@trendai-crem/claude-skills 0.8.0 → 0.10.0

package/cli.js

@@ -38,6 +38,14 @@ const teamSkills = readdirSync(join(__dir, 'skills'), { withFileTypes: true })
 
 const teamOk = run(['skills', 'add', __dir, '--all', '-g', '-y'], 'team skills');
 
+// 3. Marketplace plugins — failures are non-fatal
+let marketplaceResults = [];
+try {
+  marketplaceResults = installMarketplacePlugins();
+} catch (err) {
+  console.error(`\nmarketplace plugin installation failed unexpectedly: ${err.message}`);
+}
+
 // Summary
 console.log('\nResults:');
 externalResults.forEach(({ label, ok }) => console.log(`  ${ok ? '✓' : '✗'} ${label}`));
@@ -46,6 +54,9 @@ if (teamOk) {
 } else {
   console.log(`  ✗ team skills`);
 }
+marketplaceResults.forEach(({ plugin, action, ok }) =>
+  console.log(`  ${ok ? '✓' : '✗'} ${plugin} (${action})`)
+);
 
 if (!teamOk) {
   console.error('\nFATAL: Team skills installation failed.');
@@ -57,9 +68,174 @@ if (externalFailed.length > 0) {
   console.warn(`\nWARN: ${externalFailed.length} external source(s) failed — team skills installed successfully.`);
 }
 
+const marketplaceFailed = marketplaceResults.filter(r => !r.ok);
+if (marketplaceFailed.length > 0) {
+  console.warn(`\nWARN: ${marketplaceFailed.length} marketplace plugin(s) failed — team skills installed successfully.`);
+}
+
 // Configure update-check hooks
 setupAutoUpdate();
 
+// Reads a JSON file and returns its parsed value if it is a non-null, non-array object.
+// Returns `fallback` on any error (missing file, parse failure, wrong type).
+function readJsonObject(filePath, fallback, label) {
+  if (!existsSync(filePath)) return fallback;
+  try {
+    const parsed = JSON.parse(readFileSync(filePath, 'utf8'));
+    if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) return parsed;
+    console.warn(`\nWARN: Ignoring invalid ${label}: expected JSON object`);
+  } catch (err) {
+    console.warn(`\nWARN: Ignoring invalid ${label}: ${err.message}`);
+  }
+  return fallback;
+}
+
+// Extracts the registered source for a marketplace from known_marketplaces.json.
+// Handles: plain string, object with string .source, and GitHub registry format
+// { source: { source: "github", repo: "org/repo" } }.
+function getRegisteredMarketplaceSource(known, marketplaceName) {
+  const entry = known[marketplaceName];
+  if (typeof entry === 'string') return entry;
+  if (entry && typeof entry === 'object' && !Array.isArray(entry)) {
+    if (typeof entry.source === 'string') return entry.source;
+    // GitHub registry format: { source: { source: "github", repo: "org/repo" }, ... }
+    if (entry.source?.source === 'github' && typeof entry.source?.repo === 'string') {
+      return entry.source.repo;
+    }
+  }
+  return null;
+}
+
+// Normalizes a marketplace source to a canonical host/path form for comparison.
+// Accepts SSH URLs, HTTPS URLs, and GitHub shorthand (org/repo).
+// Returns null if the source cannot be parsed.
+function normalizeMarketplaceSource(rawSource) {
+  // GitHub shorthand: org/repo (no slashes in org, no protocol)
+  if (/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(rawSource)) {
+    return rawSource.toLowerCase();
+  }
+  const sshMatch = /^git@([^:]+):(.+?)(?:\.git)?$/.exec(rawSource);
+  if (sshMatch) {
+    return `${sshMatch[1].toLowerCase()}/${sshMatch[2].replace(/^\/+/, '').replace(/\.git$/, '')}`;
+  }
+  try {
+    const url = new URL(rawSource);
+    return `${url.hostname.toLowerCase()}/${url.pathname.replace(/^\/+/, '').replace(/\.git$/, '')}`;
+  } catch {
+    return null;
+  }
+}
+
+// Installs or updates all plugins for a single marketplace entry.
+// Returns an array of { plugin, action, ok } results.
+function installFromMarketplace(entry, known, installed) {
+  // Input validation + allowlisting (SCD-1, OWASP-A04)
+  // Leading `-` is rejected to prevent argv injection: `claude plugin install -s` parses as flag.
+  const SAFE_NAME = /^(?!-)[A-Za-z0-9_][A-Za-z0-9_-]*$/;
+  const SAFE_SOURCE = /^(git@[\w.-]+:[\w.\-/]+\.git|https:\/\/[\w.-]+\/[\w.\-/]+\.git)$/;
+  const SAFE_GITHUB = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+
+  const { name: marketplaceName, source, plugins } = entry ?? {};
+
+  if (typeof marketplaceName !== 'string' || typeof source !== 'string' || !Array.isArray(plugins)) {
+    console.error('\nInvalid marketplace entry: missing required fields (name, source, plugins[])');
+    return [];
+  }
+  if (!SAFE_NAME.test(marketplaceName) || (!SAFE_SOURCE.test(source) && !SAFE_GITHUB.test(source))) {
+    console.error(`\nInvalid marketplace name or source: ${marketplaceName}`);
+    return [];
+  }
+  // Reject the entire entry on any invalid plugin name (fail-closed, not silent filter).
+  const invalidPlugins = plugins.filter(p => typeof p !== 'string' || !SAFE_NAME.test(p));
+  if (invalidPlugins.length > 0) {
+    console.error(`\nInvalid plugin names for ${marketplaceName}: ${invalidPlugins.map(p => JSON.stringify(p)).join(', ')}`);
+    return [];
+  }
+
+  console.log(`\nInstalling marketplace plugins (${marketplaceName})...\n`);
+
+  // Register marketplace if not already known — verify source matches to prevent supply-chain mismatch (OWASP-A08)
+  const registeredSource = getRegisteredMarketplaceSource(known, marketplaceName);
+  const normalizedSource = normalizeMarketplaceSource(source);
+  const normalizedRegistered = registeredSource ? normalizeMarketplaceSource(registeredSource) : null;
+
+  if (registeredSource && (!normalizedRegistered || normalizedRegistered !== normalizedSource)) {
+    console.error(`\nMarketplace source mismatch for ${marketplaceName}: registered as ${registeredSource}, but marketplace.json specifies ${source}`);
+    return plugins.map(plugin => ({ plugin, action: 'skipped (source mismatch)', ok: false }));
+  }
+
+  if (!registeredSource) {
+    try {
+      execFileSync('claude', ['plugin', 'marketplace', 'add', source, '--scope', 'user'], {
+        stdio: 'inherit',
+      });
+    } catch (error) {
+      const exitInfo = error.status != null ? `exit ${error.status}` : error.code ?? error.message;
+      console.error(`\nFailed to register marketplace: ${marketplaceName} (${exitInfo})`);
+      return plugins.map(plugin => ({ plugin, action: 'skipped (no marketplace)', ok: false }));
+    }
+  }
+
+  // Always update marketplace to pull latest plugin versions before install/update
+  try {
+    execFileSync('claude', ['plugin', 'marketplace', 'update', marketplaceName], { stdio: 'inherit' });
+  } catch (error) {
+    const exitInfo = error.status != null ? `exit ${error.status}` : error.code ?? error.message;
+    console.warn(`\nWARN: Failed to update marketplace ${marketplaceName} (${exitInfo}) — using cached version`);
+  }
+
+  return plugins.map(plugin => {
+    const key = `${plugin}@${marketplaceName}`;
+    const isInstalled = Object.hasOwn(installed, key); // Object.hasOwn avoids prototype chain traversal (SCD-7)
+    const action = isInstalled ? 'update' : 'install';
+    const args = isInstalled
+      ? ['plugin', 'update', key]
+      : ['plugin', 'install', key, '--scope', 'user'];
+    try {
+      execFileSync('claude', args, { stdio: 'inherit' });
+      return { plugin, action, ok: true };
+    } catch (error) {
+      const exitInfo = error.status != null ? `exit ${error.status}` : error.code ?? error.message;
+      console.error(`\nFailed: ${key} ${action} (${exitInfo})`);
+      return { plugin, action, ok: false };
+    }
+  });
+}
+
+function installMarketplacePlugins() {
+  const configPath = join(__dir, 'marketplace.json');
+  if (!existsSync(configPath)) return [];
+
+  // Parse marketplace.json — all failures are non-fatal (SCD-7)
+  const config = readJsonObject(configPath, null, 'marketplace.json');
+  const marketplaces = config?.marketplaces;
+  if (!Array.isArray(marketplaces) || marketplaces.length === 0) {
+    console.warn('\nWARN: marketplace.json has no valid "marketplaces" array, skipping');
+    return [];
+  }
+
+  // Load shared state once: known registry (for source verification) and installed plugins
+  const knownPath = join(homedir(), '.claude', 'plugins', 'known_marketplaces.json');
+  const knownExists = existsSync(knownPath);
+  const known = readJsonObject(knownPath, knownExists ? null : {}, 'known_marketplaces.json');
+  if (knownExists && known === null) {
+    console.error('\nInvalid known_marketplaces.json: refusing to register any marketplace automatically');
+    return marketplaces.flatMap(e =>
+      (e?.plugins ?? []).map(plugin => ({ plugin, action: 'skipped (invalid marketplace registry)', ok: false }))
+    );
+  }
+
+  const installedPath = join(homedir(), '.claude', 'plugins', 'installed_plugins.json');
+  const installedData = readJsonObject(installedPath, {}, 'installed_plugins.json');
+  // installed_plugins.json v2 nests under "plugins", v1 is flat
+  const rawInstalled = installedData.plugins ?? installedData;
+  const installed = (typeof rawInstalled === 'object' && rawInstalled !== null && !Array.isArray(rawInstalled))
+    ? rawInstalled
+    : {};
+
+  return marketplaces.flatMap(entry => installFromMarketplace(entry, known, installed));
+}
+
 function setupAutoUpdate() {
   const { version: installedVersion } = JSON.parse(
     readFileSync(join(__dir, 'package.json'), 'utf8')

package/marketplace.json

@@ -0,0 +1,23 @@
+{
+  "marketplaces": [
+    {
+      "name": "ai-skill-marketplace",
+      "source": "git@github.com:trend-ai-taskforce/ai-skill-marketplace.git",
+      "plugins": [
+        "wiki-tools",
+        "atlassian-tools",
+        "google-style-guides",
+        "l2-automation",
+        "service-doc-generator",
+        "claude-on-teams"
+      ]
+    },
+    {
+      "name": "claude-plugins-official",
+      "source": "anthropics/claude-plugins-official",
+      "plugins": [
+        "ralph-loop"
+      ]
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trendai-crem/claude-skills",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Claude Code skills installer for the trendai-crem team",
   "license": "UNLICENSED",
   "repository": {
@@ -12,6 +12,7 @@
   },
   "files": [
     "cli.js",
+    "marketplace.json",
     "skills/"
   ],
   "type": "module",

package/skills/atlassian-tools/SKILL.md

@@ -1,361 +0,0 @@
----
-name: atlassian-tools
-description: |
-  Confluence wiki and Jira issue management. ALWAYS use this skill (not WebFetch)
-  for any atlassian.net URL, Confluence page, or Jira issue. Use for: wiki pages,
-  documentation, search/find wiki pages, retrieve wiki, create/update/delete pages,
-  Jira tickets, issues, bugs, sprints.
-allowed-tools: [Bash, Read, Write, Glob]
-metadata:
-  short-description: Confluence and Jira CLI tools with bidirectional sync
-  version: "1.5.1"
-  author: Hank Liao
-license: MIT
----
-
-# Atlassian Tools
-
-## RULES (MUST FOLLOW)
-
-1. Run all commands from the skill directory (where this SKILL.md is located)
-2. ALWAYS use `-o <USER_CWD>/.atlassian` BEFORE the subcommand (not after)
-3. Replace `<USER_CWD>` with the user's working directory (where they invoked the skill)
-4. **UPDATE WORKFLOW: Always check local storage first before updating**
-   - Before updating any wiki page or Jira issue, check if it exists in local storage
-   - If found locally: Edit the local `.md` file, then use `update --file` with that file
-   - If not found locally: First `retrieve`/`get` it, then edit the local file, then update
-   - **NEVER use inline `-d` or description arguments when a local file exists**
-
-Correct: `uv run python confluence_cli.py -o /user/project/.atlassian retrieve 123456`
-Wrong: `uv run python confluence_cli.py retrieve 123456 -o /path` (will fail)
-
-## TRIGGERS (When to Use This Skill)
-
-ALWAYS use this skill (never WebFetch) when you see:
-- URLs containing `atlassian.net` or `/wiki/`
-- Jira issue keys like `PROJ-123`
-- Keywords: Confluence, wiki, Jira, Atlassian, ticket, issue
-
-User intent mapping:
-- "get/download/retrieve wiki/page" → `confluence_cli.py retrieve`
-- "get all child pages" → `confluence_cli.py retrieve -r`
-- "search/find wiki pages" → `confluence_cli.py search`
-- "create wiki page" → `confluence_cli.py create`
-- "update/edit wiki" → **check local first**, then `confluence_cli.py update --file`
-- "get issue/ticket" → `jira_cli.py get`
-- "get epic with children" → `jira_cli.py get -r`
-- "create ticket/issue" → `jira_cli.py create`
-- "update issue" → **check local first**, then `jira_cli.py update --description-file`
-- "add comment" → `jira_cli.py comment`
-- "change status" → `jira_cli.py transition`
-
-## UPDATE WORKFLOW (CRITICAL)
-
-**Always prefer editing local files over inline arguments.** This ensures content integrity and proper version tracking.
-
-### Confluence Page Update
-
-1. **Check local storage**: `ls <USER_CWD>/.atlassian/confluence/pages/`
-2. **If page exists locally**:
-   - Read: `<USER_CWD>/.atlassian/confluence/pages/<page-title>/<page-title>.md`
-   - Edit the markdown file with requested changes
-   - Update: `confluence_cli.py update <page_id> --file <USER_CWD>/.atlassian/confluence/pages/<page-title>/<page-title>.md`
-3. **If page NOT found locally**:
-   - First retrieve: `confluence_cli.py retrieve <page_id_or_url>`
-   - Then follow step 2 (page will now exist at `<USER_CWD>/.atlassian/confluence/pages/<page-title>/`)
-
-### Jira Issue Update
-
-1. **Check local storage**: `ls <USER_CWD>/.atlassian/jira/issues/`
-2. **If issue exists locally**:
-   - Read: `<USER_CWD>/.atlassian/jira/issues/<ISSUE-KEY>/description.md`
-   - Edit the markdown file with requested changes
-   - Update: `jira_cli.py update <ISSUE-KEY> --description-file <USER_CWD>/.atlassian/jira/issues/<ISSUE-KEY>/description.md`
-3. **If issue NOT found locally**:
-   - First retrieve: `jira_cli.py get <issue_key>`
-   - Then follow step 2 (issue will now exist at `<USER_CWD>/.atlassian/jira/issues/<ISSUE-KEY>/`)
-
-### Why This Matters
-
-- Preserves full document context (macros, formatting, images)
-- Enables accurate incremental edits
-- Maintains sync between local cache and remote
-- Avoids data loss from partial inline updates
-
-## CONFLUENCE CLI
-
-Base: `uv run python confluence_cli.py -o <USER_CWD>/.atlassian <command>`
-
-### Commands
-
-**retrieve** `<page_id_or_url>` `[-r]` `[-f]`
-Download page to local storage. Accepts page ID or full URL.
-- `-r` recursive (include all child pages)
-- `-f` force re-fetch even if cached
-
-**create** `<file>` `-s <space_key>` `[-t <title>]` `[-p <parent_id>]` `[-f markdown|html]`
-Create new page from .md or .html file.
-- `-s` space key (required, or set CONFLUENCE_SPACE_KEY env var)
-- `-t` page title (defaults to filename)
-- `-p` parent page ID (for subpages)
-- `-f` force format (auto-detected from extension)
-
-**update** `<page_id>` `--file <file>` `[-t <title>]` `[-m <message>]` `[-f markdown|html]`
-Update existing page. Auto-syncs local cache after update.
-- `--file` source file with new content
-- `-t` new title
-- `-m` version message
-- `-f` force format
-
-**sync** `[<page_id>]` `[--all]` — Fetch latest from remote to local cache
-- `<page_id>` page ID or URL (required unless --all is used)
-- `--all` sync all locally cached pages
-**list** — List locally cached pages
-**info** `<page_id>` — Show local page metadata
-**delete** `<page_id>` — Remove from local storage only
-**delete-from-confluence** `<page_id>` `[--local-only]` — Delete from Confluence (and local)
-**storage** — Show storage stats
-
-**search** `<query>` `[--limit N]` `[--space KEY]` `[--cursor TOKEN]` `[--retrieve N]` `[--json]`
-Search Confluence pages by keyword using CQL full-text search.
-- `<query>` search text (required)
-- `--limit` results per page (1-50, default: 10)
-- `--space` filter by space key (e.g., DEV, DOCS)
-- `--cursor` pagination cursor from previous search
-- `--retrieve` auto-retrieve top N results to local storage (1-20)
-- `--json` output JSON format instead of table
-
-### Examples
-
-```bash
-# Get page by URL
-uv run python confluence_cli.py -o /project/.atlassian retrieve "https://domain.atlassian.net/wiki/spaces/SPACE/pages/123456"
-
-# Get page and all children
-uv run python confluence_cli.py -o /project/.atlassian retrieve 123456 -r
-
-# Create page from markdown
-uv run python confluence_cli.py -o /project/.atlassian create doc.md -s DDIT -t "API Docs"
-
-# Create subpage
-uv run python confluence_cli.py -o /project/.atlassian create doc.md -s DDIT -t "API Docs" -p 789012
-
-# Update page (preferred: edit local file first)
-# 1. Check if exists: ls /project/.atlassian/confluence/pages/
-# 2. Edit the local markdown file
-# 3. Update from file:
-uv run python confluence_cli.py -o /project/.atlassian update 123456 --file /project/.atlassian/confluence/pages/API-Docs/API-Docs.md -m "Fixed typos"
-
-# Sync all cached pages with latest from Confluence
-uv run python confluence_cli.py -o /project/.atlassian sync --all
-
-# Search for pages containing "OAuth"
-uv run python confluence_cli.py -o /project/.atlassian search "OAuth"
-
-# Search with limit and space filter
-uv run python confluence_cli.py -o /project/.atlassian search "API documentation" --limit 20 --space DEV
-
-# Search and auto-retrieve top 3 results
-uv run python confluence_cli.py -o /project/.atlassian search "deployment guide" --retrieve 3
-
-# Search with JSON output for scripting
-uv run python confluence_cli.py -o /project/.atlassian search "testing" --json
-```
-
-## JIRA CLI
-
-Base: `uv run python jira_cli.py -o <USER_CWD>/.atlassian <command>`
-
-### Commands
-
-**get** `<issue_key>` `[-r]` `[-f]`
-Download issue to local storage.
-- `-r` recursive (include all child issues)
-- `-f` force re-fetch even if cached
-
-**create** `<project>` `<type>` `<summary>` `[-d <desc>]` `[--description-file <file>]` `[--parent <key>]` `[-p <priority>]` `[-l <labels>]` `[--no-sprint]`
-Create new issue. Auto-saves to local storage. Auto-adds to sprint and applies default labels if configured.
-- `<project>` project key (e.g., PROJ)
-- `<type>` issue type (Task, Bug, Story, Epic)
-- `<summary>` issue title
-- `-d` description text
-- `--description-file` markdown file for description
-- `--parent` parent issue key
-- `-p` priority (Highest, High, Medium, Low, Lowest)
-- `-l` comma-separated labels (merged with JIRA_DEFAULT_LABELS)
-- `--no-sprint` skip auto-adding to sprint
-
-**update** `<issue_key>` `[-s <summary>]` `[-d <desc>]` `[--description-file <file>]` `[-p <priority>]` `[-l <labels>]`
-Update issue fields. Auto-syncs local cache.
-- `--description-file` markdown file for description (**preferred over -d**)
-
-**comment** `<issue_key>` `<text>` — Add comment. Auto-syncs local cache.
-
-**transition** `<issue_key>` `<status>` — Change status (e.g., "In Progress", "Done"). Auto-syncs local cache.
-
-**assign-to-me** `<issue_key>` — Assign to current user. Auto-syncs local cache.
-
-**set-parent** `<issue_key>` `[parent_key]` `[--clear]` — Set or clear parent relationship
-
-**search** `<jql>` `[-l <limit>]` — Search with JQL query
-- `-l` max results (default 50)
-
-**types** `<project>` — List available issue types for project
-
-**add-to-sprint** `<issue_keys>` `[-s <sprint_name>]` `[-p <project>]`
-Add issues to a sprint.
-- `<issue_keys>` comma-separated issue keys (e.g., PROJ-1,PROJ-2)
-- `-s` sprint name (uses JIRA_SPRINT_NAME_PATTERN if not specified)
-- `-p` project key (defaults to JIRA_PROJECT_KEY)
-
-**add-label** `<issue_keys>` `<labels>`
-Add labels to multiple issues.
-- `<issue_keys>` comma-separated issue keys
-- `<labels>` comma-separated labels to add
-
-**delete-issue** `<issue_key>` — Delete from Jira (and local if present)
-**list** — List locally cached issues
-**info** `<issue_key>` — Show local issue details
-**sync** `[<issue_key>]` `[--all]` — Fetch latest from remote
-- `<issue_key>` issue key (required unless --all is used)
-- `--all` sync all locally cached issues
-**delete** `<issue_key>` — Remove from local storage only
-**storage** — Show storage stats
-
-### Examples
-
-```bash
-# Get single issue
-uv run python jira_cli.py -o /project/.atlassian get PROJ-123
-
-# Get epic with all children
-uv run python jira_cli.py -o /project/.atlassian get PROJ-100 -r
-
-# Create task
-uv run python jira_cli.py create PROJ Task "Implement feature" -d "Description here"
-
-# Create from spec file
-uv run python jira_cli.py create PROJ Story "User auth" --description-file spec.md --parent PROJ-100
-
-# Update issue (preferred: edit local file first)
-# 1. Check if exists: ls /project/.atlassian/jira/issues/PROJ-123/
-# 2. Edit: /project/.atlassian/jira/issues/PROJ-123/description.md
-# 3. Update from file:
-uv run python jira_cli.py -o /project/.atlassian update PROJ-123 --description-file /project/.atlassian/jira/issues/PROJ-123/description.md
-
-# Update issue (simple field changes only)
-uv run python jira_cli.py -o /project/.atlassian update PROJ-123 -s "New title" -p High
-
-# Add comment
-uv run python jira_cli.py comment PROJ-123 "Fixed in commit abc123"
-
-# Change status
-uv run python jira_cli.py transition PROJ-123 "In Progress"
-
-# Search
-uv run python jira_cli.py search "project = PROJ AND status = 'To Do'" -l 20
-
-# Sync all cached issues with latest from Jira
-uv run python jira_cli.py -o /project/.atlassian sync --all
-```
-
-## REFERENCE
-
-### Format Support
-- Input: Markdown (.md) or HTML (.html), auto-detected by extension
-- Output: Pages saved as both .html and .md
-- Supported: headings, lists, tables, code blocks, links, bold/italic, Mermaid diagrams
-
-### Confluence Macros & Elements
-
-**Fully Converted (lossless round-trip):**
-- Code blocks → markdown fenced blocks (```language)
-- Mermaid diagrams → ```mermaid blocks
-- Status macros → `<!-- status: TITLE ;; colour: COLOR -->`
-- Jira macros → `<!-- jira: KEY ;; server: NAME ;; serverId: ID -->`
-- Expand macros → `<details data-confluence-expand="true"><summary>Title</summary>content</details>`
-- User mentions → `<!-- @user:ACCOUNT_ID -->`
-- Page links → `<!-- @page:SPACE|TITLE|DISPLAY_TEXT -->`
-- Emoticons → `<!-- @emoji:NAME|ID|SHORTNAME -->`
-- Images → `<!-- confluence-image filename: NAME ac:width: N ... -->`
-
-**Preserved as Comments:**
-- TOC, Children, Info, Warning, Note, and other macros
-- Format: `<!-- confluence-macro: toc\nstyle: none\ncontent:\n-->`
-
-**Special Handling:**
-- Pipe characters in link text auto-escaped for markdown table compatibility
-- Code blocks inside expand macros preserved and restored
-
-### Storage Structure
-
-```text
-<USER_CWD>/.atlassian/
-├── confluence/pages/<page-title>/
-│   ├── metadata.json
-│   ├── <page-title>.html
-│   └── <page-title>.md
-└── jira/issues/<ISSUE-KEY>/
-    ├── metadata.json
-    ├── full_data.json
-    └── description.md
-```
-
-Recursive retrieval creates nested folders for parent/child relationships.
-
-### Credentials
-
-Configure in `~/.claude/settings.json`:
-
-```json
-{
-  "env": {
-    "ATLASSIAN_DOMAIN": "trendmicro.atlassian.net",
-    "ATLASSIAN_EMAIL": "your-email@trendmicro.com",
-    "ATLASSIAN_API_TOKEN": "your_api_token",
-    "CONFLUENCE_SPACE_KEY": "MYSPACE",
-    "JIRA_PROJECT_KEY": "PROJ",
-    "JIRA_SPRINT_NAME_PATTERN": "📜 TLC Sprint *",
-    "JIRA_DEFAULT_LABELS": "tpa,backend"
-  }
-}
-```
-
-Get API token: <https://id.atlassian.com/manage-profile/security/api-tokens>
-
-## Version History
-
-### v1.5.0 (2025-12-24)
-- **Enhanced**: Lossless round-trip conversion for Confluence elements
-  - Status macros (with colour parameter)
-  - Jira issue macros (with server/serverId)
-  - Expand/collapse macros (full content preservation)
-  - User mentions (@user)
-  - Page links (cross-space supported)
-  - Emoticons (with emoji-id and shortname)
-  - Image attachments (all attributes preserved)
-- **Fixed**: Pipe characters in link text breaking markdown tables
-- **Fixed**: Code blocks inside expand macros now properly restored
-- **Fixed**: Image restoration pattern for single-line format
-
-### v1.4.0 (2025-12-23)
-- **Added**: `search` command for Confluence pages using CQL full-text search
-  - Search by keyword with ranked results
-  - Pagination support via `--cursor`
-  - Filter by space with `--space`
-  - Auto-retrieve top N results with `--retrieve`
-  - JSON output format with `--json`
-
-### v1.3.0 (2025-12-22)
-- **Added**: `--all` flag to `sync` command for batch operations
-
-### v1.2.0
-- **Added**: Project-level storage with configurable `-o` flag
-- **Added**: Hierarchical Jira issue storage
-
-### v1.1.0
-- **Added**: Recursive page retrieval with `-r` flag
-- **Added**: HTML/Markdown conversion with macro preservation
-
-### v1.0.0
-- Initial release with Confluence and Jira CLI tools