Package Exports

@fatihkan/badi
@fatihkan/badi/bin/badi.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@fatihkan/badi) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

BADi: A Workflow Management System for Claude Code

Language / Dil: English · Turkce

npm version npm downloads per month npm total downloads license

An open-source workflow management system for Claude Code users. Automates repetitive commands, runs security scans, and optimizes token consumption by ~96%, boosting developer productivity. v1.4+ added a digital-agency workflow: WordPress management + SEO audits. v1.9 ships English-first documentation and a built-in App Store screenshot skill.

One-Command Install

npx @fatihkan/badi init

What You Get

Feature	Details
21 expert agents + 50 commands	Full toolkit from security scanner to performance profiler
12 automation hooks + 48 security skills	Branch protection, backups, OWASP Top 10 scanning
169 passing tests	Emphasis on reliability and quality
TR/EN content engine	Template inheritance, auto-generated posts and video scripts
WordPress + SEO modules	Site management via WP-CLI/REST API, 20+ SEO checks
17-module architecture	Clean code, ~520KB package (including security skills)
Open source (MIT)	Community-first, transparent licensing

Note on CLI language: most CLI output text is currently Turkish (backward-compatible). Docs are English-first; full CLI i18n is on the v1.10 roadmap.

Quick Start

# Install
npx @fatihkan/badi init

# Verify
badi doctor

# Daily workflow
badi list --agents     # List 21 agents
badi stats             # Usage analytics
badi schedule list     # Reminders

Software Development

/start                 # Start the day
/audit                 # Quality audit
/security-scan         # Security scan (48 skills)
/review                # Code review
/wrap-up               # End-of-day summary

Content Production

badi icerik basla                         # Morning session
badi icerik post "topic" --lang tr,en     # Parallel TR/EN generation
badi icerik karousel "5 tips"             # Carousel template
badi icerik video "tutorial"              # Video script
badi icerik ara "productivity"            # Archive search
badi icerik perf --trend                  # Performance tracking
badi icerik kapat                         # End-of-day summary

WordPress Management (v1.4+)

badi wp add blog https://blog.com --method rest       # REST API
badi wp add staging --method wp-cli --ssh user@host   # SSH + WP-CLI
badi wp add local --method wp-cli --path /var/www     # Local WP-CLI
badi wp list                                          # Registered sites
badi wp status blog                                   # WP version + theme + plugins
badi wp plugins staging                               # Plugin listing
badi wp update staging all                            # Core + plugins + themes
badi wp security staging                              # 6-point security scan

Mobile Development (v1.5+)

badi mobile init MyApp --framework react-native      # Project scaffold
badi mobile version bump minor                       # iOS + Android + Flutter sync
badi mobile build ios                                # Release build
badi mobile release testflight                       # TestFlight guide
badi mobile assets icon ./logo-1024.png              # 40+ size guide
badi mobile assets screenshots                       # Sizes + built-in skill

Frontend Taste - Premium UI Skills (v1.10+)

badi taste                          # List the 9 design variants
badi taste show default             # Print a variant's full SKILL.md
badi taste prompt brutalist         # Show an example trigger prompt
badi taste status                   # Check install (9/9 variants)

Nine bundled variants that stop Claude Code from generating generic "AI-looking" UI:

Variant	When to use
default	All-rounder. Premium frontend with DESIGN_VARIANCE / MOTION_INTENSITY / VISUAL_DENSITY dials.
gpt-taste	Strict editorial. Wide typography, AIDA structure, mandatory GSAP ScrollTriggers.
minimalist	Clean editorial (Notion / Linear feel). Warm monochrome, flat bento grids.
brutalist	Swiss typographic print + military terminal. Rigid grids, raw structure.
soft	High-end agency feel. Calm, expensive, premium fonts, spring motion.
redesign	Audits an existing UI and fixes generic AI patterns without breaking functionality.
output	Anti-truncation. Stacks with any variant when the agent keeps leaving placeholders.
stitch	Generates agent-friendly `DESIGN.md` files for Google Stitch.
images-first	Image-first workflow - generate references, analyze, then implement.

Trigger in Claude Code by naming the variant in your prompt:

Build a premium landing page hero. Use the frontend-taste/default skill.
Redesign this dashboard. Use the frontend-taste/redesign skill.

App Store Optimization (v1.5+)

badi aso audit 284882215                 # App listing audit (iOS)
badi aso keywords 284882215              # Keyword analysis
badi aso compete 284882215 310633997     # Competitor comparison
badi aso metadata appstore               # Character-limit guide
badi icerik release-notes --platform ios --version 2.0.0 --lang tr,en

Domain Health (v1.6+)

badi ssl example.com              # SSL cert + TLS + cipher
badi dns example.com              # A/MX/SPF/DMARC/CAA + email security score
badi whois example.com            # Registration + expiry + transfer lock

Performance & Accessibility (v1.6+)

badi lighthouse https://site.com          # Core Web Vitals + Perf/A11y/SEO/BP
badi a11y https://site.com                # WCAG 2.1 (axe-core)
badi secret-scan                          # 17 patterns (working tree)
badi secret-scan --git                    # + last 100 commits

AI/LLM Tools (v1.8+)

badi ai token                              # .claude/ token-usage analysis
badi ai prompt-test                        # Slash/agent regression tests
badi ai memory-diff                        # memory.md limit check
badi ai review                             # Claude API code review (Haiku 4.5)
badi ai translate file.md --to en          # Markdown translation

# Claude API setup:
export ANTHROPIC_API_KEY=sk-ant-...

DevOps + Code Quality (v1.8+)

badi dev deps                              # Dependency update analysis
badi dev deps --apply-patch                # Auto patch-level updates
badi dev bundle                            # Bundle size + framework detection
badi dev docker-lint                       # Dockerfile best practices
badi dev env-check                         # .env validation
badi dev api-test https://api.com/health   # HTTP endpoint tester

Git Workflow (v1.6+)

badi commit                       # Conventional-type suggestions + staged diff
badi commit --check               # Last commit format check
badi commit --message "feat: X"   # Format validation + git commit
badi changelog                    # Preview
badi changelog --write --version 1.6.0   # Write to CHANGELOG.md

SEO Audits (v1.4+)

badi seo audit https://example.com       # 20+ checks, SEO score
badi seo meta https://example.com        # Meta tag analysis
badi seo sitemap https://example.com     # robots.txt + sitemap.xml
badi seo speed https://example.com       # TTFB + resource analysis

SEO audit checks: Title, Description, Open Graph, Twitter Card, H1 structure, image alt tags, canonical URL, viewport, lang, charset, HTTPS, Schema.org, robots meta, word count, link analysis.

Project Architecture

/architect             # Turn an idea into 5 documents
/scaffold              # Generate code scaffolding
/adr                   # Architecture Decision Record
/spec-check            # Spec compliance check

Security Layer

Comprehensive scanning with 48 security skills:

Category	Scope
Injection	SQLi, NoSQLi, XSS, CSRF, SSRF, SSTI, XXE, Command, LDAP
Auth & Access	Authentication, Authorization, JWT, Privilege Escalation
Data	Secret scanning, Crypto, Data exposure
API	API security, CORS, GraphQL, Rate limiting, WebSocket
Infrastructure	Docker, IaC, CI/CD security
Language scanners	Go, TypeScript, Python, PHP, Rust, Java, C#

4-phase pipeline: Discover → Scan → Verify → Report

Performance

Metric	Before	After
CLI file	3,812 lines	157 lines (17 modules)
Startup (v1.4.2)	813ms	26ms (~97% reduction)
Token consumption	~30K/session	~2K/session
CLAUDE.md	6.8KB	1.2KB
Hook triggers	200+/session	~30/session
Template loading	Eager (~800 lines)	Lazy (on demand)

CLI Commands

badi init [--target DIR] [--force] [--dry-run]     # Configure project
badi update [--target DIR] [--force]                # Update (--force overwrites)
badi doctor [--target DIR]                          # Verify setup
badi list [--agents|--commands|--hooks|--skills]     # List components
badi plugin [install|remove|list]                    # Plugin management
badi stats [--week|--month|--habits|--export csv]    # Usage analytics
badi completion [bash|zsh|fish]                      # Shell completion
badi schedule [add|list|remove|check]                # Reminders
badi icerik [post|karousel|video|gorsel|takvim|marka|ara|sablon|perf]
badi wp [add|list|remove|status|plugins|themes|update|security]   # v1.4+
badi seo [audit|meta|sitemap|speed]                               # v1.4+
badi aso [audit|keywords|metadata|review|compete|screenshots|search]  # v1.5+
badi mobile [init|version|build|release|assets]                   # v1.5+
badi taste [list|show|prompt|status]                              # v1.10+
badi ssl|dns|whois [domain]                                       # v1.6+
badi lighthouse|a11y [url]                                        # v1.6+
badi secret-scan [--git]                                          # v1.6+
badi commit|changelog [options]                                   # v1.6+
badi ai [token|prompt-test|memory-diff|review|translate]          # v1.8+
badi dev [deps|bundle|docker-lint|env-check|api-test]             # v1.8+

Agents (21)

Category	Agents
Software	auditor, security-scanner, performance-profiler, test-strategist, api-designer, migration-pilot, code-generator, refactoring-advisor, architecture-advisor, project-architect
Diagnostics	archaeologist, error-whisperer, unsticker, yak-shave-detector, debt-collector
Content	content-creator, visual-director
Support	coach, onboarding-sherpa, pr-ghostwriter, rubber-duck

Directory Structure

bin/badi.js            Entry point (157 lines)
lib/                   17 ESM modules
  cli.js               Shared utilities (chalk, figlet, VERSION)
  commands/            11 command modules (init, update, doctor, list,
                       plugin, icerik, stats, completion, schedule,
                       wp, seo)
  templates/           TR/EN template generators
  icerik-helpers.js    Search, similarity, frontmatter
.claude/
  agents/              21 expert agents
  commands/            50 workflow commands
  hooks/               12 automation hooks
  skills/              22 categories + 48 security skills
                       (incl. mobile/app-store-screenshots)
  references/          8 project guides
  workspace/           Content files, task board
  settings.json        Hook configuration

Install Options

# npm (recommended)
npx @fatihkan/badi init

# Global
npm install -g @fatihkan/badi

# From GitHub
npm install -g github:fatihkan/badi

# Development
git clone https://github.com/fatihkan/badi.git
cd badi && npm install && npm link

Requirements

Node.js 18+ (download)
Claude Code CLI (installation)
jq (for hooks: brew install jq)

Shell Completion

badi completion bash >> ~/.bashrc
badi completion zsh >> ~/.zshrc
badi completion fish > ~/.config/fish/completions/badi.fish

Troubleshooting

`bash: .claude/hooks/guard-bash.sh: No such file or directory`

A hook is defined in .claude/settings.json but the file is missing. Fix:

badi update          # Adds missing files, preserves user customizations (recommended)
badi doctor          # Verify 12 hooks are present

If the problem persists:

badi update --force  # Force-refresh slash/agent/hook files (preserves memory/workspace)
badi init --force    # Fully reinstall (user customizations are lost)
chmod +x .claude/hooks/*.sh  # If files are not executable

`badi: command not found`

npm install -g @fatihkan/badi    # Global install
# or
npx @fatihkan/badi doctor         # Run without installing

Hook permission error

chmod +x .claude/hooks/*.sh

Node version error

Badi requires Node 18+:

node --version   # Must be v18.0.0+

Temporarily disable all hooks

mv .claude/settings.json .claude/settings.json.bak

Network Usage (Transparency)

Badi makes network requests only when you invoke features that require them. Nothing is sent in the background.

Feature	Endpoint	Purpose
Update check	`registry.npmjs.org`	Notify when a newer version is published
`badi aso *`	`itunes.apple.com`	App Store listing data
`badi seo *`	URL you provide	SEO audits
`badi lighthouse`, `badi a11y`	`googleapis.com/pagespeedonline`	PageSpeed Insights
`badi ai *`	`api.anthropic.com`	Claude API (requires `ANTHROPIC_API_KEY`)
`badi wp *`	Your WordPress site	WP REST/WP-CLI operations
`badi dev api-test`	URL you provide	HTTP endpoint testing

No telemetry, no analytics. See lib/update-check.js and lib/commands/* for the source.

Development

npm install
npm test           # 169 tests
npm run lint       # Biome code-quality checks
npm run format     # Biome formatting

Version History

Version	Summary
v1.10.0	Frontend Taste — 9 bundled premium UI skills + `badi taste` command. Anti-slop design rules for Claude Code.
v1.9.0	English-first docs (README/CHANGELOG); built-in `app-store-screenshots` skill under `.claude/skills/mobile/`
v1.8.2	`badi update --force` — force-refresh slash/agent/hook files
v1.8.1	Troubleshooting guide; better `doctor` output
v1.8.0	AI/LLM (`badi ai`) + DevOps (`badi dev`) — 10 new CLIs, 10 new slashes
v1.7.0	9 new slash commands + slash/CLI integrations (66 slashes total)
v1.6.0	Domain health (ssl/dns/whois), Lighthouse, secret-scan, a11y, commit/changelog
v1.5.0	Mobile + ASO: `badi aso` (iTunes API), `badi mobile` (init/build/release/assets), release-notes
v1.4.3	External references cleaned up, metadata simplified
v1.4.2	Lazy loading: startup ~97% faster (813ms → 26ms)
v1.4.1	SSRF protection, appPassword obfuscation, sitemap precedence fix
v1.4.0	Digital agency: `badi wp` (WordPress) + `badi seo` (20+ checks)
v1.3.2	16 bug/security fixes, CI infra, community files
v1.3.1	48 security-skill integration
v1.3.0	Modularization, token optimization, log rotation
v1.2.0	Content search, multilingual (TR/EN), template inheritance, schedule
v1.1.0	Stats, completion, content perf tracking, update notifier
v1.0.0	Initial release: 21 agents, 50 commands, 12 hooks, plugin system

License

MIT — Fatih Kan

Contributing

PRs, issues and stars are welcome. See CONTRIBUTING.md.