dotclaude

Reviews code for real bugs: off-by-ones, null derefs, race conditions, swallowed errors. Skips style nitpicks.

OWASP-style review: injection, auth, data exposure, weak crypto. Severity-ranked with file:line + fix.

Finds real bottlenecks. DB N+1, memory leaks, blocking calls, re-renders.

Cross-references docs against actual source. Flags drift, missing params, dead references.

Builds production-grade UI. Tokens-first, anti-AI-slop aesthetics, design tokens enforced.

Bootstrap and customize dotclaude in any project. Copies the full template into .claude/ if missing, then tunes every config file to match your stack.

Find and fix a bug. Default is the careful path (reproduce, investigate, test). Add `--fast` for emergency hotfix mode.

Commit, push, create PR with confirmation at every step. Blocks secrets and force-push.

Review PR or staged changes via specialist agents. Synthesizes a unified severity-ranked report.

Strict red-green-refactor TDD loop. Failing test, then minimum code, then refactor. Commits after each cycle.

Explain code with one-sentence summary, mental model, ASCII diagram, and modification guide.

Safely refactor with tests as a safety net. Writes tests first if none exist.

Write comprehensive tests covering happy/edge/error/concurrency paths. Verifies tests actually catch bugs.

Estimate per-turn token cost of your .claude/ configuration and CLAUDE.md. Always-loaded vs path-scoped vs invoked-only, with top contributors. Use --api for exact counts via Anthropic's count_tokens endpoint.