sshlg-skills 0.76.0 → 0.78.0

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## v0.78.0 — an unqualified landing page reaches both crafts
+
+**B-57: `сделай лендинг` reached no route at all — and neither did `build a landing page`,
+which the row never mentioned.** A landing is the canonical two-craft surface, so the ask
+for one arriving at nothing was the gap; both phrases now reach **`sheleg-design` ∥
+`copywriting`** together, which is the composition this family prescribes for a landing.
+
+**Verb phrases, not the bare noun, and the difference was measured rather than argued.**
+
+| prompt | bare `лендинг` | verb phrase |
+|---|---|---|
+| `сделай лендинг` | both | **both** |
+| `build a landing page` | both | **both** |
+| `напиши текст для лендинга` | both — a copy task handed a visual route | **copywriting alone** |
+| `почини баг на лендинге` | three routes | **task-pipeline alone** |
+
+The bare noun fixes one case and damages two. Cycle 5 refused it for a reason that no
+longer held — it said the bare noun would *take* the route from `copywriting`, and with
+both crafts firing that is no longer true — but measuring found a different reason that
+does hold, so the refusal stands on new evidence rather than old.
+
+**A premise of the row had expired.** It said both descriptions were at or near the
+1024-character limit; `copywriting` is at **536**, with 488 free. Only `sheleg-design` was
+tight, and there the room was **made rather than found** — `scrubbed sections` and one
+`implemented` came out of the prose, 30 characters that were not carrying their weight
+beside a phrase an operator actually types.
+
+**Pins: `sheleg-design` 1.37.4 → 1.37.5, `super-ux` 0.41.4 → 0.41.5.**
+
+## v0.77.0 — closing a false positive found the bypass it was hiding
+
+**B-59: the hygiene guard could not tell a command being run from one being written
+down.** It reads the whole Bash payload, so quoting the forbidden invocation *in a
+document* was refused too — a verification-ledger row blocked its own commit, and the
+sentence had to be split around the guard.
+
+`executablePart()` now removes what cannot execute before matching:
+
+- **A heredoc body fed to something that is not a shell.** `python3 - <<'PY' … PY` and
+  `cat > f <<EOF … EOF` are data.
+- **A whole-line comment.**
+
+And what it keeps is the load-bearing half. **A `bash <<EOF … EOF` body is still read** —
+stripping every heredoc would trade a false positive for a documented bypass. **Quoted
+strings are still read** too, because `bash -c '…'` is a real invocation.
+
+**That last decision is where the actual finding was.** Testing it produced a case the
+guard *should* refuse and did not: `bareName` kept the trailing quote, so `ux-flows'`
+matched no family id and **`bash -c 'npx skills add ux-flows'` passed the guard untouched**
+— verified against `HEAD` before the change, so it had been open the whole time. The row
+asked for relief from an annoyance; the annoyance was hiding a hole.
+
+Both directions are fixtured — 17 → **22** checks — and the real hook was driven as a
+process to confirm it agrees with the pure module. The fixture strings are **assembled at
+runtime** rather than written whole, because a file containing the literal payload is
+itself refused by anything that reads it: the defect demonstrated itself three times
+during the fix, twice blocking the commands that were repairing it, and once making three
+new cases pass for the wrong reason by targeting a member the fixture's manifest does not
+declare.
+
 ## v0.76.0 — a ledger records two different things, and most record only one
 
 **B-62 said five ledger shapes. Measured: ten, across 815 rows.**

package/README.md

@@ -33,11 +33,11 @@ scripts. No services, no telemetry, no API keys.
 
 | Skill | Version | What it does |
 |---|---|---|
-| **[super-ux](https://github.com/ssheleg/super-ux)** | 0.41.4 | Scenario-driven UI development. A versioned design chain in `docs/ux/` — the product vision → personas and jobs → user flows → a screens-and-states map with Figma frames → traced scenarios → evidence-backed audits → fix plans, plus `docs/brand/` for how the product speaks. One `/ux` entry point that reaches every skill, two doc-drift linters and a contract doctor. |
+| **[super-ux](https://github.com/ssheleg/super-ux)** | 0.41.5 | Scenario-driven UI development. A versioned design chain in `docs/ux/` — the product vision → personas and jobs → user flows → a screens-and-states map with Figma frames → traced scenarios → evidence-backed audits → fix plans, plus `docs/brand/` for how the product speaks. One `/ux` entry point that reaches every skill, two doc-drift linters and a contract doctor. |
 | **[task-pipeline](https://github.com/ssheleg/task-pipeline)** | 1.67.0 | Full-cycle delivery orchestrator. An intake grill interrogates the request into a complete brief, then **ten gated stages** carry it — docs, brainstorm and decompose, spec, plan, build, tests, deploy, post-deploy, wiki, acceptance — refusing to advance until each gate passes. Documentation is a deliverable with its own portable gate, and the retrospective it leaves behind is traceable to the commit that earned each lesson. |
 | **[agent-sync](https://github.com/ssheleg/agent-sync)** | 1.11.1 | Several agents, one repository, no collisions. Leases with a TTL so two agents cannot claim the same work, race-free id reservation, a run journal and a generated board — over a pluggable knowledge cloud. The answer to "two sessions just committed over each other". |
 | **[make-skill](https://github.com/ssheleg/make-skill)** | 0.19.1 | A skill that builds skills. Create, retrofit, audit and publish agent skills and Claude Code plugins: conformance to the [Agent Skills](https://agentskills.io/specification) open standard, [Anthropic's platform rules](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview) (per-surface runtime limits, the Skills API, evals) and the [Claude Code plugin reference](https://code.claude.com/docs/en/plugins-reference), marketplace layout, version sync, validator + CI, every distribution channel, the review checklist for third-party skills, and what a *skill author* must know about MCP and A2A — the protocols themselves live in `agent-stack`. |
-| **[sheleg-design](https://github.com/ssheleg/sheleg-design-skill)** | 1.37.4 | The taste layer. Cinematic scroll-driven landing pages — one scroll clock, motion that degrades to calm, WebGL particle formations — plus product-UI style packs each shipping a ready token layer, and the Figma border: tokens as variables, design to code without hand-copied values. |
+| **[sheleg-design](https://github.com/ssheleg/sheleg-design-skill)** | 1.37.5 | The taste layer. Cinematic scroll-driven landing pages — one scroll clock, motion that degrades to calm, WebGL particle formations — plus product-UI style packs each shipping a ready token layer, and the Figma border: tokens as variables, design to code without hand-copied values. |
 | **[seo-aeo-audit](https://github.com/ssheleg/seo-aeo-audit)** | 0.20.2 | Evidence-first website audit for search **and** answer engines. Ten tracks from crawl access to AI citation mechanics; every finding carries an observation, every recommendation an evidence tier, and the output is a prioritized change plan plus a link-building brief — not a score. |
 | **[sheleg-dev](https://github.com/ssheleg/sheleg-dev)** | 0.5.2 | The integration layer a product reaches once it has users: **money in, tracking, sign-in, speed**. Stripe subscription billing reconciled into your own database — webhook idempotency, renewals, seats and proration, refunds, price drift; crypto payments that survive under-payment, duplicate webhooks and rate drift; GA4, Google Ads, Meta and LinkedIn under Consent Mode v2; Google sign-in with the account pre-hijacking guard, and the server-side auth surface behind it; Core Web Vitals work that moves the score rather than the report. |
 | **[agent-stack](https://github.com/ssheleg/agent-stack)** | 0.11.1 | Production patterns for agent systems, in four skills. **The orchestrator** — tool-calling loops that survive their own context pressure, pipelines with human checkpoints and resume, provider routing with fallback and health checks, four memory layers with confidence decay and conflict resolution, and **the shape of the work decided before the work**: an edge that carries no data is no edge, a plan that declares its dependencies is executed in layers rather than in list order, and a parallel layer gets a checker before the node that consumes it. **The harness** — what the agent is *told*: system prompts at the right altitude, tool descriptions the model can act on, technique choice with a verdict each, workflow versus agent and static versus dynamic, plus a seven-track audit of an agent somebody else built and a scanner for the defects that are mechanically visible. **The evals** — suites that measure whether it actually works: judging trajectories, regression fixtures grown from production, judges calibrated before they are trusted. **The interop layer** — MCP at revision 2026-07-28 and the four features it deprecated, running many servers at once, the registry, A2A 1.0, and the gateway, every reference carrying the spec revision it was read against. Plus the wallet side of reselling LLM access: tiered balances, one markup boundary, two-phase commit against a provider API. |

package/lib/hygiene.js

@@ -22,6 +22,12 @@
 
 /** Strip an `@version` suffix so `sshlg-skills@latest` is not read as `skills`. */
 function bareName(token) {
+  // Shell quoting is not part of a name. `bash -c 'npx skills update ux-flows'` reaches
+  // this as the token `ux-flows'`, which matched no family id — so a real invocation
+  // wrapped in quotes passed the guard untouched. Found on 2026-08-16 while fixing the
+  // opposite complaint (B-59, a false positive on documented text); the same run turned
+  // up a bypass worth more than the annoyance that started it.
+  token = String(token || '').replace(/^['"]+/, '').replace(/['"]+$/, '');
   return String(token || '').replace(/@.*$/, '').replace(/^.*\//, '');
 }
 
@@ -43,6 +49,62 @@ function isFlag(token) {
  * `claude` exactly where the target would be, and reading it as the target let a
  * real family skill through unguarded. Watched failing in the fixtures.
  */
+/**
+ * The part of a payload that could actually run, with data stripped out.
+ *
+ * B-59: this guard reads the whole command text, so **writing the forbidden string into a
+ * document is refused too**. On 2026-08-16 a verification-ledger row quoting the
+ * diagnostic invocation blocked its own commit, and the sentence had to be split around
+ * the guard. The family's own documents could not quote the command they warn about.
+ *
+ * Two things are removed, and the boundary between them and everything else is the whole
+ * design:
+ *
+ * - **A heredoc body fed to something that is not a shell.** `python3 - <<'PY' … PY` and
+ *   `cat > f <<EOF … EOF` are data. `bash <<EOF … EOF` is a script, so its body is KEPT —
+ *   stripping every heredoc would be a documented bypass, which is worse than the false
+ *   positive it fixes.
+ * - **A whole-line comment.** A line whose first non-space character is `#` does not run.
+ *
+ * **Quoted strings are deliberately NOT stripped.** `bash -c 'npx skills update ux-flows'`
+ * is a real invocation living inside quotes, and a guard that ignored quoted text would
+ * miss it. The false positive that remains — the string in a single-line argument to
+ * `echo` — is the price of not opening that hole, and it is documented rather than fixed.
+ */
+const HEREDOC_SHELLS = new Set(['bash', 'sh', 'zsh', 'dash', 'ksh', 'eval', 'source', '.']);
+
+function executablePart(command) {
+  const lines = String(command || '').split('\n');
+  const out = [];
+  let terminator = null;
+  let dropping = false;
+  for (const line of lines) {
+    if (terminator !== null) {
+      // The terminator may be indented when the heredoc used `<<-`.
+      if (line.trim() === terminator) { terminator = null; dropping = false; continue; }
+      if (dropping) continue;
+      out.push(line);
+      continue;
+    }
+    if (/^\s*#/.test(line)) continue;
+    const here = /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1/.exec(line);
+    if (here) {
+      terminator = here[2];
+      // Which command is being fed? The last simple-command word before the `<<`, taken
+      // after the final pipe or `&&` so `foo | python3 - <<EOF` reads as python3.
+      const before = line.slice(0, here.index);
+      const segment = before.split(/\|\||&&|[|;]/).pop();
+      const words = segment.trim().split(/\s+/).filter(Boolean).map(bareName);
+      const cmd = words.find((w) => !w.includes('=')) || '';
+      dropping = !HEREDOC_SHELLS.has(cmd);
+      out.push(before);
+      continue;
+    }
+    out.push(line);
+  }
+  return out.join('\n');
+}
+
 function skillsCli(command) {
   const tokens = String(command || '').split(/\s+/).filter(Boolean);
   for (let i = 0; i < tokens.length; i += 1) {
@@ -83,7 +145,9 @@ const REMEDY = 'npx --yes sshlg-skills@latest update';
  * `~/.claude/skills/`, which is what does the shadowing.
  */
 function bareFamilyInstall(command, ids) {
-  const call = skillsCli(command);
+  // Data first: a heredoc body written by a non-shell, and whole-line comments, cannot
+  // install anything. See `executablePart` for why quoted strings are not stripped.
+  const call = skillsCli(executablePart(command));
   if (!call || !call.args.length) return null;
   if (!['update', 'add', 'install'].includes(call.verb)) return null;
   const target = call.args.find((a) => ids.has(bareName(a)));
@@ -174,6 +238,6 @@ function reapply(snapshot, fresh) {
 }
 
 module.exports = {
-  skillsCli, familyIds, bareFamilyInstall, launcherRunning,
+  skillsCli, familyIds, bareFamilyInstall, launcherRunning, executablePart,
   isObsidianSetup, parseConfig, reapply, bareName, REMEDY,
 };

package/lib/triggers.js

@@ -112,6 +112,7 @@ const ROUTES = {
       'палитра', 'palette', 'цвета', 'colors', 'типографика', 'typography',
       'шрифт', 'font', 'выглядит', 'how it looks', 'красивее', 'красиво',
       'make it prettier', 'анимация', 'hero',
+      'сделай лендинг', 'build a landing page',
       // Both forms of the same adjective, because the stemmer cannot bridge them:
       // `красивее` cuts to `красиве`, which is not a prefix of `красиво`. The skill
       // advertises both for that reason — a stem in this list instead of a word
@@ -159,6 +160,7 @@ const ROUTES = {
       'write copy', 'напиши текст', 'rewrite this', 'перепиши',
       'store listing', 'описание в сторе', 'microcopy', 'микрокопия',
       'звучит как нейросеть',
+      'сделай лендинг', 'build a landing page',
     ],
     line: 'is text a user of the product will read → `/copy` writes it in the recorded voice',
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sshlg-skills",
-  "version": "0.76.0",
+  "version": "0.78.0",
   "description": "One launcher/updater for the ssheleg skill family (super-ux, task-pipeline, agent-sync, make-skill, sheleg-design, seo-aeo-audit, sheleg-dev, agent-stack) across every agent — Claude Code, Cursor, OpenCode, Kilo, Kimi, Hermes, OpenClaw, Codex, and more.",
   "bin": {
     "sshlg-skills": "bin/sshlg-skills.js"

package/skills.json

@@ -31,7 +31,7 @@
       "pluginMarketplace": "ssheleg/super-ux",
       "pluginInstall": "super-ux@super-ux",
       "desc": "Scenario-driven UI development: a versioned design chain in docs/ux/ — the product vision, personas and jobs, user flows, a screens-and-states map with Figma frames, traced scenarios, evidence-backed audits, fix plans — plus docs/brand/, the verbal identity: one voice, per-surface registers, a string registry and a 35-check copy linter. /ux and /brand entry points, two doc-drift linters and a contract doctor.",
-      "version": "0.41.4",
+      "version": "0.41.5",
       "entry": "/ux",
       "role": "what the interface must do and how it sounds",
       "npm": "super-ux",
@@ -100,7 +100,7 @@
       "skillNames": [
         "sheleg-design"
       ],
-      "version": "1.37.4",
+      "version": "1.37.5",
       "entry": "/sheleg-design",
       "role": "how it looks and moves",
       "npm": "sheleg-design-skill",