clud-bug 0.6.20 → 0.6.21

package/lib/prompts.js

@@ -148,7 +148,17 @@ Each SKILL.md frontmatter (first \`---\`-delimited block) has a
     API-contract, test-discipline). Each gets its own H3 section.
   - Missing → treat as \`shared\`.
 
-Read each capped: \`head -c "$MAX_SKILL_BYTES" .claude/skills/*/SKILL.md\`
+Skill applies_to (v0.6.21 / 0.0.K):
+Frontmatter may also have \`applies_to:\` with \`paths:\` (glob list)
+and/or \`extensions:\` (extension list). Scan each skill's frontmatter
+first (cheap — just the \`---\` block). If applies_to is present and
+the PR's changed files (from \`gh pr diff --name-only\`) match NONE
+of the declared paths or extensions, SKIP that skill's body — don't
+read it, don't reference it. Skills without applies_to load
+unconditionally (back-compat). Net effect: a UI-scoped skill stays
+unread on a backend-only PR.
+
+Read each applicable body capped: \`head -c "$MAX_SKILL_BYTES" .claude/skills/<name>/SKILL.md\`
 
 At review end, append a single-line footer:
   Skills referenced: [skill-name-1, skill-name-2, ...]

package/lib/skills.js

@@ -383,6 +383,113 @@ export function readReviewMode(skillContent) {
   return value === 'dedicated' ? 'dedicated' : 'shared';
 }
 
+// 0.0.K (v0.6.21): parse the optional `applies_to:` frontmatter block.
+//
+// Schema:
+//   applies_to:
+//     paths:
+//       - "src/ui/**"
+//       - "lib/components/**"
+//     extensions: [".tsx", ".jsx"]
+//
+// Returns `{paths: string[], extensions: string[]}` if the field is
+// present (either sub-list optional, both default to empty array), or
+// `null` if absent. Skills without applies_to are scope-universal —
+// the caller should treat null as "load unconditionally."
+//
+// Hand-rolled YAML parser scoped to this exact shape. The frontmatter
+// is otherwise opaque (review_mode is parsed elsewhere with a similar
+// single-key regex), so pulling in a YAML dep would be overkill.
+export function readAppliesTo(skillContent) {
+  if (typeof skillContent !== 'string') return null;
+  const fm = skillContent.match(/^---\n([\s\S]*?)\n---/);
+  if (!fm) return null;
+  const block = fm[1];
+  // Anchor on `applies_to:` at start of line (the body of a SKILL.md
+  // could mention the term in prose; only the frontmatter key fires).
+  const head = block.match(/^applies_to:\s*$/m);
+  if (!head) return null;
+  // Slice from after the `applies_to:` line; the block ends at the
+  // next top-level key (a line starting with a word character + `:`)
+  // OR end-of-block.
+  const startIdx = head.index + head[0].length;
+  const rest = block.slice(startIdx);
+  const stop = rest.search(/^\w[\w-]*:/m);
+  const scoped = stop === -1 ? rest : rest.slice(0, stop);
+  const paths = parseYamlList(scoped, 'paths');
+  const extensions = parseYamlList(scoped, 'extensions');
+  if (paths.length === 0 && extensions.length === 0) return null;
+  return { paths, extensions };
+}
+
+// Parse a YAML list under `<key>:`, handling both the inline-array
+// form (`extensions: [".tsx", ".jsx"]`) and the block form
+// (`paths:` followed by `  - "src/ui/**"` lines).
+function parseYamlList(block, key) {
+  const inline = block.match(new RegExp(`^\\s{2}${key}:\\s*\\[(.*?)\\]\\s*$`, 'm'));
+  if (inline) {
+    return inline[1]
+      .split(',')
+      .map((s) => s.trim().replace(/^["']|["']$/g, ''))
+      .filter(Boolean);
+  }
+  const headerRe = new RegExp(`^\\s{2}${key}:\\s*$`, 'm');
+  const head = block.match(headerRe);
+  if (!head) return [];
+  const after = block.slice(head.index + head[0].length);
+  const items = [];
+  for (const line of after.split('\n')) {
+    const item = line.match(/^\s{4,}-\s*(.+?)\s*$/);
+    if (item) {
+      items.push(item[1].replace(/^["']|["']$/g, ''));
+      continue;
+    }
+    // Anything that isn't a list item (or blank) ends the list.
+    if (line.trim() !== '' && !item) break;
+  }
+  return items;
+}
+
+// 0.0.K: does `prPaths` contain at least one file matching the skill's
+// applies_to? Skills without applies_to ALWAYS apply (back-compat).
+//
+// `prPaths` is the list of changed files in the PR (e.g. from
+// `gh pr diff --name-only`). Match semantics:
+//   - paths: any glob in `paths` matches any of `prPaths`
+//   - extensions: any extension in `extensions` matches any of `prPaths`
+//   - paths OR extensions (NOT AND) — a single hit is enough
+//
+// Skill `paths` use the minimal glob set logmind already uses
+// (`*` matches non-slash, `**` matches across slashes, `?` single
+// char). Anything fancier would need a real glob lib.
+export function appliesToPr(skillContent, prPaths) {
+  const rule = readAppliesTo(skillContent);
+  if (rule === null) return true;  // back-compat: no rule → applies
+  if (!Array.isArray(prPaths)) return true;  // be permissive on bad input
+  for (const path of prPaths) {
+    if (typeof path !== 'string') continue;
+    for (const ext of rule.extensions) {
+      if (path.endsWith(ext)) return true;
+    }
+    for (const glob of rule.paths) {
+      if (globMatch(glob, path)) return true;
+    }
+  }
+  return false;
+}
+
+// Minimal glob → regex: `**` → `.*`, `*` → `[^/]*`, `?` → `.`,
+// everything else escaped. Anchored full-string match.
+function globMatch(glob, path) {
+  const escaped = glob
+    .replace(/([.+^${}()|[\]\\])/g, '\\$1')
+    .replace(/\*\*/g, '__DOUBLESTAR__')
+    .replace(/\*/g, '[^/]*')
+    .replace(/__DOUBLESTAR__/g, '.*')
+    .replace(/\?/g, '.');
+  return new RegExp(`^${escaped}$`).test(path);
+}
+
 // Partition a set of loaded skills into {shared, dedicated} buckets per
 // each skill's review_mode frontmatter. Expects skills with a `content`
 // field (SKILL.md text). Skills without content default to `shared`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clud-bug",
-  "version": "0.6.20",
+  "version": "0.6.21",
   "description": "Skill-driven Claude PR review. Ship a brand-voice skill, get brand reviews. Each finding cites the skill that motivated it. CLI installs the workflow + a baseline kit; add more from skills.sh.",
   "homepage": "https://cludbug.dev",
   "bugs": "https://github.com/thrillmade/clud-bug/issues",

package/templates/workflow-py.yml.tmpl

@@ -156,6 +156,6 @@ jobs:
       # Strict-mode gate — composite action; see workflow.yml.tmpl for design notes.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.20
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.21
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

package/templates/workflow-ts.yml.tmpl

@@ -156,6 +156,6 @@ jobs:
       # Strict-mode gate — composite action; see workflow.yml.tmpl for design notes.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.20
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.21
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

package/templates/workflow.yml.tmpl

@@ -247,6 +247,6 @@ jobs:
       # Letting the action's own failure fail the check is louder and right.
       - name: Strict mode — fail check on critical findings
         if: success()
-        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.20
+        uses: thrillmade/clud-bug/.github/actions/strict-mode-gate@v0.6.21
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}