@mlmcps/ml-specs 1.0.0

package/ml-specs/templates/standards/.mlskills.json

@@ -0,0 +1,24 @@
+{
+  "$comment": "Architecture standards config for ml-skills, seeded by /repo-init. Every standard starts 'proposed', which means it reports at warn and CANNOT fail a build. Ratify one — set status to 'standard' — only once a human has read the decisions and agreed they can break the build. See the package's RATIFY.md.",
+  "$owner": "<team that owns these standards>",
+
+  "exclude": [
+    "**/fixtures/**",
+    "**/__mocks__/**"
+  ],
+
+  "openapi-contract": { "status": "proposed" },
+  "entity-relationships": { "status": "proposed" },
+  "backend-patterns": { "status": "proposed" },
+  "infra-patterns": { "status": "proposed" },
+  "ui-patterns": { "status": "proposed" },
+  "security-patterns": { "status": "proposed" },
+  "testing-patterns": { "status": "proposed" },
+  "events-messaging": { "status": "proposed" },
+  "observability": { "status": "proposed" },
+  "resilience-patterns": { "status": "proposed" },
+  "config-secrets": { "status": "proposed" },
+
+  "$customRules_note": "/nfr writes machine-checkable non-functional requirements here as custom rules, so an NFR that was agreed becomes something that actually fails a build rather than prose in a document nothing reads.",
+  "customRules": []
+}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@mlmcps/ml-specs",
+  "version": "1.0.0",
+  "description": "The ml-specs Claude Code plugin, distributed as an npm package so a team can install it without read access to this repository.",
+  "private": false,
+  "license": "MIT",
+  "//": "Why a second package: @mlmcps/ml-specs-mcp ships only the MCP server (its files list excludes",
+  "//1": "agents/, commands/, skills/, hooks/, templates/), so it cannot serve as a marketplace. This",
+  "//2": "one mirrors the repo layout \u2014 .claude-plugin/marketplace.json plus the plugin directory it",
+  "//3": "points at via `source: ./ml-specs` \u2014 which is exactly what a marketplace needs and nothing",
+  "//4": "more. Consumers get the plugin; they do not get scripts/, examples/, CONTRIBUTING.md,",
+  "//5": "PUBLISHING.md, .github/, or any git history.",
+  "//6": "",
+  "//7": "This publishes PUBLICLY to npmjs.org while the source repo stays private, so files[] is now",
+  "//8": "the only thing standing between a stranger and the rest of this repo. It was already narrow",
+  "//9": "to withhold tooling from licensed teams; it is now a disclosure boundary. The validator fails",
+  "//10": "the build if it widens \u2014 do not relax that check.",
+  "files": [
+    ".claude-plugin/",
+    "ml-specs/"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/MLMCPS/ml-claude-plugins.git"
+  },
+  "keywords": [
+    "claude-code",
+    "plugin",
+    "spec-driven-development"
+  ],
+  "dependencies": {}
+}