@lifeaitools/rdc-skills 0.9.36 → 0.9.38

package/scripts/test-rdc-hooks.mjs

@@ -0,0 +1,145 @@
+#!/usr/bin/env node
+// Behavioral smoke tests for the RDC marker and Stop output-contract hooks.
+
+import { mkdtempSync, rmSync, existsSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { spawnSync } from "node:child_process";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = resolve(__dirname, "..");
+const MARKER_HOOK = join(REPO_ROOT, "hooks", "rdc-invocation-marker.js");
+const STOP_HOOK = join(REPO_ROOT, "hooks", "rdc-output-contract-gate.js");
+
+const tmpHome = mkdtempSync(join(tmpdir(), "rdc-hooks-"));
+const env = { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome };
+const failures = [];
+
+function markerPath(sessionId) {
+  return join(tmpHome, ".claude", "rdc-active", `${sessionId}.json`);
+}
+
+function runHook(script, payload) {
+  return spawnSync(process.execPath, [script], {
+    input: JSON.stringify(payload),
+    encoding: "utf8",
+    env,
+  });
+}
+
+function assert(name, condition, detail = "") {
+  if (!condition) failures.push(`${name}${detail ? `: ${detail}` : ""}`);
+}
+
+function readMarker(sessionId) {
+  return JSON.parse(readFileSync(markerPath(sessionId), "utf8"));
+}
+
+try {
+  const expansion = runHook(MARKER_HOOK, {
+    hook_event_name: "UserPromptExpansion",
+    session_id: "s-expansion",
+    command_source: "plugin",
+    command_name: "rdc:design",
+    prompt: "/rdc:design palette audit",
+  });
+  assert("expansion exits zero", expansion.status === 0, expansion.stderr);
+  assert("expansion emits context", /RDC CONTRACT ACTIVE/.test(expansion.stdout), expansion.stdout);
+  assert("expansion writes marker", existsSync(markerPath("s-expansion")));
+  assert("expansion marker event preserved", readMarker("s-expansion").hook_event_name === "UserPromptExpansion");
+
+  const builtin = runHook(MARKER_HOOK, {
+    hook_event_name: "UserPromptExpansion",
+    session_id: "s-builtin",
+    command_source: "builtin",
+    command_name: "help",
+    prompt: "/help",
+  });
+  assert("builtin exits zero", builtin.status === 0, builtin.stderr);
+  assert("builtin emits no context", builtin.stdout.trim() === "", builtin.stdout);
+  assert("builtin writes no marker", !existsSync(markerPath("s-builtin")));
+
+  const submit1 = runHook(MARKER_HOOK, {
+    hook_event_name: "UserPromptExpansion",
+    session_id: "s-dedup",
+    command_source: "plugin",
+    command_name: "rdc:design",
+    prompt: "/rdc:design button audit",
+  });
+  assert("dedup first mark exits zero", submit1.status === 0, submit1.stderr);
+  const first = readMarker("s-dedup");
+  const submit2 = runHook(MARKER_HOOK, {
+    hook_event_name: "UserPromptSubmit",
+    session_id: "s-dedup",
+    prompt: "/rdc:design button audit",
+  });
+  assert("dedup second mark exits zero", submit2.status === 0, submit2.stderr);
+  const second = readMarker("s-dedup");
+  assert("dedup preserves started_at", second.started_at === first.started_at);
+  assert("dedup preserves hook event", second.hook_event_name === "UserPromptExpansion");
+
+  const genericHelp = runHook(MARKER_HOOK, {
+    hook_event_name: "UserPromptSubmit",
+    session_id: "s-help",
+    prompt: "/help",
+  });
+  assert("generic help exits zero", genericHelp.status === 0, genericHelp.stderr);
+  assert("generic help writes no marker", !existsSync(markerPath("s-help")));
+
+  const noMarker = runHook(STOP_HOOK, {
+    hook_event_name: "Stop",
+    session_id: "s-no-marker",
+    last_assistant_message: "plain chat",
+  });
+  assert("stop without marker exits zero", noMarker.status === 0, noMarker.stderr);
+  assert("stop without marker is silent", noMarker.stdout.trim() === "", noMarker.stdout);
+
+  writeFileSync(markerPath("s-block"), JSON.stringify({
+    session_id: "s-block",
+    command: "design",
+    started_at: new Date().toISOString(),
+  }, null, 2));
+  const blocked = runHook(STOP_HOOK, {
+    hook_event_name: "Stop",
+    session_id: "s-block",
+    last_assistant_message: "No contract artifacts here.",
+  });
+  assert("noncompliant stop exits zero", blocked.status === 0, blocked.stderr);
+  assert("noncompliant stop blocks", /"decision"\s*:\s*"block"/.test(blocked.stdout), blocked.stdout);
+  assert("noncompliant stop retains marker", existsSync(markerPath("s-block")));
+
+  const reentry = runHook(STOP_HOOK, {
+    hook_event_name: "Stop",
+    session_id: "s-block",
+    stop_hook_active: true,
+    last_assistant_message: "Still no contract artifacts.",
+  });
+  assert("stop reentry exits zero", reentry.status === 0, reentry.stderr);
+  assert("stop reentry allows silent pass", reentry.stdout.trim() === "", reentry.stdout);
+  assert("stop reentry clears marker", !existsSync(markerPath("s-block")));
+
+  writeFileSync(markerPath("s-pass"), JSON.stringify({
+    session_id: "s-pass",
+    command: "review",
+    started_at: new Date().toISOString(),
+  }, null, 2));
+  const compliant = runHook(STOP_HOOK, {
+    hook_event_name: "Stop",
+    session_id: "s-pass",
+    last_assistant_message: "[x] Verified hook behavior\n\n✅ Complete in 2s",
+  });
+  assert("compliant stop exits zero", compliant.status === 0, compliant.stderr);
+  assert("compliant stop is silent", compliant.stdout.trim() === "", compliant.stdout);
+  assert("compliant stop clears marker", !existsSync(markerPath("s-pass")));
+} finally {
+  rmSync(tmpHome, { recursive: true, force: true });
+}
+
+if (failures.length > 0) {
+  console.error("\nrdc hook behavior tests — FAIL\n");
+  for (const failure of failures) console.error(`  - ${failure}`);
+  process.exit(1);
+}
+
+console.log("rdc hook behavior tests — PASS");

package/skills/build/SKILL.md

@@ -301,8 +301,8 @@ Read the task title and description, then:
     ⚠️ The validator does NOT use `isolation: "worktree"` — it must read the fully merged develop branch. Omit the isolation parameter for this dispatch only.
 
     ```
-    "Read C:/Dev/regen-root/.rdc/guides/agent-bootstrap.md then C:/Dev/regen-root/.rdc/guides/verify.md.
-     Read C:/Dev/regen-root/.rdc/guides/engineering-behavior.md before validating scope, deviations, and evidence.
+    "Read {PROJECT_ROOT}/.rdc/guides/agent-bootstrap.md then {PROJECT_ROOT}/.rdc/guides/verify.md.
+     Read {PROJECT_ROOT}/.rdc/guides/engineering-behavior.md before validating scope, deviations, and evidence.
      Validate these work items: [list of IDs and titles].
      Apps touched: [list].
      Git diff since build start: [attach or reference].

package/skills/co-develop/SKILL.md

@@ -110,7 +110,7 @@ the source of truth.
   "skill": "rdc:review",
   "task": "Audit the current diff for regressions before merge.",
   "context": {
-    "repo": "C:\\Dev\\regen-root",
+    "repo": "{PROJECT_ROOT}",
     "work_item_id": "<optional-uuid>",
     "branch": "develop",
     "owned_files": []

package/skills/deploy/SKILL.md

@@ -66,10 +66,10 @@ Template selection:
 
 ```
 rdc:deploy new: <slug>
-[ ] .dockerignore present at regen-root root (ls C:/Dev/regen-root/.dockerignore — STOP if missing)
+[ ] .dockerignore present at project root (`ls {PROJECT_ROOT}/.dockerignore` — STOP if missing)
 [ ] Template loaded from docs/runbooks/coolify-app-templates.json (pick nextjs-app / static-site / mcp-server)
 [ ] Required vars substituted: NAME, APP_PATH, DOMAIN, BRANCH, PROJECT_UUID, ENVIRONMENT_UUID [+ TURBO_FILTER / PORT]
-[ ] DNS path chosen (A: *.dev.place.fund  B: apex  C: other zone)
+[ ] DNS path chosen (A: staging wildcard  B: apex  C: other zone)
 [ ] DNS record verified or wildcard confirmed
 [ ] Cloudflare proxy setting correct for DNS path
 [ ] Application created via POST /applications/private-github-app (template payload)
@@ -117,7 +117,7 @@ rdc:deploy audit: fleet scan
 [ ] Env var drift (registry.env_vars_needed vs Coolify env)
 [ ] Branch mismatches (Coolify git_branch ≠ expected)
 [ ] Disk space on 64.237.54.189
-[ ] CF proxy misconfigs on *.dev.place.fund
+[ ] DNS/proxy misconfigs on configured staging wildcard
 [ ] Duplicate apps (same repo, multiple UUIDs)
 
 Findings:
@@ -145,39 +145,39 @@ _COOLIFY=$(curl -s http://127.0.0.1:52437/v/coolify-api)
 
 # List applications
 curl -s -H "Authorization: Bearer $_COOLIFY" \
-  https://deploy.regendevcorp.com/api/v1/applications
+  "$DEPLOY_API_BASE/api/v1/applications"
 
 # Get application details
 curl -s -H "Authorization: Bearer $_COOLIFY" \
-  https://deploy.regendevcorp.com/api/v1/applications/<uuid>
+  "$DEPLOY_API_BASE/api/v1/applications/<uuid>"
 
 # Deploy (trigger)
 curl -s -X POST -H "Authorization: Bearer $_COOLIFY" \
-  https://deploy.regendevcorp.com/api/v1/applications/<uuid>/deploy
+  "$DEPLOY_API_BASE/api/v1/applications/<uuid>/deploy"
 
 # Get deployment logs
 curl -s -H "Authorization: Bearer $_COOLIFY" \
-  https://deploy.regendevcorp.com/api/v1/deployments/<deployment-id>
+  "$DEPLOY_API_BASE/api/v1/deployments/<deployment-id>"
 
 # Set env var
 curl -s -X POST -H "Authorization: Bearer $_COOLIFY" \
   -H "Content-Type: application/json" \
   -d '{"key":"<KEY>","value":"<VALUE>"}' \
-  https://deploy.regendevcorp.com/api/v1/applications/<uuid>/envs
+  "$DEPLOY_API_BASE/api/v1/applications/<uuid>/envs"
 
 # Set watch_paths
 curl -s -X PATCH -H "Authorization: Bearer $_COOLIFY" \
   -H "Content-Type: application/json" \
   -d '{"watch_paths":"apps/<name>/**\npackages/**"}' \
-  https://deploy.regendevcorp.com/api/v1/applications/<uuid>
+  "$DEPLOY_API_BASE/api/v1/applications/<uuid>"
 ```
 
 **Never print `$_COOLIFY` to stdout.** Inline from clauth only — do not assign raw strings.
 
 If clauth daemon is not responding (`curl -s http://127.0.0.1:52437/ping` fails):
 ```
-BLOCKED: clauth daemon is not responding.
-Fix: Run C:\Dev\regen-root\scripts\restart-clauth.bat, then unlock at http://127.0.0.1:52437
+BLOCKED: credential provider is not responding.
+Fix: start the project's credential provider or configure deployment credentials through env vars, then retry.
 I cannot proceed until this is resolved.
 ```
 
@@ -189,7 +189,7 @@ I cannot proceed until this is resolved.
   ```
   Server UUID:     ih386anenvvvn6fy1umtyow0
   Server IP:       64.237.54.189
-  Dashboard:       https://deploy.regendevcorp.com
+  Dashboard:       <deployment-dashboard-url>
   GitHub App UUID: xdmcy60putp5h9j7k4kwg9c3
   ```
 

package/skills/design/SKILL.md

@@ -19,7 +19,7 @@ RDC-owned design execution for Studio and LIFEAI interfaces. This skill is the S
 
 - Studio, Palette Library, brand-token, theme, component, or live-editor work
 - Any design task that must understand RDC's real token tables and Studio routes
-- UI critique, audit, polish, colorize, type, layout, or craft work in `regen-root`
+- UI critique, audit, polish, colorize, type, layout, or craft work in `{PROJECT_ROOT}`
 - Agent-side color-system exploration using Rampa CLI
 - Preparing token-aware implementation instructions for frontend/backend/data agents
 
@@ -166,7 +166,7 @@ Project docs to read for Studio work:
 8. **Verify.**
    - Run scoped tests only.
    - For Studio: prefer route smoke checks, token API checks, and browser screenshots when UI changed.
-   - For CLI prompt work: run `node C:/Dev/rdc-skills/scripts/rdc-design-cli.mjs <command> <brief>` and inspect the generated report under `.rdc/reports/rdc-design-cli/`.
+   - For CLI prompt work: run `node {RDC_SKILLS_ROOT}/scripts/rdc-design-cli.mjs <command> <brief>` and inspect the generated report under `.rdc/reports/rdc-design-cli/`.
 
 ## Command Menu
 
@@ -188,15 +188,15 @@ Project docs to read for Studio work:
 Use the local helper to see exactly how much instruction text the skill is generating before sending it through an agent:
 
 ```powershell
-node C:/Dev/rdc-skills/scripts/rdc-design-cli.mjs studio "audit the Studio palette page"
-node C:/Dev/rdc-skills/scripts/rdc-design-cli.mjs palette "generate a PRT palette workflow"
-node C:/Dev/rdc-skills/scripts/rdc-design-cli.mjs --json theme "RDC earth-forward light theme"
+node {RDC_SKILLS_ROOT}/scripts/rdc-design-cli.mjs studio "audit the Studio palette page"
+node {RDC_SKILLS_ROOT}/scripts/rdc-design-cli.mjs palette "generate a PRT palette workflow"
+node {RDC_SKILLS_ROOT}/scripts/rdc-design-cli.mjs --json theme "RDC earth-forward light theme"
 ```
 
 The helper writes logs to:
 
 ```text
-C:/Dev/rdc-skills/.rdc/reports/rdc-design-cli/
+{RDC_SKILLS_ROOT}/.rdc/reports/rdc-design-cli/
 ```
 
 Each run includes character count, word count, approximate token count, references loaded, and the final prompt text.

package/skills/fs-mcp/SKILL.md

@@ -11,7 +11,7 @@ description: "Usage `rdc:fs-mcp <task>` — Use the File System MCP bridge for l
 # rdc:fs-mcp — File System MCP Bridge
 
 ## When to Use
-- Claude.ai, Cowork, or another remote surface needs live access to `C:/Dev/regen-root` through the File System MCP.
+- Claude.ai, Cowork, or another remote surface needs live access to `{PROJECT_ROOT}` through the File System MCP.
 - You need to read, search, or list current local repo files without relying on GitHub freshness.
 - You need to write a small/scratch file through FS MCP.
 - You need to move a larger cloud file into the local repo.
@@ -88,7 +88,7 @@ Required Claude.ai handoff shape:
 
 ```json
 {
-  "repo": "LIFEAI/regen-root",
+  "repo": "<owner>/<repo>",
   "remote": "origin",
   "ref": "claude-ai/docs-upload-123",
   "paths": ["docs/plans/foo.md"],

package/skills/plan/SKILL.md

@@ -227,7 +227,7 @@ Q1. Which Coolify project does this app belong to?
     → Record: project_uuid + environment_uuid (staging or production)
 
 Q2. What is the domain?
-    → *.dev.place.fund subdomain? (staging / internal tools)
+    → staging wildcard subdomain? (staging / internal tools)
     → Custom subdomain on an existing zone? (e.g. app.regendevcorp.com)
     → Apex domain? (e.g. place.fund itself)
     → Domain on a different zone entirely? (e.g. skymesasouth.com)
@@ -238,7 +238,7 @@ Q3. Is this domain already in our Cloudflare account?
     → If NS not delegated to Cloudflare: A record in Cloudflare does nothing — must go to registrar
 
 Q4. Does this app need Cloudflare proxy (orange cloud)?
-    → *.dev.place.fund: NEVER proxy — breaks Traefik Let's Encrypt HTTP-01 cert provisioning
+    → Traefik/Let's Encrypt HTTP-01 staging wildcards are often safest unproxied; verify your platform's DNS requirements.
     → Custom domain needing DDoS/CDN: proxy OK only if SSL mode = Full (strict) + origin cert provisioned
     → Any doubt: start unproxied, add proxy after confirming SSL works