent benchmarks (like Aider's Polyglot 64%) do not exist for AuraKit.

---

## ⚙️ How It Works

```mermaid
flowchart TD
    A(["/aura request"]) --> B["Mode Detection\n46 modes · auto from natural language"]
    B --> C["Scout Agent · Haiku\nProject scan → .aura/project-profile.md\nConfigHash: skip if unchanged"]
    C --> D["Micro-Plan\n200-token file-by-file build order\nInstinct patterns loaded"]
    D --> E["Builder Agent\nECO: Sonnet  ·  PRO: Sonnet+Amp v2  ·  MAX: Opus\nSEC-01~15 + Language Reviewer"]
    E --> F["Security Hooks\nbash-guard.js · security-scan.sh\nL3 + L5 enforcement"]
    F --> G{"Triple Verify\n(parallel)"}
    G --> H["V1 · Build / Type Check"]
    G --> I["V2 · Security + Review · Sonnet"]
    G --> J["V3 · TestRunner · Haiku"]
    H --> K["Snapshot Checkpoint\n.aura/snapshots/current.md\nInstinct auto-save"]
    I --> K
    J --> K
    K --> |"More files"| E
    K --> |"Complete"| L(["git commit\nNext Actions report\nToken savings report"])
```

---

## 🔐 6-Layer Security

Every generated file passes through up to 6 security gates.

<div align="center">

| Layer | Name | What It Checks | Active Without install.sh? |
|:-----:|:-----|:---------------|:--------------------------:|
| **L1** | Agent Roles | Per-agent read/write boundaries in system prompts | ✅ Always |
| **L2** | Disallowed Tools | Write/Edit/Bash blocklist for read-only agents | ✅ Always |
| **L3** | Bash Guard | `rm -rf`, `DROP TABLE`, `eval`, dangerous shell commands | ❌ Requires install.sh |
| **L4** | Worktree Isolation | Agent subprocesses run in isolated Git Worktrees | ❌ Requires install.sh |
| **L5** | Security Scan | API keys, hardcoded secrets, SQL injection, XSS, JWT in localStorage | ❌ Requires install.sh |
| **L6** | Dependency Audit | `npm audit --audit-level=high` on BUILD and FIX | ✅ Auto in pipeline |

</div>

> [!WARNING]
> **L3, L4, L5 are only active after running `install.sh` or `npx @smorky85/aurakit`.** Without installation, only L1 (agent role boundaries) and L2 (tool blocklist) protect you. If you skip installation, omit `--dangerously-skip-permissions` so manual confirmation acts as your safety net.

**Automatically blocked by SEC-01~15:**

```
localStorage.setItem('token', ...)    → httpOnly Cookie required  (SEC-02)
Raw SQL string concatenation          → parameterized queries      (SEC-01)
eval() / exec() with user input       → blocked                    (SEC-05)
Hardcoded API keys / passwords        → blocked                    (SEC-03)
.env not in .gitignore                → commit blocked             (SEC-10)
Math.random() for security tokens     → crypto.randomBytes()       (SEC-08)
HTTP fallback in external calls       → HTTPS only                 (SEC-09)
```

<details>
<summary><strong>🔒 Full SEC-01~15 OWASP Reference</strong></summary>

<br/>

```
SEC-01  SQL injection prevention      SEC-09  HTTPS-only external calls
SEC-02  Auth tokens (httpOnly Cookie) SEC-10  .gitignore enforcement
SEC-03  Secret management             SEC-11  NoSQL/Command/XML/LDAP injection
SEC-04  Input validation (Zod/Pydantic/@Valid) SEC-12  Cryptography (AES-256+)
SEC-05  eval/exec blocking            SEC-13  Dependency audit
SEC-06  Error info leakage prevention SEC-14  Security event logging
SEC-07  CORS whitelist enforcement    SEC-15  SSRF prevention
SEC-08  Secure random (crypto module)
```

All 15 rules are enforced both inline (code generation) and at runtime (security-scan.sh hook on every Write/Edit).

</details>

---

## ✨ New in v6.5

<details>
<summary><strong>🤖 Autopus-ADK Absorption — 16 Specialized Agents + 4 New Modes</strong></summary>

<br/>

v6.5 fully absorbs the Autopus-ADK framework ("A harness of the agents, by the agents, for the agents"):

**16 New Specialized Agents:**
`planner` · `executor` · `tester` · `validator` · `reviewer` · `security-auditor` · `annotator` · `architect` · `debugger` · `deep-worker` · `devops` · `explorer` · `frontend-specialist` · `perf-engineer` · `spec-writer` · `ux-validator`

**4 New Modes:**

| Mode | Command | What It Does |
|:-----|:--------|:-------------|
| **SPEC** | `/aura spec:new` | EARS-format spec with Given/When/Then acceptance criteria |
| **LORE** | `/aura lore:commit` | 9-trailer decision tracking commit for architectural decisions |
| **ANNOTATE** | `/aura annotate:` | @AX inline code annotations (NOTE/WARN/ANCHOR/TODO) |
| **EXPERIMENT** | `/aura experiment:` | XLOOP autonomous experiment loop with circuit breaker (N=10) |

**Key Concepts Absorbed:**
- RALF loop: RED→GREEN→REFACTOR→LOOP (max 3 retries)
- TRUST 5 review: Tested/Readable/Unified/Secured/Trackable
- Lead/Builder/Guardian agent team topology
- ICE scoring + SCAMPER + MoSCoW (brainstorming)
- Worktree isolation R1-R7 (3-check conflict detection)
- Behavioral assertion rule (NoError 단독 금지 — observable behavior required)

</details>

<details>
<summary><strong>✅ Claude Code Compliance — Hook cleanup · SKILL.md -105 lines · Resource splits</strong></summary>

<br/>

v6.5 brings AuraKit into full compliance with Claude Code official guidelines:

| Change | Before | After |
|:-------|:-------|:------|
| Hook events | 16 events (incl. `TeammateIdle` which CC doesn't emit) | **10 valid CC events only** |
| SKILL.md size | 662 lines | **557 lines** (-105 lines) |
| `build-resolvers.md` | 1,352 lines (monolithic) | **41-line router + 7 language files** |
| `payment-pipeline.md` | 1,043 lines (monolithic) | **251-line router + 5 provider files** |
| PRO tier model | Opus | **Sonnet+Amplifier v2** (Opus removed from PRO) |

- **TeammateIdle removed** — not a real Claude Code event; agent memory now saved via `SubagentStop` hook
- **Progressive Load** — resource files split by language/provider so only the needed file loads per task

</details>

---

## ✨ New in v6.4

<details>
<summary><strong>💳 PAYMENT Mode — Stripe · LemonSqueezy · Polar · TossPayments · StepPay</strong></summary>

<br/>

v6.4 adds a dedicated payment pipeline for subscription billing — the most security-critical feature in any SaaS:

```bash
/aura payment: Stripe 구독 결제 붙여줘       # 한국어
/aura payment: add Stripe subscription billing  # English
/aura payment: TossPayments 정기결제 연동      # 한국 서비스
```

| Provider | Market | Tax Handling | Subscription | Recommended for |
|:---------|:-------|:-------------|:-------------|:----------------|
| **Stripe** | Global | Manual (Stripe Tax) | ✅ Full | Global SaaS |
| **LemonSqueezy** | Global | ✅ Auto (MoR) | ✅ Full | Digital products |
| **Polar** | Global | ✅ Auto (MoR) | ✅ | Open source |
| **TossPayments** | 🇰🇷 Korea | ❌ | ✅ Regular billing | 국내 서비스 |
| **StepPay** | 🇰🇷 Korea | ❌ | ✅ | 한국 BNPL |

**What it builds automatically:**
- DB schema: `subscription_plans` + `subscriptions` + `webhook_events`
- Checkout → subscription create → billing portal flow
- Webhook handler with **signature verification** + idempotency (`INSERT ON CONFLICT`)
- Subscription middleware for route access control
- `.env.example` with all required keys

> ⚠️ **Default tier: PRO** (Sonnet+Amplifier v2) — payment code is business-critical. Security audit (VULN-001~012) runs automatically.

</details>

<details>
<summary><strong>🚀 install.sh v2.0 — Zero-friction setup</strong></summary>

<br/>

v6.3 completely rewrites the installer with intelligent dependency management:

| Feature | v6.2 | v6.3 |
|:--------|:-----|:-----|
| jq installation | Warn and exit if missing | **Auto-install** (winget/scoop/choco/brew/apt/dnf/yum/apk/pacman) |
| Settings update | jq required | **Python-first** (jq fallback — works without jq) |
| OS detection | None | `uname -s` → Darwin / Linux / Windows (MINGW/MSYS/CYGWIN) |
| Node.js check | None | **Hard check** — exits with install link if missing |
| Python check | None | **Soft check** — warns if missing (statusline gracefully degrades) |
| git check | None | **Soft check** — warns if missing |
| Language filter | All languages | `--lang=ko,en,jp,zh,es,fr,de,it` selective install |
| Status bar | Not installed | **AuraKit Nexus** auto-installed |

```bash
bash install.sh                    # Full install (all languages)
bash install.sh --lang=en,ko       # English + Korean only
```

</details>

<details>
<summary><strong>📊 AuraKit Nexus Status Bar</strong> — Real-time token & session info</summary>

<br/>

install.sh v2.0 installs the AuraKit Nexus status bar automatically:

```
💰 ECO | ctx: 23% | ↑12.4K ↓8.1K = 20.5K (7회) | 주간: 143K | /aura review
```

- **Subscription users** → daily/weekly remaining % (일↓88% 주↓92%)
- **API users** → actual cost display ($0.23)
- **Auto-resizes**: 3-line (≥80 cols) · 2-line · 1-line (<55 cols)
- **Language auto-detect**: 한국어/日本語/中文/English/...

</details>

<details>
<summary><strong>🪝 10 Hook Events — Core lifecycle automation</strong></summary>

<br/>

AuraKit registers 10 valid Claude Code hook events covering the full agent lifecycle:

| Hook Event | Handler File | Function |
|:-----------|:-------------|:---------|
| `SessionStart` | `pre-session.sh` | `.env` security · package manager detect · snapshot check |
| `UserPromptSubmit` | `korean-command.js` | IME reverse-transliteration routing |
| `UserPromptSubmit` | `auradkit-detect.js` | Autopus-ADK detect + routing |
| `PreToolUse` | `security-scan.sh` | Secret pattern detection **(L5)** |
| `PreToolUse` | `bash-guard.js` | Dangerous command blocking **(L3)** |
| `PostToolUse` | `build-verify.sh` | Compile / type-check after every file |
| `PostToolUse` | `bloat-check.sh` | 250-line split warning |
| `PostToolUse` | `instinct-auto-save.js` | Instinct pattern auto-save |
| `PostToolUse` | `auto-format.js` | Prettier / gofmt / black / rustfmt |
| `PostToolUse` | `governance-capture.js` | Architecture decision audit trail |
| `PostToolUseFailure` | `post-tool-failure.js` | MCP recovery + failure tracking |
| `Stop` | `session-stop.js` | Session metrics · Instinct hints · incomplete task alert |
| `PreCompact` | `pre-compact-snapshot.sh` | Save context state before compaction |
| `PostCompact` | `post-compact-restore.sh` | Restore context after compaction |
| `SubagentStart` | `subagent-start.js` | Agent lifecycle — registration + spawn limit check |
| `SubagentStop` | `subagent-stop.js` | Agent completion + memory save (replaces TeammateIdle) |

</details>

<details>
<summary><strong>🎯 STATUS:HEALTH — Mode 36 — Project Health Dashboard</strong></summary>

<br/>

```bash
/aura status:health
```

Generates a real-time project health report:

```
╔══════════════════════════════════════════════════╗
║           AuraKit Health Dashboard               ║
╠══════════════════════════════════════════════════╣
║  Match Rate:    █████████░  87%  (target: ≥90%)  ║
║  Security:      ██████████  98%  (SEC-01~15)      ║
║  Test Coverage: ████████░░  78%  (target: ≥80%)  ║
║  Tech Debt:     ████░░░░░░  Low  (12 items)       ║
║  Doc Lifecycle: ██████░░░░  61%  (needs update)   ║
╠══════════════════════════════════════════════════╣
║  Recommended: /aura iterate  →  /aura tdd        ║
╚══════════════════════════════════════════════════╝
```

</details>

---

## ✨ More v6 Features

<details>
<summary><strong>🧠 Sonnet Amplifier</strong> — Opus-level quality from Sonnet</summary>

<br/>

AuraKit v6 makes Sonnet produce Opus-quality code by forcing structured reasoning before every file:

1. **I/O Contract** — Define types, return values, error cases
2. **Existing Code Check** — Verify import/naming/style compatibility
3. **Edge Case Discovery** — Side effects? Concurrency? Input boundaries? External failures?
4. **SEC/Q Rule Selection** — Pick applicable security & quality rules
5. **Then implement** — Only after all 4 steps

This eliminates Sonnet's tendency to rush to code, producing measurably better output.

</details>

<details>
<summary><strong>🧠 Instinct Learning Engine</strong> — AuraKit gets smarter with every session</summary>

<br/>

AuraKit learns your project's patterns after each BUILD/FIX and applies them automatically on the next run.

```bash
/aura instinct:show              # All learned patterns
/aura instinct:show auth         # Filter by category
/aura instinct:prune             # Remove low-score patterns
/aura instinct:evolve            # Auto-improve + integrate anti-patterns
/aura instinct:export            # Backup / share with team
/aura instinct:import team.json  # Import from another project
/aura instinct:reset             # ⚠️ Reset all patterns (irreversible)
```

| Before install.sh | After install.sh |
|:------------------|:-----------------|
| Patterns saved by Claude's judgment after BUILD/FIX | `instinct-auto-save.js` triggers on every Write/Edit — **fully automated** |
| Semi-automated | **Fully automated** |

</details>

<details>
<summary><strong>🌐 Language-Specific Code Reviewers</strong> — 10 languages with framework awareness</summary>

<br/>

AuraKit auto-detects your project language and applies a specialized reviewer in the V2 step.

| Language | Reviewer Focus |
|:---------|:--------------|
| TypeScript | Strict null checks, React/Next.js/NestJS patterns, generic type safety |
| Python | Type hints, async patterns, FastAPI/Django/Flask idioms |
| Go | Goroutine safety, error wrapping, interface design |
| Java | Generics, Spring patterns, checked exception handling |
| Rust | Ownership, lifetimes, unsafe usage review |
| Kotlin | Coroutines, null safety, idiomatic style |
| C++ | Memory safety, RAII, smart pointer usage |
| Swift | ARC, optionals, Combine / async-await patterns |
| PHP | Type coercion risks, PDO usage, injection vectors |
| Perl | Modern::Perl, regex safety |

```bash
/aura lang:python review:        # Force Python reviewer
/aura lang:go fix: goroutine leak
```

</details>

<details>
<summary><strong>🔌 14 MCP Server Configurations</strong></summary>

<br/>

```bash
/aura mcp:setup           # Interactive setup wizard
/aura mcp:list            # Show all 14 available configs
/aura mcp:check           # Verify installed servers
/aura mcp:add playwright  # Add a specific server
```

Supported: Playwright · GitHub · Slack · Linear · Notion · Supabase · PostgreSQL · MongoDB · Redis · Stripe · Vercel · AWS · Sanity · and more.

</details>

<details>
<summary><strong>📍 Next Actions System</strong> — Auto-suggest after every task</summary>

<br/>

After every mode completion, AuraKit shows what to do next and reports real token savings:

```
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📍 Done: BUILD — JWT Login (8 files)
💰 Token Report:
   Baseline (manual est.): ~18,200 tokens
   Actual used:             ~7,800 tokens
   Saved: 57%  (10,400 tokens)
   ├─ Discovery effect:     -3,200 (삽질 방지)
   ├─ Tier model effect:    -4,800 (haiku Scout + sonnet V2)
   ├─ Cache hit:            -1,500 (session cache + ConfigHash)
   └─ Instinct reuse:         -900 (3 patterns applied)
📊 Pipeline: ████████░░░░ 4/7
   PM ✓ → PLAN ✓ → DESIGN ✓ → BUILD ✓ → REVIEW → ITERATE → DEPLOY
🔜 Next: /aura review → /aura deploy
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
```

</details>

<details>
<summary><strong>🌐 Cross-Platform (5 Platforms)</strong> — Claude Code, Codex, Cursor, Manus, Windsurf</summary>

<br/>

| Platform | Support | Setup | Model Mapping |
|:---------|:-------:|:------|:-------------|
| **Claude Code** | ✅ Full | Native — no extra setup | haiku / sonnet / opus |
| **OpenAI Codex CLI** | ✅ Full | SKILL.md auto-recognized | haiku→gpt-4o-mini, sonnet→gpt-4o, opus→o3 |
| **Cursor** | ✅ Supported | `.cursorrules`, Agent Mode | Cursor model selector |
| **Manus** | ✅ Supported | System prompt + multi-agent | Manus routing |
| **Windsurf** | ✅ Supported | `.windsurfrules`, Cascade | Windsurf selector |
| **Aider** | ⚠️ Partial | `.aider.conf.yml` | BUILD/FIX only |
| **Gemini CLI** | 🔬 Experimental | System prompt | Unverified |

```bash
npx @smorky85/aurakit                    # Claude Code (default)
npx...