@olegkoval/agent-skills 1.66.0 → 1.67.0

package/adapters/claude/olko-github-pr/skills/lekker-review/SKILL.md

@@ -285,23 +285,49 @@ Then:
 `LOCAL_BRANCH` is `main`, `master`, `develop`, `staging`, or `production`, stop
 and say so.
 
-**Depth:** explicit keyword `scan`, `medium`, `deep` or `deps` wins. If absent,
-get the per-file stat - in `pr` mode from
-`gh pr view <PR_NUMBER> --repo <REPO_SLUG> --json additions,deletions,changedFiles,files,baseRefName,state,mergeCommit`
-(keep `baseRefName` as `BASE_BRANCH` and `changedFiles` as `EXPECTED_FILES` for
-Track A; when `state` is `MERGED`, keep `mergeCommit.oid` as `MERGE_COMMIT`), in `branch` mode from `git diff --numstat <MERGE_BASE> HEAD` - and
-apply AUTO-DEPTH. Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`,
-`yarn.lock`, `pnpm-lock.yaml`, `bun.lock`, `bun.lockb`) do NOT count toward
-additions+deletions: a regenerated lockfile is thousands of lines nobody reads.
-- `deps` (candidate) if every changed file is a lockfile or a `package.json`.
-  Confirmed after Track A by `scripts/deps-only.mjs` (see "Confirm deps depth");
-  until then run Track B as for `scan`.
-- `scan` if additions+deletions < 150 AND changedFiles <= 5
-- `deep` if additions+deletions > 800 OR changedFiles > 25 OR diff touches
-  `migrations/` or `*.sql`
-- `medium` otherwise
-
-State the chosen depth (and whether it was auto-selected) in the review header.
+**Depth:** record an explicit `scan`, `medium`, `deep` or `deps` request;
+otherwise select a provisional depth from the per-file stats. In `pr` mode use
+`gh pr view <PR_NUMBER> --repo <REPO_SLUG> --json additions,deletions,changedFiles,files,baseRefName,state,mergeCommit`.
+Keep `baseRefName` as `BASE_BRANCH`, `changedFiles` as `EXPECTED_FILES`, and
+`mergeCommit.oid` as `MERGE_COMMIT` when merged. In `branch` mode use
+`git diff --numstat <MERGE_BASE> HEAD`.
+
+**Mandatory risk check (every depth, including explicit requests):** after
+Track B has saved `pr.diff`, and before finalizing depth or starting Step 2,
+run `scripts/risk-paths.mjs` with that diff and the exact changed paths.
+Resolve the script beside the selected `SKILL.md`: in Codex use
+`<directory containing selected SKILL.md>/scripts/risk-paths.mjs`; in Claude
+use `${CLAUDE_PLUGIN_ROOT}/skills/lekker-review/scripts/risk-paths.mjs`.
+Use a shell-free process API with separate arguments:
+`execFileSync('node', [riskScript, '--diff', diffFile, '--', ...changedPaths])`.
+Never interpolate PR-controlled paths into shell source. Alternatively pipe
+`git diff --name-only -z <MERGE_BASE> HEAD` into
+`node "<resolved riskScript>" --stdin0 --diff "<scratchpad>/pr.diff"`.
+Do not continue on classifier failure; report risk classification unavailable.
+
+The classifier detects configured path patterns for CI workflows, auth,
+billing, installers/setup, and P21, plus `p21` in added lines. These are path
+heuristics, not complete detection of auth/billing behavior in generic files;
+reviewers still inspect that behavior in the diff. Whenever
+`needsHumanReview: true`, always put `NEEDS HUMAN REVIEW: <categories>` in the
+review header, even for an explicit scan. A human must read those paths.
+
+Explicit depth wins, but never suppresses this marker. Without an explicit
+request, apply AUTO-DEPTH in this order after the risk check:
+- `deep` if the classifier returns `deep: true`, additions+deletions > 800,
+  changedFiles > 25, or the diff touches `migrations/` or `*.sql`.
+- `deps` (candidate) if every changed file is a lockfile or `package.json`.
+  Confirm after Track A with `scripts/deps-only.mjs`; until then run Track B
+  as for `scan`.
+- `scan` if additions+deletions < 150 AND changedFiles <= 5.
+- `medium` otherwise.
+
+Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`, `yarn.lock`,
+`pnpm-lock.yaml`, `bun.lock`, `bun.lockb`) do not count toward additions+deletions.
+Step 0 depth is provisional: if the mandatory check upgrades scan, run Track A
+and gather the newly required Track B sources before Step 2. Branch mode uses
+Track A's merge-base diff. State final depth and whether auto-selected in the
+review header.
 
 **`--post` flag:** parse and store as `POST_REVIEW=true`.
 
@@ -673,7 +699,7 @@ Write `<scratchpad>/context.json` with keys:
   "botPatternsFile": "<BOT_PATTERNS_FILE, or null>",
   "depsReport":      "<deps-report.json contents at depth deps, else null>",
   "depsInstall":     "<worktree.json depsInstall>",
-  "prBody":          "<PR body at depth deps, else omit>"
+  "prBody":          "<full PR body at every depth; empty string in branch mode>"
 }
 ```
 

package/adapters/claude/olko-github-pr/skills/lekker-review/references/agents/implementation.md

@@ -48,6 +48,22 @@ Axes to cover:
   fixed, the mitigation fully resolves the defect, or the PR is not a bug fix.
 - Integration Contracts: Shopify API misuse, BC API assumptions, webhook
   idempotency, external API pagination not handled.
+- Rollout safety (external writes): when the diff changes what is WRITTEN to
+  another system (an API payload, field mapping, or a DB write into a system
+  this service does not own), state whether the PR has a feature flag
+  (Reflag / `getShopFlag` / `isEnabled` style check around the new write) or a
+  documented revert plan (PR body or code comment). Look in the diff and in the
+  PR body in CONTEXT_FILE. When WORKTREE_PATH is available, trace the changed
+  write through unchanged callers and flag guards before deciding either is
+  absent. Without a worktree, absence from the diff is not proof: report a
+  missing rollout control only when the diff demonstrates that the changed
+  write bypasses a guard and the PR body provides no revert plan. Otherwise
+  mark rollout verification unavailable rather than inventing a finding.
+  If neither control exists on that evidence, report an `important` finding:
+  `title` starts "No flag or revert plan for external write", `badCode` quotes
+  the changed write, `fix` names the flag guard to add. A pure UI/copy change or
+  a write that is trivially undone by deploying again is exempt. Quiet when the
+  flag or plan is present; do not report its presence.
 
 Boundary contract and lifecycle map (required for every Critical/Important
 finding involving routing, persistence, caching, fallback, proxying, or an

package/adapters/claude/olko-github-pr/skills/lekker-review/references/agents/triage-logic.md

@@ -11,6 +11,22 @@ Axes to cover (Critical/Important only):
 - Scalability: N+1 queries, missing pagination, unbounded collections, missing rate-limit
 - Integration Contracts: Shopify API misuse, webhook idempotency not handled
 - Correctness: off-by-one, wrong operator, missing null guard
+- Rollout safety (external writes): when the diff changes what is WRITTEN to
+  another system (an API payload, field mapping, or a DB write into a system
+  this service does not own), state whether the PR has a feature flag
+  (Reflag / `getShopFlag` / `isEnabled` style check around the new write) or a
+  documented revert plan (PR body or code comment). Look in the diff and in the
+  PR body in CONTEXT_FILE. When WORKTREE_PATH is available, trace the changed
+  write through unchanged callers and flag guards before deciding either is
+  absent. Without a worktree, absence from the diff is not proof: report a
+  missing rollout control only when the diff demonstrates that the changed
+  write bypasses a guard and the PR body provides no revert plan. Otherwise
+  mark rollout verification unavailable rather than inventing a finding.
+  If neither control exists on that evidence, report an `important` finding:
+  `title` starts "No flag or revert plan for external write", `badCode` quotes
+  the changed write, `fix` names the flag guard to add. A pure UI/copy change or
+  a write that is trivially undone by deploying again is exempt. Quiet when the
+  flag or plan is present; do not report its presence.
 
 CI_STATUS: read key "ciStatus" from the JSON file CONTEXT_FILE.
 EXISTING_REVIEWS: read key "existingReviews" from CONTEXT_FILE (awareness only, skip findings at same file:line)

package/adapters/claude/olko-github-pr/skills/lekker-review/references/output-format.md

@@ -24,6 +24,7 @@ Output the review as a markdown response (not via printf). No ANSI escapes.
 **Proofs:** <M proven / N attempted> *(include only when N > 0)*
 **CI:** <✅ All passing | ⚠️ N failing: check-name | ⏳ Pending | N/A>
 **Depth:** <📦 deps | ⚡ scan | 🔍 medium | 🔬 deep>
+**NEEDS HUMAN REVIEW:** <categories from risk-paths.mjs> *(only when `needsHumanReview` is true: a person must read these paths whatever the verdict)*
 **Engine:** <workflow | codex | revmux>
 
 ---

package/adapters/claude/olko-github-pr/skills/lekker-review/scripts/risk-paths.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+// Path-based risk for AUTO-DEPTH. Size alone misses the small PRs that matter:
+// a 10-line change to a workflow file, a session check or a P21 mapping.
+//
+// Usage:
+//   node risk-paths.mjs [--diff <pr.diff>] -- <changed-file>...
+//   git diff --name-only -z <base>...HEAD | node risk-paths.mjs --stdin0 --diff <pr.diff>
+// Use a shell-free process API for file arguments; never interpolate PR paths.
+//
+// Prints {"deep": bool, "needsHumanReview": bool, "categories": [{category, files}]}.
+// `--diff` also lets the identifier `p21` count when it only appears in added lines.
+
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+export const RISK_RULES = [
+  { category: 'ci-workflow', test: (f) => /^\.github\/workflows\//.test(f) },
+  { category: 'auth', test: (f) => /(^|[/._-])(auth|authn|authz|authenticate|authenticated|authentication|authorize|authorized|authorization|oauth|session|sessions|permission|permissions|rbac|acl|jwt|login)([/._-]|$)/i.test(f.replace(/([a-z0-9])([A-Z])/g, '$1-$2')) },
+  { category: 'billing', test: (f) => /(billing|payment|payments|invoice|invoices|checkout|stripe|subscription)/i.test(f) },
+  { category: 'installer', test: (f) => /(^|\/)(install|setup|bootstrap|preinstall|postinstall)(?:[^/.]*|[^/]*\.(sh|bash|zsh|ps1|js|mjs|cjs|ts|py|bat|cmd))$/i.test(f) },
+  { category: 'p21', test: (f) => /p21/i.test(f) },
+];
+
+export function addedLinesMention(diffText, pattern) {
+  return diffText.split('\n').some((l) => l.startsWith('+') && !l.startsWith('+++') && pattern.test(l));
+}
+
+export function riskPaths(files, diffText = '') {
+  const categories = RISK_RULES
+    .map((rule) => ({ category: rule.category, files: files.filter(rule.test) }))
+    .map((c) => (c.category === 'p21' && c.files.length === 0 && addedLinesMention(diffText, /p21/i)
+      ? { ...c, files: ['(identifier p21 in added lines)'] }
+      : c))
+    .filter((c) => c.files.length > 0);
+  return { deep: categories.length > 0, needsHumanReview: categories.length > 0, categories };
+}
+
+function main(argv) {
+  let diffText = '';
+  let inputMode = null;
+  const files = [];
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === '--') {
+      files.push(...argv.slice(i + 1));
+      break;
+    }
+    if (arg === '--diff') {
+      if (!argv[i + 1] || argv[i + 1] === '--') throw new Error('--diff requires a file');
+      diffText = readFileSync(argv[++i], 'utf8');
+    } else if (arg === '--stdin' || arg === '--stdin0') {
+      if (inputMode) throw new Error('Choose only one stdin mode');
+      inputMode = arg;
+    } else if (arg.startsWith('--')) {
+      throw new Error(`Unknown option: ${arg}; put filenames after --`);
+    } else {
+      files.push(arg);
+    }
+  }
+  if (inputMode) {
+    if (files.length) throw new Error('Do not mix stdin and file arguments');
+    files.push(...readFileSync(0, 'utf8').split(inputMode === '--stdin0' ? '\0' : '\n').filter(Boolean));
+  }
+  console.log(JSON.stringify(riskPaths(files, diffText)));
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) main(process.argv.slice(2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@olegkoval/agent-skills",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "private": false,
   "publishConfig": {
     "access": "public"

package/plugins/olko-apple-kit/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-apple-kit",
   "description": "Build and ship Apple platform apps: macOS menubar apps, App Store submissions.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-creative/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-creative",
   "description": "Creative and personal projects: photo galleries, music players, listings, wiki editing.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-garmin-kit/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-garmin-kit",
   "description": "Build, test and publish Garmin Connect IQ watch faces.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-git-tools/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-git-tools",
   "description": "Everyday git and GitHub CLI operations: conventional commits, branch hygiene.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-github-pr/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-github-pr",
   "description": "Drive GitHub pull requests to merge-ready: review-bot loops, CI fixes, descriptions, dependency triage.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-github-pr/skills/lekker-review/SKILL.md

@@ -284,23 +284,49 @@ Then:
 `LOCAL_BRANCH` is `main`, `master`, `develop`, `staging`, or `production`, stop
 and say so.
 
-**Depth:** explicit keyword `scan`, `medium`, `deep` or `deps` wins. If absent,
-get the per-file stat - in `pr` mode from
-`gh pr view <PR_NUMBER> --repo <REPO_SLUG> --json additions,deletions,changedFiles,files,baseRefName,state,mergeCommit`
-(keep `baseRefName` as `BASE_BRANCH` and `changedFiles` as `EXPECTED_FILES` for
-Track A; when `state` is `MERGED`, keep `mergeCommit.oid` as `MERGE_COMMIT`), in `branch` mode from `git diff --numstat <MERGE_BASE> HEAD` - and
-apply AUTO-DEPTH. Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`,
-`yarn.lock`, `pnpm-lock.yaml`, `bun.lock`, `bun.lockb`) do NOT count toward
-additions+deletions: a regenerated lockfile is thousands of lines nobody reads.
-- `deps` (candidate) if every changed file is a lockfile or a `package.json`.
-  Confirmed after Track A by `scripts/deps-only.mjs` (see "Confirm deps depth");
-  until then run Track B as for `scan`.
-- `scan` if additions+deletions < 150 AND changedFiles <= 5
-- `deep` if additions+deletions > 800 OR changedFiles > 25 OR diff touches
-  `migrations/` or `*.sql`
-- `medium` otherwise
-
-State the chosen depth (and whether it was auto-selected) in the review header.
+**Depth:** record an explicit `scan`, `medium`, `deep` or `deps` request;
+otherwise select a provisional depth from the per-file stats. In `pr` mode use
+`gh pr view <PR_NUMBER> --repo <REPO_SLUG> --json additions,deletions,changedFiles,files,baseRefName,state,mergeCommit`.
+Keep `baseRefName` as `BASE_BRANCH`, `changedFiles` as `EXPECTED_FILES`, and
+`mergeCommit.oid` as `MERGE_COMMIT` when merged. In `branch` mode use
+`git diff --numstat <MERGE_BASE> HEAD`.
+
+**Mandatory risk check (every depth, including explicit requests):** after
+Track B has saved `pr.diff`, and before finalizing depth or starting Step 2,
+run `scripts/risk-paths.mjs` with that diff and the exact changed paths.
+Resolve the script beside the selected `SKILL.md`: in Codex use
+`<directory containing selected SKILL.md>/scripts/risk-paths.mjs`; in Claude
+use `${CLAUDE_PLUGIN_ROOT}/skills/lekker-review/scripts/risk-paths.mjs`.
+Use a shell-free process API with separate arguments:
+`execFileSync('node', [riskScript, '--diff', diffFile, '--', ...changedPaths])`.
+Never interpolate PR-controlled paths into shell source. Alternatively pipe
+`git diff --name-only -z <MERGE_BASE> HEAD` into
+`node "<resolved riskScript>" --stdin0 --diff "<scratchpad>/pr.diff"`.
+Do not continue on classifier failure; report risk classification unavailable.
+
+The classifier detects configured path patterns for CI workflows, auth,
+billing, installers/setup, and P21, plus `p21` in added lines. These are path
+heuristics, not complete detection of auth/billing behavior in generic files;
+reviewers still inspect that behavior in the diff. Whenever
+`needsHumanReview: true`, always put `NEEDS HUMAN REVIEW: <categories>` in the
+review header, even for an explicit scan. A human must read those paths.
+
+Explicit depth wins, but never suppresses this marker. Without an explicit
+request, apply AUTO-DEPTH in this order after the risk check:
+- `deep` if the classifier returns `deep: true`, additions+deletions > 800,
+  changedFiles > 25, or the diff touches `migrations/` or `*.sql`.
+- `deps` (candidate) if every changed file is a lockfile or `package.json`.
+  Confirm after Track A with `scripts/deps-only.mjs`; until then run Track B
+  as for `scan`.
+- `scan` if additions+deletions < 150 AND changedFiles <= 5.
+- `medium` otherwise.
+
+Lockfiles (`package-lock.json`, `npm-shrinkwrap.json`, `yarn.lock`,
+`pnpm-lock.yaml`, `bun.lock`, `bun.lockb`) do not count toward additions+deletions.
+Step 0 depth is provisional: if the mandatory check upgrades scan, run Track A
+and gather the newly required Track B sources before Step 2. Branch mode uses
+Track A's merge-base diff. State final depth and whether auto-selected in the
+review header.
 
 **`--post` flag:** parse and store as `POST_REVIEW=true`.
 
@@ -672,7 +698,7 @@ Write `<scratchpad>/context.json` with keys:
   "botPatternsFile": "<BOT_PATTERNS_FILE, or null>",
   "depsReport":      "<deps-report.json contents at depth deps, else null>",
   "depsInstall":     "<worktree.json depsInstall>",
-  "prBody":          "<PR body at depth deps, else omit>"
+  "prBody":          "<full PR body at every depth; empty string in branch mode>"
 }
 ```
 

package/plugins/olko-github-pr/skills/lekker-review/references/agents/implementation.md

@@ -48,6 +48,22 @@ Axes to cover:
   fixed, the mitigation fully resolves the defect, or the PR is not a bug fix.
 - Integration Contracts: Shopify API misuse, BC API assumptions, webhook
   idempotency, external API pagination not handled.
+- Rollout safety (external writes): when the diff changes what is WRITTEN to
+  another system (an API payload, field mapping, or a DB write into a system
+  this service does not own), state whether the PR has a feature flag
+  (Reflag / `getShopFlag` / `isEnabled` style check around the new write) or a
+  documented revert plan (PR body or code comment). Look in the diff and in the
+  PR body in CONTEXT_FILE. When WORKTREE_PATH is available, trace the changed
+  write through unchanged callers and flag guards before deciding either is
+  absent. Without a worktree, absence from the diff is not proof: report a
+  missing rollout control only when the diff demonstrates that the changed
+  write bypasses a guard and the PR body provides no revert plan. Otherwise
+  mark rollout verification unavailable rather than inventing a finding.
+  If neither control exists on that evidence, report an `important` finding:
+  `title` starts "No flag or revert plan for external write", `badCode` quotes
+  the changed write, `fix` names the flag guard to add. A pure UI/copy change or
+  a write that is trivially undone by deploying again is exempt. Quiet when the
+  flag or plan is present; do not report its presence.
 
 Boundary contract and lifecycle map (required for every Critical/Important
 finding involving routing, persistence, caching, fallback, proxying, or an

package/plugins/olko-github-pr/skills/lekker-review/references/agents/triage-logic.md

@@ -11,6 +11,22 @@ Axes to cover (Critical/Important only):
 - Scalability: N+1 queries, missing pagination, unbounded collections, missing rate-limit
 - Integration Contracts: Shopify API misuse, webhook idempotency not handled
 - Correctness: off-by-one, wrong operator, missing null guard
+- Rollout safety (external writes): when the diff changes what is WRITTEN to
+  another system (an API payload, field mapping, or a DB write into a system
+  this service does not own), state whether the PR has a feature flag
+  (Reflag / `getShopFlag` / `isEnabled` style check around the new write) or a
+  documented revert plan (PR body or code comment). Look in the diff and in the
+  PR body in CONTEXT_FILE. When WORKTREE_PATH is available, trace the changed
+  write through unchanged callers and flag guards before deciding either is
+  absent. Without a worktree, absence from the diff is not proof: report a
+  missing rollout control only when the diff demonstrates that the changed
+  write bypasses a guard and the PR body provides no revert plan. Otherwise
+  mark rollout verification unavailable rather than inventing a finding.
+  If neither control exists on that evidence, report an `important` finding:
+  `title` starts "No flag or revert plan for external write", `badCode` quotes
+  the changed write, `fix` names the flag guard to add. A pure UI/copy change or
+  a write that is trivially undone by deploying again is exempt. Quiet when the
+  flag or plan is present; do not report its presence.
 
 CI_STATUS: read key "ciStatus" from the JSON file CONTEXT_FILE.
 EXISTING_REVIEWS: read key "existingReviews" from CONTEXT_FILE (awareness only, skip findings at same file:line)

package/plugins/olko-github-pr/skills/lekker-review/references/output-format.md

@@ -24,6 +24,7 @@ Output the review as a markdown response (not via printf). No ANSI escapes.
 **Proofs:** <M proven / N attempted> *(include only when N > 0)*
 **CI:** <✅ All passing | ⚠️ N failing: check-name | ⏳ Pending | N/A>
 **Depth:** <📦 deps | ⚡ scan | 🔍 medium | 🔬 deep>
+**NEEDS HUMAN REVIEW:** <categories from risk-paths.mjs> *(only when `needsHumanReview` is true: a person must read these paths whatever the verdict)*
 **Engine:** <workflow | codex | revmux>
 
 ---

package/plugins/olko-github-pr/skills/lekker-review/scripts/risk-paths.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+// Path-based risk for AUTO-DEPTH. Size alone misses the small PRs that matter:
+// a 10-line change to a workflow file, a session check or a P21 mapping.
+//
+// Usage:
+//   node risk-paths.mjs [--diff <pr.diff>] -- <changed-file>...
+//   git diff --name-only -z <base>...HEAD | node risk-paths.mjs --stdin0 --diff <pr.diff>
+// Use a shell-free process API for file arguments; never interpolate PR paths.
+//
+// Prints {"deep": bool, "needsHumanReview": bool, "categories": [{category, files}]}.
+// `--diff` also lets the identifier `p21` count when it only appears in added lines.
+
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+export const RISK_RULES = [
+  { category: 'ci-workflow', test: (f) => /^\.github\/workflows\//.test(f) },
+  { category: 'auth', test: (f) => /(^|[/._-])(auth|authn|authz|authenticate|authenticated|authentication|authorize|authorized|authorization|oauth|session|sessions|permission|permissions|rbac|acl|jwt|login)([/._-]|$)/i.test(f.replace(/([a-z0-9])([A-Z])/g, '$1-$2')) },
+  { category: 'billing', test: (f) => /(billing|payment|payments|invoice|invoices|checkout|stripe|subscription)/i.test(f) },
+  { category: 'installer', test: (f) => /(^|\/)(install|setup|bootstrap|preinstall|postinstall)(?:[^/.]*|[^/]*\.(sh|bash|zsh|ps1|js|mjs|cjs|ts|py|bat|cmd))$/i.test(f) },
+  { category: 'p21', test: (f) => /p21/i.test(f) },
+];
+
+export function addedLinesMention(diffText, pattern) {
+  return diffText.split('\n').some((l) => l.startsWith('+') && !l.startsWith('+++') && pattern.test(l));
+}
+
+export function riskPaths(files, diffText = '') {
+  const categories = RISK_RULES
+    .map((rule) => ({ category: rule.category, files: files.filter(rule.test) }))
+    .map((c) => (c.category === 'p21' && c.files.length === 0 && addedLinesMention(diffText, /p21/i)
+      ? { ...c, files: ['(identifier p21 in added lines)'] }
+      : c))
+    .filter((c) => c.files.length > 0);
+  return { deep: categories.length > 0, needsHumanReview: categories.length > 0, categories };
+}
+
+function main(argv) {
+  let diffText = '';
+  let inputMode = null;
+  const files = [];
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === '--') {
+      files.push(...argv.slice(i + 1));
+      break;
+    }
+    if (arg === '--diff') {
+      if (!argv[i + 1] || argv[i + 1] === '--') throw new Error('--diff requires a file');
+      diffText = readFileSync(argv[++i], 'utf8');
+    } else if (arg === '--stdin' || arg === '--stdin0') {
+      if (inputMode) throw new Error('Choose only one stdin mode');
+      inputMode = arg;
+    } else if (arg.startsWith('--')) {
+      throw new Error(`Unknown option: ${arg}; put filenames after --`);
+    } else {
+      files.push(arg);
+    }
+  }
+  if (inputMode) {
+    if (files.length) throw new Error('Do not mix stdin and file arguments');
+    files.push(...readFileSync(0, 'utf8').split(inputMode === '--stdin0' ? '\0' : '\n').filter(Boolean));
+  }
+  console.log(JSON.stringify(riskPaths(files, diffText)));
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) main(process.argv.slice(2));

package/plugins/olko-obsidian/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-obsidian",
   "description": "Keep an Obsidian vault in sync with work: PR sync, task rollover, morning routine.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-product/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-product",
   "description": "Take a product idea to a shippable build: MVP passes, full-stack scaffolds, UX/UI quality loops, launch plans.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-reflection/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-reflection",
   "description": "Look back and improve: self-critique, retrospectives, performance review, rapid learning.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-release/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-release",
   "description": "Ship a release: semantic-release setup, changelogs, store listing copy, release-day routine.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-skill-meta/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-skill-meta",
   "description": "Author and maintain agent skills and the AI toolchain itself.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },

package/plugins/olko-web-ops/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "olko-web-ops",
   "description": "Operate a website: WAF rules, search console audits, analytics bootstrap, docs indexes.",
-  "version": "1.66.0",
+  "version": "1.67.0",
   "author": {
     "name": "Oleg Koval"
   },