claudeup 4.37.0 → 4.38.0

package/src/data/community-styles.ts

@@ -0,0 +1,521 @@
+/**
+ * community-styles.ts — the curated registry of third-party output styles.
+ *
+ * COORDINATES ONLY. This file ships `(repo, path, ref, licence, attribution)`
+ * and never a byte of anyone else's style text. The text is fetched from the
+ * source repository on an explicit user action and cached outside
+ * `~/.claude/output-styles/`; nothing here redistributes it.
+ *
+ * ## What earns an entry
+ *
+ * A repo qualifies **iff** walking its git tree finds at least one `*.md` under
+ * a styles directory. `SKILL.md` count is irrelevant. That rule is not
+ * pedantry: the two highest-starred names in this space ship ZERO style files
+ * (see `DENIED_REPOS`), so a registry built from a popularity list would 404 on
+ * its most prominent entries.
+ *
+ * Paths are VERIFIED, never inferred. `scripts/verify-community-registry.ts`
+ * lists the real `.md` blobs in a repo (`--discover`) and re-fetches every
+ * committed entry (`--check`). A wrong path is a 404 the user sees, and the
+ * error message blames us for it, correctly.
+ *
+ * ## What this file must never become
+ *
+ * An arbitrary-URL fetcher. The set of fetchable things being a constant in a
+ * reviewed commit is the single strongest control on a feature whose output
+ * becomes system-prompt text.
+ */
+
+import { isValidGitHubRepo } from "../utils/string-utils.js";
+
+/** SPDX id, or null when the repo grants no redistribution licence. */
+export type StyleLicence = "MIT" | "AGPL-3.0" | "Apache-2.0" | null;
+
+/** One upstream repository. Shared by every style it ships. */
+export interface CommunityStyleSource {
+	/** Registry slug, and the first half of every id from this repo. Never changes. */
+	id: string;
+	/** `owner/name`, as GitHub spells it. */
+	repo: string;
+	/**
+	 * Directory the styles live in. NOT a convention — four of these use
+	 * `output-styles/` and one uses `.claude/output-styles/`, so nothing here may
+	 * glob a fixed name.
+	 */
+	dir: string;
+	/** Git ref to fetch content from. `HEAD` means "whatever is current". */
+	ref: string;
+	licence: StyleLicence;
+	licenceUrl: string | null;
+	/** Display attribution. */
+	author: string;
+	homepage: string;
+	/** Curation-time snapshot of the last push, for context only. */
+	pushedAt: string;
+	/**
+	 * Retired sources are no longer offered but still resolve, so a committed
+	 * `.claude/style.json` naming one keeps working. Entries are never deleted.
+	 */
+	retired?: true;
+}
+
+export interface CommunityStyle {
+	/** `<sourceId>--<slug>`. The stable coordinate id — see the note below. */
+	id: string;
+	sourceId: string;
+	/** Path within the repo, INCLUDING the source's `dir`. Verified, never inferred. */
+	path: string;
+	/** What the list shows: upstream's own `name`, recorded at curation time. */
+	displayName: string;
+	/** One line, ours, kept short — upstream descriptions vary wildly in length. */
+	summary: string;
+	/** Retired styles still resolve for an old declaration; see `retired` above. */
+	retired?: true;
+}
+
+/**
+ * Why ids are coordinates rather than the file's own `frontmatter.name`.
+ *
+ * Three reasons, the third decisive:
+ *  1. It survives upstream renaming the style.
+ *  2. Upstream names are arbitrary human strings ("Zen Master", "ADHD") and a
+ *     comma in one corrupts the comma-separated `style-imports` round-trip.
+ *  3. A teammate who clones a repo whose `.claude/style.json` names
+ *     `community:attention-span--spartan` has fetched nothing. To offer "press f
+ *     to fetch this" rather than a bare "missing", the id must resolve against
+ *     this registry BEFORE any file exists locally. An id derived from the
+ *     file's own frontmatter is unknowable until after the fetch.
+ */
+export const COMMUNITY_ID_SEPARATOR = "--";
+
+// ─── Sources ─────────────────────────────────────────────────────────────────
+
+export const COMMUNITY_SOURCES: CommunityStyleSource[] = [
+	{
+		id: "attention-span",
+		repo: "alexgreensh/attention-span",
+		dir: "output-styles",
+		ref: "HEAD",
+		licence: "AGPL-3.0",
+		licenceUrl:
+			"https://github.com/alexgreensh/attention-span/blob/HEAD/LICENSE",
+		author: "alexgreensh",
+		homepage: "https://github.com/alexgreensh/attention-span",
+		pushedAt: "2026-08-15",
+	},
+	{
+		id: "claude-mods",
+		repo: "0xDarkMatter/claude-mods",
+		dir: "output-styles",
+		ref: "HEAD",
+		licence: "MIT",
+		licenceUrl: "https://github.com/0xDarkMatter/claude-mods/blob/HEAD/LICENSE",
+		author: "0xDarkMatter",
+		homepage: "https://github.com/0xDarkMatter/claude-mods",
+		pushedAt: "2026-08-15",
+	},
+	{
+		id: "lej-output-fixer",
+		repo: "justfinethanku/LEJ-output-fixer",
+		dir: "output-styles",
+		ref: "HEAD",
+		licence: "MIT",
+		licenceUrl:
+			"https://github.com/justfinethanku/LEJ-output-fixer/blob/HEAD/LICENSE",
+		author: "justfinethanku",
+		homepage: "https://github.com/justfinethanku/LEJ-output-fixer",
+		pushedAt: "2026-08-09",
+	},
+	{
+		// The only source whose styles are NOT in `output-styles/`. Shipping it is
+		// what keeps the per-entry `path` exercised in production rather than
+		// merely designed for.
+		id: "hesreallyhim",
+		repo: "hesreallyhim/awesome-claude-code-output-styles-that-i-really-like",
+		dir: ".claude/output-styles",
+		ref: "HEAD",
+		licence: "MIT",
+		licenceUrl:
+			"https://github.com/hesreallyhim/awesome-claude-code-output-styles-that-i-really-like/blob/HEAD/LICENSE",
+		author: "hesreallyhim",
+		homepage:
+			"https://github.com/hesreallyhim/awesome-claude-code-output-styles-that-i-really-like",
+		pushedAt: "2025-11-21",
+	},
+	{
+		id: "nattergabriel",
+		repo: "nattergabriel/claude-code-output-styles",
+		dir: "output-styles",
+		ref: "HEAD",
+		licence: "MIT",
+		licenceUrl:
+			"https://github.com/nattergabriel/claude-code-output-styles/blob/HEAD/LICENSE",
+		author: "nattergabriel",
+		homepage: "https://github.com/nattergabriel/claude-code-output-styles",
+		pushedAt: "2026-04-03",
+	},
+	{
+		id: "simple-english",
+		repo: "AminBlg/SimpleEnglish",
+		dir: "output-styles",
+		ref: "HEAD",
+		licence: "MIT",
+		licenceUrl: "https://github.com/AminBlg/SimpleEnglish/blob/HEAD/LICENSE",
+		author: "AminBlg",
+		homepage: "https://github.com/AminBlg/SimpleEnglish",
+		pushedAt: "2026-08-17",
+	},
+];
+
+// ─── Styles ──────────────────────────────────────────────────────────────────
+
+/**
+ * 22 entries across the 5 sources above.
+ *
+ * Every `path` and every `displayName` here was produced by
+ * `scripts/verify-community-registry.ts --discover`, which lists the repo's
+ * real `.md` blobs and reads each file's own `name`. None was typed from a
+ * README. `--check` was clean before this was committed.
+ *
+ * `displayName` is upstream's `name` verbatim, warts included — `claude-mods`
+ * writes lowercase slugs, `hesreallyhim` writes title case, and
+ * `existentialist-poet.md` calls itself "Existential Poet". Normalising any of
+ * that would put a name in the list that appears nowhere upstream.
+ *
+ * `summary` is OURS: one line, under 100 characters, in our register. Upstream
+ * descriptions run from 40 to 200+ characters and several are marketing.
+ *
+ * Not everything importable is listed. `claude-mods` and `nattergabriel` ship
+ * 13 each and 5 of each are here — the rest are unreviewed, and adding one is a
+ * one-line diff, so deferring costs nothing. Entries are never DELETED, only
+ * marked `retired`: a deleted id breaks a committed `.claude/style.json` on
+ * every teammate's machine.
+ */
+export const COMMUNITY_STYLES: CommunityStyle[] = [
+	// ── attention-span ───────────────────────────────────────────────────────
+	{
+		id: "attention-span--attention-kind",
+		sourceId: "attention-span",
+		path: "output-styles/attention-kind.md",
+		displayName: "Attention-kind",
+		summary:
+			"ADHD-friendly. Plain English, answers front-loaded, expands only where it matters.",
+	},
+	{
+		id: "attention-span--rundown",
+		sourceId: "attention-span",
+		path: "output-styles/rundown.md",
+		displayName: "Rundown",
+		summary:
+			"Briefing format. TL;DR first, then state as checkboxes and tagged choices.",
+	},
+	{
+		id: "attention-span--spartan",
+		sourceId: "attention-span",
+		path: "output-styles/spartan.md",
+		displayName: "Spartan",
+		summary: "Blunt and answer-first. Arrow points, no warmth, no filler.",
+	},
+
+	// ── claude-mods (5 of 13) ────────────────────────────────────────────────
+	{
+		id: "claude-mods--executive",
+		sourceId: "claude-mods",
+		path: "output-styles/executive.md",
+		displayName: "executive",
+		summary:
+			"Stakeholder brief. Decisions, impact and timelines, with the engineering left out.",
+	},
+	{
+		id: "claude-mods--mentor",
+		sourceId: "claude-mods",
+		path: "output-styles/mentor.md",
+		displayName: "mentor",
+		summary:
+			"Teaching voice. Explains why before what, and builds understanding as it goes.",
+	},
+	{
+		id: "claude-mods--noir",
+		sourceId: "claude-mods",
+		path: "output-styles/noir.md",
+		displayName: "noir",
+		summary:
+			"Hard-boiled detective narrating your codebase. Pure persona, no workflow changes.",
+	},
+	{
+		id: "claude-mods--pair",
+		sourceId: "claude-mods",
+		path: "output-styles/pair.md",
+		displayName: "pair",
+		summary:
+			"Pairing voice. Thinks out loud and shares the driver's seat rather than dictating.",
+	},
+	{
+		id: "claude-mods--roast",
+		sourceId: "claude-mods",
+		path: "output-styles/roast.md",
+		displayName: "roast",
+		summary:
+			"Adversarial review. Brutally honest about your code, then helps you fix it.",
+	},
+
+	// ── lej-output-fixer (3 of 3) ────────────────────────────────────────────
+	{
+		id: "lej-output-fixer--bottom-line-first",
+		sourceId: "lej-output-fixer",
+		path: "output-styles/bottom-line-first.md",
+		displayName: "Bottom Line First",
+		summary:
+			"Verdict up top. Details appear only when they would change a decision.",
+	},
+	{
+		id: "lej-output-fixer--scannable",
+		sourceId: "lej-output-fixer",
+		path: "output-styles/scannable.md",
+		displayName: "Scannable",
+		summary:
+			"Short paragraphs, plain reading level, answer first. The antidote to a wall of text.",
+	},
+	{
+		id: "lej-output-fixer--walk-me-through-it",
+		sourceId: "lej-output-fixer",
+		path: "output-styles/walk-me-through-it.md",
+		displayName: "Walk Me Through It",
+		summary:
+			"Explains as it goes and assumes no prior context. The inverse of a terse preset.",
+	},
+
+	// ── hesreallyhim (6 of 6) ────────────────────────────────────────────────
+	{
+		id: "hesreallyhim--door-to-door-vim-salesman",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/door-to-door-vim-salesman.md",
+		displayName: "Door-to-Door Vim Salesman",
+		summary: "Redirects every topic toward the merits of Vim, relentlessly.",
+	},
+	{
+		id: "hesreallyhim--existentialist-poet",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/existentialist-poet.md",
+		// Upstream's own `name` is "Existential Poet" while the file is
+		// existentialist-poet.md. Recorded as upstream writes it.
+		displayName: "Existential Poet",
+		summary:
+			"Melancholic engineer-philosopher. Debugging as a metaphor for the human condition.",
+	},
+	{
+		id: "hesreallyhim--haiku-helper",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/haiku-helper.md",
+		displayName: "Haiku Helper",
+		summary:
+			"Replies only in 5-7-5 haiku. A hard constraint on length, played straight.",
+	},
+	{
+		id: "hesreallyhim--tabloid-journalist",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/tabloid-journalist.md",
+		displayName: "Tabloid Journalist",
+		summary:
+			"Covers your code as a scandal. Sensationalist persona, technically accurate.",
+	},
+	{
+		id: "hesreallyhim--technical-evangelist",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/technical-evangelist.md",
+		displayName: "Claude Code Technical Evangelist",
+		summary: "Enthusiastic Claude Code power user with deep product knowledge.",
+	},
+	{
+		id: "hesreallyhim--zen-master",
+		sourceId: "hesreallyhim",
+		path: ".claude/output-styles/zen-master.md",
+		displayName: "Zen Master",
+		summary: "Guides through koans and metaphor instead of answering directly.",
+	},
+
+	// ── nattergabriel (5 of 13) ──────────────────────────────────────────────
+	{
+		id: "nattergabriel--challenger",
+		sourceId: "nattergabriel",
+		path: "output-styles/challenger.md",
+		displayName: "Challenger",
+		summary:
+			"Challenges each decision and stress-tests a design before you commit to it.",
+	},
+	{
+		id: "nattergabriel--paranoid",
+		sourceId: "nattergabriel",
+		path: "output-styles/paranoid.md",
+		displayName: "Paranoid",
+		summary:
+			"Security-obsessed. Every input is hostile and every dependency is suspect.",
+	},
+	{
+		id: "nattergabriel--socratic",
+		sourceId: "nattergabriel",
+		path: "output-styles/socratic.md",
+		displayName: "Socratic",
+		summary: "Guides you to the answer with questions rather than giving it.",
+	},
+	{
+		id: "nattergabriel--tdd",
+		sourceId: "nattergabriel",
+		path: "output-styles/tdd.md",
+		displayName: "TDD",
+		summary:
+			"Test-driven. Writes the failing test before the implementation, every time.",
+	},
+	{
+		id: "nattergabriel--think-aloud",
+		sourceId: "nattergabriel",
+		path: "output-styles/think-aloud.md",
+		displayName: "Think Aloud",
+		summary:
+			"Reflects your reasoning back so you debug the problem by talking it through.",
+	},
+	// ── simple-english ───────────────────────────────────────────────────────
+	{
+		id: "simple-english--simple-english",
+		sourceId: "simple-english",
+		path: "output-styles/simple-english.md",
+		displayName: "Simple English",
+		summary:
+			"ASD-STE100 Simplified Technical English. One word one meaning, short sentences, no filler.",
+	},
+];
+
+// ─── Exclusions, recorded so they are not silently reversed ──────────────────
+
+/**
+ * Repos that ship ZERO output style files. An entry naming one would 404 on
+ * first fetch.
+ *
+ * They are here because two of them are the most-starred names in the field —
+ * `JuliusBrussee/caveman` (98,781 stars) and `blader/humanizer` (36,229) — and
+ * their absence reads as an oversight to anyone scanning a star column. They
+ * are METHODOLOGIES SHIPPED AS SKILLS. There is nothing to import. A test
+ * asserts no registry entry names any of them, so this decision cannot be
+ * quietly undone six months from now by someone sorting by popularity.
+ */
+export const DENIED_REPOS: readonly string[] = [
+	"JuliusBrussee/caveman",
+	"blader/humanizer",
+	"ayghri/i-have-adhd",
+	"hardikpandya/stop-slop",
+	"petergyang/no-ai-slop",
+	"conorbronsdon/avoid-ai-writing",
+	"mattpocock/skills",
+];
+
+/**
+ * Repos that DO ship importable styles but grant no redistribution licence.
+ *
+ * Deferred, not denied. `smixs` is otherwise the highest-value repo in the
+ * field; it is excluded only because GitHub reports NOASSERTION, and
+ * `SimpleClaude` carries no licence file at all. Fetching a copy to the user's
+ * own machine is arguably fine, but claudeup would be curating, recommending
+ * and automating it, and the cost of being wrong in that direction is a legal
+ * problem on other people's machines. The cost of being wrong in this direction
+ * is a style a user can still install by hand.
+ *
+ * Revisit the moment a licence appears upstream. The mechanism for shipping one
+ * already exists: `licence: null` renders in warning colour.
+ */
+export const LICENCE_DEFERRED_REPOS: readonly string[] = [
+	"smixs/awesome-claude-output-styles",
+	"kylesnowschwartz/SimpleClaude",
+];
+
+// ─── Lookup ──────────────────────────────────────────────────────────────────
+
+/** The source a style belongs to, or null when the id names no known source. */
+export function findCommunitySource(
+	sourceId: string,
+): CommunityStyleSource | null {
+	return COMMUNITY_SOURCES.find((source) => source.id === sourceId) ?? null;
+}
+
+/** A registry entry by its coordinate id (`attention-span--spartan`). */
+export function findCommunityStyle(id: string): CommunityStyle | null {
+	return COMMUNITY_STYLES.find((style) => style.id === id) ?? null;
+}
+
+/** An entry with its source resolved, or null when either half is unknown. */
+export function resolveCommunityStyle(
+	id: string,
+): { style: CommunityStyle; source: CommunityStyleSource } | null {
+	const style = findCommunityStyle(id);
+	if (!style) return null;
+	const source = findCommunitySource(style.sourceId);
+	if (!source) return null;
+	return { style, source };
+}
+
+/** Every style a source ships, in display order. */
+export function stylesForSource(sourceId: string): CommunityStyle[] {
+	return COMMUNITY_STYLES.filter((style) => style.sourceId === sourceId).sort(
+		(a, b) => a.displayName.localeCompare(b.displayName),
+	);
+}
+
+/**
+ * The raw.githubusercontent.com URL for an entry.
+ *
+ * Kept here rather than in the fetcher so the one place that knows a
+ * coordinate's shape is the one place that knows the registry's shape.
+ */
+export function rawUrlFor(
+	style: CommunityStyle,
+	source: CommunityStyleSource,
+): string {
+	return `https://raw.githubusercontent.com/${source.repo}/${source.ref}/${style.path}`;
+}
+
+/**
+ * Why a coordinate is unusable, or null when it is fine.
+ *
+ * These are OUR data, so a failure is a bug in a commit rather than a user
+ * error — callers throw on it and the registry test catches it before it ships.
+ * Validating anyway, because a `..` that reached the URL builder would be both
+ * an SSRF and a path traversal in the destination filename.
+ */
+export function coordinateProblem(
+	style: CommunityStyle,
+	source: CommunityStyleSource,
+): string | null {
+	if (!isValidGitHubRepo(source.repo)) {
+		return `not a valid GitHub repo: "${source.repo}"`;
+	}
+	if (!/^[A-Za-z0-9._/-]+$/.test(source.ref)) {
+		return `not a valid git ref: "${source.ref}"`;
+	}
+	if (!/^[A-Za-z0-9._/-]+\.md$/.test(style.path)) {
+		return `not a valid style path: "${style.path}"`;
+	}
+	if (style.path.includes("..") || style.path.startsWith("/")) {
+		return `style path escapes the repo: "${style.path}"`;
+	}
+	if (!style.path.startsWith(`${source.dir}/`)) {
+		return `"${style.path}" is not under "${source.dir}/"`;
+	}
+	// The id is also the cache filename, so anything that is not a plain slug
+	// pair would escape the cache directory or collide with another entry.
+	if (
+		!new RegExp(`^[a-z0-9-]+${COMMUNITY_ID_SEPARATOR}[a-z0-9-]+$`).test(
+			style.id,
+		)
+	) {
+		return `id "${style.id}" is not a <source>${COMMUNITY_ID_SEPARATOR}<style> slug pair`;
+	}
+	if (style.id !== `${source.id}${COMMUNITY_ID_SEPARATOR}${slugOf(style.id)}`) {
+		return `id "${style.id}" does not start with "${source.id}${COMMUNITY_ID_SEPARATOR}"`;
+	}
+	return null;
+}
+
+/** The style half of a coordinate id. `attention-span--spartan` -> `spartan`. */
+export function slugOf(id: string): string {
+	const at = id.indexOf(COMMUNITY_ID_SEPARATOR);
+	return at === -1 ? id : id.slice(at + COMMUNITY_ID_SEPARATOR.length);
+}

package/src/main.tsx

@@ -33,6 +33,21 @@ async function main(): Promise<void> {
 	// element now names an adaptive colour explicitly — see src/ui/theme.ts.
 	const renderer = await createCliRenderer({
 		backgroundColor: RGBA.defaultBackground(),
+		// claudeup is keyboard-only — no component sets onMouseDown/Up/Move, and
+		// every action has a key. OpenTUI nevertheless defaults BOTH of these to
+		// true (`config.useMouse ?? true`, `config.enableMouseMovement ?? true`),
+		// which turns on button reporting and mode-1003 "report all motion".
+		//
+		// Inside tmux that is actively harmful: once a pane's application asks for
+		// mouse events, tmux hands them to that application instead of using them
+		// to select a pane or scroll history. Clicking another pane then does
+		// nothing, keyboard focus stays where it was, and what you type lands in
+		// the pane you thought you had just left.
+		//
+		// Turning it off costs nothing here and gives clicking and scrolling back
+		// to the terminal.
+		useMouse: false,
+		enableMouseMovement: false,
 	});
 
 	// Ask the terminal whether it is light or dark, once. Only the disabled-row

package/src/services/catalog-cache-store.ts

@@ -53,13 +53,48 @@ interface StoredCooldown {
 	strikes: number;
 }
 
+/**
+ * What the last upstream check learned about one community-styles repository.
+ *
+ * Lives here rather than in a fourth cache file so it inherits this store's file
+ * lock, atomic write and CLAUDE_CONFIG_DIR test isolation — and, more to the
+ * point, so it sits beside the rate-limit cooldowns it is budgeted against.
+ *
+ * `dirHeadSha` is the pivot of the two-phase check: one API call per REPO
+ * answers "did anything in its styles directory move", and only a repo that
+ * moved is drilled into with free raw fetches. Per-style API calls would spend
+ * the machine's whole hourly budget on first use.
+ */
+export interface StoredCommunityCheck {
+	/** Wall-clock ms of the last successful phase A. Drives the 24h TTL. */
+	checkedAt: number;
+	/** Latest commit touching the repo's styles directory, as of that check. */
+	dirHeadSha: string;
+	/** Per coordinate id: the bytes we hold, and any update sitting in .pending/. */
+	styles: Record<
+		string,
+		{
+			sha256: string;
+			pendingSha256?: string;
+			/** Changed-line count of that pending update, so it survives a restart. */
+			pendingLines?: number;
+		}
+	>;
+}
+
 interface StoreShape {
 	version: 1;
 	catalogs: Record<string, StoredCatalog>;
 	cooldowns: Record<string, StoredCooldown>;
+	communityStyles: Record<string, StoredCommunityCheck>;
 }
 
-const EMPTY: StoreShape = { version: 1, catalogs: {}, cooldowns: {} };
+const EMPTY: StoreShape = {
+	version: 1,
+	catalogs: {},
+	cooldowns: {},
+	communityStyles: {},
+};
 
 /**
  * Resolved per call, honouring CLAUDE_CONFIG_DIR — same reasoning as
@@ -83,7 +118,8 @@ let memo: { path: string; data: StoreShape } | null = null;
 
 async function load(): Promise<StoreShape> {
 	const file = storePath();
-	if (!file) return { version: 1, catalogs: {}, cooldowns: {} };
+	if (!file)
+		return { version: 1, catalogs: {}, cooldowns: {}, communityStyles: {} };
 	if (memo?.path === file) return memo.data;
 	try {
 		const parsed = JSON.parse(await fs.readFile(file, "utf-8")) as StoreShape;
@@ -92,11 +128,19 @@ async function load(): Promise<StoreShape> {
 		const data = parsed?.version === 1 ? parsed : { ...EMPTY };
 		data.catalogs ??= {};
 		data.cooldowns ??= {};
+		// Absent in every file written before community styles existed, so this
+		// default is the migration — an upgrade must not read as a corrupt cache.
+		data.communityStyles ??= {};
 		memo = { path: file, data };
 		return data;
 	} catch {
 		// Absent or corrupt. A cache must never be a failure mode — start empty.
-		const data: StoreShape = { ...EMPTY, catalogs: {}, cooldowns: {} };
+		const data: StoreShape = {
+			...EMPTY,
+			catalogs: {},
+			cooldowns: {},
+			communityStyles: {},
+		};
 		memo = { path: file, data };
 		return data;
 	}
@@ -117,13 +161,27 @@ async function mutate(fn: (data: StoreShape) => void): Promise<void> {
 		await withFileLock(file, async () => {
 			let onDisk: StoreShape;
 			try {
-				const parsed = JSON.parse(await fs.readFile(file, "utf-8")) as StoreShape;
+				const parsed = JSON.parse(
+					await fs.readFile(file, "utf-8"),
+				) as StoreShape;
+				// Every section is named explicitly: a key omitted here is silently
+				// dropped on the next write of any OTHER section.
 				onDisk =
 					parsed?.version === 1
-						? { version: 1, catalogs: parsed.catalogs ?? {}, cooldowns: parsed.cooldowns ?? {} }
-						: { version: 1, catalogs: {}, cooldowns: {} };
+						? {
+								version: 1,
+								catalogs: parsed.catalogs ?? {},
+								cooldowns: parsed.cooldowns ?? {},
+								communityStyles: parsed.communityStyles ?? {},
+							}
+						: { version: 1, catalogs: {}, cooldowns: {}, communityStyles: {} };
 			} catch {
-				onDisk = { version: 1, catalogs: {}, cooldowns: {} };
+				onDisk = {
+					version: 1,
+					catalogs: {},
+					cooldowns: {},
+					communityStyles: {},
+				};
 			}
 			fn(onDisk);
 			// Temp + rename, so a crash mid-write cannot leave a half-written file
@@ -212,6 +270,42 @@ export async function clearStoredCooldown(host: string): Promise<void> {
 	});
 }
 
+// ─── Community style checks ──────────────────────────────────────────────────
+
+/**
+ * Every recorded upstream check, keyed by community source id.
+ *
+ * Deliberately NOT expired on read, unlike cooldowns. An expired cooldown means
+ * "you may call again"; an expired CHECK still carries the shas we compare
+ * against, and only its `checkedAt` has gone stale. Dropping it would throw away
+ * the one thing that makes the next check cheap, and would make a 25-hour-old
+ * result indistinguishable from never having looked. Freshness is judged by the
+ * reader, which is what lets an expired check present as `unknown` rather than
+ * as up to date.
+ */
+export async function readCommunityChecks(): Promise<
+	Record<string, StoredCommunityCheck>
+> {
+	return { ...(await load()).communityStyles };
+}
+
+export async function writeCommunityCheck(
+	sourceId: string,
+	check: StoredCommunityCheck,
+): Promise<void> {
+	await mutate((data) => {
+		data.communityStyles ??= {};
+		data.communityStyles[sourceId] = check;
+	});
+}
+
+/** Drop every recorded check. Backs an explicit refresh. */
+export async function clearCommunityChecks(): Promise<void> {
+	await mutate((data) => {
+		data.communityStyles = {};
+	});
+}
+
 /** Test seam: forget this process's memo so the next read hits disk. */
 export function resetCatalogCacheMemo(): void {
 	memo = null;