@lifeaitools/rdc-skills 0.31.1 → 0.31.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rdc",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "RDC typed-agent dispatch skill suite for Claude Code — plan, build, review, overnight unattended builds with work-item tracking and TDD enforcement.",
   "author": {
     "name": "LIFEAI",

package/deploy/install-systemd.sh

@@ -10,6 +10,12 @@ if [[ "$repo_root" != "/srv/regen/rdc-skills" ]]; then
   exit 1
 fi
 
+cd "$repo_root"
+# The MCP imports declared runtime dependencies (including express).  A Git
+# checkout alone cannot satisfy those imports after a clean host or dependency
+# cleanup, so install the committed production graph before the unit is enabled.
+npm ci --omit=dev --no-audit --no-fund
+
 install -m 0644 "$unit_source" "$unit_target"
 systemctl daemon-reload
 systemctl enable --now rdc-skills-mcp.service

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/rdc-skills",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "RDC typed-agent dispatch skill suite for Claude Code - plan, build, review, overnight builds",
   "keywords": [
     "claude-code",

package/tests/install-rdc-skills.test.mjs

@@ -2,7 +2,7 @@
 import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
 import { createRequire } from 'node:module';
-import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -31,6 +31,16 @@ assert.equal(
   packageJson.version,
   'plugin manifest version must match the published package version',
 );
+const packageLockPath = join(REPO_ROOT, 'package-lock.json');
+assert.equal(existsSync(packageLockPath), true, 'systemd deployment requires a committed package-lock.json for npm ci');
+const packageLock = JSON.parse(readFileSync(packageLockPath, 'utf8'));
+assert.equal(packageLock.version, packageJson.version, 'package-lock version must match package.json');
+const systemdInstaller = readFileSync(join(REPO_ROOT, 'deploy', 'install-systemd.sh'), 'utf8');
+assert.match(
+  systemdInstaller,
+  /npm ci --omit=dev --no-audit --no-fund/,
+  'systemd installer must install the locked production dependency graph before starting the MCP',
+);
 const skillCount = Array.isArray(plugin.skills_meta)
   ? plugin.skills_meta.length
   : Object.keys(plugin.skills_meta || {}).length;