The product

One Claude Code Plugin named cogs, declared in .claude-plugin/marketplace.json, bundles all 7 Skills. Each Skill lives in skills/<name>/ as a SKILL.md (what Claude Code loads) and a metadata.json whose provenance abstract records where the pattern came from.

Five Skills also ship as their own npm package, @cogs/skill-<name>, generated from skills/ as a Skill mirror. config-lint and env-doctor are Sibling skills that stay plugin-only.

Generated Kubb code compiles against two Seams: @cogs/fetch-client for HTTP transport and @cogs/react-query for TanStack Query. @cogs/kubb-transforms wires the generated output to them after each generation. The generated code is disposable; the Seams are stable.

@cogs/auth verifies JWKS tokens and resolves an Auth role on the Org role ladder (org:viewer < org:contributor < org:admin) or the ci:agent Machine role. @cogs/auth-events detects a New device sign-in and asks for the new_device_login email.

@cogs/emails holds the MJML/EJS Email templates and per-Brand theming. The private @cogs/send-service is the only holder of SES send credentials: it accepts signed /send requests for allowlisted Send events and also serves the Before-User-Created hook that rejects disposable email domains.

infra/ is Terraform, not an npm package: SES domain identities with DKIM and MAIL FROM, per-site IAM SMTP credentials, Cloudflare DNS and Turnstile widgets. The private @cogs/supabase-sync reconciles one uniform Supabase auth config to each Site’s project, with read-back verification.