~ / rigs / supernovae-st / nika

supernovae-st/nika

Intent as Code | the workflow language for AI. One file, 4 verbs, one Rust binary. Local-first, any model, AGPL-3.0. 🦋

↗ GitHub ★ 89 agpl-3.0 updated 11d ago project Claude Code Codex Claude plugin

share on X

ARCHETYPE

Automator

Hooks on every lifecycle event: format, lint, notify, log.

CONTEXT TAX · EVERY TURN

~5.1k tokens

Moderate · median rig: 2.3k · breakdown

GUARDRAILS

3/5

Blocks destructive commands · Pre-tool screening hook · No YOLO mode · details

Copy this rig

# review before running: this installs third-party code
$ claude mcp add nika -- nika mcp
$ npx degit supernovae-st/nika/.claude ./rig-nika  # inspect, then merge into .claude/

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE 'git push[[:space:]]+.*(--force(-with-lease)?|-f)\\b'; then echo '❌ FORBIDDEN: git push --force (incl --force-with-lease). Would destroy "
          },
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE '(^|&&[[:space:]]*|;[[:space:]]*|\\|\\|[[:space:]]*)git add[[:space:]]+(-A|\\.|\\*)'; then echo '❌ FORBIDDEN: git add -A/./*. Stage explicit"
          },
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE 'cargo test[[:space:]]+--test\\b'; then echo '❌ FORBIDDEN: cargo test --test triggers macOS Keychain popup. Use --lib only (feedback_no_k"
          },
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE 'git[[:space:]]+(checkout|switch)[[:space:]]+main\\b'; then echo '❌ FORBIDDEN: main is read-only. Use `git show brouillon:path` instead.'"
          },
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE '(git commit|git push).*--no-verify'; then echo '❌ FORBIDDEN: --no-verify bypasses hooks. Fix the underlying issue.' >&2; exit 2; fi"
          },
          {
            "type": "command",
            "command": "INPUT=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.command // empty' 2>/dev/null); if echo \"$INPUT\" | grep -qE 'cargo[[:space:]]+(yank|publish)\\b' && ! echo \"$INPUT\" | grep -qE '(--dry-run|--undo)\\b'; then echo '🛑 IRREVERSIBLE: cargo yank/publish "
          }
        ]
      },
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "FILE=$(echo \"$CLAUDE_TOOL_INPUT\" | jq -r '.file_path // empty' 2>/dev/null); if echo \"$FILE\" | grep -qE '/\\.git/'; then echo '❌ FORBIDDEN: editing inside .git/ directory.' >&2; exit 2; fi"
          }
        ]
      }
    ]
  }
}

MCP servers (1)

server	source	est. tokens
nika	binary	2.5k

Skills (6)

nika-authoring nika-debugging nika-migration nika-operating crate-admit gate-check

Subagents (1)

review-swarm

Review a crate independently from three perspectives for ADR-003 admission Gate 11.

Hooks (15)

event	matcher	runs
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE 'git push[[:space:]]+.*(--force(-with-lease)?\|-f)\b'; then echo '❌ FORBIDDEN: git push --force (incl --force-with-lease). Would destroy
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE '(^\|&&[[:space:]]\|;[[:space:]]\|\\|\\|[[:space:]])git add[[:space:]]+(-A\|\.\|\)'; then echo '❌ FORBIDDEN: git add -A/./*. Stage explicit
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE 'cargo test[[:space:]]+--test\b'; then echo '❌ FORBIDDEN: cargo test --test triggers macOS Keychain popup. Use --lib only (feedback_no_k
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE 'git[[:space:]]+(checkout\|switch)[[:space:]]+main\b'; then echo '❌ FORBIDDEN: main is read-only. Use `git show brouillon:path` instead.'
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE '(git commit\|git push).*--no-verify'; then echo '❌ FORBIDDEN: --no-verify bypasses hooks. Fix the underlying issue.' >&2; exit 2; fi
PreToolUse	Bash	INPUT=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$INPUT" \| grep -qE 'cargo[[:space:]]+(yank\|publish)\b' && ! echo "$INPUT" \| grep -qE '(--dry-run\|--undo)\b'; then echo '🛑 IRREVERSIBLE: cargo yank/publish
PreToolUse	Edit\|Write	FILE=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.file_path // empty' 2>/dev/null); if echo "$FILE" \| grep -qE '/\.git/'; then echo '❌ FORBIDDEN: editing inside .git/ directory.' >&2; exit 2; fi
PostToolUse	Bash	CMD=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$CMD" \| grep -qE '(^\|&&[[:space:]]\|;[[:space:]]\|\\|\\|[[:space:]]*)git commit\b' && git log -1 --format=%B 2>/dev/null \| grep -qi 'Co-Authored-By: Claude'; t
PostToolUse	Bash	CMD=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$CMD" \| grep -qE '(^\|&&[[:space:]]\|;[[:space:]]\|\\|\\|[[:space:]]*)git commit\b' && git log -1 --format=%B 2>/dev/null \| grep -qE 'admit to workspace'; then
PostToolUse	Bash	CMD=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.command // empty' 2>/dev/null); if echo "$CMD" \| grep -qE '(^\|&&[[:space:]]\|;[[:space:]]\|\\|\\|[[:space:]]*)git push\b' && ! echo "$CMD" \| grep -qE '(^\|[[:space:]])(--force\|-f)([[:space:]]\|$)'; then
PostToolUse	Write\|Edit	FILE=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.file_path // empty' 2>/dev/null); if [ -n "$FILE" ] && echo "$FILE" \| grep -q '\.rs$' && [ -f "$FILE" ]; then LOC=$(wc -l < "$FILE" 2>/dev/null \|\| echo 0); if [ "$LOC" -gt 1500 ]; then echo "⚠️ WAR
PostToolUse	Write\|Edit	FILE=$(echo "$CLAUDE_TOOL_INPUT" \| jq -r '.file_path // empty' 2>/dev/null); if [ -n "$FILE" ] && echo "$FILE" \| grep -qE '(MEMORY\|SEQUENCE)\.md$'; then REPO=$(git rev-parse --show-toplevel 2>/dev/null \|\| echo '.'); LOG="$REPO/.nika/state-c
SessionStart	*	cd "${CLAUDE_PROJECT_DIR:-.}" 2>/dev/null && HEAD=$(git log -1 --format=%h 2>/dev/null \|\| echo ?); BRANCH=$(git branch --show-current 2>/dev/null \|\| echo ?); CRATES=$(ls crates/*/Cargo.toml 2>/dev/null \| wc -l \| tr -d ' '); echo "💎 Nika Dia
SessionStart	*	cd "${CLAUDE_PROJECT_DIR:-.}" 2>/dev/null && if [ -x scripts/hygiene/check-all.sh ]; then RESULT=$(scripts/hygiene/check-all.sh --quiet 2>&1 \| tail -1); echo "🩺 Hygiene: $RESULT"; fi
Stop	*	echo '🦋 Session end. If crate admitted: update MEMORY.md Quick State + run scripts/hygiene/check-all.sh'

Slash commands (4)

/admit/diamond-gates/diamond-health/legacy-lookup

Context tax

Instructions: 2.3kMCP tool schemas (est.): 2.5kSkill metadata: 289Subagent metadata: 31

ALWAYS-LOADED FILES (claude-code)

≡

CLAUDE.md · 31 lines · ~380 tok

≡

.claude/CLAUDE.md · 42 lines · ~608 tok · 1 @import (+1.3k)

≡

AGENTS.md · 84 lines · ~1.3k tok

Estimate: characters ÷ 4 for instruction files and skill/subagent descriptions; MCP schema sizes from typical tool counts. Harnesses with deferred tool loading pay less. Method

Guardrails 3/5

✓

Blocks destructive commands

PreToolUse hook screens Bash: INPUT=$(echo "$CLAUDE_TOOL_INPUT" | jq -r '.command // empty' 2>/dev/null); if e

✗

Protects secrets

No deny rule for .env / keys / ~/.ssh

✓

Pre-tool screening hook

7 PreToolUse hook(s)

✓

No YOLO mode

Permission prompts stay on

✗

Sandbox or ask-first rules

No sandbox and no ask-first rules

Badge

Add to your README:

[![AgentRigs](https://agentrigs.dev/badge/rig/supernovae-st/nika.svg)](https://agentrigs.dev/r/supernovae-st/nika)

Indexed from commit 4bdc06aee67d on 2026-10-09. Data is structure only — env values and anything secret-looking are stripped.

Similar rigs

supernovae-st/nika-plugins

One Add teaches your agent Nika: skills, commands, hooks, an MCP oracle.

★ 3 collection Codex 1 mcp 4 skills 2d ago

Pragmatist 3.9k tok ·

undefined-ui/second-brain-os

An AI second brain that maintains itself. Full guide, starter vault, agent skills and scripts for a self-organizing knowledge base in Claude Code and Obsidian.

★ 811 project Claude Code 23 skills 10d ago

Skill Collector 1.2k tok ·

jongwony/epistemic-protocols

Epistemic protocols for Claude Code — structure human-AI interaction quality at every decision point - https://epistemic-protocols.com

★ 170 project Claude CodeCodex 29 skills 1 hooks 9d ago

Skill Collector 6.8k tok ·

nesquikm/dev-process-toolkit

Portable skills, agents, and templates that add Spec-Driven Development and TDD workflows to any Claude Code project. Deterministic gate checks, bounded self-review loops, and binary acceptance criteria keep AI agents on track. Proven acros

★ 7 project Claude Code 2 mcp 30 skills 1 hooks today

Skill Collector 19.7k tok ·