~ / rigs / danybgoode / golden-frijoles

danybgoode/golden-frijoles

Run and scale your agentic product shop: plan, ship and prove it paid off. The Golden Frijoles engine, console, SDK and CLI.

↗ GitHub ★ 0 NOASSERTION updated today project Claude Code Codex Claude plugin

share on X

ARCHETYPE

Skill Collector

Ten-plus skills loaded on demand. A procedural-knowledge library.

CONTEXT TAX · EVERY TURN

~8.6k tokens

Heavy · median rig: 2.3k · breakdown

GUARDRAILS

3/5

Blocks destructive commands · No YOLO mode · Sandbox or ask-first rules · details

Copy this rig

# review before running: this installs third-party code
$ npx degit danybgoode/golden-frijoles/.claude ./rig-golden-frijoles  # inspect, then merge into .claude/

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "permissions": {
    "deny": [
      "Bash(vercel)",
      "Bash(vercel .*)",
      "Bash(vercel deploy*)",
      "Bash(*=* vercel deploy*)",
      "Bash(env *vercel deploy*)",
      "Bash(vercel --prod*)",
      "Bash(*=* vercel --prod*)",
      "Bash(env *vercel --prod*)",
      "Bash(vercel --yes*)",
      "Bash(*=* vercel --yes*)",
      "Bash(env *vercel --yes*)",
      "Bash(vercel promote*)",
      "Bash(*=* vercel promote*)",
      "Bash(env *vercel promote*)",
      "Bash(vercel rollback*)",
      "Bash(*=* vercel rollback*)",
      "Bash(env *vercel rollback*)",
      "Bash(vercel redeploy*)",
      "Bash(*=* vercel redeploy*)",
      "Bash(env *vercel redeploy*)",
      "Bash(vercel alias set*)",
      "Bash(*=* vercel alias set*)",
      "Bash(env *vercel alias set*)",
      "Bash(vercel rm *)",
      "Bash(*=* vercel rm *)",
      "Bash(env *vercel rm *)",
      "Bash(vercel remove *)",
      "Bash(*=* vercel remove *)",
      "Bash(env *vercel remove *)",
      "Bash(npx vercel*)",
      "Bash(*=* npx vercel*)",
      "Bash(env *npx vercel*)",
      "Bash(npx -y vercel*)",
      "Bash(*=* npx -y vercel*)",
      "Bash(env *npx -y vercel*)",
      "Bash(npx --yes vercel*)",
      "Bash(*=* npx --yes vercel*)",
      "Bash(env *npx --yes vercel*)",
      "Bash(pnpm dlx vercel*)",
      "Bash(*=* pnpm dlx vercel*)",
      "Bash(env *pnpm dlx vercel*)",
      "Bash(bunx vercel*)",
      "Bash(*=* bunx vercel*)",
      "Bash(env *bunx vercel*)",
      "Bash(supabase db push*)",
      "Bash(*=* supabase db push*)",
      "Bash(env *supabase db push*)",
      "Bash(supabase * db push*)",
      "Bash(*=* supabase * db push*)",
      "Bash(env *supabase * db push*)",
      "Bash(supabase db reset*)",
      "Bash(*=* supabase db reset*)",
      "Bash(env *supabase db reset*)",
      "Bash(supabase * db reset*)",
      "Bash(*=* supabase * db reset*)",
      "Bash(env *supabase * db reset*)",
      "Bash(npx supabase db push*)",
      "Bash(*=* npx supabase db push*)",
      "Bash(env *npx supabase db push*)",
      "Bash(npx supabase * db push*)",
      "Bash(*=* npx supabase * db push*)",
      "Bash(env *npx supabase * db push*)",
      "Bash(npx supabase db reset*)",
      "Bash(*=* npx supabase db reset*)",
      "Bash(env *npx supabase db reset*)",
      "Bash(npx supabase * db reset*)",
      "Bash(*=* npx supabase * db reset*)",
      "Bash(env *npx supabase * db reset*)",
      "Bash(npx -y supabase*)",
      "Bash(*=* npx -y supabase*)",
      "Bash(env *npx -y supabase*)",
      "Bash(npx --yes supabase*)",
      "Bash(*=* npx --yes supabase*)",
      "Bash(env *npx --yes supabase*)",
      "Bash(pnpm dlx supabase*)",
      "Bash(*=* pnpm dlx supabase*)",
      "Bash(env *pnpm dlx supabase*)",
      "Bash(bunx supabase*)",
      "Bash(*=* bunx supabase*)",
      "Bash(env *bunx supabase*)"
    ],
    "ask": [
      "Bash(vercel env add *)",
      "Bash(*=* vercel env add *)",
      "Bash(env *vercel env add *)",
      "Bash(vercel env rm *)",
      "Bash(*=* vercel env rm *)",
      "Bash(env *vercel env rm *)",
      "Bash(vercel env update *)",
      "Bash(*=* vercel env update *)",
      "Bash(env *vercel env update *)",
      "Bash(gh secret set *)",
      "Bash(*=* gh secret set *)",
      "Bash(env *gh secret set *)",
      "Bash(gh secret delete *)",
      "Bash(*=* gh secret delete *)",
      "Bash(env *gh secret delete *)",
      "Bash(gcloud secrets create *)",
      "Bash(*=* gcloud secrets create *)",
      "Bash(env *gcloud secrets create *)",
      "Bash(gcloud secrets delete *)",
      "Bash(*=* gcloud secrets delete *)",
      "Bash(env *gcloud secrets delete *)",
      "Bash(gcloud secrets versions add *)",
      "Bash(*=* gcloud secrets versions add *)",
      "Bash(env *gcloud secrets versions add *)",
      "Bash(gcloud secrets versions destroy *)",
      "Bash(*=* gcloud secrets versions destroy *)",
      "Bash(env *gcloud secrets versions destroy *)",
      "Bash(gcloud run services update *--set-env-vars*)",
      "Bash(*=* gcloud run services update *--set-env-vars*)",
      "Bash(env *gcloud run services update *--set-env-vars*)",
      "Bash(gcloud run services update *--update-env-vars*)",
      "Bash(*=* gcloud run services update *--update-env-vars*)",
      "Bash(env *gcloud run services update *--update-env-vars*)",
      "Bash(gcloud run services update *--set-secrets*)",
      "Bash(*=* gcloud run services update *--set-secrets*)",
      "Bash(env *gcloud run services update *--set-secrets*)",
      "Bash(gcloud run services update *--update-secrets*)",
      "Bash(*=* gcloud run services update *--update-secrets*)",
      "Bash(env *gcloud run services update *--update-secrets*)",
      "Bash(git push *--force-with-lease*)",
      "Bash(*=* git push *--force-with-lease*)",
      "Bash(env *git push *--force-with-lease*)",
      "Bash(gcloud run deploy *)",
      "Bash(*=* gcloud run deploy *)",
      "Bash(env *gcloud run deploy *)",
      "Bash(vercel env add *)",
      "Bash(*=* vercel env add *)",
      "Bash(env *vercel env add *)",
      "Bash(vercel env rm *)",
      "Bash(*=* vercel env rm *)",
      "Bash(env *vercel env rm *)",
      "Bash(vercel env update *)",
      "Bash(*=* vercel env update *)",
      "Bash(env *vercel env update *)",
      "Bash(gh secret set *)",
      "Bash(*=* gh secret set *)",
      "Bash(env *gh secret set *)",
      "Bash(gh secret delete *)",
      "Bash(*=* gh secret delete *)",
      "Bash(env *gh secret delete *)",
      "Bash(gcloud secrets create *)",
      "Bash(*=* gcloud secrets create *)",
      "Bash(env *gcloud secrets create *)",
      "Bash(gcloud secrets delete *)",
      "Bash(*=* gcloud secrets delete *)",
      "Bash(env *gcloud secrets delete *)",
      "Bash(gcloud secrets versions add *)",
      "Bash(*=* gcloud secrets versions add *)",
      "Bash(env *gcloud secrets versions add *)",
      "Bash(gcloud secrets versions destroy *)",
      "Bash(*=* gcloud secrets versions destroy *)",
      "Bash(env *gcloud secrets versions destroy *)",
      "Bash(gcloud run services update *--set-env-vars*)",
      "Bash(*=* gcloud run services update *--set-env-vars*)",
      "Bash(env *gcloud run services update *--set-env-vars*)",
      "Bash(gcloud run services update *--update-env-vars*)",
      "Bash(*=* gcloud run services update *--update-env-vars*)",
      "Bash(env *gcloud run services update *--update-env-vars*)",
      "Bash(gcloud run services update *--set-secrets*)",
      "Bash(*=* gcloud run services update *--set-secrets*)"
    ]
  }
}

Skills (10)

babysit-pr build-order-sync doc-hygiene prose-draft vercel-prune refine report setup smoke strategy

Plugins (2)

golden-frijoles@golden-frijolesgolden-frijoles@golden-frijoles

Permissions

deny (120)

Bash(vercel)

Bash(vercel .*)

Bash(vercel deploy*)

Bash(*=* vercel deploy*)

Bash(env *vercel deploy*)

Bash(vercel --prod*)

Bash(*=* vercel --prod*)

Bash(env *vercel --prod*)

Bash(vercel --yes*)

Bash(*=* vercel --yes*)

Bash(env *vercel --yes*)

Bash(vercel promote*)

Bash(*=* vercel promote*)

Bash(env *vercel promote*)

Bash(vercel rollback*)

Bash(*=* vercel rollback*)

Bash(env *vercel rollback*)

Bash(vercel redeploy*)

Bash(*=* vercel redeploy*)

Bash(env *vercel redeploy*)

Bash(vercel alias set*)

Bash(*=* vercel alias set*)

Bash(env *vercel alias set*)

Bash(vercel rm *)

Bash(*=* vercel rm *)

Bash(env *vercel rm *)

Bash(vercel remove *)

Bash(*=* vercel remove *)

Bash(env *vercel remove *)

Bash(npx vercel*)

Bash(*=* npx vercel*)

Bash(env *npx vercel*)

Bash(npx -y vercel*)

Bash(*=* npx -y vercel*)

Bash(env *npx -y vercel*)

Bash(npx --yes vercel*)

Bash(*=* npx --yes vercel*)

Bash(env *npx --yes vercel*)

Bash(pnpm dlx vercel*)

Bash(*=* pnpm dlx vercel*)

Bash(env *pnpm dlx vercel*)

Bash(bunx vercel*)

Bash(*=* bunx vercel*)

Bash(env *bunx vercel*)

Bash(supabase db push*)

Bash(*=* supabase db push*)

Bash(env *supabase db push*)

Bash(supabase * db push*)

Bash(*=* supabase * db push*)

Bash(env *supabase * db push*)

Bash(supabase db reset*)

Bash(*=* supabase db reset*)

Bash(env *supabase db reset*)

Bash(supabase * db reset*)

Bash(*=* supabase * db reset*)

Bash(env *supabase * db reset*)

Bash(npx supabase db push*)

Bash(*=* npx supabase db push*)

Bash(env *npx supabase db push*)

Bash(npx supabase * db push*)

ask (90)

Bash(vercel env add *)

Bash(*=* vercel env add *)

Bash(env *vercel env add *)

Bash(vercel env rm *)

Bash(*=* vercel env rm *)

Bash(env *vercel env rm *)

Bash(vercel env update *)

Bash(*=* vercel env update *)

Bash(env *vercel env update *)

Bash(gh secret set *)

Bash(*=* gh secret set *)

Bash(env *gh secret set *)

Bash(gh secret delete *)

Bash(*=* gh secret delete *)

Bash(env *gh secret delete *)

Bash(gcloud secrets create *)

Bash(*=* gcloud secrets create *)

Bash(env *gcloud secrets create *)

Bash(gcloud secrets delete *)

Bash(*=* gcloud secrets delete *)

Bash(env *gcloud secrets delete *)

Bash(gcloud secrets versions add *)

Bash(*=* gcloud secrets versions add *)

Bash(env *gcloud secrets versions add *)

Bash(gcloud secrets versions destroy *)

Bash(*=* gcloud secrets versions destroy *)

Bash(env *gcloud secrets versions destroy *)

Bash(gcloud run services update *--set-env-vars*)

Bash(*=* gcloud run services update *--set-env-vars*)

Bash(env *gcloud run services update *--set-env-vars*)

Bash(gcloud run services update *--update-env-vars*)

Bash(*=* gcloud run services update *--update-env-vars*)

Bash(env *gcloud run services update *--update-env-vars*)

Bash(gcloud run services update *--set-secrets*)

Bash(*=* gcloud run services update *--set-secrets*)

Bash(env *gcloud run services update *--set-secrets*)

Bash(gcloud run services update *--update-secrets*)

Bash(*=* gcloud run services update *--update-secrets*)

Bash(env *gcloud run services update *--update-secrets*)

Bash(git push *--force-with-lease*)

Bash(*=* git push *--force-with-lease*)

Bash(env *git push *--force-with-lease*)

Bash(gcloud run deploy *)

Bash(*=* gcloud run deploy *)

Bash(env *gcloud run deploy *)

Bash(vercel env add *)

Bash(*=* vercel env add *)

Bash(env *vercel env add *)

Bash(vercel env rm *)

Bash(*=* vercel env rm *)

Bash(env *vercel env rm *)

Bash(vercel env update *)

Bash(*=* vercel env update *)

Bash(env *vercel env update *)

Bash(gh secret set *)

Bash(*=* gh secret set *)

Bash(env *gh secret set *)

Bash(gh secret delete *)

Bash(*=* gh secret delete *)

Bash(env *gh secret delete *)

allow (80)

Bash(git add *)

Bash(git commit *)

Bash(git switch -c *)

Bash(git checkout -b *)

Bash(git worktree add *)

Bash(git worktree list *)

Bash(git fetch *)

Bash(git pull *)

Bash(git stash push *)

Bash(git stash list *)

Bash(git merge *)

Bash(gh pr view *)

Bash(gh pr list *)

Bash(gh pr checks *)

Bash(gh pr diff *)

Bash(gh run view *)

Bash(gh run list *)

Bash(gh issue view *)

Bash(gh issue list *)

Bash(npm run *)

Bash(npm test *)

Bash(npm ci)

Bash(npx tsc *)

Bash(npx eslint *)

Bash(npx playwright test *)

Bash(node scripts/*)

Bash(node skills/*)

Bash(node --test *)

Bash(jq *)

Bash(supabase migration list *)

Bash(supabase projects list *)

Bash(vercel env ls *)

Bash(vercel ls *)

Bash(gcloud builds list *)

Bash(gcloud run services list *)

Bash(gcloud run services describe *)

Bash(codex --version)

Bash(agy --version)

Bash(vibe --version)

Bash(claude --version)

Bash(git add *)

Bash(git commit *)

Bash(git switch -c *)

Bash(git checkout -b *)

Bash(git worktree add *)

Bash(git worktree list *)

Bash(git fetch *)

Bash(git pull *)

Bash(git stash push *)

Bash(git stash list *)

Bash(git merge *)

Bash(gh pr view *)

Bash(gh pr list *)

Bash(gh pr checks *)

Bash(gh pr diff *)

Bash(gh run view *)

Bash(gh run list *)

Bash(gh issue view *)

Bash(gh issue list *)

Bash(npm run *)

Context tax

Instructions: 8.5kMCP tool schemas (est.): 0Skill metadata: 101Subagent metadata: 0

ALWAYS-LOADED FILES (codex)

≡

AGENTS.md · 319 lines · ~6.2k tok

≡

skills/template/AGENTS.md · 176 lines · ~2.3k tok

Estimate: characters ÷ 4 for instruction files and skill/subagent descriptions; MCP schema sizes from typical tool counts. Harnesses with deferred tool loading pay less. Method

Guardrails 3/5

✓

Blocks destructive commands

98 deny/ask rule(s) e.g. Bash(vercel rm *)

✗

Protects secrets

No deny rule for .env / keys / ~/.ssh

✗

Pre-tool screening hook

No PreToolUse hook

✓

No YOLO mode

Permission prompts stay on

✓

Sandbox or ask-first rules

90 ask rule(s), e.g. Bash(vercel env add *)

Badge

Add to your README:

[![AgentRigs](https://agentrigs.dev/badge/rig/danybgoode/golden-frijoles.svg)](https://agentrigs.dev/r/danybgoode/golden-frijoles)

Indexed from commit b3584a58fb66 on 2026-10-09. Data is structure only — env values and anything secret-looking are stripped.

Similar rigs

tmuskal/arc-agi-benchmarker

Prove you achieved AGI at home by testing your claude-code setup against arc-agi-3 benchmarks

★ 3 project Claude Code 9 skills 6mo ago

Pragmatist 407 tok ·

nizos/tdd-guard

Automated TDD enforcement for Claude Code

★ 2,353 project Claude Code 1 skills 25d ago

Minimalist 1.3k tok ·

terranc/claude-telegram-bot-bridge

A lightweight Telegram bot that bridges Claude Code to any local folder, with autostart support for remote mobile development.

★ 134 project Claude Code 1 skills 4mo ago

Minimalist 2.1k tok ·

stefanoginella/aicontainer

Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.

★ 20 project Claude CodeCodex 1 skills 4d ago

Pragmatist 13.0k tok ·