# Changelog

## brain-v1.0 — 2026-05-11 (planned)

### Extracted artifacts

**project-files/** (для consumer-репозиториев):
- CLAUDE.md.template (Лидерра v1.86, 266 строк)
- docs/Pravila_raboty_Claude.template.md (v1.10, 720 строк)
- docs/Plugin_stack_rules.template.md (v1.7, 916 строк)
- docs/Tooling.template.md (v1.15, 613 строк)
- docs/CHANGELOG_claude_md.template.md
- docs/visualizations/hooks-skills-plugins-map.html (3122 строки)
- .mcp.json.template (playwright + github + semgrep; laravel-boost dropped — project-specific)

**user-level-files/** (для `~/.claude/`):
- 10 hook-скриптов (skill-marker, skill-check, economy-mode×4, economy-state-guard×2, economy-postcompact, economy-verifier, economy-self-check×2)
- settings-fragment.json (enabledPlugins + permissions + hooks)
- marketplaces.json (3 marketplace: anthropics/claude-plugins-official, obra/superpowers, nextlevelbuilder/ui-ux-pro-max-skill)
- plugins-manifest.json (4 плагина с pinned gitCommitSha)
- mcp-user.template.json (magic с `<<MAGIC_API_KEY>>` placeholder)

**scripts/** (sync tooling):
- install.sh — orchestrator (project/user mode + plugins + MCP)
- verify.sh — sha256 integrity + Python syntax
- extract.sh — reverse sync (consumer → brain)
- lib/common.sh, merge-settings.sh, merge-mcp.sh, setup-secrets.sh, install-plugins.sh

### Security

- API_KEY (21st.dev) masking при extraction (placeholder + interactive prompt)
- gitleaks self-scan — обязательный gate перед первым commit'ом
- CI workflow с gitleaks на каждый push

### Known limitations

- Plugin SHA pinning через `claude plugin install` — best-effort (warn on mismatch, не fail)
- На VSCode-extension Claude Code команды `claude plugin install` могут быть недоступны — fallback на прямое редактирование JSON