development-tools.md

Development tools

This page lists third-party tools used during Locksmith development but not linked into or distributed with the locksmith binary. Their licenses are recorded here for attribution; they are intentionally not included in LICENSE's ## Third-Party Notices section, which covers only libraries that ship inside the binary.

If you add or remove a development tool, update this file and the matching CHANGES.md entry in the same commit.

Build tools

These are installed via make install-tools and invoked by the build, lint, and codegen targets in Makefile.

github.com/bufbuild/buf

• Version: v1.68.1
• License: Apache-2.0
• Role: protobuf compiler and linter (make proto, make lint)
• Source: https://github.com/bufbuild/buf
• License text: https://github.com/bufbuild/buf/blob/v1.68.1/LICENSE

github.com/golangci/golangci-lint/v2

• Version: v2.11.4
• License: GPL-3.0
• Role: Go linter aggregator (make lint)
• Source: https://github.com/golangci/golangci-lint
• Install path: github.com/golangci/golangci-lint/v2/cmd/golangci-lint
• License text: https://github.com/golangci/golangci-lint/blob/v2.11.4/LICENSE

AI agent tooling

These are optional external MCP servers and agent skill packs used by maintainers when working in AI-assisted editors. They are not required to build, test, or ship Locksmith.

@colbymchenry/codegraph

• Version: 0.7.10
• License: MIT
• Role: tree-sitter-based code knowledge graph exposed as an MCP server (codegraph_* tools); used by the .codegraph/config.json index and the .cursor/rules/codegraph.mdc rule in this repository
• Source: https://www.npmjs.com/package/@colbymchenry/codegraph

obra/superpowers

• Version: v5.1.0
• License: MIT
• Role: skill pack consumed by Claude Code and similar agents; provides the superpowers:* skills referenced from CLAUDE.md and the project .claude/skills/ workflows
• Source: https://github.com/obra/superpowers
• License text: https://github.com/obra/superpowers/blob/v5.1.0/LICENSE