@fro.bot/systematic 2.33.3 → 3.0.1

package/skills/claude-permissions-optimizer/scripts/normalize.mjs

@@ -1,151 +0,0 @@
-// Normalization helpers extracted from extract-commands.mjs for testability.
-
-// Risk-modifying flags that must NOT be collapsed into wildcards.
-// Global flags are always preserved; context-specific flags only matter
-// for certain base commands.
-const GLOBAL_RISK_FLAGS = new Set([
-  '--force',
-  '--hard',
-  '-rf',
-  '--privileged',
-  '--no-verify',
-  '--system',
-  '--force-with-lease',
-  '-D',
-  '--force-if-includes',
-  '--volumes',
-  '--rmi',
-  '--rewrite',
-  '--delete',
-])
-
-// Flags that are only risky for specific base commands.
-// -f means force-push in git, force-remove in docker, but pattern-file in grep.
-// -v means remove-volumes in docker-compose, but verbose everywhere else.
-const CONTEXTUAL_RISK_FLAGS = {
-  '-f': new Set(['git', 'docker', 'rm']),
-  '-v': new Set(['docker', 'docker-compose']),
-}
-
-export function isRiskFlag(token, base) {
-  if (GLOBAL_RISK_FLAGS.has(token)) return true
-  // Check context-specific flags
-  const contexts = Object.hasOwn(CONTEXTUAL_RISK_FLAGS, token)
-    ? CONTEXTUAL_RISK_FLAGS[token]
-    : undefined
-  if (contexts && base && contexts.has(base)) return true
-  // Combined short flags containing risk chars: -rf, -fr, -fR, etc.
-  if (/^-[a-zA-Z]*[rf][a-zA-Z]*$/.test(token) && token.length <= 4) return true
-  return false
-}
-
-export function normalize(command) {
-  // Don't normalize shell injection patterns
-  if (/\|\s*(sh|bash|zsh)\b/.test(command)) return command
-  // Don't normalize sudo -- keep as-is
-  if (/^sudo\s/.test(command)) return 'sudo *'
-
-  // Handle pnpm --filter <pkg> <subcommand> specially
-  const pnpmFilter = command.match(/^pnpm\s+--filter\s+\S+\s+(\S+)/)
-  if (pnpmFilter) return `pnpm --filter * ${pnpmFilter[1]} *`
-
-  // Handle sed specially -- preserve the mode flag to keep safe patterns narrow.
-  // sed -i (in-place) is destructive; sed -n, sed -e, bare sed are read-only.
-  if (/^sed\s/.test(command)) {
-    if (/\s-i\b/.test(command)) return 'sed -i *'
-    const sedFlag = command.match(/^sed\s+(-[a-zA-Z])\s/)
-    return sedFlag ? `sed ${sedFlag[1]} *` : 'sed *'
-  }
-
-  // Handle ast-grep specially -- preserve --rewrite flag.
-  if (/^(ast-grep|sg)\s/.test(command)) {
-    const base = command.startsWith('sg') ? 'sg' : 'ast-grep'
-    return /\s--rewrite\b/.test(command) ? `${base} --rewrite *` : `${base} *`
-  }
-
-  // Handle find specially -- preserve key action flags.
-  // find -delete and find -exec rm are destructive; find -name/-type are safe.
-  if (/^find\s/.test(command)) {
-    if (/\s-delete\b/.test(command)) return 'find -delete *'
-    if (/\s-exec\s/.test(command)) return 'find -exec *'
-    // Extract the first predicate flag for a narrower safe pattern
-    const findFlag = command.match(/\s(-(?:name|type|path|iname))\s/)
-    return findFlag ? `find ${findFlag[1]} *` : 'find *'
-  }
-
-  // Handle git -C <dir> <subcommand> -- strip the -C <dir> and normalize the git subcommand
-  const gitC = command.match(/^git\s+-C\s+\S+\s+(.+)$/)
-  if (gitC) return normalize(`git ${gitC[1]}`)
-
-  // Split on compound operators -- normalize the first command only
-  const compoundMatch = command.match(/^(.+?)\s*(&&|\|\||;)\s*(.+)$/)
-  if (compoundMatch) {
-    return normalize(compoundMatch[1].trim())
-  }
-
-  // Strip trailing pipe chains for normalization (e.g., `cmd | tail -5`)
-  // but preserve pipe-to-shell (already handled by shell injection check above)
-  const pipeMatch = command.match(/^(.+?)\s*\|\s*(.+)$/)
-  if (pipeMatch) {
-    return normalize(pipeMatch[1].trim())
-  }
-
-  // Strip trailing redirections (2>&1, > file, >> file)
-  const cleaned = command
-    .replace(/\s*[12]?>>?\s*\S+\s*$/, '')
-    .replace(/\s*2>&1\s*$/, '')
-    .trim()
-
-  const parts = cleaned.split(/\s+/)
-  if (parts.length === 0) return command
-
-  const base = parts[0]
-
-  // For git/docker/gh/npm etc, include the subcommand
-  const multiWordBases = [
-    'git',
-    'docker',
-    'docker-compose',
-    'gh',
-    'npm',
-    'bun',
-    'pnpm',
-    'yarn',
-    'cargo',
-    'pip',
-    'pip3',
-    'bundle',
-    'systemctl',
-    'kubectl',
-  ]
-
-  let prefix = base
-  let argStart = 1
-
-  if (multiWordBases.includes(base) && parts.length > 1) {
-    prefix = `${base} ${parts[1]}`
-    argStart = 2
-  }
-
-  // Preserve risk-modifying flags in the remaining args
-  const preservedFlags = []
-  for (let i = argStart; i < parts.length; i++) {
-    if (isRiskFlag(parts[i], base)) {
-      preservedFlags.push(parts[i])
-    }
-  }
-
-  // Build the normalized pattern
-  if (parts.length <= argStart && preservedFlags.length === 0) {
-    return prefix // no args, no flags: e.g., "git status"
-  }
-
-  const flagStr =
-    preservedFlags.length > 0 ? ` ${preservedFlags.join(' ')}` : ''
-  const hasVaryingArgs = parts.length > argStart + preservedFlags.length
-
-  if (hasVaryingArgs) {
-    return `${prefix + flagStr} *`
-  }
-  return prefix + flagStr
-}

package/skills/dhh-rails-style/SKILL.md

@@ -1,186 +0,0 @@
----
-name: dhh-rails-style
-description: This skill should be used when writing Ruby and Rails code in DHH's distinctive 37signals style. It applies when writing Ruby code, Rails applications, creating models, controllers, or any Ruby file. Triggers on Ruby/Rails code generation, refactoring requests, code review, or when the user mentions DHH, 37signals, Basecamp, HEY, or Campfire style. Embodies REST purity, fat models, thin controllers, Current attributes, Hotwire patterns, and the "clarity over cleverness" philosophy.
----
-
-<objective>
-Apply 37signals/DHH Rails conventions to Ruby and Rails code. This skill provides comprehensive domain expertise extracted from analyzing production 37signals codebases (Fizzy/Campfire) and DHH's code review patterns.
-</objective>
-
-<essential_principles>
-## Core Philosophy
-
-"The best code is the code you don't write. The second best is the code that's obviously correct."
-
-**Vanilla Rails is plenty:**
-- Rich domain models over service objects
-- CRUD controllers over custom actions
-- Concerns for horizontal code sharing
-- Records as state instead of boolean columns
-- Database-backed everything (no Redis)
-- Build solutions before reaching for gems
-
-**What they deliberately avoid:**
-- devise (custom ~150-line auth instead)
-- pundit/cancancan (simple role checks in models)
-- sidekiq (Solid Queue uses database)
-- redis (database for everything)
-- view_component (partials work fine)
-- GraphQL (REST with Turbo sufficient)
-- factory_bot (fixtures are simpler)
-- rspec (Minitest ships with Rails)
-- Tailwind (native CSS with layers)
-
-**Development Philosophy:**
-- Ship, Validate, Refine - prototype-quality code to production to learn
-- Fix root causes, not symptoms
-- Write-time operations over read-time computations
-- Database constraints over ActiveRecord validations
-</essential_principles>
-
-<intake>
-What are you working on?
-
-1. **Controllers** - REST mapping, concerns, Turbo responses, API patterns
-2. **Models** - Concerns, state records, callbacks, scopes, POROs
-3. **Views & Frontend** - Turbo, Stimulus, CSS, partials
-4. **Architecture** - Routing, multi-tenancy, authentication, jobs, caching
-5. **Testing** - Minitest, fixtures, integration tests
-6. **Gems & Dependencies** - What to use vs avoid
-7. **Code Review** - Review code against DHH style
-8. **General Guidance** - Philosophy and conventions
-
-**Specify a number or describe your task.**
-</intake>
-
-<routing>
-
-| Response | Reference to Read |
-|----------|-------------------|
-| 1, controller | `references/controllers.md` |
-| 2, model | `references/models.md` |
-| 3, view, frontend, turbo, stimulus, css | `references/frontend.md` |
-| 4, architecture, routing, auth, job, cache | `references/architecture.md` |
-| 5, test, testing, minitest, fixture | `references/testing.md` |
-| 6, gem, dependency, library | `references/gems.md` |
-| 7, review | Read all references, then review code |
-| 8, general task | Read relevant references based on context |
-
-**After reading relevant references, apply patterns to the user's code.**
-</routing>
-
-<quick_reference>
-## Naming Conventions
-
-**Verbs:** `card.close`, `card.gild`, `board.publish` (not `set_style` methods)
-
-**Predicates:** `card.closed?`, `card.golden?` (derived from presence of related record)
-
-**Concerns:** Adjectives describing capability (`Closeable`, `Publishable`, `Watchable`)
-
-**Controllers:** Nouns matching resources (`Cards::ClosuresController`)
-
-**Scopes:**
-- `chronologically`, `reverse_chronologically`, `alphabetically`, `latest`
-- `preloaded` (standard eager loading name)
-- `indexed_by`, `sorted_by` (parameterized)
-- `active`, `unassigned` (business terms, not SQL-ish)
-
-## REST Mapping
-
-Instead of custom actions, create new resources:
-
-```
-POST /cards/:id/close    → POST /cards/:id/closure
-DELETE /cards/:id/close  → DELETE /cards/:id/closure
-POST /cards/:id/archive  → POST /cards/:id/archival
-```
-
-## Ruby Syntax Preferences
-
-```ruby
-# Symbol arrays with spaces inside brackets
-before_action :set_message, only: %i[ show edit update destroy ]
-
-# Private method indentation
-  private
-    def set_message
-      @message = Message.find(params[:id])
-    end
-
-# Expression-less case for conditionals
-case
-when params[:before].present?
-  messages.page_before(params[:before])
-else
-  messages.last_page
-end
-
-# Bang methods for fail-fast
-@message = Message.create!(params)
-
-# Ternaries for simple conditionals
-@room.direct? ? @room.users : @message.mentionees
-```
-
-## Key Patterns
-
-**State as Records:**
-```ruby
-Card.joins(:closure)         # closed cards
-Card.where.missing(:closure) # open cards
-```
-
-**Current Attributes:**
-```ruby
-belongs_to :creator, default: -> { Current.user }
-```
-
-**Authorization on Models:**
-```ruby
-class User < ApplicationRecord
-  def can_administer?(message)
-    message.creator == self || admin?
-  end
-end
-```
-</quick_reference>
-
-<reference_index>
-## Domain Knowledge
-
-All detailed patterns in `references/`:
-
-| File | Topics |
-|------|--------|
-| `references/controllers.md` | REST mapping, concerns, Turbo responses, API patterns, HTTP caching |
-| `references/models.md` | Concerns, state records, callbacks, scopes, POROs, authorization, broadcasting |
-| `references/frontend.md` | Turbo Streams, Stimulus controllers, CSS layers, OKLCH colors, partials |
-| `references/architecture.md` | Routing, authentication, jobs, Current attributes, caching, database patterns |
-| `references/testing.md` | Minitest, fixtures, unit/integration/system tests, testing patterns |
-| `references/gems.md` | What they use vs avoid, decision framework, Gemfile examples |
-</reference_index>
-
-<success_criteria>
-Code follows DHH style when:
-- Controllers map to CRUD verbs on resources
-- Models use concerns for horizontal behavior
-- State is tracked via records, not booleans
-- No unnecessary service objects or abstractions
-- Database-backed solutions preferred over external services
-- Tests use Minitest with fixtures
-- Turbo/Stimulus for interactivity (no heavy JS frameworks)
-- Native CSS with modern features (layers, OKLCH, nesting)
-- Authorization logic lives on User model
-- Jobs are shallow wrappers calling model methods
-</success_criteria>
-
-<credits>
-Based on [The Unofficial 37signals/DHH Rails Style Guide](https://github.com/marckohlbrugge/unofficial-37signals-coding-style-guide) by [Marc Köhlbrugge](https://x.com/marckohlbrugge), generated through deep analysis of 265 pull requests from the Fizzy codebase.
-
-**Important Disclaimers:**
-- LLM-generated guide - may contain inaccuracies
-- Code examples from Fizzy are licensed under the O'Saasy License
-- Not affiliated with or endorsed by 37signals
-</credits>
-