@lifeaitools/rdc-skills 0.20.2 → 0.20.3

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rdc",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "RDC typed-agent dispatch skill suite for Claude Code — plan, build, review, overnight unattended builds with work-item tracking and TDD enforcement.",
   "author": {
     "name": "LIFEAI",

package/bin/rdc-skills-mcp.mjs

@@ -39,6 +39,7 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { execFileSync } from 'node:child_process';
 
 import {
   listSkills,
@@ -62,6 +63,29 @@ function pkgVersion() {
   }
 }
 
+// Commit the running process actually LOADED — resolved ONCE at startup, never
+// per-request, so /health reports a PROVABLE commit. Resolution order:
+//   1. git-sha.json — baked at pack/publish (scripts/stamp-git-sha.mjs). This is
+//      the PRODUCTION path: the process runs from the npm install (no .git), so
+//      runtime rev-parse can't work — the stamped file is the source of truth.
+//   2. runtime `git rev-parse` — the DEV path (running straight from the checkout).
+//   3. env override, then 'unknown'.
+const GIT_SHA = (() => {
+  try {
+    const stamped = JSON.parse(fs.readFileSync(path.join(REPO_ROOT, 'git-sha.json'), 'utf8')).sha;
+    if (stamped && stamped !== 'unknown') return stamped;
+  } catch { /* not stamped — fall through to runtime/dev resolution */ }
+  try {
+    return execFileSync('git', ['rev-parse', 'HEAD'], {
+      cwd: REPO_ROOT,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+  } catch {
+    return process.env.RDC_SKILLS_GIT_SHA || 'unknown';
+  }
+})();
+
 // Soft process-wide default variant, updated whenever a client initializes.
 let lastDetectedVariant = 'cloud';
 
@@ -188,7 +212,7 @@ function startHttp() {
     } catch {
       skills = 0;
     }
-    res.json({ status: 'ok', service: 'rdc-skills-mcp', version: pkgVersion(), skills });
+    res.json({ status: 'ok', service: 'rdc-skills-mcp', version: pkgVersion(), git_sha: GIT_SHA, skills });
   });
 
   // Block OAuth discovery so connectors skip OAuth and connect direct — /mcp is open.

package/git-sha.json

@@ -0,0 +1,3 @@
+{
+  "sha": "9116bba71645a39735855cd9d8de292023f16496"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/rdc-skills",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "RDC typed-agent dispatch skill suite for Claude Code - plan, build, review, overnight builds",
   "keywords": [
     "claude-code",
@@ -38,7 +38,7 @@
     "test:mcp:remote": "node tests/mcp.test.mjs --remote",
     "mcp": "node bin/rdc-skills-mcp.mjs",
     "rebuild-mcp": "node scripts/rebuild-mcp.mjs",
-    "prepack": "node scripts/validate-publish-manifests.js --mode warn || true && node scripts/validate-place-histories.js --mode warn || true"
+    "prepack": "node scripts/validate-publish-manifests.js --mode warn || true && node scripts/validate-place-histories.js --mode warn || true && node scripts/stamp-git-sha.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",

package/scripts/stamp-git-sha.mjs

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+/**
+ * stamp-git-sha.mjs — bake the current git HEAD into git-sha.json at pack/publish
+ * time. The MCP server runs from the npm-installed copy (no .git), so it cannot
+ * `git rev-parse` at runtime; this build-time stamp is how /health reports a
+ * PROVABLE commit ("running artifact == this exact published commit"). Run from
+ * `prepack`, so `npm pack`/`npm publish` (incl. the publish.yml CI job at the
+ * tagged commit) embeds the right SHA. Never fails the build — writes 'unknown'
+ * if git is unavailable (e.g. a tarball-only checkout).
+ */
+import { execFileSync } from 'node:child_process';
+import { writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+let sha = 'unknown';
+try {
+  sha = execFileSync('git', ['rev-parse', 'HEAD'], {
+    cwd: root,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'ignore'],
+  }).trim();
+} catch {
+  sha = process.env.RDC_SKILLS_GIT_SHA || 'unknown';
+}
+const out = path.join(root, 'git-sha.json');
+writeFileSync(out, JSON.stringify({ sha }, null, 2) + '\n');
+console.error(`[stamp-git-sha] wrote ${out} sha=${sha}`);