bastien
6394fa79fc
lib/doctor-vendored.sh check_vendored_skills: every curl-pinned lock entry has its files under skills-external/ (list, dict, single-path shapes), every link.sh EXTERNAL_SKILLS name is symlinked into ~/.claude/skills when the active profile lists it, parked names reported not failed, hints make plugin / make link. Lock shape-validated (warn, never a traceback), profile and item names allowlisted before becoming paths. Suite: 11 cases.
585 lines
25 KiB
Bash
585 lines
25 KiB
Bash
#!/usr/bin/env bash
|
|
# ============================================================
|
|
# Claude Code — Config doctor
|
|
# Diagnoses symlinks, prerequisites, plugins, permissions,
|
|
# and token budget. Run after install or when something breaks.
|
|
# ============================================================
|
|
set -euo pipefail
|
|
|
|
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'; NC='\033[0m'
|
|
ERRORS=0; WARNS=0
|
|
|
|
pass() { echo -e " ${GREEN}✓${NC} $1"; }
|
|
fail() { echo -e " ${RED}✗${NC} $1"; ERRORS=$((ERRORS + 1)); }
|
|
warn() { echo -e " ${YELLOW}⚠${NC} $1"; WARNS=$((WARNS + 1)); }
|
|
info() { echo -e " ${BLUE}→${NC} $1"; }
|
|
|
|
REPO="$(cd "$(dirname "$0")" && pwd)"
|
|
VERSION=$(cat "$REPO/version.txt" 2>/dev/null || echo "unknown")
|
|
|
|
# Load shared detection library
|
|
# shellcheck source=lib/detect-plugins.sh disable=SC1091
|
|
source "$REPO/lib/detect-plugins.sh"
|
|
# shellcheck source=lib/gstack-playwright.sh disable=SC1091
|
|
source "$REPO/lib/gstack-playwright.sh"
|
|
# shellcheck source=lib/doctor-vendored.sh disable=SC1091
|
|
source "$REPO/lib/doctor-vendored.sh"
|
|
|
|
echo ""
|
|
echo "═══ claude-config doctor (v${VERSION}) ═══"
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 1. Core symlinks
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Symlinks ──"
|
|
# Expected: CLAUDE.md, settings.json, agents, skills, templates, hooks/session-start.sh
|
|
_EXPECTED_LINKS=7
|
|
_LINK_PASS=0
|
|
|
|
check_symlink() {
|
|
local name="$1"
|
|
local target="$HOME/.claude/$name"
|
|
|
|
if [ ! -e "$target" ] && [ ! -L "$target" ]; then
|
|
fail "$HOME/.claude/$name — MISSING"
|
|
return
|
|
fi
|
|
|
|
# Broken symlink: points at a target that no longer exists.
|
|
if [ -L "$target" ] && [ ! -e "$target" ]; then
|
|
fail "$HOME/.claude/$name → $(readlink "$target") — BROKEN SYMLINK"
|
|
return
|
|
fi
|
|
|
|
# Correctly wired iff the canonical path lands inside the repo. This is true
|
|
# for a direct symlink (CLAUDE.md, settings.json) AND for a real file reached
|
|
# through a symlinked ANCESTOR dir (hooks/, skills/, agents/, lib/, templates/
|
|
# are dir-level symlinks — their children are real files under $REPO). A stray
|
|
# real copy in ~/.claude resolves to itself (outside $REPO) → still flagged as
|
|
# drift. (LRN-047: the dir-symlink layout is legitimate, must not false-warn.)
|
|
local real
|
|
real=$(readlink -f "$target" 2>/dev/null) || real="$target"
|
|
case "$real" in
|
|
"$REPO"/*) pass "$HOME/.claude/$name"; _LINK_PASS=$((_LINK_PASS + 1)) ;;
|
|
*) warn "$HOME/.claude/$name resolves to $real (outside repo — expected a link into $REPO)" ;;
|
|
esac
|
|
}
|
|
|
|
check_symlink "CLAUDE.md"
|
|
# check_symlink only asserts the canonical path lands inside $REPO — after a
|
|
# `git pull` without `link.sh`, ~/.claude/CLAUDE.md can still resolve inside
|
|
# $REPO but at the wrong file (the 29-line project CLAUDE.md instead of
|
|
# CLAUDE.global.md), passing green while the global doctrine is silently gone.
|
|
_claude_md_target=$(readlink "$HOME/.claude/CLAUDE.md" 2>/dev/null || true)
|
|
if [ "$_claude_md_target" != "$REPO/CLAUDE.global.md" ]; then
|
|
# shellcheck disable=SC2088 # literal label, not a tilde-expansion attempt
|
|
warn "~/.claude/CLAUDE.md points to $_claude_md_target — expected \
|
|
$REPO/CLAUDE.global.md; run: bash link.sh"
|
|
fi
|
|
unset _claude_md_target
|
|
check_symlink "settings.json"
|
|
check_symlink "agents"
|
|
check_symlink "skills"
|
|
check_symlink "templates"
|
|
check_symlink "lib"
|
|
check_symlink "hooks/session-start.sh"
|
|
info "Symlinks: ${_LINK_PASS}/${_EXPECTED_LINKS} OK"
|
|
unset _EXPECTED_LINKS _LINK_PASS
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 2. GStack submodule
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── GStack submodule ──"
|
|
|
|
GSTACK_DIR="$REPO/skills-external/gstack"
|
|
if [ -f "$GSTACK_DIR/.git" ] || [ -d "$GSTACK_DIR/.git" ]; then
|
|
pass "Submodule initialized at skills-external/gstack"
|
|
warn "GStack tracks branch = main (no commit hash pin). Review upstream before updating."
|
|
elif [ -d "$GSTACK_DIR" ]; then
|
|
warn "skills-external/gstack exists but submodule not initialized — run: git submodule update --init"
|
|
else
|
|
warn "GStack submodule missing — run: git submodule update --init"
|
|
fi
|
|
|
|
# GStack skills are exposed as PER-SKILL symlinks directly under skills/ (browse,
|
|
# cso, review, …) pointing into skills-external/gstack/ — there is NO single
|
|
# skills/gstack symlink (link.sh deliberately removes it: it duplicated the
|
|
# top-level gstack SKILL.md alongside the per-skill entries). The bin/ +
|
|
# browse/dist/ helper links under skills/gstack/ are checked in §7 Consistency.
|
|
# `|| true` guards pipefail if skills/ is unexpectedly absent (checked above).
|
|
gstack_skill_links=$( { find "$HOME/.claude/skills/" -maxdepth 1 -type l -lname '*skills-external/gstack/*' 2>/dev/null || true; } | wc -l | tr -d ' ')
|
|
if [ "${gstack_skill_links:-0}" -gt 0 ]; then
|
|
pass "GStack: ${gstack_skill_links} skills linked (per-skill symlinks)"
|
|
else
|
|
warn "GStack skills not linked — run: cd skills-external/gstack && ./setup"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 2b. Vendored skills (curl-pinned externals: plugins.lock.json's
|
|
# managed_by:curl entries + link.sh's EXTERNAL_SKILLS array — the OTHER
|
|
# externals the GStack section above does not cover)
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Vendored skills ──"
|
|
# Mirrors lib/profile.sh's active_profile() (read_cache + the
|
|
# blank/"none" -> DEFAULT_PROFILE fallback) without sourcing profile.sh
|
|
# itself (its main() would run unconditionally) and without ever
|
|
# invoking `claude`.
|
|
_dv_active_profile=$(head -n1 "$REPO/.active-profile" 2>/dev/null \
|
|
| tr -d '[:space:]')
|
|
[ -z "$_dv_active_profile" ] && _dv_active_profile="none"
|
|
[ "$_dv_active_profile" = "none" ] && _dv_active_profile="full"
|
|
# .active-profile's value is spliced into a lib/profiles/ path below —
|
|
# reject anything outside the profile-name allowlist before that splice.
|
|
if ! _dv_valid_profile_name "$_dv_active_profile"; then
|
|
warn ".active-profile has invalid value \"$_dv_active_profile\" — \
|
|
falling back to profile full"
|
|
_dv_active_profile="full"
|
|
fi
|
|
_dv_profile_file="$REPO/lib/profiles/$_dv_active_profile.profile"
|
|
if [ -f "$_dv_profile_file" ]; then
|
|
check_vendored_skills "$REPO" "$HOME/.claude" "$_dv_profile_file"
|
|
else
|
|
# Active profile unresolved — every external is expected linked.
|
|
check_vendored_skills "$REPO" "$HOME/.claude"
|
|
fi
|
|
unset _dv_active_profile _dv_profile_file
|
|
|
|
echo ""
|
|
|
|
# ── Playwright browsers (read-only report; NOT nested under gstack — 2 of
|
|
# the 3 registered installs are gsd-pi, not gstack) ──
|
|
echo "── Playwright browsers ──"
|
|
gstack_browsers_report || true
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 3. Prerequisites
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Prerequisites ──"
|
|
|
|
if command -v git &>/dev/null; then
|
|
pass "git $(git --version | awk '{print $3}')"
|
|
else
|
|
fail "git not found"
|
|
fi
|
|
|
|
if command -v node &>/dev/null; then
|
|
NODE_VER=$(node --version | sed 's/v//' | cut -d. -f1)
|
|
if [ "$NODE_VER" -ge 18 ]; then
|
|
pass "Node.js $(node --version)"
|
|
else
|
|
warn "Node.js $(node --version) — need >=18"
|
|
fi
|
|
else
|
|
fail "Node.js not found"
|
|
fi
|
|
|
|
if command -v jq &>/dev/null; then
|
|
pass "jq $(jq --version 2>/dev/null | sed 's/^jq-//')"
|
|
else
|
|
fail "jq not found — statusline & rtk-rewrite hooks require it"
|
|
fi
|
|
|
|
if command -v cargo &>/dev/null; then
|
|
pass "Cargo $(cargo --version | awk '{print $2}')"
|
|
else
|
|
# Cargo does NOT gate RTK: RTK ships as a prebuilt binary and detect_rtk finds
|
|
# it via ~/.cargo/bin or ~/.local/bin (RTK status is shown under Plugins).
|
|
# Cargo is only the Rust toolchain to BUILD RTK from source → optional, info.
|
|
info "Cargo not found (optional — only needed to build RTK from source)"
|
|
fi
|
|
|
|
if command -v python3 &>/dev/null; then
|
|
pass "Python $(python3 --version | awk '{print $2}')"
|
|
else
|
|
warn "Python3 not found"
|
|
fi
|
|
|
|
if command -v claude &>/dev/null; then
|
|
pass "Claude Code $(claude --version 2>/dev/null | head -1 || echo 'installed')"
|
|
else
|
|
fail "Claude Code not found — install from https://code.claude.com"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 4. Key plugins
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Plugins ──"
|
|
|
|
if detect_rtk; then
|
|
pass "RTK installed"
|
|
else
|
|
warn "RTK not installed — run install-plugins.sh"
|
|
fi
|
|
|
|
if detect_superpowers; then
|
|
pass "Superpowers plugin detected"
|
|
else
|
|
fail "Superpowers not detected — orchestrators (/init-project, /ship-feature) will fail"
|
|
fi
|
|
|
|
if detect_context7; then
|
|
pass "Context7 CLI (ctx7) installed"
|
|
else
|
|
info "Context7 CLI not installed (optional — needed for fast-evolving libs: npm install -g ctx7)"
|
|
fi
|
|
|
|
if detect_gsd; then
|
|
pass "GSD v2 installed ($(gsd --version 2>/dev/null | head -1 || echo 'gsd'))"
|
|
else
|
|
info "GSD v2 not installed (optional — run: npm install -g gsd-pi)"
|
|
fi
|
|
|
|
if detect_graphifyy; then
|
|
pass "Graphifyy installed (graphify CLI)"
|
|
else
|
|
info "Graphifyy not installed (optional — codebase knowledge graph: pipx install graphifyy)"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 5. Permissions check
|
|
# ────────────────────────────────────────────────────────────
|
|
|
|
# Under defaultMode auto the classifier reads `autoMode`, so a block scoped
|
|
# to ONE project feeds every other project false facts, and a list without
|
|
# "$defaults" silently drops the built-in rules. Neither is visible from the
|
|
# deny count. Emits TAG|message lines for the caller to dispatch.
|
|
inspect_automode() {
|
|
REPO="$REPO" python3 - "$SETTINGS" <<'PY'
|
|
import json, os, re, sys
|
|
|
|
settings = json.load(open(sys.argv[1]))
|
|
mode = settings.get("permissions", {}).get("defaultMode")
|
|
block = settings.get("autoMode") or {}
|
|
|
|
if mode != "auto":
|
|
sys.exit(print("INFO|defaultMode is %s, autoMode not consulted" % mode))
|
|
if not block:
|
|
sys.exit(print("WARN|defaultMode is auto but no autoMode block set"))
|
|
|
|
sections = [k for k in ("allow", "soft_deny", "hard_deny", "environment")
|
|
if k in block]
|
|
bare = [k for k in sections if "$defaults" not in block[k]]
|
|
if bare:
|
|
print('WARN|autoMode.%s replaces the built-in entries (no "$defaults")'
|
|
% ", ".join(bare))
|
|
else:
|
|
print('PASS|autoMode: %s inherit "$defaults"' % ", ".join(sections))
|
|
|
|
repo, home = os.environ["REPO"], os.path.expanduser("~")
|
|
foreign = {q for entry in block.get("environment", [])
|
|
for q in re.findall(r"`(/[^`]+)`", entry)
|
|
if (p := q.rstrip("/")).startswith(home) and p != repo
|
|
and os.path.isdir(os.path.join(p, ".git"))}
|
|
if foreign:
|
|
print("WARN|autoMode.environment names another repo (%s); this file is "
|
|
"user-scope and reaches every project" % ", ".join(sorted(foreign)))
|
|
else:
|
|
print("PASS|autoMode.environment is not scoped to a foreign repo")
|
|
PY
|
|
}
|
|
|
|
check_automode() {
|
|
local out tag msg
|
|
if ! out=$(inspect_automode 2>/dev/null); then
|
|
warn "Could not inspect the autoMode block"
|
|
return
|
|
fi
|
|
while IFS='|' read -r tag msg; do
|
|
case "$tag" in
|
|
PASS) pass "$msg" ;;
|
|
WARN) warn "$msg" ;;
|
|
INFO) info "$msg" ;;
|
|
esac
|
|
done <<< "$out"
|
|
}
|
|
|
|
echo "── Permissions ──"
|
|
|
|
SETTINGS="$HOME/.claude/settings.json"
|
|
if [ -f "$SETTINGS" ] || [ -L "$SETTINGS" ]; then
|
|
if grep -q '"disableBypassPermissionsMode"' "$SETTINGS" 2>/dev/null; then
|
|
pass "Bypass mode disabled"
|
|
else
|
|
warn "disableBypassPermissionsMode not found in settings"
|
|
fi
|
|
|
|
DENY_COUNT=$(python3 -c "
|
|
import json
|
|
with open('$SETTINGS') as f:
|
|
d = json.load(f)
|
|
print(len(d.get('permissions',{}).get('deny',[])))
|
|
" 2>/dev/null || echo "?")
|
|
|
|
if [ "$DENY_COUNT" = "?" ]; then
|
|
warn "Could not parse deny count (python3 unavailable or JSON parse error)"
|
|
else
|
|
# Expected = deny count in the last COMMITTED settings.json. A hardcoded
|
|
# number drifts on every legit deny-list edit (false-warned for weeks at
|
|
# 100 vs 99 — LRN-047 class); deriving from HEAD auto-tracks legit edits
|
|
# and still flags live-vs-committed divergence.
|
|
EXPECTED_DENY=$(git -C "$REPO" show HEAD:settings.json 2>/dev/null | python3 -c "
|
|
import json,sys
|
|
print(len(json.load(sys.stdin).get('permissions',{}).get('deny',[])))
|
|
" 2>/dev/null || echo "?")
|
|
if [ "$EXPECTED_DENY" = "?" ]; then
|
|
warn "Could not derive expected deny count from committed settings.json"
|
|
elif [ "$DENY_COUNT" -eq "$EXPECTED_DENY" ] 2>/dev/null; then
|
|
pass "Deny rules: $DENY_COUNT (matches committed settings.json)"
|
|
else
|
|
warn "Deny rules: $DENY_COUNT (committed: $EXPECTED_DENY) — live settings diverge from last commit"
|
|
fi
|
|
fi
|
|
|
|
check_automode
|
|
else
|
|
fail "$HOME/.claude/settings.json not found"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 5b. Git hooks (BDR-095): global core.hooksPath + generated githooks/
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Git hooks ──"
|
|
_gh_cfg=$(git config --global core.hooksPath 2>/dev/null || true)
|
|
# literal tilde accepted: git expands it itself (see link.sh)
|
|
# shellcheck disable=SC2088
|
|
if [ "$_gh_cfg" = '~/.claude/githooks' ] || [ "$_gh_cfg" = "$HOME/.claude/githooks" ]; then
|
|
pass "global core.hooksPath → $_gh_cfg (every repo protected + auto-pushed)"
|
|
else
|
|
warn "global core.hooksPath is '${_gh_cfg:-unset}' — expected ~/.claude/githooks (run: make link)"
|
|
fi
|
|
while IFS= read -r _h; do # hook set owned by lib/gitflow.sh
|
|
if [ ! -f "$REPO/githooks/$_h" ]; then
|
|
warn "githooks/$_h missing (run: make link)"
|
|
elif ! diff -q <(bash "$REPO/lib/gitflow.sh" emit-hook "$_h" 2>/dev/null) "$REPO/githooks/$_h" >/dev/null 2>&1; then
|
|
warn "githooks/$_h lags lib/gitflow.sh (run: make link)"
|
|
else
|
|
pass "githooks/$_h matches lib/gitflow.sh"
|
|
fi
|
|
done < <(bash "$REPO/lib/gitflow.sh" hooks)
|
|
unset _gh_cfg _h
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 5c. Scratchpad (BLK-021): Claude's tool outputs live under $TMPDIR; on a
|
|
# tmpfs with a per-user quota (systemd mounts /tmp with usrquota and caps
|
|
# each user at 80% of its size) one fat probe kills every session's shell.
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Scratchpad ──"
|
|
_sp="${TMPDIR:-/tmp}"
|
|
_sp_fs=$(findmnt -no FSTYPE -T "$_sp" 2>/dev/null || echo "?")
|
|
_sp_opts=$(findmnt -no OPTIONS -T "$_sp" 2>/dev/null || true)
|
|
if [ "$_sp_fs" = tmpfs ] && printf '%s' "$_sp_opts" | grep -q usrquota; then
|
|
warn "TMPDIR=$_sp is a tmpfs with a per-user quota — every session's shell dies when it fills (BLK-021). Launch claude with TMPDIR=\$HOME/.cache/claude-tmp"
|
|
else
|
|
pass "TMPDIR=$_sp on $_sp_fs (no per-user tmpfs quota in the way)"
|
|
fi
|
|
unset _sp _sp_fs _sp_opts
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 6. Token budget estimate
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Token budget estimate ──"
|
|
# The passive footprint (CLAUDE.global.md + skill descriptions + plugin session-injects)
|
|
# loads into the CONTEXT WINDOW every session — it competes with the ~200k default
|
|
# context, NOT a per-session token quota (the old "~11k/5h budget" denominator was
|
|
# a category error → false "92% CRITICAL", LRN-047). Measured ~11.4k post-audit
|
|
# 2026-07-02 (LRN-088); the chars/4 sum below is a coarse proxy of that footprint.
|
|
# Thresholds: WARNING >15% of context (~30k), CRITICAL >25% (~50k).
|
|
|
|
CLAUDE_MD_CHARS=$(wc -c < "$REPO/CLAUDE.global.md" 2>/dev/null || echo 0)
|
|
CLAUDE_MD_TOKENS=$((CLAUDE_MD_CHARS / 4))
|
|
|
|
# Skill descriptions only (frontmatter description field — loaded passively at startup)
|
|
SKILL_DESC_CHARS=0
|
|
for f in "$HOME/.claude/skills/"*/SKILL.md; do
|
|
[ -f "$f" ] || continue
|
|
desc=$(grep "^description:" "$f" 2>/dev/null | head -1 | sed 's/^description: *//' )
|
|
SKILL_DESC_CHARS=$((SKILL_DESC_CHARS + ${#desc}))
|
|
done
|
|
SKILL_DESC_TOKENS=$((SKILL_DESC_CHARS / 4))
|
|
SKILL_COUNT=$(find "$HOME/.claude/skills/" -maxdepth 2 -name "SKILL.md" 2>/dev/null | wc -l | tr -d ' ')
|
|
|
|
# Plugin passive cost estimates (tokens)
|
|
PLUGIN_TOKENS=0
|
|
if detect_superpowers 2>/dev/null; then PLUGIN_TOKENS=$((PLUGIN_TOKENS + 800)); fi
|
|
if detect_gstack 2>/dev/null; then PLUGIN_TOKENS=$((PLUGIN_TOKENS + 2750)); fi
|
|
if detect_uiux_pro_max 2>/dev/null; then PLUGIN_TOKENS=$((PLUGIN_TOKENS + 400)); fi
|
|
if detect_context7 2>/dev/null; then PLUGIN_TOKENS=$((PLUGIN_TOKENS + 200)); fi
|
|
if detect_graphifyy 2>/dev/null; then PLUGIN_TOKENS=$((PLUGIN_TOKENS + 300)); fi
|
|
|
|
TOTAL_TOKENS=$((CLAUDE_MD_TOKENS + SKILL_DESC_TOKENS + PLUGIN_TOKENS))
|
|
CONTEXT_WINDOW=200000 # Claude Code default context window (conservative; 1M is opt-in)
|
|
PCT=$((TOTAL_TOKENS * 100 / CONTEXT_WINDOW))
|
|
|
|
echo ""
|
|
echo " CLAUDE.global.md: ~${CLAUDE_MD_TOKENS}t"
|
|
echo " Skill descriptions: ~${SKILL_DESC_TOKENS}t (${SKILL_COUNT} skills)"
|
|
echo " Plugin passive cost: ~${PLUGIN_TOKENS}t (active plugins)"
|
|
echo " ─────────────────────────────────────────"
|
|
info " Total: ~${TOTAL_TOKENS}t (measured ~11.4k post-audit, LRN-088)"
|
|
info " Context window: ${CONTEXT_WINDOW}t (default; 1M opt-in)"
|
|
info " Usage: ~${PCT}% of context"
|
|
echo ""
|
|
|
|
if [ "$PCT" -gt 25 ]; then
|
|
warn "CRITICAL: ~${PCT}% of the ${CONTEXT_WINDOW}t context — /plugin-check to disable unused plugins"
|
|
elif [ "$PCT" -gt 15 ]; then
|
|
warn "WARNING: ~${PCT}% of the ${CONTEXT_WINDOW}t context — consider disabling unused toggle plugins"
|
|
else
|
|
pass "Budget: ~${PCT}% of context (comfortable)"
|
|
fi
|
|
|
|
# Per-file breakdown (skill bodies — loaded on demand, shown for awareness)
|
|
if [ "$TOTAL_TOKENS" -gt 2000 ]; then
|
|
info "Skill/agent bodies (loaded on demand, >200t each):"
|
|
for f in "$HOME/.claude/skills/"*/SKILL.md "$HOME/.claude/agents/"*.md; do
|
|
[ -f "$f" ] || continue
|
|
size=$(wc -c < "$f" 2>/dev/null || echo 0)
|
|
tokens=$((size / 4))
|
|
if [ "$tokens" -gt 200 ]; then
|
|
label=$(basename "$(dirname "$f")" 2>/dev/null)
|
|
[ "$label" = "." ] && label=$(basename "$f")
|
|
info " ~${tokens}t ${label}"
|
|
fi
|
|
done
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# 7. File consistency
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "── Consistency ──"
|
|
|
|
# Check gstack shared infrastructure symlinks
|
|
if [ -L "$HOME/.claude/skills/gstack/bin" ]; then
|
|
pass "gstack/bin/ symlink OK"
|
|
else
|
|
warn "gstack/bin/ symlink missing — run: bash link.sh"
|
|
fi
|
|
if [ -L "$HOME/.claude/skills/gstack/browse/dist" ]; then
|
|
pass "gstack/browse/dist/ symlink OK"
|
|
else
|
|
warn "gstack/browse/dist/ symlink missing — run: bash link.sh"
|
|
fi
|
|
|
|
# BDR-019 (2026-06-09) stripped disable-model-invocation repo-wide so the
|
|
# model/orchestrators can self-route. The old check required the key on
|
|
# every owned skill — permanent false-warn since. Inverted: warn if any
|
|
# owned skill REintroduces the key (regression watch on BDR-019).
|
|
PRESENT_DMI=()
|
|
for f in "$HOME/.claude/skills/"*/SKILL.md; do
|
|
[ -f "$f" ] || continue
|
|
dir=$(dirname "$f")
|
|
# Skip external skills (symlinked directory or symlinked SKILL.md — not owned by this repo)
|
|
[ -L "$dir" ] && continue
|
|
[ -L "$f" ] && continue
|
|
name=$(basename "$dir")
|
|
if grep -q "disable-model-invocation" "$f" 2>/dev/null; then
|
|
PRESENT_DMI+=("$name")
|
|
fi
|
|
done
|
|
if [ ${#PRESENT_DMI[@]} -eq 0 ]; then
|
|
pass "No owned skill carries disable-model-invocation (BDR-019)"
|
|
else
|
|
warn "Owned skills reintroduce disable-model-invocation (BDR-019 regression): ${PRESENT_DMI[*]}"
|
|
fi
|
|
|
|
# Check expected skills are present. Repo-owned skills only: gstack skills
|
|
# (health, status, …) are OFF by default and toggled per profile — requiring
|
|
# them here false-warns on a default install, and "run link.sh" cannot
|
|
# restore them (they are profile-managed, not link.sh-managed).
|
|
EXPECTED_SKILLS=(
|
|
"analyze" "doc" "init-project" "onboard" "plugin-check"
|
|
"refactor" "ship-feature" "status"
|
|
)
|
|
MISSING_SKILLS=()
|
|
for skill in "${EXPECTED_SKILLS[@]}"; do
|
|
if [ ! -f "$HOME/.claude/skills/${skill}/SKILL.md" ]; then
|
|
MISSING_SKILLS+=("${skill}/")
|
|
fi
|
|
done
|
|
if [ ${#MISSING_SKILLS[@]} -eq 0 ]; then
|
|
pass "All ${#EXPECTED_SKILLS[@]} expected skills present (${EXPECTED_SKILLS[*]})"
|
|
else
|
|
warn "Missing skills: ${MISSING_SKILLS[*]} — run: bash link.sh"
|
|
fi
|
|
|
|
# Check expected agents are present
|
|
EXPECTED_AGENTS=(
|
|
"analyzer" "interviewer" "plugin-advisor" "doc-syncer"
|
|
"refactorer" "scaffolder" "onboarder" "status-reporter"
|
|
)
|
|
MISSING_AGENTS=()
|
|
for agent in "${EXPECTED_AGENTS[@]}"; do
|
|
if [ ! -f "$HOME/.claude/agents/${agent}.md" ]; then
|
|
MISSING_AGENTS+=("${agent}.md")
|
|
fi
|
|
done
|
|
if [ ${#MISSING_AGENTS[@]} -eq 0 ]; then
|
|
pass "All 8 agents present (analyzer, interviewer, plugin-advisor, doc-syncer, refactorer, scaffolder, onboarder, status-reporter)"
|
|
else
|
|
warn "Missing agents: ${MISSING_AGENTS[*]} — run: bash link.sh"
|
|
fi
|
|
|
|
# Check CRLF — portable: grep -P not available on macOS BSD grep
|
|
CRLF_FILES=()
|
|
for f in "$REPO"/*.md "$REPO"/agents/*.md "$REPO"/skills/*/SKILL.md; do
|
|
[ -f "$f" ] || continue
|
|
if grep -c $'\r' "$f" 2>/dev/null | grep -q "^[^0]"; then
|
|
CRLF_FILES+=("$(basename "$f")")
|
|
fi
|
|
done
|
|
if [ ${#CRLF_FILES[@]} -eq 0 ]; then
|
|
pass "No CRLF line endings detected"
|
|
else
|
|
warn "CRLF detected in: ${CRLF_FILES[*]}"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# ── seo-data (GSC/CrUX data layer) — non-fatal ──
|
|
ENVF="$HOME/.claude/.env"
|
|
if grep -qE '^[[:space:]]*(export[[:space:]]+)?CRUX_API_KEY=.' "$ENVF" 2>/dev/null; then
|
|
pass "seo-data: CRUX_API_KEY present"
|
|
else
|
|
warn "seo-data: CRUX_API_KEY absent in ~/.claude/.env — /seo FULL falls back to lab PageSpeed"
|
|
fi
|
|
STORE="$HOME/.claude/seo-data/tokens.json"
|
|
if [ -f "$STORE" ]; then
|
|
N=$(python3 "$REPO/lib/seo-data/tokenstore.py" list --file "$STORE" 2>/dev/null | grep -o '"label"' | wc -l)
|
|
pass "seo-data: $N Google account(s) connected"
|
|
else
|
|
warn "seo-data: no Google account connected (run: make seo-connect) — GSC data disabled"
|
|
fi
|
|
|
|
# ────────────────────────────────────────────────────────────
|
|
# Summary
|
|
# ────────────────────────────────────────────────────────────
|
|
echo "═══════════════════════════════════════════"
|
|
if [ "$ERRORS" -gt 0 ]; then
|
|
echo -e "${RED} $ERRORS error(s)${NC}, ${YELLOW}$WARNS warning(s)${NC}"
|
|
echo ""
|
|
echo " Fix: cd $REPO && bash link.sh && bash install-plugins.sh"
|
|
exit 1
|
|
elif [ "$WARNS" -gt 0 ]; then
|
|
echo -e " ${GREEN}No errors${NC}, ${YELLOW}$WARNS warning(s)${NC}"
|
|
else
|
|
echo -e " ${GREEN}All checks passed ✓${NC}"
|
|
fi
|
|
echo ""
|