@ulysses-ai/create-workspace 0.20.0-beta.0 → 0.22.0-beta.0

package/README.md

@@ -62,7 +62,7 @@ cd my-workspace
 npx @ulysses-ai/create-workspace@beta --upgrade
 ```
 
-This stages the new template payload to `.workspace-update/` without changing anything yet. Open Claude Code and run `/workspace-update` — the skill applies each change interactively (asks how to resolve any file you've customized) and runs a maintenance audit before and after.
+This stages the new template payload to `.workspace-update/` without changing anything yet. Open Claude Code and run `/workspace-update` — the skill applies each change interactively (asks how to resolve any file you've customized) and verifies the result with a scripted maintenance audit.
 
 ## Why "Ulysses"?
 

package/lib/init.mjs

@@ -2,6 +2,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, readdirSync, statSync } from 'fs';
 import { join, basename } from 'path';
 import { stagePayload } from './payload.mjs';
+import { writeBaseline } from '../template/_claude/scripts/template-baseline.mjs';
 
 function ensureDir(dir) {
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
@@ -127,6 +128,14 @@ export async function initWorkspace(targetDir) {
     }
   }
 
+  // Record the template baseline — the sha256 of every verbatim payload file —
+  // so the first /workspace-update can tell template changes from local edits
+  // three ways (gh:183). Entries always hold the payload's content, so the
+  // components /workspace-init installs verbatim are already covered;
+  // /workspace-init refreshes the baseline after the full install anyway.
+  writeBaseline(targetDir, payloadDir, { version: toVersion });
+  console.log('  Wrote template baseline (.claude/.template-baseline.json)');
+
   console.log(`
   Workspace initialized (v${toVersion}).
 

package/lib/init.test.mjs

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+// Test for init.mjs (--init scaffolding)
+// Run: node lib/init.test.mjs
+//
+// --init stages the template payload, installs the bootstrap skills plus
+// hooks/scripts/lib, and must leave a template baseline behind: the sha256 of
+// every verbatim payload file, so the first /workspace-update classifies
+// three ways instead of treating every template change as a local edit
+// (gh:183).
+import { initWorkspace } from './init.mjs';
+import { createHash } from 'node:crypto';
+import { mkdtempSync, rmSync, existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { tmpdir } from 'os';
+import { fileURLToPath } from 'url';
+import { dirname } from 'path';
+
+let failed = 0;
+let passed = 0;
+function check(label, ok) {
+  if (ok) { passed++; } else {
+    failed++;
+    console.error(`  FAIL: ${label}`);
+  }
+}
+
+const here = dirname(fileURLToPath(import.meta.url));
+const pkgVersion = JSON.parse(readFileSync(join(here, '..', 'package.json'), 'utf8')).version;
+const sha = (p) => createHash('sha256').update(readFileSync(p)).digest('hex');
+
+const root = mkdtempSync(join(tmpdir(), 'init-test-'));
+
+try {
+  await initWorkspace(root);
+
+  const baselinePath = join(root, '.claude', '.template-baseline.json');
+  check('baseline written at .claude/.template-baseline.json', existsSync(baselinePath));
+  const baseline = JSON.parse(readFileSync(baselinePath, 'utf8'));
+
+  check(`baseline records the payload version (${pkgVersion})`, baseline.templateVersion === pkgVersion);
+  check(
+    'baseline covers the bootstrap skills --init installs',
+    typeof baseline.files['.claude/skills/workspace-update/SKILL.md'] === 'string'
+      && typeof baseline.files['.claude/skills/workspace-init/SKILL.md'] === 'string',
+  );
+  check(
+    'baseline covers hooks and scripts',
+    typeof baseline.files['.claude/hooks/session-start.mjs'] === 'string'
+      && typeof baseline.files['.claude/scripts/classify-update.mjs'] === 'string',
+  );
+  check(
+    'baseline covers the standalone verbatim files',
+    typeof baseline.files['.mcp.json'] === 'string' && typeof baseline.files['.claudeignore'] === 'string',
+  );
+  check(
+    'entry hash matches the installed file byte-for-byte',
+    baseline.files['.claude/scripts/classify-update.mjs'] === sha(join(root, '.claude', 'scripts', 'classify-update.mjs')),
+  );
+  check(
+    'baseline never covers tests (the tarball ships none)',
+    Object.keys(baseline.files).every((k) => !k.endsWith('.test.mjs')),
+  );
+  check(
+    'baseline never covers machine-local files',
+    !('.claude/settings.local.json' in baseline.files) && !('.claude/.active-session.json' in baseline.files),
+  );
+} finally {
+  rmSync(root, { recursive: true, force: true });
+}
+
+if (failed > 0) {
+  console.error(`${failed} check(s) failed, ${passed} passed`);
+  process.exit(1);
+}
+console.log(`${passed} checks passed`);

package/lib/scaffold.mjs

@@ -1,6 +1,7 @@
 import { cpSync, mkdirSync, readFileSync, writeFileSync, renameSync, existsSync, rmSync, statSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
+import { writeBaseline, INERT_PAIRS } from '../template/_claude/scripts/template-baseline.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const TEMPLATE_DIR = join(__dirname, '..', 'template');
@@ -98,5 +99,12 @@ export async function scaffold(answers) {
     }
   }
 
+  // Record the template baseline — the sha256 of every verbatim-installed
+  // file — so /workspace-update can classify three ways (workspace vs payload
+  // vs baseline) instead of treating every template change as a local edit
+  // (gh:183). The template tree carries the inert names; entries always hold
+  // the template's content, so hashes come straight from the source of truth.
+  writeBaseline(directory, TEMPLATE_DIR, { pairs: INERT_PAIRS, version: pkgJson.version });
+
   return directory;
 }

package/lib/scaffold.test.mjs

@@ -48,6 +48,26 @@ try {
   check('no _claude/ leftover', !existsSync(join(directory, '_claude')));
   check('no _mcp.json leftover', !existsSync(join(directory, '_mcp.json')));
   check('no _gitignore leftover', !existsSync(join(directory, '_gitignore')));
+
+  // Template baseline: hashes of the verbatim-installed files, for three-way
+  // update classification (gh:183)
+  const baselinePath = join(directory, '.claude', '.template-baseline.json');
+  check('template baseline written', existsSync(baselinePath));
+  const baseline = JSON.parse(readFileSync(baselinePath, 'utf8'));
+  const pkgVersion = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+  check(`baseline records the package version (${pkgVersion})`, baseline.templateVersion === pkgVersion);
+  check(
+    'baseline covers rules installed verbatim from the template',
+    typeof baseline.files['.claude/rules/coherent-revisions.md'] === 'string',
+  );
+  check(
+    'baseline covers .mcp.json via its inert source name',
+    typeof baseline.files['.mcp.json'] === 'string' && typeof baseline.files['.claudeignore'] === 'string',
+  );
+  check(
+    'baseline never covers tests or machine-local files',
+    Object.keys(baseline.files).every((k) => !k.endsWith('.test.mjs') && k !== '.claude/settings.local.json'),
+  );
 } finally {
   rmSync(directory, { recursive: true, force: true });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ulysses-ai/create-workspace",
-  "version": "0.20.0-beta.0",
+  "version": "0.22.0-beta.0",
   "description": "A workspace convention for Claude Code: sessions, handoffs, and shared context as files in git",
   "keywords": [
     "claude",

package/template/CLAUDE.md.tmpl

@@ -30,9 +30,9 @@ This is a claude-workspace. All conventions are defined in .claude/rules/.
 - `/promote` — move personal memory to shared context
 - `/release [version]` — cut a versioned release: bump, tag, forge release with generated notes
 - `/sync-work` — push branches without ceremony
-- `/workspace-update` — apply template updates (runs maintenance before/after)
+- `/workspace-update` — apply template updates, verified by a post-update audit
 - `/setup-tracker` — wire this workspace to an issue tracker (GitHub Issues shipped; others pluggable)
-- `/maintenance [audit|cleanup]` — workspace health checks and cleanup
+- `/maintenance [audit|cleanup]` — scripted health audit and cleanup
 - `/context-placement` — decide where durable content belongs and what each destination costs before writing it
 - `/goal-driven-work` — run multi-phase autonomous work under `/goal` with phase artifacts and agent-team dispatch
 - `/migrate-sessions` — drain session-model work sessions and switch the workspace to the task lifecycle

package/template/_claude/hooks/workspace-update-check.mjs

@@ -26,17 +26,17 @@ const stale = manifest?.timestamp
 const urgency = stale
   ? `URGENT: This update payload has been pending since ${manifest.timestamp}. It was not completed in a previous session. `
   : '';
-const skipAudit = stale
-  ? 'Skip the pre-update audit and proceed directly to comparing and applying changes. '
+const staleHint = stale
+  ? 'This payload survived a previous session — classify and apply the changes directly, and still run the post-update verification the skill ends with. '
   : '';
 
 if (action === 'init' || !initialized) {
   respond(`MANDATORY: ${urgency}A workspace init payload (template v${version}) is pending at .workspace-update/.
 Read .workspace-update/.claude/skills/workspace-init/SKILL.md and follow it before doing anything else.
-${skipAudit}Do not proceed with the user's request until initialization is complete.`);
+${staleHint}Do not proceed with the user's request until initialization is complete.`);
 } else {
   const from = manifest?.fromVersion || 'unknown';
   respond(`MANDATORY: ${urgency}A workspace upgrade payload (v${from} → v${version}) is pending at .workspace-update/.
 Read .workspace-update/.claude/skills/workspace-update/SKILL.md and follow it before doing anything else.
-${skipAudit}Do not proceed with the user's request until the update is complete.`);
+${staleHint}Do not proceed with the user's request until the update is complete.`);
 }

package/template/_claude/scripts/build-workspace-context.mjs

@@ -765,4 +765,6 @@ export {
   stripFrontmatter,
   gitIgnoredPaths,
   isLocalOnlyName,
+  readIgnorePrefixes,
+  isIgnored,
 };