@natjswenson/devlog 0.5.2 → 0.8.1

package/lib/scan.mjs

@@ -74,6 +74,7 @@ export function scanProject(project, { branch = 'main', fetch = true, existingFi
     key: project.key,
     label: project.label || project.key,
     remote: project.remote,
+    private: !!project.private,
     path: project.path,
     pathFilter: project.pathFilter || null,
     tagPrefix: project.tagPrefix || 'v',
@@ -107,6 +108,11 @@ export function scanProject(project, { branch = 'main', fetch = true, existingFi
   const hasPublishedRef = git(project.path, ['rev-parse', '--verify', '--quiet', publishedRef]) !== null;
 
   const isPublic = (rev) => {
+    // A private project has no safe commit surface, full stop — this bypasses
+    // remoteMatches/hasPublishedRef entirely rather than relying on them to
+    // happen to be false, since a private repo can still have origin configured
+    // correctly (remoteMatches true) and a normally-pushed branch.
+    if (project.private) return false;
     if (!remoteMatches || !hasPublishedRef) return false;
     return spawnArgs('git', ['-C', project.path, 'merge-base', '--is-ancestor', rev, publishedRef]).status === 0;
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@natjswenson/devlog",
-  "version": "0.5.2",
+  "version": "0.8.1",
   "description": "Release dev log generator \u2014 Claude Code skill + preview app for publishing version-release dev logs, written in your voice, to your site",
   "license": "MIT",
   "author": "Nate Swenson",
@@ -33,6 +33,7 @@
     "preview/",
     "examples/",
     "voice/",
+    "image-style/",
     "SKILL.md",
     "SECURITY.md",
     "CHANGELOG.md",
@@ -50,11 +51,13 @@
   "dependencies": {
     "@vitejs/plugin-react": "6.0.1",
     "kleur": "4.1.5",
+    "playwright": "1.61.1",
     "prompts": "2.4.2",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "react-markdown": "9.1.0",
     "remark-gfm": "4.0.1",
+    "sharp": "0.35.3",
     "vite": "8.0.16"
   }
 }

package/skill-invariants.json

@@ -60,7 +60,32 @@
       "id": "no-push-retry",
       "pattern": "do not retry automatically",
       "rationale": "A failed push is surfaced to the user, not retried blind."
+    },
+    {
+      "id": "private-project-no-links",
+      "pattern": "no post ever[\\s\\S]{0,10}links a commit for it",
+      "rationale": "A private project's commits must never scan as public just because remoteMatches + branch-contains happen to hold — losing this line reopens the dead-link-to-a-private-repo path."
+    },
+    {
+      "id": "cover-composition-scope",
+      "pattern": "never the raw draft file, never[\\s\\S]{0,10}## Changelog",
+      "rationale": "Cover composition must draw only from title/tags/summary/## Shipped — never the raw draft or Changelog — losing this line reopens off-scope content leaking into an auto-composed image."
+    },
+    {
+      "id": "cover-never-blocks-publish",
+      "pattern": "[Nn]ever block[\\s\\S]{0,10}publish on a missing style guide",
+      "rationale": "A missing/uninstalled style guide must degrade gracefully (no cover this run), never abort the whole publish."
+    },
+    {
+      "id": "cover-review-gate",
+      "pattern": "this interactive review IS the quality gate for the cover",
+      "rationale": "The rendered cover must be shown to the user before push, the same way Step 4 gates the prose — losing this line reopens publishing an unreviewed cover."
+    },
+    {
+      "id": "cover-custom-illustration",
+      "pattern": "cover that just re-renders the title in large text is a failure",
+      "rationale": "First shipped version of this feature produced a shared text-heavy template with a rotating stock shape — rejected as bland/repetitive. Losing this line reopens that regression."
     }
   ],
-  "cli_commands_referenced": ["scan", "lint-post", "publish-entry", "add-project", "remove-project", "set", "config", "init"]
+  "cli_commands_referenced": ["scan", "lint-post", "publish-entry", "add-project", "remove-project", "set", "config", "init", "cover-context", "render-cover"]
 }