Added
.claude/tooling committed with the repo: skills (release-prep,fix-issue,pr-review,issue-triage), subagents (pr-reviewer,repo-auditor), path-scoped rules (server-routes,public-pages,tests,db-migrations), and a PostToolUse hook (block-innerhtml.sh) that enforces the innerHTML ban on save. Contributors using Claude Code now get the same guardrails and workflows automatically.
Changed
.gitignore: no longer excludes the entire.claude/directory — only.claude/settings.local.jsonand.claude/worktrees/stay out, so shared tooling is versioned while local permissions remain private.