@rune-kit/rune 2.28.0 → 2.29.1

package/hooks/secrets-scan/index.cjs

@@ -6,10 +6,26 @@
 // Zero false-positive tolerance on BLOCK patterns.
 
 const { execSync } = require('child_process');
+const fs = require('fs');
+const { captureConsole } = require('../lib/hook-output.cjs');
+
+captureConsole('PreToolUse', { captureError: true });
 
 // Only intercept git commit commands
-const input = JSON.parse(process.env.CLAUDE_TOOL_INPUT || '{}');
-const command = (input.command || '').trim();
+let rawInput = '';
+try {
+  rawInput = fs.readFileSync(0, 'utf-8');
+} catch {
+  // Claude compatibility fallback below.
+}
+let event = {};
+try {
+  event = JSON.parse(rawInput.trim() || process.env.CLAUDE_TOOL_INPUT || '{}');
+} catch {
+  process.exit(0);
+}
+const toolInput = event.tool_input || event;
+const command = (toolInput.command || '').trim();
 
 // Check if this is a git commit command
 if (!/^git\s+commit\b/.test(command)) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rune-kit/rune",
-  "version": "2.28.0",
-  "description": "65-skill mesh for AI coding assistants — runtime auto-discipline via native hooks (Claude/Cursor/Windsurf/Antigravity), 5-layer architecture, 204 connections + 43 signals, multi-platform compiler. converge (L3) scans spec vs code so dead-button/frontend-only implementations can't ship.",
+  "version": "2.29.1",
+  "description": "66-skill mesh for AI coding assistants — native lifecycle hooks for Claude Code and Codex, 5-layer architecture, 248 connections + 45 signals, and a 13-platform compiler.",
   "type": "module",
   "bin": {
     "rune": "./compiler/bin/rune.js"
@@ -52,6 +52,7 @@
     "commands/",
     "agents/",
     "hooks/",
+    ".codex-plugin/",
     "references/"
   ],
   "homepage": "https://rune-kit.github.io/rune",

package/skills/browser-pilot/SKILL.md

@@ -25,6 +25,7 @@ Browser automation for testing and verification using MCP Playwright tools. Navi
 - `launch` (L1): verify live site after deployment
 - `perf` (L2): Lighthouse / Core Web Vitals measurement
 - `audit` (L2): visual verification during quality assessment
+- `design` (L2): render the surface before any visual property is claimed (design Step 5.4 — render blindness)
 
 ## Calls (outbound)
 

package/skills/completion-gate/SKILL.md

@@ -148,11 +148,11 @@ For each claim, look for corresponding evidence in the conversation context:
 
 | Claim Type | Required Evidence | Where to Find |
 |---|---|---|
-| "tests pass" | Test runner stdout with pass count | Bash output from test command |
-| "build succeeds" | Build command stdout showing success | Bash output from build command |
-| "lint clean" | Linter stdout (even if empty = 0 errors) | Bash output from lint command |
-| "fixed" | Git diff showing the change + test proving fix | Edit/Write tool calls + test output |
-| "implemented" | Files created/modified matching the plan | Write/Edit tool calls vs plan |
+| "tests pass" | Test runner stdout with pass count | Shell output from test command |
+| "build succeeds" | Build command stdout showing success | Shell output from build command |
+| "lint clean" | Linter stdout (even if empty = 0 errors) | Shell output from lint command |
+| "fixed" | Git diff showing the change + test proving fix | File-edit evidence + test output |
+| "implemented" | Files created/modified matching the plan | File changes compared with the plan |
 | "no security issues" | Sentinel report with PASS verdict | Sentinel skill output |
 | "coverage ≥ X%" | Coverage tool output with actual percentage | Test runner with coverage flag |
 

package/skills/doc-processor/SKILL.md

@@ -41,7 +41,7 @@ None — pure L3 utility. Receives content, produces formatted output.
 
 | Format | Generate | Parse | Node.js Library | Python Library |
 |--------|----------|-------|-----------------|----------------|
-| PDF | Yes | Yes (via Read tool) | jsPDF, Puppeteer (HTML→PDF) | reportlab, weasyprint |
+| PDF | Yes | Yes (via the runtime's document/PDF reader) | jsPDF, Puppeteer (HTML→PDF) | reportlab, weasyprint |
 | DOCX | Yes | Yes | docx (officegen) | python-docx |
 | XLSX | Yes | Yes | ExcelJS | openpyxl |
 | PPTX | Yes | Yes | pptxgenjs | python-pptx |
@@ -157,7 +157,7 @@ Identify file format from extension and MIME type.
 
 | Format | Extraction Strategy |
 |--------|-------------------|
-| PDF | Use Read tool (Claude can read PDFs natively) |
+| PDF | Use the runtime's native document/PDF reader when available; otherwise use a supported PDF parsing library |
 | DOCX | docx library → extract text, tables, images |
 | XLSX | ExcelJS → extract sheets, rows, formulas |
 | PPTX | pptxgenjs → extract slides, text, notes |

package/skills/hallucination-guard/SKILL.md

@@ -39,6 +39,7 @@ Post-generation validation that verifies AI-generated code references actually e
 - `review-intake` (L2): verify imports in code submitted for review
 - `skill-forge` (L2): verify imports in newly generated skill code
 - `adversary` (L2): verify APIs/packages in plan actually exist
+- `logic-guardian` (L2): verify referenced functions and imports after guarded logic edits
 
 ## Execution
 

package/skills/journal/SKILL.md

@@ -39,6 +39,7 @@ None — pure L3 state management utility.
 - `graft` (L2): auto-log graft operations — source URL, mode, challenge score, files changed
 - `retro` (L2): record retrospective insights and decisions
 - `improve-architecture` (L2): record an ADR when the user rejects a deepening candidate with a load-bearing reason
+- `logic-guardian` (L2): record guarded logic changes for cross-session persistence
 
 ## Files Managed
 

package/skills/retro/SKILL.md

@@ -316,8 +316,8 @@ Pull from all installed domain packs:
 - **Engineering**: git history (commits, velocity, test ratio, fix ratio, hotspots)
 - **Revenue** (@rune-pro/sales): pipeline metrics, deal velocity, churn risk
 - **Support** (@rune-pro/support): ticket volume, SLA compliance, CSAT
-- **Finance** (@rune-business/finance): burn rate, runway, budget variance
-- **Compliance** (@rune-business/legal): framework status, audit dates, open items
+- **Finance** (@rune-pro/finance): burn rate, runway, budget variance
+- **Compliance** (@rune-pro/legal): framework status, audit dates, open items
 
 ### Business Execution Steps
 

package/skills/session-bridge/SKILL.md

@@ -41,6 +41,7 @@ Solve the #1 developer complaint: context loss across sessions. Session-bridge a
 - `context-pack` (L3): coordinate state for sub-agent handoff
 - `neural-memory` (L3): sync key decisions back to `.rune/` files after Capture Mode
 - `adversary` (L2): (oracle-mode) detach protocol when target model is opus-class for non-blocking dispatch
+- `logic-guardian` (L2): preserve logic-manifest state across sessions
 
 ## State Files Managed
 

package/skills/session-bridge/scripts/load-invariants.js

@@ -132,7 +132,7 @@ export function parseInvariants(text) {
   let current = null;
 
   const flush = () => {
-    if (current && current.title) rules.push(current);
+    if (current?.title) rules.push(current);
     current = null;
   };
 

package/skills/video-creator/SKILL.md

@@ -265,7 +265,7 @@ Known failure modes for this skill. Check these before declaring done.
 - Storyboard created scene-by-scene with transitions
 - Shot list categorized by type (screen recording, terminal, code, diagram)
 - Assets needed checklist generated
-- video-plan.md written to output_path via Write tool
+- `video-plan.md` written to `output_path` with the runtime's file-edit capability
 - Video Plan Created report emitted with scene count, shot count, and asset count
 
 ## Cost Profile