@rune-kit/rune 2.8.0 → 2.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (287) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +68 -34
  3. package/agents/adversary.md +27 -0
  4. package/agents/architect.md +19 -29
  5. package/agents/asset-creator.md +18 -4
  6. package/agents/audit.md +25 -4
  7. package/agents/autopsy.md +19 -4
  8. package/agents/ba.md +35 -0
  9. package/agents/brainstorm.md +31 -4
  10. package/agents/browser-pilot.md +21 -4
  11. package/agents/coder.md +21 -29
  12. package/agents/completion-gate.md +20 -4
  13. package/agents/constraint-check.md +18 -4
  14. package/agents/context-engine.md +22 -4
  15. package/agents/context-pack.md +32 -0
  16. package/agents/cook.md +41 -4
  17. package/agents/db.md +19 -4
  18. package/agents/debug.md +33 -4
  19. package/agents/dependency-doctor.md +20 -4
  20. package/agents/deploy.md +27 -4
  21. package/agents/design.md +22 -4
  22. package/agents/doc-processor.md +27 -0
  23. package/agents/docs-seeker.md +19 -4
  24. package/agents/docs.md +31 -0
  25. package/agents/fix.md +37 -4
  26. package/agents/git.md +29 -0
  27. package/agents/hallucination-guard.md +20 -4
  28. package/agents/incident.md +21 -4
  29. package/agents/integrity-check.md +18 -4
  30. package/agents/journal.md +19 -4
  31. package/agents/launch.md +32 -4
  32. package/agents/logic-guardian.md +26 -11
  33. package/agents/marketing.md +23 -4
  34. package/agents/mcp-builder.md +26 -0
  35. package/agents/neural-memory.md +30 -0
  36. package/agents/onboard.md +22 -4
  37. package/agents/perf.md +21 -4
  38. package/agents/plan.md +29 -4
  39. package/agents/preflight.md +22 -4
  40. package/agents/problem-solver.md +20 -4
  41. package/agents/rescue.md +23 -4
  42. package/agents/research.md +19 -4
  43. package/agents/researcher.md +19 -29
  44. package/agents/retro.md +32 -0
  45. package/agents/review-intake.md +20 -4
  46. package/agents/review.md +32 -4
  47. package/agents/reviewer.md +20 -28
  48. package/agents/safeguard.md +19 -4
  49. package/agents/sast.md +18 -4
  50. package/agents/scaffold.md +41 -0
  51. package/agents/scanner.md +19 -28
  52. package/agents/scope-guard.md +18 -4
  53. package/agents/scout.md +23 -4
  54. package/agents/sentinel-env.md +26 -0
  55. package/agents/sentinel.md +33 -4
  56. package/agents/sequential-thinking.md +20 -4
  57. package/agents/session-bridge.md +24 -4
  58. package/agents/skill-forge.md +22 -4
  59. package/agents/skill-router.md +26 -4
  60. package/agents/slides.md +24 -0
  61. package/agents/surgeon.md +19 -4
  62. package/agents/team.md +30 -4
  63. package/agents/test.md +36 -4
  64. package/agents/trend-scout.md +17 -4
  65. package/agents/verification.md +20 -4
  66. package/agents/video-creator.md +20 -4
  67. package/agents/watchdog.md +19 -4
  68. package/agents/worktree.md +17 -4
  69. package/commands/rune.md +168 -168
  70. package/compiler/__tests__/analytics.test.js +370 -0
  71. package/compiler/adapters/openclaw.js +2 -2
  72. package/compiler/analytics.js +385 -0
  73. package/compiler/bin/rune.js +68 -2
  74. package/compiler/dashboard.js +883 -0
  75. package/compiler/transforms/branding.js +1 -1
  76. package/contexts/dev.md +34 -34
  77. package/contexts/research.md +43 -43
  78. package/contexts/review.md +55 -55
  79. package/extensions/ai-ml/PACK.md +88 -88
  80. package/extensions/ai-ml/skills/ai-agents.md +172 -172
  81. package/extensions/ai-ml/skills/code-sandbox.md +187 -187
  82. package/extensions/ai-ml/skills/deep-research.md +146 -146
  83. package/extensions/ai-ml/skills/embedding-search.md +66 -66
  84. package/extensions/ai-ml/skills/fine-tuning-guide.md +74 -74
  85. package/extensions/ai-ml/skills/llm-architect.md +125 -125
  86. package/extensions/ai-ml/skills/llm-integration.md +64 -64
  87. package/extensions/ai-ml/skills/prompt-patterns.md +72 -72
  88. package/extensions/ai-ml/skills/rag-patterns.md +66 -66
  89. package/extensions/ai-ml/skills/web-extraction.md +114 -114
  90. package/extensions/analytics/PACK.md +92 -92
  91. package/extensions/analytics/skills/ab-testing.md +72 -72
  92. package/extensions/analytics/skills/dashboard-patterns.md +83 -83
  93. package/extensions/analytics/skills/data-validation.md +68 -68
  94. package/extensions/analytics/skills/funnel-analysis.md +81 -81
  95. package/extensions/analytics/skills/sql-patterns.md +57 -57
  96. package/extensions/analytics/skills/statistical-analysis.md +79 -79
  97. package/extensions/analytics/skills/tracking-setup.md +71 -71
  98. package/extensions/backend/PACK.md +104 -104
  99. package/extensions/backend/skills/api-patterns.md +84 -84
  100. package/extensions/backend/skills/async-pipeline.md +193 -193
  101. package/extensions/backend/skills/auth-patterns.md +97 -97
  102. package/extensions/backend/skills/background-jobs.md +133 -133
  103. package/extensions/backend/skills/caching-patterns.md +108 -108
  104. package/extensions/backend/skills/cli-generation.md +133 -133
  105. package/extensions/backend/skills/database-patterns.md +87 -87
  106. package/extensions/backend/skills/middleware-patterns.md +104 -104
  107. package/extensions/chrome-ext/PACK.md +93 -93
  108. package/extensions/chrome-ext/skills/cws-preflight.md +143 -143
  109. package/extensions/chrome-ext/skills/cws-publish.md +104 -104
  110. package/extensions/chrome-ext/skills/ext-ai-integration.md +251 -251
  111. package/extensions/chrome-ext/skills/ext-messaging.md +139 -139
  112. package/extensions/chrome-ext/skills/ext-storage.md +133 -133
  113. package/extensions/chrome-ext/skills/mv3-scaffold.md +164 -164
  114. package/extensions/content/PACK.md +96 -96
  115. package/extensions/content/skills/blog-patterns.md +88 -88
  116. package/extensions/content/skills/cms-integration.md +131 -131
  117. package/extensions/content/skills/content-scoring.md +107 -107
  118. package/extensions/content/skills/i18n.md +83 -83
  119. package/extensions/content/skills/mdx-authoring.md +137 -137
  120. package/extensions/content/skills/reference.md +1014 -1014
  121. package/extensions/content/skills/seo-patterns.md +67 -67
  122. package/extensions/content/skills/video-repurpose.md +153 -153
  123. package/extensions/devops/PACK.md +101 -101
  124. package/extensions/devops/skills/chaos-testing.md +67 -67
  125. package/extensions/devops/skills/ci-cd.md +75 -75
  126. package/extensions/devops/skills/docker.md +58 -58
  127. package/extensions/devops/skills/edge-serverless.md +163 -163
  128. package/extensions/devops/skills/infra-as-code.md +158 -158
  129. package/extensions/devops/skills/kubernetes.md +110 -110
  130. package/extensions/devops/skills/monitoring.md +57 -57
  131. package/extensions/devops/skills/server-setup.md +64 -64
  132. package/extensions/devops/skills/ssl-domain.md +42 -42
  133. package/extensions/ecommerce/PACK.md +116 -116
  134. package/extensions/ecommerce/skills/cart-system.md +79 -79
  135. package/extensions/ecommerce/skills/inventory-mgmt.md +102 -102
  136. package/extensions/ecommerce/skills/order-management.md +126 -126
  137. package/extensions/ecommerce/skills/payment-integration.md +472 -472
  138. package/extensions/ecommerce/skills/shopify-dev.md +69 -69
  139. package/extensions/ecommerce/skills/subscription-billing.md +93 -93
  140. package/extensions/ecommerce/skills/tax-compliance.md +117 -117
  141. package/extensions/gamedev/PACK.md +142 -142
  142. package/extensions/gamedev/skills/asset-pipeline.md +74 -74
  143. package/extensions/gamedev/skills/audio-system.md +129 -129
  144. package/extensions/gamedev/skills/camera-system.md +87 -87
  145. package/extensions/gamedev/skills/ecs.md +98 -98
  146. package/extensions/gamedev/skills/game-loops.md +72 -72
  147. package/extensions/gamedev/skills/input-system.md +199 -199
  148. package/extensions/gamedev/skills/multiplayer.md +180 -180
  149. package/extensions/gamedev/skills/particles.md +105 -105
  150. package/extensions/gamedev/skills/physics-engine.md +89 -89
  151. package/extensions/gamedev/skills/scene-management.md +146 -146
  152. package/extensions/gamedev/skills/threejs-patterns.md +90 -90
  153. package/extensions/gamedev/skills/webgl.md +71 -71
  154. package/extensions/mobile/PACK.md +106 -106
  155. package/extensions/mobile/skills/app-store-connect.md +152 -152
  156. package/extensions/mobile/skills/app-store-prep.md +66 -66
  157. package/extensions/mobile/skills/deep-linking.md +109 -109
  158. package/extensions/mobile/skills/flutter.md +60 -60
  159. package/extensions/mobile/skills/ios-build-pipeline.md +142 -142
  160. package/extensions/mobile/skills/native-bridge.md +66 -66
  161. package/extensions/mobile/skills/ota-updates.md +97 -97
  162. package/extensions/mobile/skills/push-notifications.md +111 -111
  163. package/extensions/mobile/skills/react-native.md +82 -82
  164. package/extensions/saas/PACK.md +116 -116
  165. package/extensions/saas/skills/billing-integration.md +200 -200
  166. package/extensions/saas/skills/feature-flags.md +130 -130
  167. package/extensions/saas/skills/multi-tenant.md +103 -103
  168. package/extensions/saas/skills/onboarding-flow.md +139 -139
  169. package/extensions/saas/skills/subscription-flow.md +95 -95
  170. package/extensions/saas/skills/team-management.md +144 -144
  171. package/extensions/security/PACK.md +99 -99
  172. package/extensions/security/skills/api-security.md +140 -140
  173. package/extensions/security/skills/compliance.md +68 -68
  174. package/extensions/security/skills/owasp-audit.md +64 -64
  175. package/extensions/security/skills/pentest-patterns.md +77 -77
  176. package/extensions/security/skills/secret-mgmt.md +65 -65
  177. package/extensions/security/skills/supply-chain.md +65 -65
  178. package/extensions/trading/PACK.md +80 -80
  179. package/extensions/trading/skills/chart-components.md +55 -55
  180. package/extensions/trading/skills/experiment-loop.md +125 -125
  181. package/extensions/trading/skills/fintech-patterns.md +47 -47
  182. package/extensions/trading/skills/indicator-library.md +58 -58
  183. package/extensions/trading/skills/quant-analysis.md +111 -111
  184. package/extensions/trading/skills/realtime-data.md +58 -58
  185. package/extensions/trading/skills/trade-logic.md +104 -104
  186. package/extensions/ui/PACK.md +130 -130
  187. package/extensions/ui/skills/a11y-audit.md +91 -91
  188. package/extensions/ui/skills/animation-patterns.md +127 -106
  189. package/extensions/ui/skills/component-patterns.md +100 -75
  190. package/extensions/ui/skills/design-decision.md +108 -108
  191. package/extensions/ui/skills/design-system.md +68 -68
  192. package/extensions/ui/skills/landing-patterns.md +155 -155
  193. package/extensions/ui/skills/palette-picker.md +173 -173
  194. package/extensions/ui/skills/react-health.md +90 -90
  195. package/extensions/ui/skills/type-system.md +125 -125
  196. package/extensions/ui/skills/web-vitals.md +153 -153
  197. package/extensions/zalo/PACK.md +145 -145
  198. package/extensions/zalo/skills/zalo-oa-mcp.md +317 -317
  199. package/extensions/zalo/skills/zalo-oa-messaging.md +429 -429
  200. package/extensions/zalo/skills/zalo-oa-setup.md +236 -236
  201. package/extensions/zalo/skills/zalo-oa-webhook.md +189 -189
  202. package/extensions/zalo/skills/zalo-personal-messaging.md +194 -194
  203. package/extensions/zalo/skills/zalo-personal-setup.md +153 -153
  204. package/extensions/zalo/skills/zalo-rate-guard.md +219 -219
  205. package/hooks/auto-format/index.cjs +48 -48
  206. package/hooks/context-watch/index.cjs +95 -68
  207. package/hooks/hooks.json +111 -111
  208. package/hooks/metrics-collector/index.cjs +86 -42
  209. package/hooks/post-session-reflect/index.cjs +189 -153
  210. package/hooks/pre-compact/index.cjs +95 -95
  211. package/hooks/run-hook.cmd +1 -1
  212. package/hooks/secrets-scan/index.cjs +100 -100
  213. package/hooks/session-start/index.cjs +71 -65
  214. package/hooks/typecheck/index.cjs +65 -65
  215. package/package.json +63 -63
  216. package/references/ui-pro-max-data/LICENSE-UI-PRO-MAX +21 -21
  217. package/references/ui-pro-max-data/charts.csv +26 -26
  218. package/references/ui-pro-max-data/colors.csv +161 -161
  219. package/references/ui-pro-max-data/styles.csv +68 -68
  220. package/references/ui-pro-max-data/typography.csv +74 -74
  221. package/references/ui-pro-max-data/ui-reasoning.csv +162 -162
  222. package/references/ui-pro-max-data/ux-guidelines.csv +99 -99
  223. package/skills/adversary/SKILL.md +283 -283
  224. package/skills/asset-creator/SKILL.md +157 -157
  225. package/skills/audit/SKILL.md +148 -2
  226. package/skills/autopsy/SKILL.md +335 -259
  227. package/skills/autopsy/references/repo-analysis-patterns.md +113 -0
  228. package/skills/ba/SKILL.md +72 -2
  229. package/skills/brainstorm/SKILL.md +342 -341
  230. package/skills/browser-pilot/SKILL.md +168 -168
  231. package/skills/constraint-check/SKILL.md +165 -165
  232. package/skills/context-engine/SKILL.md +404 -404
  233. package/skills/cook/SKILL.md +917 -834
  234. package/skills/cook/references/output-format.md +33 -0
  235. package/skills/db/SKILL.md +273 -272
  236. package/skills/debug/SKILL.md +465 -443
  237. package/skills/dependency-doctor/SKILL.md +265 -235
  238. package/skills/deploy/SKILL.md +274 -231
  239. package/skills/design/DESIGN-REFERENCE.md +365 -365
  240. package/skills/design/SKILL.md +589 -482
  241. package/skills/doc-processor/SKILL.md +254 -254
  242. package/skills/docs/SKILL.md +374 -373
  243. package/skills/docs-seeker/SKILL.md +177 -177
  244. package/skills/fix/SKILL.md +330 -308
  245. package/skills/git/SKILL.md +339 -339
  246. package/skills/graft/SKILL.md +352 -0
  247. package/skills/graft/references/challenge-framework.md +98 -0
  248. package/skills/graft/references/mode-decision.md +44 -0
  249. package/skills/hallucination-guard/SKILL.md +219 -219
  250. package/skills/incident/SKILL.md +254 -251
  251. package/skills/integrity-check/SKILL.md +169 -169
  252. package/skills/journal/SKILL.md +240 -238
  253. package/skills/launch/SKILL.md +344 -342
  254. package/skills/logic-guardian/SKILL.md +251 -251
  255. package/skills/marketing/SKILL.md +290 -245
  256. package/skills/mcp-builder/SKILL.md +425 -423
  257. package/skills/mcp-builder/references/auto-discovery-pattern.md +169 -0
  258. package/skills/neural-memory/SKILL.md +362 -362
  259. package/skills/onboard/SKILL.md +404 -403
  260. package/skills/perf/SKILL.md +346 -346
  261. package/skills/plan/SKILL.md +433 -370
  262. package/skills/plan/references/feature-map.md +84 -0
  263. package/skills/preflight/SKILL.md +415 -396
  264. package/skills/problem-solver/SKILL.md +380 -284
  265. package/skills/rescue/SKILL.md +474 -450
  266. package/skills/retro/SKILL.md +5 -1
  267. package/skills/review/SKILL.md +612 -535
  268. package/skills/review-intake/SKILL.md +249 -249
  269. package/skills/safeguard/SKILL.md +200 -200
  270. package/skills/sast/SKILL.md +190 -190
  271. package/skills/scaffold/SKILL.md +328 -286
  272. package/skills/scope-guard/SKILL.md +180 -162
  273. package/skills/scout/SKILL.md +263 -263
  274. package/skills/sentinel/SKILL.md +382 -353
  275. package/skills/sentinel-env/SKILL.md +254 -254
  276. package/skills/sequential-thinking/SKILL.md +234 -234
  277. package/skills/session-bridge/SKILL.md +543 -397
  278. package/skills/skill-forge/SKILL.md +581 -539
  279. package/skills/skill-router/{skill.md → SKILL.md} +30 -2
  280. package/skills/surgeon/SKILL.md +215 -215
  281. package/skills/team/SKILL.md +556 -514
  282. package/skills/test/SKILL.md +614 -587
  283. package/skills/trend-scout/SKILL.md +145 -145
  284. package/skills/verification/SKILL.md +326 -325
  285. package/skills/video-creator/SKILL.md +201 -201
  286. package/skills/watchdog/SKILL.md +168 -168
  287. package/skills/worktree/SKILL.md +140 -140
@@ -1,100 +1,100 @@
1
- // Rune Secrets Scan Hook
2
- // PreToolUse hook on Bash — intercepts git commit commands
3
- // Scans staged files for hardcoded secrets before allowing commit
4
- //
5
- // Patterns based on gitleaks + common AI-generated secret leaks.
6
- // Zero false-positive tolerance on BLOCK patterns.
7
-
8
- const { execSync } = require('child_process');
9
-
10
- // Only intercept git commit commands
11
- const input = JSON.parse(process.env.CLAUDE_TOOL_INPUT || '{}');
12
- const command = (input.command || '').trim();
13
-
14
- // Check if this is a git commit command
15
- if (!/^git\s+commit\b/.test(command)) {
16
- // Not a commit — pass through
17
- process.exit(0);
18
- }
19
-
20
- // Get staged files
21
- let stagedFiles;
22
- try {
23
- stagedFiles = execSync('git diff --cached --name-only', { encoding: 'utf-8' })
24
- .trim()
25
- .split('\n')
26
- .filter(f => f.length > 0);
27
- } catch {
28
- // Not in a git repo or no staged files — pass through
29
- process.exit(0);
30
- }
31
-
32
- if (stagedFiles.length === 0) {
33
- process.exit(0);
34
- }
35
-
36
- // Secret patterns (high-confidence, low false-positive)
37
- const BLOCK_PATTERNS = [
38
- { name: 'AWS Access Key', regex: /AKIA[0-9A-Z]{16}/ },
39
- { name: 'GitHub Token', regex: /gh[ps]_[A-Za-z0-9_]{36,}/ },
40
- { name: 'Slack Token', regex: /xox[bpors]-[0-9a-zA-Z-]{10,}/ },
41
- { name: 'Stripe Key', regex: /[sr]k_(live|test)_[0-9a-zA-Z]{24,}/ },
42
- { name: 'SendGrid Key', regex: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/ },
43
- { name: 'Twilio Key', regex: /SK[0-9a-fA-F]{32}/ },
44
- { name: 'Firebase Key', regex: /AIza[0-9A-Za-z_-]{35}/ },
45
- { name: 'Private Key', regex: /-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/ },
46
- { name: 'OpenAI Key', regex: /sk-[A-Za-z0-9]{32,}/ },
47
- { name: 'Anthropic Key', regex: /sk-ant-[A-Za-z0-9_-]{32,}/ },
48
- ];
49
-
50
- // Files to always skip (test fixtures, examples)
51
- const SKIP_PATHS = /\/(test|tests|__tests__|fixtures|__mocks__|examples?|\.test\.|\.spec\.)/i;
52
-
53
- // Scan staged content (not files on disk — staged content via git show)
54
- const findings = [];
55
-
56
- for (const file of stagedFiles) {
57
- // Skip test/fixture files
58
- if (SKIP_PATHS.test(file)) continue;
59
-
60
- // Skip binary files and lockfiles
61
- if (/\.(png|jpg|gif|ico|woff|ttf|lock|lockb)$/i.test(file)) continue;
62
-
63
- let content;
64
- try {
65
- content = execSync(`git show ":${file}"`, { encoding: 'utf-8', maxBuffer: 1024 * 1024 });
66
- } catch {
67
- continue; // File deleted or binary
68
- }
69
-
70
- const lines = content.split('\n');
71
- for (let i = 0; i < lines.length; i++) {
72
- const line = lines[i];
73
- for (const pattern of BLOCK_PATTERNS) {
74
- if (pattern.regex.test(line)) {
75
- findings.push({
76
- file,
77
- line: i + 1,
78
- pattern: pattern.name,
79
- snippet: line.substring(0, 80).trim(),
80
- });
81
- }
82
- }
83
- }
84
- }
85
-
86
- if (findings.length > 0) {
87
- console.error('\n\u{1F6A8} [Rune secrets-scan] BLOCKED — hardcoded secrets detected in staged files:\n');
88
- for (const f of findings) {
89
- console.error(` ${f.file}:${f.line} — ${f.pattern}`);
90
- console.error(` ${f.snippet}...`);
91
- }
92
- console.error('\n Fix: Remove secrets, use environment variables instead.');
93
- console.error(' Override: git commit --no-verify (NOT recommended)\n');
94
-
95
- // BLOCK the commit
96
- process.exit(2);
97
- }
98
-
99
- // No secrets found — allow commit
100
- process.exit(0);
1
+ // Rune Secrets Scan Hook
2
+ // PreToolUse hook on Bash — intercepts git commit commands
3
+ // Scans staged files for hardcoded secrets before allowing commit
4
+ //
5
+ // Patterns based on gitleaks + common AI-generated secret leaks.
6
+ // Zero false-positive tolerance on BLOCK patterns.
7
+
8
+ const { execSync } = require('child_process');
9
+
10
+ // Only intercept git commit commands
11
+ const input = JSON.parse(process.env.CLAUDE_TOOL_INPUT || '{}');
12
+ const command = (input.command || '').trim();
13
+
14
+ // Check if this is a git commit command
15
+ if (!/^git\s+commit\b/.test(command)) {
16
+ // Not a commit — pass through
17
+ process.exit(0);
18
+ }
19
+
20
+ // Get staged files
21
+ let stagedFiles;
22
+ try {
23
+ stagedFiles = execSync('git diff --cached --name-only', { encoding: 'utf-8' })
24
+ .trim()
25
+ .split('\n')
26
+ .filter(f => f.length > 0);
27
+ } catch {
28
+ // Not in a git repo or no staged files — pass through
29
+ process.exit(0);
30
+ }
31
+
32
+ if (stagedFiles.length === 0) {
33
+ process.exit(0);
34
+ }
35
+
36
+ // Secret patterns (high-confidence, low false-positive)
37
+ const BLOCK_PATTERNS = [
38
+ { name: 'AWS Access Key', regex: /AKIA[0-9A-Z]{16}/ },
39
+ { name: 'GitHub Token', regex: /gh[ps]_[A-Za-z0-9_]{36,}/ },
40
+ { name: 'Slack Token', regex: /xox[bpors]-[0-9a-zA-Z-]{10,}/ },
41
+ { name: 'Stripe Key', regex: /[sr]k_(live|test)_[0-9a-zA-Z]{24,}/ },
42
+ { name: 'SendGrid Key', regex: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/ },
43
+ { name: 'Twilio Key', regex: /SK[0-9a-fA-F]{32}/ },
44
+ { name: 'Firebase Key', regex: /AIza[0-9A-Za-z_-]{35}/ },
45
+ { name: 'Private Key', regex: /-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/ },
46
+ { name: 'OpenAI Key', regex: /sk-[A-Za-z0-9]{32,}/ },
47
+ { name: 'Anthropic Key', regex: /sk-ant-[A-Za-z0-9_-]{32,}/ },
48
+ ];
49
+
50
+ // Files to always skip (test fixtures, examples)
51
+ const SKIP_PATHS = /\/(test|tests|__tests__|fixtures|__mocks__|examples?|\.test\.|\.spec\.)/i;
52
+
53
+ // Scan staged content (not files on disk — staged content via git show)
54
+ const findings = [];
55
+
56
+ for (const file of stagedFiles) {
57
+ // Skip test/fixture files
58
+ if (SKIP_PATHS.test(file)) continue;
59
+
60
+ // Skip binary files and lockfiles
61
+ if (/\.(png|jpg|gif|ico|woff|ttf|lock|lockb)$/i.test(file)) continue;
62
+
63
+ let content;
64
+ try {
65
+ content = execSync(`git show ":${file}"`, { encoding: 'utf-8', maxBuffer: 1024 * 1024 });
66
+ } catch {
67
+ continue; // File deleted or binary
68
+ }
69
+
70
+ const lines = content.split('\n');
71
+ for (let i = 0; i < lines.length; i++) {
72
+ const line = lines[i];
73
+ for (const pattern of BLOCK_PATTERNS) {
74
+ if (pattern.regex.test(line)) {
75
+ findings.push({
76
+ file,
77
+ line: i + 1,
78
+ pattern: pattern.name,
79
+ snippet: line.substring(0, 80).trim(),
80
+ });
81
+ }
82
+ }
83
+ }
84
+ }
85
+
86
+ if (findings.length > 0) {
87
+ console.error('\n\u{1F6A8} [Rune secrets-scan] BLOCKED — hardcoded secrets detected in staged files:\n');
88
+ for (const f of findings) {
89
+ console.error(` ${f.file}:${f.line} — ${f.pattern}`);
90
+ console.error(` ${f.snippet}...`);
91
+ }
92
+ console.error('\n Fix: Remove secrets, use environment variables instead.');
93
+ console.error(' Override: git commit --no-verify (NOT recommended)\n');
94
+
95
+ // BLOCK the commit
96
+ process.exit(2);
97
+ }
98
+
99
+ // No secrets found — allow commit
100
+ process.exit(0);
@@ -1,65 +1,71 @@
1
- // Rune Session Start Hook
2
- // Loads and injects .rune/ state file CONTENTS into context at session start
3
-
4
- const fs = require('fs');
5
- const path = require('path');
6
- const os = require('os');
7
-
8
- const cwd = process.cwd();
9
- const runeDir = path.join(cwd, '.rune');
10
-
11
- // Reset context-watch counter on session start (fresh context window)
12
- const hash = Buffer.from(cwd).toString('base64url').slice(0, 16);
13
- const counterFile = path.join(os.tmpdir(), `rune-context-watch-${hash}.json`);
14
- try { fs.unlinkSync(counterFile); } catch { /* no counter yet — fine */ }
15
-
16
- if (fs.existsSync(runeDir)) {
17
- const stateFiles = [
18
- 'progress.md',
19
- 'decisions.md',
20
- 'conventions.md',
21
- 'RESCUE-STATE.md',
22
- 'DEVELOPER-GUIDE.md',
23
- 'logic-manifest.json'
24
- ];
25
- const loaded = [];
26
-
27
- for (const file of stateFiles) {
28
- const filePath = path.join(runeDir, file);
29
- if (fs.existsSync(filePath)) {
30
- const content = fs.readFileSync(filePath, 'utf-8').trim();
31
- if (content.length > 0) {
32
- console.log(`\n=== .rune/${file} ===\n${content}`);
33
- loaded.push(file);
34
- }
35
- }
36
- }
37
-
38
- // Inject active behavioral context mode
39
- const activeContextFile = path.join(runeDir, 'active-context.md');
40
- if (fs.existsSync(activeContextFile)) {
41
- try {
42
- const mode = fs.readFileSync(activeContextFile, 'utf-8').trim();
43
- if (mode) {
44
- // Look for the context file in plugin's contexts/ directory
45
- const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || path.join(__dirname, '..', '..');
46
- const contextFile = path.join(pluginRoot, 'contexts', `${mode}.md`);
47
- if (fs.existsSync(contextFile)) {
48
- const contextContent = fs.readFileSync(contextFile, 'utf-8').trim();
49
- console.log(`\n=== Active Context: ${mode} mode ===\n${contextContent}`);
50
- loaded.push(`active-context(${mode})`);
51
- }
52
- }
53
- } catch {
54
- // Non-critical skip silently
55
- }
56
- }
57
-
58
- if (loaded.length > 0) {
59
- console.log(`\n[Rune: injected project state from ${loaded.join(', ')}]`);
60
- } else {
61
- console.log('[Rune: .rune/ directory found but no state files yet. Run /rune onboard to populate.]');
62
- }
63
- } else {
64
- console.log('[Rune: No .rune/ directory found. Run /rune onboard to set up project context.]');
65
- }
1
+ // Rune Session Start Hook
2
+ // Loads and injects .rune/ state file CONTENTS into context at session start
3
+
4
+ const fs = require('fs');
5
+ const path = require('path');
6
+ const os = require('os');
7
+
8
+ const cwd = process.cwd();
9
+ const runeDir = path.join(cwd, '.rune');
10
+
11
+ // Initialize fresh session state (shared between context-watch and metrics-collector)
12
+ const hash = Buffer.from(cwd).toString('base64url').slice(0, 16);
13
+ const counterFile = path.join(os.tmpdir(), `rune-context-watch-${hash}.json`);
14
+ const now = new Date().toISOString();
15
+ const sessionId = `s-${now.slice(0, 10).replace(/-/g, '')}-${now.slice(11, 19).replace(/:/g, '')}`;
16
+ try {
17
+ fs.writeFileSync(counterFile, JSON.stringify({
18
+ count: 0, lastWarning: 0, sessionStart: now, sessionId, toolCounts: {}
19
+ }));
20
+ } catch { /* non-critical */ }
21
+
22
+ if (fs.existsSync(runeDir)) {
23
+ const stateFiles = [
24
+ 'progress.md',
25
+ 'decisions.md',
26
+ 'conventions.md',
27
+ 'RESCUE-STATE.md',
28
+ 'DEVELOPER-GUIDE.md',
29
+ 'logic-manifest.json'
30
+ ];
31
+ const loaded = [];
32
+
33
+ for (const file of stateFiles) {
34
+ const filePath = path.join(runeDir, file);
35
+ if (fs.existsSync(filePath)) {
36
+ const content = fs.readFileSync(filePath, 'utf-8').trim();
37
+ if (content.length > 0) {
38
+ console.log(`\n=== .rune/${file} ===\n${content}`);
39
+ loaded.push(file);
40
+ }
41
+ }
42
+ }
43
+
44
+ // Inject active behavioral context mode
45
+ const activeContextFile = path.join(runeDir, 'active-context.md');
46
+ if (fs.existsSync(activeContextFile)) {
47
+ try {
48
+ const mode = fs.readFileSync(activeContextFile, 'utf-8').trim();
49
+ if (mode) {
50
+ // Look for the context file in plugin's contexts/ directory
51
+ const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || path.join(__dirname, '..', '..');
52
+ const contextFile = path.join(pluginRoot, 'contexts', `${mode}.md`);
53
+ if (fs.existsSync(contextFile)) {
54
+ const contextContent = fs.readFileSync(contextFile, 'utf-8').trim();
55
+ console.log(`\n=== Active Context: ${mode} mode ===\n${contextContent}`);
56
+ loaded.push(`active-context(${mode})`);
57
+ }
58
+ }
59
+ } catch {
60
+ // Non-critical — skip silently
61
+ }
62
+ }
63
+
64
+ if (loaded.length > 0) {
65
+ console.log(`\n[Rune: injected project state from ${loaded.join(', ')}]`);
66
+ } else {
67
+ console.log('[Rune: .rune/ directory found but no state files yet. Run /rune onboard to populate.]');
68
+ }
69
+ } else {
70
+ console.log('[Rune: No .rune/ directory found. Run /rune onboard to set up project context.]');
71
+ }
@@ -1,65 +1,65 @@
1
- // Rune TypeScript Check Hook
2
- // PostToolUse hook on Edit/Write — runs tsc --noEmit after .ts/.tsx file edits
3
- //
4
- // Only runs if tsconfig.json exists in the project.
5
- // Async hook — doesn't block the agent, just warns.
6
-
7
- const { execSync } = require('child_process');
8
- const fs = require('fs');
9
- const path = require('path');
10
-
11
- const input = JSON.parse(process.env.CLAUDE_TOOL_INPUT || '{}');
12
- const filePath = input.file_path || input.filePath || '';
13
-
14
- // Only check TypeScript files
15
- if (!/\.(ts|tsx)$/i.test(filePath)) {
16
- process.exit(0);
17
- }
18
-
19
- // Find tsconfig.json by walking up from the file
20
- let dir = path.dirname(filePath);
21
- let tsConfigDir = null;
22
-
23
- for (let i = 0; i < 10; i++) {
24
- if (fs.existsSync(path.join(dir, 'tsconfig.json'))) {
25
- tsConfigDir = dir;
26
- break;
27
- }
28
- const parent = path.dirname(dir);
29
- if (parent === dir) break;
30
- dir = parent;
31
- }
32
-
33
- if (!tsConfigDir) {
34
- // No tsconfig.json found — skip
35
- process.exit(0);
36
- }
37
-
38
- // Run tsc --noEmit
39
- try {
40
- execSync('npx tsc --noEmit --pretty 2>&1', {
41
- cwd: tsConfigDir,
42
- encoding: 'utf-8',
43
- stdio: 'pipe',
44
- timeout: 30000,
45
- });
46
- // Silent success
47
- } catch (e) {
48
- const output = (e.stdout || e.message || '').trim();
49
- const errorLines = output.split('\n').filter(l => /error TS\d+/.test(l));
50
- const errorCount = errorLines.length;
51
-
52
- if (errorCount > 0) {
53
- console.log(`\n[Rune typecheck] ${errorCount} TypeScript error(s) after editing ${path.basename(filePath)}:`);
54
- // Show first 5 errors
55
- errorLines.slice(0, 5).forEach(line => {
56
- console.log(` ${line.trim()}`);
57
- });
58
- if (errorCount > 5) {
59
- console.log(` ... and ${errorCount - 5} more. Run \`npx tsc --noEmit\` for full list.`);
60
- }
61
- console.log('');
62
- }
63
- }
64
-
65
- process.exit(0);
1
+ // Rune TypeScript Check Hook
2
+ // PostToolUse hook on Edit/Write — runs tsc --noEmit after .ts/.tsx file edits
3
+ //
4
+ // Only runs if tsconfig.json exists in the project.
5
+ // Async hook — doesn't block the agent, just warns.
6
+
7
+ const { execSync } = require('child_process');
8
+ const fs = require('fs');
9
+ const path = require('path');
10
+
11
+ const input = JSON.parse(process.env.CLAUDE_TOOL_INPUT || '{}');
12
+ const filePath = input.file_path || input.filePath || '';
13
+
14
+ // Only check TypeScript files
15
+ if (!/\.(ts|tsx)$/i.test(filePath)) {
16
+ process.exit(0);
17
+ }
18
+
19
+ // Find tsconfig.json by walking up from the file
20
+ let dir = path.dirname(filePath);
21
+ let tsConfigDir = null;
22
+
23
+ for (let i = 0; i < 10; i++) {
24
+ if (fs.existsSync(path.join(dir, 'tsconfig.json'))) {
25
+ tsConfigDir = dir;
26
+ break;
27
+ }
28
+ const parent = path.dirname(dir);
29
+ if (parent === dir) break;
30
+ dir = parent;
31
+ }
32
+
33
+ if (!tsConfigDir) {
34
+ // No tsconfig.json found — skip
35
+ process.exit(0);
36
+ }
37
+
38
+ // Run tsc --noEmit
39
+ try {
40
+ execSync('npx tsc --noEmit --pretty 2>&1', {
41
+ cwd: tsConfigDir,
42
+ encoding: 'utf-8',
43
+ stdio: 'pipe',
44
+ timeout: 30000,
45
+ });
46
+ // Silent success
47
+ } catch (e) {
48
+ const output = (e.stdout || e.message || '').trim();
49
+ const errorLines = output.split('\n').filter(l => /error TS\d+/.test(l));
50
+ const errorCount = errorLines.length;
51
+
52
+ if (errorCount > 0) {
53
+ console.log(`\n[Rune typecheck] ${errorCount} TypeScript error(s) after editing ${path.basename(filePath)}:`);
54
+ // Show first 5 errors
55
+ errorLines.slice(0, 5).forEach(line => {
56
+ console.log(` ${line.trim()}`);
57
+ });
58
+ if (errorCount > 5) {
59
+ console.log(` ... and ${errorCount - 5} more. Run \`npx tsc --noEmit\` for full list.`);
60
+ }
61
+ console.log('');
62
+ }
63
+ }
64
+
65
+ process.exit(0);
package/package.json CHANGED
@@ -1,63 +1,63 @@
1
- {
2
- "name": "@rune-kit/rune",
3
- "version": "2.8.0",
4
- "description": "61-skill mesh for AI coding assistants — 5-layer architecture, 200+ connections, 8 platforms (Claude Code, Cursor, Windsurf, Antigravity, Codex, OpenCode, OpenClaw, Generic)",
5
- "type": "module",
6
- "bin": {
7
- "rune": "./compiler/bin/rune.js"
8
- },
9
- "scripts": {
10
- "build": "node compiler/bin/rune.js build",
11
- "doctor": "node compiler/bin/rune.js doctor && node scripts/version-sync-check.js",
12
- "test": "node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
13
- "test:coverage": "c8 --reporter=text --reporter=lcov node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
14
- "lint": "biome check .",
15
- "lint:fix": "biome check --fix .",
16
- "format": "biome format --write .",
17
- "ci": "biome check . && node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js && node compiler/bin/rune.js doctor",
18
- "version-check": "node scripts/version-sync-check.js",
19
- "prepublishOnly": "node scripts/version-sync-check.js"
20
- },
21
- "keywords": [
22
- "claude-code",
23
- "cursor",
24
- "windsurf",
25
- "antigravity",
26
- "codex",
27
- "opencode",
28
- "openclaw",
29
- "ai-assistant",
30
- "ai-coding",
31
- "skills",
32
- "coding-agent",
33
- "tdd",
34
- "multi-platform"
35
- ],
36
- "author": "runedev",
37
- "license": "MIT",
38
- "repository": {
39
- "type": "git",
40
- "url": "https://github.com/rune-kit/rune"
41
- },
42
- "engines": {
43
- "node": ">=18"
44
- },
45
- "files": [
46
- "compiler/",
47
- "skills/",
48
- "extensions/",
49
- "contexts/",
50
- "commands/",
51
- "agents/",
52
- "hooks/",
53
- "references/"
54
- ],
55
- "homepage": "https://rune-kit.github.io/rune",
56
- "bugs": {
57
- "url": "https://github.com/rune-kit/rune/issues"
58
- },
59
- "devDependencies": {
60
- "@biomejs/biome": "^2.4.7",
61
- "c8": "^10.1.3"
62
- }
63
- }
1
+ {
2
+ "name": "@rune-kit/rune",
3
+ "version": "2.11.0",
4
+ "description": "62-skill mesh for AI coding assistants — 5-layer architecture, 215+ connections, 8 platforms (Claude Code, Cursor, Windsurf, Antigravity, Codex, OpenCode, OpenClaw, Generic)",
5
+ "type": "module",
6
+ "bin": {
7
+ "rune": "./compiler/bin/rune.js"
8
+ },
9
+ "scripts": {
10
+ "build": "node compiler/bin/rune.js build",
11
+ "doctor": "node compiler/bin/rune.js doctor && node scripts/version-sync-check.js",
12
+ "test": "node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
13
+ "test:coverage": "c8 --reporter=text --reporter=lcov node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
14
+ "lint": "biome check .",
15
+ "lint:fix": "biome check --fix .",
16
+ "format": "biome format --write .",
17
+ "ci": "biome check . && node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js && node compiler/bin/rune.js doctor",
18
+ "version-check": "node scripts/version-sync-check.js",
19
+ "prepublishOnly": "node scripts/version-sync-check.js"
20
+ },
21
+ "keywords": [
22
+ "claude-code",
23
+ "cursor",
24
+ "windsurf",
25
+ "antigravity",
26
+ "codex",
27
+ "opencode",
28
+ "openclaw",
29
+ "ai-assistant",
30
+ "ai-coding",
31
+ "skills",
32
+ "coding-agent",
33
+ "tdd",
34
+ "multi-platform"
35
+ ],
36
+ "author": "runedev",
37
+ "license": "MIT",
38
+ "repository": {
39
+ "type": "git",
40
+ "url": "https://github.com/rune-kit/rune"
41
+ },
42
+ "engines": {
43
+ "node": ">=18"
44
+ },
45
+ "files": [
46
+ "compiler/",
47
+ "skills/",
48
+ "extensions/",
49
+ "contexts/",
50
+ "commands/",
51
+ "agents/",
52
+ "hooks/",
53
+ "references/"
54
+ ],
55
+ "homepage": "https://rune-kit.github.io/rune",
56
+ "bugs": {
57
+ "url": "https://github.com/rune-kit/rune/issues"
58
+ },
59
+ "devDependencies": {
60
+ "@biomejs/biome": "^2.4.7",
61
+ "c8": "^10.1.3"
62
+ }
63
+ }
@@ -1,21 +1,21 @@
1
- MIT License
2
-
3
- Copyright (c) 2024 Next Level Builder
4
-
5
- Permission is hereby granted, free of charge, to any person obtaining a copy
6
- of this software and associated documentation files (the "Software"), to deal
7
- in the Software without restriction, including without limitation the rights
8
- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
- copies of the Software, and to permit persons to whom the Software is
10
- furnished to do so, subject to the following conditions:
11
-
12
- The above copyright notice and this permission notice shall be included in all
13
- copies or substantial portions of the Software.
14
-
15
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
- SOFTWARE.
1
+ MIT License
2
+
3
+ Copyright (c) 2024 Next Level Builder
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.