Release v2.1.0: Opus 4.8-tuned pm-ai-shipping audits + CHANGELOG-driven release automation

pm-ai-shipping: mandatory Evidence citations verified before reporting,
concrete subagent fan-out contract, read-only allowed-tools on both audits,
N+1/waterfall detection and a refute pass in the performance audit,
untrusted-input hardening across the kit, parallel audits in /ship-check,
severity anchors + report consolidation, repo-relative paths.

Repo: CHANGELOG.md as release source of truth with auto-tag-and-release on
merge to main (adapted from phuryn/claude-usage, minus the .vsix build),
Tests workflow on every PR/push, unit + docs-consistency test suite,
contributor-credit conventions in CONTRIBUTING, all manifests synced at 2.1.0.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011URgT9hYuNrXeCvzjnqRxJ

tests/test_validator.py

@@ -0,0 +1,63 @@
+"""Unit tests for validate_plugins.py plus a repo-wide validation gate."""
+
+import sys
+import unittest
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent.parent
+sys.path.insert(0, str(ROOT))
+
+import validate_plugins as vp
+
+
+class TestFrontmatterParser(unittest.TestCase):
+    def test_parses_flat_keys(self):
+        fm = vp.parse_yaml_frontmatter(
+            '---\ndescription: Hello world\nargument-hint: "[x]"\n---\nBody'
+        )
+        self.assertEqual(fm["description"], "Hello world")
+        self.assertEqual(fm["argument-hint"], "[x]")
+
+    def test_none_without_frontmatter(self):
+        self.assertIsNone(vp.parse_yaml_frontmatter("# Just markdown\n"))
+
+    def test_none_when_unterminated(self):
+        self.assertIsNone(vp.parse_yaml_frontmatter("---\ndescription: x\n"))
+
+    def test_strips_quotes(self):
+        fm = vp.parse_yaml_frontmatter("---\nname: 'quoted'\n---\n")
+        self.assertEqual(fm["name"], "quoted")
+
+
+class TestCountWords(unittest.TestCase):
+    def test_excludes_frontmatter(self):
+        self.assertEqual(vp.count_words("---\nname: x\n---\none two three"), 3)
+
+
+class TestRepoPassesValidation(unittest.TestCase):
+    """Every plugin in the repo must pass the validator with zero errors."""
+
+    def test_all_plugins_valid(self):
+        plugin_dirs = sorted(
+            str(p)
+            for p in ROOT.iterdir()
+            if p.is_dir() and (p / ".claude-plugin").is_dir()
+        )
+        self.assertTrue(plugin_dirs, "no plugins found in repo root")
+
+        failures = []
+        for pd in plugin_dirs:
+            results = vp.validate_plugin(pd)
+            for section, value in results["sections"].items():
+                items = value.values() if isinstance(value, dict) else [value]
+                for vr in items:
+                    for err in vr.errors:
+                        failures.append(f"{results['name']}/{section}: {err}")
+
+        self.assertEqual(
+            failures, [], "validator errors:\n" + "\n".join(failures)
+        )
+
+
+if __name__ == "__main__":
+    unittest.main()