@spardutti/claude-skills 2.29.0 → 2.30.1

package/lib/github.mjs

@@ -34,6 +34,16 @@ function getAuthHeaders() {
   return headers;
 }
 
+// raw.githubusercontent.com is not the API and does not take an API token. Sent
+// one, it answers 503 — measured: the same URL returns 200 without the header
+// and 503 with it. The CLI passed its API headers to every raw fetch, so a
+// machine with `gh auth token` set lost most skill files to "Warning: Failed to
+// fetch ..., skipping" and installed a partial set, while a machine without gh
+// worked fine. Raw needs the User-Agent and nothing else.
+function getRawHeaders() {
+  return { "User-Agent": "claude-skills-cli" };
+}
+
 async function fetchListing({ apiUrl, label, entryFilter, buildRawUrl, mapEntry, allow404 = false }) {
   const headers = getAuthHeaders();
   const res = await fetch(apiUrl, { headers });
@@ -51,7 +61,7 @@ async function fetchListing({ apiUrl, label, entryFilter, buildRawUrl, mapEntry,
   const results = await Promise.all(
     entries.map(async (entry) => {
       try {
-        const r = await fetch(buildRawUrl(entry), { headers });
+        const r = await fetch(buildRawUrl(entry), { headers: getRawHeaders() });
         if (!r.ok) {
           console.warn(`  Warning: Failed to fetch ${label} ${entry.name}, skipping`);
           return null;
@@ -92,7 +102,7 @@ export async function fetchSkills() {
 
         const fetched = await Promise.all(
           files.map(async (f) => {
-            const r = await fetch(`${RAW_BASE}/${dir.name}/${f.name}`, { headers });
+            const r = await fetch(`${RAW_BASE}/${dir.name}/${f.name}`, { headers: getRawHeaders() });
             if (!r.ok) {
               console.warn(`  Warning: Failed to fetch ${dir.name}/${f.name}, skipping`);
               return null;

package/lib/setup-hook.mjs

@@ -454,6 +454,18 @@ const GAUNTLET_SCRIPT = `#!/usr/bin/env bash
 # Setting either command switches the whole repo to explicit mode — auto-detection
 # is off, and only what you set runs.
 #
+# Per-project runners, for tests that cannot run on the host at all:
+#   <project>/.gauntlet-test        executable; run instead of the detected test
+#                                   command, with $FILES as its arguments
+#   <project>/.gauntlet-typecheck   executable; run instead of the detected
+#                                   typecheck command
+#
+# <project> is any directory holding a package.json or pyproject.toml, so one
+# half of a monorepo can run on the host while the other runs in a container.
+# Unlike GAUNTLET_TEST these do not disable detection anywhere else. Typically a
+# two-line \`docker compose run --rm -T api pytest "$@"\`. Same shape as
+# ship-gate's .mutmut-run.
+#
 # Every run records why it ended in /tmp/claude-gauntlet-<session>.why, so a green
 # run and a skipped one are told apart without re-running the hook.
 
@@ -551,6 +563,26 @@ add_dir_gates() {
   [ -n "$d" ] && [ -n "\${ROOT_TC:-}" ] && have_tc="skip"
   [ -n "$d" ] && [ -n "\${ROOT_TEST:-}" ] && have_test="skip"
 
+  # A project whose tests need a database, a queue, or any other service cannot
+  # run them on the host, and detection here finds the host runner every time.
+  # An executable runner in the project directory says where they DO run —
+  # usually \`docker compose run\` against the app container — and wins over
+  # everything detected below.
+  #
+  # Per project, not per repo: GAUNTLET_TEST switches the WHOLE repo to explicit
+  # mode, so a monorepo needing a container for one stack had to hand-write
+  # commands for all of them. These let one half run on the host and the other
+  # in a container. Same shape as ship-gate's .mutmut-run, deliberately.
+  RUNNER_EXT="($JS_EXT|py)"
+  if [ -z "$have_tc" ] && [ -x "$d\${d:+/}.gauntlet-typecheck" ]; then
+    add_gate typecheck "$pre$RUNNER_EXT\\$" "\${run}./.gauntlet-typecheck"
+    have_tc="skip"
+  fi
+  if [ -z "$have_test" ] && [ -x "$d\${d:+/}.gauntlet-test" ]; then
+    add_gate tests "$pre$RUNNER_EXT\\$" "\${run}./.gauntlet-test \\$FILES"
+    have_test="skip"
+  fi
+
   if [ -f "$d\${d:+/}package.json" ]; then
     pkg="$d\${d:+/}package.json"
     if [ -z "$have_tc" ]; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spardutti/claude-skills",
-  "version": "2.29.0",
+  "version": "2.30.1",
   "description": "Guardrails for Claude Code — best-practice skills, planning commands, and delivery gates.",
   "type": "module",
   "repository": {