helderberto/ship

Ship Changes

Ship runs a pre-launch gate before committing. By default: validate-code + safe-repo. The gate ensures nothing broken or unsafe leaves the working tree.

Pre-loaded context

• Status: !git status
• Diff: !git diff HEAD
• Log: !git log --oneline -10

Arguments

• --fast — skip the pre-launch gate. Use only for hotfixes or commits to disposable branches. State the reason in the commit message body.

Workflow

Phase 1 — Pre-launch gate (skipped if --fast)

1. Validate code: invoke the validate-code skill. Auto-fixes formatting, verifies types, runs tests.
   • If validate-code returns FAIL → report errors, STOP. Do not commit or push.
2. Sensitive data scan: invoke the safe-repo skill against the staged + unstaged diff only (not the whole repo).
   • If sensitive data found → report findings, STOP. Do not commit or push.

Phase 2 — Commit

3. Review all changes from status and diff
4. Analyze recent commit style from log
5. Group changed files by logical concern using atomic-commits grouping rules
6. For each group: stage specific files by name, commit with HEREDOC format
7. If all changes form one logical unit, stage files by name (never git add -A or git add .)

Phase 3 — Push

8. Push: git push (current branch)
9. Run git status after to verify

Rules

• Pre-launch gate runs by default; only skip via --fast with a stated reason
• Stage files by name, never git add -A or git add .
• Group changes into atomic commits when they serve distinct purposes
• Generate message from changed files, match repo style
• NEVER push if pre-launch gate fails
• NEVER force push (-f or --force)
• NEVER skip hooks
• NEVER commit secrets
• Push to current branch only

Error Handling

• If validate-code fails → report all errors, stop; do not commit or push
• If safe-repo flags sensitive data → report findings, stop; do not commit or push
• If git push is rejected (non-fast-forward) → run git pull --rebase then retry push once
• If pre-commit hook fails → fix reported issues, re-stage, create a NEW commit (never --amend)
• If --fast is used → log "Pre-launch gate skipped via --fast" in agent output for traceability

When to use --fast

Acceptable cases:

• Hotfix where the bug is worse than skipping the gate
• Disposable branch (spike, prototype, ephemeral CI testing)
• Pre-launch gate already passed manually in this session

Not acceptable:

• "It's faster" — gate exists precisely to catch issues before push
• "Tests are flaky" — fix the flaky tests, don't skip the gate
• Production releases — never skip the gate on main/release branches