
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@copoint-ai/waypoint-cli
Advanced tools
WayPoint - AI-driven development framework with agent personas for Claude Code
██╗ ██╗ █████╗ ██╗ ██╗██████╗ ██████╗ ██╗███╗ ██╗████████╗
██║ ██║██╔══██╗╚██╗ ██╔╝██╔══██╗██╔═══██╗██║████╗ ██║╚══██╔══╝
██║ █╗ ██║███████║ ╚████╔╝ ██████╔╝██║ ██║██║██╔██╗ ██║ ██║
██║███╗██║██╔══██║ ╚██╔╝ ██╔═══╝ ██║ ██║██║██║╚██╗██║ ██║
╚███╔███╔╝██║ ██║ ██║ ██║ ╚██████╔╝██║██║ ╚████║ ██║
╚══╝╚══╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝╚═╝ ╚═══╝ ╚═╝
AI-driven development framework for Claude Code
WayPoint bridges the gap between product vision and working code by combining structured specification workflows with AI agent personas. It generates project scaffolding, Claude Code slash commands, and specialized agents that guide you through discovery, specification, architecture, planning, implementation, and review.
Modern AI coding assistants are powerful but lack context. They don't know your architecture patterns, testing conventions, or quality standards. Every conversation starts from scratch.
WayPoint solves this by:
The result: Claude Code sessions that understand your project from the first prompt.
WayPoint structures development into clear phases, each with a dedicated slash command:
| Phase | Command | Agent | Purpose |
|---|---|---|---|
| Discover | /waypoint.discover | Analyst | Explore requirements, risks, constraints |
| Brainstorm | /waypoint.brainstorm | Brainstorm Coach | Creative ideation with proven techniques |
| Constitute | /waypoint.constitute | Architect | Review project principles |
| Specify | /waypoint.specify | Product Manager | Create feature specifications |
| Clarify | /waypoint.clarify | Analyst | Resolve ambiguities |
| Architect | /waypoint.architect | Architect | Design technical solutions |
| Plan | /waypoint.plan | Scrum Master | Break into executable tasks |
| Implement | /waypoint.implement | Developer | Write code following patterns |
| Review | /waypoint.review | QA | Verify quality and compliance |
Each agent has a distinct personality, responsibilities, and commands:
| Agent | ID | Role |
|---|---|---|
| Analyst | /waypoint.agents.analyst | Requirements discovery and risk identification |
| Brainstorm Coach | /waypoint.agents.brainstorm | Creative ideation and innovation facilitation |
| Product Manager | /waypoint.agents.pm | Specifications and user stories |
| Architect | /waypoint.agents.architect | System design and ADRs |
| Scrum Master | /waypoint.agents.sm | Task breakdown and dependencies |
| Developer | /waypoint.agents.dev | Implementation following patterns |
| QA Engineer | /waypoint.agents.qa | Code review and quality gates |
| Module Architect | /waypoint.agents.modarch | Extending WayPoint itself |
Full-Stack Frameworks
Libraries / Plain Languages
See Internal Installation Guide for one-time authentication setup.
npx @copoint-data/waypoint-cli@alpha init
git clone https://github.com/CoPoint-Data/waypoint-cli.git
cd waypoint-cli
npm install
npm run build
npm link
npx @copoint-data/waypoint-cli@alpha init
This launches an interactive wizard that asks about:
your-project/
├── .claude/
│ └── commands/ # Claude Code slash commands
│ ├── waypoint.discover.md
│ ├── waypoint.specify.md
│ ├── waypoint.architect.md
│ └── ...
│ └── waypoint/
│ └── agents/ # Agent personas
│ ├── dev.md
│ ├── pm.md
│ └── ...
├── .waypoint/
│ ├── constitution.md # Project principles (READ FIRST)
│ ├── config.yaml # Project configuration
│ ├── templates/ # Document templates
│ ├── specs/ # Generated specifications
│ ├── plans/ # Technical plans
│ └── tasks/ # Executable tasks
└── CLAUDE.md # Project memory for Claude
claude
Claude automatically reads CLAUDE.md and understands your project context.
> /waypoint.discover
I'll adopt the Analyst persona and help explore your requirements...
> /waypoint.agents.dev
🎭 Developer Agent Activated
I'm now operating as your Senior Developer. I'll implement features
following Clean Architecture patterns and write tests with Vitest.
Available commands:
- implement {task}: Implement a specific task
- test: Run tests for current work
- lint: Run linter and fix issues
- refactor {target}: Refactor following patterns
- exit: Exit developer persona
Every WayPoint project has a constitution (.waypoint/constitution.md) that defines:
All agents reference this constitution, ensuring consistent guidance.
Agent files include code examples specific to your stack + architecture combination:
## Code Examples
### Entity (Domain Layer)
\`\`\`typescript
// domain/entities/user.ts
export class User {
constructor(
public readonly id: UserId,
public readonly email: Email,
private passwordHash: string
) {}
verifyPassword(password: string): boolean {
return bcrypt.compareSync(password, this.passwordHash)
}
}
\`\`\`
These examples teach Claude your exact patterns.
WayPoint generates templates for specifications, plans, and tasks:
npx @copoint-data/waypoint-cli@alpha init # Initialize new project
npx @copoint-data/waypoint-cli@alpha init --yes # Use defaults (detect from directory)
npx @copoint-data/waypoint-cli@alpha extend # Add new stacks/architectures (coming soon)
| Command | Description |
|---|---|
/waypoint.discover | Start discovery phase with Analyst |
/waypoint.constitute | Review project constitution |
/waypoint.specify | Create feature specification |
/waypoint.clarify | Resolve specification ambiguities |
/waypoint.architect | Create technical design |
/waypoint.plan | Break design into tasks |
/waypoint.implement | Implement a task |
/waypoint.review | QA review implementation |
/waypoint.extend | Add new modules to WayPoint |
Each agent supports these commands when activated:
| Command | Description |
|---|---|
help | Show available commands |
exit | Exit current persona |
Plus role-specific commands like discover, spec, design, implement, review, etc.
project:
name: my-project
type: greenfield
track: standard
stack:
id: nextjs-app-router
language: typescript
database:
type: postgresql
orm: prisma
migrations: prisma migrate dev
auth:
strategy: jwt
provider: custom
architecture:
primary: clean-architecture
testing:
unit: vitest
e2e: playwright
linter: biome
formatter: biome
typeChecker: tsc
# Run tests
npm test
# Run tests in watch mode
npm run test:watch
# Type check
npm run typecheck
# Lint
npm run lint
# Format
npm run format
# Full check (typecheck + lint + test)
npm run check
src/
├── domain/ # Core business logic
│ ├── entities/ # Project, Stack, Architecture, Agent
│ ├── value-objects/ # FilePath, Identifier, Version
│ └── interfaces/ # Repository interfaces
├── application/ # Use cases and services
│ ├── ports/ # Generator interfaces
│ └── services/ # Generator implementations
├── infrastructure/ # External concerns
│ └── file-writer.ts # File system operations
└── presentation/ # CLI and data
├── cli/ # Commander.js CLI
└── data/ # Stack/Architecture registries
WayPoint is designed to be extended with new stacks, architectures, and modules.
src/presentation/data/stacks/index.tssrc/presentation/data/architectures/index.tsWayPoint is built on these beliefs:
Discover → Specify → Architect → Plan → Implement → Review
by CoPoint AI
FAQs
WayPoint - AI-driven development framework with agent personas for Claude Code
We found that @copoint-ai/waypoint-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.