smorch-dev

Two Claude Code plugins + 4 machine install profiles + cron sync. Single source of truth: this repo.

Internal SMOrchestra dev + ops toolkit. Built after we shipped eo-microsaas-dev for students and applied what we learned.

What's in here

Path	Purpose
plugins/smorch-dev/	Workflow plugin — 15 commands (workflow: plan, code, score, bridge-gaps, handover, qa-handover-score, qa-run, ship, triage, retro, dev-guide; L3 wrappers: worktree, benchmark, review-pr; v1.6 L3 wrappers: verify, simplify, canary, document, cso) + 11 skills. Installed on dev + QA machines.
plugins/smorch-ops/	Infra plugin — 7 commands (deploy, rollback, drift, health, incident, secrets, skill-sync) + 7 skills. Installed on all machines incl. servers.
install/	One script per machine profile — qa-machine.ps1 (Lana, Windows), eng-desktop.sh (dev desktops), dev-server.sh, prod-server.sh
scripts/	validate-plugins.sh (CI), sync-from-github.sh (cron-invoked)
docs/	ADRs + machine install matrix + retirement plan

Install matrix

Profile	smorch-dev	smorch-ops	gstack	superpowers	Cron sync
qa-machine (Lana, Windows)	✅	✅	✅	✅	✅
eng-desktop (Mamoun's Mac + future hires)	✅	✅	✅	✅	✅
dev-server (smo-dev, smo-eo-qa)	❌	✅	❌	❌	✅
prod-server (eo-prod, smo-prod)	❌	✅	❌	❌	✅

Quick install

# Mac / Linux
bash <(curl -fsSL https://raw.githubusercontent.com/SMOrchestra-ai/smorch-dev/main/install/eng-desktop.sh)

# Windows (PowerShell as admin)
iwr -useb https://raw.githubusercontent.com/SMOrchestra-ai/smorch-dev/main/install/qa-machine.ps1 | iex

# Server (run on the server)
bash <(curl -fsSL https://raw.githubusercontent.com/SMOrchestra-ai/smorch-dev/main/install/prod-server.sh)

Command surface — 27 total (v1.6.0-dev), no overlap

Workflow chain (smorch-dev)

/smorch-dev-start (4-layer bootstrap, run FIRST) · /smo-plan · /smo-worktree · /smo-code · /smo-verify (auto) · /smo-score (--quick / --full) · /smo-bridge-gaps · /smo-simplify (auto on Eng Q4/Q5) · /smo-handover · /smo-qa-handover-score · /smo-qa-run · /smo-review-pr (auto in /smo-ship) · /smo-benchmark (UI/API gate) · /smo-ship (merge + tag) · /smo-document (auto post-merge) · /smo-triage (live debug) · /smo-retro · /smo-dev-guide (in-session cheat-sheet)

Quality + security (smorch-dev — v1.6)

/smo-verify (live verification before commit) · /smo-simplify (code-quality fix loop) · /smo-document (post-ship docs sync) · /smo-cso (security audit, --daily | --full | --post-incident)

Ops (smorch-ops)

/smo-deploy (auto-invokes /smo-canary) · /smo-canary (post-deploy watch) · /smo-rollback · /smo-drift · /smo-health · /smo-incident (post-mortem) · /smo-secrets · /smo-skill-sync

Verb boundaries (documented in SOP-14)

• ship = merge + tag · deploy = SSH + pm2 reload · rollback = revert + restart
• triage = live diagnostic · incident = SEV1-4 post-mortem write-up
• score = rubric scoring (review IS scoring — one command)

Project overlay convention

Projects declare their own overlay at {project}/.smorch/. Plugin is project-agnostic. See docs/ADR-002-project-overlay-convention.md.

eo-mena/
  .smorch/
    project.json       # {"project":"eo-mena","mena":true,"stack":"nextjs-supabase"}
    skills/            # project-specific skills (optional)
    templates/         # project-specific templates (optional)
    overrides/         # rubric overrides for smo-scorer (optional)

Sync model

1. Mamoun pushes to main
2. GitHub webhook → n8n on flow.smorchestra.ai
3. n8n triggers smorch-sync-all --repo smorch-dev
4. Each machine runs scripts/sync-from-github.sh (also fires hourly via cron as fallback)
5. Hash check vs canonical/smorch-dev-manifest.json in smorch-brain
6. Drift → Telegram alert (CHAT_ID 311453473) + auto-rollback

Non-negotiables

• No ship without 92+ composite score (see SOP-02 gap-bridge)
• No handover accepted by QA without ≥80 handover score (see SOP-13)
• No command-name collisions (verbs documented in SOP-14)
• No edits directly on servers — local → GitHub → server pull
• Pre-commit drift hook blocks commits that would land on drifted machines

SOP references

SOP	What
SOP-01	QA Protocol — /smo-qa-handover-score + /smo-qa-run
SOP-02	Pre-upload scoring (92+ gate) — smo-scorer
SOP-09	Skill injection registry — both new plugins registered
SOP-13	Lana handover protocol — /smo-handover + score
SOP-14	Plugin workflow (NEW)
SOP-15	Cross-machine sync (NEW)
SOP-16	Secrets rotation (NEW)
SOP-17	Hire onboarding engineering (NEW)

Version

v1.6.0-dev. v1.5 wired the L3 cascade (gstack + superpowers) into 12 commands and added 3 new wrappers. v1.6 closes the OS with 5 more wrappers (/smo-verify, /smo-simplify, /smo-canary, /smo-document, /smo-cso), auto-composition between them, and /careful//guard safety-mode suggestions in the session bootstrap. Target: 10/10 OS for planning + review + scoring + QA + ship + deploy. No sloppiness.