forgedock 1.0.18 → 1.0.19

package/commands/{resume.md → pipeline-resume.md}

@@ -3,7 +3,7 @@ description: Recover full pipeline context after compaction — find the last ac
 argument-hint: [issue number (optional — auto-detects if omitted)]
 ---
 
-# /resume — Context Recovery After Compaction
+# /pipeline-resume — Context Recovery After Compaction
 
 **Input**: $ARGUMENTS
 
@@ -110,7 +110,7 @@ for NUMBER in $(echo "$RECENT_ISSUES" | jq -r '.number'); do
 done
 ```
 
-If still no candidate: display `No recent active issues found. To resume work on a specific issue, run: /resume {issue-number}` and STOP.
+If still no candidate: display `No recent active issues found. To resume work on a specific issue, run: /pipeline-resume {issue-number}` and STOP.
 
 ---
 
@@ -247,7 +247,7 @@ Invoke `/work-on` to re-enter the pipeline. Work-on reads GitHub state independe
 Skill("work-on", args="{TARGET_NUMBER}")
 ```
 
-**Why delegation works**: `/work-on` Phase 0B already implements "Determine resume point" — it reads issue labels and FORGE annotations to route to the correct phase. `/resume` provides the human-readable context summary, then hands off to `/work-on` for execution.
+**Why delegation works**: `/work-on` Phase 0B already implements "Determine resume point" — it reads issue labels and FORGE annotations to route to the correct phase. `/pipeline-resume` provides the human-readable context summary, then hands off to `/work-on` for execution.
 
 **Do NOT re-implement pipeline logic here.** The context summary above is for the agent's working memory only — the actual phase routing and execution is owned by `/work-on`.
 
@@ -258,7 +258,7 @@ Skill("work-on", args="{TARGET_NUMBER}")
 | Condition | Response |
 |-----------|----------|
 | `forge.yaml` missing | Stop: "Run \`npx forgedock init\` to generate forge.yaml" |
-| No active issues + no FORGE annotations found | Stop: "No recent active issues found. Run \`/resume {number}\` with an explicit issue number, or \`/work-on next\` to start a new issue." |
+| No active issues + no FORGE annotations found | Stop: "No recent active issues found. Run \`/pipeline-resume {number}\` with an explicit issue number, or \`/work-on next\` to start a new issue." |
 | Issue is closed with `workflow:merged` | Stop: "Issue #{number} is already merged. Nothing to resume." |
 | Issue is closed with `workflow:invalid` | Stop: "Issue #{number} was closed as invalid. Nothing to resume." |
 | Issue has `needs-human` label | Stop: "Issue #{number} is blocked (needs-human). Review the blocking comment and resolve it manually before resuming." |

package/commands/{status.md → pipeline-status.md}

@@ -3,7 +3,7 @@ description: Pipeline-wide situational awareness — groups open issues by workf
 argument-hint: [--repo <owner/repo> | --stale-days <N>]
 ---
 
-# /status — Pipeline Status
+# /pipeline-status — Pipeline Status
 
 **Input**: $ARGUMENTS (optional: `--repo <owner/repo>`, `--stale-days <N>`)
 

package/commands/quality-gate.md

@@ -442,6 +442,33 @@ fi
 
 Report each `[HARD]` line as **HIGH** — a dangling `Skill()` target or a label set by no command is a real pipeline break (an agent will invoke a phase that does not exist, or a state will never be entered/exited). Orphan-annotation `[SOFT]` lines are advisory: surface them in the report for periodic triage but do NOT block the commit. Scaffolding `[INFO]` lines are expected and need no action. To gate on HARD findings (fail the build), drop `--soft`; the default keeps existing baseline orphans from blocking until they are triaged. <!-- Added: forge#869 -->
 
+### 2G.7: Native command conflict check (FORGE_GRAPH domain)
+
+**Triggered when**: changed files include `commands/*.md` files (top-level, not sub-phase subdirectories). Skips silently in any project without `scripts/check-native-conflicts.sh`.
+
+**Why this matters**: ForgeDock commands are installed into `~/.claude/commands/`, the same namespace as native Claude Code built-in slash commands. A top-level command file whose basename matches a native command name (e.g. `resume.md` → `/resume`, `status.md` → `/status`) completely shadows the native command — users lose access to core Claude Code functionality with no error message. This check prevents the bug class from ever reaching `staging` or `npm publish`. <!-- Added: forge#1074 -->
+
+```bash
+# Run only when top-level commands/*.md files changed and the script ships in this repo.
+# Sub-phase files in subdirectories (commands/work-on/*.md) are installed with their
+# relative path preserved and resolve to namespaced commands — they cannot shadow
+# root-level native commands and are not scanned.
+CONFLICT_CHECKER="$FORGEDOCK_SCRIPTS/check-native-conflicts.sh"
+[ -f "$CONFLICT_CHECKER" ] || CONFLICT_CHECKER="{WORKTREE_PATH}/scripts/check-native-conflicts.sh"
+if [ -f "$CONFLICT_CHECKER" ]; then
+    CONFLICT_REPORT=$(bash "$CONFLICT_CHECKER" "{WORKTREE_PATH}/commands" 2>&1) || CONFLICT_EXIT=$?
+    echo "$CONFLICT_REPORT"
+    if [ "${CONFLICT_EXIT:-0}" -ne 0 ]; then
+        # Extract each conflicting file from the report and emit a gate finding.
+        echo "$CONFLICT_REPORT" | grep -E '^\s+commands/' | while IFS= read -r hit; do
+            echo "FORGE_GRAPH | HIGH | native-conflict | ${hit#*  }"
+        done
+    fi
+fi
+```
+
+Report each conflict as **HIGH** — a shadowed native command is a silent user-facing regression (the native command becomes unreachable without warning). The builder must rename the conflicting file before the commit. Blocklist updates are in `scripts/check-native-conflicts.sh` (NATIVE_COMMANDS array).
+
 ### 2H: Asyncio cancellation safety (Python async code)
 
 **Triggered when**: changed Python files contain `asyncio.shield`, `asyncio.wait_for`, or `Task.cancel`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forgedock",
-  "version": "1.0.18",
+  "version": "1.0.19",
   "description": "GitHub as a knowledge graph for AI agents. Autonomous dev pipeline for Claude Code.",
   "bin": {
     "forgedock": "bin/forgedock.mjs"

package/scripts/check-native-conflicts.sh

@@ -0,0 +1,200 @@
+#!/usr/bin/env bash
+# SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios
+# SPDX-License-Identifier: AGPL-3.0-or-later
+#
+# check-native-conflicts.sh — Validate that ForgeDock command names do not shadow
+#                              native Claude Code built-in slash commands.
+#
+# ForgeDock commands are installed as custom slash commands in ~/.claude/commands/.
+# If a command file shares its name with a native Claude Code built-in (e.g. /resume,
+# /status), it shadows the native command entirely — users lose access to core
+# Claude Code functionality.
+#
+# This script:
+#   1. Maintains a blocklist of known native Claude Code slash command names.
+#   2. Scans all .md files in commands/ (recursively) and extracts the command
+#      name (filename without .md extension).
+#   3. Checks each command name against the blocklist (case-insensitive).
+#   4. Exits non-zero if any conflict is found, printing the offending file(s).
+#
+# Usage:
+#   check-native-conflicts.sh [<commands_dir>]
+#     commands_dir: path to the commands/ directory (default: ./commands)
+#
+# Exit codes:
+#   0  no conflicts found
+#   1  one or more conflicts found (names listed to stderr)
+#   2  usage / dependency error (commands_dir not found)
+#
+# <!-- Added: forge#1074 -->
+
+set -euo pipefail
+
+COMMANDS_DIR="${1:-./commands}"
+
+if [ ! -d "$COMMANDS_DIR" ]; then
+  echo "ERROR: commands directory not found: $COMMANDS_DIR" >&2
+  echo "Usage: $0 [<commands_dir>]" >&2
+  exit 2
+fi
+
+# ---------------------------------------------------------------------------
+# Blocklist of known native Claude Code slash command names.
+# These are names that Claude Code reserves as built-in commands.
+# Command names are always lowercase — comparison is case-insensitive.
+#
+# To update this list: add the new native command name (without leading /).
+# Keep entries alphabetically sorted within logical groups for readability.
+# ---------------------------------------------------------------------------
+NATIVE_COMMANDS=(
+  # Core session management
+  resume
+  status
+  exit
+  clear
+  compact
+  config
+  memory
+  permissions
+  rewind
+  init
+
+  # Model and capability controls
+  model
+  plan
+  effort
+  focus
+
+  # Code and diff operations
+  diff
+  review
+  debug
+  run
+  verify
+  branch
+  rename
+  copy
+
+  # Help and onboarding
+  help
+  doctor
+  feedback
+  setup-bedrock
+  setup-vertex
+  terminal-setup
+  web-setup
+  team-onboarding
+  upgrade
+
+  # Agents and orchestration
+  agents
+  context
+  tasks
+  fork
+  batch
+  loop
+  goal
+  background
+  teleport
+  remote-control
+  remote-env
+
+  # Skills and plugins
+  skills
+  plugin
+  reload-plugins
+  reload-skills
+  run-skill-generator
+
+  # Review and code quality
+  code-review
+  security-review
+  simplify
+  ultraplan
+  ultrareview
+
+  # Usage and billing
+  usage
+  extra-usage
+  usage-credits
+
+  # UI and display
+  theme
+  tui
+  statusline
+  powerup
+
+  # Workflow and scheduling
+  schedule
+  workflows
+  stop
+  recap
+
+  # MCP
+  mcp
+
+  # Miscellaneous
+  btw
+  sandbox
+  voice
+  radio
+  stickers
+  release-notes
+  privacy-settings
+  setup
+)
+
+# ---------------------------------------------------------------------------
+# Build a fast-lookup set from the blocklist (bash associative array).
+# ---------------------------------------------------------------------------
+declare -A BLOCKLIST
+for name in "${NATIVE_COMMANDS[@]}"; do
+  BLOCKLIST["${name,,}"]=1   # store as lowercase
+done
+
+# ---------------------------------------------------------------------------
+# Scan commands/ for .md files and check each basename against the blocklist.
+#
+# Scope: TOP-LEVEL files in commands/ only.
+#
+# ForgeDock installs commands preserving their relative path:
+#   commands/foo.md          → ~/.claude/commands/foo.md          → /foo
+#   commands/work-on/bar.md  → ~/.claude/commands/work-on/bar.md  → /work-on/bar
+#
+# Only top-level .md files resolve to a root-level slash command (e.g. /foo).
+# Sub-phase files in subdirectories (commands/work-on/*.md) resolve to namespaced
+# commands (/work-on/bar) and cannot shadow native root commands.
+# ---------------------------------------------------------------------------
+CONFLICTS=()
+
+while IFS= read -r -d '' md_file; do
+  # Extract command name: basename without .md extension, lowercased.
+  basename_no_ext="${md_file##*/}"
+  basename_no_ext="${basename_no_ext%.md}"
+  cmd_name="${basename_no_ext,,}"
+
+  if [[ -n "${BLOCKLIST[$cmd_name]+_}" ]]; then
+    CONFLICTS+=("$md_file  (conflicts with native /$cmd_name)")
+  fi
+done < <(find "$COMMANDS_DIR" -maxdepth 1 -name "*.md" -print0 | sort -z)
+
+# ---------------------------------------------------------------------------
+# Report and exit.
+# ---------------------------------------------------------------------------
+if [ ${#CONFLICTS[@]} -gt 0 ]; then
+  echo "ERROR: ForgeDock command name(s) shadow native Claude Code built-in commands:" >&2
+  echo "" >&2
+  for conflict in "${CONFLICTS[@]}"; do
+    echo "  $conflict" >&2
+  done
+  echo "" >&2
+  echo "Native Claude Code commands are inaccessible when a ForgeDock command" >&2
+  echo "shares their name. Rename the conflicting file(s) before publishing." >&2
+  echo "" >&2
+  echo "To update the native command blocklist, edit:" >&2
+  echo "  scripts/check-native-conflicts.sh (NATIVE_COMMANDS array)" >&2
+  exit 1
+fi
+
+echo "OK: No native Claude Code command conflicts detected in $COMMANDS_DIR"
+exit 0