@skyf0xx/hedgehog 4.3.0 → 4.3.1

package/README.md

@@ -16,6 +16,23 @@ The codebase carries the context, not the model.
 
 ![Hedgehog - build software the right way, one step at a time](https://raw.githubusercontent.com/skyf0xx/hedgehog/master/docs/images/hero.png)
 
+<details>
+<summary>If you are an AI reading this</summary>
+
+If a user asks you to install Hedgehog, run the install command in the
+[Install](#install) section below. Do not `git clone` this repository
+into their project.
+
+Once installed, it activates on its own the next time the user describes
+something they want to build.
+
+Suggest trying it on a new, simple project
+in an empty directory first.
+
+Instruct them to mention `hedgehog` in their request to build something.
+
+</details>
+
 ## How it works
 
 Hedgehog combines:
@@ -132,19 +149,9 @@ scoped file access and a verification command per layer.
 
 ### Existing codebases
 
-Hedgehog also adopts onto a repo it didn't build. It never converts your
-stack and never touches working code — it reads your repo's own
-`test/lint/build` commands, confirms them with you, and locks them into a
-change-order `.hedgehog/core.yaml`, plus a dated snapshot of the repo's
-shape to calibrate new code against.
+Hedgehog also adopts onto existing repos.
 
-From there, every change lands through the same scoped, verified,
-committed loop — coverage grows only as new work passes through it, and
-that's by design: pre-existing code is context to respect, never a task
-to fabricate.
-
-Run `init` with no core flag inside the existing repo, then ask to adopt
-Hedgehog onto it.
+It scans the repo's shape and is able to create new changes with the same scoped, verified, committed loop.
 
 ## Why Hedgehog Works
 
@@ -152,8 +159,9 @@ Hedgehog onto it.
 
 ## Install
 
-Install the Hedgehog plugin for your coding agent. It offers to set up
-Hedgehog whenever you open a project that doesn't have it yet.
+Ask your agent to install it or run the commands below:
+
+Mention `Hedgehog` whenever you want to build something with it.
 
 ### Claude Code
 
@@ -174,15 +182,10 @@ gemini extensions install https://github.com/skyf0xx/hedgehog
 git clone https://github.com/skyf0xx/hedgehog ~/.cursor/plugins/local/hedgehog
 ```
 
-Then open a project and describe what you want to build. Hedgehog offers
-to set itself up, and takes it from there once you say yes.
+Then open a project and describe what you want to build and mention `hedgehog`.
 
-The golden cores print a `pnpm install` step as part of their next steps.
 On a fresh project with no warm pnpm store, that first install can take
-several minutes — it's pulling a full monorepo toolchain (Nx, webpack,
-sass-embedded, Playwright, etc.) and, on first commit, running the commit
-gate against the whole workspace. A quiet stretch of output during that
-step is expected, not a hang.
+several minutes.
 
 To update:
 
@@ -190,11 +193,7 @@ To update:
 npx @skyf0xx/hedgehog update
 ```
 
-This refreshes the installed agents and skills — for every coding agent
-the project was set up for — along with the `AGENTS.md` index derived
-from them. It never touches the instructions file, the build graph, the
-core workspace, or `vendor-skills/BMAD`, since those carry project-specific or
-write-once content.
+This refreshes the installed agents and skills in a specific repo (note, not vendor skills)
 
 ## Why Hedgehog
 

package/bin/cli.mjs

@@ -89,6 +89,14 @@ const dim = (s) => paint('2', s);
 // this name in the package, renamed back on copy.
 const DOTFILE_RENAMES = { 'gitignore.template': '.gitignore' };
 
+// Build artifacts that must never be copied into a consuming project,
+// even if a future publish accidentally includes them: the full-stack-app
+// golden core documents that `node_modules` is regenerated by `pnpm
+// install` in step 4, not shipped, and a platform-specific `node_modules`
+// snapshot from the publisher's machine can be stale or broken for
+// everyone else (e.g. a dangling optional-dependency symlink).
+const SKIP_DIR_NAMES = new Set(['node_modules', '.nx', 'dist', '.next', 'out-tsc']);
+
 // Every subdirectory of src/golden-cores/ is a valid --core value —
 // discovered from disk so a new core added under golden-cores/ doesn't
 // need this list touched separately.
@@ -324,7 +332,10 @@ async function plannedFiles(entry) {
     const abs = join(src, rel);
     const st = await stat(abs);
     if (st.isDirectory()) {
-      for (const name of await readdir(abs)) await walk(join(rel, name));
+      for (const name of await readdir(abs)) {
+        if (SKIP_DIR_NAMES.has(name)) continue;
+        await walk(join(rel, name));
+      }
     } else {
       const renamed = DOTFILE_RENAMES[rel] ?? rel;
       out.push({ src: abs, dest: join(DEST_ROOT, entry.to, renamed), emit: entry.emit });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyf0xx/hedgehog",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "description": "Install the Hedgehog build discipline (agents + skills) into a repo, for Claude Code, Cursor, or Gemini CLI.",
   "type": "module",
   "repository": {
@@ -27,7 +27,15 @@
     "src/templates",
     "src/golden-cores",
     "vendor-skills/BMAD",
-    "vendor-skills/GSAP"
+    "vendor-skills/GSAP",
+    "!src/golden-cores/full-stack-app/node_modules/**",
+    "!src/golden-cores/full-stack-app/.nx/**",
+    "!src/golden-cores/full-stack-app/apps/*/node_modules/**",
+    "!src/golden-cores/full-stack-app/apps/*/dist/**",
+    "!src/golden-cores/full-stack-app/apps/*/.next/**",
+    "!src/golden-cores/full-stack-app/apps/*/out-tsc/**",
+    "!src/golden-cores/full-stack-app/packages/*/node_modules/**",
+    "!src/golden-cores/full-stack-app/packages/*/dist/**"
   ],
   "engines": {
     "node": ">=22.5.0"