@shipright/shipright 0.1.0-nightly.0 → 0.1.0-nightly.2

package/README.md

@@ -57,6 +57,8 @@ The installer adds managed instructions under `.shipright/managed/` and editable
 
 OpenCode, Claude Code, and Codex receive native instruction bindings for the T3 integration. Commit each repo installation before creating isolated worktrees, and open fresh agent sessions to verify loaded instructions. Missing context or harness capabilities must be reported, not assumed.
 
+Claude Code uses `.claude/rules/shipright.md` to request reading the bootstrap when appropriate. The rule is loaded as project guidance; it does not itself inject the bootstrap's contents. Updating migrates intact legacy Claude bindings and preserves an existing `@AGENTS.md` import. Locally modified bindings or an unmanaged rule at that path must be reconciled before updating.
+
 ## Safety and limitations
 
 Updates never overwrite local project/shared rules. Modified managed files and binding blocks cause conflicts instead of forced replacement. All selected repo plans are checked before the first write, but errors during writing can still cause a partial installation across repositories; completed directories are reported. Do not run concurrent installers.

package/dist/cli.js

@@ -2136,9 +2136,8 @@ var program = new Command;
 
 // packages/cli/src/installer.ts
 import { createHash as createHash2 } from "crypto";
-import { lstat as lstat3, readFile as readFile2, readdir as readdir2, realpath as realpath3 } from "fs/promises";
-import { dirname as dirname3, join as join2, resolve as resolve3, relative as relative3, sep as sep3 } from "path";
-import { homedir } from "os";
+import { readFile as readFile2, readdir as readdir2, realpath as realpath3 } from "fs/promises";
+import { join as join2, resolve as resolve3, relative as relative3, sep as sep3 } from "path";
 import { existsSync } from "fs";
 
 // node_modules/.bun/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js
@@ -3466,16 +3465,30 @@ function applyEdits(text, edits) {
 // packages/cli/package.json
 var package_default = {
   name: "@shipright/shipright",
-  version: "0.1.0-nightly.0",
+  version: "0.1.0-nightly.2",
   description: "Configurable engineering workflows for coding agents. Ship fast. Ship right.",
   license: "MIT",
-  keywords: ["coding-agents", "workflow", "t3-code", "opencode", "claude-code", "codex", "bun"],
+  keywords: [
+    "coding-agents",
+    "workflow",
+    "t3-code",
+    "opencode",
+    "claude-code",
+    "codex",
+    "bun"
+  ],
   type: "module",
   bin: {
     shipright: "dist/cli.js"
   },
-  files: ["dist", "README.md", "LICENSE"],
-  engines: { bun: ">=1.3.10" },
+  files: [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  engines: {
+    bun: ">=1.3.10"
+  },
   publishConfig: {
     access: "public",
     tag: "nightly",
@@ -3755,6 +3768,11 @@ var resourceRoot = existsSync(bundledResources) ? bundledResources : resolve3(im
 var version = package_default.version;
 var start = "<!-- shipright:start -->";
 var end = "<!-- shipright:end -->";
+var claudeRulePath = ".claude/rules/shipright.md";
+var claudeRule = `# Shipright
+
+For a technical implementation request, explicitly read .shipright/bootstrap.md if it is not already loaded and apply Shipright. For a question or discussion, do not start implementation. Do not run multiple workflows for the same request.
+`;
 var formats = { formattingOptions: { insertSpaces: true, tabSize: 2, eol: `
 ` } };
 var configPaths = ["opencode.jsonc", "opencode.json", ".opencode/opencode.jsonc", ".opencode/opencode.json"];
@@ -3790,42 +3808,6 @@ function replaceBlock(text, value) {
 ` : ""}${value}
 `;
 }
-async function claudeContext(root) {
-  let directory = root;
-  let claudeExists = false;
-  let ancestorAgents = false;
-  while (true) {
-    const candidates = ["CLAUDE.md", "CLAUDE.local.md", ...directory === homedir() ? [] : [".claude/CLAUDE.md"]];
-    for (const path2 of candidates) {
-      try {
-        if ((await lstat3(join2(directory, path2))).isFile())
-          claudeExists = true;
-      } catch (error) {
-        if (!missing(error))
-          throw error;
-      }
-    }
-    if (directory !== root) {
-      for (const path2 of ["AGENTS.md", ".claude/AGENTS.md"]) {
-        try {
-          if ((await lstat3(join2(directory, path2))).isFile()) {
-            const content = await readFile2(join2(directory, path2), "utf8");
-            const managed = block(content);
-            if ((managed ? content.replace(managed, "") : content).trim())
-              ancestorAgents = true;
-          }
-        } catch (error) {
-          if (!missing(error))
-            throw error;
-        }
-      }
-    }
-    if (dirname3(directory) === directory)
-      break;
-    directory = dirname3(directory);
-  }
-  return { claudeExists, ancestorAgents };
-}
 async function resources(scope) {
   const files = new Map;
   async function visit2(dir) {
@@ -3894,7 +3876,7 @@ function validateManifest(value, allowedManaged) {
     if (b.target === "opencode") {
       if (b.kind !== "instructions" || !configPaths.includes(b.path) || typeof b.instructionsCreated !== "boolean")
         throw new Error("Invalid OpenCode binding");
-    } else if (b.kind !== "block" || !(b.target === "codex" ? instructionFiles.slice(0, 2) : ["CLAUDE.md", ".claude/CLAUDE.md", ...m.scope === "workspace" ? [".claude/rules/shipright.md"] : []]).includes(b.path) || !/^[a-f0-9]{64}$/.test(b.sha256 ?? "")) {
+    } else if (!/^[a-f0-9]{64}$/.test(b.sha256 ?? "") || (b.target === "codex" ? b.kind !== "block" || !instructionFiles.slice(0, 2).includes(b.path) : !(b.kind === "file" && b.path === claudeRulePath && b.owned && b.fileCreated || b.kind === "block" && ["CLAUDE.md", ".claude/CLAUDE.md", ...m.scope === "workspace" ? [claudeRulePath] : []].includes(b.path)))) {
       throw new Error("Invalid instruction binding");
     }
   }
@@ -3940,6 +3922,8 @@ async function plan(options) {
     if (b.kind === "block" && (text === null || hash(block(text) ?? "") !== b.sha256)) {
       throw new Error(`Shipright block modified or missing: ${b.path}`);
     }
+    if (b.kind === "file" && (text === null || hash(text) !== b.sha256))
+      throw new Error(`Shipright rule modified or missing: ${b.path}`);
     if (b.kind === "instructions") {
       const present = [];
       for (const path2 of configPaths)
@@ -3963,8 +3947,11 @@ async function plan(options) {
       if (!b.owned)
         continue;
       const text = await current(b.path);
-      if (b.kind === "block") {
-        const after = replaceBlock(text, null);
+      if (b.kind === "file") {
+        await set(b.path, null);
+      } else if (b.kind === "block") {
+        const keepImport = b.target === "claude-code" && b.path === "CLAUDE.md" && /^@AGENTS\.md$/m.test(block(text) ?? "");
+        const after = replaceBlock(text, keepImport ? "@AGENTS.md" : null);
         await set(b.path, b.fileCreated && !after.trim() ? null : after);
       } else {
         const config = objectConfig(text, b.path);
@@ -3987,6 +3974,21 @@ async function plan(options) {
       bindings: [...previous?.bindings ?? []],
       scope
     };
+    const legacyClaude = installation.bindings.find((b) => b.target === "claude-code" && b.kind === "block");
+    if (legacyClaude) {
+      const old = await current(legacyClaude.path);
+      const oldBlock = block(old);
+      const preserveImport = legacyClaude.path === "CLAUDE.md" && /^@AGENTS\.md$/m.test(oldBlock);
+      const after = replaceBlock(old, preserveImport ? "@AGENTS.md" : null);
+      if (legacyClaude.path === claudeRulePath) {
+        if (after.trim())
+          throw new Error(`Unmanaged content in legacy Claude rule: ${claudeRulePath}`);
+        await set(claudeRulePath, null);
+      } else {
+        await set(legacyClaude.path, legacyClaude.fileCreated && !after.trim() ? null : after);
+      }
+      installation.bindings = installation.bindings.filter((b) => b !== legacyClaude);
+    }
     for (const [path2, text] of available) {
       if (isLocal(path2)) {
         if (await current(path2) === null)
@@ -3999,7 +4001,7 @@ async function plan(options) {
         installation.managedFiles[path2] = { sha256: hash(text) };
       }
     }
-    for (const target of [...new Set(selected)]) {
+    for (const target of [...new Set([...selected, ...legacyClaude ? ["claude-code"] : []])]) {
       if (installation.bindings.some((b) => b.target === target))
         continue;
       if (target === "opencode") {
@@ -4025,23 +4027,18 @@ async function plan(options) {
           text = applyEdits(text, modify(text, ["instructions"], [...list, instructionPath], formats));
         await set(path2, text);
         installation.bindings.push({ target, path: path2, kind: "instructions", owned, fileCreated: existing === null, instructionsCreated: config.instructions === undefined });
+      } else if (target === "claude-code") {
+        if (await current(claudeRulePath) !== null)
+          throw new Error(`Unmanaged file already exists: ${claudeRulePath}`);
+        await set(claudeRulePath, claudeRule);
+        installation.bindings.push({ target, path: claudeRulePath, kind: "file", owned: true, fileCreated: true, sha256: hash(claudeRule) });
       } else {
         const override = await current("AGENTS.override.md");
-        const claudePath = scope === "workspace" ? ".claude/rules/shipright.md" : await current("CLAUDE.md") !== null ? "CLAUDE.md" : await current(".claude/CLAUDE.md") !== null ? ".claude/CLAUDE.md" : "CLAUDE.md";
-        const path2 = target === "claude-code" ? claudePath : override?.trim() ? "AGENTS.override.md" : "AGENTS.md";
+        const path2 = override?.trim() ? "AGENTS.override.md" : "AGENTS.md";
         const existing = await current(path2);
         if (block(existing ?? ""))
           throw new Error(`Unregistered Shipright block: ${path2}`);
-        const context = target === "claude-code" && scope === "repo" ? await claudeContext(root) : null;
-        if (context && existing === null && !context.claudeExists && context.ancestorAgents) {
-          throw new Error("Creating CLAUDE.md could mask ancestor AGENTS.md instructions; reconcile Claude instruction sources first");
-        }
-        const preserveAgents = target === "claude-code" && scope === "repo" && existing === null && !context?.claudeExists && (await current("AGENTS.md"))?.trim();
-        const claudeImport = path2 === ".claude/CLAUDE.md" ? "@../.shipright/bootstrap.md" : "@.shipright/bootstrap.md";
-        const content = target === "claude-code" && scope === "repo" ? `${start}
-${preserveAgents ? `@AGENTS.md
-` : ""}${claudeImport}
-${end}` : `${start}
+        const content = `${start}
 For a technical implementation request, explicitly read .shipright/bootstrap.md if not already loaded and apply Shipright. For a question or discussion, do not start implementation. Do not run multiple workflows for the same request.
 ${end}`;
         await set(path2, replaceBlock(existing ?? "", content));
@@ -5463,11 +5460,11 @@ var SELECT_INSTRUCTIONS = [
 var i = `${styleText2("gray", S_BAR)}  `;
 
 // packages/cli/src/cli-presentation.ts
-import { dirname as dirname5, relative as relative4, resolve as resolve5 } from "path";
+import { dirname as dirname4, relative as relative4, resolve as resolve5 } from "path";
 
 // packages/cli/src/workspace-install.ts
 import { realpath as realpath4 } from "fs/promises";
-import { dirname as dirname4, join as join3, resolve as resolve4 } from "path";
+import { dirname as dirname3, join as join3, resolve as resolve4 } from "path";
 async function planWorkspaceInstallation(options) {
   const root = await realpath4(resolve4(options.root));
   const config = await planWorkspace(root, options.repos);
@@ -5486,7 +5483,7 @@ async function planWorkspaceInstallation(options) {
     const repository = workspace.value.repositories[id];
     if (!repository)
       throw new Error(`Repository is not registered: ${id}`);
-    const location = await realpath4(resolve4(dirname4(workspace.file), repository.path));
+    const location = await realpath4(resolve4(dirname3(workspace.file), repository.path));
     if (roots.has(location))
       throw new Error(`Duplicate or invalid repository location: ${id}`);
     roots.add(location);
@@ -5550,13 +5547,13 @@ async function choose(options) {
     if (entries.length) {
       const selected = await multiselect({
         message: "Select repositories to initialize and link",
-        options: entries.map(([id, repo]) => ({ value: id, label: id, hint: resolve5(dirname5(workspace.file), repo.path) })),
+        options: entries.map(([id, repo]) => ({ value: id, label: id, hint: resolve5(dirname4(workspace.file), repo.path) })),
         initialValues: entries.map(([id]) => id),
         required: true
       });
       if (cancelled(selected))
         return false;
-      options.repo = selected.map((id) => `${id}=${relative4(workspace.root, resolve5(dirname5(workspace.file), workspace.value.repositories[id].path))}`);
+      options.repo = selected.map((id) => `${id}=${relative4(workspace.root, resolve5(dirname4(workspace.file), workspace.value.repositories[id].path))}`);
     }
   }
   return true;

package/dist/resources/coordinator.md

@@ -22,6 +22,8 @@ You manage handoffs between responsibilities and acceptance conditions; do not r
 
 Read cycle and budget limits in the project contract's `workflow.md`; session-specific settings may supplement them under project rules. Ask for them if missing. Stop on exhausted budget, churn without progress, a missing required capability, or an out-of-mandate blocker. Present options and a recommendation, without false acceptance or escalating every ordinary detail.
 
+Apply any authorized model, provider, and fallback policy from the applicable contract. Check available capabilities before delegation; catalog presence alone does not establish entitlement or cost. Use only authorized fallbacks, report the actual selection and reason for any substitution, and stop to ask if none is available. Never knowingly switch to unapproved paid usage. Instructions cannot enforce provider billing settings; report uncertainty rather than assuming protection. A fallback does not relax review independence.
+
 ## Recovery, learning, and reporting
 
 After an interruption, recover tasks, worktree, decisions, findings, and results before restarting. Do not duplicate operations whose outcome is unknown; check their state first.

package/package.json

@@ -1,15 +1,29 @@
 {
   "name": "@shipright/shipright",
-  "version": "0.1.0-nightly.0",
+  "version": "0.1.0-nightly.2",
   "description": "Configurable engineering workflows for coding agents. Ship fast. Ship right.",
   "license": "MIT",
-  "keywords": ["coding-agents", "workflow", "t3-code", "opencode", "claude-code", "codex", "bun"],
+  "keywords": [
+    "coding-agents",
+    "workflow",
+    "t3-code",
+    "opencode",
+    "claude-code",
+    "codex",
+    "bun"
+  ],
   "type": "module",
   "bin": {
     "shipright": "dist/cli.js"
   },
-  "files": ["dist", "README.md", "LICENSE"],
-  "engines": { "bun": ">=1.3.10" },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "bun": ">=1.3.10"
+  },
   "publishConfig": {
     "access": "public",
     "tag": "nightly",