@friedbotstudio/create-baseline 0.1.0

package/obj/template/.claude/project.json

@@ -0,0 +1,221 @@
+{
+  "$schema_version": 1,
+  "configured": false,
+  "test": {
+    "cmd": "bash .claude/skills/audit-baseline/audit.sh",
+    "affected_resolver": null,
+    "file_globs": [
+      "**/*"
+    ],
+    "timeout_seconds": 120
+  },
+  "lint": {
+    "cmd": null,
+    "file_globs": [
+      "**/*"
+    ],
+    "timeout_seconds": 60
+  },
+  "tdd": {
+    "enabled": true,
+    "source_globs": [
+      "src/**",
+      "bin/**",
+      "scripts/**",
+      "site/assets/src/**",
+      ".claude/skills/**",
+      ".claude/hooks/**"
+    ],
+    "test_globs": [
+      "tests/**",
+      "test/**",
+      "spec/**",
+      "__tests__/**",
+      "**/*_test.*",
+      "**/*.test.*",
+      "**/*.spec.*"
+    ],
+    "mapping": "conventional",
+    "exempt_globs": [
+      "**/*.md",
+      "**/*.json",
+      "**/*.yaml",
+      "**/*.yml",
+      "**/*.toml",
+      "docs/**",
+      ".claude/**",
+      ".config/**",
+      "src/**.template.*",
+      "site/assets/brandmark*",
+      "site/assets/favicon/**"
+    ],
+    "ui_globs": [
+      "site-src/**",
+      "app/**/*.{tsx,jsx}",
+      "components/**/*.{tsx,jsx,vue,svelte}",
+      "pages/**/*.{tsx,jsx,vue,svelte}",
+      "src/**/*.{tsx,jsx,vue,svelte}",
+      "**/*.html",
+      "**/*.css",
+      "**/*.scss",
+      "**/*.njk"
+    ]
+  },
+  "destructive": {
+    "mode": "ask",
+    "hard_block_patterns": [
+      "^\\s*rm\\s+.*-[a-zA-Z]*r[a-zA-Z]*f[a-zA-Z]*\\s+/(\\s|$)",
+      "^\\s*rm\\s+.*-[a-zA-Z]*f[a-zA-Z]*r[a-zA-Z]*\\s+/(\\s|$)",
+      ":\\(\\)\\s*\\{\\s*:\\|:&\\s*\\};:",
+      "\\bdd\\b.*of=/dev/(sd|nvme|hd|disk)",
+      "\\bmkfs(\\.[a-z0-9]+)?\\b",
+      "\\b(shutdown|halt|poweroff|reboot)\\b",
+      ">\\s*/dev/sda",
+      "\\bchmod\\s+-R\\s+000\\s+/"
+    ],
+    "ask_patterns": [
+      "\\brm\\s+-[a-zA-Z]*r[a-zA-Z]*f[a-zA-Z]*\\b",
+      "\\bgit\\s+reset\\s+--hard\\b",
+      "\\bgit\\s+clean\\s+-[a-zA-Z]*f[a-zA-Z]*\\b",
+      "\\bgit\\s+checkout\\s+--\\b",
+      "\\bgit\\s+branch\\s+-D\\b",
+      "\\bgit\\s+push\\s+.*(--force|--force-with-lease|-f\\b)",
+      "\\bdrop\\s+(table|database|schema)\\b",
+      "\\btruncate\\s+table\\b",
+      "\\bkill\\s+-9\\b",
+      "\\bchown\\s+-R\\b.*\\s/",
+      "\\bnpm\\s+publish\\b",
+      "\\bnpm\\s+version\\b",
+      "\\bgit\\s+init\\b"
+    ]
+  },
+  "workflow": {
+    "phases": [
+      "intake",
+      "scout",
+      "research",
+      "spec",
+      "review",
+      "tdd",
+      "simplify",
+      "security",
+      "integrate",
+      "document",
+      "commit"
+    ],
+    "optional_phases": [
+      "security"
+    ],
+    "artifacts": {
+      "intake": "docs/intake/*.md",
+      "scout": "docs/scout/*.md",
+      "research": "docs/research/*.md",
+      "spec": "docs/specs/*.md",
+      "review": ".claude/state/spec_approvals/*.approval",
+      "tdd": null,
+      "simplify": null,
+      "security": "docs/security/*.md",
+      "integrate": null,
+      "document": "site/dist/**",
+      "commit": null
+    }
+  },
+  "artifacts": {
+    "required_sections": {
+      "intake": [
+        "Problem",
+        "Goal",
+        "Acceptance criteria"
+      ],
+      "brd": [
+        "Business objective",
+        "Scope",
+        "Business requirements"
+      ],
+      "spec": [
+        "Goal",
+        "Design",
+        "Design calls",
+        "Acceptance criteria",
+        "Test plan"
+      ],
+      "rca": [
+        "Summary",
+        "Timeline",
+        "Impact",
+        "Root cause",
+        "Action items"
+      ]
+    },
+    "required_diagrams": {
+      "spec": {
+        "c4_context": {
+          "min": 1,
+          "marker": "!include <C4/C4_Context>"
+        },
+        "c4_container": {
+          "min": 1,
+          "marker": "!include <C4/C4_Container>"
+        },
+        "c4_component": {
+          "min": 1,
+          "marker": "!include <C4/C4_Component>"
+        },
+        "sequence": {
+          "min": 1,
+          "any_of": [
+            "^\\s*participant\\b",
+            "^\\s*actor\\b"
+          ]
+        },
+        "class": {
+          "min": 1,
+          "any_of": [
+            "^\\s*class\\s+\\w"
+          ]
+        },
+        "dependency_graph": {
+          "min": 1,
+          "any_of": [
+            "'\\s*@kind\\s+dependency-graph"
+          ]
+        }
+      }
+    }
+  },
+  "consent": {
+    "commit_ttl_seconds": 300,
+    "gate_marker_ttl_seconds": 120
+  },
+  "swarm": {
+    "max_parallel": 4,
+    "granularity": "component",
+    "min_tasks_worth_swarming": 3,
+    "isolation": "shared",
+    "refuse_dirty_tree": true,
+    "exempt_path_prefixes": [
+      ".claude/",
+      ".git/",
+      ".venv/",
+      "node_modules/"
+    ],
+    "enforced_path_prefixes": [
+      "src/",
+      "lib/",
+      "app/",
+      "pkg/",
+      "internal/",
+      "tests/",
+      "test/",
+      "spec/",
+      "docs/"
+    ]
+  },
+  "additions": {
+    "agents": [],
+    "skills": [],
+    "hooks": [],
+    "mcp_servers": [],
+    "swarm_worker_skills": []
+  }
+}

package/obj/template/.claude/settings.json

@@ -0,0 +1,110 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "skillListingBudgetFraction": 0.05,
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/destructive_cmd_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/git_commit_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/process_lifecycle_guard.sh" }
+        ]
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit|NotebookEdit",
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/setup_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/env_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/spec_approval_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/swarm_approval_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/git_commit_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/verify_pass_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/track_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/artifact_template_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/plantuml_syntax_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/spec_diagram_presence_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/swarm_boundary_guard.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/spec_design_calls_guard.sh" }
+        ]
+      },
+      {
+        "matcher": "Write",
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/tdd_order_guard.sh" }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/consent_gate_grant.sh" }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/lint_runner.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/test_runner.sh" }
+        ]
+      }
+    ],
+    "SessionStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/memory_session_start.sh" }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/memory_stop.sh" },
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/harness_continuation.sh" }
+        ]
+      }
+    ],
+    "PreCompact": [
+      {
+        "matcher": "manual|auto",
+        "hooks": [
+          { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/memory_pre_compact.sh" }
+        ]
+      }
+    ]
+  },
+  "permissions": {
+    "allow": [
+      "Read",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(rg:*)",
+      "Bash(grep:*)",
+      "Bash(git status:*)",
+      "Bash(git diff:*)",
+      "Bash(git log:*)",
+      "Bash(git show:*)",
+      "Bash(git branch:*)",
+      "Bash(git blame:*)"
+    ],
+    "deny": [
+      "Bash(git push:*)",
+      "Bash(git commit --amend:*)",
+      "Bash(git reset --hard:*)",
+      "Bash(git clean -f:*)",
+      "Bash(git clean -fd:*)",
+      "Bash(git branch -D:*)",
+      "Bash(git checkout --:*)",
+      "Bash(git config:*)",
+      "Bash(git rebase -i:*)",
+      "Bash(git add -A:*)",
+      "Bash(git add .:*)",
+      "Edit(.env)",
+      "Edit(.env.*)",
+      "Write(.env)",
+      "Write(.env.*)"
+    ]
+  }
+}

package/obj/template/.claude/skills/archive/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: archive
+owner: baseline
+description: Phase 10.5 — move the slug's workflow artifacts (intake, scout, research, spec, approvals, swarm state, security reports, rendered diagrams) to docs/archive/<YYYY-MM-DD>/<slug>/. Runs before /commit so the committed tree is clean of work-in-flight files. workflow.json stays live and gets archived as the first step of /commit.
+---
+
+# archive — Phase 10.5
+
+Invoked after `/document` and before `/commit`. Pillar 4 of seed.md ("no historical data — moved to archive") happens here.
+
+The archival *bundle* is planned at spec time — the spec's slug determines which files travel together. This skill is the executor.
+
+## Prereq
+
+`workflow.json` must have `document` in `completed` OR in `exceptions`. Otherwise stop and say which phase is missing.
+
+## Steps
+
+1. Read `.claude/state/workflow.json` to get the slug (derive from `request`, or from any `docs/specs/*.md` that was produced — whichever is present).
+2. Run the archive script:
+   ```
+   .claude/skills/archive/archive.sh <slug>
+   ```
+   The script moves (`git mv` if repo is git, else `mv`) these artifacts — whichever exist — to `docs/archive/<YYYY-MM-DD>/<slug>/`:
+
+   | Source | Target in bundle |
+   |---|---|
+   | `docs/intake/<slug>.md` | `intake.md` |
+   | `docs/brd/<slug>.md` | `brd.md` |
+   | `docs/scout/<slug>.md` | `scout.md` |
+   | `docs/research/<slug>.md` | `research.md` |
+   | `docs/specs/<slug>.md` | `spec.md` |
+   | `docs/specs/_rendered/<slug>/` | `spec-rendered/` |
+   | `docs/security/<slug>-*.md` | `security.md` (concatenated if multiple) |
+   | `.claude/state/spec_approvals/<slug>.approval` | `spec.approved` |
+   | `.claude/state/swarm/<slug>.json` | `swarm.json` |
+   | `.claude/state/swarm_approvals/<slug>.approval` | `swarm.approved` |
+
+3. **Do NOT move `workflow.json`.** `/commit` archives it as its first step so the phase ordering is preserved until the end.
+
+4. Append `"archive"` to `workflow.json → completed`.
+5. Tell the user: "Archived to `docs/archive/<date>/<slug>/`. Ready for `/grant-commit` → `/commit`."
+
+## Constraints
+
+- **Never archive a workflow in-flight.** If the user runs `/archive` before the workflow is done (integrate/document not complete), refuse and tell them which phase is missing.
+- **Never delete artifacts.** Move-only. If a target file already exists in the bundle (re-run), refuse and tell the user to pick a new archive date or remove the conflict.
+- **Idempotent on partial failure**: if the script moves 3 of 5 files and then fails, re-running continues from where it stopped (the moved files are gone from source, the un-moved are still at source).

package/obj/template/.claude/skills/archive/archive.sh

@@ -0,0 +1,145 @@
+#!/usr/bin/env bash
+# archive.sh — Phase 10.5 archival.
+# Moves all slug-matched workflow artifacts into docs/archive/<YYYY-MM-DD>/<slug>/.
+# Never moves workflow.json (that's /commit's job).
+#
+# Usage:  archive.sh <slug>
+#
+# Exit codes:
+#   0  archive complete (including "nothing to archive" — idempotent)
+#   1  archive target already exists with conflicting files (re-run hazard)
+#   2  bad invocation / missing slug
+
+set -u
+
+if [ "${1:-}" = "" ]; then
+    echo "usage: archive.sh <slug>" >&2
+    exit 2
+fi
+SLUG="$1"
+ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+DATE="$(date -u +%Y-%m-%d)"
+BUNDLE="$ROOT/docs/archive/$DATE/$SLUG"
+
+# Use `git mv` when in a git repo (preserves history); else plain mv.
+USE_GIT=0
+if git -C "$ROOT" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    USE_GIT=1
+fi
+
+mkdir -p "$BUNDLE"
+
+move() {
+    # $1 = source abs path, $2 = target abs path (must not exist)
+    local src="$1" dst="$2"
+    if [ ! -e "$src" ]; then
+        return 0
+    fi
+    if [ -e "$dst" ]; then
+        echo "archive: refusing to overwrite existing $dst" >&2
+        return 1
+    fi
+    mkdir -p "$(dirname "$dst")"
+    if [ "$USE_GIT" = "1" ] && git -C "$ROOT" ls-files --error-unmatch "${src#$ROOT/}" >/dev/null 2>&1; then
+        git -C "$ROOT" mv "${src#$ROOT/}" "${dst#$ROOT/}"
+    else
+        mv "$src" "$dst"
+    fi
+    echo "  moved: ${src#$ROOT/} -> ${dst#$ROOT/}"
+}
+
+count_moved=0
+failed=0
+
+declare -a PAIRS=(
+    "docs/intake/$SLUG.md                            intake.md"
+    "docs/brd/$SLUG.md                               brd.md"
+    "docs/scout/$SLUG.md                             scout.md"
+    "docs/research/$SLUG.md                          research.md"
+    "docs/specs/$SLUG.md                             spec.md"
+    ".claude/state/spec_approvals/$SLUG.approval     spec.approved"
+    ".claude/state/swarm/$SLUG.json                  swarm.json"
+    ".claude/state/swarm_approvals/$SLUG.approval    swarm.approved"
+)
+
+for pair in "${PAIRS[@]}"; do
+    # shellcheck disable=SC2086
+    set -- $pair
+    src_rel="$1"
+    dst_name="$2"
+    src="$ROOT/$src_rel"
+    dst="$BUNDLE/$dst_name"
+    if [ -e "$src" ]; then
+        if move "$src" "$dst"; then
+            count_moved=$((count_moved + 1))
+        else
+            failed=$((failed + 1))
+        fi
+    fi
+done
+
+# Rendered diagrams directory (whole subtree).
+RENDERED_SRC="$ROOT/docs/specs/_rendered/$SLUG"
+RENDERED_DST="$BUNDLE/spec-rendered"
+if [ -d "$RENDERED_SRC" ]; then
+    if [ -e "$RENDERED_DST" ]; then
+        echo "archive: refusing to overwrite existing $RENDERED_DST" >&2
+        failed=$((failed + 1))
+    else
+        if [ "$USE_GIT" = "1" ] && git -C "$ROOT" ls-files --error-unmatch "docs/specs/_rendered/$SLUG" >/dev/null 2>&1; then
+            git -C "$ROOT" mv "docs/specs/_rendered/$SLUG" "docs/archive/$DATE/$SLUG/spec-rendered"
+        else
+            mv "$RENDERED_SRC" "$RENDERED_DST"
+        fi
+        echo "  moved: docs/specs/_rendered/$SLUG -> docs/archive/$DATE/$SLUG/spec-rendered"
+        count_moved=$((count_moved + 1))
+    fi
+fi
+
+# Security reports (multiple files possible).
+shopt -s nullglob
+for sec in "$ROOT"/docs/security/$SLUG-*.md; do
+    if [ -e "$sec" ]; then
+        # Concatenate into one security.md in the bundle.
+        {
+            echo "# Security reports — $SLUG"
+            echo
+            for f in "$ROOT"/docs/security/$SLUG-*.md; do
+                [ -e "$f" ] || continue
+                echo "## $(basename "$f")"
+                echo
+                cat "$f"
+                echo
+            done
+        } > "$BUNDLE/security.md"
+        # Remove originals.
+        for f in "$ROOT"/docs/security/$SLUG-*.md; do
+            [ -e "$f" ] || continue
+            if [ "$USE_GIT" = "1" ] && git -C "$ROOT" ls-files --error-unmatch "${f#$ROOT/}" >/dev/null 2>&1; then
+                git -C "$ROOT" rm -q "${f#$ROOT/}"
+            else
+                rm "$f"
+            fi
+            count_moved=$((count_moved + 1))
+        done
+        echo "  moved: docs/security/$SLUG-*.md -> docs/archive/$DATE/$SLUG/security.md"
+        break
+    fi
+done
+shopt -u nullglob
+
+if [ "$failed" -gt 0 ]; then
+    echo "archive: $failed conflict(s). Bundle at $BUNDLE is partially populated; resolve conflicts and re-run." >&2
+    exit 1
+fi
+
+if [ "$count_moved" = "0" ]; then
+    # Nothing to archive — remove the empty bundle dir we created.
+    rmdir "$BUNDLE" 2>/dev/null || true
+    rmdir "$ROOT/docs/archive/$DATE" 2>/dev/null || true
+    rmdir "$ROOT/docs/archive" 2>/dev/null || true
+    echo "archive: nothing to archive for slug '$SLUG'"
+    exit 0
+fi
+
+echo "archive: OK — $count_moved artifact(s) moved to ${BUNDLE#$ROOT/}"

package/obj/template/.claude/skills/audit-baseline/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: audit-baseline
+owner: baseline
+description: Drift check between the baseline implementation on disk and the claims in `docs/init/seed.md` + cross-references in CLAUDE.md, README.md, and the rendered docs site. Verifies hook/agent/skill/command names + counts, settings.json wiring, project.json key presence, .mcp.json servers, vendored license files, and helper script presence. Exit 0 PASS / 1 FAIL — suitable for CI. Read-only; safe to invoke any time.
+---
+
+# audit-baseline — drift defender
+
+Mechanical check that the baseline implementation matches its specification. Deterministic, not LLM judgment — pattern matches and file presence only. Run on demand, by `/init-project` Step 8, or in CI.
+
+## What it checks
+
+| Category | Check |
+|---|---|
+| **Counts** | Hooks, agents, skills, commands on disk match the count claimed in `seed.md` |
+| **Names** | Each component's name matches the canonical list in `seed.md` §4 |
+| **Helper scripts** | `validate.sh`, `swarm_merge.sh`, `render.sh`, `lint.sh`, `archive.sh` present + executable |
+| **settings.json** | Every baseline hook is wired in the correct event/matcher block |
+| **project.json** | Every key listed in `seed.md` §13 Step 8 exists (values may be null pre-init) |
+| **.mcp.json** | `context7` and `plantuml` servers declared |
+| **Vendored licenses** | `claude-automation-recommender/{LICENSE,NOTICE}` present (Apache 2.0 attribution) |
+| **Cross-doc counts** | Numeric claims in `CLAUDE.md`, `README.md`, and `docs/init/seed.md` match disk |
+
+## Invocation
+
+`/audit-baseline` — model-invocable and user-invocable.
+
+Calls `audit.sh`. Output is a compact pass/fail table with a final verdict. Exits `0` on a clean audit, `1` on any failure. WARN-level findings (advisory; e.g., a doc with no relevant claims) don't fail the audit.
+
+## When to run
+
+- **End of `/init-project`** — Step 8. A fresh baseline should pass.
+- **Before `/approve-spec`** — confirm the baseline hasn't drifted.
+- **In CI** — fail the build on drift.
+- **On demand** — when something feels off, when adding a component, or after a long gap in baseline maintenance.
+
+## When the audit reports drift
+
+- **Counts mismatch** → add the missing component or update `seed.md` to match the new count. Don't update one without the other.
+- **Name mismatch** → a component was renamed, added, or removed. Update the canonical lists in `seed.md` §4 and the expected sets in `audit.sh`.
+- **Helper missing or non-executable** → `chmod +x` or restore from history.
+- **Hook unwired** → add the entry to `.claude/settings.json`.
+- **project.json key missing** → re-run `/init-project`, or add the key manually.
+- **License missing** (vendored skills) → restore from upstream; this is a license-compliance gap.
+- **Cross-doc stale numbers** → update the docs. `seed.md` is the source of truth.
+
+## Maintenance
+
+Expected name sets live in `audit.sh` (see the `expected_*` blocks). Adding a new hook, agent, skill, or command means updating both `audit.sh` and `seed.md`. The audit catches the drift; fix the implementation, not the audit.
+
+## Output format
+
+```
+check                                      status  detail
+------------------------------------------ ------  ---------------------------
+hooks count (seed vs baseline)             PASS    17
+agents count (seed vs baseline)            PASS    1
+skills count (seed vs baseline)            PASS    36
+commands count (seed vs disk)              PASS    4
+hooks names match seed §4.1                PASS
+agents names match seed §4.2               PASS
+skills names match seed §4.3               PASS
+commands names match seed §4.4             PASS
+helper swarm-plan/validate.sh              PASS
+…
+hook wired: setup_guard                    PASS
+…
+project.json: test.cmd                     PASS
+…
+mcp server: context7                       PASS
+mcp server: plantuml                       PASS
+mcp server: playwright                     PASS
+recommender LICENSE                        PASS
+recommender NOTICE                         PASS
+CLAUDE.md count claims                     PASS
+README.md count claims                     PASS
+docs/init/seed.md count claims             PASS
+------------------------------------------ ------
+overall                                    PASS    fails=0 warns=0
+```