graft

Reviews Jenkins plugin code for quality, security, and community standards. Use this agent when: you need a code review before committing Jenkins plugin code, want to audit plugin quality, or are checking compliance with Jenkins community standards. Example invocations: - "Review my Jenkins plugin code before submitting a PR" - "Audit this plugin for security issues" - "Check this PR against Jenkins community review standards" The agent produces a structured report with severity-ranked findings (P0/P1/P2), modeled on the review patterns of Jenkins core maintainers.

Writes tests for Jenkins plugins using JenkinsRule, RealJenkinsRule, Pipeline testing, and the Acceptance Test Harness. Use this agent when: (1) Jenkins plugin code needs test coverage; (2) You want config roundtrip, Pipeline, or snippetizer tests; (3) You need security tests for permission checks and XSS prevention; (4) You need ATH page object tests for UI verification. Examples: - "Write tests for my new Pipeline step" - "Add config roundtrip tests for all Describables" - "Create security tests for form validation endpoints" - "Generate Pipeline integration tests with BuildWatcher"

Implements Jenkins plugin code following community best practices. Use this agent when: writing new Jenkins plugin classes, implementing Pipeline steps, creating extension points, building configuration forms, or adding features to existing plugins. Examples: - "Implement a Pipeline step that caches Maven dependencies" - "Add a GlobalConfiguration page for my plugin" - "Create a Builder with form validation and help files" - "Migrate this Freestyle-only step to support Pipeline"

Jenkins plugin core architecture — extension points, Descriptor/Describable pattern, Stapler web framework, configuration binding, annotations, persistence, and project structure. Use this skill when writing, reviewing, or understanding Jenkins plugin Java code. Covers the foundational APIs and patterns every Jenkins plugin builds on: @Extension, @DataBoundConstructor, @DataBoundSetter, @Symbol, BuildStepDescriptor, GlobalConfiguration, and XStream persistence. Make sure to use this skill whenever the user mentions Jenkins plugin development, hpi files, Jenkins build steps, Jenkins global configuration, Manage Jenkins page, Jenkins XML persistence, or any Jenkins extension point — even if they just say "write a Jenkins plugin." Triggers on: Jenkins plugin, extension point, Descriptor, Describable, Stapler, DataBoundConstructor, config.jelly, hpi, Jenkins API, pom.xml Jenkins, Jenkins build step, GlobalConfiguration, Manage Jenkins, Jenkins persistence, SimpleBuildStep.

Jenkins Pipeline step implementation — Step/StepExecution pattern, CPS threading model, @Symbol naming, SynchronousNonBlockingStepExecution, durability with onResume(), and Pipeline-compatible API migration. Use this skill when implementing custom Pipeline steps, writing Jenkinsfile-compatible plugin code, or understanding how steps interact with the CPS VM thread. Make sure to use this skill whenever the user mentions Pipeline steps, custom Jenkinsfile steps, CPS threading, Step/StepExecution, or Pipeline credentials — even if they just say "make my plugin work in Pipeline." Triggers on: Pipeline step, StepExecution, workflow-step-api, CpsFlowDefinition, Jenkinsfile, @Symbol, SynchronousNonBlockingStepExecution, Pipeline plugin, Pipeline credentials, CPS thread, Pipeline compatible, workflow-cps.

Jenkins plugin code review expertise — security patterns, expert reviewer checklist, common anti-patterns, API misuse, and quality standards. Use this skill when reviewing Jenkins plugin code, auditing security, checking code against community standards, or preparing a PR for the jenkinsci organization. Encodes the actual review patterns of top Jenkins core maintainers: what they flag, what they expect, and what they reject. Make sure to use this skill whenever the user mentions Jenkins code review, plugin PR, Jenkins security audit, plugin quality check, Jenkins anti-patterns, or Jenkins best practices — even if they just say "review my plugin code." Triggers on: Jenkins code review, Jenkins PR review, Jenkins security audit, plugin quality, Jenkins anti-patterns, Jenkins best practices, plugin PR, jenkinsci review.

Jenkins plugin testing expertise — JenkinsRule, RealJenkinsRule, JenkinsSessionRule, Pipeline testing, config roundtrips, Acceptance Test Harness page objects, and expert-approved test patterns. Use this skill when writing tests for Jenkins plugins, choosing between test rules, setting up test dependencies, or understanding Jenkins-specific test utilities. Make sure to use this skill whenever the user mentions Jenkins plugin tests, config roundtrip, Pipeline test, snippetizer test, or Jenkins test harness — even if they just say "add tests for my plugin." Triggers on: JenkinsRule, RealJenkinsRule, JenkinsSessionRule, Jenkins plugin test, config roundtrip, WorkflowJob test, acceptance test harness, ATH, @WithoutJenkins, BuildWatcher, LoggerRule, jenkins-test-harness, mvn test Jenkins, HtmlUnit Jenkins.

Jenkins UI and frontend development — Jelly views, Design Library components, form controls, help files, JavaScript integration, and XSS prevention. Use this skill when writing config.jelly files, implementing Jenkins UI views, working with form validation, or applying Design Library patterns. Covers the full frontend stack: Jelly templating, Stapler form binding, CSS classes, dialog/notification JS APIs, and layout patterns. Make sure to use this skill whenever the user mentions Jenkins forms, Jelly files, Jenkins configuration pages, help files for Jenkins, Jenkins frontend, or Design Library — even if they just say "create the config form." Triggers on: config.jelly, global.jelly, Jelly view, Jenkins form, f:entry, f:textbox, f:select, Design Library, help-*.html, Jenkins UI, Jenkins frontend, Jenkins config page, Jelly XSS, Jenkins JavaScript, validateButton.