@warren-dean/code-kit 0.3.9 → 0.3.11

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "code-kit",
       "source": "./",
       "description": "Keeps AI coding agents inside your project's rules, from idea to merged code: spec design, lanes, layer rules, protected paths with an approval log, spec-check and design gates, proof-before-finish checks, dispatch, review, build status and CI verification, configured per project from its docs",
-      "version": "0.3.9",
+      "version": "0.3.11",
       "category": "development",
       "tags": ["guardrails", "architecture", "lanes", "layers", "spec-driven", "ci", "multi-agent"],
       "license": "MIT"

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "code-kit",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "Keeps AI coding agents inside your project's rules, from idea to merged code: spec design, lanes, layer rules, protected paths with an approval log, spec-check and design gates, proof-before-finish checks, dispatch, review, build status and CI verification, configured per project from its docs",
   "author": {
     "name": "Warren Langeveldt"

package/CHANGELOG.md

@@ -0,0 +1,75 @@
+# Changelog
+
+What changed in each release of code-kit, newest first. Versions follow the plugin manifest and the npm package `@warren-dean/code-kit`. Each release is also on [GitHub Releases](https://github.com/warrendeanlangeveldt/code-kit/releases).
+
+## 0.3.11 (2026-10-04)
+
+- **`code-kit verify` and union-merged approval logs:** verify now accepts an approval log that git merged with `merge=union`, as the README recommends.
+  - **The problem:** when a lane merged its base after the base had gained log entries, git put the lane's own entries first. verify read that as a rewritten log, and then refused the lane's approved manifest changes too.
+  - **Now:** it accepts the log as long as every earlier line is still there, in order. A log whose earlier lines were changed, removed or reordered still fails.
+
+## 0.3.10 (2026-10-04)
+
+- **Delegated ratification trailer:** Context Graph's delegated ratification trailer (`Ctx-Ratified-By: <ratifier> (delegated)`) may be written by the lead only, never by a lane. A person's trailer stays blocked for every agent, as before.
+- **Adapters:** they can now add lead-only shell rules (`shell.restricted`) as well as blocked ones.
+
+## 0.3.9 (2026-10-04)
+
+- **Delegated approvals:** with `"approvals": { "delegate": { "protected": [...], "dependencies": {...} } }`, the lead can approve on its own authority with `code-kit approve … --delegated`. This is for a lead that runs without a person watching.
+  - **Protected approvals:** only the names you list.
+  - **Dependencies:** checked against the npm registry for licence, weekly downloads, recent releases and install scripts.
+  - **All or nothing:** anything outside the rules approves nothing, and goes to the person.
+  - **The record:** every delegated approval is marked with the rule it used.
+- **`code-kit approve` takes package names:** `approve @scope/pkg` now means `dep-@scope+pkg`, where it used to refuse the name.
+
+## 0.3.8 (2026-10-03)
+
+- **Lead stories:** plans can give the lead its own stories (`**Lane:** lead`), such as contracts, foundations and spikes. `code-kit next` hands them to the lead instead of dispatching them, and `status` no longer calls `lead` an unknown lane.
+- **Stories with no requirements:** `**Requirements:** none` marks a story that delivers no requirement, such as a spike.
+- **The CLI** no longer crashes when its output is piped into `head`.
+
+## 0.3.7 (2026-10-03)
+
+- **Approvals from chat:** with `"approvals": { "lead": true }`, the lead can record an approval you give in chat with `code-kit approve`, for when `!` isn't available, as on a phone. The approval is marked as given in chat. The lead may also run `shell.block` commands marked `person: true` when you say so.
+
+## 0.3.6 (2026-10-02)
+
+- **Companion plugin:** the README, `llms.txt` and the init skill now point to Context Graph. Init mentions it once when it isn't installed, and never installs it unasked.
+
+## 0.3.5 (2026-10-02)
+
+- **Logo and diagram:** the npm package now includes them, and the README shows them on npmjs.com too.
+
+## 0.3.4 (2026-10-02)
+
+- **Dependency approvals:** each new package needs a person's approval (`dep-<package>`), for one lane or for everyone. The approval also covers the manifest and lockfile changes the install makes. The commit hook logs those changes, and `code-kit verify` accepts them.
+- **A hole closed:** flags before a package name (`npm install -D lodash`) no longer slip past the guard.
+- **Worktrees:** approvals are read from the main checkout, so a lane working in its own worktree sees them.
+- **Wording:** the README states the hooks' deliberate limits instead of promising hard guarantees.
+
+## 0.3.3 (2026-10-01)
+
+- **Descriptions:** they now open with what code-kit does for AI coding agents.
+
+## 0.3.2 (2026-10-01)
+
+- **npm:** published as `@warren-dean/code-kit`. CI uses `npx @warren-dean/code-kit verify`.
+- **For AI tools:** an `llms.txt` and an `AGENTS.md` describe the plugin.
+
+## 0.3.1 (2026-10-01)
+
+- **Ready to install from a public repository:** MIT licence, a security policy, and install instructions.
+
+## 0.3.0 (2026-09-30)
+
+- **Adapters** for tools that share a project, starting with Context Graph.
+- **`code-kit trace`:** reports the requirements, lane and layer of a file.
+- **Earlier layer checks:** layer rules are now checked before a write, not just after it.
+
+## 0.2.0 (2026-09-29)
+
+- **From idea to merged code:** the spec-design, dispatch, review, status, verify and next skills, built on the rules from 0.1.0.
+
+## 0.1.0
+
+- **Project rules from `.claude/code-kit.json`:** lanes, layers, protected paths with an approval log, spec-check before code, and proof before finishing, all enforced by hooks.

package/README.md

@@ -399,9 +399,9 @@ Other tools share a project with code-kit and keep files of their own. An adapte
 
 While the tool is detected, its additions are merged into the effective config, like the kit's own defaults. Run `code-kit adapters` to see them, or switch one off with `"adapters": { "<name>": false }`.
 
-| Adapter         | Detected by | Adds                                                                                                                                                                                                                                                                                                                                                                |
-| --------------- | ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `context-graph` | `.ctx/`     | `.ctx/**` for the lead. `.ctx/decisions.ctx` and `.ctx/cards.ctx` for any actor, since every agent records decisions and file cards. `graph.ctx` and `config.toml` are protected (approval `ctx`). No Claude actor may write a `Ctx-Ratified-By` trailer: ratifying is a person's act (with `approvals.lead`, the lead may add it when the person says so in chat). |
+| Adapter         | Detected by | Adds                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
+| --------------- | ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `context-graph` | `.ctx/`     | `.ctx/**` for the lead. `.ctx/decisions.ctx` and `.ctx/cards.ctx` for any actor, since every agent records decisions and file cards. `graph.ctx` and `config.toml` are protected (approval `ctx`). No Claude actor may write a person's `Ctx-Ratified-By` trailer: ratifying is a person's act (with `approvals.lead`, the lead may add it when the person says so in chat). A delegated trailer, `Ctx-Ratified-By: <ratifier> (delegated)`, is the lead's alone, under Context Graph's `[delegate]` rules. |
 
 Its setup:
 
@@ -419,6 +419,10 @@ The other direction is `code-kit trace <path> --json`. It's the contract other t
 npm test        # unit tests, then the hooks end to end in throwaway repositories
 ```
 
+## Changes
+
+What changed in each release is in [CHANGELOG.md](https://github.com/warrendeanlangeveldt/code-kit/blob/main/CHANGELOG.md), and on [GitHub Releases](https://github.com/warrendeanlangeveldt/code-kit/releases).
+
 ## Licence
 
 MIT. See [LICENSE](LICENSE). To report a security problem, see [SECURITY.md](SECURITY.md).

package/hooks/lib/adapters/context-graph.mjs

@@ -4,7 +4,9 @@
 // edits, so those two files are writable by any actor; the rules and settings
 // are the lead's, and changes to them go through the approval log. Ratifying a rule is a person's act,
 // signed with a commit trailer, so no Claude actor may write that trailer, unless the project lets the
-// lead act on what the person says in chat (`approvals.lead`).
+// lead act on what the person says in chat (`approvals.lead`). A delegated ratification, signed
+// `Ctx-Ratified-By: <ratifier> (delegated)`, is the lead's own act under the repository's [delegate]
+// rules: only the lead may write that trailer, and Context Graph's gate checks the kinds it covers.
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 
@@ -22,11 +24,18 @@ export default {
   shell: {
     block: [
       {
-        pattern: 'Ctx-Ratified-By\\s*[:=]',
+        pattern: 'Ctx-Ratified-By\\s*[:=](?![^\\n"\']*\\(delegated\\))',
         why: "Ratifying a Context Graph rule is a person's act: they add the Ctx-Ratified-By trailer themselves, with a `!` git command.",
         person: true,
       },
     ],
+    restricted: [
+      {
+        pattern: 'Ctx-Ratified-By\\s*[:=][^\\n"\']*\\(delegated\\)',
+        lanes: [],
+        why: "Only the lead ratifies under Context Graph's [delegate] rules. Write a change request for the lead, and stop.",
+      },
+    ],
   },
   setup: [
     '.gitignore: .ctx/archive/, .ctx/bench/, .ctx/models/ and .ctx/serve.json (ctx working files, never committed)',

package/hooks/lib/adapters/index.mjs

@@ -4,8 +4,9 @@
 //   name      the tool, and the key that switches it off in the config: "adapters": { "<name>": false }
 //   detect    (root) => true when the tool is in use in this project
 //   config    { lead?, anyActor?, protected? } merged into the effective config, like the kit's defaults
-//   shell     { block? } commands refused for every Claude actor, merged into shell.block; `person: true`
-//             marks a person's act the lead may do for them under approvals.lead
+//   shell     { block?, restricted? } block: commands refused for every Claude actor, merged into
+//             shell.block (`person: true` marks a person's act the lead may do for them under
+//             approvals.lead); restricted: commands only the lead and the listed lanes may run
 //   setup     lines for init to apply or tell the person: ignore files, merge drivers, instructions
 //
 // The core only ever calls applyAdapters() and activeAdapters(); it never names a tool.
@@ -29,6 +30,7 @@ export function applyAdapters(config, raw, root) {
     merged.anyActor.push(...(c.anyActor ?? []));
     merged.protected.push(...(c.protected ?? []));
     merged.shell.block.push(...(a.shell?.block ?? []));
+    merged.shell.restricted.push(...(a.shell?.restricted ?? []));
   }
   merged.adapters = active.map((a) => a.name);
   return merged;

package/hooks/lib/verify.mjs

@@ -41,18 +41,36 @@ export function branchChanges(root, base) {
     .filter(Boolean);
 }
 
+/**
+ * The lines added to the log between `before` and `after`, or null if any earlier line was changed,
+ * removed or reordered. Every earlier line must still be there, in order; new lines may sit between
+ * them, because `merge=union` (see the README) puts a branch's own entries before the ones the base
+ * gained after the branch left it.
+ */
+export function addedLogLines(before, after) {
+  const old = before.split('\n').filter(Boolean);
+  const added = [];
+  let i = 0;
+  for (const line of after.split('\n').filter(Boolean)) {
+    if (i < old.length && line === old[i]) i++;
+    else added.push(line);
+  }
+  return i === old.length ? added : null;
+}
+
 /** Entries appended to the approval log since commit `from`, plus problems if it was rewritten. */
 function logEntries(root, base) {
   const before = showAt(root, base, APPROVAL_LOG) ?? '';
   const after = showAt(root, 'HEAD', APPROVAL_LOG) ?? '';
-  if (!after.startsWith(before))
+  const added = addedLogLines(before, after);
+  if (added === null)
     return {
       entries: [],
       problems: [`${APPROVAL_LOG} was edited, not appended to; it is append-only.`],
     };
   const entries = [];
   const problems = [];
-  for (const line of after.slice(before.length).split('\n').filter(Boolean)) {
+  for (const line of added) {
     try {
       entries.push(JSON.parse(line));
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warren-dean/code-kit",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "Keeps AI coding agents inside your project's rules: lanes, layer rules, protected paths and proof before finish, enforced by Claude Code hooks and in CI",
   "license": "MIT",
   "author": "Warren Langeveldt",
@@ -30,6 +30,7 @@
     ".claude-plugin",
     "assets",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE",
     "SECURITY.md"
   ],