Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

codeforerunner

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

codeforerunner

Model-agnostic repository documentation tooling — installs /forerunner-* slash commands into 30+ agent CLIs

latest
Source
npmnpm
Version
0.4.5
Version published
Weekly downloads
129
Maintainers
1
Weekly downloads
 
Created
Source

codeForerunner — your codebase gets a Forerunner; your docs finally see the light

codeForerunner

Socket Badge

Model-agnostic repository documentation tooling. Ships a prompt pack for codebase analysis and doc generation, a thin Python CLI, an MCP server, drift-detection rules that keep docs honest — and native slash-command skills for Claude Code, Codex, Gemini CLI, and other agent CLIs.

Install

Install forerunner's prompt pack as skills into your agent CLI. Each documentation task becomes a slash command (/forerunner-readme, /forerunner-check, etc.) available inside Claude Code, Codex, Gemini CLI, and other agents. Authentication is handled by your existing agent subscription — no separate API key needed.

# From a cloned repo
./install.sh

# One-liner (auto-detects Claude Code, Codex, Gemini CLI)
curl -fsSL https://raw.githubusercontent.com/derek-palmer/codeforerunner/main/install.sh | bash

# npm
npx -y codeforerunner
npm install -g codeforerunner

# Windows
irm https://raw.githubusercontent.com/derek-palmer/codeforerunner/main/install.ps1 | iex

# Via Python CLI
pip install codeforerunner
forerunner install --all claude
forerunner install --all codex

Then in your agent:

/forerunner-scan        ← scan the repo first
/forerunner-readme      ← generate README
/forerunner-check       ← detect doc drift
/forerunner-refresh     ← scan + update all stale docs

Slash commands

CommandTaskPurpose
/forerunner-scanscanCollect repo evidence (run first)
/forerunner-readmereadmeGenerate or refresh README.md
/forerunner-api-docsapi-docsGenerate API reference docs
/forerunner-diagramsdiagramsGenerate Mermaid architecture diagrams
/forerunner-flowsflowsDocument system flows
/forerunner-arch-reviewarch-reviewRank architecture improvement candidates, inspired by Matt Pocock's /improve-codebase-architecture
/forerunner-stack-docsstack-docsStack-specific developer docs
/forerunner-version-auditversion-auditAudit pinned versions vs EOL
/forerunner-checkcheckCheck docs for staleness
/forerunner-reviewreviewDoc-impact summary for PR review
/forerunner-auditauditSecurity and dependency audit
/forerunner-changelogchangelogGenerate changelog from git log
/forerunner-initinit-agent-onboardingBootstrap or refresh AGENTS.md
/forerunner-refreshrefreshScan + check + update all stale docs in one pass

Slash command availability depends on the agent CLI. Claude Code, Codex, and Gemini CLI support all commands after install.

Skill install options

FlagEffect
./install.shAuto-detect all agents, prompt global vs local, install all skills
./install.sh --globalSkip prompt, install to global agent dirs (all projects)
./install.sh --localSkip prompt, install to .claude/skills/ and .agents/skills/ in cwd
./install.sh --only claudeClaude Code only
./install.sh --only codexCodex only
./install.sh --only geminiGemini CLI only
./install.sh --dry-runPreview, write nothing
./install.sh --listShow detected agents + skill list
./install.sh --uninstallRemove all installed skills

CLI

pip install codeforerunner
CommandPurpose
forerunner initResolve agent-onboarding bundle to stdout.
forerunner scanResolve scan bundle to stdout.
forerunner doc <task>Resolve base + partials + task bundle to stdout.
forerunner refreshOutput scan + check + all doc-task bundles in sequence for a full doc refresh.
forerunner checkRun drift-detection rules; no-op without forerunner.config.yaml.
forerunner doctorHealth report: skill parity, config. Add --fix to write a starter config.
forerunner mcp-serverServe prompt bundles as MCP tools over stdio (JSON-RPC 2.0).
forerunner install <agent>Install canonical skill into agent-specific directory. Add --all for all per-task skills.

Quick start

# Install skills into Claude Code
curl -fsSL https://raw.githubusercontent.com/derek-palmer/codeforerunner/main/install.sh | bash

# Or via npm
# npx -y codeforerunner

# In Claude Code:
# /forerunner-scan     → scans your repo
# /forerunner-readme   → generates README.md
# /forerunner-refresh  → updates all stale docs
# /forerunner-check    → checks for doc drift

GitHub Action

Add doc-drift detection to any repo's CI — fails the PR if docs contradict repo state.

# .github/workflows/doc-check.yml
name: Doc Check
on: [push, pull_request]

jobs:
  doc-check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6.0.2
      - uses: derek-palmer/codeforerunner@v0.4.5
        with:
          fail-on-drift: "true"   # set "false" to warn-only

No-op when forerunner.config.yaml is absent — safe to add before configuring rules.

Inputs

InputDefaultDescription
versionlatestcodeforerunner version to install
python-version3.11Python version
repoworkspace rootPath to check
fail-on-drifttrueExit non-zero on drift

Configuration

Copy forerunner.config.yaml.example to forerunner.config.yaml to opt in to drift rules. Generate a starter config with:

forerunner doctor --fix

Config fields

approaching_eol_threshold_months: 6

tasks:
  check:
    enabled_rules:
      - R1-no-cli
      - R2-no-pre-commit
      - R3-no-ci
      - R4-no-installer
      - R5-no-python-package
      - R7-no-mcp
      - R8-no-marketplace
      - RI1-missing-cli
      - RI5-missing-python-package
      - RI7-missing-mcp
      - RV1-version-drift
    ignore_paths:
      - docs/legacy/**/*.md

Drift rules

RuleFires when
R1-no-cliDoc denies having a CLI, but cli.py is present
R2-no-pre-commitDoc denies having pre-commit hooks, but .pre-commit-hooks.yaml present
R3-no-ciDoc denies having CI, but .github/workflows/*.yml present
R4-no-installerDoc denies having an installer, but installer.py present
R5-no-python-packageDoc denies having a Python package, but pyproject.toml present
R6-no-dockerDoc denies having Docker, but Dockerfile/compose.yml present
R7-no-mcpDoc denies having an MCP server, but mcp_server.py present
R8-no-marketplaceDoc denies having a marketplace, but marketplace.json present
RI1-missing-cliDoc references forerunner subcommands but cli.py absent
RI5-missing-python-packageDoc shows pip install codeforerunner but pyproject.toml absent
RI7-missing-mcpDoc references forerunner mcp-server but mcp_server.py absent
RV1-version-driftDoc pins codeforerunner==X.Y.Z differing from current version

MCP Server

forerunner mcp-server speaks JSON-RPC 2.0 over stdio and exposes one tool per prompts/tasks/*.md. A scan-first gate enforces SPEC V2: any tool except scan or init-agent-onboarding returns an error until scan has been called in the same session.

See examples/mcp/ for Claude Desktop and mcp-cli wiring examples.

Prompt pack

Prompts are bundled inside the package at src/codeforerunner/prompts/.

prompts/
├── system/base.md
├── partials/
│   ├── context-format.md
│   ├── output-rules.md
│   └── stack-hints.md
└── tasks/
    ├── scan.md          api-docs.md    audit.md
    ├── readme.md        diagrams.md    changelog.md
    ├── check.md         flows.md       version-audit.md
    ├── review.md        stack-docs.md  arch-review.md
    ├── refresh.md
    └── init-agent-onboarding.md

Docs

  • docs/getting-started.md — manual prompt use
  • docs/prompt-guide.md — how system, partial, and task prompts compose
  • docs/editor-agent-setup.md — adapting prompts to local agents
  • docs/roadmap.md — human-readable roadmap
  • docs/agent-distribution-design.md — packaging and installer design

Keywords

codeforerunner

FAQs

Package last updated on 29 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts