
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
codingbuddy
Advanced tools
Multi-AI Rules MCP Server - One source of truth for AI coding rules across all AI assistants
A NestJS-based Model Context Protocol (MCP) server that provides AI coding assistants with project-specific context and rules.
# Initialize project configuration (AI-powered)
npx codingbuddy init
# This analyzes your project and creates codingbuddy.config.json
| Command | Description |
|---|---|
codingbuddy init | Analyze project and generate configuration |
codingbuddy init --team | Auto-detect installed AI tools and generate adapter configs |
codingbuddy mcp | Start MCP server (stdio mode by default) |
codingbuddy install <source> | Install plugin from git URL or registry |
codingbuddy search <query> | Search plugins in registry |
codingbuddy plugins | List installed plugins |
codingbuddy update [name] | Update outdated plugins |
codingbuddy uninstall <name> | Uninstall plugin |
codingbuddy --help | Show help |
codingbuddy --version | Show version |
| Resource | Description |
|---|---|
config://project | Project configuration (tech stack, architecture, language) |
rules://rules/core.md | Core workflow rules |
rules://rules/project.md | Project setup rules |
rules://agents/{name}.json | Specialist agent definitions |
| Tool | Description |
|---|---|
activate | One-shot entry point returning rules, primary agent, specialists, and discussion format for a prompt. Preferred over parse_mode in Claude Code |
suggest_rules | Analyze execution history for repeated failure patterns and generate draft rule suggestions. Proposed for human review ā never auto-applied |
get_project_config | Get project configuration settings |
search_rules | Search through rules and guidelines |
get_agent_details | Get detailed profile of a specialist agent |
parse_mode | Parse PLAN/ACT/EVAL workflow mode (includes language setting) |
recommend_skills | Recommend skills based on user prompt with multi-language support |
get_code_conventions | š Get project code conventions from config files (tsconfig, eslint, prettier, editorconfig, markdownlint) |
generate_checklist | Generate contextual checklists including conventions domain |
analyze_task | Comprehensive task analysis with risk assessment |
pr_quality_report | Run specialist agents on changed files for PR quality |
create_briefing | Capture session state for cross-session recovery |
resume_session | Load previous session briefing |
get_rule_impact_report | Rule effectiveness analytics |
| Prompt | Description |
|---|---|
activate_agent | Activate a specialist agent with project context |
Add the following configuration to your Claude Desktop config:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"codingbuddy": {
"command": "npx",
"args": ["-y", "codingbuddy", "mcp"]
}
}
}
npm install -g codingbuddy
Then configure Claude Desktop:
{
"mcpServers": {
"codingbuddy": {
"command": "codingbuddy",
"args": ["mcp"]
}
}
}
cd apps/mcp-server
yarn install
yarn build
{
"mcpServers": {
"codingbuddy": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/codingbuddy/apps/mcp-server/dist/src/cli/cli.js", "mcp"]
}
}
}
Replace /ABSOLUTE/PATH/TO with your actual path.
Build the Docker image from the repository root:
# Run from codingbuddy root
docker build -f apps/mcp-server/Dockerfile -t codingbuddy-mcp .
Run the container:
docker run -p 3000:3000 \
-e MCP_TRANSPORT=sse \
-e PORT=3000 \
codingbuddy-mcp
The server will start in SSE mode, exposing:
GET /sse: SSE EndpointPOST /messages: Message EndpointThe MCP server can be deployed to Vercel as a serverless function:
cd apps/mcp-server
npx vercel deploy
https://your-project.vercel.app/api/mcpcurl -X POST https://your-project.vercel.app/api/mcp \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"method": "tools/list",
"id": 1
}'
| Mode | Use Case | Command |
|---|---|---|
| Stdio | CLI integration | yarn start |
| SSE | Self-hosted HTTP | MCP_TRANSPORT=sse yarn start |
| Vercel | Serverless HTTPS | npx vercel deploy |
| Variable | Description | Default |
|---|---|---|
MCP_TRANSPORT | Transport mode (stdio or sse) | stdio |
PORT | HTTP port for SSE mode | 3000 |
CODINGBUDDY_RULES_DIR | Custom path to .ai-rules directory | Auto-detected |
CODINGBUDDY_PROJECT_ROOT | Project root for config loading | Current directory |
ANTHROPIC_API_KEY | API key for codingbuddy init | Required for init |
The MCP server caches configuration to improve performance. Cache TTL varies by environment:
| Environment | Cache TTL | Use Case |
|---|---|---|
| Development | 5 minutes | Frequent config changes during development |
| Production | 1 hour | Stable configs, reduced file system access |
Note: To force a config reload in development, restart the MCP server or wait for cache expiration.
The get_code_conventions MCP tool automatically parses your project's config files and enforces conventions.
| File | Conventions Extracted |
|---|---|
tsconfig.json | TypeScript strict mode, compiler options, path aliases |
eslint.config.js / .eslintrc.json | ESLint flat/legacy config, rules, parser options |
.prettierrc | Quote style, semicolons, trailing commas, indentation |
.editorconfig | Indent style/size, line endings, charset |
.markdownlint.json | Markdown linting rules (MD001, MD003, etc.) |
// AI calls this tool before implementing
const conventions = await get_code_conventions();
// TypeScript conventions
if (conventions.typescript.strict) {
// ā
Use strict mode - no implicit any
}
// Prettier conventions
const quote = conventions.prettier.singleQuote ? "'" : '"';
const semi = conventions.prettier.semi ? ';' : '';
// EditorConfig conventions
const indent = ' '.repeat(conventions.editorconfig.indent_size || 2);
conventionsThe conventions checklist includes 26 validation items across 5 categories:
// AI automatically includes conventions in code review
const checklist = await generate_checklist({
files: ['src/auth/login.ts'],
domains: ['security', 'conventions'] // conventions added automatically
});
// Checklist items include:
// - "TypeScript strict mode is enabled"
// - "Code uses consistent quote style per .prettierrc"
// - "Indentation style matches .editorconfig"
// ... and 23 more convention checks
# Basic usage (requires ANTHROPIC_API_KEY env var)
npx codingbuddy init
# With options
npx codingbuddy init --format json # Output as JSON instead of JS
npx codingbuddy init --force # Overwrite existing config
npx codingbuddy init /path/to/project # Specify project path
npx codingbuddy init --api-key sk-... # Pass API key directly
The codingbuddy init command creates a codingbuddy.config.json file:
module.exports = {
// Response language (ko, en, ja, etc.)
language: 'ko',
// Project metadata
projectName: 'my-awesome-app',
description: 'A modern web application',
// Technology stack
techStack: {
languages: ['TypeScript'],
frontend: ['React', 'Next.js', 'Tailwind CSS'],
backend: ['Node.js', 'Prisma'],
database: ['PostgreSQL'],
tools: ['ESLint', 'Prettier', 'Vitest'],
},
// Architecture pattern
architecture: {
pattern: 'feature-sliced-design',
structure: ['app', 'widgets', 'features', 'entities', 'shared'],
},
// Coding conventions
conventions: {
style: 'airbnb',
naming: {
files: 'kebab-case',
components: 'PascalCase',
functions: 'camelCase',
},
},
// Testing strategy
testStrategy: {
approach: 'tdd',
frameworks: ['Vitest', 'Playwright'],
coverage: 80,
},
};
my-project/
āāā codingbuddy.config.json # Main configuration
āāā .codingignore # Files to ignore (gitignore syntax)
āāā .codingbuddy/ # Additional context (optional)
āāā context/
āāā architecture.md # Architecture documentation
āāā api-guide.md # API usage guide
When you use an AI assistant with this MCP server:
The MCP server follows a modular architecture with clear separation of concerns:
src/
āāā mcp/ # MCP protocol handlers (resources, tools, prompts)
āāā keyword/ # Workflow mode processing (PLAN/ACT/EVAL/AUTO)
ā āāā strategies/ # Mode-specific agent resolution (Strategy pattern)
ā āāā patterns/ # Intent detection patterns
āāā session/ # Session document management
ā āāā session.parser.ts # Document parsing
ā āāā session.serializer.ts # Document serialization
ā āāā session.cache.ts # In-memory caching
āāā context/ # Context document management
āāā config/ # Configuration loading and validation
āāā rules/ # AI rules file management
āāā agent/ # Agent profiles and system prompts
āāā checklist/ # Quality checklists by domain
āāā analyzer/ # Project analysis utilities
āāā skill/ # Skill recommendation engine
āāā cli/ # CLI command handlers
āāā shared/ # Shared utilities (async, security, validation)
| Pattern | Usage | Location |
|---|---|---|
| Strategy | Mode-specific agent resolution | keyword/strategies/ |
| Builder | Activation message construction | keyword/activation-message.builder.ts |
| Repository | Session document persistence | session/session.service.ts |
| Factory | Handler creation | mcp/handlers/ |
mcp/ ā keyword/ ā config/
ā ā
session/ ā shared/
ā
context/
| Metric | Target |
|---|---|
| Statement coverage | 90%+ |
| Branch coverage | 85%+ |
| Function coverage | 90%+ |
# Full test suite with coverage
yarn workspace codingbuddy test --coverage
# Lint check
yarn workspace codingbuddy lint
# Type check
yarn workspace codingbuddy typecheck
# Build
yarn workspace codingbuddy build
# Watch mode
yarn start:dev
The MCP Inspector is a web-based tool to interactively test your MCP server.
# Build the server first
yarn build
# Run with Inspector
npx @modelcontextprotocol/inspector node dist/src/main.js
A simple script is provided to verify basic connectivity and JSON-RPC responses.
# Build the server
yarn build
# Run the test script
node test/manual-client.js
Automated via GitHub Actions on master push.
Update Version:
npm version patch # or minor, major
Push to Master:
git push
The workflow will:
v1.0.1).codingbuddy.FAQs
Multi-AI Rules MCP Server - One source of truth for AI coding rules across all AI assistants
The npm package codingbuddy receives a total of 577 weekly downloads. As such, codingbuddy popularity was classified as not popular.
We found that codingbuddy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.