@spardutti/claude-skills 2.63.0 → 2.64.0

package/README.md

@@ -135,7 +135,7 @@ Portable slash commands installed to `.claude/commands/`. Some orchestrate paral
 | `/ship` | Unified delivery pipeline — commit → gate → PR → merge → release. The gate is the one enforcement moment: it checks the diff's file lengths and that new files sit in their kind folder, audits it against the skills installed in the project, mutation-tests the changed lines to prove the tests would catch a break, and runs one `/code-review` round for logic bugs — **fixing what it finds** rather than handing you a list. It runs before the **PR**, not before every commit: its scope is the whole branch, so gating each commit re-mutated every file the branch had ever touched. `--force` skips it. No argument steps through interactively; `/ship pr` runs through PR creation; `/ship release` runs the full pipeline |
 | `/discover` | Find the right problem before deciding what to build — diverges first: generates competing framings through blind subagents under forced constraints, stress-tests the winner with a blind critic, and refuses to converge until every open question is answered or deferred, then drafts scope, non-goals, edge cases and success criteria for you to correct. Run before `/plan-feature` |
 | `/plan-feature` | Integration-first feature planning, then building — one agent scans the repo for reusable code, patterns and touch points, grounded clarifying questions follow, the plan is written as type-checked stubs at the real paths, and on your go it fills them in. It reads every `*.registry.yaml` first and must mark each one reuse or skip |
-| `/registry` | Record the project's reusable systems — aiming methods, a state machine, an effect pipeline — as a small `<name>.registry.yaml` next to their code, so `/plan-feature` extends them instead of rebuilding them. You name the system, it drafts the entry for your yes. `/registry eval` lists existing code that does an entry's job outside its folder |
+| `/registry` | Record the project's reusable systems — aiming methods, a state machine, an effect pipeline — as a small `<name>.registry.yaml` next to their code, so `/plan-feature` extends them instead of rebuilding them. You name the system, it drafts the entry for your yes. `/registry eval` lists existing code that does an entry's job outside its folder, and `/registry update` redrafts every entry against today's code |
 | `/optimize` | Make one measured job faster without changing what it proves — fixes a benchmark and a result that must not move, sends 4 read-only subagents to find suspects, then changes one thing per round with a prediction written first, keeping only what beats the noise. Profiles after every wrong prediction, reruns before judging a result that flipped, and ends by writing the cause as a skill rule for you |
 | `/handoff` | Write a handoff doc so a fresh session picks the work up — captures what auto-compaction loses: decisions made and rejected, dead ends already ruled out, why the tree is dirty, and the one next step |
 | `/lockdown` | Per-repo supply-chain hardening — detects the package managers, Dockerfiles, and CI in use, then guides you through and applies install-time, deploy, and pipeline hardening for npm/pnpm, pip/uv, Docker, and GitHub Actions |

package/hooks/registry-lib.mjs

@@ -83,6 +83,8 @@ export function insideLocation(entry, file) {
   return loc !== "" && (file === loc || file.startsWith(loc.replace(/\/?$/, "/")));
 }
 
+export const isAllowed = (entry, file) => entry.allowed.some((a) => (a.endsWith("/") ? file.startsWith(a) : file === a));
+
 // Only what the stub added: an extended file's old code would trip triggers it never wrote.
 export function addedText(root, file) {
   const tracked = spawnSync("git", ["-C", root, "ls-files", "--error-unmatch", file], { encoding: "utf8" });

package/hooks/registry.mjs

@@ -2,7 +2,7 @@
 import { existsSync, readFileSync, statSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
 import {
-  REGISTRY_SUFFIX, addedText, escape, insideLocation, loadRegistry, planMarks, projectFiles, projectRoot, symbolsOf, triggerHits,
+  REGISTRY_SUFFIX, addedText, escape, insideLocation, isAllowed, loadRegistry, planMarks, projectFiles, projectRoot, symbolsOf, triggerHits,
 } from "./registry-lib.mjs";
 import { loadEditRules } from "./text-rules.mjs";
 
@@ -50,11 +50,15 @@ function checkPlan(planPath, stubs) {
   if (!asks.length) console.log("registry ok");
 }
 
+function planMissing() {
+  if (entries.length && !planMarks(join(root, "PLAN.md"))?.size) console.log(`registry unplanned — ${entries.length} entries, no marks in PLAN.md`);
+}
+
 function evaluate() {
   if (!entries.length) return console.log(`registry none — no *${REGISTRY_SUFFIX} in this project`);
   for (const e of entries) {
     if (!e.does.length) { console.log(`registry eval ${e.name}: skipped, no does`); continue; }
-    const outside = files.filter((f) => !insideLocation(e, f) && !e.allowed.includes(f) && !f.endsWith(REGISTRY_SUFFIX));
+    const outside = files.filter((f) => !insideLocation(e, f) && !isAllowed(e, f) && !f.endsWith(REGISTRY_SUFFIX));
     const hits = outside.flatMap((f) => readFileSync(join(root, f), "utf8").split("\n").flatMap((line, i) =>
       e.does.filter((code) => calls(line, code)).map((code) => `registry SUSPECT ${e.name} ${f}:${i + 1} ${code}`)));
     console.log(hits.length ? hits.join("\n") : `registry eval ${e.name}: nothing outside ${e.location} does its job`);
@@ -78,24 +82,28 @@ function stale() {
     if (/^\s+-\s/m.test(e.text)) say("write lists on one line, like triggers: [aim, target]");
     if (seen.has(e.name)) say(`name ${e.name} is used twice`);
     seen.add(e.name);
-    const loc = join(root, e.location ?? "");
-    if (!e.location || !existsSync(loc)) { say(`location ${e.location} not found`); continue; }
-    const near = statSync(loc).isDirectory() ? loc : dirname(loc);
-    if (e.example && !existsSync(join(near, e.example)) && !existsSync(join(root, e.example))) say(`example ${e.example} not found`);
-    const syms = symbolsOf(e.extend_by);
-    if (!syms.length) say("extend_by names no symbol — write names like `AimStrategy`");
-    const code = files.filter((f) => insideLocation(e, f) && !f.endsWith(REGISTRY_SUFFIX))
-      .map((f) => readFileSync(join(root, f), "utf8")).join("\n");
-    for (const s of syms) {
-      // A plain word like `first` matches `var first = enemies[0]`; `Aim.first` only matches real use.
-      if (/^[a-z][a-z0-9]*$/.test(s)) say(`\`${s}\` is too common a word to prove use — name its owner, like \`Owner.${s}\``);
-      else if (!s.split(".").every((part) => uses(code, part))) say(`${s} from extend_by is not found in ${e.location}`);
-    }
-    for (const c of e.does) if (!calls(code, c)) say(`does ${c} is not found in ${e.location}`);
+    staleCode(e, say);
   }
   if (problems.length) fail(problems);
 }
 
+function staleCode(e, say) {
+  const loc = join(root, e.location ?? "");
+  if (!e.location || !existsSync(loc)) return say(`location ${e.location} not found`);
+  const near = statSync(loc).isDirectory() ? loc : dirname(loc);
+  if (e.example && !existsSync(join(near, e.example)) && !existsSync(join(root, e.example))) say(`example ${e.example} not found`);
+  const syms = symbolsOf(e.extend_by);
+  if (!syms.length) say("extend_by names no symbol — write names like `AimStrategy`");
+  const code = files.filter((f) => insideLocation(e, f) && !f.endsWith(REGISTRY_SUFFIX))
+    .map((f) => readFileSync(join(root, f), "utf8")).join("\n");
+  for (const s of syms) {
+    // A plain word like `first` matches `var first = enemies[0]`; `Aim.first` only matches real use.
+    if (/^[a-z][a-z0-9]*$/.test(s)) say(`\`${s}\` is too common a word to prove use — name its owner, like \`Owner.${s}\``);
+    else if (!s.split(".").every((part) => uses(code, part))) say(`${s} from extend_by is not found in ${e.location}`);
+  }
+  for (const c of e.does) if (!calls(code, c)) say(`does ${c} is not found in ${e.location}`);
+}
+
 function fail(lines) {
   for (const line of lines) console.log(line);
   process.exitCode = 1;
@@ -104,9 +112,10 @@ function fail(lines) {
 const [mode, ...rest] = process.argv.slice(2);
 if (mode === undefined) list();
 else if (mode === "--plan" && rest[0]) checkPlan(resolve(rest[0]), rest.slice(1));
+else if (mode === "--plan-missing") planMissing();
 else if (mode === "--stale") stale();
 else if (mode === "--eval") evaluate();
 else {
-  console.error("usage: registry.mjs [--plan PLAN.md <stub files…> | --stale | --eval]");
+  console.error("usage: registry.mjs [--plan PLAN.md <stub files…> | --plan-missing | --stale | --eval]");
   process.exit(2);
 }

package/hooks/ship-prep.sh

@@ -59,6 +59,9 @@ scope() {
   base=$(printf '%s\n' "$scope" | sed -n '1s/^base //p')
   while IFS=$'\t' read -r f _; do [ -n "$f" ] && files+=("$f"); done < <(printf '%s\n' "$scope" | sed '1d')
   skills_report "${files[@]}"
+  if printf '%s\n' "$scope" | grep -q '(new)$' && [ -n "$(node "$HERE/registry.mjs" --plan-missing 2>/dev/null)" ]; then
+    echo "plan none: this branch adds files and no /plan-feature marked the registry"
+  fi
   diff="/tmp/claude-ship-$(printf '%s %s' "$PWD" "$branch" | cksum | cut -d' ' -f1).diff"
   : > "$diff"
   if [ ${#files[@]} -gt 0 ]; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spardutti/claude-skills",
-  "version": "2.63.0",
+  "version": "2.64.0",
   "description": "Guardrails for Claude Code — best-practice skills, planning commands, and delivery gates.",
   "type": "module",
   "repository": {