@kennethsolomon/shipkit 3.7.0 → 3.9.0

package/skills/sk:setup-claude/templates/.claude/statusline.sh

@@ -0,0 +1,50 @@
+#!/bin/bash
+# Claude Code statusline: Shows persistent status in CLI
+# Receives JSON on stdin with context_window, model info
+# Outputs a single formatted line
+
+INPUT=$(cat)
+
+# Parse context and model — use jq if available
+if command -v jq >/dev/null 2>&1; then
+    MODEL=$(echo "$INPUT" | jq -r '.model // "unknown"' 2>/dev/null)
+    CTX_USED=$(echo "$INPUT" | jq -r '.context_window.used // 0' 2>/dev/null)
+    CTX_TOTAL=$(echo "$INPUT" | jq -r '.context_window.total // 1' 2>/dev/null)
+else
+    MODEL="unknown"
+    CTX_USED=0
+    CTX_TOTAL=1
+fi
+
+# Calculate context percentage
+if [ "$CTX_TOTAL" -gt 0 ] 2>/dev/null; then
+    CTX_PCT=$((CTX_USED * 100 / CTX_TOTAL))
+else
+    CTX_PCT=0
+fi
+
+# Branch
+BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "none")
+
+# Current workflow step
+STEP="—"
+if [ -f "tasks/workflow-status.md" ]; then
+    NEXT_LINE=$(grep -E ">>\s*next\s*<<" "tasks/workflow-status.md" 2>/dev/null | head -1)
+    if [ -n "$NEXT_LINE" ]; then
+        # Extract step number and name from table row
+        STEP_NUM=$(echo "$NEXT_LINE" | grep -oE '^\|[[:space:]]*[0-9]+' | grep -oE '[0-9]+')
+        STEP_NAME=$(echo "$NEXT_LINE" | sed 's/.*| *>> next << *|.*//' | sed 's/|.*//;s/^ *//;s/ *$//')
+        if [ -n "$STEP_NUM" ]; then
+            STEP="Step ${STEP_NUM}"
+        fi
+    fi
+fi
+
+# Task name from todo.md
+TASK="—"
+if [ -f "tasks/todo.md" ]; then
+    TASK=$(head -1 "tasks/todo.md" 2>/dev/null | sed 's/^# TODO.*— //' | cut -c1-40)
+fi
+
+# Output single line
+echo "[${CTX_PCT}%] ${MODEL} | ${STEP} | ${BRANCH} | ${TASK}"

package/skills/sk:setup-claude/templates/CLAUDE.md.template

@@ -272,6 +272,21 @@ Use `run_in_background: true` for tasks that don't block your next step:
 ```
 <!-- END:sub-agent-patterns -->
 
+## Cross-Platform Tracking
+
+This project may have a companion codebase (web <-> mobile). During implementation, **log every change that affects the other platform** to `tasks/cross-platform.md`.
+
+**When to log:**
+- API contract changes (new/modified endpoints, payload shapes, auth)
+- Data model changes (new fields, type changes, validation rules)
+- Business logic that must behave identically on both platforms
+- UI/UX flows that should have parity
+- Platform-specific deviations (intentional differences)
+
+**How to log:** Append a new section using the template in `tasks/cross-platform.md`. Include enough context that a developer in the other codebase can implement without guessing.
+
+**When to review:** At the start of every task, check `tasks/cross-platform.md` for pending items targeting this codebase.
+
 ## Project Memory
 
 Read these files at the start of every task:
@@ -279,12 +294,14 @@ Read these files at the start of every task:
 - `tasks/lessons.md` — past mistakes and how to avoid them
 - `tasks/todo.md` — current plan
 - `tasks/tech-debt.md` — known shortcuts, deferred work, and areas to revisit
+- `tasks/cross-platform.md` — pending changes from the other codebase
 
 Write to these files continuously:
 - `tasks/progress.md` — every attempt, error, and resolution
 - `tasks/findings.md` — anything important discovered mid-task
+- `tasks/cross-platform.md` — any change that impacts the other platform
 
-**Never overwrite** `tasks/lessons.md` or `tasks/security-findings.md`.
+**Never overwrite** `tasks/lessons.md`, `tasks/security-findings.md`, or `tasks/cross-platform.md`.
 
 ## Lessons Capture
 

package/skills/sk:setup-claude/templates/hooks/log-agent.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+# Claude Code SubagentStart hook: Log agent invocations for audit trail
+# Tracks which agents are being used and when
+#
+# Input schema (SubagentStart):
+# { "agent_id": "agent-abc123", "agent_name": "linter", ... }
+
+INPUT=$(cat)
+
+# Parse agent name
+if command -v jq >/dev/null 2>&1; then
+    AGENT_NAME=$(echo "$INPUT" | jq -r '.agent_name // "unknown"' 2>/dev/null)
+else
+    AGENT_NAME=$(echo "$INPUT" | grep -oE '"agent_name"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"agent_name"[[:space:]]*:[[:space:]]*"//;s/"$//')
+    [ -z "$AGENT_NAME" ] && AGENT_NAME="unknown"
+fi
+
+TIMESTAMP=$(date +%Y%m%d_%H%M%S)
+
+# Append to audit log (create tasks/ dir if needed)
+mkdir -p tasks 2>/dev/null
+echo "$TIMESTAMP | Agent invoked: $AGENT_NAME" >> "tasks/agent-audit.log" 2>/dev/null
+
+exit 0

package/skills/sk:setup-claude/templates/hooks/pre-compact.sh

@@ -0,0 +1,44 @@
+#!/bin/bash
+# Claude Code PreCompact hook: Preserve session state before context compression
+# Outputs critical state so Claude retains it after compaction
+
+echo "=== Pre-Compaction State Snapshot ==="
+
+# Workflow status
+if [ -f "tasks/workflow-status.md" ]; then
+    echo ""
+    echo "--- workflow-status.md ---"
+    cat "tasks/workflow-status.md" 2>/dev/null | head -30
+    TOTAL_LINES=$(wc -l < "tasks/workflow-status.md" 2>/dev/null | tr -d ' ')
+    if [ "$TOTAL_LINES" -gt 30 ]; then
+        echo "  ... ($TOTAL_LINES total lines)"
+    fi
+fi
+
+# Git status
+echo ""
+echo "--- Uncommitted Changes ---"
+STAGED=$(git diff --cached --name-only 2>/dev/null)
+UNSTAGED=$(git diff --name-only 2>/dev/null)
+UNTRACKED=$(git ls-files --others --exclude-standard 2>/dev/null)
+
+[ -n "$STAGED" ] && echo "Staged:" && echo "$STAGED" | sed 's/^/  /'
+[ -n "$UNSTAGED" ] && echo "Unstaged:" && echo "$UNSTAGED" | sed 's/^/  /'
+[ -n "$UNTRACKED" ] && echo "Untracked:" && echo "$UNTRACKED" | sed 's/^/  /'
+
+if [ -z "$STAGED" ] && [ -z "$UNSTAGED" ] && [ -z "$UNTRACKED" ]; then
+    echo "  (clean)"
+fi
+
+# Log compaction event
+if [ -d "tasks" ]; then
+    echo "" >> "tasks/progress.md" 2>/dev/null
+    echo "### [$(date +%Y-%m-%d)] Context compaction occurred at $(date +%H:%M:%S)" >> "tasks/progress.md" 2>/dev/null
+fi
+
+echo ""
+echo "--- Recovery ---"
+echo "Read tasks/workflow-status.md to restore current step."
+echo "Read tasks/progress.md for recent work."
+echo "==================================="
+exit 0

package/skills/sk:setup-claude/templates/hooks/session-start.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+# Claude Code SessionStart hook: Load project context at session start
+# Outputs context that Claude sees when a session begins
+
+echo "=== ShipKit — Session Context ==="
+
+# Current branch
+BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null)
+if [ -n "$BRANCH" ]; then
+    echo "Branch: $BRANCH"
+    echo ""
+    echo "Recent commits:"
+    git log --oneline -5 2>/dev/null | while read -r line; do
+        echo "  $line"
+    done
+fi
+
+# Current workflow step from workflow-status.md
+if [ -f "tasks/workflow-status.md" ]; then
+    echo ""
+    NEXT_STEP=$(grep -E ">>\s*next\s*<<" "tasks/workflow-status.md" 2>/dev/null | head -1)
+    if [ -n "$NEXT_STEP" ]; then
+        echo "Workflow: $NEXT_STEP"
+    else
+        echo "Workflow: all steps complete or not started"
+    fi
+fi
+
+# Tech debt count
+if [ -f "tasks/tech-debt.md" ]; then
+    TOTAL=$(grep -c "^### \[" "tasks/tech-debt.md" 2>/dev/null || echo 0)
+    RESOLVED=$(grep -c "^Resolved:" "tasks/tech-debt.md" 2>/dev/null || echo 0)
+    UNRESOLVED=$((TOTAL - RESOLVED))
+    if [ "$UNRESOLVED" -gt 0 ]; then
+        echo "Tech Debt: $UNRESOLVED unresolved item(s)"
+    fi
+fi
+
+# Code health (skip on large codebases to keep session start fast)
+if [ -d "src" ]; then
+    FILE_COUNT=$(find src/ -type f 2>/dev/null | head -1001 | wc -l | tr -d ' ')
+    if [ "$FILE_COUNT" -le 1000 ]; then
+        TODO_COUNT=$(grep -r "TODO" src/ 2>/dev/null | wc -l | tr -d ' ')
+        FIXME_COUNT=$(grep -r "FIXME" src/ 2>/dev/null | wc -l | tr -d ' ')
+        if [ "$TODO_COUNT" -gt 0 ] || [ "$FIXME_COUNT" -gt 0 ]; then
+            echo ""
+            echo "Code health: ${TODO_COUNT} TODOs, ${FIXME_COUNT} FIXMEs in src/"
+        fi
+    fi
+fi
+
+echo "==================================="
+exit 0

package/skills/sk:setup-claude/templates/hooks/session-stop.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+# Claude Code Stop hook: Log session accomplishments
+# Runs when a Claude Code session ends
+
+# Only log if tasks/ directory exists (ShipKit project)
+if [ ! -d "tasks" ]; then
+    exit 0
+fi
+
+TIMESTAMP=$(date +%Y-%m-%d\ %H:%M:%S)
+
+# Get current branch
+BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "unknown")
+
+# Count commits in this session (last hour)
+RECENT_COMMITS=$(git log --since="1 hour ago" --oneline 2>/dev/null | wc -l | tr -d ' ')
+
+# Get current workflow step
+CURRENT_STEP=""
+if [ -f "tasks/workflow-status.md" ]; then
+    CURRENT_STEP=$(grep -E ">>\s*next\s*<<" "tasks/workflow-status.md" 2>/dev/null | head -1 | sed 's/.*| //' | sed 's/ |.*//')
+fi
+
+# Append session end to progress.md
+{
+    echo ""
+    echo "### [$TIMESTAMP] Session ended"
+    echo "- Branch: $BRANCH"
+    echo "- Commits this session: $RECENT_COMMITS"
+    [ -n "$CURRENT_STEP" ] && echo "- Next step: $CURRENT_STEP"
+} >> "tasks/progress.md" 2>/dev/null
+
+exit 0

package/skills/sk:setup-claude/templates/hooks/validate-commit.sh

@@ -0,0 +1,81 @@
+#!/bin/bash
+# Claude Code PreToolUse hook: Validates git commit commands
+# Receives JSON on stdin with tool_input.command
+# Exit 0 = allow, Exit 2 = block (stderr shown to Claude)
+#
+# Validates: conventional commit format, debug statements, hardcoded secrets
+
+INPUT=$(cat)
+
+# Parse command — use jq if available, fall back to grep
+if command -v jq >/dev/null 2>&1; then
+    COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty')
+else
+    COMMAND=$(echo "$INPUT" | grep -oE '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//')
+fi
+
+# Only process git commit commands
+if ! echo "$COMMAND" | grep -qE '^git[[:space:]]+commit'; then
+    exit 0
+fi
+
+WARNINGS=""
+
+# Extract commit message from -m flag
+COMMIT_MSG=$(echo "$COMMAND" | grep -oE '\-m[[:space:]]+"[^"]*"' | sed 's/-m[[:space:]]*"//;s/"$//' || echo "")
+if [ -z "$COMMIT_MSG" ]; then
+    COMMIT_MSG=$(echo "$COMMAND" | grep -oE "\-m[[:space:]]+'[^']*'" | sed "s/-m[[:space:]]*'//;s/'$//" || echo "")
+fi
+
+# Validate conventional commit format (type(scope): message or type: message)
+if [ -n "$COMMIT_MSG" ]; then
+    if ! echo "$COMMIT_MSG" | grep -qE '^(feat|fix|docs|refactor|chore|test|style|perf|ci|build|revert)(\([a-zA-Z0-9_-]+\))?(!)?:[[:space:]].+'; then
+        WARNINGS="$WARNINGS\nCOMMIT: Message does not follow conventional commit format: type(scope): message"
+    fi
+fi
+
+# Check staged files for debug statements and secrets
+STAGED=$(git diff --cached --name-only 2>/dev/null)
+if [ -n "$STAGED" ]; then
+    # Read full staged diff once (avoids repeated git subprocess calls per file)
+    FULL_DIFF=$(git diff --cached 2>/dev/null)
+
+    while IFS= read -r file; do
+        if [ -f "$file" ]; then
+            FILE_DIFF=$(echo "$FULL_DIFF" | sed -n "/^diff --git a\/$file /,/^diff --git /p")
+            # JavaScript/TypeScript debug
+            if echo "$file" | grep -qE '\.(js|ts|jsx|tsx)$'; then
+                if echo "$FILE_DIFF" | grep -E '^\+.*console\.(log|debug|warn)\(' | grep -qv '//.*console'; then
+                    WARNINGS="$WARNINGS\nDEBUG: $file has console.log/debug/warn in staged changes"
+                fi
+                if echo "$FILE_DIFF" | grep -qE '^\+.*debugger'; then
+                    WARNINGS="$WARNINGS\nDEBUG: $file has debugger statement in staged changes"
+                fi
+            fi
+            # PHP debug
+            if echo "$file" | grep -qE '\.php$'; then
+                if echo "$FILE_DIFF" | grep -qE '^\+.*(dd\(|dump\(|var_dump\(|print_r\()'; then
+                    WARNINGS="$WARNINGS\nDEBUG: $file has dd/dump/var_dump in staged changes"
+                fi
+            fi
+            # Python debug
+            if echo "$file" | grep -qE '\.py$'; then
+                if echo "$FILE_DIFF" | grep -qE '^\+.*(breakpoint\(\)|pdb\.set_trace\(\))'; then
+                    WARNINGS="$WARNINGS\nDEBUG: $file has breakpoint/pdb in staged changes"
+                fi
+            fi
+        fi
+    done <<< "$STAGED"
+
+    # Check for potential hardcoded secrets (reuse FULL_DIFF)
+    if echo "$FULL_DIFF" | grep -qE '^\+.*(PRIVATE_KEY|SECRET_KEY|API_KEY|PASSWORD|TOKEN)[[:space:]]*=.*[a-zA-Z0-9]{16,}'; then
+        WARNINGS="$WARNINGS\nSECRET: Staged changes may contain hardcoded secrets. Review before committing."
+    fi
+fi
+
+# Print warnings (non-blocking) and allow commit
+if [ -n "$WARNINGS" ]; then
+    echo -e "=== Commit Validation Warnings ===$WARNINGS\n================================" >&2
+fi
+
+exit 0

package/skills/sk:setup-claude/templates/hooks/validate-push.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# Claude Code PreToolUse hook: Warns on push to protected branches
+# Receives JSON on stdin with tool_input.command
+# Exit 0 = allow (warnings only), Exit 2 = block
+#
+# Warns on: push to main/master/production/release, force push
+
+INPUT=$(cat)
+
+# Parse command
+if command -v jq >/dev/null 2>&1; then
+    COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty')
+else
+    COMMAND=$(echo "$INPUT" | grep -oE '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//')
+fi
+
+# Only process git push commands
+if ! echo "$COMMAND" | grep -qE '^git[[:space:]]+push'; then
+    exit 0
+fi
+
+WARNINGS=""
+
+# Check for protected branch names
+for branch in main master production release; do
+    if echo "$COMMAND" | grep -qE "(origin[[:space:]]+${branch}|[[:space:]]${branch}$)"; then
+        WARNINGS="$WARNINGS\nPROTECTED: Pushing to '${branch}' — this is a protected branch. Confirm this is intentional."
+    fi
+done
+
+# Check for force push
+if echo "$COMMAND" | grep -qE '\-\-force([[:space:]]|$)|\-f([[:space:]]|$)'; then
+    WARNINGS="$WARNINGS\nFORCE: Using --force push. This rewrites remote history and is destructive."
+fi
+if echo "$COMMAND" | grep -qE '\-\-force-with-lease'; then
+    WARNINGS="$WARNINGS\nFORCE: Using --force-with-lease. Safer than --force but still rewrites history."
+fi
+
+if [ -n "$WARNINGS" ]; then
+    echo -e "=== Push Validation Warnings ===$WARNINGS\n================================" >&2
+fi
+
+exit 0

package/skills/sk:setup-claude/templates/tasks/cross-platform.md.template

@@ -0,0 +1,31 @@
+# Cross-Platform Changes
+
+Track changes that need to be replicated in the other codebase (web <-> mobile).
+
+<!--
+  Format: One section per feature/task.
+  Each entry should have enough context for a developer (or Claude session)
+  in the other codebase to implement without guessing.
+-->
+
+<!-- TEMPLATE — copy this block for each new feature:
+
+## [Feature Name] (YYYY-MM-DD)
+Source: [web|mobile] — the codebase where this was implemented first
+
+### API Changes
+- [ ] Description of endpoint/payload/auth changes
+
+### Data Model Changes
+- [ ] New fields, renamed fields, type changes, validation rules
+
+### Behavior Changes
+- [ ] Business logic that must match across platforms
+
+### UI/UX Parity
+- [ ] Screens, flows, or interactions that should match
+
+### Platform-Specific Notes
+- [ ] Anything that differs intentionally between web and mobile
+
+-->

package/skills/sk:setup-optimizer/SKILL.md

@@ -39,7 +39,7 @@ The single command to keep your CLAUDE.md current. Diagnoses problems, updates t
 
 Before making any changes, runs a diagnostic pass on the existing CLAUDE.md:
 
-- **Missing sections** — checks for essential sections (Workflow, Sub-Agent Patterns, Project Memory, Lessons Capture, Testing, Commands, etc.)
+- **Missing sections** — checks for essential sections (Workflow, Sub-Agent Patterns, Cross-Platform Tracking, Project Memory, Lessons Capture, Testing, Commands, etc.)
 - **Stale content** — detects outdated info (stale model/route counts, removed dependencies, old command names like `/laravel-lint` instead of `/sk:lint`)
 - **Inconsistencies** — compares documented vs actual project state (directories, scripts, workflows)
 - **Section completeness** — flags sections that exist but are empty or have only placeholder text
@@ -63,6 +63,7 @@ Read → Explore → Design → Accessibility → Plan → Branch → Migrate
 - Step completion summary rule (NON-NEGOTIABLE)
 - Bug fix flow section
 - Sub-Agent Patterns section (if missing)
+- Cross-Platform Tracking section (if missing)
 - Project Memory section (if missing)
 - Lessons Capture section (if missing)
 - Testing TDD section (if missing)