feat(rtk): scc rtk, plus a leaner entry file

[protonspy]

What

Three changes that ship together as template-set version 8.

scc rtk, and scc init --rtk. Wires in RTK, the CLI proxy that filters command output down to what is worth spending context on: it finds the binary or builds it with cargo, then puts RTK's marker-delimited usage block into CLAUDE.md/AGENTS.md.

scc rtk               # install if missing, then insert the block
scc rtk --check       # exit 2 when the block is missing; writes nothing
scc rtk --no-install  # only the block, never cargo
scc rtk --force       # replace an existing block with the one this scc ships
scc init --rtk        # scaffold and wire it in, one command

Insert-only by default. A block already between the markers is left exactly as it is, whatever version it claims — RTK writes that text, stamps its own version into the opening marker, and rtk init is what refreshes it. An scc that rewrote it every run would silently downgrade a newer block inside a file the user owns. Opt-in in both places, because the block tells the agent to prefix every command with a binary the machine may not have.

A leaner entry file. The table listed all nine rules as equals, which is false: five fire on their own trigger, four are looked up by name once you are already in that territory. The rewrite says which is which.

Tighter prose in both review agents. Same gates, same report shape.

Why it is shaped this way

• The block is spliced, not written: the entry file belongs to the user, so the markers rather than a path are what make it replaceable, and everything outside them is untouched. CRLF documents stay CRLF.
• A half-block (one marker, not both) is an error rather than treated as blockless — appending there would leave two openings and one close, which nothing could update afterwards.
• internal/rtk is the only package that shells out to another program, and that boundary is deliberate.
• --check counts a missing block, never the binary: a CI checkout has no reason to have RTK installed, and failing there would train people to ignore the check.
• Codex and opencode share one AGENTS.md, so the splice runs per entry file rather than per harness.

Notes

• assets.Version 7 → 8. The entry file is Owned, so scc update reports the new template without overwriting anyone's edits.
• TestEntryFileLinksResolve → TestEntryFileNamesEveryRule: the format no longer carries a link per rule, but the guarantee that matters — a rule shipped without being announced — is still enforced.
• go.mod is still stdlib-only.

🤖 Generated with Claude Code

https://claude.ai/code/session_013tUUXfGWX3huWmMZwSkmrc