@csark0812/skeleton 4.0.1 → 5.0.0

package/dist/plugin-types.js

@@ -12,6 +12,12 @@ function issue(rule, file, details, options) {
     severity: selected?.severity ?? "error"
   };
 }
+var REREAD_CODES = new Set([
+  "review-dependency-changed",
+  "impacted-document-review-required",
+  "review-document-changed",
+  "review-dependency-set-changed"
+]);
 // src/audit/core/shared.ts
 function normalizeRelPath(p) {
   let out = p.replace(/\\/g, "/");

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@csark0812/skeleton",
-	"version": "4.0.1",
+	"version": "5.0.0",
 	"description": "SSOT audit CLI for agent harness repos",
 	"type": "module",
 	"bin": {
@@ -34,7 +34,7 @@
 	},
 	"packageManager": "bun@1.2.21",
 	"scripts": {
-		"build": "bun build src/cli.ts --target=node --outfile=dist/cli.js && bun build src/hooks/customize-on-skill-read.ts --target=node --outfile=dist/hooks/customize-on-skill-read.js && bun build src/plugin-types.ts --target=node --format=esm --outfile=dist/plugin-types.js --packages=external && bun build src/result-types.ts --target=node --format=esm --outfile=dist/result-types.js --packages=external && tsc -p tsconfig.types.json",
+		"build": "bun build src/cli.ts --target=node --outfile=dist/cli.js && bun build src/plugin-types.ts --target=node --format=esm --outfile=dist/plugin-types.js --packages=external && bun build src/result-types.ts --target=node --format=esm --outfile=dist/result-types.js --packages=external && tsc -p tsconfig.types.json",
 		"test": "bun test",
 		"test:audit": "bun test src/audit/__tests__",
 		"test:cli": "bun test src/__tests__/cli",

package/schemas/config.schema.json

@@ -88,26 +88,10 @@
 				}
 			}
 		},
-		"customize": {
-			"type": "object",
-			"additionalProperties": false,
-			"description": "Customize inject options for IDE hooks and `skeleton customize resolve`",
-			"properties": {
-				"alwaysInclude": {
-					"type": "array",
-					"items": {
-						"type": "string",
-						"minLength": 1,
-						"pattern": "^[a-zA-Z0-9._-]+\\.md$"
-					},
-					"description": "Basenames under .skeleton/customize/ appended whenever a skill customize injects (even if the slug file is missing or empty)"
-				}
-			}
-		},
 		"skillOwnership": {
 			"type": "object",
 			"additionalProperties": false,
-			"description": "Provenance-aware skill body linting: foreign (synced) skills are skipped; owned local skills and .skeleton/customize stay audited",
+			"description": "Provenance-aware skill body linting: foreign (synced) skills are skipped; owned local skills stay audited",
 			"properties": {
 				"lockfile": {
 					"type": "string",
@@ -126,6 +110,23 @@
 				}
 			}
 		},
+		"reviewCoverage": {
+			"type": "object",
+			"additionalProperties": false,
+			"description": "Require files matching include to appear in at least one scanned document's review-deps. Omit the section to use built-in code defaults. Set include to [] to disable.",
+			"properties": {
+				"include": {
+					"type": "array",
+					"items": { "type": "string", "minLength": 1 },
+					"description": "Repo-relative globs that require an owning paper. Empty array disables coverage and uncovered-changed-path."
+				},
+				"exclude": {
+					"type": "array",
+					"items": { "type": "string", "minLength": 1 },
+					"description": "Globs removed from the coverage set (added to built-in test and fixture excludes)"
+				}
+			}
+		},
 		"reviewProof": {
 			"type": "object",
 			"additionalProperties": false,

package/templates/skeleton-init/config.yaml

@@ -14,11 +14,6 @@ deny:
 
 daysUntilStale: 365
 
-# Optional: basenames under .skeleton/customize/ appended on every skill inject
-# customize:
-#   alwaysInclude:
-#     - shared-agent-references.md
-
 # Optional: skill body ownership (skills-lock.json github entries are foreign by default)
 # skillOwnership:
 #   lockfile: skills-lock.json

package/templates/skeleton-init/pre-commit-config.yaml

@@ -0,0 +1,9 @@
+# Installed by `skeleton init`. Run `pre-commit install` once per machine.
+repos:
+  - repo: local
+    hooks:
+      - id: skeleton-validate-staged
+        name: skeleton validate changed (staged)
+        entry: node node_modules/@csark0812/skeleton/dist/cli.js validate changed --staged
+        language: system
+        pass_filenames: false

package/templates/skeleton-init/skeleton.toml

@@ -15,15 +15,14 @@ exclude = [
 [deny]
 paths = []
 
-# Optional but recommended: make review claims verifiable against exact document
-# and review-dependency bytes. Commit the generated lockfile.
-# [reviewProof]
-# mode = "hash"
+[reviewProof]
+mode = "hash"
 # lockfile = ".skeleton/review-lock.json"
 
-# Optional: basenames under .skeleton/customize/ appended on every skill inject
-# [customize]
-# alwaysInclude = ["shared-agent-references.md"]
+# Defaults apply when this section is omitted. Empty include disables the gate.
+# [reviewCoverage]
+# include = ["**/*.{ts,tsx,js,jsx,mjs,cjs,py}", "package.json", "project.json"]
+# exclude = ["**/__tests__/**", "**/*.test.*", "**/*.spec.*", "**/fixtures/**", "templates/**", "**/node_modules/**", "**/dist/**"]
 
 # Optional: near-dupe / SSOT-summary tunables
 # [docsLint]