feat: v2.2.0 — CI/CD pipeline + rules linter

GitHub Actions workflow validates: hook syntax (bash -n), hook
permissions (chmod +x), YAML files (registry, sources, metrics),
rules frontmatter (globs: required), stack completeness (rules/ +
settings.json.partial), skill completeness (SKILL.md), benchmark
tasks (id, stack, prompt), and version consistency (VERSION vs
plugin.json).

New: tests/lint-rules.sh for local rule validation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: luiseiman

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-kit",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "description": "Configuration factory for Claude Code — templates, stacks, hooks, rules, and audit tools",
   "author": "luiseiman",
   "license": "MIT",

.github/workflows/ci.yml

@@ -0,0 +1,125 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate hook syntax (bash -n)
+        run: |
+          echo "── Hook Syntax ──"
+          ERRORS=0
+          for f in template/hooks/*.sh stacks/*/hooks/*.sh hooks/*.sh; do
+            [ -f "$f" ] || continue
+            if bash -n "$f" 2>&1; then
+              echo "✓ $f"
+            else
+              echo "✗ $f"
+              ERRORS=$((ERRORS + 1))
+            fi
+          done
+          echo ""
+          echo "Checked: $(find template/hooks stacks/*/hooks hooks -name '*.sh' 2>/dev/null | wc -l) files"
+          [ $ERRORS -eq 0 ] || exit 1
+
+      - name: Validate hook permissions
+        run: |
+          echo "── Hook Permissions ──"
+          ERRORS=0
+          for f in template/hooks/*.sh stacks/*/hooks/*.sh hooks/*.sh; do
+            [ -f "$f" ] || continue
+            if [ -x "$f" ]; then
+              echo "✓ $f"
+            else
+              echo "✗ $f (not executable)"
+              ERRORS=$((ERRORS + 1))
+            fi
+          done
+          [ $ERRORS -eq 0 ] || exit 1
+
+      - name: Validate YAML files
+        run: |
+          echo "── YAML Validation ──"
+          python3 -c "import yaml; yaml.safe_load(open('registry/projects.yml')); print('✓ registry/projects.yml')"
+          python3 -c "import yaml; yaml.safe_load(open('practices/sources.yml')); print('✓ practices/sources.yml')"
+          python3 -c "import yaml; yaml.safe_load(open('practices/metrics.yml')); print('✓ practices/metrics.yml')"
+
+      - name: Validate rules frontmatter
+        run: |
+          echo "── Rules Frontmatter ──"
+          bash tests/lint-rules.sh
+
+      - name: Validate stack completeness
+        run: |
+          echo "── Stack Completeness ──"
+          ERRORS=0
+          for d in stacks/*/; do
+            [ -f "${d}detect.md" ] && continue  # skip detect.md metadata file
+            STACK=$(basename "$d")
+            MISSING=""
+            [ -d "${d}rules" ] || MISSING="rules/"
+            [ -f "${d}settings.json.partial" ] || MISSING="$MISSING settings.json.partial"
+            if [ -n "$MISSING" ]; then
+              echo "✗ $STACK — missing: $MISSING"
+              ERRORS=$((ERRORS + 1))
+            else
+              echo "✓ $STACK"
+            fi
+          done
+          [ $ERRORS -eq 0 ] || exit 1
+
+      - name: Validate skill completeness
+        run: |
+          echo "── Skill Completeness ──"
+          ERRORS=0
+          for d in skills/*/; do
+            SKILL=$(basename "$d")
+            if [ ! -f "${d}SKILL.md" ]; then
+              echo "✗ $SKILL — missing SKILL.md"
+              ERRORS=$((ERRORS + 1))
+            else
+              echo "✓ $SKILL"
+            fi
+          done
+          [ $ERRORS -eq 0 ] || exit 1
+
+      - name: Validate benchmark tasks
+        run: |
+          echo "── Benchmark Tasks ──"
+          python3 -c "
+          import yaml, glob, sys
+          errors = 0
+          for f in sorted(glob.glob('tests/benchmark-tasks/*.yml')):
+              try:
+                  data = yaml.safe_load(open(f))
+                  assert 'id' in data, 'missing id'
+                  assert 'stack' in data, 'missing stack'
+                  assert 'prompt' in data, 'missing prompt'
+                  print(f'✓ {f}')
+              except Exception as e:
+                  print(f'✗ {f}: {e}')
+                  errors += 1
+          sys.exit(errors)
+          "
+
+      - name: Version consistency check
+        run: |
+          echo "── Version Consistency ──"
+          VERSION=$(cat VERSION | tr -d '[:space:]')
+          echo "VERSION file: $VERSION"
+
+          PLUGIN_VERSION=$(python3 -c "import json; print(json.load(open('.claude-plugin/plugin.json'))['version'])")
+          echo "plugin.json:  $PLUGIN_VERSION"
+
+          if [ "$VERSION" != "$PLUGIN_VERSION" ]; then
+            echo "✗ Version mismatch: VERSION=$VERSION, plugin.json=$PLUGIN_VERSION"
+            exit 1
+          fi
+          echo "✓ Versions match"

VERSION

@@ -1 +1 @@
-2.1.0
+2.2.0

docs/changelog.md

@@ -4,6 +4,15 @@
 >
 > Historial de versiones. Las entradas usan español/inglés mixto según la evolución del proyecto. Los términos técnicos son universales.
 
+## v2.2.0 (2026-03-20)
+
+### CI/CD + Quality
+- Nuevo: GitHub Actions CI workflow — validates hooks (bash -n + permissions), YAML files, rules frontmatter, stack completeness, skill completeness, benchmark tasks, version consistency
+- Nuevo: `tests/lint-rules.sh` — validates all rule .md files have `globs:` frontmatter
+- Fix: plugin.json version synced to VERSION file (CI catches mismatches)
+
+---
+
 ## v2.1.0 (2026-03-20)
 
 ### Making it real

tests/lint-rules.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# Validate that all rule .md files have proper frontmatter
+# Exit 0 = all pass, exit 1 = failures found
+
+ERRORS=0
+CHECKED=0
+
+for rule_file in template/rules/*.md stacks/*/rules/*.md; do
+  [ -f "$rule_file" ] || continue
+  CHECKED=$((CHECKED + 1))
+  BASENAME=$(basename "$rule_file")
+
+  # _common.md uses globs: "**/*" which is valid
+  # All rules must have frontmatter with globs:
+  HAS_FRONTMATTER=$(head -1 "$rule_file" | grep -c "^---$")
+  if [ "$HAS_FRONTMATTER" -eq 0 ]; then
+    echo "✗ $rule_file — missing frontmatter (no opening ---)"
+    ERRORS=$((ERRORS + 1))
+    continue
+  fi
+
+  HAS_GLOBS=$(sed -n '/^---$/,/^---$/p' "$rule_file" | grep -c "^globs:")
+  if [ "$HAS_GLOBS" -eq 0 ]; then
+    echo "✗ $rule_file — missing globs: in frontmatter"
+    ERRORS=$((ERRORS + 1))
+    continue
+  fi
+
+  echo "✓ $rule_file"
+done
+
+echo ""
+echo "Checked: $CHECKED rules, Errors: $ERRORS"
+[ $ERRORS -eq 0 ] || exit 1