@rune-kit/rune 2.2.6 → 2.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (69) hide show
  1. package/README.md +1 -1
  2. package/docs/SKILL-TEMPLATE.md +15 -0
  3. package/docs/index.html +76 -7
  4. package/docs/script.js +33 -6
  5. package/docs/style.css +62 -0
  6. package/package.json +7 -5
  7. package/skills/adversary/SKILL.md +12 -0
  8. package/skills/audit/SKILL.md +63 -1
  9. package/skills/autopsy/SKILL.md +12 -0
  10. package/skills/ba/SKILL.md +9 -0
  11. package/skills/brainstorm/SKILL.md +11 -0
  12. package/skills/completion-gate/SKILL.md +15 -1
  13. package/skills/context-engine/SKILL.md +83 -1
  14. package/skills/context-pack/SKILL.md +160 -0
  15. package/skills/cook/SKILL.md +657 -958
  16. package/skills/cook/references/deviation-rules.md +19 -0
  17. package/skills/cook/references/error-recovery.md +37 -0
  18. package/skills/cook/references/exit-conditions.md +31 -0
  19. package/skills/cook/references/loop-detection.md +39 -0
  20. package/skills/cook/references/mid-run-signals.md +31 -0
  21. package/skills/cook/references/output-format.md +40 -0
  22. package/skills/cook/references/pack-detection.md +82 -0
  23. package/skills/cook/references/pause-resume-template.md +38 -0
  24. package/skills/cook/references/rfc-template.md +52 -0
  25. package/skills/cook/references/sharp-edges.md +24 -0
  26. package/skills/cook/references/subagent-status.md +38 -0
  27. package/skills/db/SKILL.md +12 -0
  28. package/skills/debug/SKILL.md +34 -2
  29. package/skills/deploy/SKILL.md +10 -0
  30. package/skills/design/SKILL.md +9 -0
  31. package/skills/docs/SKILL.md +12 -0
  32. package/skills/docs-seeker/SKILL.md +11 -0
  33. package/skills/fix/SKILL.md +36 -3
  34. package/skills/incident/SKILL.md +10 -0
  35. package/skills/launch/SKILL.md +12 -0
  36. package/skills/logic-guardian/SKILL.md +11 -0
  37. package/skills/marketing/SKILL.md +13 -0
  38. package/skills/mcp-builder/SKILL.md +13 -0
  39. package/skills/onboard/SKILL.md +54 -2
  40. package/skills/perf/SKILL.md +11 -0
  41. package/skills/plan/SKILL.md +342 -688
  42. package/skills/plan/references/completeness-scoring.md +37 -0
  43. package/skills/plan/references/outcome-block.md +41 -0
  44. package/skills/plan/references/plan-templates.md +193 -0
  45. package/skills/plan/references/wave-planning.md +44 -0
  46. package/skills/plan/references/workflow-registry.md +53 -0
  47. package/skills/preflight/SKILL.md +86 -1
  48. package/skills/rescue/SKILL.md +10 -0
  49. package/skills/retro/SKILL.md +11 -0
  50. package/skills/review/SKILL.md +100 -1
  51. package/skills/review-intake/SKILL.md +11 -0
  52. package/skills/safeguard/SKILL.md +12 -0
  53. package/skills/scaffold/SKILL.md +10 -0
  54. package/skills/scope-guard/SKILL.md +11 -0
  55. package/skills/scout/SKILL.md +9 -0
  56. package/skills/sentinel/SKILL.md +307 -425
  57. package/skills/sentinel/references/config-protection.md +52 -0
  58. package/skills/sentinel/references/destructive-commands.md +40 -0
  59. package/skills/sentinel/references/domain-hooks.md +73 -0
  60. package/skills/sentinel/references/framework-patterns.md +46 -0
  61. package/skills/sentinel/references/owasp-patterns.md +69 -0
  62. package/skills/sentinel/references/secret-patterns.md +40 -0
  63. package/skills/sentinel/references/skill-content-guard.md +55 -0
  64. package/skills/session-bridge/SKILL.md +60 -2
  65. package/skills/skill-forge/SKILL.md +47 -2
  66. package/skills/skill-router/SKILL.md +33 -1
  67. package/skills/surgeon/SKILL.md +12 -0
  68. package/skills/team/SKILL.md +35 -1
  69. package/skills/test/SKILL.md +167 -1
@@ -3,7 +3,7 @@ name: fix
3
3
  description: Apply code changes and fixes. Writes implementation code, applies bug fixes, and verifies changes with tests. Core action hub in the development mesh.
4
4
  metadata:
5
5
  author: runedev
6
- version: "0.5.0"
6
+ version: "0.6.0"
7
7
  layer: L2
8
8
  model: sonnet
9
9
  group: development
@@ -204,7 +204,7 @@ If fix requires touching >3 files not in the diagnosis → re-diagnose. You're p
204
204
  ```
205
205
  ## Fix Report
206
206
  - **Task**: [what was fixed/implemented]
207
- - **Status**: complete | partial | blocked
207
+ - **Status**: DONE | DONE_WITH_CONCERNS | NEEDS_CONTEXT | BLOCKED
208
208
 
209
209
  ### Changes
210
210
  - `path/to/file.ts` — [description of change]
@@ -215,10 +215,38 @@ If fix requires touching >3 files not in the diagnosis → re-diagnose. You're p
215
215
  - Types: PASS | FAIL
216
216
  - Tests: PASS | FAIL ([n] passed, [m] failed)
217
217
 
218
+ ### Concerns (if DONE_WITH_CONCERNS)
219
+ - [concern]: [impact assessment] — [suggested remediation]
220
+
221
+ ### Context Needed (if NEEDS_CONTEXT)
222
+ - [what is unknown]: [why it blocks] — [two most likely answers]
223
+
224
+ ### Blocker (if BLOCKED)
225
+ - [specific blocker]: [what was attempted]
226
+
218
227
  ### Notes
219
228
  - [any caveats or follow-up needed]
220
229
  ```
221
230
 
231
+ ### Status Protocol (Subagent Contract)
232
+
233
+ Fix returns one of four statuses to its caller (cook, debug, review, surgeon). The caller uses this to route next actions.
234
+
235
+ | Status | When | Example |
236
+ |--------|------|---------|
237
+ | `DONE` | Fix applied, tests pass, no issues | Clean bug fix, all green |
238
+ | `DONE_WITH_CONCERNS` | Fix works but has side effects or caveats worth noting | "Tests pass but performance regressed 15% — consider optimizing in follow-up" |
239
+ | `NEEDS_CONTEXT` | Cannot apply fix without clarification — ambiguous spec or missing info | "Two valid interpretations of the expected behavior — need user input" |
240
+ | `BLOCKED` | Hard blocker — exhausted fix attempts, broken dependency, fundamental incompatibility | "3 fix attempts failed — triggering debug escalation" |
241
+
242
+ ## Returns
243
+
244
+ | Artifact | Format | Location |
245
+ |----------|--------|----------|
246
+ | Code changes | Source files | Per debug report / plan file paths |
247
+ | Fix Report | Markdown (inline) | Emitted to calling skill (cook, debug, review, surgeon) |
248
+ | Verification output | Inline (Fix Report) | Lint + types + test results |
249
+
222
250
  ## Sharp Edges
223
251
 
224
252
  Known failure modes for this skill. Check these before declaring done.
@@ -242,8 +270,13 @@ Known failure modes for this skill. Check these before declaring done.
242
270
  - Tests pass for the fixed functionality (actual output shown)
243
271
  - Lint and type check pass
244
272
  - hallucination-guard verified any new imports
245
- - Fix Report emitted with changed files and verification results
273
+ - Fix Report emitted with 4-state status, changed files, and verification results
274
+ - If `DONE_WITH_CONCERNS`: concerns listed with impact + remediation
275
+ - If `NEEDS_CONTEXT`: specific questions stated with two likely answers
276
+ - If `BLOCKED`: blocker + all attempted approaches documented
246
277
 
247
278
  ## Cost Profile
248
279
 
249
280
  ~2000-5000 tokens input, ~1000-3000 tokens output. Sonnet for code writing quality. Most active skill during implementation.
281
+
282
+ **Scope guardrail**: Do not refactor unrelated code or create new features beyond the diagnosed fix target unless explicitly delegated by the parent agent.
@@ -214,6 +214,16 @@ File: src/middleware/auth.ts:47
214
214
  | Security Gate | sentinel ran before closing incident | Run sentinel — do not skip |
215
215
  | Postmortem Gate | All sections populated (Timeline, RCA, Prevention Actions) before status = Resolved | Complete or note as DRAFT |
216
216
 
217
+ ## Returns
218
+
219
+ | Artifact | Format | Location |
220
+ |----------|--------|----------|
221
+ | Incident response report | Markdown | inline (chat output) |
222
+ | Incident timeline | Text (HH:MM format) | inline + postmortem |
223
+ | Postmortem document | Markdown | `.rune/incidents/INCIDENT-<date>-<slug>.md` |
224
+ | Prevention actions table | Markdown table | postmortem |
225
+ | Journal entry (incident ADR) | Text | `.rune/adr/` (via `rune:journal`) |
226
+
217
227
  ## Sharp Edges
218
228
 
219
229
  Known failure modes for this skill. Check these before declaring done.
@@ -303,6 +303,16 @@ Mark todo[4] `completed`.
303
303
  - Launch video: [ready | skipped]
304
304
  ```
305
305
 
306
+ ## Returns
307
+
308
+ | Artifact | Format | Location |
309
+ |----------|--------|----------|
310
+ | Deploy status + live URL | Inline (Launch Report) | Emitted at session end |
311
+ | Marketing assets (copy, social, SEO) | Markdown (inline) | Generated by `rune:marketing`, presented in Phase 5 |
312
+ | Release checklist | Markdown (inline) | Shown in Announce phase |
313
+ | Monitoring confirmation | Inline | Watchdog setup output |
314
+ | Launch Report | Markdown (inline) | Emitted at end of session |
315
+
306
316
  ## Sharp Edges
307
317
 
308
318
  Known failure modes for this skill. Check these before declaring done.
@@ -328,3 +338,5 @@ Known failure modes for this skill. Check these before declaring done.
328
338
  ## Cost Profile
329
339
 
330
340
  ~$0.08-0.15 per launch. Sonnet for coordination, delegates to haiku for scanning.
341
+
342
+ **Scope guardrail**: Do not publish marketing assets or trigger external announcements unless explicitly delegated by the parent agent.
@@ -235,6 +235,17 @@ Ensure the next session can pick up where this one left off:
235
235
  - Manifest summary saved to journal + neural memory for cross-session handoff
236
236
  - Tests pass after any logic edit
237
237
 
238
+ ## Returns
239
+
240
+ | Artifact | Format | Location |
241
+ |----------|--------|----------|
242
+ | Logic manifest | JSON | `.rune/logic-manifest.json` |
243
+ | Validation report (SYNCED / DRIFT) | Markdown | inline |
244
+ | Pre-edit gate summary | Structured text | inline |
245
+ | ADR entries for logic changes | Markdown | via `journal` L3 |
246
+
238
247
  ## Cost Profile
239
248
 
240
249
  ~1,000-2,000 tokens for manifest load + pre-edit gate. ~3,000-5,000 tokens for full project scan (Phase 3). Sonnet for code analysis; haiku for file scanning via scout.
250
+
251
+ **Scope guardrail:** logic-guardian protects existing logic — it does not implement new features or refactor code.
@@ -224,6 +224,19 @@ Known failure modes for this skill. Check these before declaring done.
224
224
  - Files saved to marketing/ directory
225
225
  - Marketing Assets report emitted with file list
226
226
 
227
+ ## Returns
228
+
229
+ | Artifact | Format | Location |
230
+ |----------|--------|----------|
231
+ | Brand voice contract | Markdown | `marketing/brand-voice.md` |
232
+ | Landing page copy | Markdown | `marketing/landing-copy.md` |
233
+ | Social media posts | Markdown | `marketing/social-posts.md` |
234
+ | SEO metadata | JSON | `marketing/seo-meta.json` |
235
+ | SEO audit report | Markdown | `marketing/seo-audit.md` |
236
+ | Video demo script | Markdown | `marketing/video-script.md` |
237
+
227
238
  ## Cost Profile
228
239
 
229
240
  ~2000-5000 tokens input, ~1000-3000 tokens output. Sonnet for copywriting quality.
241
+
242
+ **Scope guardrail:** marketing generates assets based on actual product capabilities only — no aspirational copy, no fabricated stats.
@@ -353,6 +353,19 @@ mcp-server-<name>/
353
353
  - Verification passed (types + tests)
354
354
  - Ready to install in Claude Code / Cursor / other IDEs
355
355
 
356
+ ## Returns
357
+
358
+ | Artifact | Format | Location |
359
+ |----------|--------|----------|
360
+ | MCP server source code | TypeScript or Python | `mcp-server-<name>/src/` |
361
+ | Tool definitions (one per tool) | TS/Python files | `src/tools/<name>.ts` or `.py` |
362
+ | Resource handlers | TS/Python files | `src/resources/<name>.ts` or `.py` |
363
+ | Test suite | TS/Python test files | `tests/` |
364
+ | README with tool catalog | Markdown | `mcp-server-<name>/README.md` |
365
+ | Environment config template | `.env.example` | project root |
366
+
356
367
  ## Cost Profile
357
368
 
358
369
  ~3000-6000 tokens input, ~2000-5000 tokens output. Sonnet — MCP server generation is a structured code task, not architectural reasoning.
370
+
371
+ **Scope guardrail:** mcp-builder generates the server and tests — it does not deploy, register with MCP registries, or configure the host IDE beyond providing the installation snippet.
@@ -3,7 +3,7 @@ name: onboard
3
3
  description: Auto-generate project context for AI sessions. Scans codebase, creates CLAUDE.md and .rune/ setup so every future session starts with full context.
4
4
  metadata:
5
5
  author: runedev
6
- version: "0.2.0"
6
+ version: "0.3.0"
7
7
  layer: L2
8
8
  model: sonnet
9
9
  group: quality
@@ -43,6 +43,7 @@ project/
43
43
  ├── decisions.md # Empty, ready for session-bridge
44
44
  ├── progress.md # Empty, ready for session-bridge
45
45
  ├── session-log.md # Empty, ready for session-bridge
46
+ ├── instincts.md # Empty, ready for session-bridge instinct learning
46
47
  └── DEVELOPER-GUIDE.md # Human-readable onboarding for new developers
47
48
  ```
48
49
 
@@ -103,6 +104,21 @@ Use `Write` to create each file:
103
104
  - `.rune/decisions.md` — create with header `# Architecture Decisions` and one placeholder row in a markdown table (Date | Decision | Rationale | Status)
104
105
  - `.rune/progress.md` — create with header `# Progress Log` and one placeholder entry
105
106
  - `.rune/session-log.md` — create with header `# Session Log` and current date as first entry
107
+ - `.rune/instincts.md` — create with header `# Project Instincts` and a description: "Learned trigger→action patterns. Managed by session-bridge. See session-bridge SKILL.md Step 5.7 for format."
108
+
109
+ ### Step 5.5 — Load Existing Instincts
110
+
111
+ If `.rune/instincts.md` already exists and contains instinct entries, read it and include a summary in the Onboard Report under `### Learned Instincts`. This tells the agent what project-specific behaviors have been learned from previous sessions.
112
+
113
+ For each instinct with confidence ≥0.6, include in the report:
114
+ - Trigger and action (one line)
115
+ - Confidence level
116
+
117
+ Instincts with confidence <0.6 are still learning — mention count but don't list individually.
118
+
119
+ **Why**: Onboard is the first skill that runs in a new session. Surfacing instincts here ensures the agent starts with project-specific learned behaviors, not just static conventions.
120
+
121
+ > Source: affaan-m/everything-claude-code (91.9k★) — instinct-based learning with project isolation.
106
122
 
107
123
  ### Step 6b — Generate DEVELOPER-GUIDE.md
108
124
 
@@ -188,6 +204,26 @@ Based on your detected stack ([detected frameworks]), these extension packs may
188
204
  Install: [link or command when available]
189
205
  ```
190
206
 
207
+ ### Step 6d — Context Budget Check
208
+
209
+ Audit the project's baseline context cost from MCP servers and agent configurations. This helps developers understand why their context window fills up faster than expected.
210
+
211
+ 1. Count MCP tools available (from session start messages or `settings.json`)
212
+ 2. Check CLAUDE.md line count
213
+ 3. If total MCP tools >80 or CLAUDE.md >150 lines, include a **Context Budget Advisory** in the Onboard Report:
214
+
215
+ ```
216
+ ### Context Budget Advisory
217
+ - **MCP tools loaded**: [count] across [N] servers
218
+ - **CLAUDE.md size**: [N] lines
219
+ - **Estimated baseline**: ~[N]k tokens before any work begins
220
+ - **Recommendation**: [specific advice — disable unused MCP servers, move CLAUDE.md details to .rune/]
221
+ ```
222
+
223
+ **Skip if**: Total MCP tools ≤80 AND CLAUDE.md ≤150 lines (healthy baseline).
224
+
225
+ > Source: affaan-m/everything-claude-code (91.9k★) — MCP token cost awareness.
226
+
191
227
  ### Step 7 — Commit
192
228
  Use `Bash` to stage and commit the generated files:
193
229
  ```bash
@@ -256,6 +292,10 @@ If any of the `.rune/` files already exist, do not overwrite them (they may cont
256
292
  ### Skipped (already exist)
257
293
  - [list of files not overwritten]
258
294
 
295
+ ### Learned Instincts (if any)
296
+ - [trigger] → [action] (confidence: [0.6-0.9]) — for each high-confidence instinct
297
+ - [N] low-confidence instincts still learning
298
+
259
299
  ### Observations
260
300
  - [notable patterns or anomalies found]
261
301
  - [potential issues detected]
@@ -288,11 +328,23 @@ Known failure modes for this skill. Check these before declaring done.
288
328
  ## Done When
289
329
 
290
330
  - CLAUDE.md written (or merged) with all detected tech stack fields populated
291
- - .rune/ directory initialized with conventions, decisions, progress, session-log
331
+ - .rune/ directory initialized with conventions, decisions, progress, session-log, instincts
292
332
  - .rune/DEVELOPER-GUIDE.md written with setup commands from actual scan
293
333
  - All generated commands verified to exist in package.json/Makefile/etc.
294
334
  - Onboard Report emitted with Generated + Skipped + Observations sections
295
335
 
336
+ ## Returns
337
+
338
+ | Artifact | Format | Location |
339
+ |----------|--------|----------|
340
+ | Project AI config | Markdown | `CLAUDE.md` (project root) |
341
+ | Detected conventions | Markdown | `.rune/conventions.md` |
342
+ | Decision log (initialized) | Markdown | `.rune/decisions.md` |
343
+ | Developer onboarding guide | Markdown | `.rune/DEVELOPER-GUIDE.md` |
344
+ | Session/progress files | Markdown | `.rune/progress.md`, `.rune/session-log.md` |
345
+
296
346
  ## Cost Profile
297
347
 
298
348
  ~2000-5000 tokens input, ~1000-2000 tokens output. Sonnet for analysis quality.
349
+
350
+ **Scope guardrail:** onboard generates project context files — it does not modify source code, install dependencies, or change project configuration.
@@ -292,6 +292,17 @@ Known failure modes for this skill. Check these before declaring done.
292
292
  - Benchmark scripts ran (if configured) or INFO: skipped
293
293
  - Perf Report emitted with PASS/WARN/BLOCK verdict
294
294
 
295
+ ## Returns
296
+
297
+ | Artifact | Format | Location |
298
+ |----------|--------|----------|
299
+ | Perf Report with verdict | Markdown (PASS/WARN/BLOCK) | inline |
300
+ | Per-finding details | Structured list (file:line + impact) | inline |
301
+ | Lighthouse scores (if ran) | Score table | inline |
302
+ | Framework-specific findings | Categorized list | inline |
303
+
295
304
  ## Cost Profile
296
305
 
297
306
  ~3000-8000 tokens input, ~500-1500 tokens output. Sonnet for pattern recognition.
307
+
308
+ **Scope guardrail:** perf investigates and reports only — it does not fix code. All fixes are delegated to `fix` (L2) after the report is reviewed.