ship

---

name: ship allowed-tools: Bash(git:), Bash(gh:) description: Create branch, commit, push, open PR, auto-review, fix issues, and merge

You are automating the complete git workflow to ship code changes. After creating the PR, you will automatically review it, fix any issues, and merge it. The user may provide a branch name and description as arguments: $ARGUMENTS

Input Validation

Optional Arguments:

• <branch-name> - Custom branch name (default: auto-generated from changes)
• draft - Create PR as draft
• --dry-run - Preview all operations without making any changes
• --audit - Log all git and PR operations to .claude-plugin/audit.log (see common-patterns.md)

Dry-Run Mode: When --dry-run is specified:

• Show what branch name would be created
• Show what files would be staged and committed
• Show the proposed commit message
• Show the PR title and body that would be created
• Prefix all output with [DRY-RUN] to clearly indicate preview mode
• Do NOT execute any git commands that modify state (checkout, add, commit, push, pr create)

Audit Mode: When --audit is specified:

• Log every git and PR operation to .claude-plugin/audit.log
• Each log entry is a JSON line with: timestamp, command, action, details, success
• Create .claude-plugin/ directory if it doesn't exist
• Append to log file (never overwrite existing entries)

Example log entries:

Copy{"timestamp": "2026-01-14T10:30:00Z", "command": "ship", "action": "git_checkout", "details": {"branch": "feat/new-feature"}, "success": true}
{"timestamp": "2026-01-14T10:30:01Z", "command": "ship", "action": "git_commit", "details": {"sha": "abc1234", "message": "feat: add new feature"}, "success": true}
{"timestamp": "2026-01-14T10:30:02Z", "command": "ship", "action": "git_push", "details": {"remote": "origin", "branch": "feat/new-feature"}, "success": true}
{"timestamp": "2026-01-14T10:30:03Z", "command": "ship", "action": "pr_create", "details": {"number": 42, "url": "https://github.com/..."}, "success": true}
{"timestamp": "2026-01-14T10:30:30Z", "command": "ship", "action": "pr_merge", "details": {"number": 42, "strategy": "squash"}, "success": true}

Pre-flight Checks

1. Verify this is a git repository
2. Check that the GitHub CLI (gh) is installed and authenticated
3. Confirm there are uncommitted changes (staged or unstaged) - if not, abort with a clear message
4. Confirm the current branch is main - if not, ask the user if they want to proceed from the current branch or abort

Execution Steps

Step 1: Determine Branch Name

• If the user provided a branch name in arguments, use it
• If not, analyze the staged/unstaged changes and generate a descriptive kebab-case branch name (e.g., fix-login-validation, add-user-export-feature)
• Confirm the branch name with the user before proceeding

Step 2: Create and Switch to New Branch

Copygit checkout -b <branch-name>

Step 3: Stage and Commit

• Stage all changes: git add -A
• Analyze the diff to generate a clear, conventional commit message
• Format: <type>: <concise description> (e.g., feat: add CSV export for user data)
• Include a body if changes are complex enough to warrant explanation
• Show the user the proposed commit message and proceed unless they object

Step 4: Push to Remote

Copygit push -u origin <branch-name>

Step 5: Create Pull Request

• Use the GitHub CLI to create the PR: gh pr create
• Set the PR title to match or expand on the commit message
• Generate a PR body that includes:
  • Summary of what changed and why
  • Key files modified
  • Any testing notes if apparent from the changes
• Target branch: main
• Open the PR as a draft if the user included "draft" in their arguments

Output

After completion, display:

• Branch name created
• Commit SHA
• Direct link to the PR

Error Handling

• If any git command fails, stop immediately and show the error
• If push fails due to remote rejection, suggest possible causes
• If PR creation fails, provide the manual gh pr create command the user can run

---

Phase 7: Auto-Review

After the PR is created, automatically analyze it for issues.

7.1 Fetch PR Information

Copy# Get the PR number from the just-created PR
PR_NUMBER=$(gh pr view --json number -q '.number')

# Fetch the diff for analysis
gh pr diff $PR_NUMBER

7.2 Analyze the PR

Perform a comprehensive review across these dimensions:

Security Analysis (CRITICAL/WARNING)

• Hardcoded secrets, API keys, or credentials
• SQL injection vulnerabilities
• XSS vulnerabilities
• Insecure dependencies
• Missing input validation
• Authentication/authorization issues
• Sensitive data exposure in logs

Performance Analysis (WARNING)

• N+1 query patterns
• Unbounded loops or recursion
• Large file reads into memory
• Missing pagination
• Inefficient algorithms (O(n²) when O(n) possible)
• Blocking operations in async contexts

Code Quality Analysis (WARNING)

• DRY violations (copy-paste code)
• Functions/methods over 50 lines
• High cyclomatic complexity
• Inconsistent naming conventions
• Missing error handling
• Magic numbers without constants
• Dead code or unused imports

Test Coverage Analysis (WARNING)

• New code paths without tests
• Modified code with outdated tests
• Missing edge case coverage

Documentation Analysis (WARNING for public APIs)

• Public APIs without documentation
• Complex logic without comments
• Missing README updates for new features

7.3 Classify Issues

Categorize each issue by severity:

• CRITICAL: Must fix - blocks merge (security vulnerabilities, data integrity risks)
• WARNING: Should fix - blocks merge (quality issues, missing tests)
• SUGGESTION: Nice to have - does NOT block merge

7.4 Output

CopyPhase 7: Auto-Review
====================
PR #[number] analyzed.

Issues Found:
  Critical: [N] (must fix)
  Warnings: [N] (should fix)
  Suggestions: [N] (non-blocking)

[If no blocking issues]
✓ All checks passed! Proceeding to merge.

[If blocking issues exist]
Found [N] blocking issues. Starting fix loop.

---

Phase 8: Fix Loop

If there are CRITICAL or WARNING issues, attempt to fix them automatically.

8.1 Loop Parameters

• Maximum attempts: 5
• Blocking issues: CRITICAL + WARNING only (suggestions don't block)
• Exit conditions:
  • All blocking issues resolved → proceed to merge
  • Unfixable issue detected → report and stop
  • Max attempts reached → report exhaustion and stop

8.2 Fix Loop Logic

CopyFOR attempt = 1 TO 5:
    IF no blocking issues: EXIT LOOP → go to Phase 9 (merge)

    Display: "Fix Attempt [attempt] of 5"
    Display: "[N] critical, [N] warnings remaining"

    FOR each blocking issue:
        Display: "Fixing [ID]: [title]..."

        IF issue is fixable:
            Read the affected file
            Apply the appropriate fix
            Mark as fixed
        ELSE:
            Mark as unfixable with reason

    IF has unfixable issues:
        EXIT LOOP → go to Phase 9 (failure report)

    Commit fixes:
        git add -A
        git commit -m "fix: address PR review issues (attempt [N]/5)

        Resolved:
        - [C1] Issue description
        - [W1] Issue description

        Co-Authored-By: Claude <noreply@anthropic.com>"

    Push:
        git push

    Re-analyze PR

    IF all blocking issues resolved:
        Display: "✓ All issues resolved!"
        EXIT LOOP → go to Phase 9 (merge)

IF attempt > 5 AND blocking issues remain:
    EXIT LOOP → go to Phase 9 (exhaustion report)

8.3 Fix Strategies by Issue Type

8.4 Unfixable Issue Detection

Mark an issue as "unfixable" if:

• Requires external changes: Database schema, external API, infrastructure
• Architectural decision needed: Multiple valid approaches, needs human choice
• Cyclical issue: Same fix keeps being undone or introduces new issues
• Beyond scope: Would require changes outside the PR's files
• False positive: Code is actually correct, analysis was wrong

When unfixable:

CopyUnfixable: [ID] [title]
Reason: [why it cannot be auto-fixed]
Suggestion: [what the user should do manually]

---

Phase 9: Completion

Three possible outcomes: success (merge), failure (unfixable), or exhaustion (max attempts).

9.1 Success Path (All Blocking Issues Resolved)

Execute merge:

Copy# Squash merge and delete remote branch
gh pr merge $PR_NUMBER --squash --delete-branch

# Return to main and update
git checkout main
git pull

# Clean up local branch if it exists
git branch -d $BRANCH_NAME 2>/dev/null || true

Prune stale branches:

Copy# Fetch and prune remote tracking branches that no longer exist on remote
git remote prune origin

# Find local branches where upstream is gone and delete them (merged only)
git branch -vv | grep ': gone]' | awk '{print $1}' | xargs -r git branch -d 2>/dev/null

Note: Only fully merged branches are deleted (-d not -D). Unmerged branches with deleted remotes are preserved and reported as warnings.

Display:

CopyPhase 9: Completion
===================
✓ PR #[number] successfully merged!

Summary:
  Branch: [branch-name]
  Fix Attempts: [N]
  Issues Resolved: [N] critical, [N] warnings
  Merge Strategy: Squash

Branches Cleaned:
  ✓ origin/[branch-name] (deleted)
  ✓ local/[branch-name] (deleted)

Stale Branches Pruned:
  ✓ [stale-branch-1] (remote gone, merged)
  ✓ [stale-branch-2] (remote gone, merged)
  [If no stale branches: "None found"]
  [If unmerged branches with gone remotes exist:]
  ⚠ [unmerged-branch] (remote gone, NOT deleted - has unmerged changes)

PR URL: [url]

9.2 Failure Path (Unfixable Issues Exist)

Do NOT merge. Report to user:

CopyPhase 9: Completion (Manual Review Required)
============================================
✗ PR #[number] NOT merged - unfixable issues detected.

Fix Attempts Made: [N]
Issues Resolved: [N]
Issues Remaining: [N]

Unfixable Issues:
-----------------

[C1] [Issue title]
File: [path/to/file] (lines [X-Y])
Reason: [Why it cannot be auto-fixed]
Suggestion: [Manual steps to resolve]

[W2] [Issue title]
File: [path/to/file] (lines [X-Y])
Reason: [Why it cannot be auto-fixed]
Suggestion: [Manual steps to resolve]

Next Steps:
-----------
1. Review the unfixable issues above
2. Make manual fixes in your editor
3. Push additional commits to the PR
4. Run /ship again to retry analysis and merge

PR URL: [url] (still open)
Branch: [branch-name] (preserved for manual work)

9.3 Exhaustion Path (Max Attempts Reached)

Do NOT merge. Report with diagnostics:

CopyPhase 9: Completion (Fix Loop Exhausted)
========================================
✗ PR #[number] NOT merged - max fix attempts (5) reached.

Attempts Made: 5
Issues Found: [N]
Issues Resolved: [N]
Issues Still Blocking: [N]

Remaining Issues:
-----------------

[C1] [Issue title]
File: [path/to/file]
Status: [e.g., "Fixed 3 times but keeps returning"]

Diagnostic Information:
-----------------------
Attempt 1: Fixed [issues], then [what happened]
Attempt 2: Fixed [issues], then [what happened]
...

This typically indicates:
- Generated/compiled code being modified
- Conflicting linting rules
- Circular dependency between fixes

Recommendation:
---------------
1. Review the diagnostic information above
2. Manually inspect the recurring issues
3. Consider excluding generated files
4. Push manual fix and run /ship again

PR URL: [url] (still open)
Branch: [branch-name] (preserved for manual work)

---

Summary of Workflow