@lifeaitools/rdc-skills 0.33.0 → 0.34.0

package/skills/behavior-audit/agents/openai.yaml

@@ -1,4 +1,4 @@
-interface:
-  display_name: "Behavior Audit"
-  short_description: "Audit Claude and Codex behavior against shared rules."
-  default_prompt: "Run a behavior audit for the last seven days and write the evidence bundle to a report directory."
+interface:
+  display_name: "Behavior Audit"
+  short_description: "Audit Claude and Codex behavior against shared rules."
+  default_prompt: "Run a behavior audit for the last seven days and write the evidence bundle to a report directory."

package/skills/tests/onramp.test.json

@@ -1,101 +1,101 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:onramp",
-  "description": "Tier-2 self-test for rdc:onramp enrollment skill",
-  "tier": 2,
-  "sandbox": true,
-  "env": {
-    "RDC_TEST": "1"
-  },
-  "invocation": {
-    "slug": "onramp-selftest",
-    "name": "Onramp Self Test",
-    "flags": ["--archetype", "working-landscapes", "--dry-run"]
-  },
-  "fixture": {
-    "prompt": "rdc:onramp onramp-selftest --name \"Onramp Self Test\" --archetype working-landscapes --dry-run",
-    "env": { "RDC_\u0054EST": "1" },
-    "slow": true
-  },
-  "assertions": {
-    "exit_code": 0,
-    "stdout_contains": ["Preflight", "Resolve drift"]
-  },
-  "acceptance": {
-    "output_contains": ["Preflight", "Resolve drift", "disk-ahead", "already-enrolled"],
-    "output_not_contains": ["hand-edit _context.md", "raw insert"]
-  },
-  "legacy_assertions": [
-    {
-      "type": "exit_code",
-      "expect": 0,
-      "description": "Skill exits cleanly under RDC_TEST with --dry-run"
-    },
-    {
-      "type": "stdout_contains",
-      "pattern": "Preflight",
-      "description": "Checklist begins with Preflight step"
-    },
-    {
-      "type": "stdout_contains",
-      "pattern": "Resolve drift",
-      "description": "Drift resolution step is emitted"
-    },
-    {
-      "type": "stdout_contains",
-      "pattern": "\\[RDC_TEST\\]",
-      "description": "Sandbox short-circuit marker present — confirms external calls were skipped"
-    },
-    {
-      "type": "file_absent",
-      "path": "places/onramp-selftest/_context.md",
-      "description": "Scaffolder MUST NOT write _context.md — projection-drift violation gate"
-    }
-  ],
-  "door_contracts": [
-    {
-      "name": "enroll_place_signature",
-      "description": "enroll_place RPC must accept (text, text, jsonb, text) and return jsonb",
-      "type": "rpc_introspection",
-      "project_id": "uvojezuorjgqzmhhgluu",
-      "query": "SELECT p.proname, pg_get_function_identity_arguments(p.oid) AS args, pg_get_function_result(p.oid) AS returns FROM pg_proc p WHERE p.proname = 'enroll_place';",
-      "expect_args_contains": ["text", "jsonb"],
-      "expect_returns": "jsonb"
-    },
-    {
-      "name": "insert_work_item_accepts_project_node_id",
-      "description": "insert_work_item must accept p_project_node_id parameter",
-      "type": "rpc_introspection",
-      "project_id": "uvojezuorjgqzmhhgluu",
-      "query": "SELECT proname, pg_get_function_identity_arguments(oid) FROM pg_proc WHERE proname = 'insert_work_item';",
-      "expect_args_contains": ["p_project_node_id"]
-    }
-  ],
-  "disk_ahead_test": {
-    "description": "disk-ahead state must STOP and open a reconciliation work item",
-    "setup": "mkdir -p places/disk-ahead-test",
-    "invocation_slug": "disk-ahead-test",
-    "invocation_name": "Disk Ahead Test",
-    "assertions": [
-      {
-        "type": "stdout_contains",
-        "pattern": "disk-ahead",
-        "description": "Skill identifies the disk-ahead state"
-      },
-      {
-        "type": "stdout_contains",
-        "pattern": "STOP",
-        "description": "Skill STOPs on disk-ahead"
-      },
-      {
-        "type": "exit_nonzero",
-        "description": "Skill exits non-zero on disk-ahead (not a clean enrollment)"
-      }
-    ],
-    "teardown": "rmdir places/disk-ahead-test 2>/dev/null || true"
-  },
-  "idempotency_test": {
-    "description": "Running rdc:onramp twice for already-enrolled should produce zero new writes",
-    "note": "Under RDC_TEST=1 this is verified by checking that [RDC_TEST] skipping markers appear (not real insert calls) and the checklist reports already-enrolled"
-  }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:onramp",
+  "description": "Tier-2 self-test for rdc:onramp enrollment skill",
+  "tier": 2,
+  "sandbox": true,
+  "env": {
+    "RDC_TEST": "1"
+  },
+  "invocation": {
+    "slug": "onramp-selftest",
+    "name": "Onramp Self Test",
+    "flags": ["--archetype", "working-landscapes", "--dry-run"]
+  },
+  "fixture": {
+    "prompt": "rdc:onramp onramp-selftest --name \"Onramp Self Test\" --archetype working-landscapes --dry-run",
+    "env": { "RDC_\u0054EST": "1" },
+    "slow": true
+  },
+  "assertions": {
+    "exit_code": 0,
+    "stdout_contains": ["Preflight", "Resolve drift"]
+  },
+  "acceptance": {
+    "output_contains": ["Preflight", "Resolve drift", "disk-ahead", "already-enrolled"],
+    "output_not_contains": ["hand-edit _context.md", "raw insert"]
+  },
+  "legacy_assertions": [
+    {
+      "type": "exit_code",
+      "expect": 0,
+      "description": "Skill exits cleanly under RDC_TEST with --dry-run"
+    },
+    {
+      "type": "stdout_contains",
+      "pattern": "Preflight",
+      "description": "Checklist begins with Preflight step"
+    },
+    {
+      "type": "stdout_contains",
+      "pattern": "Resolve drift",
+      "description": "Drift resolution step is emitted"
+    },
+    {
+      "type": "stdout_contains",
+      "pattern": "\\[RDC_TEST\\]",
+      "description": "Sandbox short-circuit marker present — confirms external calls were skipped"
+    },
+    {
+      "type": "file_absent",
+      "path": "places/onramp-selftest/_context.md",
+      "description": "Scaffolder MUST NOT write _context.md — projection-drift violation gate"
+    }
+  ],
+  "door_contracts": [
+    {
+      "name": "enroll_place_signature",
+      "description": "enroll_place RPC must accept (text, text, jsonb, text) and return jsonb",
+      "type": "rpc_introspection",
+      "project_id": "uvojezuorjgqzmhhgluu",
+      "query": "SELECT p.proname, pg_get_function_identity_arguments(p.oid) AS args, pg_get_function_result(p.oid) AS returns FROM pg_proc p WHERE p.proname = 'enroll_place';",
+      "expect_args_contains": ["text", "jsonb"],
+      "expect_returns": "jsonb"
+    },
+    {
+      "name": "insert_work_item_accepts_project_node_id",
+      "description": "insert_work_item must accept p_project_node_id parameter",
+      "type": "rpc_introspection",
+      "project_id": "uvojezuorjgqzmhhgluu",
+      "query": "SELECT proname, pg_get_function_identity_arguments(oid) FROM pg_proc WHERE proname = 'insert_work_item';",
+      "expect_args_contains": ["p_project_node_id"]
+    }
+  ],
+  "disk_ahead_test": {
+    "description": "disk-ahead state must STOP and open a reconciliation work item",
+    "setup": "mkdir -p places/disk-ahead-test",
+    "invocation_slug": "disk-ahead-test",
+    "invocation_name": "Disk Ahead Test",
+    "assertions": [
+      {
+        "type": "stdout_contains",
+        "pattern": "disk-ahead",
+        "description": "Skill identifies the disk-ahead state"
+      },
+      {
+        "type": "stdout_contains",
+        "pattern": "STOP",
+        "description": "Skill STOPs on disk-ahead"
+      },
+      {
+        "type": "exit_nonzero",
+        "description": "Skill exits non-zero on disk-ahead (not a clean enrollment)"
+      }
+    ],
+    "teardown": "rmdir places/disk-ahead-test 2>/dev/null || true"
+  },
+  "idempotency_test": {
+    "description": "Running rdc:onramp twice for already-enrolled should produce zero new writes",
+    "note": "Under RDC_TEST=1 this is verified by checking that [RDC_TEST] skipping markers appear (not real insert calls) and the checklist reports already-enrolled"
+  }
+}

package/skills/tests/rdc-env.test.json

@@ -1,12 +1,12 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:env",
-  "description": "Environment status is read-only and reports installed version.",
-  "fixture": { "prompt": "rdc:env status", "env": { "RDC_\u0054EST": "1" }, "slow": false },
-  "assertions": { "exit_code": 0, "stdout_contains": ["Environment"] },
-  "acceptance": {
-    "output_contains": ["version", "status"],
-    "output_not_contains": ["force", "delete environment"]
-  },
-  "teardown": { "reset_branch": true }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:env",
+  "description": "Environment status is read-only and reports installed version.",
+  "fixture": { "prompt": "rdc:env status", "env": { "RDC_\u0054EST": "1" }, "slow": false },
+  "assertions": { "exit_code": 0, "stdout_contains": ["Environment"] },
+  "acceptance": {
+    "output_contains": ["version", "status"],
+    "output_not_contains": ["force", "delete environment"]
+  },
+  "teardown": { "reset_branch": true }
+}

package/skills/tests/rdc-new-model.test.json

@@ -1,12 +1,12 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:new-model",
-  "description": "New-model registration begins with the canonical gate.",
-  "fixture": { "prompt": "rdc:new-model example-model", "env": { "RDC_\u0054EST": "1" }, "slow": true },
-  "assertions": { "exit_code": 0, "stdout_contains": ["New Model"] },
-  "acceptance": {
-    "output_contains": ["canonical", "registration"],
-    "output_not_contains": ["raw insert", "skip gate"]
-  },
-  "teardown": { "reset_branch": true }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:new-model",
+  "description": "New-model registration begins with the canonical gate.",
+  "fixture": { "prompt": "rdc:new-model example-model", "env": { "RDC_\u0054EST": "1" }, "slow": true },
+  "assertions": { "exit_code": 0, "stdout_contains": ["New Model"] },
+  "acceptance": {
+    "output_contains": ["canonical", "registration"],
+    "output_not_contains": ["raw insert", "skip gate"]
+  },
+  "teardown": { "reset_branch": true }
+}

package/skills/tests/rdc-refactor.test.json

@@ -1,29 +1,29 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:refactor",
-  "description": "Refactor preserves evidence and isolates all dispatched writers.",
-  "fixture": {
-    "prompt": "rdc:refactor hook-scope --takeover \"corrective consolidation\"",
-    "env": { "RDC_\u0054EST": "1" },
-    "slow": true
-  },
-  "assertions": {
-    "exit_code": 0,
-    "commits_made": { "min": 0 },
-    "stdout_contains": ["RDC Refactor"]
-  },
-  "acceptance": {
-    "output_contains": [
-      "consolidate_work_items_into_epic",
-      "unique leased worktree",
-      "collaboration manifest",
-      "validator"
-    ],
-    "output_not_contains": [
-      "raw update",
-      "shared working directory",
-      "archive all"
-    ]
-  },
-  "teardown": { "reset_branch": true }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:refactor",
+  "description": "Refactor preserves evidence and isolates all dispatched writers.",
+  "fixture": {
+    "prompt": "rdc:refactor hook-scope --takeover \"corrective consolidation\"",
+    "env": { "RDC_\u0054EST": "1" },
+    "slow": true
+  },
+  "assertions": {
+    "exit_code": 0,
+    "commits_made": { "min": 0 },
+    "stdout_contains": ["RDC Refactor"]
+  },
+  "acceptance": {
+    "output_contains": [
+      "consolidate_work_items_into_epic",
+      "unique leased worktree",
+      "collaboration manifest",
+      "validator"
+    ],
+    "output_not_contains": [
+      "raw update",
+      "shared working directory",
+      "archive all"
+    ]
+  },
+  "teardown": { "reset_branch": true }
+}

package/skills/tests/rdc-regen-media.test.json

@@ -1,29 +1,29 @@
-{
-  "manifest_version": 1,
-  "skill": "rdc:regen-media",
-  "description": "Regen Media uses local keyless Codex gpt-image-2 as the primary image-generation path and avoids live generation under RDC_TEST.",
-  "fixture": {
-    "prompt": "rdc:regen-media generate a 2048x1152 homepage hero image",
-    "env": { "RDC_TEST": "1" }
-  },
-  "assertions": {
-    "exit_code": 0,
-    "commits_made": { "min": 0 },
-    "stdout_contains": ["image_gen", "gpt-image-2"]
-  },
-  "acceptance": {
-    "output_contains": [
-      "image_gen",
-      "gpt-image-2",
-      "--enable image_generation",
-      "RDC_TEST"
-    ],
-    "output_not_contains": [
-      "OPENAI_API_KEY=",
-      "generate_gpt_image is the default",
-      "upload completed",
-      "raw MCP"
-    ]
-  },
-  "teardown": { "reset_branch": true }
-}
+{
+  "manifest_version": 1,
+  "skill": "rdc:regen-media",
+  "description": "Regen Media uses local keyless Codex gpt-image-2 as the primary image-generation path and avoids live generation under RDC_TEST.",
+  "fixture": {
+    "prompt": "rdc:regen-media generate a 2048x1152 homepage hero image",
+    "env": { "RDC_TEST": "1" }
+  },
+  "assertions": {
+    "exit_code": 0,
+    "commits_made": { "min": 0 },
+    "stdout_contains": ["image_gen", "gpt-image-2"]
+  },
+  "acceptance": {
+    "output_contains": [
+      "image_gen",
+      "gpt-image-2",
+      "--enable image_generation",
+      "RDC_TEST"
+    ],
+    "output_not_contains": [
+      "OPENAI_API_KEY=",
+      "generate_gpt_image is the default",
+      "upload completed",
+      "raw MCP"
+    ]
+  },
+  "teardown": { "reset_branch": true }
+}

package/tests/clauth-plugin-postinstall.test.mjs

@@ -0,0 +1,256 @@
+#!/usr/bin/env node
+/**
+ * `scripts/postinstall.js` self-registers `clauth-plugin.json` with the local
+ * clauth supervisor — and must NEVER be able to fail an install.
+ *
+ * The whole point of the file is its failure behaviour, so that is what is
+ * asserted: absent clauth, non-zero register, a spawn that throws, and a
+ * missing manifest all exit 0 with a printed hint. Also asserted is the path
+ * anchor — during `npm i -g` the cwd is not the package root, so a
+ * cwd-relative manifest path would resolve to nothing and silently no-op.
+ *
+ * Registration is STUBBED, never really invoked: the live managed-plugin root
+ * (%APPDATA%/clauth/supervisor/managed-plugins) holds real registered plugins
+ * that the running daemon reads, and a test has no business writing there.
+ */
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = resolve(__dirname, '..');
+const script = join(REPO_ROOT, 'scripts', 'postinstall.js');
+const require = createRequire(import.meta.url);
+
+// ---------------------------------------------------------------- 0. wiring
+
+const syntax = spawnSync(process.execPath, ['--check', script], { encoding: 'utf8' });
+assert.equal(syntax.status, 0, syntax.stderr);
+
+const packageJson = JSON.parse(readFileSync(join(REPO_ROOT, 'package.json'), 'utf8'));
+assert.equal(
+  packageJson.scripts.postinstall,
+  'node scripts/postinstall.js',
+  'package.json must run the postinstall registrar on install',
+);
+assert.equal(
+  existsSync(join(REPO_ROOT, 'clauth-plugin.json')),
+  true,
+  'the manifest the postinstall registers must exist in the repo',
+);
+
+const postinstall = require(script);
+
+/** A spawnSync stub that records calls and replays canned results. */
+function stubSpawn(results) {
+  const calls = [];
+  const queue = [...results];
+  const spawn = (command, args, options) => {
+    calls.push({ command, args, options });
+    const next = queue.shift();
+    if (typeof next === 'function') return next();
+    return next ?? { status: 0, stdout: '', stderr: '' };
+  };
+  return { spawn, calls };
+}
+
+function collectLog() {
+  const lines = [];
+  return { log: (line) => lines.push(String(line)), lines };
+}
+
+/**
+ * A child env whose ONLY PATH entry is `dir`, so nothing named `clauth` can
+ * resolve. Windows env vars are case-insensitive, so every existing spelling of
+ * PATH has to be dropped first or the original one wins non-deterministically.
+ */
+function envWithOnlyPath(dir) {
+  const env = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (/^path$/i.test(key) || key === postinstall.SKIP_ENV) continue;
+    env[key] = value;
+  }
+  env.PATH = dir;
+  return env;
+}
+
+// ------------------------------------------- 1. clauth absent -> exit 0 + hint
+//
+// Run the real script as a child with PATH stripped to an empty directory, so
+// nothing named `clauth` can resolve. This is the end-to-end form of the
+// contract: a box without clauth still gets a successful install.
+
+const emptyPathDir = mkdtempSync(join(tmpdir(), 'rdc-postinstall-nopath-'));
+try {
+  const run = spawnSync(process.execPath, [script], {
+    cwd: REPO_ROOT,
+    encoding: 'utf8',
+    env: envWithOnlyPath(emptyPathDir),
+  });
+  assert.equal(run.status, 0, `postinstall must exit 0 without clauth on PATH:\n${run.stdout}\n${run.stderr}`);
+  assert.match(
+    run.stdout,
+    /clauth not found/,
+    `expected a "clauth not found" hint, got:\n${run.stdout}`,
+  );
+  assert.match(
+    run.stdout,
+    /clauth plugin register/,
+    'the hint must carry the manual command so a human can finish registration',
+  );
+} finally {
+  rmSync(emptyPathDir, { recursive: true, force: true });
+}
+
+// --------------------------------- 2. clauth present -> register invoked right
+
+{
+  const { spawn, calls } = stubSpawn([
+    { status: 0, stdout: '0.33.0\n', stderr: '' }, // --version probe
+    { status: 0, stdout: 'registered\n', stderr: '' }, // plugin register
+  ]);
+  const { log, lines } = collectLog();
+  const result = postinstall.register({ spawn, log });
+
+  assert.equal(result.outcome, 'registered');
+  assert.equal(calls.length, 2, 'expected a --version probe followed by the register call');
+  assert.equal(calls[0].command, 'clauth');
+  assert.deepEqual(calls[0].args.map(unquote), ['--version']);
+
+  assert.equal(calls[1].command, 'clauth');
+  assert.deepEqual(
+    calls[1].args.map(unquote),
+    ['plugin', 'register', join(REPO_ROOT, 'clauth-plugin.json')],
+    'register must be called as `clauth plugin register <package-root>/clauth-plugin.json`',
+  );
+  assert.ok(calls[1].options.timeout > 0, 'the register call must be time-bounded');
+  assert.match(lines.join('\n'), /registered/);
+}
+
+// ------------------------- 3. non-zero register / throwing spawn -> exit 0 + hint
+
+{
+  const { spawn } = stubSpawn([
+    { status: 0, stdout: '0.33.0\n', stderr: '' },
+    { status: 1, stdout: '', stderr: 'manifest rejected: bad schema\n' },
+  ]);
+  const { log, lines } = collectLog();
+  const result = postinstall.register({ spawn, log });
+
+  assert.equal(result.outcome, 'register-failed', 'a non-zero register must not throw');
+  assert.match(lines.join('\n'), /clauth plugin register failed/);
+  assert.match(lines.join('\n'), /manifest rejected: bad schema/, 'the hint should surface why');
+  assert.match(lines.join('\n'), /retry with: clauth plugin register/);
+}
+
+{
+  // spawn itself blowing up (EPERM, locked binary, AV interference) is still exit 0.
+  const { spawn } = stubSpawn([
+    { status: 0, stdout: '0.33.0\n', stderr: '' },
+    () => {
+      throw new Error('EPERM: operation not permitted');
+    },
+  ]);
+  const { log, lines } = collectLog();
+  const result = postinstall.register({ spawn, log });
+
+  assert.equal(result.outcome, 'spawn-failed');
+  assert.match(lines.join('\n'), /EPERM/);
+}
+
+{
+  // clauth on PATH but broken (`--version` non-zero) reads as "not available".
+  const { spawn, calls } = stubSpawn([{ status: 9009, stdout: '', stderr: 'not recognized' }]);
+  const { log, lines } = collectLog();
+  const result = postinstall.register({ spawn, log });
+
+  assert.equal(result.outcome, 'no-clauth');
+  assert.equal(calls.length, 1, 'a failed probe must not go on to attempt registration');
+  assert.match(lines.join('\n'), /clauth not found/);
+}
+
+{
+  // A package root with no manifest is a hint, not a crash.
+  const bare = mkdtempSync(join(tmpdir(), 'rdc-postinstall-bare-'));
+  try {
+    const { spawn, calls } = stubSpawn([]);
+    const { log, lines } = collectLog();
+    const result = postinstall.register({ packageRoot: bare, spawn, log });
+
+    assert.equal(result.outcome, 'no-manifest');
+    assert.equal(calls.length, 0, 'a missing manifest must not spawn anything');
+    assert.match(lines.join('\n'), /not found/);
+  } finally {
+    rmSync(bare, { recursive: true, force: true });
+  }
+}
+
+// ----------------------------------- 4. the manifest path is package-anchored
+//
+// `npm i -g` runs the postinstall from an arbitrary cwd. Anything cwd-relative
+// would resolve to a path that does not exist and register nothing at all.
+
+{
+  assert.equal(
+    postinstall.manifestPath(),
+    join(REPO_ROOT, 'clauth-plugin.json'),
+    'the default manifest path must be the package root, not the cwd',
+  );
+
+  const foreignCwd = mkdtempSync(join(tmpdir(), 'rdc-postinstall-cwd-'));
+  try {
+    const run = spawnSync(process.execPath, [script], {
+      cwd: foreignCwd, // deliberately NOT the package root
+      encoding: 'utf8',
+      env: envWithOnlyPath(foreignCwd),
+    });
+    assert.equal(run.status, 0, `${run.stdout}\n${run.stderr}`);
+    assert.ok(
+      run.stdout.includes(join(REPO_ROOT, 'clauth-plugin.json')),
+      `hint must name the package-root manifest, not a cwd-relative one:\n${run.stdout}`,
+    );
+    assert.ok(
+      !run.stdout.includes(join(foreignCwd, 'clauth-plugin.json')),
+      'the manifest path must never be resolved against the caller cwd',
+    );
+  } finally {
+    rmSync(foreignCwd, { recursive: true, force: true });
+  }
+}
+
+// --------------------------------- 5. the manifest actually ships in the tarball
+//
+// Self-registration is worthless if `clauth-plugin.json` is not in the package
+// the user installed.
+
+{
+  const pack = spawnSync('npm', ['pack', '--dry-run'], {
+    cwd: REPO_ROOT,
+    encoding: 'utf8',
+    shell: process.platform === 'win32',
+  });
+  assert.equal(pack.status, 0, `npm pack --dry-run failed:\n${pack.stdout}\n${pack.stderr}`);
+  const packOutput = `${pack.stdout}\n${pack.stderr}`;
+  assert.match(
+    packOutput,
+    /clauth-plugin\.json/,
+    'clauth-plugin.json must be present in the published tarball',
+  );
+  assert.match(
+    packOutput,
+    /scripts\/postinstall\.js/,
+    'scripts/postinstall.js must be present in the published tarball',
+  );
+}
+
+/** Strip the Windows shell quoting the script applies to spawn args. */
+function unquote(arg) {
+  const s = String(arg);
+  return s.startsWith('"') && s.endsWith('"') ? s.slice(1, -1).replace(/\\"/g, '"') : s;
+}
+
+console.log('clauth plugin postinstall tests — PASS');