@ericrisco/rsc 4.0.1 → 4.0.2

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.0.1",
+  "version": "4.0.2",
   "counts": {
     "skills": 274,
     "agents": 34,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ericrisco/rsc",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "A guided harness builder that turns your goal into a minimal, verified AI-agent setup using strict best practices.",
   "type": "module",
   "bin": {

package/skills/implement/SKILL.md

@@ -258,8 +258,8 @@ each dispatch self-sufficient and make its return machine-checkable:
 - **Carry the task, not your context.** Hand the worker its task brief, its **Interfaces** block
   (`Consumes`/`Produces`, exact signatures — from `tasks`), and the plan's **§0 Global Constraints**.
   Anything not in those three is invisible to it. Prefer **file paths over pasted text** —
-  `scripts/task-brief <plan> <N>` (N as `1`, `001` or `T001`; reads the `tasks` table row plus any
-  `### T1` detail block) and `scripts/review-package` — pasted briefs and diffs stay resident in
+  `scripts/task-brief <plan> <N>` (N as `1`, `001` or `T001`; reads the `tasks` table row, its `**T001 — Interfaces**` block and
+  any `### T1` detail block) and `scripts/review-package` — pasted briefs and diffs stay resident in
   your context and get re-read every turn.
 - **Native isolation leaves worktrees behind.** A subagent dispatched with worktree isolation
   works in `.claude/worktrees/`. `rsc risk` ignores that folder, but after you cherry-pick the

package/skills/implement/scripts/task-brief

@@ -5,7 +5,8 @@
 #
 # Two task shapes are read, because `tasks` prescribes a table and older plans used headings:
 #   - a table row `| T002 | ... |` → the table's header, its separator and that row;
-#   - a heading `### T2 …` / `## T002 …` → the block up to the next ## / ### heading.
+#   - a heading `### T2 …` / `## T002 …` → the block up to the next ## / ### heading;
+#   - a bold block `**T002 — Interfaces**` → that line and what follows up to a blank line.
 # Both are printed when both exist (the row is the contract, the heading its detail).
 # If task N is not found, exits nonzero with a clear message.
 
@@ -42,7 +43,7 @@ esac
 
 CONTENT="$(awk -v n="$N" '
   function idnum(s) { sub(/^[Tt]/, "", s); return s + 0 }
-  BEGIN { n = n + 0; printing = 0; found = 0; head = ""; sep = "" }
+  BEGIN { n = n + 0; printing = 0; bold = 0; found = 0; head = ""; sep = "" }
   # Table rows: remember the latest header + separator, print the matching row.
   /^\|/ {
     split($0, cell, "|"); id = cell[2]; gsub(/[[:space:]]/, "", id)
@@ -52,6 +53,14 @@ CONTENT="$(awk -v n="$N" '
     else { head = $0; sep = "" }
     if (!printing) next
   }
+  # A bold block `**T004 — Interfaces**` (what `tasks` writes under the table): the line and every
+  # line after it up to the first blank one. It is the task-local contract an isolated worker needs.
+  bold && /^[[:space:]]*$/ { bold = 0 }
+  bold { print; next }
+  /^\*\*[Tt][0-9]+/ {
+    t = $0; sub(/^\*\*/, "", t); sub(/[^Tt0-9].*$/, "", t)
+    if (idnum(t) == n) { bold = 1; found = 1; print ""; print; next }
+  }
   /^#{2,3}[[:space:]]/ {
     if (printing) { printing = 0 }
     if (match($0, /^#{2,3}[[:space:]]+[Tt][0-9]+([[:space:](]|-|$)/)) {

package/targets/branch-guard.mjs

@@ -274,17 +274,26 @@ async function trunkDenial({ root, here, sessionId, self, trunk, policy }) {
   const branch = others.length
     ? '`git worktree add .worktrees/<branch> -b feat/<what>` and commit inside `.worktrees/<branch>/` (another session is working in this folder)'
     : '`git switch -c feat/<what>` in this same folder, no worktree';
-  return `This project keeps its default branch "${trunk}" closed for the agent (it looks complex or in production: ${policy.signals.join(', ')}), so this commit was not made. ` +
+  return `This project keeps its default branch "${trunk}" closed for the agent (it looks complex or in production: ${policy.signals.join(', ')}), so this change was not made. ` +
     `Do not choose for the person: ask them in one line whether to open a branch for this change or to unlock "${trunk}". ` +
     `Branch → ${branch}; it reaches "${trunk}" through a pull request. ` +
-    'Unlock → only on their explicit answer, `npx @ericrisco/rsc main unlock` (a project decision, saved in .rsc.json), then commit again.';
+    'Unlock → only on their explicit answer, `npx @ericrisco/rsc main unlock` (a project decision, saved in .rsc.json), then commit again. ' +
+    AUTOPILOT_LANDING;
 }
 
+// An autopilot run has nobody to ask, and the 4.0.1 test run read "ask them" as a reason to look for
+// another way in. Landing a finished branch is `ship`'s job, and with the trunk closed it has exactly
+// one legal path per case — this says which, so the denial ends the attempt instead of starting one.
+const AUTOPILOT_LANDING = 'In autopilot (nobody to ask) and landing a finished feature branch: do not merge another way — ' +
+  'with a remote, push the branch and open a pull request; without one, park it: write the exact merge command for the person ' +
+  'in `02-DOCS/wiki/sdd/progress/<slug>.md` and stop (the `ship` skill, "No remote").';
+
 function refDenial({ trunk, policy, how = '`git update-ref` and a forced `git branch`' }) {
   return `This project keeps its default branch "${trunk}" closed for the agent (it looks complex or in production: ${policy.signals.join(', ')}), so "${trunk}" was not moved — ` +
     `${how} land${how.includes(' and ') ? '' : 's'} work on it with no review. ` +
     `Work reaches "${trunk}" through a pull request: push the branch and open one (the \`ship\` skill). ` +
-    `Do not choose for the person: if they want "${trunk}" moved by hand, ask them in one line; only on their explicit answer, \`npx @ericrisco/rsc main unlock\` (a project decision, saved in .rsc.json).`;
+    `Do not choose for the person: if they want "${trunk}" moved by hand, ask them in one line; only on their explicit answer, \`npx @ericrisco/rsc main unlock\` (a project decision, saved in .rsc.json). ` +
+    AUTOPILOT_LANDING;
 }
 
 async function isolationDenial({ root, here, sessionId, self }) {