New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

knowzcode

Package Overview
Dependencies
Maintainers
1
Versions
17
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

knowzcode

Platform-agnostic AI development methodology with TDD, quality gates, and structured workflows

Source
npmnpm
Version
0.7.0
Version published
Weekly downloads
52
-89.17%
Maintainers
1
Weekly downloads
 
Created
Source

KnowzCode

A structured development methodology for AI coding assistants.

License: MIT + Commons Clause Claude Code Plugin Version

Installation · Quick Start · When to Use It · How It Works · Commands · Docs

The Problem

AI coding assistants lack structure. Without it, they:

  • Forget context between sessions
  • Make changes without considering impact
  • Declare "done" without verifying anything works
  • Let documentation drift from reality immediately

What KnowzCode Does

KnowzCode is a platform-agnostic development methodology that lives in your project's knowzcode/ directory.

  • Adaptive Development Loop — Scales from quick fixes to full 5-phase TDD workflows with quality gates at each phase
  • Quality Gates — Automated verification at each phase prevents broken code from advancing
  • Living Documentation — Architecture diagrams and specs auto-update as code changes
  • Session Memory — WorkGroups track complete context so nothing is lost between sessions
  • Interruption Recovery — Say "continue" to resume exactly where you left off
  • Multi-Platform — First-class support for Claude Code, OpenAI Codex, and Gemini CLI, with adapters for Cursor, Copilot, and Windsurf

When to Use KnowzCode

KnowzCode adds overhead — more time, more tokens, more structure than letting your coding agent plan and execute natively. That's the tradeoff. Here's when it's worth it:

Your agent's native mode is fine for:

  • Single-file changes, bug fixes, small refactors
  • Tasks where "good enough" is good enough
  • Anything you can verify at a glance

Reach for KnowzCode when:

  • Outcomes aren't meeting expectations — the agent keeps missing edge cases, breaking things, or delivering incomplete work
  • Multi-component changes — features that touch multiple layers (API + DB + UI + tests) benefit from impact analysis and phased execution
  • Architecture and security matter — quality gates catch issues before they compound
  • You need documentation that stays current — specs and architecture docs update as part of the workflow, not as an afterthought
  • Enforcing standards — personal conventions, team guidelines, or enterprise compliance rules baked into every phase
  • Resumability — long-running work that spans sessions, where losing context means starting over
  • Autonomous execution — approve specs upfront, then let the agent run; verification loops and quality gates keep output on track without constant oversight

The overhead pays for itself when the cost of getting it wrong exceeds the cost of being thorough.

How It Works

Every feature follows a structured loop with quality gates between phases:

  ┌──────────────────── THE KNOWZCODE LOOP ────────────────────┐
  │                                                             │
  │  Goal → Analyze → ✓ → Design → ✓ → Build → Audit → ✓ → Ship  │
  │         Impact        Specs        (TDD)    Quality         │
  │          1A            1B           2A       2B        3    │
  │                                                             │
  │  ✓ = approval gate (you decide whether to proceed)         │
  └─────────────────────────────────────────────────────────────┘

KnowzCode automatically classifies tasks by complexity:

  • Micro — single-file fixes skip the loop entirely (/kc:fix)
  • Light — small changes (≤3 files) use a streamlined 2-phase path
  • Full — complex features get the complete 5-phase workflow above

Each gate requires your approval before proceeding. See the Workflow Reference for details.

Installation

/plugin marketplace add knowz-io/knowzcode
/plugin install kc@knowzcode
cd your-project/
/kc:init
/kc:work "Build user authentication"

Alternative: Script Install

npx knowzcode                                    # Interactive setup
npx knowzcode install --platforms claude,gemini   # Specific platforms
npx knowzcode install --platforms all             # All 6 platforms

Commands available as /work, /plan, /fix (without kc: prefix). For /kc: prefix, also run: /plugin install kc@knowzcode.

Supported Platforms

Primary (full support):

PlatformGenerated FilesSupport Level
Claude CodeCLAUDE.md + .claude/{agents,skills}/Plugin + 14 agents + 13 skills
OpenAI CodexAGENTS.md + .agents/skills/kc-*/SKILL.md (12 skills)Instruction file + discoverable skill files
Gemini CLIGEMINI.md + .gemini/commands/kc/*.toml (12 commands) + .gemini/skills/kc-*/SKILL.md (12 skills) + .gemini/agents/kc-*.md (14 subagents, experimental)Native commands + skills + subagents + instruction file

Experimental (functional, under refinement):

PlatformGenerated FilesSupport Level
GitHub Copilot.github/copilot-instructions.md + .github/prompts/kc-*.prompt.md (9 prompts) + .vscode/mcp.jsonInstruction file + prompt files + MCP
Cursor.cursor/rules/knowzcode.mdcRules file (commands via .cursor/commands/ beta)
Windsurf.windsurf/rules/knowzcode.mdRules file (workflows via .windsurf/workflows/)

Manual (Repo Clone)

git clone https://github.com/knowz-io/knowzcode.git
cd KnowzCode
./install.sh install --target /path/to/your/project   # Linux/macOS
.\install.ps1 install --target C:\path\to\your\project # Windows

install.sh and install.ps1 are thin wrappers that delegate to the Node.js installer (bin/knowzcode.mjs). Node.js 18+ is required.

Cloud Features (Optional)

Connect to KnowzCode Cloud for vector-powered semantic search, AI Q&A, and learning capture via MCP. See the Getting Started Guide for setup.

Quick Start

Start a Feature

/kc:work "Build user authentication with email and password"

Runs the full loop: impact analysis → specs → TDD → audit → finalize, with approval gates between each phase.

Research First

/kc:plan "how is authentication implemented?"

Explores your codebase first. Say "implement" to transition into /kc:work with findings pre-loaded.

Quick Fix

/kc:fix "Fix typo in login button text"

Targeted fixes that skip the full loop — for typos, small bugs, and CSS tweaks.

Commands

CommandDescription
/kc:initInitialize KnowzCode in project
/kc:work <goal>Start feature workflow
/kc:plan <topic>Research before implementing
/kc:audit [type]Run quality audits
/kc:fix <target>Quick targeted fix
/kc:connect-mcpConfigure MCP server
/kc:registerRegister and configure MCP
/kc:statusCheck MCP connection
/kc:learnCapture learnings to vault
/kc:telemetryInvestigate production telemetry
/kc:telemetry-setupConfigure telemetry sources
/kc:continueResume active workflow (auto-triggered on "continue", "keep going", etc.)
/kc:start-workAuto-redirect implementation intent to /kc:work with context

Architecture

Layer 4: Platform Enhancements (optional, best experience)
         Claude Code agents | Codex Agents SDK | Gemini Skills
         ──────────────────────────────────────────────────────
Layer 3: Platform Adapters (thin instruction files)
         CLAUDE.md | AGENTS.md | GEMINI.md | .cursor/rules/*.mdc
         ──────────────────────────────────────────────────────
Layer 2: MCP Integration (cross-platform knowledge layer)
         KnowzCode MCP server → vaults, search, learning capture
         ──────────────────────────────────────────────────────
Layer 1: Core Methodology (platform-agnostic, the actual product)
         knowzcode/ directory → loop, specs, tracker, architecture

The real product is Layer 1 — the knowzcode/ directory. Everything else enhances it. On Claude Code, Layer 4 provides 14 specialized agents with parallel orchestration. Codex and Gemini get discoverable skills and native commands. Other platforms follow the same methodology via adapter instruction files. See Understanding KnowzCode for a deep dive.

Execution Modes

Claude Code

When using Claude Code, /kc:work automatically selects an execution strategy based on task complexity and available features:

ModeWhen UsedHow It Works
Parallel TeamsComplex features (default for >3 files)Multiple agents work concurrently — scouts gather context, builders implement in parallel, reviewer audits incrementally
Sequential TeamsLighter features or --sequential flagOne agent per phase with persistent team context
Subagent DelegationAgent Teams not enabledOne agent spawned per phase via fallback — works on all Claude Code instances
Agent Teams Setup & Roster (14 agents)

Parallel and Sequential Teams require Agent Teams (experimental). Enable by adding the following to your Claude Code settings.json:

{ "env": { "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1" } }

Or ask Claude Code: "Enable Agent Teams in my settings." Then restart. Without it, subagent delegation is used automatically.

AgentRolePhase
context-scoutLocal context research (specs, tracker, history)Discovery
knowz-scoutMCP vault research (conventions, decisions)Discovery
knowz-scribeMCP vault writes (learning capture, audit trails)All phases
analystImpact analysis, Change Set proposals1A
architectSpecification drafting, architecture review1B
builderTDD implementation, verification loops2A
reviewerQuality audit, security review2B
closerFinalization, learning capture3
security-officerThreat modeling, vulnerability scanning (opt-in)All phases
test-advisorTDD enforcement, test quality review (opt-in)All phases
project-advisorBacklog curation, future work ideas (opt-in)Discovery–2A
microfix-specialistQuick targeted fixesUtility
knowledge-migratorKnowledge migration between vaultsUtility
update-coordinatorPlugin update coordinationUtility
Opt-in Specialist Agents

Activate specialists with --specialists in /kc:work or /kc:audit:

/kc:work "Build auth system" --specialists              # All 3 specialists
/kc:work "Build auth system" --specialists=security     # Security officer only
/kc:audit --specialists                                 # Deep audit with specialists
  • security-officer: Officer authority — CRITICAL/HIGH findings block gates
  • test-advisor: Advisory — TDD compliance, assertion quality, coverage gaps
  • project-advisor: Advisory — backlog ideas, tech debt tracking (shuts down mid-implementation)

Specialists communicate directly with builders (max 2 DMs each) and report findings at quality gates. Supported in Parallel Teams and Subagent modes only.

See the Workflow Reference for detailed orchestration flows.

OpenAI Codex

Codex users get discoverable skills via .agents/skills/kc-*/:

/kc:work "Build user authentication"  # Start feature workflow
/kc:plan "how is auth implemented?"   # Research first
/kc:fix "Fix login bug"               # Quick fix
/kc:audit                             # Quality audit

Generated by npx knowzcode install --platforms codex into .agents/skills/.

For cross-project availability, install skills globally:

npx knowzcode install --platforms codex --global   # Skills → ~/.agents/skills/kc-*/

Gemini CLI

Gemini users get native /kc: commands via TOML files, discoverable skills, and optional subagents:

/kc:work "Build JWT authentication"   # Start feature workflow
/kc:plan "how is auth implemented?"   # Research first
/kc:fix "Fix login redirect bug"      # Quick fix
/kc:audit                             # Quality audit
/kc:continue                          # Resume where you left off
/kc:connect-mcp <api-key>            # Configure MCP
/kc:telemetry "500 errors in prod"   # Investigate telemetry

Generated by npx knowzcode install --platforms gemini into .gemini/commands/kc/, .gemini/skills/kc-*/, and .gemini/agents/kc-*.md.

For cross-project availability, install skills globally:

npx knowzcode install --platforms gemini --global   # Skills → ~/.gemini/skills/kc-*/

Subagents (experimental) require experimental.enableAgents: true in Gemini settings.json.

Other Platforms (Experimental)

Adapters for Cursor, GitHub Copilot, and Windsurf are functional but under active refinement. The AI follows the same methodology phases sequentially — reading prompt templates from knowzcode/prompts/ and following the same quality gates.

GitHub Copilot

Copilot users invoke phases via prompt files in VS Code Copilot Chat:

#prompt:kc-work "Build JWT authentication"  # Start feature workflow
#prompt:kc-specify                          # Draft specs (after Change Set approved)
#prompt:kc-implement                        # TDD implementation
#prompt:kc-audit                            # READ-ONLY audit
#prompt:kc-finalize                         # Finalize and commit
#prompt:kc-continue                         # Resume where you left off

Generated by /kc:init into .github/prompts/. See knowzcode/copilot_execution.md for details.

Cursor & Windsurf

Cursor generates a .cursor/rules/knowzcode.mdc rules file. Windsurf generates .windsurf/rules/knowzcode.md. Both follow methodology phases via prompt templates with no agent orchestration needed.

Project Structure

your-project/
└── knowzcode/
    ├── knowzcode_loop.md          # The methodology (TDD, quality gates, phases)
    ├── knowzcode_project.md       # Project goals, tech stack, standards
    ├── knowzcode_architecture.md  # Auto-maintained architecture docs
    ├── knowzcode_tracker.md       # WorkGroup status tracking
    ├── knowzcode_log.md           # Session history
    ├── specs/                     # Component specifications
    ├── prompts/                   # Phase prompt templates (works with any AI)
    ├── workgroups/                # Session data (gitignored)
    └── enterprise/                # Optional compliance config (gitignored, experimental)

Documentation

GuideDescription
Getting StartedWalkthrough, MCP setup, file structure
Understanding KnowzCodeConcepts and architecture deep dive
Workflow ReferencePhase details, execution modes, parallel orchestration
Prompts GuidePrompt templates and command reference

Contributing

Fork → branch → PR. See CLAUDE.md for developer docs.

Acknowledgments

KnowzCode is built upon the foundation of the Noderr project by @kaithoughtarchitect. We're grateful for their pioneering work in systematic AI-driven development.

License

MIT License with Commons Clause — See LICENSE file for details.

A structured development methodology for AI coding assistants.

Get Started · Read the Docs · Contribute

Built by Knowz

Keywords

ai

FAQs

Package last updated on 10 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts