@1aboveio/skills 0.10.0

package/LICENSE

@@ -0,0 +1,3 @@
+MIT License
+
+Copyright (c) 2026 1AboveIO

package/README.md

@@ -0,0 +1,90 @@
+# @1aboveio/skills
+
+Public distribution of the 1AboveIO first-party skill groups.
+
+Every byte in this package is public and permanently so. The repository it is generated from
+stays private, and nothing here requires access to it: every first-party skill in this package
+installs from the unpacked package directory, with no Git fetch and no GitHub credentials.
+npm publishes no provenance attestation for this package, because npm does not attest provenance
+for packages built from a private source repository.
+
+## Prerequisites
+
+- Node `>=22.20.0`.
+- Exactly `skills@1.5.22`, which this package invokes for you.
+- global installation targeting `universal` and `claude-code`.
+- Installed content is canonical under `~/.agents/skills`, with per-skill links under
+  `~/.claude/skills`. No copied store is created under any other agent directory.
+
+## Usage
+
+```
+npx @1aboveio/skills list
+npx @1aboveio/skills install
+npx @1aboveio/skills install --group engineering-workflow
+npx @1aboveio/skills update --group engineering-workflow
+```
+
+Running `install` with no `--group` opens the interactive bundle picker. The automation flags:
+
+- `--group <id>` — select one group; repeat the flag, or pass a comma-separated list, for several.
+- `--all` — select every group in the catalog below. Mutually exclusive with `--group`.
+- `--dry-run` — print the planned native commands, in order, and run none of them.
+- `--yes` — answer the native CLI's prompts, including the overwrite prompt, with yes.
+
+Without `--yes`, an existing same-named skill produces the native overwrite summary and a prompt.
+Declining leaves the existing content and its links exactly as they were.
+
+## Groups in this package
+
+- `engineering-workflow` — Engineering Workflow: e2e-test, ensure-coverage, implement-and-pr, resolve-issues, resolve-release, review-pr, smoke, engineering-runtime
+- `delivery-infrastructure` — Delivery Infrastructure: cloud-build, cloud-debug, cloud-deploy, docker, google-cloud, mergify, podman
+- `backend` — Backend: airflow-dag-develop, app-debug, python-backend
+- `fullstack` — Fullstack: better-auth, monorepo, nextjs-fullstack, prisma-setup, shadcn, zod-v4, impeccable — impeccable is fetched from its upstream owner and not included in this package
+- `matt-pocock-toolkit` — Matt Pocock Toolkit: batch-grill-me, code-review, codebase-design, diagnosing-bugs, domain-modeling, grill-me, grill-with-docs, grilling, handoff, improve-codebase-architecture, prototype, research, resolving-merge-conflicts, setup-matt-pocock-skills, tdd, to-spec, to-tickets, triage, wayfinder — every member is fetched from its upstream owner and is not included in this package
+
+Internal dependencies, installed with the groups above and not selectable on their own: `harness-runtime`.
+They are an implementation detail of those groups, so `list` and the picker do not offer them and
+`--group` rejects them as an unknown bundle. Uninstalling a group leaves them in place.
+
+## Updating
+
+`update` reruns the selected group's install recipe from the @1aboveio/skills version you
+invoke, so the installed result is whatever that exact version carries. Public first-party
+content follows the package version you select, not a branch: pin a version and rerunning it
+reproduces the same installation.
+
+## Removing
+
+This package has no `remove` command. Removal is the native CLI, over exactly the names a group
+owns — copy the command for the group you want to remove:
+
+```
+# Engineering Workflow
+npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime
+# Delivery Infrastructure
+npx skills@1.5.22 remove --global --agent universal claude-code --skill cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman
+# Backend
+npx skills@1.5.22 remove --global --agent universal claude-code --skill airflow-dag-develop app-debug python-backend
+# Fullstack
+npx skills@1.5.22 remove --global --agent universal claude-code --skill better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 impeccable
+# Matt Pocock Toolkit
+npx skills@1.5.22 remove --global --agent universal claude-code --skill batch-grill-me code-review codebase-design diagnosing-bugs domain-modeling grill-me grill-with-docs grilling handoff improve-codebase-architecture prototype research resolving-merge-conflicts setup-matt-pocock-skills tdd to-spec to-tickets triage wayfinder
+```
+
+Removing a group leaves its dependency groups and every unrelated skill installed.
+
+## Lifecycle
+
+`skills@1.5.22` is the only lifecycle authority. This package plans and orders
+commands; the native CLI owns installation, linking, overwrite consent, update and removal.
+Multi-source writes are sequential and non-transactional: there is no rollback and no atomic
+installation, an approved overwrite is destructive, and a failed source stops the recipe before
+the next source runs rather than continuing past an incomplete prerequisite.
+
+## Licensing
+
+First-party skills in this package are MIT, and each installed skill carries its `LICENSE`.
+Externally owned skills are not republished, mirrored or relicensed here: they are fetched from
+their own upstream repositories at the reviewed immutable revisions printed by `--dry-run`, and
+their licensing stays with their authors.

package/bin/1aboveio-skills.mjs

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+// Generated by skills/distribution/scripts/package-build.mjs. Do not edit by hand.
+//
+// The package IS the first-party source, so the coordinator's transport is injected here rather than
+// discovered. The flags go last so they cannot be overridden from the command line: repointing the
+// payload at another tree is not a user-facing capability.
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { runCli } from '../runtime/skills/distribution/scripts/bundles.mjs';
+
+const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+
+process.exitCode = await runCli([
+  ...process.argv.slice(2),
+  '--recipes', join(PACKAGE_ROOT, 'runtime/skills/distribution/generated/recipes.json'),
+  '--local-root', PACKAGE_ROOT,
+]);

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@1aboveio/skills",
+  "version": "0.10.0",
+  "description": "Install the 1AboveIO first-party skill groups through the native Skills CLI.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "1aboveio-skills": "bin/1aboveio-skills.mjs"
+  },
+  "engines": {
+    "node": ">=22.20.0"
+  },
+  "files": [
+    "bin/",
+    "runtime/",
+    "skills/",
+    "LICENSE",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/1aboveio/ai.git"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public"
+  }
+}