@ssheleg/make-skill 0.16.0 → 0.17.1

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+## v0.17.1 — 2026-08-13
+
+Eight negative self-tests were healthy and had no way to prove it — and the first attempt
+to give them one proved the point by being wrong.
+
+### Added
+
+- **`test/plant_guard.py`** — one implementation of *did the plant actually land*, called
+  by every plant as `snap` before and `verify` after. It compares **content and mode**,
+  ignores `.git` churn, refuses when handed no tree or no snapshot, and keeps its manifest
+  outside the tree it measures. `test/plant_guard_test.py` covers nine cases, including
+  the one that named it.
+
+### Fixed
+
+- **Every file-editing plant now proves it landed**, `PLANT DID NOT LAND: <step>`. A plant
+  that edits nothing leaves the validator honestly passing, and the step then reports a
+  guard it never disarmed as broken — standing instruction #6's corollary, and what kept
+  `sheleg-dev`'s `main` red for two days over a guard that worked.
+- **The `hookexec` case was reported broken and was not.** Its plant drops a hook
+  script's executable bit, and the first guard compared bytes only, so it announced
+  `PLANT DID NOT LAND` about a plant that had landed. CI caught it; the local run had
+  truncated its output before that case. The helper exists because five hand-written
+  variants of this guard produced five different bugs, that one included.
+
+Verified by running every plant: 40 cases across eight steps, all green — `name`, `desc`,
+`key`, `ref`, `trigger`, `contrib`, `reserved`, `xmltag`, `person`, `toc`, `tokens`,
+`tplxml`, four eval cases, five host-capability cases including `hookexec`, and the rest.
+
+
+## v0.17.0
+
+Following `task-pipeline` v1.53.0, which renamed the artifact root's default from
+`docs/superpowers/` to `docs/evidence/` and made the root resolvable (`paths.artifacts`
+in `pipeline.json`, else an existing `docs/evidence/`, else an existing
+`docs/superpowers/` — **the legacy name stays supported and no run warns about it**).
+
+Shipped surfaces name the new default now, which is why this is a minor rather than a
+patch. This project's own records moved with the directory and were not rewritten: a
+brief describes where things were when it was written.
+
 ## v0.16.0
 
 ### Changed

package/README.md

@@ -258,7 +258,7 @@ test/validate.py                      # structural validator
 test/evals/                           # trigger set + behavioral scenarios (data)
 .github/workflows/{validate,release}.yml
 install.sh  README.md  CHANGELOG.md  CONTRIBUTING.md  SECURITY.md  SKILL-CARD.md  LICENSE
-docs/superpowers/{specs,plans}/       # historical design records
+docs/evidence/{specs,plans}/       # historical design records
 ```
 
 ## Contributing

package/cursor/rules/make-skill.mdc

@@ -82,7 +82,7 @@ test/evals/                                # triggers.json + scenarios.json (dat
 .github/workflows/validate.yml (+ release.yml, off by default)
 install.sh, README.md (English-first), CHANGELOG.md, LICENSE (MIT)
 CONTRIBUTING.md + SECURITY.md              # required once the repo is public
-docs/superpowers/{specs,plans}/
+docs/evidence/{specs,plans}/
 ```
 
 ## Claude Code plugin conformance (Anthropic's own reference)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ssheleg/make-skill",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "description": "Create, retrofit, audit, and ship agent skills & Claude Code plugins the proven ssheleg way — conformance to the Agent Skills open standard AND Anthropic's platform rules (front-matter limits, disclosure budgets, per-surface runtime limits, the Skills API, evals) plus the Claude Code plugin reference (manifest schemas, component layout, claude plugin validate --strict), marketplace repo layout, version sync, validator + CI, multi-channel distribution (plugin, vercel skills CLI, npx, Cursor), npm gotchas, the review checklist for third-party skills, and MCP / A2A rules for protocol-connected skills. This package is the installer CLI.",
   "keywords": [
     "skill",

package/plugins/make-skill/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "make-skill",
   "displayName": "Make Skill",
   "description": "Create, retrofit, audit, and ship agent skills & Claude Code plugins the proven ssheleg way: conformance to the Agent Skills open standard, Anthropic's platform rules (surfaces, Skills API, evals) and the Claude Code plugin reference, marketplace repo layout, version sync, validator + CI, multi-channel distribution (plugin, vercel skills CLI, npx, Cursor), npm gotchas, end-to-end first publish, the review checklist for third-party skills, plus MCP / A2A references for protocol-connected skills.",
-  "version": "0.16.0",
+  "version": "0.17.1",
   "author": {
     "name": "ssheleg",
     "url": "https://x.com/sshlg93"

package/plugins/make-skill/skills/make-skill/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 compatibility: Authoring works on any agent. The bundled scripts/ need python3. Publishing steps need git, gh, node and npm; the plugin gates need the claude CLI. Not usable on the Claude API surface, which has no network and no runtime package install.
 metadata:
   author: ssheleg
-  version: "0.16.0"
+  version: "0.17.1"
   homepage: https://github.com/ssheleg/make-skill
 ---
 
@@ -49,7 +49,7 @@ or `plugins/*/skills/*/` in the current directory → run the Retrofit audit and
 report the gap table plus ONE next action. Nothing to detect → ask in one line
 what to create.
 
-Distributable work is a real project: spec (`docs/superpowers/specs/`) before
+Distributable work is a real project: spec (`docs/evidence/specs/`) before
 code, and the spec locks target-project file contracts FIRST — skills are
 written against that contract, never ad hoc.
 

package/plugins/make-skill/skills/make-skill/references/distribution.md

@@ -66,7 +66,7 @@ the shape from `ssheleg/super-ux`:
 ├── README.md (English-first), CHANGELOG.md, LICENSE (MIT)
 ├── CONTRIBUTING.md + SECURITY.md       # public repo: how to check work, where to report
 ├── SKILL-CARD.md                       # the enterprise registry entry + risk-table pass
-└── docs/superpowers/{specs,plans}/
+└── docs/evidence/{specs,plans}/
 ```
 
 **Public-repo floor** (validator-enforced): a README saying what it does before