@ericrisco/rsc 0.1.24 → 0.1.25

package/README.md

@@ -75,6 +75,13 @@ git clone https://github.com/ericrisco/rsc-harness.git ~/rsc-skills
 cd ~/rsc-skills && npm install && npm link
 ```
 
+> **Run it inside the project you're equipping — not inside this repo.** The
+> catalog's own `package.json` is named `@ericrisco/rsc`, so `npx @ericrisco/rsc`
+> *from within a `rsc-harness` clone* resolves to the local (unlinked) bin and
+> dies with `sh: rsc: command not found`. Working on the catalog itself? Use
+> `node scripts/rsc.js …`, the `npm link` above, or pin the published build with
+> `npx @ericrisco/rsc@latest …`.
+
 The first run asks **which assistants** you want — Claude Code, Codex, Copilot,
 Cursor, Gemini, Windsurf, Cline and 11 more (pick any combination) — and installs
 the **floor**:
@@ -160,6 +167,36 @@ rsc uninstall postgresdb --dry-run   # preview a removal
 
 ---
 
+## Update
+
+`rsc` is an npm package, so updating is two steps — bump the package, then
+re-sync what's already wired into your project:
+
+```bash
+npm install -g @ericrisco/rsc@latest   # global install: pull the newest catalog
+rsc sync                               # refresh managed skills + hooks (auto-detects your assistant)
+```
+
+Not sure what a bump touches? Preview the exact commands without writing anything:
+
+```bash
+rsc upgrade --dry-run                  # prints the npm install + rsc sync lines for your target
+```
+
+Running through `npx` (no global install)? There's nothing to upgrade —
+`npx @ericrisco/rsc@latest` always fetches the latest published catalog; just run
+`rsc sync` afterwards if the project already has skills installed.
+
+Every sync snapshots the project first, so a bad update is always reversible:
+
+```bash
+rsc backups                            # list project-local snapshots
+rsc restore latest --dry-run           # preview restoring the newest
+rsc restore <snapshot-id>              # restore it
+```
+
+---
+
 ## How recommendation works
 
 Two faces, one catalog (`manifest.json`):

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.24",
+  "version": "0.1.25",
   "counts": {
     "skills": 231
   },
@@ -4112,7 +4112,7 @@
     },
     {
       "id": "suggest",
-      "description": "Always-on. Use whenever the current task would clearly benefit from an rsc skill that is not yet installed — detect the gap, name the skill, and (with a one-word confirm) install it via `npx @ericrisco/rsc add <id>`. Triggers on any task that maps to a known rsc capability the session lacks: building a web/app/API, a database, security, deployment, agents, content, or connecting/documenting a company.",
+      "description": "Always-on. Use whenever the current user turn would clearly benefit from an rsc skill that is not yet installed — detect the gap during normal agent use, name the skill, and (with a one-word confirm) install it via `npx @ericrisco/rsc add <id>`. Triggers on capability intent in any language: building technology, creating content/assets, automating workflows, analyzing data, connecting tools, shipping/deploying, security, business ops, marketing, education, research, or company/documentation harness work.",
       "tags": [
         "suggest",
         "detect",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ericrisco/rsc",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "Eric Risco's agent-skills catalog as a granular, self-recommending CLI installer.",
   "type": "module",
   "bin": {

package/scripts/consult.js

@@ -1,22 +1,37 @@
 import initSqlJs from 'sql.js';
 
-// Stopwords (es + en) — these match everywhere via LIKE and drown the signal.
+// Stopwords (es + en + common EU words) — these match everywhere via LIKE and drown the signal.
 const STOP = new Set([
   'una', 'un', 'unos', 'unas', 'con', 'de', 'del', 'la', 'el', 'los', 'las', 'para',
   'que', 'porque', 'en', 'mi', 'mis', 'me', 'quiero', 'tener', 'hacer', 'al', 'lo',
   'su', 'sus', 'este', 'esta', 'esto', 'como', 'mas', 'más', 'algo', 'cosa', 'cosas',
+  'vull', 'vols', 'amb', 'segons', 'usuari', 'usuaris', 'aquesta', 'aquest',
+  'aixo', 'això', 'per', 'els', 'les', 'dels', 'segun', 'según', 'usuario',
+  'usuarios', 'tarea', 'tareas',
   'the', 'and', 'or', 'to', 'of', 'in', 'for', 'with', 'my', 'want', 'build', 'it',
   'need', 'have', 'make', 'create', 'add', 'new',
+  'le', 'des', 'du', 'pour', 'cette', 'cet', 'ce', 'mon', 'ma', 'mes',
+  'il', 'gli', 'questo', 'questa', 'mio', 'mia',
+  'o', 'a', 'os', 'as', 'essa', 'esse', 'minha', 'meu',
+  'der', 'die', 'das', 'den', 'dem', 'des', 'fur', 'fuer', 'für', 'diese', 'dieser',
+  'dit', 'deze', 'het', 'een', 'voor', 'mijn',
 ]);
 
 // Spanish / colloquial terms → catalog tags. Lets non-programmers describe
 // outcomes in their words and still hit the right (English-tagged) skill.
 const SYNONYMS = {
-  web: ['web', 'frontend'], pagina: ['web'], 'página': ['web'], landing: ['landing', 'web'],
+  web: ['web', 'frontend', 'nextjs'], pagina: ['web', 'nextjs'], 'página': ['web', 'nextjs'],
+  website: ['web', 'nextjs'], site: ['web', 'nextjs'], landing: ['landing', 'web', 'nextjs'],
   tienda: ['web', 'frontend'], ecommerce: ['web'], pagos: ['security', 'auth'], pago: ['security'],
   datos: ['database', 'sql'], base: ['database'], guardar: ['database'], almacenar: ['database'],
   publicar: ['deploy', 'docker'], publicarla: ['deploy'], publicarlo: ['deploy'], online: ['deploy'],
   desplegar: ['deploy'], deploy: ['deploy'], servidor: ['backend', 'deploy'],
+  montar: ['bootstrap', 'start', 'setup', 'new'], monta: ['bootstrap', 'start', 'setup', 'new'],
+  montando: ['bootstrap', 'start', 'setup', 'new'], arrancar: ['bootstrap', 'start', 'setup', 'new'],
+  arranca: ['bootstrap', 'start', 'setup', 'new'], empezar: ['bootstrap', 'start', 'setup', 'new'],
+  empieza: ['bootstrap', 'start', 'setup', 'new'], iniciar: ['bootstrap', 'start', 'setup', 'new'],
+  inicia: ['bootstrap', 'start', 'setup', 'new'], start: ['bootstrap', 'start', 'setup', 'new'],
+  bootstrap: ['bootstrap', 'start', 'setup', 'new'], setup: ['bootstrap', 'start', 'setup', 'new'],
   empresa: ['company', 'harness'], negocio: ['company', 'harness'], documentar: ['docs', 'wiki', 'harness'],
   documenta: ['docs', 'harness'], documentacion: ['docs', 'harness'], 'documentación': ['docs', 'harness'],
   conectar: ['connect', 'harness'], conecta: ['connect', 'harness'], herramientas: ['tools', 'harness'],
@@ -30,14 +45,67 @@ const SYNONYMS = {
   marketing: ['marketing'], copy: ['copywriting'], texto: ['copywriting'], textos: ['copywriting'],
 };
 
+const SKILL_ROUTING_TERMS = ['suggest', 'detect', 'install', 'meta'];
+
+const SKILL_NOUNS = new Set([
+  'skill', 'skills', 'habilidad', 'habilidades', 'habilitat', 'habilitats',
+  'competencia', 'competencias', 'competence', 'competences', 'competenza',
+  'competenze', 'habilidade', 'habilidades', 'fertigkeit', 'fertigkeiten',
+  'vaardigheid', 'vaardigheden',
+]);
+
+const SKILL_ROUTING_VERBS = new Set([
+  'recommend', 'recommended', 'recommending', 'recommendation', 'recommendations',
+  'suggest', 'suggests', 'suggesting', 'advise', 'choose', 'select', 'find',
+  'detect', 'detects', 'detecting', 'route', 'routing', 'match', 'matching',
+  'install', 'installs', 'installing', 'add', 'use',
+  'recomendar', 'recomienda', 'recomiendas', 'recomiendame', 'recomendacion',
+  'recomendaciones', 'sugerir', 'sugiere', 'aconseja', 'elegir', 'elige',
+  'detectar', 'detecta', 'instalar', 'instala', 'usar',
+  'recomanar', 'recomana', 'recomanes', 'recomanen', 'recomanacio',
+  'recomanacions', 'suggerir', 'tria', 'trobar', 'detecti', 'installar',
+  'instal', 'afegir',
+  'recommande', 'recommander', 'recommandation', 'conseiller', 'choisir',
+  'trouver', 'detecter', 'installer', 'ajouter', 'utiliser',
+  'consiglia', 'consigliare', 'raccomanda', 'scegliere', 'trovare', 'rilevare',
+  'installare', 'aggiungi', 'usare',
+  'recomenda', 'recomendacao', 'recomendacoes', 'sugerir', 'escolher',
+  'encontrar', 'detectar', 'instalar', 'adicionar', 'usar',
+  'empfiehl', 'empfehlen', 'empfehlung', 'waehlen', 'wahlen', 'finden',
+  'erkennen', 'installiere', 'installieren', 'verwenden',
+  'aanbevelen', 'aanbeveling', 'kiezen', 'vinden', 'detecteren',
+  'installeer', 'installeren', 'gebruiken',
+]);
+
+const MIN_USEFUL_SCORE = 2;
+const LOW_SIGNAL_TAG_TERMS = new Set(['web', 'frontend']);
+
+function fold(term) {
+  return term.normalize('NFD').replace(/[\u0300-\u036f]/g, '');
+}
+
 function expandedTerms(query) {
   const raw = query.toLowerCase().replace(/[^\p{L}\p{N}\s]/gu, ' ').split(/\s+/)
-    .filter((t) => t.length > 1 && !STOP.has(t));
-  const set = new Set();
+    .filter((t) => t.length > 1);
+  const tokens = [];
   for (const t of raw) {
+    tokens.push(t);
+    const folded = fold(t);
+    if (folded !== t) tokens.push(folded);
+  }
+
+  const set = new Set();
+  const hasSkillNoun = tokens.some((t) => SKILL_NOUNS.has(t));
+  const hasSkillRoutingVerb = tokens.some((t) => SKILL_ROUTING_VERBS.has(t));
+
+  for (const t of tokens) {
+    if (STOP.has(t)) continue;
     set.add(t);
     for (const syn of SYNONYMS[t] || []) set.add(syn);
   }
+  if (hasSkillNoun && hasSkillRoutingVerb) {
+    for (const term of SKILL_ROUTING_TERMS) set.add(term);
+  }
   return [...set];
 }
 
@@ -45,6 +113,7 @@ export async function rank(manifest, query) {
   const terms = expandedTerms(query);
   if (!terms.length) return [];
   const scored = scoreRows(manifest.skills, terms);
+  if (!scored.length || Math.max(...scored.map((r) => r.score)) < MIN_USEFUL_SCORE) return [];
   const SQL = await initSqlJs();
   const db = new SQL.Database();
 
@@ -93,8 +162,8 @@ function scoreRows(skills, terms) {
     let score = 0;
     for (const term of terms) {
       if (id === term) score += 20;
-      else if (id.includes(term)) score += 8;
-      if (tags.includes(term)) score += 10;
+      else if (!LOW_SIGNAL_TAG_TERMS.has(term) && id.includes(term)) score += 8;
+      if (tags.includes(term)) score += LOW_SIGNAL_TAG_TERMS.has(term) ? 3 : 10;
       if (description.includes(` ${term} `)) score += 1;
     }
     return { id: skill.id, score };

package/scripts/lib/recommend.js

@@ -23,8 +23,9 @@ export function hasOutcome(id) {
 }
 
 export function expandRecommends(manifest, chosen) {
-  const set = new Set(chosen);
+  const set = new Set();
   for (const id of chosen) {
+    set.add(id);
     const s = skillById(manifest, id);
     for (const r of s?.recommends || []) set.add(r);
   }

package/skills/suggest/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: suggest
-description: "Always-on. Use whenever the current task would clearly benefit from an rsc skill that is not yet installed — detect the gap, name the skill, and (with a one-word confirm) install it via `npx @ericrisco/rsc add <id>`. Triggers on any task that maps to a known rsc capability the session lacks: building a web/app/API, a database, security, deployment, agents, content, or connecting/documenting a company."
+description: "Always-on. Use whenever the current user turn would clearly benefit from an rsc skill that is not yet installed — detect the gap during normal agent use, name the skill, and (with a one-word confirm) install it via `npx @ericrisco/rsc add <id>`. Triggers on capability intent in any language: building technology, creating content/assets, automating workflows, analyzing data, connecting tools, shipping/deploying, security, business ops, marketing, education, research, or company/documentation harness work."
 tags: [suggest, detect, install, meta, always-on]
 recommends: []
 profiles: [minimal, core, full]
@@ -24,6 +24,42 @@ Rules:
 - Never recommend something already installed (`npx @ericrisco/rsc list`).
 - One suggestion at a time. Don't interrupt the flow for nice-to-haves.
 
+## Mid-task capability intent detector
+
+This runs **inside the agent conversation**, not only in the `rsc` CLI. At the start of
+each user turn, before planning, coding, writing, researching, or answering in depth,
+check whether the user is asking to create, build, fix, connect, automate, analyze,
+publish, sell, teach, govern, secure, deploy, or document something that maps to a
+known rsc capability.
+
+This is broader than "start a project". It includes mid-conversation requests such as:
+
+- Technology: "quiero montar una pagina web", "necesito una API", "build me a mobile app", "conecta Stripe", "automatiza este flujo", "deploy this", "review security".
+- Creation: "haz una landing que convierta", "write a cold email sequence", "crea un pitch deck", "monta un curso", "edita shorts", "make social posts".
+- Data and AI: "analiza estos datos", "build a dashboard", "quiero un agente de IA", "haz RAG sobre mis documentos", "extrae datos de PDFs".
+- Business and ops: "organiza mi empresa", "prepara facturas", "monta CRM/pipeline", "haz contratos", "reduce churn", "gestiona soporte".
+- Knowledge and research: "documenta cómo funciona esto", "crea una wiki", "procesa este inbox", "research competitors", "turn this into SOPs".
+- Other languages: any equivalent phrasing. Match the user's intent, not exact words.
+
+When a capability intent appears:
+
+1. Run `npx @ericrisco/rsc list` to know what is already installed.
+2. Run `npx @ericrisco/rsc consult "<the user's exact intent>"`.
+3. Read the ordered result as the install queue, but pick only the **first missing**
+   skill that is useful right now. Skip `suggest` and any installed skill.
+4. Ask before installing: "Para esto instalaría `<id>`, que aún no tienes. ¿La instalo? (sí/no)".
+5. On yes, run `npx @ericrisco/rsc add <id>` and then continue the original request.
+
+Example: if the user says "quiero montar una pagina web para vender cursos online",
+do not just start building. Check the installed list, consult that exact phrase, and
+recommend the first missing skill from the returned queue. In a base install, `init`
+and `harness` may already exist, so the first missing skill is usually `nextjs`. In a
+bare install, `init` may be first. Install one skill at a time.
+
+Example: if the user says "hazme una secuencia de cold emails para vender mi SaaS",
+consult that exact phrase and recommend the first missing email/marketing skill rather
+than writing generic copy with no specialist loaded.
+
 ## Onboarding gate (first contact)
 
 Before handling the first request of the session, check the workspace state:
@@ -37,4 +73,3 @@ This is the universal layer every assistant reads. On Claude Code a SessionStart
 ## Orientación (siempre)
 
 Cierra cada turno con el **bloque-brújula** (📍 dónde estás · ✅ qué hiciste · 🧭 por qué · ➡️ siguiente, terminando en pregunta), calibrado al dial de `02-DOCS/wiki/harness/user-profile.md`. **Nunca termines en seco.** Protocolo completo: skill `orient` → `skills/orient/references/orientation-contract.md`. (Defiere a `suggest` el "¿instalo la skill que falta?".)
-

package/skills/suggest/evals/README.md

@@ -7,6 +7,9 @@ skill (and stays quiet when the task needs nothing new).
 |---|---|
 | "crear la tabla de pedidos en la base de datos" | suggests `postgresdb` |
 | "publicar mi web online con docker" | suggests `deployment` |
+| "quiero montar una pagina web para vender cursos online" | during agent use, consults the catalog and suggests the first missing startup/web skill, usually `nextjs` after base install |
+| "Automatiza el flujo de leads desde el formulario hasta mi CRM" | during agent use, consults the catalog and suggests the first missing automation/connector skill |
+| "Write a cold email sequence to sell my SaaS to agencies" | during agent use, consults the catalog and suggests the first missing email/marketing skill |
 | "renombra esta variable" | no suggestion (trivial, nothing to install) |
 
 A pass = the detector names the expected skill, asks a one-word confirm, and on

package/skills/suggest/evals/cases.yaml

@@ -6,6 +6,15 @@ skill: suggest
 # skill that already owns the task.
 
 should_trigger:
+  - prompt: "Quiero montar una pagina web para vender cursos online."
+    why: "Mid-conversation project-start intent — the detector should consult the catalog and propose the first missing skill from the startup queue (usually `nextjs` after the base install, or `init` in a bare install) before building."
+
+  - prompt: "Automatiza el flujo de leads desde el formulario hasta mi CRM."
+    why: "Mid-conversation automation/integration intent — the detector should consult the catalog and propose the first missing automation or connector skill before designing the workflow."
+
+  - prompt: "Write a cold email sequence to sell my SaaS to agencies."
+    why: "Mid-conversation creation/marketing intent — the detector should consult the catalog and propose the first missing email or marketing skill before writing generic copy."
+
   - prompt: "Ayúdame a montar la tabla de pedidos en la base de datos."
     why: "A database task with no DB skill present — the detector should propose `npx @ericrisco/rsc add postgresdb` before diving in."
 
@@ -49,3 +58,21 @@ capability:
       - "On confirmation, runs `npx @ericrisco/rsc add postgresdb` via Bash, then continues the original task"
       - "Checks what is already installed (npx @ericrisco/rsc list) and never proposes a skill the user already has"
       - "Makes at most one suggestion and does not interrupt the flow for nice-to-haves"
+
+  - scenario: "Mid-conversation, after base install, the user says 'quiero montar una pagina web para vender cursos online'. `init`, `harness`, `orient`, and `suggest` are already installed; `nextjs` is not. Show how rsc-suggest behaves."
+    must_include:
+      - "Treats the message as in-agent capability intent, not as a CLI-only consult task"
+      - "Runs `npx @ericrisco/rsc list` before recommending so installed `init`/`harness` are skipped"
+      - "Runs `npx @ericrisco/rsc consult \"quiero montar una pagina web para vender cursos online\"` or equivalent exact-intent consult"
+      - "Names `nextjs` as the first missing useful skill for the website work"
+      - "Asks one short confirmation before installing and does not auto-install"
+      - "On confirmation, runs `npx @ericrisco/rsc add nextjs`, then resumes the original website task"
+
+  - scenario: "Mid-conversation, the user says 'Automatiza el flujo de leads desde el formulario hasta mi CRM'. The base skills are installed, but `automation-flows` and CRM/connector skills are not. Show how rsc-suggest behaves."
+    must_include:
+      - "Treats the message as in-agent capability intent for automation/integration, not only as a coding task"
+      - "Runs `npx @ericrisco/rsc list` before recommending"
+      - "Runs `npx @ericrisco/rsc consult \"Automatiza el flujo de leads desde el formulario hasta mi CRM\"` or equivalent exact-intent consult"
+      - "Names the first missing useful automation/connector skill from the consult results"
+      - "Asks one short confirmation before installing and does not auto-install"
+      - "On confirmation, runs `npx @ericrisco/rsc add <id>` for that one missing skill, then resumes the automation task"