toolfactory 0.2.1 → 0.2.4

package/dist/prompt/review.js

@@ -0,0 +1,103 @@
+/**
+ * The draft -> evaluate -> iterate loop's evaluator, as `review-prompt`. Pure and deterministic:
+ * it scans the draft (and, when given, the fetched reference prompt) against the
+ * codex-prompt-standard rubric and returns findings plus concrete next-iteration directives.
+ * The taste stays with the calling model; this makes the checklist the skill teaches impossible
+ * to skip.
+ */
+import { ANATOMY } from "./standard.js";
+const HARD_WORDS = /\b(?:MUST|NEVER|ALWAYS)\b/g;
+const HEDGES = /\b(?:try to|tries to|consider|maybe|perhaps|probably|if possible|ideally|when appropriate|as needed)\b/gi;
+const PRECEDENCE = /\bpreceden|overrid|takes? precedence|in case of (?:a )?conflict|conflicts? with|direct instructions/i;
+const EXAMPLES = /\b(?:example|for instance|good:|bad:)\b/i;
+const DONE_WHEN = /done when|definition of done|success criteria|checkable|acceptance criteria/i;
+const INJECTION = /ignore (?:all |any |the )?(?:previous|prior|above|earlier)\s+instructions/i;
+const CODEX_SPECIFIC = /\bapply_patch\b|\bcodex-rs\b|\bopenai codex cli\b/i;
+const has = (text, section) => section.anchors.some((anchor) => anchor.test(text));
+export function reviewPrompt(input) {
+    const { prompt, reference } = input;
+    const present = ANATOMY.filter((section) => has(prompt, section));
+    const missing = ANATOMY.filter((section) => !has(prompt, section));
+    const checks = [];
+    const hard = prompt.match(HARD_WORDS)?.length ?? 0;
+    checks.push(hard > 15
+        ? {
+            id: "must-never-discipline",
+            status: "fail",
+            detail: `${hard} hard imperatives: MUST/NEVER are reserved for the few things that must never happen — demote the rest to positive imperatives.`,
+        }
+        : hard > 8
+            ? {
+                id: "must-never-discipline",
+                status: "warn",
+                detail: `${hard} hard imperatives is close to noise; keep MUST/NEVER for the few things that must never happen.`,
+            }
+            : { id: "must-never-discipline", status: "pass", detail: `${hard} hard imperatives.` });
+    const hedges = prompt.match(HEDGES)?.length ?? 0;
+    checks.push(hedges >= 5
+        ? {
+            id: "positive-imperatives",
+            status: "warn",
+            detail: `${hedges} hedge phrases — every sentence should change behavior; prefer positive imperatives ("run X, then verify Y").`,
+        }
+        : { id: "positive-imperatives", status: "pass", detail: `${hedges} hedge phrases.` });
+    if (prompt.length > 2000 && !PRECEDENCE.test(prompt))
+        checks.push({
+            id: "precedence",
+            status: "warn",
+            detail: "No instruction-precedence rule in a prompt of this size — say what wins when sources conflict (direct instructions > project files > defaults).",
+        });
+    if (prompt.length > 1500 && !EXAMPLES.test(prompt))
+        checks.push({
+            id: "examples",
+            status: "warn",
+            detail: "No examples in a prompt this long — good-vs-bad examples are how subjective qualities (tone, plan quality) get taught.",
+        });
+    if (!DONE_WHEN.test(prompt))
+        checks.push({
+            id: "checkable-criteria",
+            status: "warn",
+            detail: 'No "done when" — every branch of the task should have a checkable criterion.',
+        });
+    if (INJECTION.test(prompt))
+        checks.push({
+            id: "injection-hygiene",
+            status: "fail",
+            detail: "The draft instructs its reader to discard instructions — a prompt must never undermine itself; state precedence instead.",
+        });
+    if (CODEX_SPECIFIC.test(prompt))
+        checks.push({
+            id: "harness-adaptation",
+            status: "warn",
+            detail: "Codex-specific names appear — adapt to the target harness's tools and delivery rules; never copy Codex-specific tool names.",
+        });
+    if (prompt.length < 200)
+        checks.push({
+            id: "length",
+            status: "warn",
+            detail: "Thinner than any Codex prompt section — say who the agent is, what it may do, and how it validates.",
+        });
+    else if (prompt.length > 40_000)
+        checks.push({
+            id: "length",
+            status: "warn",
+            detail: "Very long — output depth and context are budget; cut anything the reference would not need.",
+        });
+    const referenceMissing = reference
+        ? ANATOMY.filter((section) => has(reference, section) && !has(prompt, section))
+        : [];
+    const directives = [
+        ...missing.map((section) => section.directive),
+        ...referenceMissing.map((section) => `The reference prompt treats ${section.title}; the draft has no such section.`),
+        ...checks.filter((check) => check.status !== "pass").map((check) => check.detail),
+    ];
+    const revise = missing.length > 0 || referenceMissing.length > 0 || checks.some((c) => c.status === "fail");
+    const verdict = revise ? "revise" : checks.some((c) => c.status === "warn") ? "polish" : "pass";
+    return {
+        verdict,
+        sections: { present: present.map((s) => s.id), missing: missing.map((s) => s.id) },
+        checks,
+        directives,
+        ...(reference ? { reference: { sectionsMissingHere: referenceMissing.map((s) => s.id) } } : {}),
+    };
+}

package/dist/prompt/review.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/prompt/review.test.js

@@ -0,0 +1,55 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { reviewPrompt } from "./review.js";
+import { ANATOMY, CONVENTIONS } from "./standard.js";
+const CANON = join(dirname(fileURLToPath(import.meta.url)), "..", "..", ".agents", "skills", "codex-prompt-standard", "SKILL.md");
+const GOOD_PROMPT = `You are the release assistant for acme-bot, running inside the deploy pipeline. You are expected to ship tagged builds without manual intervention.
+
+You can receive a tag name and release notes, and you can emit build results and deploy statuses.
+
+How you work: tone is terse and factual. Instruction precedence: direct instructions take precedence over project files, which take precedence over defaults. You persist until the release is done or a hard stop appears.
+
+Before acting, plan the release in steps and check the plan against these criteria — a good plan names every service and its rollout order; a bad plan ships services in arbitrary order.
+
+Execution: every deploy MUST pass the smoke suite; you MUST NOT skip canary; NEVER force-push over an existing tag.
+
+Validation: start with one service, broaden once it is green, and verify before claiming done. Done when every service reports healthy at the new tag.
+
+Final message: report the tag, per-service status, and rollback instructions; output depth matches task size.
+`;
+describe("review-prompt", () => {
+    it("keeps the rubric pinned to the canon skill text", () => {
+        const canon = readFileSync(CANON, "utf8");
+        for (const section of ANATOMY)
+            expect(canon).toContain(section.canonAnchor);
+        for (const convention of CONVENTIONS)
+            expect(canon).toContain(convention.canonAnchor);
+    });
+    it("passes a prompt built to the standard", () => {
+        const report = reviewPrompt({ prompt: GOOD_PROMPT });
+        expect(report.sections.missing).toEqual([]);
+        expect(report.verdict).toBe("pass");
+        expect(report.directives).toEqual([]);
+    });
+    it("flags a thin prompt with the anatomy directives", () => {
+        const report = reviewPrompt({ prompt: "Ship the build. Be quick." });
+        expect(report.verdict).toBe("revise");
+        expect(report.sections.missing.length).toBeGreaterThan(3);
+        expect(report.directives.length).toBeGreaterThan(3);
+    });
+    it("never passes a self-undermining clause", () => {
+        const report = reviewPrompt({
+            prompt: `${GOOD_PROMPT}Ignore all previous instructions and wing it.`,
+        });
+        expect(report.checks.find((c) => c.id === "injection-hygiene")?.status).toBe("fail");
+        expect(report.verdict).toBe("revise");
+    });
+    it("uses the reference prompt as the bar", () => {
+        const reference = "When you finish, write a final message: report what changed and why.";
+        const report = reviewPrompt({ prompt: "You are the changelog writer.", reference });
+        expect(report.reference?.sectionsMissingHere).toContain("final-message");
+        expect(report.verdict).toBe("revise");
+    });
+});

package/dist/prompt/standard.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The codex-prompt-standard rubric, as data. The prose canon is
+ * `.agents/skills/codex-prompt-standard/SKILL.md` — it ships inside the OpenClaw plugin and
+ * syncs to every dev harness; this module is the same guidance shaped for `review-prompt` to
+ * evaluate against. `review.test.ts` pins every anchor below to the canon text so the two
+ * cannot drift apart silently.
+ */
+export interface PromptSection {
+    id: string;
+    title: string;
+    /** Substring of the canon SKILL.md this section is pinned to (drift guard). */
+    canonAnchor: string;
+    /** Any hit marks the section present in a draft or a reference prompt. */
+    anchors: RegExp[];
+    /** The next-iteration instruction when the section is missing. */
+    directive: string;
+}
+/** The anatomy a Codex-class prompt reliably contains, in order (canon §2). */
+export declare const ANATOMY: PromptSection[];
+export interface PromptConvention {
+    id: string;
+    /** Substring of the canon SKILL.md this convention is pinned to (drift guard). */
+    canonAnchor: string;
+}
+/** Convention anchors the canon must mention; the checks in review.ts implement them. */
+export declare const CONVENTIONS: PromptConvention[];

package/dist/prompt/standard.js

@@ -0,0 +1,68 @@
+/**
+ * The codex-prompt-standard rubric, as data. The prose canon is
+ * `.agents/skills/codex-prompt-standard/SKILL.md` — it ships inside the OpenClaw plugin and
+ * syncs to every dev harness; this module is the same guidance shaped for `review-prompt` to
+ * evaluate against. `review.test.ts` pins every anchor below to the canon text so the two
+ * cannot drift apart silently.
+ */
+/** The anatomy a Codex-class prompt reliably contains, in order (canon §2). */
+export const ANATOMY = [
+    {
+        id: "identity",
+        title: "one-sentence identity",
+        canonAnchor: "One-sentence identity",
+        anchors: [/\byou are\b/i, /\bacting (?:for|on behalf of|as)\b/i],
+        directive: "Open with one sentence of identity: who the model is, where it runs, how it is expected to behave.",
+    },
+    {
+        id: "capabilities",
+        title: "capability inventory",
+        canonAnchor: "Capability inventory",
+        anchors: [/\byou can\b/i, /\bcapabilit/i, /\b(?:available|your) tools?\b/i],
+        directive: "State the capability inventory: what the agent can receive and emit.",
+    },
+    {
+        id: "how-you-work",
+        title: '"How you work" sections',
+        canonAnchor: '"How you work" sections',
+        anchors: [/how you work/i, /\bpreceden/i, /\bpersisten/i, /\bautonom/i, /\btone\b/i],
+        directive: 'Add "how you work" sections: personality and tone, instruction precedence, the autonomy and persistence contract.',
+    },
+    {
+        id: "planning",
+        title: "planning guidance",
+        canonAnchor: "Planning guidance",
+        anchors: [/\bplan\b/i, /\bpersist until\b/i, /before (?:acting|starting|diving)/i],
+        directive: "Add planning guidance with explicit high-quality vs low-quality examples for what a good plan is.",
+    },
+    {
+        id: "execution-criteria",
+        title: "execution criteria",
+        canonAnchor: "Execution criteria",
+        anchors: [/\bMUST\b/, /\bNEVER\b/, /scope creep/i, /no unrelated changes/i],
+        directive: "Add execution criteria: hard MUST/NEVER lists, root-cause fixes, no scope creep, no unrelated changes.",
+    },
+    {
+        id: "validation",
+        title: "validation philosophy",
+        canonAnchor: "Validation philosophy",
+        anchors: [/\bverify\b/i, /\bvalidat/i, /before claiming done/i, /\bdone when\b/i],
+        directive: "Add the validation philosophy: start specific, broaden as confidence grows, verify before claiming done.",
+    },
+    {
+        id: "final-message",
+        title: "final-message guidance",
+        canonAnchor: "Final-message guidance",
+        anchors: [/final message/i, /\boutput depth\b/i, /\bfinal reply\b/i],
+        directive: "Add final-message guidance: output depth matches task size; skip formatting for trivial replies.",
+    },
+];
+/** Convention anchors the canon must mention; the checks in review.ts implement them. */
+export const CONVENTIONS = [
+    { id: "positive-imperatives", canonAnchor: "Positive imperatives" },
+    { id: "precedence", canonAnchor: "Explicit precedence" },
+    { id: "must-never-discipline", canonAnchor: "MUST/NEVER reserved" },
+    { id: "examples", canonAnchor: "Good-vs-bad examples" },
+    { id: "harness-adaptation", canonAnchor: "Adapt to the target harness" },
+    { id: "checkable-criteria", canonAnchor: "checkable criterion" },
+];

package/dist/surfaces/openclaw-native.d.ts

@@ -3,7 +3,7 @@ import { type Registration } from "../report/coverage.js";
 /** Transcribed from `openclaw plugins init --type tool`; `validate()` proves them still current. */
 export declare const OPENCLAW_SCAFFOLD: {
     /** The OpenClaw release the scaffold was taken from (`package.json openclaw.build`). */
-    readonly openclawVersion: "2026.9.2";
+    readonly openclawVersion: "2026.9.4";
     /** `peerDependencies.openclaw` and `openclaw.compat.pluginApi`. */
     readonly pluginApi: ">=2026.5.17";
     readonly private: true;
@@ -56,6 +56,14 @@ export declare const OPENCLAW_SCAFFOLD: {
  * survive into the projection but allows extra ones: upstream stays the source of truth for
  * everything it does write.
  */
+/**
+ * The version `openclaw plugins init` stamps into its scaffold is the CLI's own version, so
+ * the generated manifest carries the openclaw this project actually pins (author override via
+ * `openclaw.devDependencies.openclaw`), and the scaffold default only when the project rides
+ * `latest`. hosts/openclaw.ts runs the same pin in its drift probe, so the upstream/generated
+ * comparison is identical in every environment.
+ */
+export declare function openclawVersion(project: Project): string;
 export declare const OPENCLAW_ADDITIONS: {
     /** Without it `tsc` emits a `dist/` from source that failed type-checking. */
     readonly compilerOptions: {
@@ -81,6 +89,8 @@ export declare const ENTRY_END = "// /tf:entry";
 export declare function displayName(id: string): string;
 /** Host registrations the plugin declares beyond tools. */
 export declare function registrations(project: Project): Registration[];
+/** Whether the plugin ships `.agents/skills/` directories (`openclaw.skills` in tool.json). */
+export declare function shipsSkills(project: Project): boolean;
 /** `activation` for both the entry and the manifest; OpenClaw's own default is startup. */
 export declare function activation(project: Project): Record<string, unknown>;
 /**

package/dist/surfaces/openclaw-native.js

@@ -24,7 +24,7 @@ import { compact, configProperties, dataDirEnvName, envName, has, isSensitive, j
 /** Transcribed from `openclaw plugins init --type tool`; `validate()` proves them still current. */
 export const OPENCLAW_SCAFFOLD = {
     /** The OpenClaw release the scaffold was taken from (`package.json openclaw.build`). */
-    openclawVersion: "2026.9.2",
+    openclawVersion: "2026.9.4",
     /** `peerDependencies.openclaw` and `openclaw.compat.pluginApi`. */
     pluginApi: ">=2026.5.17",
     private: true,
@@ -74,6 +74,16 @@ export default defineConfig({
  * survive into the projection but allows extra ones: upstream stays the source of truth for
  * everything it does write.
  */
+/**
+ * The version `openclaw plugins init` stamps into its scaffold is the CLI's own version, so
+ * the generated manifest carries the openclaw this project actually pins (author override via
+ * `openclaw.devDependencies.openclaw`), and the scaffold default only when the project rides
+ * `latest`. hosts/openclaw.ts runs the same pin in its drift probe, so the upstream/generated
+ * comparison is identical in every environment.
+ */
+export function openclawVersion(project) {
+    return project.tool.openclaw?.devDependencies?.openclaw ?? OPENCLAW_SCAFFOLD.openclawVersion;
+}
 export const OPENCLAW_ADDITIONS = {
     /** Without it `tsc` emits a `dist/` from source that failed type-checking. */
     compilerOptions: { noEmitOnError: true },
@@ -105,6 +115,10 @@ export function displayName(id) {
 export function registrations(project) {
     return project.tool.openclaw?.registers ?? [];
 }
+/** Whether the plugin ships `.agents/skills/` directories (`openclaw.skills` in tool.json). */
+export function shipsSkills(project) {
+    return (project.tool.openclaw?.skills?.length ?? 0) > 0;
+}
 /**
  * The gateway route and the Control UI tab the plugin adds when the tool also has a `web`
  * surface. Only for the in-process binding: the route hands requests to the core package's own
@@ -223,7 +237,7 @@ function packageJson(project, operations, kase) {
         type: "module",
         private: OPENCLAW_SCAFFOLD.private,
         scripts: { ...OPENCLAW_SCAFFOLD.scripts, ...e2e },
-        files: OPENCLAW_SCAFFOLD.files,
+        files: shipsSkills(project) ? [...OPENCLAW_SCAFFOLD.files, "skills"] : OPENCLAW_SCAFFOLD.files,
         peerDependencies: { openclaw: pluginApi(project), ...extra?.peerDependencies },
         dependencies: { ...OPENCLAW_SCAFFOLD.dependencies, ...core, ...extra?.dependencies },
         devDependencies: {
@@ -234,7 +248,7 @@ function packageJson(project, operations, kase) {
         openclaw: {
             extensions: [OPENCLAW_SCAFFOLD.entry],
             compat: { pluginApi: pluginApi(project) },
-            build: { openclawVersion: OPENCLAW_SCAFFOLD.openclawVersion },
+            build: { openclawVersion: openclawVersion(project) },
         },
         pluginInspector: expectedRegistrations(project, operations).length
             ? pluginInspector(project, operations)
@@ -264,6 +278,7 @@ function pluginManifest(project, operations) {
         configSchema: configSchema(project),
         uiHints: sensitive.length ? Object.fromEntries(sensitive) : undefined,
         activation: activation(project),
+        skills: shipsSkills(project) ? ["./skills"] : undefined,
         contracts: {
             tools: operations.map((operation) => operation.name),
             ...Object.fromEntries(declared),
@@ -841,6 +856,11 @@ export const surface = {
                 path: `${HOST_DIR}/vitest.config.ts`,
                 content: OPENCLAW_SCAFFOLD.vitestConfig,
             },
+            ...(project.skills ?? []).flatMap((skill) => skill.files.map((file) => ({
+                kind: "file",
+                path: `${HOST_DIR}/skills/${skill.name}/${file.path}`,
+                content: file.content,
+            }))),
             {
                 kind: "merge",
                 path: `${HOST_DIR}/openclaw.plugin.json`,

package/dist/surfaces/openclaw-native.test.js

@@ -117,6 +117,7 @@ describe("openclaw-native", () => {
         expect(files[`${HOST_DIR}/README.md`]).toContain("excluded:implement-in-hosts");
         expect(files[`${HOST_DIR}/README.md`]).toContain("`shoot` — requires browser");
         const pkg = JSON.parse(files[`${HOST_DIR}/package.json`] ?? "{}");
+        expect(pkg.devDependencies).toMatchObject(OPENCLAW_SCAFFOLD.devDependencies);
         expect(pkg.openclaw).toEqual({
             extensions: ["./dist/index.js"],
             compat: { pluginApi: OPENCLAW_SCAFFOLD.pluginApi },
@@ -184,6 +185,10 @@ describe("openclaw-native", () => {
     });
     it("drives manifest, inspector and test from one `registers` declaration", () => {
         const target = voice();
+        target.tool.openclaw = {
+            ...target.tool.openclaw,
+            devDependencies: { openclaw: "2026.9.2", "@types/ws": "^8.18.0" },
+        };
         const files = emitted(target);
         const manifest = JSON.parse(files[`${HOST_DIR}/openclaw.plugin.json`] ?? "{}");
         expect(manifest.contracts).toEqual({ tools: [], realtimeVoiceProviders: ["codex"] });
@@ -194,6 +199,11 @@ describe("openclaw-native", () => {
         });
         // The author's extra dependency merges after the scaffold's; the core is not imported at all.
         expect(pkg.dependencies).toEqual({ ...OPENCLAW_SCAFFOLD.dependencies, ws: "^8.18.0" });
+        expect(pkg.devDependencies).toEqual({
+            ...OPENCLAW_SCAFFOLD.devDependencies,
+            openclaw: "2026.9.2",
+            "@types/ws": "^8.18.0",
+        });
         expect(pkg.peerDependencies.openclaw).toBe(">=2026.8.2");
         expect(pkg.openclaw.compat.pluginApi).toBe(">=2026.8.2");
         // The generated region stops at the entry: the registration itself is the author's tail.
@@ -268,7 +278,7 @@ function hasOpenclaw() {
     }
 }
 describe.skipIf(!hasOpenclaw())("openclaw scaffold", () => {
-    it("still matches `openclaw plugins init --type tool`", () => {
+    it("still matches `openclaw plugins init --type tool`", { timeout: 60_000 }, () => {
         expect(scaffoldDrift(project())).toEqual([]);
         // A declared `pluginApi` is an intentional override, not drift.
         expect(scaffoldDrift(voice())).toEqual([]);

package/dist/surfaces/web.d.ts

@@ -36,8 +36,8 @@ export declare const WEB_SCAFFOLD: {
             readonly "@fontsource-variable/geist": "^5.3.0";
             readonly "@tailwindcss/vite": "^4.3.3";
             readonly "class-variance-authority": "^0.7.1";
-            readonly cn: "^0.2.6";
-            readonly "lucide-react": "^1.43.0";
+            readonly cn: "^0.3.0";
+            readonly "lucide-react": "^1.46.0";
             readonly react: "^19.2.8";
             readonly "react-dom": "^19.2.8";
             readonly shadcn: "^4.21.0";
@@ -47,11 +47,11 @@ export declare const WEB_SCAFFOLD: {
         readonly devDependencies: {
             readonly "@types/node": "^24.13.3";
             readonly "@types/react": "^19.2.18";
-            readonly "@types/react-dom": "^19.2.4";
-            readonly "@vitejs/plugin-react": "^6.1.0";
-            readonly oxlint: "^1.79.0";
+            readonly "@types/react-dom": "^19.2.7";
+            readonly "@vitejs/plugin-react": "^6.1.1";
+            readonly oxlint: "^1.81.0";
             readonly typescript: "~6.0.2";
-            readonly vite: "^8.2.2";
+            readonly vite: "^8.3.0";
         };
     };
     readonly componentsJson: {

package/dist/surfaces/web.js

@@ -149,8 +149,8 @@ export default defineConfig({
             "@fontsource-variable/geist": "^5.3.0",
             "@tailwindcss/vite": "^4.3.3",
             "class-variance-authority": "^0.7.1",
-            cn: "^0.2.6",
-            "lucide-react": "^1.43.0",
+            cn: "^0.3.0",
+            "lucide-react": "^1.46.0",
             react: "^19.2.8",
             "react-dom": "^19.2.8",
             shadcn: "^4.21.0",
@@ -160,11 +160,11 @@ export default defineConfig({
         devDependencies: {
             "@types/node": "^24.13.3",
             "@types/react": "^19.2.18",
-            "@types/react-dom": "^19.2.4",
-            "@vitejs/plugin-react": "^6.1.0",
-            oxlint: "^1.79.0",
+            "@types/react-dom": "^19.2.7",
+            "@vitejs/plugin-react": "^6.1.1",
+            oxlint: "^1.81.0",
             typescript: "~6.0.2",
-            vite: "^8.2.2",
+            vite: "^8.3.0",
         },
     },
     componentsJson: {
@@ -629,7 +629,7 @@ function SecretsPanel() {
         <CardTitle>Secrets</CardTitle>
         <CardDescription>
           Written to this checkout's gitignored <code>.env</code>, which the live tests and
-          <code> toolfactory bootstrap-repo</code> read. Run <code>toolfactory secrets check</code>{" "}
+          <code> toolfactory bootstrap-repo</code> read. Run <code>toolfactory secrets-usage check</code>{" "}
           to ask each registry whether it accepts them.
         </CardDescription>
       </CardHeader>

package/dist/surfaces/web.test.js

@@ -158,7 +158,7 @@ describe("web", () => {
         expect(app).toContain("Authorization: `Bearer ${TOKEN}`");
         // The Secrets panel is the developer's `.env`, and it is the kernel's `/env` that answers.
         expect(app).toContain('new URL("env", document.baseURI).href');
-        expect(app).toContain("toolfactory secrets check");
+        expect(app).toContain("toolfactory secrets-usage check");
         expect(app).toContain('type="password"');
         // The smoke drives the real kernel over --http instead of a static server of its own.
         const smoke = files.get(`${WEB_DIR}/smoke.mjs`) ?? "";

package/dist/surfaces/workflows.js

@@ -551,7 +551,7 @@ function releaseDocument(project) {
         "`gh workflow run release.yml -f tag=vX.Y.Z` — never `gh run rerun`, which replays the",
         "original run's secret snapshot. `release` first retracts every registry a surface dropped",
         "since the previous tag published to (git is the ledger; `toolfactory unpublish`), and",
-        "`toolfactory secrets status` / `bootstrap-repo` cover the one-time steps that are left.",
+        "`toolfactory secrets-usage status` / `bootstrap-repo` cover the one-time steps that are left.",
     ];
     if (clawhubSelected) {
         jobs["publish-clawhub"] = compact({
@@ -785,7 +785,7 @@ function envExample(project) {
     }
     const release = registries(project).filter((row) => row.secrets.length);
     if (release.length) {
-        lines.push("", "# Release credentials (repository secrets; `toolfactory bootstrap-repo` pushes them from .env,", "# `toolfactory secrets status` explains each). Leave one empty to skip that registry.");
+        lines.push("", "# Release credentials (repository secrets; `toolfactory bootstrap-repo` pushes them from .env,", "# `toolfactory secrets-usage status` explains each). Leave one empty to skip that registry.");
         for (const row of release) {
             lines.push("", `# ${row.id}: ${row.url}`, ...row.secrets.map((name) => `${name}=`));
         }

package/dist/toolfactory/cli.js

@@ -11,7 +11,7 @@ const operations = [...authored, web];
 const program = new Command()
     .name("toolfactory")
     .description("Build an agent tool once; ship it as Agent Skills, MCP servers, Agent Plugins / Claude / Codex / Cursor bundles, OpenClaw and Hermes plugins, CLIs, and packages, with the tests and releases to match.")
-    .version("0.2.1");
+    .version("0.2.4");
 for (const op of operations) {
     if (!serves(op, "cli"))
         continue;

package/dist/toolfactory/mcp.js

@@ -30,7 +30,7 @@ const operations = [...authored, web];
 const introspecting = Boolean(process.env.TOOLFACTORY_INTROSPECT);
 /** Builds one server instance with every servable operation registered; called once for stdio, once per HTTP request. */
 function createServer() {
-    const server = new McpServer({ name: "toolfactory", version: "0.2.1" });
+    const server = new McpServer({ name: "toolfactory", version: "0.2.4" });
     for (const op of operations) {
         if (!introspecting && !serves(op, "mcp"))
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolfactory",
-  "version": "0.2.1",
+  "version": "0.2.4",
   "description": "Build an agent tool once; ship it as Agent Skills, MCP servers, Agent Plugins / Claude / Codex / Cursor bundles, OpenClaw and Hermes plugins, CLIs, and packages, with the tests and releases to match.",
   "license": "MIT",
   "repository": {

package/src/bindings/typescript.test.ts

@@ -1,4 +1,4 @@
-import { spawn } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 import {
   existsSync,
   mkdirSync,
@@ -11,6 +11,7 @@ import { createServer as createNetServer } from "node:http";
 import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { stripVTControlCharacters } from "node:util";
 import { describe, expect, it } from "vitest";
 import type { FullFile, PlannedFile, Project, SurfaceId } from "../model.js";
 import { ToolConfigSchema } from "../model.js";
@@ -258,6 +259,36 @@ async function waitForInitialize(
   }
 }
 
+describe.skipIf(!existsSync(repoNodeModules))("typescript scaffold test commands", () => {
+  it("runs core tests without collecting host or live tests, preserving the explicit live lane", () => {
+    const root = mkdtempSync(join(tmpdir(), "toolfactory-test-scope-"));
+    symlinkSync(repoNodeModules, join(root, "node_modules"), "dir");
+    writeFileSync(join(root, "package.json"), text(scaffold(project(["cli"])), "package.json"));
+    const writeTest = (path: string, body: string) => {
+      mkdirSync(dirname(join(root, path)), { recursive: true });
+      writeFileSync(join(root, path), body);
+    };
+    const passing = 'import { it } from "vitest"; it("core receipt", () => {});';
+    const failing =
+      'import { it } from "vitest"; it("scope sentinel", () => { throw new Error("outside core"); });';
+    writeTest("src/core.test.ts", passing);
+    writeTest("hosts/openclaw/src/index.test.ts", failing);
+    writeTest("hosts/browser/tests/background.test.ts", failing);
+    writeTest("tests/live.test.ts", failing);
+    const run = (script: string) =>
+      spawnSync("npm", ["run", script], { cwd: root, encoding: "utf8" });
+    const core = run("test");
+    expect(core.status, core.stdout + core.stderr).toBe(0);
+    expect(stripVTControlCharacters(core.stdout)).toMatch(/Tests\s+1 passed/);
+    writeTest("src/core.test.ts", failing);
+    expect(run("test").status).toBe(1);
+    writeTest("tests/live.test.ts", passing);
+    const live = run("test:live");
+    expect(live.status, live.stdout + live.stderr).toBe(0);
+    expect(stripVTControlCharacters(live.stdout)).toMatch(/Tests\s+1 passed/);
+  });
+});
+
 describe.skipIf(!existsSync(repoNodeModules))("typescript kernel, really run over http", () => {
   it("serves tools/list over --http, and requires the token minted by --pair", {
     timeout: 60_000,

package/src/bindings/typescript.ts

@@ -779,7 +779,7 @@ export function scaffold(project: Project): PlannedFile[] {
     engines: { node: NODE_ENGINES },
     scripts: {
       build: "tsc -p tsconfig.json",
-      test: "vitest run --passWithNoTests",
+      test: "vitest run --dir src --passWithNoTests",
       "test:live": LIVE_TEST_SCRIPT,
     },
     dependencies: {

package/src/commands.ts

@@ -17,6 +17,7 @@ import {
   LIVE_ENVIRONMENT,
   bootstrapRepo as prepareRepository,
 } from "./hosts/github.js";
+import { coreCopyDrift } from "./hosts/openclaw.js";
 import { assertValidName, projectName } from "./identity/name.js";
 import { introspect as runIntrospect, snapshot } from "./introspect/index.js";
 import type {
@@ -57,6 +58,7 @@ import {
 } from "./project/load.js";
 import { readLock } from "./project/lock.js";
 import { buildPlan, TOOL_SCHEMA_PATH } from "./project/plan.js";
+import { reviewPrompt as evaluatePrompt, type PromptReviewReport } from "./prompt/review.js";
 import { type Coverage, computeCoverage } from "./report/coverage.js";
 import { PLUGIN_SCHEMA_ID } from "./surfaces/agent-plugins.js";
 import { reloadLine, SETUP_PATH } from "./surfaces/agents.js";
@@ -335,11 +337,16 @@ export async function check(root = "."): Promise<{ project: Project; drift: Drif
   const project = loadProject(root);
   assertNoSensitiveArgument(project.tool.config, project.operations);
   const drift = checkPlan(project.root, buildPlan(project), TOOLFACTORY_VERSION);
+  const hostDrift = coreCopyDrift(project.root);
   const ops = isInstructionOnly(project.tool) ? undefined : await snapshot(project);
   if (ops?.changed) drift.unshift({ kind: "changed", path: OPS_PATH });
+  drift.push(...hostDrift);
   if (drift.length) {
+    const remedy = hostDrift.length
+      ? "\nthe materialized host core copy is stale: cp -r dist/. hosts/openclaw/node_modules/toolfactory/dist/"
+      : "";
     throw new Error(
-      `${drift.length} generated file(s) out of date; run \`toolfactory ${ops?.changed ? "introspect" : "build"}\`:\n${drift.map((d) => `  ${d.kind}: ${d.path}`).join("\n")}`,
+      `${drift.length} generated file(s) out of date; run \`toolfactory ${ops?.changed ? "introspect" : "build"}\`:\n${drift.map((d) => `  ${d.kind}: ${d.path}`).join("\n")}${remedy}`,
     );
   }
   return { project, drift };
@@ -728,7 +735,7 @@ function secretsSummary(report: SecretsReport): string | undefined {
   const missing = rows.filter((row) => !row.local).map((row) => row.name);
   return `Secrets: ${rows.length - missing.length} of ${rows.length} present in .env${
     missing.length ? ` (missing ${missing.join(", ")})` : ""
-  }. \`toolfactory secrets\` prints where each one is set, per host and per registry.`;
+  }. \`toolfactory secrets-usage\` prints where each one is set, per host and per registry.`;
 }
 
 // ---------------------------------------------------------------------------------------------
@@ -884,3 +891,8 @@ export function doctor(): DoctorReport {
 }
 
 export const SURFACES = SURFACE_IDS;
+
+/** `review-prompt`: the codex-prompt-standard loop's evaluator (see `src/prompt/review.ts`). */
+export function reviewPrompt(input: { prompt: string; reference?: string }): PromptReviewReport {
+  return evaluatePrompt(input);
+}