@lifeaitools/rdc-skills 0.35.3 → 0.35.5

package/skills/architecture-reviewer/SKILL.md

@@ -13,6 +13,7 @@ description: >-
   rdc:review step 8b+, or standalone before merging a new package/module.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/behavior-audit/SKILL.md

@@ -3,6 +3,7 @@ name: behavior-audit
 description: "Usage `rdc:behavior-audit <report-dir> [--since-days N] [--latest N] [--reprocess]` — produces a bounded, redacted Claude/Codex transcript evidence bundle, incrementally skips completed transcript hashes, and aligns candidate behavior problems to shared truth-governance rules."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **OUTPUT CONTRACT:** Begin and end with the same checklist. Do not call an audit clean, complete, or compliant without the evidence-bundle manifest and an independent validator decision.
 
 # rdc:behavior-audit — Cross-Engine Truth and Behavior Audit

package/skills/brochure/SKILL.md

@@ -3,6 +3,7 @@ name: brochure
 description: "Usage `rdc:brochure <input> [--out <path>] [--template <name>] [--format Letter|A4]` — Turn a zip, folder, HTML file, URL, or markdown folder into a print-quality PDF brochure via Puppeteer. Auto-detects print-variant HTML, honors @page CSS, falls back to a Studio-token-aware template when no HTML exists."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/brochurify/SKILL.md

@@ -12,6 +12,7 @@ triggers:
   - monkey_dispatch payload with skill="brochurify"
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 # rdc:brochurify Orchestrator
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Report brochure job state, artifacts, and blockers directly; do not dump raw tool logs.

package/skills/clean-code-analyzer/SKILL.md

@@ -8,6 +8,7 @@ description: >-
   mechanical AST checks, not LLM judgment — see `scripts/clean-code-score.mjs`.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/convert/SKILL.md

@@ -3,6 +3,7 @@ name: convert
 description: "Usage `rdc:convert <input> [--out <dir>] [--to markdown|word] [--images assets|base64|s3]` — Convert .docx/.pptx/.ppt → Markdown (Word OMML equations as KaTeX TeX, tables, images) or Markdown → Word via the build-corpus CLI from npm `regen.mde`. Portable: runs in any session that can reach npm — Claude Code CLI, Codex, and claude.ai can fetch + run it. Use whenever the user asks to convert an Office document, build a Markdown corpus from .docx/.pptx, turn Markdown into a .docx, or open the report in the regen-mde editor on Windows."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 # rdc:convert — Office ↔ Markdown conversion (build-corpus) + regen-mde editor
 
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`

package/skills/edit/SKILL.md

@@ -14,6 +14,18 @@ description: "Usage `rdc:edit <site|brand|route|file>` — open the local websit
 
 # rdc:edit — Local Website Editor Launcher
 
+**This skill is the designated handler `rdc-harness` dispatches to.**
+`packages/work/src/editors.mjs`'s `BY_CLASS` table maps `site-html`/`site-ts`
+product classes to editor id `'rdc:edit'` — when an agent calls
+`node C:/Dev/rdc-harness/bin/rdc-harness.mjs edit <slug>` against a website
+target, its receipt names `editorId: 'rdc:edit'` and an `editableBoundary`.
+This skill IS that handler: resolve the same target, launch/reuse the editor
+host, use the harness's `editableBoundary` as the save boundary if the call
+originated from a harness `edit` receipt. Every other product class
+(`app`/`package`/`mcp`/`model`/`artifact`) maps to editor id `'source'` — a
+boundary-checked file save with no live/co-editing surface at all; that gap
+is real and unbuilt, not something this skill covers.
+
 ## When to Use
 - The user wants to open a site, brand, route, or file in the local editor app
 - The user says "open this in the editor" or asks for the editor-host workflow

package/skills/env/SKILL.md

@@ -3,6 +3,7 @@ name: env
 description: "Usage `rdc:env [status|install|repair|update]` — Manage the LIFEAI environment harness: check status, install on a fresh box, repair broken services, or pull updates. Reads $LIFEAI_ENV/manifest.json as the source of truth. Use when: 'check the environment', 'install environment', 'repair environment', 'update environment', 'setup env', 'fix env', 'env status', or after a reboot/GPU crash."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/extract-verifier-rules/SKILL.md

@@ -12,6 +12,7 @@ triggers:
   - nightly cron at 3:00 AM PT
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 # rdc:extract-verifier-rules
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Return candidate rules, evidence, and PR status directly; do not dump raw tool logs.

package/skills/fs-mcp/SKILL.md

@@ -3,6 +3,7 @@ name: fs-mcp
 description: "Usage `rdc:fs-mcp <task>` — Use the File System MCP bridge for live repo reads, safe writes, cloud-to-local ingest, and GitHub-branch imports into a dirty local monorepo. Use when Claude.ai, Cowork, or CLI agents need fs_read/fs_write/fs_import_git_files guidance."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/help/SKILL.md

@@ -3,6 +3,7 @@ name: help
 description: "Usage `rdc:help` — Show all MCP skills with usage, requirements, slash forms, and codeflow status. Reads `.claude-plugin/plugin.json` skills_meta (single source of truth). Call when unsure which skill to use or what args it takes."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 

package/skills/lifeai-brochure-author/SKILL.md

@@ -20,6 +20,7 @@ required_validators:
     blocking: true
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 # LIFEAI Brochure Authoring Contract
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Return the authored JSX guidance or verification result directly; do not dump raw tool logs.

package/skills/new-model/SKILL.md

@@ -18,6 +18,7 @@ description: >
   Trigger when asked to create, register, or check whether a reference model exists.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/package-design/SKILL.md

@@ -6,6 +6,7 @@ description: >-
   and sit at the right size.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/pattern-advisor/SKILL.md

@@ -8,6 +8,7 @@ description: >-
   only; never rewrites code itself.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/pattern-refactoring-guide/SKILL.md

@@ -6,6 +6,7 @@ description: >-
   concrete before/after refactor plan. Produces a plan, does not apply it.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/refactor/SKILL.md

@@ -3,6 +3,7 @@ name: refactor
 description: "Usage `rdc:refactor <epic-id|topic> --takeover <reason>` — Governed consolidation and implementation of a cross-cutting refactor. Authorizes an explicit takeover, preserves evidence, re-parents relevant work through the consolidation RPC, isolates every writer, and uses the same review, validator, landing, and delivery gates as rdc:build."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **OUTPUT CONTRACT:** `guides/output-contract.md`
 
 # rdc:refactor

package/skills/regen-media/SKILL.md

@@ -3,6 +3,7 @@ name: regen-media
 description: "Usage `rdc:regen-media <generate|edit|upscale|upload> <brief-or-path>` - Primary image-generation and Regen Media asset workflow. Use for image generation, image editing/upscaling, GPT Image/gpt-image-2 requests, Codex built-in image_gen, and uploading finished images to regen-media/R2. The default path is keyless local Codex gpt-image-2 via the built-in image_gen tool; server-side regen-media MCP/API generation is fallback only."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/solid-validator/SKILL.md

@@ -8,6 +8,7 @@ description: >-
   `scripts/solid-score.mjs` for the mechanism.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/terminal-config/SKILL.md

@@ -3,6 +3,7 @@ name: terminal-config
 description: "Usage `rdc:terminal-config <task>` — read and safely modify Windows Terminal settings, shell profiles, and agent startup sequencing without relying on machine-specific paths."
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/skills/testing-strategy/SKILL.md

@@ -8,6 +8,7 @@ description: >-
   covers whether a surface's behavior is actually provable, and how.
 ---
 
+> If dispatching subagents or running as a subagent: read `{PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md` first (fallback: `.rdc/guides/agent-bootstrap.md`) — this is also where the global rdc-harness-use policy for create/open/build/deploy work lives.
 > **⚠️ OUTPUT CONTRACT (READ FIRST):** `guides/output-contract.md`
 > Checklist-only output. No tool-call narration. No raw MCP/JSON/log dumps.
 > One checklist upfront, updated in place, shown again at end with a 1-line verdict.

package/tests/foreground-process-gate.test.mjs

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+/**
+ * foreground-process-gate.js — narrowed to Playwright headed/UI-mode only
+ * (epic 688ad6da WP-4, lifeai-env). Four window-focus/process-launch checks
+ * (checkWindowFocusApi, checkPowerShell, checkCmdStart, checkDirectShellLaunch)
+ * were removed; the replacement is lifeai-env's lib/TermLaunch.psm1 caller-
+ * logging, which lives in a different repo and is not this file's job to
+ * re-implement or re-check.
+ *
+ * This file's job is now to prove two things stay true going forward:
+ *   1. The four retired checks no longer block anything -- a real regression
+ *      here would silently reintroduce ceremony an operator explicitly
+ *      retired, with no other test anywhere positioned to catch it.
+ *   2. checkPlaywright survives untouched (Design Decision D3) -- this is a
+ *      SEPARATE safety property, not part of the terminal-launch
+ *      consolidation, and narrowing the file must never have narrowed this.
+ *
+ * Run: node tests/foreground-process-gate.test.mjs
+ */
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = resolve(__dirname, '..');
+const HOOK = join(REPO_ROOT, 'hooks', 'foreground-process-gate.js');
+
+const failures = [];
+function assert(name, condition, detail = '') {
+  if (!condition) failures.push(`${name}${detail ? `: ${detail}` : ''}`);
+  else process.stdout.write(`  ok  ${name}\n`);
+}
+
+function runGate(command) {
+  const res = spawnSync(process.execPath, [HOOK], {
+    input: JSON.stringify({ tool_name: 'Bash', tool_input: { command } }),
+    encoding: 'utf8',
+  });
+  const blocked = res.status === 1;
+  return { blocked, stdout: res.stdout, status: res.status };
+}
+
+// ===========================================================================
+// 1. The four retired checks no longer block anything.
+// ===========================================================================
+
+{
+  const r = runGate('Start-Process -FilePath node.exe -ArgumentList "server.js"');
+  assert('Start-Process with no -WindowStyle Hidden no longer blocks (checkPowerShell retired)',
+    r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+{
+  const r = runGate('cmd /c start node.exe server.js');
+  assert('cmd /c start without /min no longer blocks (checkCmdStart retired)',
+    r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+{
+  const r = runGate('powershell.exe -File C:\\Dev\\some-script.ps1');
+  assert('bare PowerShell .ps1 launch no longer blocks (checkDirectShellLaunch retired)',
+    r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+{
+  const r = runGate('[Win32]::SetForegroundWindow($handle)');
+  assert('a window-focus Win32 API call no longer blocks (checkWindowFocusApi retired)',
+    r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+// ===========================================================================
+// 2. checkPlaywright survives, untouched -- a separate safety property.
+// ===========================================================================
+
+{
+  const r = runGate('npx playwright test --headed');
+  assert('Playwright --headed still blocks',
+    r.blocked === true, `status=${r.status} stdout=${r.stdout}`);
+  assert('Playwright --headed block message names the right reason',
+    /must run headless/.test(r.stdout), r.stdout);
+}
+
+{
+  const r = runGate('PWDEBUG=1 npx playwright test');
+  assert('Playwright PWDEBUG=1 still blocks',
+    r.blocked === true, `status=${r.status} stdout=${r.stdout}`);
+}
+
+{
+  const r = runGate('npx playwright show-report');
+  assert('Playwright show-report still blocks',
+    r.blocked === true, `status=${r.status} stdout=${r.stdout}`);
+  assert('Playwright show-report block message names the right reason',
+    /launches foreground UI/.test(r.stdout), r.stdout);
+}
+
+{
+  const r = runGate('npx playwright test --reporter=list');
+  assert('an ordinary headless Playwright run is NOT blocked',
+    r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+{
+  const r = runGate('git status');
+  assert('an unrelated ordinary command passes clean', r.blocked === false, `status=${r.status} stdout=${r.stdout}`);
+}
+
+// ===========================================================================
+if (failures.length > 0) {
+  console.error('\nforeground-process-gate tests — FAIL\n');
+  for (const f of failures) console.error(`  - ${f}`);
+  process.exit(1);
+}
+console.log('\nforeground-process-gate tests — PASS');

package/tests/harness-gates.test.mjs

@@ -146,34 +146,16 @@ const WI = 'aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee';
 }
 
 // ===========================================================================
-// 2. foreground-process-gate.js
+// 2. foreground-process-gate.js — moved to its own file, tests/foreground-process-gate.test.mjs
+//
+// Narrowed 2026-08-26 (epic 688ad6da WP-4, lifeai-env): the window-focus/
+// process-launch checks this section used to assert (SetForegroundWindow
+// blocking, hidden/minimized allowances) were retired — that whole class is
+// now caller-logged by lifeai-env's lib/TermLaunch.psm1, not hard-blocked
+// here. The dedicated test file covers what remains (checkPlaywright) plus
+// asserts the four retired checks stay retired, so removing this embedded
+// section is not a coverage loss — see that file instead.
 // ===========================================================================
-{
-  const focusPayload = {
-    tool_input: {
-      command: "powershell -NoProfile -Command \"Add-Type '[DllImport(\\\"user32.dll\\\")] public static extern bool SetForegroundWindow(System.IntPtr hWnd);'\"",
-    },
-  };
-  const r = runHook('foreground-process-gate.js', focusPayload, {});
-  assert('FPG blocks SetForegroundWindow focus API', r.status === 1, `status=${r.status} ${r.stdout}${r.stderr}`);
-  assert('FPG block mentions window focus operations', /Window focus\/restore\/minimize\/collapse/.test(r.stdout + r.stderr));
-
-  const hiddenPayload = {
-    tool_input: {
-      command: 'powershell.exe -NoProfile -NonInteractive -WindowStyle Hidden -File ".\\\\scripts\\\\helper.ps1"',
-    },
-  };
-  const h = runHook('foreground-process-gate.js', hiddenPayload, {});
-  assert('FPG allows hidden PowerShell helper', h.status === 0, `status=${h.status} ${h.stdout}${h.stderr}`);
-
-  const minimizedPayload = {
-    tool_input: {
-      command: 'Start-Process powershell.exe -WindowStyle Minimized -ArgumentList "-NoProfile"',
-    },
-  };
-  const m = runHook('foreground-process-gate.js', minimizedPayload, {});
-  assert('FPG allows minimized Start-Process without focus APIs', m.status === 0, `status=${m.status} ${m.stdout}${m.stderr}`);
-}
 
 // ===========================================================================
 // 3. post-tool-batch-gate.js

package/tests/install-rdc-skills.test.mjs

@@ -44,7 +44,22 @@ assert.match(
 const skillCount = Array.isArray(plugin.skills_meta)
   ? plugin.skills_meta.length
   : Object.keys(plugin.skills_meta || {}).length;
-assert.equal(skillCount, 36, 'test fixture should expose all 36 MCP skills from plugin skills_meta');
+// A hardcoded magic number here (previously 36, silently stale against the
+// real 43) rots the instant a skill is added or removed and stops proving
+// anything — it only proves someone remembered to bump a number. Assert
+// against the actual skills/ directory instead: every dir containing a
+// SKILL.md must be represented in plugin.json's skills_meta, and vice versa.
+const skillsDir = join(REPO_ROOT, 'skills');
+const realSkillDirs = require('node:fs')
+  .readdirSync(skillsDir, { withFileTypes: true })
+  .filter((e) => e.isDirectory() && existsSync(join(skillsDir, e.name, 'SKILL.md')))
+  .map((e) => e.name)
+  .sort();
+assert.equal(
+  skillCount,
+  realSkillDirs.length,
+  `plugin.json skills_meta (${skillCount}) must match the actual skill directories on disk (${realSkillDirs.length}): ${realSkillDirs.join(', ')}`,
+);
 assert.match(
   source,
   /Available MCP skills.*\/rdc:\* command shorthands/,
@@ -97,6 +112,81 @@ try {
   rmSync(codexSkills, { recursive: true, force: true });
 }
 
+// Regression for the 2026-08-23 incident: a marketplace clone with ZERO real
+// local edits — only a stray untracked file — sat 39+ commits behind for over
+// a week because `git status --porcelain` (which also reports untracked
+// files) was treated as "has local changes, never touch it". `git reset
+// --hard` never touches untracked files, so an untracked file is irrelevant
+// to whether the sync is safe. This builds a real origin + clone pair,
+// reproduces the exact scenario, and asserts the clone actually advances.
+const { syncMarketplaceCheckout } = require(script);
+const gitTestRoot = mkdtempSync(join(tmpdir(), 'rdc-marketplace-sync-'));
+try {
+  const originDir = join(gitTestRoot, 'origin');
+  const cloneDir = join(gitTestRoot, 'clone');
+  const runGit = (cwd, args) => {
+    const res = spawnSync('git', args, { cwd, encoding: 'utf8' });
+    assert.equal(res.status, 0, `git ${args.join(' ')} failed: ${res.stderr}`);
+    return res.stdout.trim();
+  };
+
+  mkdirSync(originDir, { recursive: true });
+  runGit(originDir, ['init', '--initial-branch=master']);
+  runGit(originDir, ['config', 'user.email', 'test@example.com']);
+  runGit(originDir, ['config', 'user.name', 'Test']);
+  writeFileSync(join(originDir, 'file.txt'), 'v1\n');
+  runGit(originDir, ['add', '.']);
+  runGit(originDir, ['commit', '-m', 'v1']);
+
+  runGit(gitTestRoot, ['clone', originDir, cloneDir]);
+
+  // Advance origin so the clone is genuinely behind.
+  writeFileSync(join(originDir, 'file.txt'), 'v2\n');
+  runGit(originDir, ['add', '.']);
+  runGit(originDir, ['commit', '-m', 'v2']);
+  const originHead = runGit(originDir, ['rev-parse', 'HEAD']);
+
+  // The exact reproduction: a stray UNTRACKED file, nothing modified/staged.
+  writeFileSync(join(cloneDir, 'some-local-cruft.cjs'), 'module.exports = {};\n');
+  assert.match(
+    runGit(cloneDir, ['status', '--porcelain']),
+    /^\?\? some-local-cruft\.cjs$/,
+    'precondition: clone must show ONLY an untracked file, nothing modified',
+  );
+
+  syncMarketplaceCheckout(cloneDir);
+
+  assert.equal(
+    runGit(cloneDir, ['rev-parse', 'HEAD']),
+    originHead,
+    'a clone with only an untracked file must still advance to origin — untracked cruft is not a local edit',
+  );
+  assert.equal(
+    existsSync(join(cloneDir, 'some-local-cruft.cjs')),
+    true,
+    'the untracked file itself must survive the sync — reset --hard never touches it',
+  );
+
+  // Genuine dirt — a MODIFIED tracked file — must still block the sync.
+  writeFileSync(join(originDir, 'file.txt'), 'v3\n');
+  runGit(originDir, ['add', '.']);
+  runGit(originDir, ['commit', '-m', 'v3']);
+  const originHeadV3 = runGit(originDir, ['rev-parse', 'HEAD']);
+  writeFileSync(join(cloneDir, 'file.txt'), 'local edit, never committed\n');
+  const beforeDirtySync = runGit(cloneDir, ['rev-parse', 'HEAD']);
+
+  syncMarketplaceCheckout(cloneDir);
+
+  assert.equal(
+    runGit(cloneDir, ['rev-parse', 'HEAD']),
+    beforeDirtySync,
+    'a real local edit to a TRACKED file must still block the sync (PRESERVE-DIRTY)',
+  );
+  assert.notEqual(beforeDirtySync, originHeadV3, 'sanity: origin did advance further in this step');
+} finally {
+  rmSync(gitTestRoot, { recursive: true, force: true });
+}
+
 const packagedRoot = mkdtempSync(join(tmpdir(), 'rdc-packaged-truth-'));
 try {
   writeFileSync(join(packagedRoot, 'package.json'), JSON.stringify({ version: '9.9.9' }));