@softspark/ai-toolkit 4.17.0 → 4.19.0

package/llms.txt

@@ -21,12 +21,15 @@
 - [Plan: Offline-First SLM Profile — Lightweight Mode for Local Models](kb/history/completed/offline-slm-profile-plan-20260411.md)
 - [Retirement: Native Tool-Output Filter](kb/history/completed/output-filter-retirement-20260726.md)
 - [Plan: Output & Token Discipline](kb/history/completed/output-token-discipline-plan-20260504.md)
+- [rtk Pack Integration](kb/history/completed/rtk-pack-integration-20260726.md)
+- [Retirement: rtk-pack](kb/history/completed/rtk-pack-retirement-20260727.md)
 - [How-To Guides](kb/howto/README.md)
 - [Plan: Cloud Security Pack — Multi-Cloud Audit](kb/planning/cloud-security-pack-plan.md)
 - [Plan: Drop Cascade hooks after 2026-07-01 sunset](kb/planning/drop-cascade-hooks-after-sunset.md)
 - [PRD: MCP Context Trim v4.0](kb/planning/mcp-context-trim-v4-prd.md)
 - [SOP: Ecosystem Sync](kb/procedures/ecosystem-sync-sop.md)
 - [SOP: AI Toolkit Maintenance](kb/procedures/maintenance-sop.md)
+- [SOP: Post-Release Testing](kb/procedures/post-release-testing-sop.md)
 - [SOP: Release Preparation](kb/procedures/release-preparation-sop.md)
 - [SOP: Release Verification](kb/procedures/release-verification-sop.md)
 - [Agents Catalog](kb/reference/agents-catalog.md)

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.17.0",
+  "version": "4.19.0",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "4.17.0",
+  "version": "4.19.0",
   "description": "AI coding toolkit: 108 skills, 44 agents, 12 developer-tool integrations, recoverable native tool-output filtering, Claude Chat/Cowork export, safety constitution, SARIF audit, and signed npm provenance.",
   "keywords": [
     "claude",

package/scripts/audit_skills.py

@@ -454,6 +454,27 @@ def audit(toolkit_root: Path) -> list[Finding]:
             scan_secrets(agent_md, findings)
             scan_unicode(agent_md, findings)
 
+    # Scan plugin packs. Pack code ships and executes exactly like skill code,
+    # and a pack may carry an install script that runs at install time, so
+    # leaving app/plugins out of the HIGH gate exempted the highest-risk code
+    # in the repo from the check that exists to catch it.
+    plugins = app / "plugins"
+    if plugins.is_dir():
+        for pack_dir in sorted(plugins.iterdir()):
+            if not pack_dir.is_dir():
+                continue
+            for py in sorted(pack_dir.rglob("*.py")):
+                scan_file_patterns(py, PYTHON_HIGH, "HIGH", findings)
+                scan_file_patterns(py, PYTHON_WARN, "WARN", findings)
+                scan_secrets(py, findings)
+            for sh in sorted(pack_dir.rglob("*.sh")):
+                scan_file_patterns(sh, BASH_HIGH, "HIGH", findings)
+                scan_file_patterns(sh, BASH_WARN, "WARN", findings)
+                scan_secrets(sh, findings)
+            for md in sorted(pack_dir.rglob("*.md")):
+                scan_secrets(md, findings)
+                scan_unicode(md, findings)
+
     # Unicode safety across the rest of the shipped prompt surface.
     for extra in ("rules", "personas", "mcp-templates"):
         extra_dir = app / extra

package/scripts/generate_cursor_hooks.py

@@ -490,3 +490,47 @@ def main() -> None:
 
 if __name__ == "__main__":
     main()
+
+
+def _cleanup_config_path(target_dir: Path) -> Path | None:
+    return Path(target_dir).expanduser() / ".cursor" / "hooks.json"
+
+
+def _cleanup_write(path: Path, document: dict) -> None:
+    path.write_text(json.dumps(document, indent=2, sort_keys=True) + "\n", encoding="utf-8")
+
+
+def cleanup(target_dir: Path) -> None:
+    """Strip this toolkit's hook entries for an uninstall or profile downgrade.
+
+    Only entries tagged with SOURCE_TAG are removed; user and plugin-pack
+    entries are left in place. The file is deleted only when nothing survives,
+    so an uninstall does not take a user's own configuration with it.
+    """
+    config = _cleanup_config_path(target_dir)
+    if config is None or not config.is_file() or config.is_symlink():
+        return
+    try:
+        with open(config, encoding="utf-8") as handle:
+            document = json.load(handle)
+    except (OSError, json.JSONDecodeError):
+        return
+    if not isinstance(document, dict):
+        return
+
+    hooks = document.get("hooks")
+    if not isinstance(hooks, dict):
+        return
+    survivors = strip_toolkit_hooks(hooks)
+    if survivors == hooks:
+        return
+
+    if survivors:
+        document["hooks"] = survivors
+    else:
+        document.pop("hooks", None)
+
+    if document:
+        _cleanup_write(config, document)
+    else:
+        config.unlink()

package/scripts/generate_gemini_hooks.py

@@ -179,3 +179,47 @@ def main() -> None:
 
 if __name__ == "__main__":
     main()
+
+
+def _cleanup_config_path(target_dir: Path) -> Path | None:
+    return Path(target_dir).expanduser() / ".gemini" / "settings.json"
+
+
+def _cleanup_write(path: Path, document: dict) -> None:
+    _write_settings_atomic(path, document)
+
+
+def cleanup(target_dir: Path) -> None:
+    """Strip this toolkit's hook entries for an uninstall or profile downgrade.
+
+    Only entries tagged with SOURCE_TAG are removed; user and plugin-pack
+    entries are left in place. The file is deleted only when nothing survives,
+    so an uninstall does not take a user's own configuration with it.
+    """
+    config = _cleanup_config_path(target_dir)
+    if config is None or not config.is_file() or config.is_symlink():
+        return
+    try:
+        with open(config, encoding="utf-8") as handle:
+            document = json.load(handle)
+    except (OSError, json.JSONDecodeError):
+        return
+    if not isinstance(document, dict):
+        return
+
+    hooks = document.get("hooks")
+    if not isinstance(hooks, dict):
+        return
+    survivors = strip_toolkit_hooks(hooks)
+    if survivors == hooks:
+        return
+
+    if survivors:
+        document["hooks"] = survivors
+    else:
+        document.pop("hooks", None)
+
+    if document:
+        _cleanup_write(config, document)
+    else:
+        config.unlink()

package/scripts/install.py

@@ -286,7 +286,20 @@ def parse_args(argv: list[str]) -> dict:
             print(f"Unknown option: {arg}")
             sys.exit(1)
         else:
-            cfg["target_dir"] = Path(arg)
+            # A bare word that is not an existing directory is almost never a
+            # deliberate install target: `ai-toolkit install <pack>` reads like
+            # `plugin install <pack>` and silently writes a full toolkit tree
+            # into ./<pack>. Require an existing directory or an explicit path
+            # separator, so creating a new top-level directory has to be asked
+            # for rather than typed by accident.
+            candidate = Path(arg)
+            looks_like_path = "/" in arg or "\\" in arg or arg.startswith("~") or arg == "."
+            if not candidate.is_dir() and not looks_like_path:
+                print(f"Refusing to install into a new directory named '{arg}'.")
+                print(f"  If you meant a plugin pack:  ai-toolkit plugin install {arg}")
+                print(f"  If you really meant a path:  ai-toolkit install ./{arg}")
+                sys.exit(1)
+            cfg["target_dir"] = candidate
         i += 1
     return cfg