maintain

Set up and maintain a repository's agent instruction layer — one real root instruction file, an AGENTS.md symlink so every agent reads the same document, a comment-convention block, and a drift check that catches documented commands, paths, structures, and counts that no longer match the repo.

Initialize a project with canonical editor configurations (Zed, VSCode). Asks which editors to set up, then writes or merges the bundled settings into the repo. On conflict our values win; keys we do not define are preserved.

Synchronize or export GitHub repository labels against a predefined label set. Compares, creates, updates, deletes, or reads labels as reusable JSON definitions.

Migrate ESLint and Prettier to Biome or Oxc (including Vite+), or modernize an existing config. Detects source and target configs, compares rules, flags stale nursery rules, suggests new features, and generates actionable config changes.

Apply a security hardening baseline to a GitHub repository via gh api — branch and tag rulesets, Actions token defaults, secret scanning, Dependabot, private vulnerability reporting, CodeQL, immutable releases, and branch-restricted environments for deploy secrets. The write half of the pair with audit:security-audit, which finds the same gaps read-only.

Find and kill stale, leftover, or orphaned developer processes owned by the current user — abandoned dev servers (Vite / Vite+), editor LSP servers (oxlint), and duplicate or zombie MCP servers (playwright, context7, obsidian) left running after a shell, editor, or agent session exited.