Skip to content

docs(docs-hygiene): share clean-tree fallback across audit skills (0.14.6) - #2795

Merged
kyle-sexton merged 1 commit into
mainfrom
cursor/2734-clean-tree-8f91
Aug 16, 2026
Merged

docs(docs-hygiene): share clean-tree fallback across audit skills (0.14.6)#2795
kyle-sexton merged 1 commit into
mainfrom
cursor/2734-clean-tree-8f91

Conversation

@kyle-sexton

@kyle-sexton kyle-sexton commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add plugins/docs-hygiene/context/clean-tree-fallback.md — shared offer/confirm/no-op skeleton for bare audit invocations.
  • Cite it from audit-noise, audit-derivability, audit-encapsulation, compress, and extract-ssot; record deliberate divergences (compress mutating; encapsulation "no inherited scope").
  • compress audit on a clean tree now offers the confirmation-gated free corpus audit (report-only) instead of the friendly no-op.
  • Bump docs-hygiene to 0.14.6.

Stacked on #2794 (path mutex — shared plugin.json / CHANGELOG version line).

Test plan

  • Relative cite paths resolve from each skill directory
  • compress/context/target-types.md row updated for audit+clean-tree

Closes #2734

Related

@cursor

cursor Bot commented Aug 16, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@claude

claude Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude finished @kyle-sexton's task in 34s —— View job


Security review — no issues found

  • Gather context (PR diff, changed files)
  • Apply skip gate
  • Review changed files for security-relevant surface
  • Post findings (or confirm none)

This PR is documentation-only: it adds plugins/docs-hygiene/context/clean-tree-fallback.md (a shared markdown contract describing the offer/confirm/no-op skeleton for bare skill invocations) and cross-links it from several SKILL.md files, plus a version bump and changelog entry. No executable code, scripts, GitHub Actions workflows, permissions, or dependency pins are touched.

Applying the skip gate: condition 2 ("change has no security-relevant surface after reading the diff") applies — there's no injection surface, no auth/access-control logic, no secret/token handling, and no CI/workflow changes to review. No findings to report.

@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown

Last security-reviewed head: 107b7f18c3f78ad5c772d6a014d3e3d9d3b21a2e. On the next push, the relevance gate compares only the commits since this SHA; delete this comment to force a full re-review.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a4c258199c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread plugins/docs-hygiene/skills/compress/SKILL.md
@claude

claude Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude finished @kyle-sexton's task in 2m 4s —— View job


Code review complete

  • Gather context (PR metadata, diff, changed files)
  • Check skip gate (open/draft/trivial/already-reviewed) — none apply, reviewed in full
  • Review changed files against CLAUDE.md / REVIEW.md criteria
  • Post findings (inline comments + summary)

This is a docs-only change: a new shared skeleton doc (context/clean-tree-fallback.md) cited from five SKILL.md files, plus a changed default in compress's audit action on a clean tree, a version/CHANGELOG bump, and a target-types.md table row update. REVIEW.md's always-check items (audit logging, multi-write atomicity) don't apply — no code or state-writing paths changed.

I cross-checked the new shared doc's "Who participates" table and the "Deliberate divergences" section against the actual behavior described in each cited SKILL.md (audit-noise, audit-derivability, audit-encapsulation, compress, extract-ssot), and checked the CHANGELOG/version/README/target-types.md edits for internal consistency. One finding, posted inline:

  • plugins/docs-hygiene/context/clean-tree-fallback.md:36 — the extract-ssot row's "Explicit opt-in that skips confirm" cell describes an option offered inside the confirmation ask, not something that bypasses it — inconsistent with the column header and with the sibling rows' sweep keywords. See inline comment for the fix.

Everything else — link paths (../../context/clean-tree-fallback.md resolves correctly from each skill directory), the divergence notes (compress mutating/audit-first, encapsulation's "no inherited scope" trigger), the CHANGELOG entry format, the 0.14.50.14.6 version bump (no stray references left at the old version), and the target-types.md row update — checked out consistent with the PR's stated intent.
· branch cursor/2734-clean-tree-8f91cursor/2742-noise-exempt-8f91

Comment thread plugins/docs-hygiene/context/clean-tree-fallback.md
@github-actions

github-actions Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude has reviewed this PR 3 times. The lane skips further automatic reviews after 5; deleting this comment resets the count.

kyle-sexton added a commit that referenced this pull request Aug 16, 2026
## Summary
- Hoist and export convention-root resolution once per `detect.sh` run
so `AUDIT_NOISE_CONTRACT_ROOT` is not lost to command-substitution
subshells (auditor F6: configured contract root bare
`reviews/`/`handoffs/` no longer falsely exempt).
- Restructure the per-line hot path to use nameref helpers
(`detect_shapes_into`, `shape_tier_into`, `trim_excerpt`) instead of 2+
`$()` forks per markdown line.
- Add `--offset` / `--limit` so repo-wide orchestration can chunk
without a per-file shell loop; document in SKILL.md clean-tree defaults.
- Bump docs-hygiene to 0.14.4.

## Test plan
- [x] `bash
plugins/docs-hygiene/skills/audit-noise/scripts/detect.test.sh` — 48/48
pass (includes F6 contract-bare regression + chunk affordance)
- [x] Perf smoke: single non-CHANGELOG scan path no longer pays per-line
`parse-concern-value.sh` forks; 40×885-line corpus ~7.8s in this
environment

Closes #2741

## Related

- Base of the docs-hygiene stack (#2794#2795#2798#2805).

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
@cursor
cursor Bot force-pushed the cursor/2742-noise-exempt-8f91 branch from 24841e9 to 8ca3115 Compare August 16, 2026 00:37
kyle-sexton added a commit that referenced this pull request Aug 16, 2026
….7) (#2798)

## Summary
- Re-scanned all 38 audit-noise-routed paths: 32 clean under current
exemptions, 6 CHANGELOG basename-exempt, 1 Tier-2 ghost-ref remediated
(`docs/conventions/commit-convention/README.md` design cite → `##
Sources`).
- Added `plugins/docs-hygiene/context/derivability-route-followups.md`
triage board for the 136 extract-ssot routes (synced artifact-protocol
cluster already registered; checklists/scaffolds; changelog-parity;
pending candidates) — no new issues.
- Recorded false-keep sampling backlog as deferred (ephemeral ledger
unavailable).
- Bump docs-hygiene to 0.14.7.

Stacked on #2795 (path mutex — shared version line).

## Test plan
- [x] `detect.sh docs/conventions/commit-convention/README.md` → T1=0
T2=0 T3=0
- [x] Full 38-path noise re-scan → only the one remediated finding
before the Sources move

Closes #2735

## Related

- Stacked on #2795; process-derivability route-to-sibling batch ahead of
#2805.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
kyle-sexton added a commit that referenced this pull request Aug 16, 2026
…2794)

## Summary
- Skip YAML frontmatter and fenced code blocks during scans.
- Opt-out markers must be well-formed HTML comment lines (prose mentions
no longer swallow following content).
- Section exemption toggles on any ATX heading level (`### Sources`
exempts; an H1 after `## Sources` ends it).
- Inline `` `code` `` spans are stripped for citation/enum/scope
matching; ghost-ref still sees unwrapped path text.
- Resolve relative targets before `cd` to repo root; parse spaced
filenames from porcelain without `$NF`.
- Bump docs-hygiene to 0.14.5.

Stacked on #2792 (path mutex — both touch `detect.sh`).

## Test plan
- [x] `bash
plugins/docs-hygiene/skills/audit-noise/scripts/detect.test.sh` — 59/59
pass

Closes #2742

## Related

- Stacked on #2792; continues docs-hygiene audit-noise work toward
#2795.

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
Base automatically changed from cursor/2742-noise-exempt-8f91 to main August 16, 2026 00:56
…14.6)

Add plugin-level context/clean-tree-fallback.md as the SSOT for the
confirmation-gated bare-invocation shape. Cite it from the audit siblings
and extract-ssot; teach compress audit on a clean tree to offer the free
corpus audit instead of no-opping.

Closes #2734

Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
@cursor
cursor Bot force-pushed the cursor/2734-clean-tree-8f91 branch from 0685e65 to 107b7f1 Compare August 16, 2026 01:00
@claude

claude Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude finished @kyle-sexton's task in 1m 0s —— View job


Security review — no issues found

  • Gather context (PR diff, changed files)
  • Apply skip gate
  • Review changed files for security-relevant surface
  • Post findings (or confirm none)

Skip gate condition 2 applies: this diff has no security-relevant surface. All 10 changed files are documentation/markdown (SKILL.md cross-references, the new shared context/clean-tree-fallback.md contract, plugin.json version bump, CHANGELOG.md, README.md, and a target-types.md table row). No executable code, scripts, GitHub Actions workflows, permissions, secrets/token handling, or dependency pins are touched — nothing to assess for injection, auth/access-control, or supply-chain risk.

Note: Codex's inline comment on compress/SKILL.md:81 (about ${CLAUDE_PLUGIN_DATA}/audit/<branch-or-scope>-audit.md being plugin-global rather than project-scoped, risking one worktree's audit report overwriting another's) is a data-integrity/correctness concern, not a security vulnerability — no untrusted input or trust-boundary crossing is involved. Out of scope for this security lane; /review:code-review is the right venue if it needs follow-up.

@kyle-sexton
kyle-sexton merged commit 7b0d0f2 into main Aug 16, 2026
48 of 85 checks passed
@kyle-sexton
kyle-sexton deleted the cursor/2734-clean-tree-8f91 branch August 16, 2026 01:06
kyle-sexton added a commit that referenced this pull request Aug 16, 2026
….7) (#2812)

Closes #2735

## Summary

Re-lands 0.14.7 on main after #2795. Replaces #2810/#2798 which were
closed or merged against a deleted stack base.

## Related

- Docs-hygiene stack after #2795; precedes 0.15.0 compress remediations.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
@claude

claude Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude finished @kyle-sexton's task in 26s —— View job


Code review skipped

  • Gather context (PR metadata)
  • Apply skip gate

Per /review:code-review's skip gate: this PR's state is MERGED (not open), which matches skip-gate condition 1 ("PR is closed or not open"). No review performed, no findings posted.

For reference, this PR already received two prior review passes from this lane while open (security review: no issues found; code review: one finding on clean-tree-fallback.md:36 regarding the extract-ssot row, which is also flagged by the CodeRabbit-style inline comment in this thread) — both visible above in the comment history.

@claude

claude Bot commented Aug 16, 2026

Copy link
Copy Markdown

Claude finished @cursor[bot]'s task in 40s —— View job


Code review — skipped (PR merged)

  • Gather context (PR metadata, diff, changed files)
  • Apply skip gate

Per /review:code-review's skip gate: this PR is in MERGED state (condition 1 — "PR is closed or not open"). No further review is performed; posting nothing else per the skill's instructions.

For reference, this PR already received two full reviews from this bot while open (security review: no issues found; code review: one finding on plugins/docs-hygiene/context/clean-tree-fallback.md:36, posted inline), so re-running the lane post-merge wouldn't add new signal even absent the skip gate.

kyle-sexton added a commit that referenced this pull request Aug 16, 2026
….0) (#2814)

Closes #2745

## Summary

Re-lands docs-hygiene 0.15.0 compress caveman/taxonomy audit
remediations on main after #2812. Replaces #2805/#2811, which were
auto-closed when stack bases were deleted.

## Related

- Completes the docs-hygiene stack after #2792#2794#2795#2812.
- Supersedes closed #2805 and #2811.

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Kyle Sexton <kyle-sexton@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs-hygiene: adopt the confirmation-gated clean-tree fallback in the sibling audit skills

2 participants