@natjswenson/devlog 0.1.8 → 0.3.1

package/bin/devlog.js

@@ -19,13 +19,19 @@ import kleur from 'kleur';
 //
 // For strict-token fields (project keys, repo names, branch names), separate
 // allowlist regexes apply additional structural constraints.
-const SHELL_QUOTE_BREAK = /[;&|`$()<>{}[\]*?!#~"'\\\n\r]/;
-const RE_GH_USER = /^[a-z0-9][a-z0-9-]*$/i;
-const RE_REPO_NAME = /^[a-z0-9][a-z0-9._-]*$/i;
-const RE_OWNER_REPO = /^[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/i;
-const RE_PROJECT_KEY = /^[a-z0-9][a-z0-9._-]*$/i;
-const RE_BRANCH = /^[a-z0-9][a-z0-9._/-]*$/i;
-const FORBIDDEN_BRANCH_PARTS = /(^|\/)\.\.($|\/)/; // reject `..` as a path component
+export const SHELL_QUOTE_BREAK = /[;&|`$()<>{}[\]*?!#~"'\\\n\r]/;
+export const RE_GH_USER = /^[a-z0-9][a-z0-9-]*$/i;
+export const RE_REPO_NAME = /^[a-z0-9][a-z0-9._-]*$/i;
+export const RE_OWNER_REPO = /^[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/i;
+export const RE_PROJECT_KEY = /^[a-z0-9][a-z0-9._-]*$/i;
+export const RE_BRANCH = /^[a-z0-9][a-z0-9._/-]*$/i;
+// Repo-relative subdir used to scope `git log` to one skill in a monorepo.
+// Same shape as a branch: no leading dash/slash, no shell metacharacters.
+export const RE_PATH_FILTER = /^[a-z0-9][a-z0-9._/-]*$/i;
+// Git tag prefix that marks a project's releases (e.g. `v` or `devlog-v`).
+// Interpolated into `git tag --list '<tagPrefix>*'`; same safety as a path filter.
+export const RE_TAG_PREFIX = /^[a-z0-9][a-z0-9._/-]*$/i;
+export const FORBIDDEN_BRANCH_PARTS = /(^|\/)\.\.($|\/)/; // reject `..` as a path component
 
 const require = createRequire(import.meta.url);
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
@@ -34,6 +40,9 @@ const CONFIG_DIR = join(homedir(), '.claude', 'skills', 'devlog');
 const CONFIG_PATH = join(CONFIG_DIR, 'config.json');
 const SKILL_DEST = join(CONFIG_DIR, 'SKILL.md');
 const PREVIEW_DIR = join(PACKAGE_ROOT, 'preview');
+const VOICE_SRC_DIR = join(PACKAGE_ROOT, 'voice');
+const VOICE_DEST_DIR = join(CONFIG_DIR, 'voice');
+const GHOSTWRITER_VOICE_DIR = join(homedir(), '.claude', 'skills', 'ghostwriter', 'voice');
 
 const log = {
   info: (msg) => console.log(msg),
@@ -69,7 +78,7 @@ function tryExecArgs(cmd, args) {
   }
 }
 
-function expandHome(p) {
+export function expandHome(p) {
   if (!p) return p;
   if (p === '~') return homedir();
   if (p.startsWith('~/')) return join(homedir(), p.slice(2));
@@ -93,7 +102,7 @@ function atomicWriteJSON(path, data) {
 }
 
 // Validate a config object before writing. Throws with a user-facing message on failure.
-function validateConfig(config) {
+export function validateConfig(config) {
   if (!config || typeof config !== 'object') throw new Error('Config must be an object');
   const required = ['targetRepo', 'gitAuthor', 'githubUser', 'projects'];
   for (const k of required) {
@@ -113,6 +122,18 @@ function validateConfig(config) {
       throw new Error(`branch must be a valid git branch name (no leading dash, no '..'): got ${JSON.stringify(config.branch)}`);
     }
   }
+  if ('voicePath' in config) {
+    // Optional: directory holding the voice profile used to write entries. Read by
+    // the skill with the Read tool only — never shell-interpolated — so the only
+    // hard requirement is no shell metacharacters and no leading dash. A leading `~`
+    // is allowed (the skill expands it); we test the expanded form so an absolute
+    // path has no `~` left to trip the shell-quote-break check. Existence is checked
+    // at prompt time (and at runtime, with a fallback chain), not here.
+    const expanded = typeof config.voicePath === 'string' ? expandHome(config.voicePath) : config.voicePath;
+    if (typeof config.voicePath !== 'string' || SHELL_QUOTE_BREAK.test(expanded) || expanded.trim().startsWith('-')) {
+      throw new Error(`voicePath must be a path with no shell metacharacters and no leading dash: got ${JSON.stringify(config.voicePath)}`);
+    }
+  }
   if (!Array.isArray(config.projects)) {
     throw new Error('projects must be an array');
   }
@@ -130,6 +151,22 @@ function validateConfig(config) {
     if (!RE_OWNER_REPO.test(p.remote)) {
       throw new Error(`project.remote must match <owner>/<repo>: ${JSON.stringify(p.remote)}`);
     }
+    if ('pathFilter' in p) {
+      // Optional: scope this project's commits to a repo subdirectory (e.g. a
+      // single skill in a monorepo). Interpolated into `git log -- <pathFilter>`,
+      // so enforce the same no-metacharacter / no-`..` safety as branch names.
+      if (typeof p.pathFilter !== 'string' || !RE_PATH_FILTER.test(p.pathFilter) || FORBIDDEN_BRANCH_PARTS.test(p.pathFilter)) {
+        throw new Error(`project.pathFilter must be a repo-relative subdir (no leading dash/slash, no '..', no shell metacharacters): ${JSON.stringify(p.pathFilter)}`);
+      }
+    }
+    if ('tagPrefix' in p) {
+      // Optional: the prefix of the git tags that mark this project's releases
+      // (e.g. `devlog-v`). Interpolated into `git tag --list '<tagPrefix>*'`, so
+      // enforce the same no-metacharacter / no-`..` safety as path filters.
+      if (typeof p.tagPrefix !== 'string' || !RE_TAG_PREFIX.test(p.tagPrefix) || FORBIDDEN_BRANCH_PARTS.test(p.tagPrefix)) {
+        throw new Error(`project.tagPrefix must be a tag prefix (no leading dash/slash, no '..', no shell metacharacters): ${JSON.stringify(p.tagPrefix)}`);
+      }
+    }
     if ('label' in p) {
       // Label is rendered as React text content only — never shell-interpolated,
       // never used in URLs, never used as a filesystem path. React escapes all
@@ -197,7 +234,7 @@ async function confirmOverwrite(label, path) {
 }
 
 // ─── prompt validators (reused across init and add-project) ──────────────────
-const VALIDATORS = {
+export const VALIDATORS = {
   gitAuthor: (v) => {
     if (v.trim().length === 0) return 'Required';
     if (SHELL_QUOTE_BREAK.test(v)) return 'Invalid characters (no quotes, backticks, dollar signs, semicolons, parens, or shell metacharacters)';
@@ -217,6 +254,20 @@ const VALIDATORS = {
     return true;
   },
   ownerRepo: (v) => RE_OWNER_REPO.test(v.trim()) || 'Expected <owner>/<repo>, no leading dash, alphanumeric + ._- only',
+  voicePath: (v) => {
+    // Optional. Blank means "use ghostwriter's voice dir if present, else the bundled default".
+    if (!v || v.trim() === '') return true;
+    if (SHELL_QUOTE_BREAK.test(v)) return 'Invalid characters (no quotes, backticks, dollar signs, semicolons, parens, or shell metacharacters)';
+    if (v.trim().startsWith('-')) return 'Path cannot start with a dash';
+    return existsSync(expandHome(v.trim())) || 'Path does not exist';
+  },
+  tagPrefix: (v) => {
+    // Optional. Blank/`v` is the default. Used in `git tag --list '<prefix>*'`.
+    const t = (v || '').trim();
+    if (t === '') return true;
+    if (!RE_TAG_PREFIX.test(t) || FORBIDDEN_BRANCH_PARTS.test(t)) return 'Invalid prefix (no leading dash/slash, no "..", no shell metacharacters)';
+    return true;
+  },
   label: (v) => {
     // Label is React text content only — apostrophes and most punctuation are fine.
     // Reject only control chars and overlong values.
@@ -262,6 +313,13 @@ async function promptForProject(defaults = {}) {
       initial: (_p, values) => detectProjectRemote(expandHome(values.path)) || initialRemote,
       validate: VALIDATORS.ownerRepo,
     },
+    {
+      type: 'text',
+      name: 'tagPrefix',
+      message: 'Release tag prefix (optional, e.g. "v" or "myproject-v"):',
+      initial: defaults.tagPrefix || 'v',
+      validate: VALIDATORS.tagPrefix,
+    },
   ], { onCancel: () => process.exit(1) });
 
   const out = {
@@ -270,6 +328,9 @@ async function promptForProject(defaults = {}) {
     remote: answers.remote.trim(),
   };
   if (answers.label && answers.label.trim()) out.label = answers.label.trim();
+  // Only persist tagPrefix when it differs from the default `v` (keeps configs clean).
+  const tagPrefix = (answers.tagPrefix || '').trim();
+  if (tagPrefix && tagPrefix !== 'v') out.tagPrefix = tagPrefix;
   return out;
 }
 
@@ -282,12 +343,16 @@ async function cmdInit() {
     gitAuthor: detectGitName() || '',
     githubUser: detectGhUser() || '',
     targetRepoName: 'daily-dev-log',
+    // Pre-fill the voice path with ghostwriter's voice dir if it's installed — that's
+    // the most likely place a user already keeps their voice profile.
+    voicePath: existsSync(GHOSTWRITER_VOICE_DIR) ? GHOSTWRITER_VOICE_DIR : '',
   };
 
   const answers = await prompts([
-    { type: 'text', name: 'gitAuthor', message: 'Your name (used to filter `git log --author`):', initial: defaults.gitAuthor, validate: VALIDATORS.gitAuthor },
+    { type: 'text', name: 'gitAuthor', message: 'Your name (retained for backward compatibility; not currently rendered on entries):', initial: defaults.gitAuthor, validate: VALIDATORS.gitAuthor },
     { type: 'text', name: 'githubUser', message: 'Your GitHub username:', initial: defaults.githubUser, validate: VALIDATORS.githubUser },
     { type: 'text', name: 'targetRepoName', message: 'Name of the repo where dev logs will be published:', initial: defaults.targetRepoName, validate: VALIDATORS.targetRepoName },
+    { type: 'text', name: 'voicePath', message: 'Voice profile directory (optional — blank uses ghostwriter\'s if present, else the bundled default):', initial: defaults.voicePath, validate: VALIDATORS.voicePath },
   ], { onCancel: () => process.exit(1) });
 
   // Optionally register projects in a loop. First time defaults to "yes".
@@ -313,11 +378,16 @@ async function cmdInit() {
   }
 
   const targetRepo = `${answers.githubUser}/${answers.targetRepoName}`;
+  // Store the expanded absolute path (consistent with project.path) so the persisted
+  // config never carries a `~` that would later trip the shell-quote-break check.
+  const rawVoicePath = (answers.voicePath || '').trim();
+  const voicePath = rawVoicePath ? expandHome(rawVoicePath) : '';
   const config = validateConfig({
     targetRepo,
     branch: 'main',
     gitAuthor: answers.gitAuthor,
     githubUser: answers.githubUser,
+    ...(voicePath ? { voicePath } : {}),
     projects,
   });
 
@@ -334,6 +404,7 @@ async function cmdInit() {
   log.info(`  Git author:     ${config.gitAuthor}`);
   log.info(`  GitHub user:    ${config.githubUser}`);
   log.info(`  Branch:         ${config.branch}`);
+  log.info(`  Voice profile:  ${config.voicePath || '(ghostwriter if present, else bundled default)'}`);
   log.info(`  Projects:       ${config.projects.length === 0 ? '(none — add later with `devlog add-project`)' : config.projects.map((p) => p.key).join(', ')}`);
   log.info(`  Skill location: ${CONFIG_DIR}`);
 
@@ -347,7 +418,7 @@ async function cmdInit() {
     log.warn(`Repo github.com/${targetRepo} already exists. Will use it as-is.`);
   } else {
     log.step(`Creating github.com/${targetRepo}...`);
-    const r = spawnSync('gh', ['repo', 'create', targetRepo, '--public', '--description', 'Daily dev log', '--add-readme'], { stdio: 'inherit' });
+    const r = spawnSync('gh', ['repo', 'create', targetRepo, '--public', '--description', 'Release dev log', '--add-readme'], { stdio: 'inherit' });
     if (r.status !== 0) {
       log.err('Failed to create repo. Check `gh` permissions.');
       process.exit(1);
@@ -374,16 +445,33 @@ async function cmdInit() {
     log.warn('Skipped config.json');
   }
 
+  // Install the bundled voice template as the fallback voice profile. The skill
+  // resolves voice in this order: config.voicePath → ghostwriter's voice dir →
+  // this bundled copy. Installing it guarantees the last fallback always exists.
+  if (!existsSync(VOICE_DEST_DIR)) {
+    mkdirSync(VOICE_DEST_DIR, { recursive: true, mode: 0o700 });
+  }
+  for (const [src, dest] of [['voice-profile.example.md', 'voice-profile.md'], ['voice-notes.example.md', 'voice-notes.md']]) {
+    const s = join(VOICE_SRC_DIR, src);
+    const d = join(VOICE_DEST_DIR, dest);
+    if (existsSync(s) && (await confirmOverwrite(`voice/${dest}`, d))) {
+      copyFileSync(s, d);
+      log.ok(`Installed voice/${dest} → ${d}`);
+    }
+  }
+
   log.info('\n' + kleur.bold().green('Setup complete.') + '\n');
   log.info('Next steps:');
   if (config.projects.length === 0) {
     log.info(`  1. Add a project: ${kleur.cyan('npx @natjswenson/devlog add-project')}`);
-    log.info('  2. Make some commits in the project');
+    log.info('  2. Tag a release in the project (e.g. `git tag v0.1.0`)');
+    log.info(`  3. In Claude Code, run: ${kleur.cyan('/devlog')}`);
+    log.info(`  4. Preview locally: ${kleur.cyan('npx @natjswenson/devlog preview')}`);
   } else {
-    log.info('  1. Make some commits in a registered project');
+    log.info('  1. Tag a release in a registered project (e.g. `git tag v0.1.0`)');
+    log.info(`  2. In Claude Code, run: ${kleur.cyan('/devlog')}`);
+    log.info(`  3. Preview locally: ${kleur.cyan('npx @natjswenson/devlog preview')}`);
   }
-  log.info(`  2. In Claude Code, run: ${kleur.cyan('/devlog')}`);
-  log.info(`  3. Preview locally: ${kleur.cyan('npx @natjswenson/devlog preview')}`);
   log.info('');
 }
 
@@ -458,11 +546,14 @@ async function cmdConfig() {
   log.info(`Branch:        ${config.branch || 'main'}`);
   log.info(`Git author:    ${config.gitAuthor || '?'}`);
   log.info(`GitHub user:   ${config.githubUser || '?'}`);
+  log.info(`Voice path:    ${config.voicePath || kleur.dim('(ghostwriter if present, else bundled default)')}`);
   log.info(`Projects (${(config.projects || []).length}):`);
   for (const p of config.projects || []) {
     log.info(`  ${kleur.cyan(p.key)}${p.label ? `  (${p.label})` : ''}`);
     log.info(kleur.dim(`    path:   ${p.path}`));
     log.info(kleur.dim(`    remote: github.com/${p.remote}`));
+    if (p.pathFilter) log.info(kleur.dim(`    scope:  ${p.pathFilter}/`));
+    log.info(kleur.dim(`    tags:   ${p.tagPrefix || 'v'}*`));
   }
   log.info('');
 }
@@ -526,7 +617,7 @@ async function cmdPreview() {
 // ─── help ────────────────────────────────────────────────────────────────────
 function printHelp() {
   console.log(`
-${kleur.bold('@natjswenson/devlog')} v${readPackageVersion()} — daily dev log generator
+${kleur.bold('@natjswenson/devlog')} v${readPackageVersion()} — release dev log generator
 
 Usage:
   ${kleur.cyan('npx @natjswenson/devlog init')}           One-time setup: create your dev-log repo, install the skill, write config
@@ -542,31 +633,36 @@ Issues:  https://github.com/natejswenson/devlog/issues
 }
 
 // ─── dispatch ────────────────────────────────────────────────────────────────
-const arg = process.argv[2];
-switch (arg) {
-  case 'init':
-    cmdInit();
-    break;
-  case 'add-project':
-    cmdAddProject();
-    break;
-  case 'config':
-    cmdConfig();
-    break;
-  case 'preview':
-    cmdPreview();
-    break;
-  case '-v':
-  case '--version':
-    console.log(readPackageVersion());
-    break;
-  case undefined:
-  case '-h':
-  case '--help':
-    printHelp();
-    break;
-  default:
-    log.err(`Unknown command: ${arg}`);
-    printHelp();
-    process.exit(1);
+// Only run the CLI dispatch when this file is executed directly, not when it is
+// imported (e.g. by the test suite). Importing the module must have no side effects.
+const isMain = process.argv[1] === fileURLToPath(import.meta.url);
+if (isMain) {
+  const arg = process.argv[2];
+  switch (arg) {
+    case 'init':
+      cmdInit();
+      break;
+    case 'add-project':
+      cmdAddProject();
+      break;
+    case 'config':
+      cmdConfig();
+      break;
+    case 'preview':
+      cmdPreview();
+      break;
+    case '-v':
+    case '--version':
+      console.log(readPackageVersion());
+      break;
+    case undefined:
+    case '-h':
+    case '--help':
+      printHelp();
+      break;
+    default:
+      log.err(`Unknown command: ${arg}`);
+      printHelp();
+      process.exit(1);
+  }
 }

package/config.example.json

@@ -3,17 +3,22 @@
   "branch": "main",
   "gitAuthor": "Your Name",
   "githubUser": "yourusername",
+  "voicePath": "~/.claude/skills/ghostwriter/voice",
   "projects": [
     {
       "key": "midnight-side-quest",
       "label": "Midnight Side Quest",
       "path": "/Users/yourusername/code/midnight-side-quest",
-      "remote": "yourusername/midnight-side-quest"
+      "remote": "yourusername/midnight-side-quest",
+      "tagPrefix": "v"
     },
     {
-      "key": "todays-existential-crisis",
-      "path": "/Users/yourusername/code/todays-existential-crisis",
-      "remote": "yourusername/todays-existential-crisis"
+      "key": "devlog",
+      "label": "Devlog",
+      "path": "/Users/yourusername/code/your-monorepo",
+      "remote": "yourusername/your-monorepo",
+      "pathFilter": "skills/devlog",
+      "tagPrefix": "devlog-v"
     }
   ]
 }

package/examples/react/DevLogPage.css

@@ -75,33 +75,39 @@
 }
 
 .devlog-entry {
-  padding: 28px 0;
   border-bottom: 1px solid var(--devlog-border);
-  cursor: pointer;
-  transition: background var(--devlog-transition-fast);
 }
 
 .devlog-entry:first-child {
   border-top: 1px solid var(--devlog-border);
 }
 
-.devlog-entry:hover {
-  background: var(--devlog-bg-surface);
-}
-
-.devlog-entry--expanded,
-.devlog-entry--expanded:hover {
-  cursor: default;
-  background: none;
-}
-
-/* ─── Entry header ──────────────────────────────────────────────────── */
+/* ─── Entry header (the disclosure control) ─────────────────────────── */
 
 .devlog-header {
   display: flex;
   justify-content: space-between;
   align-items: flex-start;
   gap: 24px;
+  padding: 28px 0;
+  cursor: pointer;
+  transition: background var(--devlog-transition-fast);
+}
+
+.devlog-header:hover {
+  background: var(--devlog-bg-surface);
+}
+
+.devlog-header:focus-visible {
+  outline: 2px solid var(--devlog-fg);
+  outline-offset: -2px;
+  border-radius: 4px;
+}
+
+.devlog-entry--expanded .devlog-header,
+.devlog-entry--expanded .devlog-header:hover {
+  cursor: default;
+  background: none;
 }
 
 .devlog-header__left {
@@ -163,8 +169,10 @@
   overflow: hidden;
 }
 
+/* Header already contributes 28px of bottom padding above this region,
+   so the expanded body sits flush against it. */
 .devlog-content {
-  padding-top: 24px;
+  padding-top: 0;
 }
 
 .devlog-content h2 {

package/examples/react/DevLogPage.jsx

@@ -81,6 +81,15 @@ export default function DevLogPage({
     }
   }, [expandedEntry, loadedContent, fetchEntryContent]);
 
+  // Enter/Space toggle the focused entry — keyboard parity with the click
+  // handler. preventDefault on Space stops the page from scrolling.
+  const handleKeyDown = useCallback((e, filename) => {
+    if (e.key === 'Enter' || e.key === ' ') {
+      e.preventDefault();
+      handleToggle(filename);
+    }
+  }, [handleToggle]);
+
   const visibleEntries = entries.slice(0, visibleCount);
   const hasMore = visibleCount < entries.length;
   const showTabs = projects && projects.length > 1;
@@ -132,14 +141,28 @@ export default function DevLogPage({
             {visibleEntries.map((entry) => {
               const isExpanded = expandedEntry === entry.file;
               const content = loadedContent.get(entry.file);
+              const contentId = `devlog-content-${entry.file}`;
 
               return (
                 <article
                   key={entry.file}
                   className={`devlog-entry${isExpanded ? ' devlog-entry--expanded' : ''}`}
-                  onClick={() => handleToggle(entry.file)}
                 >
-                  <div className="devlog-header">
+                  {/* The header is the disclosure control: role=button +
+                      aria-expanded/aria-controls give screen readers the
+                      toggle semantics, and it's keyboard-focusable. Keeping
+                      it separate from the content region (rather than wrapping
+                      the whole card in onClick) means links inside an expanded
+                      entry aren't trapped inside an interactive ancestor. */}
+                  <div
+                    className="devlog-header"
+                    role="button"
+                    tabIndex={0}
+                    aria-expanded={isExpanded}
+                    aria-controls={contentId}
+                    onClick={() => handleToggle(entry.file)}
+                    onKeyDown={(e) => handleKeyDown(e, entry.file)}
+                  >
                     <div className="devlog-header__left">
                       <p className="devlog-date">{formatDate(entry.date)}</p>
                       <h2 className="devlog-title">{entry.title}</h2>
@@ -150,10 +173,10 @@ export default function DevLogPage({
                     </div>
                   </div>
 
-                  <div className="devlog-content-wrapper">
+                  <div className="devlog-content-wrapper" id={contentId}>
                     <div className="devlog-content-inner">
                       {isExpanded && content && (
-                        <div className="devlog-content" onClick={(e) => e.stopPropagation()}>
+                        <div className="devlog-content">
                           <ReactMarkdown
                             remarkPlugins={[remarkGfm]}
                             urlTransform={safeUrlTransform}

package/examples/react/README.md

@@ -1,6 +1,6 @@
 # React example — devlog
 
-Drop-in React components for rendering your daily dev log on any React-based site.
+Drop-in React components for rendering your release dev log on any React-based site.
 
 ## What's here
 

package/examples/react/useDevLogEntries.js

@@ -3,11 +3,12 @@ import { DEVLOG_CONFIG as DEFAULT_CONFIG } from './devlog-config.js';
 
 // Allowlist of frontmatter keys we recognize. Anything else is ignored —
 // prevents prototype-pollution via crafted keys like `__proto__`.
-const FRONTMATTER_KEYS = new Set(['title', 'date', 'project', 'summary']);
+// `version` is the release tag this entry corresponds to (e.g. "v0.2.0").
+const FRONTMATTER_KEYS = new Set(['title', 'date', 'project', 'summary', 'version']);
 
 /**
  * Parse YAML-ish frontmatter from a markdown string.
- * Returns { metadata: { title, date, project, summary }, body: string }
+ * Returns { metadata: { title, date, project, summary, version }, body: string }
  */
 function parseFrontmatter(raw) {
   const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
@@ -24,19 +25,22 @@ function parseFrontmatter(raw) {
 }
 
 // Schema validation for fetched manifest. Reject anything that isn't shaped
-// like { entries: [{ date, file, title, summary }, ...] } so a hostile commit
-// to the dev-log repo can't crash the page.
+// like { entries: [{ date, file, title, summary, version? }, ...] } so a hostile
+// commit to the dev-log repo can't crash the page. `version` is optional and
+// only kept when it's a clean tag-ish string.
 function validateManifest(data) {
   if (!data || typeof data !== 'object') return null;
   if (!Array.isArray(data.entries)) return null;
   const entries = [];
   for (const e of data.entries) {
     if (!e || typeof e !== 'object') continue;
-    const { date, file, title, summary } = e;
+    const { date, file, title, summary, version } = e;
     if (typeof date !== 'string' || !/^\d{4}-\d{2}-\d{2}$/.test(date)) continue;
     if (typeof file !== 'string' || !/^[a-zA-Z0-9._-]+\.md$/.test(file)) continue;
     if (typeof title !== 'string' || typeof summary !== 'string') continue;
-    entries.push({ date, file, title, summary });
+    const entry = { date, file, title, summary };
+    if (typeof version === 'string' && /^[a-zA-Z0-9._-]+$/.test(version)) entry.version = version;
+    entries.push(entry);
   }
   return { entries };
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@natjswenson/devlog",
-  "version": "0.1.8",
-  "description": "Daily dev log generator — Claude Code skill + preview app for publishing git-based dev logs to your site",
+  "version": "0.3.1",
+  "description": "Release dev log generator — Claude Code skill + preview app for publishing version-release dev logs, written in your voice, to your site",
   "license": "MIT",
   "author": "Nate Swenson",
   "homepage": "https://github.com/natejswenson/devlog",
@@ -18,6 +18,7 @@
     "claude-skill",
     "build-in-public",
     "git",
+    "release-notes",
     "blog"
   ],
   "type": "module",
@@ -28,6 +29,7 @@
     "bin/",
     "preview/",
     "examples/",
+    "voice/",
     "SKILL.md",
     "SECURITY.md",
     "CHANGELOG.md",
@@ -39,6 +41,7 @@
     "node": ">=18"
   },
   "scripts": {
+    "test": "node --test \"tests/**/*.test.mjs\"",
     "audit": "npm audit --audit-level=moderate"
   },
   "dependencies": {
@@ -49,6 +52,6 @@
     "react-dom": "18.3.1",
     "react-markdown": "9.1.0",
     "remark-gfm": "4.0.1",
-    "vite": "8.0.10"
+    "vite": "8.0.16"
   }
 }