Your agent writes the code. Mugiwara proves it.
A governed engineering crew for your AI agent — evidence at every step, and a process that sizes itself to the work. A typo costs nothing. An auth migration gets all nine waves. No runtime, no API keys, no servers. Just markdown your agent already knows how to read.
Works on Claude Code, opencode, Copilot, Gemini, and 8 more platforms.
AI agents are fast. They're also unverified. No audit trail. No review. No "who checked this?" when something breaks. Mugiwara wraps your agent in a team structure with role boundaries, evidence gates, and cost tracking — the same discipline you'd expect from a senior engineering team. Zero runtime overhead: every agent, every skill, every rule is static markdown.
→ Full pitch: why mugiwara vs just asking your agent
A closed mission leaves a report you can actually read. This is the exact
format scripts/mission-report.sh produces:
# Mission: invitation-accepted-flow . 2026-08-11
**Lane** full . **Mode** guided . **Actor** john . **Branch** feature/MKR-412
## What changed
11 files, +340 LOC
Sensitive paths: src/auth/
## Waves
| Wave | Artifact | Verdict |
|------|----------|---------|
| Execute (Wave 3) | `01-execution.md` | PASS |
| Checkpoint (Wave 4) | `02-audit.md` | PASS |
| Quality (Wave 5) | `03-quality.md` | PASS |
| Gates (Wave 6) | `04-gates.md` | PASS |
| Healing (Wave 8) | `05-healing.md` | PASS |
| Closure (Wave 9) | `06-closure.md` | GO |
## Review & blockers
Review + security files: invitation-accepted-flow-review.md, invitation-accepted-flow-security.md
Findings: 3
Blocker ledger rows: 1
## State
| Field | Value |
|-------|-------|
| Wave | 9 |
| Tasks | 6/6 done |
| Blockers open | 0 |
| Heal cycles | 1 |
| Tokens used | 14,200 / 20,000 |
Work is sized to the diff — a typo gets no pipeline, an auth migration gets all nine waves. Mugiwara itself is free; token usage depends on the lane:
| Lane | Waves | Typical tokens | Budget |
|---|---|---|---|
| Direct (typo) | 0 | ~0 | — |
| Lean (small bug) | 2 | ~7k | 12k |
| Standard (feature) | 5–7 | ~13k | 25k |
| Full (architecture) | 9–11 | ~23k | 50k |
Usage tracked in .mugiwara/state/<mission>/[member].json per mission. Budget warns at 1.5×,
pauses at 3×. Lane bases are measured from the skills/agents loaded per lane
by scripts/lane-base.ts — the constants fail CI if they drift from content
load.
# opencode — add to opencode.json, then restart
{ "plugin": ["@ionivetech/mugiwara"] }
# Claude Code
/plugin marketplace add ionivetech/mugiwara && /plugin install mugiwara
# Any platform via npm
npx @ionivetech/mugiwara@latest install --target all --yesFirst run: run mugiwara onboard in your terminal for guided setup (zero-LLM wizard). Then ask something non-trivial:
> add role-based access control: admin, editor, viewer
> audit the auth middleware for security gaps
> review the last PR for breaking changes
> split this feature across the team: payment gateway, ledger, fraud
A Standard lane mission (~13k tokens) produces a branch with test-first commits, an audit report, a security review, and a ready PR summary — visible at every step in your chat.
You ask. The crew routes automatically. No agent names to memorize, no pipeline config to write.
| You say | What happens |
|---|---|
add search bar to products page |
Luffy triages → Nami plans 3 tasks → Zoro executes TDD → Chopper audits → Sanji runs quality → Franky gates → Robin reviews → code pushed, PR summary ready |
split payment system: gateway, ledger, fraud |
Nami interviews team → writes initiative plan with sub-missions + assignees → each dev works in own branch → mugiwara initiative status shows progress → all done → initiative closure |
Brook, fix the failing login test |
Healer reads failure ledger, root-cause fixes, proves fix ≤3 cycles |
Jinbe, audit auth middleware |
STRIDE + OWASP + dependency audit. Read-only — never touches code |
/mugiwara auto |
Switches to full autonomy — all waves run without asking, from the next wave |
- Full pipeline when the task is big or direction is unclear
- Direct agent when you know exactly what you need — say the name
- Slash commands when you want to drive:
/mugiwara-plan,/mugiwara-review,/mugiwara-security,/mugiwara-ship,/mugiwara onboard
→ Full walkthrough · Full workflow walkthrough
| Feature | What you get |
|---|---|
| Lane sizing | Work auto-sized from git diff. Typo = instant fix. Auth migration = full pipeline. |
| Evidence trail | .mugiwara/ workspace: plans, audit reports, quality reports, review findings, blocker ledger. |
| Team collaboration | One shared plan, per-(mission, member) state + resume. Any number of engineers, zero collisions. |
| Self-healing | Brook reads all failures at once, fixes root causes, re-runs verification. ≤3 cycles. |
| Resume from anywhere | Session lost? Rebuilds from .mugiwara/state/<mission>/ + machine-written continue/<mission>/. Continues, never restarts. Auto surfaces in-flight work (lists when ambiguous). |
| 12 platforms | Claude Code, opencode, Copilot, Gemini, Codex, Cursor, Kimi, Pi, Antigravity + CLI. |
→ All 28 features, with how-to-use + scenarios: Every feature · Team collaboration · Full pipeline · Lanes · Modes · Config · Audit trail · Cost
flowchart TB
L0["Luffy - Triage"] --> L1["Usopp - Brainstorm"] --> L2["Nami - Plan"] --> L3["Zoro - Execute"] --> L4["Chopper - Audit"]
L4 --> L5["Sanji - Quality"] --> L6["Franky - Gates"]
L6 --> L7R["Robin - Review"]
L6 --> L7J["Jinbe - Security"]
L7R --> L8["Brook - Heal"]
L7J --> L8
L8 --> L9["Luffy - Closure"]
L8 -. "heal ≤3 cycles" .-> L4
11 agents (+3 internal). Each has role boundaries — auditors and reviewers are read-only. Call them by name or let the pipeline auto-route.
| Agent | Role | Permission |
|---|---|---|
luffy-orchestrator |
Captain — triage, check-ins, closure | — |
usopp-brainstorm |
Critical friend — interrogates, researches, recommends | — |
nami-planner |
Planner — interviews, full scan, scaled plans, team initiatives | — |
zoro-execution |
Executor — TDD per task, evidence per commit | — |
chopper-checkpoint |
Auditor — re-runs criteria, failure ledger | read-only |
sanji-quality |
Quality — format, lint, test, duplication, complexity, maintainability, code attributes | — |
franky-gates |
Gates — coverage, build, DoD, per-condition sonar gate | — |
robin-reviewer |
Reviewer — breaking-change map, reliability rating, code attribute deep review | read-only |
jinbe-security |
Security — STRIDE, OWASP, hotspots, SCA license, secret scan, responsibility | read-only |
brook-healing |
Healer — reads ledger, root-cause fixes ≤3 cycles | — |
resume-coordinator |
Resumer — rebuilds state from .mugiwara/, continues never restarts |
— |
Internal agents (dispatch-only):
| Agent | Role | Used by |
|---|---|---|
skeptic-verifier |
Adversarial verifier — doubts every claim | Wave 4.5, high-stakes missions |
eval-runner |
Harness tester — task suites, judge rubric | bun scripts/run-evals.ts |
memory-keeper |
Lessons ledger — surface at start, capture at closure | Wave 0 (read), Wave 9 (write) |
→ Agent details: summoning, boundaries, parameters
Mugiwara is built for a team sharing one repo. Identity is (mission, member), never branch — so any number of engineers can run parallel work without colliding, and one engineer can juggle several missions.
.mugiwara/
├── state/<mission>/state.json # solo state
├── state/<mission>/<member>.json # your team member state
├── continue/<mission>/state.json # solo resume point
├── continue/<mission>/<member>.json # your resume point
└── plans/<mission>.md # ONE shared plan (source of truth)
Quick start for a team:
# Nami writes one plan with a ## Sub-missions table (assignee + branch per member)
/mugiwara-plan # guided/semi asks "Solo or team?"
# Each member works on their own branch, resume only their own work
/mugiwara continue # list every in-flight mission for YOU
/mugiwara continue payment-gateway # solo → resume; team → list members
/mugiwara continue payment-gateway patty # resume exactly patty's work
# Coordination radar
bun run scripts/initiative.ts status plans/<mission>.md # who's where
bun run scripts/initiative.ts conflict-check plans/<mission>.md # shared-file overlapAuto mode runs every wave autonomously — and never downgrades to guided mid-mission. In a team plan, auto covers your member scope only: resuming your sub-mission runs it to ship, never the other members'.
→ Full collaboration guide with a worked example · Multi-actor reference
- Prototyping or spikes — use Lane 4, or skip mugiwara entirely.
- Unattended multi-hour runs — the crew runs inline so you can interrupt it. If you want to walk away, superpowers' subagent-driven-development is built for that.
- Solo scripts with no review path — the audit trail has no audience.
- Harnesses without agent dispatch (Gemini, Codex, tier 3) — you get the workflow and the trail, not enforced role boundaries.
Switch mode any time: /mugiwara guided | semi | auto. Or edit .mugiwara/config:
| Key | Default | What |
|---|---|---|
mode |
guided | guided / semi / auto |
branch |
feature/{type}-{issue}-{slug} |
Branch naming |
commit |
conventional | conventional / gitmoji / plain / template (e.g. {issue}: {title}) |
auto_commit |
on | on / off — off disables commit+push in guided/semi |
coverage_new |
90 | Coverage threshold for new files (%) |
coverage_modified |
80 | Coverage threshold for modified files (%) |
review_depth |
full | full / standard / quick — Robin's review depth |
quality_depth |
full | full / standard / quick — Sanji's check depth |
delegate_threshold |
60 | % of token budget at which remaining tasks dispatch to workers |
heal_max_cycles |
3 | Max heal-loop cycles before human escalation |
verbosity |
normal | normal / full — how much the crew echoes. normal hides investigation steps (reads, greps) and file contents; edits, results, decisions stay visible. full echoes everything. Never suppresses decisions, questions, blockers, or lane rises |
Set via mugiwara onboard or edit directly. Unknown keys ignored. Project
config (.mugiwara/config) overrides global (~/.mugiwara/config).
How much does the crew ask you?
| Mode | Plan | Execution | Ambiguities |
|---|---|---|---|
guided |
you approve every step | ask before each wave | ask the user |
semi |
you approve the written plan | auto from Wave 3 to ship | ask the user |
auto |
auto | auto all the way to ship (your member scope in a team) | resolved internally (brainstorm → Luffy decides) |
In auto, the crew runs every wave autonomously — triage, plan, execute,
quality, gates, review, heal, closure — and never downgrades to guided
mid-mission. Only a genuine blocker or the heal halt pauses.
→ All config keys · Mode details
| Need | Command / Doc |
|---|---|
| First-time setup | mugiwara onboard (terminal) or /mugiwara onboard |
| Plan a feature | /mugiwara-plan or just describe it |
| Review a PR diff | /mugiwara-review or "review this PR" |
| Security audit | /mugiwara-security or "Jinbe, audit X" |
| Ship gate check | /mugiwara-ship |
| See initiative progress | mugiwara initiative status <plan> |
| Resume a mission | /mugiwara continue <mission> [member] or "where were we?" |
| Switch mode | /mugiwara guided|semi|auto |
| Check gate locally | bun run gate |
| All docs | docs/ |
Claude Code
/plugin marketplace add ionivetech/mugiwara && /plugin install mugiwaraUninstall: /plugin uninstall mugiwara
OpenCode
Add to opencode.json:
{ "plugin": ["@ionivetech/mugiwara"] }Update: rm -rf ~/.cache/opencode/packages/@ionivetech/mugiwara* && opencode plugin @ionivetech/mugiwara -g (details)
Uninstall: remove "@ionivetech/mugiwara" from opencode.json plugins array
Gemini CLI
gemini extensions install https://github.com/ionivetech/mugiwaraUninstall: gemini extensions uninstall mugiwara
Codex
codex plugin marketplace add ionivetech/mugiwara && codex plugin add mugiwara@mugiwaraUninstall: codex plugin remove mugiwara@mugiwara
GitHub Copilot
copilot plugin install https://github.com/ionivetech/mugiwaraUninstall: copilot plugin uninstall mugiwara
Cursor
/add-plugin mugiwaraUninstall: /remove-plugin mugiwara
Antigravity
agy plugin install https://github.com/ionivetech/mugiwaraUninstall: agy plugin uninstall mugiwara
Kimi
/plugins install https://github.com/ionivetech/mugiwaraUninstall: /plugins uninstall mugiwara
Pi
pi install git:github.com/ionivetech/mugiwaraUninstall: pi uninstall mugiwara
Windsurf / Cline / Kilo — CLI install
npx @ionivetech/mugiwara@latest install --target <id> --yesUninstall: npx @ionivetech/mugiwara@latest uninstall
Targets: windsurf, cline, kilo, codex.
Global CLI — shorter commands after first install
npm i -g @ionivetech/mugiwara
mugiwara install --target all --yesUninstall: mugiwara uninstall
All platforms get the full crew — 11 agents (+3 internal), 26 skills. Enforcement depth varies by harness; see the harness matrix.
→ How the skills stay small: three-layer disclosure
# opencode — clear the pinned cache, then reinstall (npm update alone does NOT work)
rm -rf ~/.cache/opencode/packages/@ionivetech/mugiwara* && opencode plugin @ionivetech/mugiwara -g
# Claude Code — marketplace
/plugin update mugiwara
# CLI — npm global
npm i -g @ionivetech/mugiwara@latestOpenCode pins the resolved version in its own package cache, so npm update
never touches it. Reinstall with the same command for GitHub-based plugins
(Gemini, Codex, Copilot, Cursor, Kimi, Pi, Antigravity).
mugiwara install # wizard (interactive)
mugiwara install --target all --yes # non-interactive
mugiwara update --target <id> --yes # overwrite to latest
mugiwara uninstall # remove installed files
mugiwara list # show installations
mugiwara list --check # health check
mugiwara reset --keep-logs # wipe state, keep lessonsStart here: Getting started · What mugiwara replaces
Concepts: Workflow · Lanes · Modes · Execution model · Git strategy · Config · Cost · Audit trail · Security
Reference: Agent anatomy · Skill anatomy · Harness matrix · Compliance matrix · Developer onboarding
Install per platform: Overview · Claude · opencode · Gemini · Codex · Copilot · CLI targets
Troubleshooting: Common problems
Roadmap: ROADMAP.md
| Claim | Status |
|---|---|
| Retrieval routing rank-1 | 93.5%, 181 probes, offline, in CI |
| Reference pointers resolve | 66/66, 3 tiers, in CI |
| Lane constants match content load | verified, in CI |
| Write-scope enforcement | opencode only — rules-based elsewhere |
| Cross-harness mission behavior | 12/12 platforms — 9 rules-dir installs + 3 marketplace manifests, in CI |
| Outcome vs other approaches | not measured — see roadmap |
Numbers here are produced by bun run gate. Nothing in this table is an
estimate.
MIT. Copyright (c) 2026 ionivetech.
