litclaude-ai 0.4.4 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.4.5 - 2026-09-02 — vendored-corpus companions and Skill-id namespace
+
+- Record Claude Code plugin-namespaced Skill tool ids (`plugin:skill`) as the
+  unprefixed skill id so skill-loop consultations match `SKILL_ID`.
+- Count vendor license, provenance, and NOTICE companions in family
+  payload-parity so packed skills keep the material they name after the
+  sibling vendor-layout moves.
+- This is a local release candidate only; no publish, tag, or push was performed.
+
 ## 0.4.4 - 2026-09-02 — inode-reuse hardening and Linux rotation safety
 
 - Bind regular-file reads and state transitions to ctime/birthtime-aware identities,

package/README.md

@@ -1,4 +1,4 @@
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/litclaude-ai@0.4.4/cover.png" width="100%" alt="LitClaude — Claude Code-native workflow package" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/litclaude-ai@0.4.5/cover.png" width="100%" alt="LitClaude — Claude Code-native workflow package" /></p>
 
 ```text
 ██╗     ██╗████████╗
@@ -22,7 +22,7 @@
 </p>
 <p align="center">
   <img src="https://img.shields.io/badge/npm-litclaude--ai-cb3837" alt="npm: litclaude-ai" />
-  <img src="https://img.shields.io/badge/version-0.4.4-2ea44f" alt="version 0.4.4" />
+  <img src="https://img.shields.io/badge/version-0.4.5-2ea44f" alt="version 0.4.5" />
   <img src="https://img.shields.io/badge/Claude%20Code-plugin-blueviolet" alt="Claude Code plugin" />
   <img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT license" />
 </p>
@@ -92,13 +92,13 @@ npx --yes litclaude-ai@latest install
 For a reproducible install, pin the current package version:
 
 ```bash
-npm view litclaude-ai@0.4.4 version
+npm view litclaude-ai@0.4.5 version
 ```
 
-If that lookup returns `0.4.4`, the exact install is available:
+If that lookup returns `0.4.5`, the exact install is available:
 
 ```bash
-npx --yes litclaude-ai@0.4.4 install
+npx --yes litclaude-ai@0.4.5 install
 ```
 
 Otherwise, wait for explicit human publication before using that pin. Check the

package/README_ko-KR.md

@@ -1,4 +1,4 @@
-<p align="center"><img src="https://cdn.jsdelivr.net/npm/litclaude-ai@0.4.4/cover.png" width="100%" alt="LitClaude — Claude Code-native workflow package" /></p>
+<p align="center"><img src="https://cdn.jsdelivr.net/npm/litclaude-ai@0.4.5/cover.png" width="100%" alt="LitClaude — Claude Code-native workflow package" /></p>
 
 ```text
 ██╗     ██╗████████╗
@@ -22,7 +22,7 @@
 </p>
 <p align="center">
   <img src="https://img.shields.io/badge/npm-litclaude--ai-cb3837" alt="npm: litclaude-ai" />
-  <img src="https://img.shields.io/badge/version-0.4.4-2ea44f" alt="version 0.4.4" />
+  <img src="https://img.shields.io/badge/version-0.4.5-2ea44f" alt="version 0.4.5" />
   <img src="https://img.shields.io/badge/Claude%20Code-plugin-blueviolet" alt="Claude Code plugin" />
   <img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT license" />
 </p>
@@ -94,13 +94,13 @@ npx --yes litclaude-ai@latest install
 뒤 고정합니다.
 
 ```bash
-npm view litclaude-ai@0.4.4 version
+npm view litclaude-ai@0.4.5 version
 ```
 
-조회 결과가 `0.4.4`이면 exact install을 사용할 수 있습니다.
+조회 결과가 `0.4.5`이면 exact install을 사용할 수 있습니다.
 
 ```bash
-npx --yes litclaude-ai@0.4.4 install
+npx --yes litclaude-ai@0.4.5 install
 ```
 
 그렇지 않으면 명시적인 human publication을 기다립니다. Pin은 그 뒤에 사용합니다.

package/RELEASE_CHECKLIST.md

@@ -1,6 +1,6 @@
 # LitClaude Release Checklist
 
-Status: `litclaude-ai@0.4.4` is the current release candidate — exact canonical
+Status: `litclaude-ai@0.4.5` is the current release candidate — exact canonical
 frontend corpus plus Claude-native `autoresearch`, `autoconference`, and `wikify`
 workflow-family integration. It byte-pins the frontend library, legal companions,
 family source closures, and adapters through independent commitments and package
@@ -45,9 +45,9 @@ side-effect-free, the launcher starts only a separate Claude Code
 print/background worker, and the release preserves the Korean polishing
 command, strict multi-agent review pipeline, fidelity guardrails, package
 hygiene checks, native route gates, and safe start-work handoff behavior.
-`package.json` is aligned to `0.4.4`,
-`plugins/litclaude/.claude-plugin/plugin.json` is aligned to `0.4.4`, and the
-plugin-local MCP server reports `0.4.4`.
+`package.json` is aligned to `0.4.5`,
+`plugins/litclaude/.claude-plugin/plugin.json` is aligned to `0.4.5`, and the
+plugin-local MCP server reports `0.4.5`.
 
 This candidate adds an approval-gated skill learning loop. Validated
 consultations, bounded corrections, iteration signals, and coverage gaps may
@@ -295,9 +295,9 @@ checkout and from an isolated install of the packed tarball:
 Before requesting publication approval, confirm these artifacts from the current
 checkout:
 
-- `package.json` version is `0.4.4`.
-- `plugins/litclaude/.claude-plugin/plugin.json` version is `0.4.4`.
-- `plugins/litclaude/bin/litclaude-mcp.js` reports server version `0.4.4`.
+- `package.json` version is `0.4.5`.
+- `plugins/litclaude/.claude-plugin/plugin.json` version is `0.4.5`.
+- `plugins/litclaude/bin/litclaude-mcp.js` reports server version `0.4.5`.
 - Prompt-hook tests cover bundled `SKILL.md` body injection for bare `hyperplan`, `litresearch`, `lit research`, `init-deep`, and explicit leading `$start-work`; diagnostic/copy mentions stay inert while leading natural-language `lit start work` stays BLOCKED.
 - `lit search` and `lit query` route to `/litclaude:litresearch` without activating on slash mentions, code spans, or non-lit prompts.
 - Litresearch web lanes require public API/feed preference, validator-first checks, route traces, prompt-injection quarantine, and honest auth/paywall/private-data stop reasons.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "litclaude-ai",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Claude Code-native workflow distribution.",
   "type": "module",
   "bin": {

package/plugins/litclaude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "litclaude",
   "description": "Claude Code-native workflow plugin with a bounded-authority start-work lifecycle.",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "author": {
     "name": "LitClaude contributors"
   },

package/plugins/litclaude/bin/litclaude-mcp.js

@@ -9,7 +9,7 @@ import {
 } from "../lib/wikify-knowledge.mjs";
 
 const protocolVersion = "2024-11-05";
-const serverVersion = "0.4.4";
+const serverVersion = "0.4.5";
 
 const publicSourceReadTool = {
   name: "public_source_read",

package/plugins/litclaude/hooks/hooks.json

@@ -26,7 +26,7 @@
     ],
     "PreToolUse": [
       {
-        "matcher": "^(Read|Grep|Glob|Write|Edit|MultiEdit|NotebookEdit|Bash|Agent)$",
+        "matcher": "^(Read|Grep|Glob|Write|Edit|MultiEdit|NotebookEdit|Bash|Agent|Skill)$",
         "hooks": [
           {
             "type": "command",

package/plugins/litclaude/lib/canonical-skill-resources.mjs

@@ -29,7 +29,7 @@ export const canonicalSkillResourceManifest = Object.freeze(
     ["lib/skill-loop/common.mjs", "c65eec46eaad369b989337876960dcba9a0f25f40320862dc1c4a298a7e7a730"],
     ["lib/skill-loop/config.mjs", "833e73f74ffdf43068a95aa6c50dc29e9080b0549871bdc0a5669a01c752cba6"],
     ["lib/skill-loop/curator.mjs", "6776eb46fb0c1f79a2a217f495b2195e54cac044f61dfe9298447c9b2bd2de76"],
-    ["lib/skill-loop/hook-runtime.mjs", "128f7ce2897a1197d90b49bf9284d0a2b8d53d8e5b68ef9dcbb84e0021f83b5e"],
+    ["lib/skill-loop/hook-runtime.mjs", "34af32eb44e04aed2f452dcc01556f4f113b9e4896bcdb633402c4e273763006"],
     ["lib/skill-loop/hook-state.mjs", "cbe544247069ee004acb389f70ef7d9f25f0afd8a5df9c5567c365bf47989938"],
     ["lib/skill-loop/ledger.mjs", "5367b62c21f8bad2e8efb34caa9e2a5c79de85d9d762d7a583cc66ea9da325e5"],
     ["lib/skill-loop/mutation-transaction.mjs", "485b871b3cc5e8c3234df9bf0a84f240fddc4f91dbff94607d1e046248bf33f9"],

package/plugins/litclaude/lib/skill-loop/hook-runtime.mjs

@@ -4,6 +4,7 @@ import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 
 import { containsSecret } from "../secret-shapes.mjs";
 import { recordObservation } from "../skill-observer.mjs";
+import { SKILL_ID } from "./common.mjs";
 import { readSkillLoopConfig } from "./config.mjs";
 import { runCurator, SESSION_START_CURATOR_LIMITS } from "./curator.mjs";
 import {
@@ -73,7 +74,20 @@ function resolveInsideSkillRoot(skillRoot, requested) {
   return /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(skillId) ? skillId : null;
 }
 
-export function skillIdFromRead(input, workspaceRoot, pluginRoot) {
+function skillIdFromSkillTool(raw) {
+  if (typeof raw !== "string") return null;
+  const separator = raw.indexOf(":");
+  if (separator === -1) return SKILL_ID.test(raw) ? raw : null;
+  const plugin = raw.slice(0, separator);
+  const name = raw.slice(separator + 1);
+  if (plugin.length === 0 || name.length === 0 || name.includes(":")) return null;
+  return SKILL_ID.test(name) ? name : null;
+}
+
+export function skillIdFromToolUse(input, workspaceRoot, pluginRoot) {
+  if (input?.tool_name === "Skill") {
+    return skillIdFromSkillTool(input?.tool_input?.skill);
+  }
   if (input?.tool_name !== "Read" || typeof input?.tool_input?.file_path !== "string"
     || input.tool_input.file_path.length < 1 || input.tool_input.file_path.length > MAX_READ_PATH_CHARS) return null;
   const requested = isAbsolute(input.tool_input.file_path)
@@ -85,7 +99,7 @@ export function skillIdFromRead(input, workspaceRoot, pluginRoot) {
 
 export function observePreToolUse(root, input, pluginRoot) {
   if (typeof input?.session_id !== "string") return null;
-  const skillId = skillIdFromRead(input, root, pluginRoot);
+  const skillId = skillIdFromToolUse(input, root, pluginRoot);
   const recorded = recordToolIteration(root, input.session_id, skillId ?? undefined);
   if (recorded && skillId) recordSkillConsult(root, skillId);
   return recorded ? skillId : null;