claude-sdk-rs: Skill for Claude Code

============================================================================= sdlc-flow — single-branch, single-review, PR-terminating SDLC engine

The default engine for non-trivial feature work. Runs one spec's tasks SEQUENTIALLY on a SINGLE shared branch (so there are no inter-task merges to conflict — sdlc-block's #1 failure mode), with a per-task test→fix loop, ONE consolidated review at the end, a docs patch, and a PR as the terminal step.

ISOLATION MODE Default: a plain branch (-flow) checked out IN THE MAIN WORKING TREE. No sparse-checkout worktree, so a relative planning/ symlink (brain-vaulted repos) stays intact. main is left on the branch until the PR merges. --worktree: SUSPENDED FLEET-WIDE (D81, 2026-08-23). The engine refuses the flag unconditionally and exits before any setup — no override, no environment escape hatch. Run on a plain branch instead. The sparse-checkout worktree machinery survives intact for when D81 lifts.

A compact, COMMITTED, AUTHORITATIVE state.json + one worklog.md replace the 5×N per-stage report files: resume + review + wrap-up read a structured index instead of re-reading verbose prose. This inverts the harness's usual "committed report files are authoritative, state JSON is gitignored" rule on purpose (see D31).

USAGE /sdlc-flow run every task in the spec, open a PR, stop /sdlc-flow 1-3 scope to a task range (1-3, 1,3,5, 5) /sdlc-flow --auto-merge merge the PR + clean up on success /sdlc-flow --no-pr stop after wrap-up; do not create a PR /sdlc-flow --resume re-attach the branch, resume from state.json (--worktree is refused per D81 -- do not pass it) /sdlc-flow --test-depth full run the FULL gating suite per task (default: fast)

PIPELINE worktree-setup → enumerate (D16 lint) → [resume load] → per-task loop → end-review → docs (gated on PASS) → wrap-up(PR)

Per-task loop (sequential, on the one branch): implement → fast-test → (triage → fix/​bail) ×≤3 One state-commit per task. A triage MAJOR / immediate-bail reason breaks straight to wrap-up (draft PR) — it does NOT burn three attempts.

End-review: ONE review over the integrated tree, fed state.json as the index but reading git diff <prBase>..HEAD + the spec's acceptance criteria directly (the block record's acceptance_criteria array when D65's block record is the spec source, else tasks.md's ## Acceptance Criteria prose) + re-running the FULL gating suite (authoritative). PASS → docs; FAIL/PARTIAL → triage findings: small/localized → bounded fix→test→review (≤2, Opus last); broad → bail.

COMMIT STRATEGY (crash recovery — everything lands on the branch) feat: implement task N implement agent (per task) fix: fix pass P for task N fix agent (per pass) chore: flow state — state-writer (state.json + worklog.md + checkbox) docs: update docs for docs agent chore: wrap up wrap-up agent (status/log/amendment-log)

COMMIT-SAFETY GUARD (BT.ticket.worktree-run-can-commit-an-empty-tree) — run before EVERY git commit in this pipeline, joined with && in the SAME shell call as the commit (a separate preceding call runs in a different process whose inherited git environment may differ, which is the whole failure mode this guards against). The one exception is the worktree-init --allow-empty commit — its index is legitimately populated right after checkout, so the guard cannot fire there. Run the identical check against the vault repo (git -C <vault planning path> in place of git) before any vault commit too: if git rev-parse --verify -q HEAD >/dev/null; then TRACKED=$(git ls-tree -r HEAD --name-only | wc -l | tr -d ' '); STAGED=$(git ls-files -s | wc -l | tr -d ' '); if [ "$TRACKED" -gt 0 ] && [ "$STAGED" -eq 0 ]; then echo "COMMIT_GUARD_ABORT: index holds 0 entries but HEAD tracks $TRACKED files - refusing to commit a tree that deletes everything (BT.ticket.worktree-run-can-commit-an-empty-tree)"; exit 1; fi; fi If this prints COMMIT_GUARD_ABORT, STOP — do not run the commit; the index is empty against a non-empty HEAD, which is exactly the shape that deletes every tracked file.