@lifeaitools/rdc-skills 0.21.1 → 0.23.0

package/skills/review/SKILL.md

@@ -1,152 +1,152 @@
----
-name: rdc:review
-description: "Usage `rdc:review [--unattended]` — Post-build quality gate: tsc, tests, stale docs, export conflicts, and a mandatory pr-review-toolkit:code-reviewer pass across modified packages. Fixes what it can automatically, escalates the rest. Call after rdc:build and before merging to main."
----
-
-> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
-> Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
-> One checklist upfront, updated in place, shown again at end with a 1-line verdict.
-
-> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md`), then `{PROJECT_ROOT}/.rdc/guides/engineering-behavior.md` (fallback: `{PROJECT_ROOT}/.rdc/guides/engineering-behavior.md`).
-
-> **Sandbox contract:** This skill honors `RDC_TEST=1` per `guides/agent-bootstrap.md` § RDC_TEST Sandbox Contract. Destructive external calls short-circuit under the flag.
-
-
-# rdc:review — Quality Gate
-
-## When to Use
-- After a build session (especially overnight builds)
-- Before merging development → main/production
-- Project lead asks "review the work", "is everything clean"
-- Before any production deployment
-- Called by `rdc:overnight` after each epic build completes
-
-## Arguments
-- `rdc:review` — interactive review, pauses on issues needing judgment
-- `rdc:review --unattended` — silent mode, auto-fixes everything fixable
-
-## Procedure
-
-1. **Identify modified packages:**
-   ```bash
-   git diff --name-only origin/main...HEAD | grep "^packages/" | cut -d/ -f2 | sort -u
-   ```
-
-2. **Run tests for each modified package:**
-   ```bash
-   cd packages/<name> && npx vitest run 2>&1 | tail -10
-   ```
-   Report: package → test count → pass/fail → new tests added
-
-   **IMPORTANT:** `pnpm build` must NEVER be run (crashes system). Use `npx tsc --noEmit --project <path>/tsconfig.json` for typecheck instead. For packages without tests, typecheck is the verification method. Do NOT run vitest across the entire monorepo — check only modified packages individually.
-
-3. **Check test coverage delta:**
-   ```bash
-   git diff origin/main...HEAD -- packages/*/src/ | grep -c "^+" | head -5
-   git diff origin/main...HEAD -- packages/*/test* packages/*/src/**/*.test.* packages/*/src/**/*.spec.* 2>/dev/null | grep -c "^+" || echo 0
-   ```
-   Flag any package where implementation lines added > 50 but test lines added = 0.
-
-4. **Check for export conflicts:**
-   - Read `packages/*/src/index.ts` for any package with new exports
-   - Look for duplicate export names across the barrel
-   - Verify aliased exports don't shadow each other
-
-5. **Check for TODO/FIXME/HACK:**
-   ```bash
-   grep -rn "TODO\|FIXME\|HACK\|XXX" packages/*/src/ --include="*.ts" --include="*.tsx"
-   ```
-
-6. **Check package versions:**
-   - Any package with significant new code should have a version bump
-   - Compare package.json versions to what's in `docs/SYSTEM-STATE.md`
-
-7. **Check for stale CLAUDE.md:**
-   - If new modules were added to a package, does its CLAUDE.md mention them?
-   - Flag any package where exports grew by >10 lines but CLAUDE.md wasn't updated
-
-8. **Orphan work item audit:**
-   ```sql
-   SELECT id, title, item_type, status, source, created_at::date
-   FROM work_items
-   WHERE parent_id IS NULL
-     AND item_type NOT IN ('epic', 'bug')
-     AND status NOT IN ('done', 'archived')
-   ORDER BY created_at DESC;
-   ```
-   For each orphaned task found:
-   - If it clearly belongs to an open epic → **do not run raw SQL**. No RPC exists for re-parenting. Create a work item: `SELECT insert_work_item(p_title := 'Re-parent orphaned task <task-id> to epic <epic-id>', p_priority := 'normal', p_source := 'agent')` and flag for supervisor to re-parent manually.
-   - If unclear → report (interactive) or flag in REVIEW_STATUS (unattended)
-   - Never silently leave orphaned tasks
-   - **⛔ Raw `UPDATE work_items SET parent_id = ...` is forbidden** — bypasses RLS and all constraint checks
-
-8b. **Mandatory code-review gate — dispatch pr-review-toolkit:code-reviewer:**
-
-   ⛔ **No CLEAN verdict without a code-review pass.** This is the second half of the quality gate; tsc/vitest catch type and behavior errors, code-reviewer catches logic, security, and convention drift.
-
-   Dispatch ONE `pr-review-toolkit:code-reviewer` agent on the full diff under review:
-
-   ```
-   Agent({
-     subagent_type: "pr-review-toolkit:code-reviewer",
-     description: "rdc:review code-review pass",
-     prompt: "Review `git diff origin/main...HEAD` on the development branch.
-              Focus on: bugs, logic errors, security vulnerabilities, project-convention
-              adherence (.claude/rules/*, CLAUDE.md, engineering-behavior.md).
-              Confidence-based filtering — high-confidence findings only.
-              Return CODE_REVIEW_COMPLETE with: { critical_count, high_count, medium_count,
-              low_count, findings: [{severity, file:line, issue, suggested_fix}] }."
-   })
-   ```
-
-   **Severity gate:**
-   - `critical` or `high` → verdict cannot be CLEAN. Interactive: report and pause. Unattended: auto-fix if mechanical (rename, missing await, obvious null check), otherwise escalate via advisor and mark HAS_ISSUES.
-   - `medium` or `low` → record in the review report's "Issues" section; verdict can still be CLEAN.
-   - Zero findings → log `CODE_REVIEW: CLEAN` and continue.
-
-   Under `RDC_TEST=1`: echo `[RDC_TEST] skipping code-review dispatch` and continue.
-
-9. **Verification gate — dispatch the verify agent:**
-   After any fixes land, run the verify gate on every touched package. See `guides/agents/verify.md`.
-   Apply `guides/engineering-behavior.md` while reviewing: flag unnecessary abstraction, drive-by refactors, missing assumptions, hidden uncertainty, out-of-scope edits, and prose-only verification.
-   **Iron Law: no CLEAN verdict without fresh evidence.** Quote the checklist decomposition verdict, vitest output, and tsc output in the report.
-   The verify agent must reject any work item that lacks passed `decomp-*` checklist rows or whose rows are too coarse to prove one observable behavior at a time.
-   If verify fails → do NOT emit CLEAN. Loop back, fix, re-run verify.
-
-10. **Fix issues found:**
-   - Failing tests → fix and commit
-   - Export conflicts → resolve and commit
-   - Missing version bumps → bump and commit
-   - All fixes as separate commits with descriptive messages
-
-   **Judgment calls:**
-   - Interactive: report — don't guess
-   - Unattended: escalate via advisor tool with: error message, surrounding context,
-     two most likely fix paths. Resume with advisor's recommendation.
-     If advisor unavailable: take the most conservative path, flag in status block.
-
-11. **Report:**
-    - Interactive:
-      ```
-      ## Review Results
-      | Package | Tests | Pass/Fail | New Tests | Issues |
-      ## Fixed
-      ## Remaining Issues
-      ## Verdict: CLEAN / HAS ISSUES
-      ```
-    - Unattended: emit status block only:
-      ```
-      REVIEW_STATUS: { verdict: "CLEAN|HAS_ISSUES", packages_checked, tests_passed, tests_failed, new_tests_added, fixes_applied, escalations }
-      ```
-
-## Rules
-- Do NOT run `pnpm build` (crashes system) — vitest only
-- Interactive: fix what you can, flag what needs decision
-- Unattended: fix everything fixable; escalate judgment calls to advisor
-- Each fix is a separate commit (not batched)
-- Always push fixes to origin after committing *(skip if `$RDC_TEST=1` — echo `[RDC_TEST] skipping git push` instead)*
-- Unattended: NEVER pause for input
-
-## Capture lessons (exit step)
-
-Before the final verdict line, follow `.rdc/guides/lessons-learned-spec.md` § Capture procedure. If this run taught something non-obvious — a first root-cause theory that turned out wrong, the documented/standard path not working, a missing gate or check that cost a round, or a surprising tool/infra behavior — write one `.rdc/lessons/<YYYY-MM-DD>-review-<short-slug>.md` per lesson using the schema in that spec. Set `scope` (`simple` | `architectural`) and `status` (`open`, or `applied` if you shipped the fix in this same run, with the commit linked). Commit the lesson file(s) on `develop` alongside the run's other commits, and note "N lessons captured" in your verdict/summary. A run that taught nothing writes nothing — absence is the default.
+---
+name: rdc:review
+description: "Usage `rdc:review [--unattended]` — Post-build quality gate: tsc, tests, stale docs, export conflicts, and a mandatory pr-review-toolkit:code-reviewer pass across modified packages. Fixes what it can automatically, escalates the rest. Call after rdc:build and before merging to main."
+---
+
+> **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
+> Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
+> One checklist upfront, updated in place, shown again at end with a 1-line verdict.
+
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md`), then `{PROJECT_ROOT}/.rdc/guides/engineering-behavior.md` (fallback: `{PROJECT_ROOT}/.rdc/guides/engineering-behavior.md`).
+
+> **Sandbox contract:** This skill honors `RDC_TEST=1` per `guides/agent-bootstrap.md` § RDC_TEST Sandbox Contract. Destructive external calls short-circuit under the flag.
+
+
+# rdc:review — Quality Gate
+
+## When to Use
+- After a build session (especially overnight builds)
+- Before merging development → main/production
+- Project lead asks "review the work", "is everything clean"
+- Before any production deployment
+- Called by `rdc:overnight` after each epic build completes
+
+## Arguments
+- `rdc:review` — interactive review, pauses on issues needing judgment
+- `rdc:review --unattended` — silent mode, auto-fixes everything fixable
+
+## Procedure
+
+1. **Identify modified packages:**
+   ```bash
+   git diff --name-only origin/main...HEAD | grep "^packages/" | cut -d/ -f2 | sort -u
+   ```
+
+2. **Run tests for each modified package:**
+   ```bash
+   cd packages/<name> && npx vitest run 2>&1 | tail -10
+   ```
+   Report: package → test count → pass/fail → new tests added
+
+   **IMPORTANT:** `pnpm build` must NEVER be run (crashes system). Use `npx tsc --noEmit --project <path>/tsconfig.json` for typecheck instead. For packages without tests, typecheck is the verification method. Do NOT run vitest across the entire monorepo — check only modified packages individually.
+
+3. **Check test coverage delta:**
+   ```bash
+   git diff origin/main...HEAD -- packages/*/src/ | grep -c "^+" | head -5
+   git diff origin/main...HEAD -- packages/*/test* packages/*/src/**/*.test.* packages/*/src/**/*.spec.* 2>/dev/null | grep -c "^+" || echo 0
+   ```
+   Flag any package where implementation lines added > 50 but test lines added = 0.
+
+4. **Check for export conflicts:**
+   - Read `packages/*/src/index.ts` for any package with new exports
+   - Look for duplicate export names across the barrel
+   - Verify aliased exports don't shadow each other
+
+5. **Check for TODO/FIXME/HACK:**
+   ```bash
+   grep -rn "TODO\|FIXME\|HACK\|XXX" packages/*/src/ --include="*.ts" --include="*.tsx"
+   ```
+
+6. **Check package versions:**
+   - Any package with significant new code should have a version bump
+   - Compare package.json versions to what's in `docs/SYSTEM-STATE.md`
+
+7. **Check for stale CLAUDE.md:**
+   - If new modules were added to a package, does its CLAUDE.md mention them?
+   - Flag any package where exports grew by >10 lines but CLAUDE.md wasn't updated
+
+8. **Orphan work item audit:**
+   ```sql
+   SELECT id, title, item_type, status, source, created_at::date
+   FROM work_items
+   WHERE parent_id IS NULL
+     AND item_type NOT IN ('epic', 'bug')
+     AND status NOT IN ('done', 'archived')
+   ORDER BY created_at DESC;
+   ```
+   For each orphaned task found:
+   - If it clearly belongs to an open epic → **do not run raw SQL**. No RPC exists for re-parenting. Create a work item: `SELECT insert_work_item(p_title := 'Re-parent orphaned task <task-id> to epic <epic-id>', p_priority := 'normal', p_source := 'agent')` and flag for supervisor to re-parent manually.
+   - If unclear → report (interactive) or flag in REVIEW_STATUS (unattended)
+   - Never silently leave orphaned tasks
+   - **⛔ Raw `UPDATE work_items SET parent_id = ...` is forbidden** — bypasses RLS and all constraint checks
+
+8b. **Mandatory code-review gate — dispatch pr-review-toolkit:code-reviewer:**
+
+   ⛔ **No CLEAN verdict without a code-review pass.** This is the second half of the quality gate; tsc/vitest catch type and behavior errors, code-reviewer catches logic, security, and convention drift.
+
+   Dispatch ONE `pr-review-toolkit:code-reviewer` agent on the full diff under review:
+
+   ```
+   Agent({
+     subagent_type: "pr-review-toolkit:code-reviewer",
+     description: "rdc:review code-review pass",
+     prompt: "Review `git diff origin/main...HEAD` on the development branch.
+              Focus on: bugs, logic errors, security vulnerabilities, project-convention
+              adherence (.claude/rules/*, CLAUDE.md, engineering-behavior.md).
+              Confidence-based filtering — high-confidence findings only.
+              Return CODE_REVIEW_COMPLETE with: { critical_count, high_count, medium_count,
+              low_count, findings: [{severity, file:line, issue, suggested_fix}] }."
+   })
+   ```
+
+   **Severity gate:**
+   - `critical` or `high` → verdict cannot be CLEAN. Interactive: report and pause. Unattended: auto-fix if mechanical (rename, missing await, obvious null check), otherwise escalate via advisor and mark HAS_ISSUES.
+   - `medium` or `low` → record in the review report's "Issues" section; verdict can still be CLEAN.
+   - Zero findings → log `CODE_REVIEW: CLEAN` and continue.
+
+   Under `RDC_TEST=1`: echo `[RDC_TEST] skipping code-review dispatch` and continue.
+
+9. **Verification gate — dispatch the verify agent:**
+   After any fixes land, run the verify gate on every touched package. See `guides/agents/verify.md`.
+   Apply `guides/engineering-behavior.md` while reviewing: flag unnecessary abstraction, drive-by refactors, missing assumptions, hidden uncertainty, out-of-scope edits, and prose-only verification.
+   **Iron Law: no CLEAN verdict without fresh evidence.** Quote the checklist decomposition verdict, vitest output, and tsc output in the report.
+   The verify agent must reject any work item that lacks passed `decomp-*` checklist rows or whose rows are too coarse to prove one observable behavior at a time.
+   If verify fails → do NOT emit CLEAN. Loop back, fix, re-run verify.
+
+10. **Fix issues found:**
+   - Failing tests → fix and commit
+   - Export conflicts → resolve and commit
+   - Missing version bumps → bump and commit
+   - All fixes as separate commits with descriptive messages
+
+   **Judgment calls:**
+   - Interactive: report — don't guess
+   - Unattended: escalate via advisor tool with: error message, surrounding context,
+     two most likely fix paths. Resume with advisor's recommendation.
+     If advisor unavailable: take the most conservative path, flag in status block.
+
+11. **Report:**
+    - Interactive:
+      ```
+      ## Review Results
+      | Package | Tests | Pass/Fail | New Tests | Issues |
+      ## Fixed
+      ## Remaining Issues
+      ## Verdict: CLEAN / HAS ISSUES
+      ```
+    - Unattended: emit status block only:
+      ```
+      REVIEW_STATUS: { verdict: "CLEAN|HAS_ISSUES", packages_checked, tests_passed, tests_failed, new_tests_added, fixes_applied, escalations }
+      ```
+
+## Rules
+- Do NOT run `pnpm build` (crashes system) — vitest only
+- Interactive: fix what you can, flag what needs decision
+- Unattended: fix everything fixable; escalate judgment calls to advisor
+- Each fix is a separate commit (not batched)
+- Always push fixes to origin after committing *(skip if `$RDC_TEST=1` — echo `[RDC_TEST] skipping git push` instead)*
+- Unattended: NEVER pause for input
+
+## Capture lessons (exit step)
+
+Before the final verdict line, follow `.rdc/guides/lessons-learned-spec.md` § Capture procedure. If this run taught something non-obvious — a first root-cause theory that turned out wrong, the documented/standard path not working, a missing gate or check that cost a round, or a surprising tool/infra behavior — write one `.rdc/lessons/<YYYY-MM-DD>-review-<short-slug>.md` per lesson using the schema in that spec. Set `scope` (`simple` | `architectural`) and `status` (`open`, or `applied` if you shipped the fix in this same run, with the commit linked). Commit the lesson file(s) on `develop` alongside the run's other commits, and note "N lessons captured" in your verdict/summary. A run that taught nothing writes nothing — absence is the default.

package/skills/rpms-filemap/SKILL.cloud.md

@@ -0,0 +1,107 @@
+---
+description: "Generated RPMS file map — RULE #1, canonical homes, and Context Export pointers served from regen-root manifest."
+slash: "rdc:rpms-filemap"
+category: "tooling"
+usage: "rdc:rpms-filemap"
+requires: []
+triggers:
+  - "rpms file map"
+  - "rule #1"
+  - "context export"
+  - "where does this file belong"
+  - "where should pm artifacts go"
+---
+# RPMS File Map
+> GENERATED FILE - DO NOT HAND-EDIT.
+> Source of truth: `docs/architecture/rpms.locations.json`
+> Regenerate: `pnpm rpms:gen-filemap`
+
+## RULE #1
+
+**Name the entity -> read its `_context.md` -> you are oriented.**
+
+The operational door is pinned in `docs/architecture/CONTEXT-EXPORT.md` and in RPMS section 8.1.
+If you are touching an entity, read its generated `_context.md` before any local reasoning, and never hand-edit that projection.
+
+## Pointers
+
+- RPMS section 6a: Asset lens and branch-store split
+- RPMS section 6b: Corpus disk layout
+- RPMS section 8.1: Session-start ritual and locked-decision read order
+
+## Canonical Map
+
+### Canonical Sources
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `canon.rpms.architecture` | `docs/architecture/regenerative-project-management-system.md` | `read_only` | One Home Per Fact, One Door | `block_wrong_home`<br />`path_conformance` | docs/architecture/regenerative-project-management-system.md | `active` |
+| `canon.context-export.single-door` | `docs/architecture/CONTEXT-EXPORT.md` | `read_only` | One Direction, One Door | `block_wrong_home`<br />`path_conformance` | docs/architecture/CONTEXT-EXPORT.md | `active` |
+
+### Session Start
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.claude-ai.root` | `CLAUDE.ai.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | repo-root | `active` |
+| `session-start.claude.root` | `CLAUDE.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | repo-root | `active` |
+| `session-start.decision.spine-lock` | `.rdc/plans/project-relationship-graph-approval.md` | `read_only` | One Spine, One Door | `block_wrong_home`<br />`path_conformance` | .rdc/plans/project-relationship-graph-approval.md | `active` |
+| `session-start.decision.cs2-lock` | `.rdc/plans/mdk-knowledge-decisions-and-workitems-2026-06-02.md` | `read_only` | One Direction, One Door | `block_wrong_home`<br />`path_conformance` | .rdc/plans/mdk-knowledge-decisions-and-workitems-2026-06-02.md | `active` |
+| `session-start.glossary.layer-model` | `docs/systems/cs2/LAYER-MODEL-AND-VOCABULARY.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | docs/systems/cs2/LAYER-MODEL-AND-VOCABULARY.md | `active` |
+
+### Database Gates
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.work-items.queue` | `table:work_items via rpc:get_open_epics` | `rpc_only` | One Home Per Fact, One Door | `rpc_only`<br />`rpc_contract`<br />CRUD stays behind insert_work_item/update_work_item_status/update_checklist_item/submit_implementation_report. | public.work_items + RPC gate | `active` |
+
+### Place Corpus
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.entity-context.place` | `places/*/_context.md`<br />created_by: `apps/studio/src/lib/context-export-writer.ts` | `generated` | One Direction, One Door | `block_manual_edit`<br />`projection_drift` | context-export writer | `active` |
+| `place.identity.place-md` | `places/*/PLACE.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | place stewards | `active` |
+| `place.history.history-md` | `places/*/HISTORY.md` | `append_only` | One Direction, One Home Per Fact | `allow_declared_home`<br />`path_conformance` | place stewards | `active` |
+| `place.corpus.index` | `places/*/corpus/INDEX.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | place corpus | `active` |
+| `place.corpus.documents` | `places/*/corpus/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban`<br />Text and markdown live here; binaries route to branch stores. | place corpus | `active` |
+| `place.artifacts.outputs` | `places/*/artifacts/**` | `generated` | One Direction | `allow_declared_home`<br />`path_conformance` | render pipelines | `active` |
+| `place.legacy.asset-bundles` | `places/*/*.assets/**` | `legacy_frozen` | One Direction, One Home Per Fact | `block_manual_edit`<br />`path_conformance`<br />Bridge-state allowlist for current repo reality; no new writes here. | legacy bridge until asset-lens migration | `active` |
+| `place.tracker.pm-docs` | `places/*/tracker/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | place operators | `active` |
+
+### Shared Corpus
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.entity-context.project-node` | `corpus/_shared/*/_context.md`<br />created_by: `apps/studio/src/lib/context-export-writer.ts` | `generated` | One Direction, One Door | `block_manual_edit`<br />`projection_drift` | context-export writer | `active` |
+| `shared.index` | `corpus/_shared/*/INDEX.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | shared corpus | `active` |
+| `shared.framework.documents` | `corpus/_shared/*/framework/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | shared corpus | `active` |
+| `shared.research.documents` | `corpus/_shared/*/research/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | shared corpus | `active` |
+| `shared.legacy.design-assets` | `corpus/_shared/*/design/**/assets/**` | `legacy_frozen` | One Direction, One Home Per Fact | `block_manual_edit`<br />`path_conformance`<br />Bridge-state allowlist for current repo reality; no new writes here. | legacy bridge until asset-lens migration | `active` |
+| `shared.corpus.documents` | `corpus/_shared/` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban`<br />Generated _context.md remains separately governed by projection drift. | shared corpus | `active` |
+
+### Asset Lens
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `asset-lens.entity-assets.registry` | `table:entity_assets` | `deferred` | One Spine, One Home Per Fact | `deferred`<br />`deferred`<br />Manifest records the canonical home now; implementation remains deferred per plan section 6a E7. | RPMS E7 | `deferred` |
+
+### Operational Door
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `operational-door.rdc.plans` | `.rdc/plans/**` | `authored` | One Home Per Fact, One Direction | `allow_declared_home`<br />`path_conformance` | RDC planning workflow | `active` |
+| `operational-door.rdc.reports` | `.rdc/reports/**` | `generated` | One Direction | `allow_declared_home`<br />`path_conformance` | rdc:report | `active` |
+| `operational-door.rdc.lessons` | `.rdc/lessons/**` | `append_only` | One Direction, One Home Per Fact | `allow_declared_home`<br />`path_conformance` | RDC lesson capture workflow | `active` |
+| `operational-door.rpms-filemap.rule` | `.claude/rules/rpms-filemap.md`<br />created_by: `scripts/rpms/gen-filemap.ts` | `generated` | One Home Per Fact, One Direction, One Door | `block_manual_edit`<br />`projection_drift` | scripts/rpms/gen-filemap.ts | `active` |
+
+### App Guides
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.app-guide` | `apps/*/CLAUDE.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | app-local architecture guides | `active` |
+
+## Projection Contract
+
+- Generated projections (`_context.md`, this rule) are never hand-edited.
+- Authored markdown stays in its declared home; do not create second homes elsewhere.
+- `work_items` stays RPC-only even when the location is documented here.
+- Corpus homes are text-first; binaries route to branch stores, not git under `places/` or `corpus/`.

package/skills/rpms-filemap/SKILL.md

@@ -0,0 +1,107 @@
+---
+description: "Generated RPMS file map — RULE #1, canonical homes, and Context Export pointers served from regen-root manifest."
+slash: "rdc:rpms-filemap"
+category: "tooling"
+usage: "rdc:rpms-filemap"
+requires: []
+triggers:
+  - "rpms file map"
+  - "rule #1"
+  - "context export"
+  - "where does this file belong"
+  - "where should pm artifacts go"
+---
+# RPMS File Map
+> GENERATED FILE - DO NOT HAND-EDIT.
+> Source of truth: `docs/architecture/rpms.locations.json`
+> Regenerate: `pnpm rpms:gen-filemap`
+
+## RULE #1
+
+**Name the entity -> read its `_context.md` -> you are oriented.**
+
+The operational door is pinned in `docs/architecture/CONTEXT-EXPORT.md` and in RPMS section 8.1.
+If you are touching an entity, read its generated `_context.md` before any local reasoning, and never hand-edit that projection.
+
+## Pointers
+
+- RPMS section 6a: Asset lens and branch-store split
+- RPMS section 6b: Corpus disk layout
+- RPMS section 8.1: Session-start ritual and locked-decision read order
+
+## Canonical Map
+
+### Canonical Sources
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `canon.rpms.architecture` | `docs/architecture/regenerative-project-management-system.md` | `read_only` | One Home Per Fact, One Door | `block_wrong_home`<br />`path_conformance` | docs/architecture/regenerative-project-management-system.md | `active` |
+| `canon.context-export.single-door` | `docs/architecture/CONTEXT-EXPORT.md` | `read_only` | One Direction, One Door | `block_wrong_home`<br />`path_conformance` | docs/architecture/CONTEXT-EXPORT.md | `active` |
+
+### Session Start
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.claude-ai.root` | `CLAUDE.ai.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | repo-root | `active` |
+| `session-start.claude.root` | `CLAUDE.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | repo-root | `active` |
+| `session-start.decision.spine-lock` | `.rdc/plans/project-relationship-graph-approval.md` | `read_only` | One Spine, One Door | `block_wrong_home`<br />`path_conformance` | .rdc/plans/project-relationship-graph-approval.md | `active` |
+| `session-start.decision.cs2-lock` | `.rdc/plans/mdk-knowledge-decisions-and-workitems-2026-06-02.md` | `read_only` | One Direction, One Door | `block_wrong_home`<br />`path_conformance` | .rdc/plans/mdk-knowledge-decisions-and-workitems-2026-06-02.md | `active` |
+| `session-start.glossary.layer-model` | `docs/systems/cs2/LAYER-MODEL-AND-VOCABULARY.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | docs/systems/cs2/LAYER-MODEL-AND-VOCABULARY.md | `active` |
+
+### Database Gates
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.work-items.queue` | `table:work_items via rpc:get_open_epics` | `rpc_only` | One Home Per Fact, One Door | `rpc_only`<br />`rpc_contract`<br />CRUD stays behind insert_work_item/update_work_item_status/update_checklist_item/submit_implementation_report. | public.work_items + RPC gate | `active` |
+
+### Place Corpus
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.entity-context.place` | `places/*/_context.md`<br />created_by: `apps/studio/src/lib/context-export-writer.ts` | `generated` | One Direction, One Door | `block_manual_edit`<br />`projection_drift` | context-export writer | `active` |
+| `place.identity.place-md` | `places/*/PLACE.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | place stewards | `active` |
+| `place.history.history-md` | `places/*/HISTORY.md` | `append_only` | One Direction, One Home Per Fact | `allow_declared_home`<br />`path_conformance` | place stewards | `active` |
+| `place.corpus.index` | `places/*/corpus/INDEX.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | place corpus | `active` |
+| `place.corpus.documents` | `places/*/corpus/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban`<br />Text and markdown live here; binaries route to branch stores. | place corpus | `active` |
+| `place.artifacts.outputs` | `places/*/artifacts/**` | `generated` | One Direction | `allow_declared_home`<br />`path_conformance` | render pipelines | `active` |
+| `place.legacy.asset-bundles` | `places/*/*.assets/**` | `legacy_frozen` | One Direction, One Home Per Fact | `block_manual_edit`<br />`path_conformance`<br />Bridge-state allowlist for current repo reality; no new writes here. | legacy bridge until asset-lens migration | `active` |
+| `place.tracker.pm-docs` | `places/*/tracker/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | place operators | `active` |
+
+### Shared Corpus
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.entity-context.project-node` | `corpus/_shared/*/_context.md`<br />created_by: `apps/studio/src/lib/context-export-writer.ts` | `generated` | One Direction, One Door | `block_manual_edit`<br />`projection_drift` | context-export writer | `active` |
+| `shared.index` | `corpus/_shared/*/INDEX.md` | `authored` | One Home Per Fact, One Door | `allow_declared_home`<br />`path_conformance` | shared corpus | `active` |
+| `shared.framework.documents` | `corpus/_shared/*/framework/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | shared corpus | `active` |
+| `shared.research.documents` | `corpus/_shared/*/research/**` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban` | shared corpus | `active` |
+| `shared.legacy.design-assets` | `corpus/_shared/*/design/**/assets/**` | `legacy_frozen` | One Direction, One Home Per Fact | `block_manual_edit`<br />`path_conformance`<br />Bridge-state allowlist for current repo reality; no new writes here. | legacy bridge until asset-lens migration | `active` |
+| `shared.corpus.documents` | `corpus/_shared/` | `authored` | One Home Per Fact | `block_binary_commit`<br />`binary_ban`<br />Generated _context.md remains separately governed by projection drift. | shared corpus | `active` |
+
+### Asset Lens
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `asset-lens.entity-assets.registry` | `table:entity_assets` | `deferred` | One Spine, One Home Per Fact | `deferred`<br />`deferred`<br />Manifest records the canonical home now; implementation remains deferred per plan section 6a E7. | RPMS E7 | `deferred` |
+
+### Operational Door
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `operational-door.rdc.plans` | `.rdc/plans/**` | `authored` | One Home Per Fact, One Direction | `allow_declared_home`<br />`path_conformance` | RDC planning workflow | `active` |
+| `operational-door.rdc.reports` | `.rdc/reports/**` | `generated` | One Direction | `allow_declared_home`<br />`path_conformance` | rdc:report | `active` |
+| `operational-door.rdc.lessons` | `.rdc/lessons/**` | `append_only` | One Direction, One Home Per Fact | `allow_declared_home`<br />`path_conformance` | RDC lesson capture workflow | `active` |
+| `operational-door.rpms-filemap.rule` | `.claude/rules/rpms-filemap.md`<br />created_by: `scripts/rpms/gen-filemap.ts` | `generated` | One Home Per Fact, One Direction, One Door | `block_manual_edit`<br />`projection_drift` | scripts/rpms/gen-filemap.ts | `active` |
+
+### App Guides
+
+| Artifact | Home | RW | Law | Enforcement | Owner | Status |
+|----------|------|----|-----|-------------|-------|--------|
+| `session-start.app-guide` | `apps/*/CLAUDE.md` | `read_only` | One Door | `block_wrong_home`<br />`path_conformance` | app-local architecture guides | `active` |
+
+## Projection Contract
+
+- Generated projections (`_context.md`, this rule) are never hand-edited.
+- Authored markdown stays in its declared home; do not create second homes elsewhere.
+- `work_items` stays RPC-only even when the location is documented here.
+- Corpus homes are text-first; binaries route to branch stores, not git under `places/` or `corpus/`.