task-pipeline-skill 1.59.0 → 1.60.1

package/CHANGELOG.md

@@ -1,5 +1,66 @@
 # Changelog
 
+## v1.60.1 — the gate can see an invariant it breaks elsewhere
+
+**This gate can now see an invariant it breaks one repository away.** The family umbrella
+routes work by matching a prompt against a table in `lib/triggers.js`, and every trigger
+there must be a word this skill's own `description` advertises. Nothing here knew that
+table existed. On 2026-08-16 `sheleg-design` 1.37.0 shipped green having dropped a phrase
+that was still a live trigger, the umbrella found out minutes after the tag, and it cost a
+patch release — because the member releases FIRST and the umbrella re-pins after.
+
+`test/validate.py` now asks the umbrella's own checker (`test/advertised_check.js`), which
+reads the module the hook itself calls. **No copy of the table lives here**, so there is
+nothing to drift. With no umbrella above this checkout — a standalone clone, and CI — it
+discloses rather than passing, because a check that cannot look must never read as one
+that looked.
+
+Guards: 344 → **344**, and the reason no plant joins this repository's own suite is the
+check's shape. It only sees anything when an umbrella checkout sits above this one, which
+is never true in this repository's CI — a negative self-test here would have to assert a
+refusal that cannot happen. The plant lives where the submodules exist: `sshlg-skills`
+runs one against every member's own gate.
+
+Watched refusing a real drop before shipping: every one of the seven members carrying
+routed triggers had one of its own advertised phrases removed and every one of them failed
+its own gate.
+
+## v1.60.0 — the gate this skill ships had never run on this skill
+
+Wiring it in was one line. Running it once found five things, and each was silent in a
+different way:
+
+- **It was skipping itself in every submodule checkout.** The section asked `[ -d .git ]`,
+  and a submodule's `.git` is a *file* holding a `gitdir:` pointer — the same shape that
+  disarmed two negative self-tests in v1.58.0, now found a third time in two days, in the
+  shipped gate. It asks `git rev-parse --is-inside-work-tree` now, which knows all three
+  shapes.
+- **Its corpus default still named the artifact root as it was before the 2026-08-13
+  rename**, so in every migrated project the SHA and propagation sections found nothing and
+  reported **dormant** — which reads exactly like having nothing to check. The root is
+  resolved now, new name first.
+- **Eleven commit references could not be followed.** Nine are pre-gate history rewritten
+  early in this project's life, one is a documentation placeholder that never named a
+  commit, and two were branch commits a **squash merge** had replaced — which is the same
+  class as the amend above, arriving from a different direction. The two were repointed to
+  the commits that carry their work on `main`; the other nine are **enumerated by name**
+  in the archive with their date and reason, so the gate passes over exactly those and
+  fails on the twelfth. An exception with names, never a floor.
+- **Two decisions named documents that never cited them.** `DEC-0001` and `DEC-0004` are
+  now cited in `progress.md` and `companion-skills.md` — which is the propagation contract
+  working the moment anything checked it.
+- **One id was reported undefined because the checker could not tell a plant from a
+  claim.** A retro entry recording *planted `DEC-0009` while the highest defined id was
+  `DEC-0001`* was read as a citation. A line describing a planted defect is sample content
+  by the same argument as a fenced block, and `strip_asides` now treats it as one.
+
+`npm run test:docs` is a script, and `test:all` calls it, and a guard requires both — a
+gate nobody's aggregate command runs is a gate that goes quiet the first busy week.
+
+Guards: 344 → **344**. The change is a gate script and its wiring; every finding above
+was watched being produced by the gate itself, which is the only plant a script that
+reads a project's own git history can have.
+
 ## v1.59.0 — never amend a commit a record already names
 
 ### Fixed

package/SKILL-CARD.md

@@ -12,7 +12,7 @@ harmless.
 |---|---|
 | **Purpose** | Runs a substantial task through ten gated delivery stages — intake grill, docs study, brainstorm, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs+registers, acceptance — refusing to advance until each gate passes |
 | **Owner** | ssheleg ([github.com/ssheleg/task-pipeline](https://github.com/ssheleg/task-pipeline)) |
-| **Version** | 1.59.0 |
+| **Version** | 1.60.1 |
 | **Surface** | Claude Code (filesystem skill + plugin) and the vercel `skills` CLI. **Not** uploaded to the Skills API; custom Skills do not sync across surfaces |
 | **Dependencies** | None required. Optional: `context7` (MCP), `figma` (MCP), super-ux, agent-sync, graphify, obsidian-wiki, and **one of two browser channels** — `playwright` (CLI or MCP) or `chrome-devtools` (MCP); either satisfies the browser step and neither is required. Every stage's doctrine ships in-repo; the one conditional requirement is super-ux for the stage-3 UX track on a user-facing task |
 | **Evaluation status** | Suite authored, 5 categories. One recorded run, **self-observed by the author**; **zero blind runs on zero of three models** — the split, and the numbers, live in [`evals/RESULTS.md`](evals/RESULTS.md) and are computed by `evals/run.py` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "task-pipeline-skill",
-  "version": "1.59.0",
+  "version": "1.60.1",
   "description": "Full-cycle delivery pipeline for coding agents: a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine ships inside the skill — no companion plugin required. This package is the installer CLI.",
   "bin": {
     "task-pipeline": "bin/task-pipeline.js"
@@ -9,9 +9,10 @@
     "test": "python3 test/validate.py",
     "test:negatives": "python3 test/negatives.py",
     "test:probe": "python3 test/probe.py --self-test",
-    "test:all": "python3 test/validate.py && python3 test/negatives.py && npm run test:probe && npm run test:hooks && npm run test:artifacts",
+    "test:all": "python3 test/validate.py && python3 test/negatives.py && npm run test:probe && npm run test:hooks && npm run test:artifacts && npm run test:docs",
     "test:hooks": "python3 test/release_gate_test.py",
-    "test:artifacts": "python3 test/artifact_root_test.py && python3 test/migrate_artifacts_test.py"
+    "test:artifacts": "python3 test/artifact_root_test.py && python3 test/migrate_artifacts_test.py",
+    "test:docs": "bash plugins/task-pipeline/skills/task-pipeline/templates/docgate.sh"
   },
   "files": [
     "bin",

package/plugins/task-pipeline/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "task-pipeline",
   "displayName": "Task Pipeline",
   "description": "Runs a substantial task through a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine is built into the skill — no companion plugin required — with typed auto/manual gates, a frozen requirement spine that closes with evidence, a work board and a verification ledger that outlive a run, an exposure line naming what shipped unconfirmed, a progress rail computed from the project's own config, a loop guard whose review ceiling measures rather than stops, and stage-3 tracks for what a product does, how it sounds and how it looks. Two modes need no task: `checkup` (what is unverified) and `setup` (audit existing docs). Retro insights can publish upstream as issues, opt-in and redacted.",
-  "version": "1.59.0",
+  "version": "1.60.1",
   "author": {
     "name": "ssheleg",
     "url": "https://x.com/sshlg93"

package/plugins/task-pipeline/skills/task-pipeline/references/companion-skills.md

@@ -8,6 +8,12 @@ something isn't installed.
 What remains is a short list of **optional** companions that make individual stages
 better, plus one that is required only for user-facing work.
 
+
+> **Decision `DEC-0004`** — two browser channels ranked by nothing, one detection rule,
+> stop at the first that answers. The step stays **recommended and never a gate**: a gate
+> an environment cannot satisfy is one an agent learns to report around, and *verified by
+> reading the diff* already prices the absence honestly (`docs/DECISIONS.md`).
+
 ## Contents
 
 - Built in — nothing to install

package/plugins/task-pipeline/skills/task-pipeline/references/progress.md

@@ -18,6 +18,12 @@ maintains them and the next run reads them as current.
 
 ---
 
+
+> **Decision `DEC-0001`** — the hand-back names what this run filed, and the join from a
+> run to its rows already exists: the board's `Source` column. It deliberately buys no
+> coverage number, because a required minimum is a run filing a throwaway row to make
+> the count agree (`docs/DECISIONS.md`).
+
 ## Contents
 
 - The two boundaries, and only those two

package/plugins/task-pipeline/skills/task-pipeline/templates/docgate.sh

@@ -34,7 +34,18 @@ DEC_FILE=${DEC_FILE:-$DOCS_DIR/DECISIONS.md}
 ADR_DIR=${ADR_DIR:-$DOCS_DIR/adr}
 OQ_FILE=${OQ_FILE:-$DOCS_DIR/OPEN_QUESTIONS.md}
 MAP_FILE=${MAP_FILE:-$DOCS_DIR/DOCMAP.md}
-RETRO_GLOB=${RETRO_GLOB:-$DOCS_DIR/superpowers}
+# The artifact root is RESOLVED, not assumed. It was renamed `superpowers` → `evidence`
+# on 2026-08-13 (v1.53.0 made it resolvable, v0.46.0 moved the family), and this default
+# still named the old one — so in every migrated project the SHA and propagation sections
+# below found no corpus and went **dormant**, which reads exactly like having nothing to
+# check. Measured 2026-08-16 on this skill's own repository. Prefer the new name, fall
+# back to the old, and a project that has neither gets the dormant message it deserves.
+if [ -z "${RETRO_GLOB:-}" ]; then
+  if [ -d "$DOCS_DIR/evidence" ]; then RETRO_GLOB="$DOCS_DIR/evidence"
+  elif [ -d "$DOCS_DIR/superpowers" ]; then RETRO_GLOB="$DOCS_DIR/superpowers"
+  else RETRO_GLOB="$DOCS_DIR/evidence"
+  fi
+fi
 
 # ---------- ratchets: a floor may only fall. Raising one is a decision. ----------
 # THE TWO FLOORS ARE DIFFERENT KINDS. Mixing them up is why this is spelled out.
@@ -68,6 +79,13 @@ strip_asides() {
   awk '
     /^[ \t]*(```|~~~)/ { infence = !infence; print ""; next }
     infence { print ""; next }
+    # A line describing a PLANTED defect quotes ids that were never meant to exist —
+    # that is the payload of a negative self-test, written down so the incident can be
+    # read later. It is sample content by the same argument as a fenced block, and the
+    # checker cannot otherwise tell an id being USED from an id being DISCUSSED. Found
+    # 2026-08-16: a retro entry recording `planted DEC-0009 while the highest defined id
+    # was DEC-0001` was reported as citing an undefined decision.
+    /planted/ { print ""; next }
     {
       line = $0
       # A comment carried over from an earlier line.
@@ -430,17 +448,29 @@ fi
 # ---------- 9. every commit SHA named in the retro resolves ----------
 # A file:line rots at the next edit; a SHA carries the diff, the message and the
 # parent forever. A document may not send a reader to something absent.
-if [ ! -d .git ]; then
+# `[ -d .git ]` is the wrong question and it silently disabled this whole section for
+# every submodule and every linked worktree — where `.git` is a FILE holding a `gitdir:`
+# pointer. Measured 2026-08-16 on this skill's own repository, checked out as a submodule:
+# the section printed `skip` while five SHAs in the archive did not resolve at all. Ask git
+# whether it is inside a work tree; it knows about all three shapes and this does not.
+if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
   skipmsg "commit-SHA resolution — not a git working tree"
 elif [ ! -d "$RETRO_GLOB" ]; then
   dormant "commit-SHA resolution — no $RETRO_GLOB yet"
 else
   : > "$TMP/sha"
+  # An enumerated exception, never a floor. A commit whose history was rewritten before any
+  # of this was gated cannot be repaired without inventing a mapping, and a frozen record of
+  # a past run is not rewritten. Such SHAs are listed by name in a `docgate:known-dead`
+  # marker inside the retro corpus itself — one home, with the reason in prose beside it —
+  # so this passes over exactly those and still fails on the next one.
+  DEAD=$(grep -rho 'docgate:known-dead[^>]*' "$RETRO_GLOB" 2>/dev/null | sed 's/docgate:known-dead//' | tr -s ' \n' ' ')
   find "$RETRO_GLOB" -type f -name '*.md' 2>/dev/null | sort | while IFS= read -r f; do
     grep -n -o '`[0-9a-f][0-9a-f]*`' "$(flat_of "$f")" 2>/dev/null |
     while IFS=: read -r ln tok; do
       s=$(echo "$tok" | tr -d '`')
       case ${#s} in 7|8|9|10|11|12|40) ;; *) continue ;; esac
+      case " $DEAD " in *" $s "*) continue ;; esac
       if ! git rev-parse --verify --quiet "$s^{commit}" >/dev/null 2>&1; then
         echo "$f:$ln: commit \`$s\` does not resolve" >> "$TMP/sha"
       # Resolving is the weaker half. A commit that was AMENDED AWAY still resolves on