Web Engineering Agent Pack

Production engineering standards your coding agents can actually reuse.

Multi-stack skills, project profiles, review agents, safe installation, reproducible lockfiles, CI, backup/restore, and release tooling for Codex and Claude Code.

View on GitHub Quick start

$ ./weap doctor
$ ./weap install --profile core --with-third-party
$ ./weap project init --detect --team --project-dir=. --yes
$ ./weap audit

33first-party skills

6stack profiles

5opt-in MCP profiles

SHA-256 + attestationrelease integrity

Profiles

Load the engineering context that belongs to the repository.

Keep CORE global, then add only the stack delta your project uses—or use team mode for a self-contained repository.

MCP

External capabilities stay explicit, scoped, and reviewable.

WEAP keeps MCP separate from skill profiles. Plan first, inspect risk, then opt in per project or user scope.

$ ./weap mcp plan --profile development --scope project --project-dir=.
$ ./weap mcp install --profile development --scope project --project-dir=.
$ ./weap mcp doctor --scope project --project-dir=.

Workflow

From install to rollback without hand-managed agent folders.

Detect

Inspect safe project metadata and recommend a matching profile.

Install

Stage, validate, snapshot, and transactionally replace managed state.

Lock

Record profile, pack version, and SHA-256 hashes for reproducibility.

Audit

Lint skills/profiles, validate schemas/docs, and check context budgets.

Restore

Recover global or project-managed state from explicit snapshots.

Supply-chain trust

Built to be inspectable, reversible, and verifiable.

✓ Third-party skills pinned to reviewed Git commit SHAs

✓ Transactional global installs with rollback

✓ GitHub artifact provenance attestations for release ZIPs

✓ SHA-256 release checksums

✓ Linux, macOS, and Windows CI

✓ Security regression and historical migration tests

Quick start

One CLI. Existing scripts remain compatible.

Global CORE

./weap install \
  --profile core \
  --with-third-party

Next.js project

./weap project init \
  --profile nextjs \
  --project-dir=. \
  --yes

Symfony project

./weap project init \
  --profile symfony \
  --project-dir=. \
  --yes

Self-contained team mode

./weap project init \
  --detect --team \
  --project-dir=. --yes