clud-bug 0.5.15 → 0.6.1

package/README.md

@@ -202,7 +202,7 @@ clud-bug uses [`anthropics/claude-code-action`](https://github.com/anthropics/cl
 When you push a PR that touches `.github/workflows/clud-bug-review.yml` (or any other clud-bug workflow):
 
 - The `clud-bug-review` check fails with `App token exchange failed: 401 Unauthorized — Workflow validation failed. The workflow file must exist and have identical content to the version on the repository's default branch.`
-- You'll get a GitHub email titled something like **"[thrillmot/your-repo] Run failed: Clud Bug 🐛 Crawls Your Code — `<branch-name>`"** — same wording for every workflow failure, so it doesn't visually distinguish "this is the expected self-mod guard" from "real failure."
+- You'll get a GitHub email titled something like **"[thrillmade/your-repo] Run failed: Clud Bug 🐛 Crawls Your Code — `<branch-name>`"** — same wording for every workflow failure, so it doesn't visually distinguish "this is the expected self-mod guard" from "real failure."
 
 ### How to merge
 
@@ -261,7 +261,7 @@ If you don't want to use the CLI, you can install a generic workflow by hand:
 ```bash
 mkdir -p .github/workflows
 curl -o .github/workflows/clud-bug-review.yml \
-  https://raw.githubusercontent.com/thrillmot/clud-bug/main/templates/workflow.yml.tmpl
+  https://raw.githubusercontent.com/thrillmade/clud-bug/main/templates/workflow.yml.tmpl
 # Edit {{PROJECT_DESCRIPTION}} and {{LANGUAGE_HINTS}} placeholders by hand.
 ```
 

package/bin/clud-bug.js

@@ -118,7 +118,7 @@ async function runInit(args) {
   const fromAgentSkills = baseline.filter((s) => s._source === 'agent-skills').length;
   const sourceLabel = baseline.length === 0
     ? ''
-    : fromAgentSkills === baseline.length ? ' (from thrillmot/agent-skills)'
+    : fromAgentSkills === baseline.length ? ' (from thrillmade/agent-skills)'
     : fromAgentSkills === 0               ? ' (bundled fallback)'
                                           : ` (${fromAgentSkills} from agent-skills, ${baseline.length - fromAgentSkills} bundled)`;
   log(`    baseline kit:     ${baseline.length} specimens${sourceLabel}`);

package/lib/agents-md.js

@@ -85,7 +85,7 @@ small baseline kit ships with every install — see
 
 Anthropic's \`claude-code-action\` refuses to run on PRs that modify its own
 workflow file. Use \`clud-bug edit-workflow\` to bundle workflow tweaks into
-their own isolated PR — see [README](https://github.com/thrillmot/clud-bug#when-you-edit-the-workflow).
+their own isolated PR — see [README](https://github.com/thrillmade/clud-bug#when-you-edit-the-workflow).
 
 ${versionLine}
 ${END_MARKER}`;

package/lib/skills.js

@@ -14,10 +14,10 @@ const MANIFEST_VERSION = 1;
 // silently land in users' Claude review skills mid-cycle. To roll new
 // skill content, bump BASELINE_SKILLS_REF below in the same clud-bug PR
 // that ships the corresponding bundled fallback update.
-// See thrillmot/agent-skills — skills.sh `skills/<name>/SKILL.md` layout.
-const BASELINE_SKILLS_REF = 'a44559770686e6c51d08ba5bb842d78f85876fb2';
+// See thrillmade/agent-skills — skills.sh `skills/<name>/SKILL.md` layout.
+const BASELINE_SKILLS_REF = '436963ed37cbd9c6a9b7a07e907d5a0a432fab59';
 const AGENT_SKILLS_BASE = process.env.CLUD_BUG_AGENT_SKILLS_BASE
-  ?? `https://raw.githubusercontent.com/thrillmot/agent-skills/${BASELINE_SKILLS_REF}/skills`;
+  ?? `https://raw.githubusercontent.com/thrillmade/agent-skills/${BASELINE_SKILLS_REF}/skills`;
 const SKILL_FETCH_TIMEOUT_MS = 5000;
 const SKILL_CACHE_TTL_MS = 24 * 60 * 60 * 1000;   // 24h
 
@@ -93,7 +93,7 @@ export function rankAndCap(curated, searched, baseline, cap = MAX_SKILLS) {
   return out;
 }
 
-// Loads the baseline skills, preferring the pinned thrillmot/agent-skills
+// Loads the baseline skills, preferring the pinned thrillmade/agent-skills
 // commit and falling back to the bundled npm-package copy on any fetch failure.
 // Returns the same shape as before, plus a `_source` of either 'agent-skills'
 // or 'bundled' so the CLI can report which path was used.
@@ -572,13 +572,47 @@ export function isCriticalReviewHeader(headerLine) {
 export function classifyPerSkillOutcome(outcomeLine) {
   if (outcomeLine == null) return 'failure';
   const text = String(outcomeLine);
-  // 0 findings / 0 finding — anchored: NOT preceded by a digit. So "10 findings"
-  // doesn't match (the `0 findings` substring has `1` before it), and "0
-  // findings" / " 0 findings." both match.
-  if (/(^|[^0-9])0\s+findings?\b/i.test(text)) return 'success';
-  // n/a — anchored on word boundaries either side (so "n/a." at sentence end
-  // matches but "diagnostics" would not contain a matching n/a).
+
+  // HARD-FAILURE OVERRIDE: any positive finding count → failure.
+  // `\b[1-9]\d*\s+(?:\w+\s+){0,3}finding` matches "1 finding",
+  // "2 critical findings", "10 findings", "100 minor findings below".
+  // Up to 3 intermediate words allow modifiers like "critical"/"minor".
+  // The `\b[1-9]` anchor (vs `[0-9]`) excludes `0` — so this never
+  // shadows the "0 findings" success case below. Also: "10 findings"
+  // is correctly classified failure because `\b1` matches at the
+  // word boundary before `1`, then `\d*` consumes `0`.
+  if (/\b[1-9]\d*\s+(?:\w+\s+){0,3}finding/i.test(text)) return 'failure';
+
+  // SUCCESS PATTERNS — broadened in v0.5.16 to handle natural bot
+  // phrasings without enumerating every synonym. The bot's review
+  // prompt encourages canonical "0 findings" wording but variance
+  // is real (e.g. "no findings to anchor", "0 critical findings").
+
+  // (1) Zero-finding count, optionally with up to 3 modifier words.
+  //     Matches: "0 findings", "0 critical findings", "no findings",
+  //     "zero performance findings", "no findings to anchor".
+  //     Does NOT match: "10 findings" (handled above), "all findings",
+  //     "applied to all findings".
+  if (/\b(?:0|no|zero)\s+(?:\S+\s+){0,3}finding/i.test(text)) return 'success';
+
+  // (2) n/a — word-bounded. Matches "n/a.", "n/a — no surface here",
+  //     " n/a " surrounded by anything. Excludes "diagnostics" etc.
   if (/\bn\/a\b/i.test(text)) return 'success';
+
+  // (3) "not applicable" — explicit phrase.
+  if (/\bnot\s+applicable\b/i.test(text)) return 'success';
+
+  // (4) Checkmark (✓) as the bot's universal clean signal. Anchored on
+  //     whitespace/punctuation on both sides so accidental ✓ inside
+  //     other content (e.g. quoting a checkbox list) doesn't trip it.
+  //     Matches "applied to all findings. ✓ all anchored." but not
+  //     "see ✓item-marker in unicode" or similar.
+  if (/(?:^|\s)✓(?:\s|$|[.,;:])/.test(text)) return 'success';
+
+  // Skill-specific vocabulary like "0 pattern fights" (no `finding` word)
+  // falls through to failure here. Skill authors should prefer the
+  // canonical "0 findings" wording in their per-skill scan lines so
+  // this classifier doesn't need per-skill vocabulary knowledge.
   return 'failure';
 }
 

package/lib/update.js

@@ -1,4 +1,4 @@
-import { readFile, writeFile, mkdir, stat } from 'node:fs/promises';
+import { readFile, writeFile, mkdir, stat, rm } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { renderFile, pickTemplate } from './render.js';
 import { detect, buildDescriptionLine } from './detect.js';
@@ -69,9 +69,23 @@ export async function runUpdate({
   }
 
   // 3. Refresh baseline skills (always controlled by clud-bug).
+  //    Slugs listed in manifest.excludedBaselines are skipped AND their
+  //    existing .claude/skills/<slug>/ dir is removed if present, so a repo
+  //    that opts out of a baseline doesn't end up regenerating it on every
+  //    update (the original symptom this field exists to fix).
+  const excluded = new Set(Array.isArray(manifest.excludedBaselines) ? manifest.excludedBaselines : []);
   const baseline = await loadBaseline(baselineDir, loadBaselineOpts);
   for (const skill of baseline) {
-    const skillPath = join(skillsDir, sanitize(skill.name), 'SKILL.md');
+    const slug = sanitize(skill.name);
+    if (excluded.has(skill.name) || excluded.has(slug)) {
+      const skillDir = join(skillsDir, slug);
+      if (await pathExists(skillDir)) {
+        await rm(skillDir, { recursive: true, force: true });
+        changed.push({ path: skillDir, label: `excluded baseline ${skill.name}: removed` });
+      }
+      continue;
+    }
+    const skillPath = join(skillsDir, slug, 'SKILL.md');
     await maybeWrite(skillPath, skill.content, changed, unchanged, `baseline ${skill.name}`);
   }
 

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "clud-bug",
-  "version": "0.5.15",
+  "version": "0.6.1",
   "description": "Skill-driven Claude PR review. Ship a brand-voice skill, get brand reviews. Each finding cites the skill that motivated it. CLI installs the workflow + a baseline kit; add more from skills.sh.",
   "homepage": "https://cludbug.dev",
-  "bugs": "https://github.com/thrillmot/clud-bug/issues",
+  "bugs": "https://github.com/thrillmade/clud-bug/issues",
   "type": "module",
   "license": "MIT",
   "author": "thrillmot",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/thrillmot/clud-bug.git"
+    "url": "git+https://github.com/thrillmade/clud-bug.git"
   },
   "keywords": [
     "claude",

package/templates/skills/baseline/clud-bug-collaboration.md

@@ -170,5 +170,5 @@ skills are left untouched.
 ## Where to find more
 
 - Site: https://cludbug.dev
-- Repo: https://github.com/thrillmot/clud-bug
-- Skill catalog: https://github.com/thrillmot/agent-skills
+- Repo: https://github.com/thrillmade/clud-bug
+- Skill catalog: https://github.com/thrillmade/agent-skills

package/templates/workflow-py.yml.tmpl

@@ -1,4 +1,4 @@
-# clud-bug-template-version: v9
+# clud-bug-template-version: v10
 name: Clud Bug 🐛 Crawls Your Code
 
 on:
@@ -281,6 +281,6 @@ jobs:
       # Strict-mode gate — composite action; see workflow.yml.tmpl for design notes.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmot/clud-bug/.github/actions/strict-mode-gate@v0.5.15
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

package/templates/workflow-ts.yml.tmpl

@@ -1,4 +1,4 @@
-# clud-bug-template-version: v9
+# clud-bug-template-version: v10
 name: Clud Bug 🐛 Crawls Your Code
 
 on:
@@ -282,6 +282,6 @@ jobs:
       # Strict-mode gate — composite action; see workflow.yml.tmpl for design notes.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmot/clud-bug/.github/actions/strict-mode-gate@v0.5.15
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

package/templates/workflow.yml.tmpl

@@ -1,4 +1,4 @@
-# clud-bug-template-version: v9
+# clud-bug-template-version: v10
 name: Clud Bug 🐛 Crawls Your Code
 
 on:
@@ -316,6 +316,6 @@ jobs:
       # Letting the action's own failure fail the check is louder and right.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmot/clud-bug/.github/actions/strict-mode-gate@v0.5.15
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}