Commit Graph

65 Commits

Author SHA1 Message Date
Jeremy Dawes 3c4b3d2963 Address project-health improvements from MCP monorepo audit (#48)
Permission Auditor: add detection for __NEW_LINE_* artefacts, loop body
fragments (break, continue, echo), and base64 secret patterns.
Context Auditor: add wrangler.jsonc observability check for CF projects.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-27 00:43:32 +11:00
Jeremy Dawes 5a0867366b Use .claude/ project directories instead of /tmp for generated artifacts
Scripts, screenshots, and reports are part of a project's evolution — save
them to .claude/scripts/, .claude/screenshots/, .claude/artifacts/ instead
of /tmp where they're lost. Scripts are committed; screenshots/artifacts
are gitignored. Updated gitignore templates, agent prompts, and skill-creator.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-27 00:42:00 +11:00
Jeremy Dawes 992ece8c04 Add "scripts over bash chains" guidance to skill-creator and project-health
Skills that scan files or collect data should instruct Claude to write a
script rather than chain many bash commands — reduces approval prompts
from N to 2 (one Write + one Bash). Also updated project-health agent
prompts to prefer Read/Glob/Grep and scripted analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-27 00:36:34 +11:00
Jeremy Dawes d53ff36c4d Expand permission presets with process mgmt, security, macOS, media tools
Add commonly-approved commands found across 56 active projects:
- Universal Base: pkill, lsof, pgrep, timeout, openssl, gitleaks, base64
- JS/TS: pm2, playwright-cli
- New presets: macOS, LLM CLIs, Firebase, Media Processing

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-27 00:30:06 +11:00
Jeremy Dawes b6eba750de feat: add slash commands for tanstack-start, session, release, ux-audit
/tanstack-start — build a full-stack TanStack Start app
/session [start|checkpoint|wrap|resume] — manage dev sessions
/release [version] — prepare and publish GitHub releases
/ux-audit [url] — run UX walkthrough and QA sweep

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-26 23:18:27 +11:00
Jeremy Dawes 36ee5a104c Replace project-kickoff + context-manager with /project-health command
- Add commands/project-health.md as slash command (/project-health)
- Remove skills/project-kickoff/ (merged into project-health)
- Remove skills/context-manager/ (merged into project-health)
- Update plugin.json description
- project-health skill retains all reference files from both old skills

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 13:31:53 +11:00
Jeremy Dawes a38f438496 Expand Universal Base preset with missing shell commands
Added: cd, rm, rmdir, ln, readlink, realpath, stat, file, chown,
gunzip, yq, cut, tr, uniq, xargs, basename, dirname, kill, export,
source, id, whoami, hostname, uptime.

These are all commands that could trigger permission prompts during
normal development. The goal is zero prompts after project setup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 10:38:48 +11:00
Jeremy Dawes 55e9e42f9a Add project-health skill: merged project-kickoff + context-manager
New unified skill that handles the full project config lifecycle:
- Setup: permissions, CLAUDE.md, .gitignore from scratch
- Health check: audit permissions + context + docs in one pass
- Tidy: clean leaked secrets, cruft, legacy syntax
- Capture: save session learnings to CLAUDE.md
- Add preset: merge new permission presets
- Restructure: split oversized files, resolve overlaps

Key changes from predecessors:
- Sub-agents for heavy analysis (keeps main context clean)
- No Python scripts (replaced by Task agents using native tools)
- Merged templates from both skills into one reference file
- MCP auto-discovery via ToolSearch (not hardcoded server names)
- Documents all permission wildcard findings (mcp__* doesn't work)

Old skills (project-kickoff, context-manager) left in place for now.
Remove once project-health is validated.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 10:36:48 +11:00
Jeremy Dawes 6830fb11a8 Rewrite project-kickoff skill for zero-prompt permission setup
- Goal: never see a permission prompt after project setup
- Auto-discover MCP servers via ToolSearch (can't blanket wildcard)
- Document what does NOT work: mcp__*, mcp__*__*, gh * subcommand bug
- Always include Universal Base + detected language + deployment presets
- Include more rather than less — unused permissions cost nothing
- Document hot-reload limitation and shadow-not-merge behaviour

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 09:55:28 +11:00
Jeremy Dawes 4ceaa3d3d8 Add explicit gh subcommands — Bash(gh *) has known matching bug
gh issue, gh pr, etc. sometimes don't match Bash(gh *) alone.
Adding explicit subcommand patterns as workaround.
Also confirmed mcp__*__* does NOT work for blanket MCP permissions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 09:51:52 +11:00
Jeremy Dawes aa86e46290 Fix: mcp__* blanket wildcard doesn't work, need per-server wildcards
Discovered that mcp__* does NOT match across the __ boundary.
You must use mcp__servername__* for each server individually.
Updated docs and removed incorrect blanket recommendation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 09:45:33 +11:00
Jeremy Dawes 07b093bdab Overhaul permission presets: generic, comprehensive, all languages
- Replace Jez-specific MCP tool listings with generic patterns (mcp__*)
- Add language presets: JS/TS, Python, PHP, Go, Rust, Ruby
- Add deployment presets: Cloudflare Worker, Vercel
- Add extras: Docker/K8s, Database, Cloud CLIs, AI/GPU
- Expand Universal Base with file ops, text processing, system, network
- Fix deprecated colon syntax (Bash(gh repo:*) → Bash(gh *))
- Document hot-reload limitation and "don't ask again" format difference
- Update SKILL.md with new project type detection table

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 09:37:27 +11:00
Jeremy Dawes 1fcdd613a9 feat: add responsiveness-check skill for viewport layout testing
Replaces PR #40 with a focused version in plugins/dev-tools/. Tests layout
responsiveness only (not general accessibility), uses single-session resize
instead of per-breakpoint sub-agents, and detects layout transitions between
adjacent viewport widths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 01:14:14 +11:00
Jeremy Dawes 8090fbb672 feat: add project-kickoff and gemini-guide skills
project-kickoff: Bootstrap new projects with curated permission presets
(cloudflare, vercel, node, python, ops/admin), CLAUDE.md templates, and
.gitignore. Includes tidy_permissions.py to analyse messy settings files
— detects leaked secrets, shell fragments, deprecated MCP refs, and
consolidation opportunities.

gemini-guide: Documentation lookup skill for Gemini API — routes queries
to local cached docs (~/Documents/google-gemini-context/) and provides
correction tables for deprecated SDK patterns. Trial of the "guide agent"
pattern (brings docs to Claude, vs gemini-peer-review which sends code
to Gemini).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 23:25:36 +11:00
Jez a1b085f3e9 feat: restructure into 8 plugins, add Shopify store management
Move all 24 skills from flat skills/ directory into 7 category-based
plugins under plugins/. Add new Shopify plugin with 3 skills
(shopify-setup, shopify-products, shopify-content) for Admin API
access, product CRUD/bulk import, and content management.

Update marketplace.json to new plugin format, fix script paths in
skill-creator, context-manager, and vite-flare-starter SKILL.md files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 16:18:17 +11:00