@1aboveio/skills 0.12.0 → 0.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,166 @@
1
+ const deepFreeze = (value) => {
2
+ if (value && typeof value === 'object' && !Object.isFrozen(value)) {
3
+ for (const child of Object.values(value)) deepFreeze(child);
4
+ Object.freeze(value);
5
+ }
6
+ return value;
7
+ };
8
+
9
+ export const WORKFLOW_OWNED_MEMBERS = deepFreeze([
10
+ 'e2e-test',
11
+ 'ensure-coverage',
12
+ 'implement-and-pr',
13
+ 'resolve-issues',
14
+ 'resolve-release',
15
+ 'review-pr',
16
+ 'smoke',
17
+ 'engineering-runtime',
18
+ ]);
19
+
20
+ export const HARNESS_RUNTIME_DEPENDENCY_MEMBERS = deepFreeze([
21
+ 'harness-runtime',
22
+ ]);
23
+
24
+ export const MATT_DEPENDENCY_MEMBERS = deepFreeze([
25
+ 'batch-grill-me',
26
+ 'code-review',
27
+ 'codebase-design',
28
+ 'diagnosing-bugs',
29
+ 'domain-modeling',
30
+ 'grill-me',
31
+ 'grill-with-docs',
32
+ 'grilling',
33
+ 'handoff',
34
+ 'improve-codebase-architecture',
35
+ 'prototype',
36
+ 'research',
37
+ 'resolving-merge-conflicts',
38
+ 'setup-matt-pocock-skills',
39
+ 'tdd',
40
+ 'to-spec',
41
+ 'to-tickets',
42
+ 'triage',
43
+ 'wayfinder',
44
+ ]);
45
+
46
+ // Per-invoked-skill closure, generated from SKILL.md dependencies plus cross-member
47
+ // runtime imports. Order follows the coherence member census so the same tree always
48
+ // produces the same identity. A generated file remains part of its owner's content
49
+ // digest and is also named explicitly so a scoped verdict reports every identity used.
50
+ export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
51
+ {
52
+ invokedSkill: 'resolve-issues',
53
+ members: [
54
+ 'tdd',
55
+ 'harness-runtime',
56
+ 'e2e-test',
57
+ 'ensure-coverage',
58
+ 'implement-and-pr',
59
+ 'resolve-issues',
60
+ 'review-pr',
61
+ 'smoke',
62
+ 'engineering-runtime',
63
+ ],
64
+ generatedIdentities: [
65
+ { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
66
+ ],
67
+ },
68
+ {
69
+ invokedSkill: 'resolve-release',
70
+ members: [
71
+ 'harness-runtime',
72
+ 'e2e-test',
73
+ 'ensure-coverage',
74
+ 'resolve-issues',
75
+ 'resolve-release',
76
+ 'review-pr',
77
+ 'smoke',
78
+ 'engineering-runtime',
79
+ ],
80
+ generatedIdentities: [
81
+ { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
82
+ ],
83
+ },
84
+ ]);
85
+
86
+ // First-party content is distributed as an exact public npm release, so its identity is the package
87
+ // and version rather than a private repository at a moving branch. The private checkout remains a
88
+ // render target of the same manifest for local development, but it is not what an installed Workflow
89
+ // is verified against: `revision: 'main'` is scoped to that target and never reaches coherence.
90
+ // External sources keep their immutable reviewed revision — the migration is first-party only.
91
+ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
92
+ firstParty: {
93
+ id: 'first-party',
94
+ type: 'first-party',
95
+ package: '@1aboveio/skills',
96
+ version: '0.13.0',
97
+ },
98
+ matt: {
99
+ id: 'matt-pocock',
100
+ type: 'external',
101
+ repository: 'https://github.com/mattpocock/skills',
102
+ revision: 'ed37663cc5fbef691ddfecd080dff42f7e7e350d',
103
+ reviewedTree: '04b0fcb78e3de7c58744fcba2528354cc64ab988',
104
+ },
105
+ });
106
+
107
+ const nativeSkillsPrefix = 'npx skills@1.5.22 add';
108
+ const nativeSkillsTarget = '--global --agent universal claude-code --skill';
109
+ const externalArchiveLimits = 'SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864';
110
+ const mattMembersArgument = MATT_DEPENDENCY_MEMBERS.join(' ');
111
+ const firstPartyMembers = deepFreeze([
112
+ ...HARNESS_RUNTIME_DEPENDENCY_MEMBERS,
113
+ ...WORKFLOW_OWNED_MEMBERS,
114
+ ]);
115
+ const publicPackageRelease = `${WORKFLOW_TRUSTED_SOURCES.firstParty.package}@${WORKFLOW_TRUSTED_SOURCES.firstParty.version}`;
116
+
117
+ // The public package/group flow, which expands the same dependency-first recipe the steps below
118
+ // document and delegates every write to the pinned native CLI. `--yes` is deliberately absent: repair
119
+ // runs against an installation that is already missing, modified or mixed, which is exactly when the
120
+ // native overwrite summary and its consent prompt are the point. The generated recipes withhold the
121
+ // flag for the same reason, and repair guidance must not be the one place that pre-approves a
122
+ // destructive overwrite.
123
+ export const WORKFLOW_TRUSTED_REPAIR_RECIPE = deepFreeze({
124
+ id: 'engineering-workflow-dependency-first',
125
+ generatedFrom: 'skills/distribution/generated/recipes.json',
126
+ groupId: 'engineering-workflow',
127
+ lifecycle: 'install',
128
+ renderTarget: 'public-npm',
129
+ stopOnFailure: true,
130
+ steps: [
131
+ {
132
+ sourceId: 'matt-pocock',
133
+ sourceType: 'external',
134
+ repository: WORKFLOW_TRUSTED_SOURCES.matt.repository,
135
+ revision: WORKFLOW_TRUSTED_SOURCES.matt.revision,
136
+ installPath: null,
137
+ members: MATT_DEPENDENCY_MEMBERS,
138
+ commands: [{
139
+ transport: 'https',
140
+ command: `${externalArchiveLimits} ${nativeSkillsPrefix} https://codeload.github.com/mattpocock/skills/tar.gz/${WORKFLOW_TRUSTED_SOURCES.matt.revision} ${nativeSkillsTarget} ${mattMembersArgument}`,
141
+ }],
142
+ onFailure: {
143
+ action: 'stop',
144
+ message: 'Source matt-pocock fetch failed; stop this recipe before running another source.',
145
+ },
146
+ },
147
+ {
148
+ sourceId: 'first-party',
149
+ sourceType: 'first-party',
150
+ package: WORKFLOW_TRUSTED_SOURCES.firstParty.package,
151
+ version: WORKFLOW_TRUSTED_SOURCES.firstParty.version,
152
+ installPath: null,
153
+ members: firstPartyMembers,
154
+ commands: [
155
+ {
156
+ transport: 'npm',
157
+ command: `npx ${publicPackageRelease} install --group engineering-workflow`,
158
+ },
159
+ ],
160
+ onFailure: {
161
+ action: 'stop',
162
+ message: 'Source first-party fetch failed; stop this recipe before running another source.',
163
+ },
164
+ },
165
+ ],
166
+ });
@@ -360,7 +360,7 @@
360
360
  "id": "first-party",
361
361
  "type": "first-party",
362
362
  "package": "@1aboveio/skills",
363
- "version": "0.12.0"
363
+ "version": "0.13.0"
364
364
  },
365
365
  "contentDigest": "eff6c7b5931bce5b2265a619bccddd371a89df6ce7bc2edc74f11d00060a71dd",
366
366
  "digestExcludes": []
@@ -373,7 +373,7 @@
373
373
  "id": "first-party",
374
374
  "type": "first-party",
375
375
  "package": "@1aboveio/skills",
376
- "version": "0.12.0"
376
+ "version": "0.13.0"
377
377
  },
378
378
  "contentDigest": "08230dc57a53d6526692b50138038abbd80abce1a067e01c52ad6acc182caf7e",
379
379
  "digestExcludes": []
@@ -386,7 +386,7 @@
386
386
  "id": "first-party",
387
387
  "type": "first-party",
388
388
  "package": "@1aboveio/skills",
389
- "version": "0.12.0"
389
+ "version": "0.13.0"
390
390
  },
391
391
  "contentDigest": "9eea7bfba348ddaea1b934c9a7fabdd9b101df8a146e1c93e947da4d335f1d98",
392
392
  "digestExcludes": []
@@ -399,7 +399,7 @@
399
399
  "id": "first-party",
400
400
  "type": "first-party",
401
401
  "package": "@1aboveio/skills",
402
- "version": "0.12.0"
402
+ "version": "0.13.0"
403
403
  },
404
404
  "contentDigest": "58b0556228a9271cf9e33727a05fc08a4fdfd29512ec0936b169f0a55d60e6ef",
405
405
  "digestExcludes": []
@@ -412,9 +412,9 @@
412
412
  "id": "first-party",
413
413
  "type": "first-party",
414
414
  "package": "@1aboveio/skills",
415
- "version": "0.12.0"
415
+ "version": "0.13.0"
416
416
  },
417
- "contentDigest": "5351b88d73d56c27b25ff09c72ab6029fe0805bf7c459648424747108433c175",
417
+ "contentDigest": "b2ab1d8d031a4fe7077ccd6a21eaea223eaded592eaf3fa8d4b38b842f639416",
418
418
  "digestExcludes": []
419
419
  },
420
420
  {
@@ -425,7 +425,7 @@
425
425
  "id": "first-party",
426
426
  "type": "first-party",
427
427
  "package": "@1aboveio/skills",
428
- "version": "0.12.0"
428
+ "version": "0.13.0"
429
429
  },
430
430
  "contentDigest": "b5af4dccf703362d4f41cac4fdff48305f652a00338d85975a2e5c35ec6bc61c",
431
431
  "digestExcludes": []
@@ -438,7 +438,7 @@
438
438
  "id": "first-party",
439
439
  "type": "first-party",
440
440
  "package": "@1aboveio/skills",
441
- "version": "0.12.0"
441
+ "version": "0.13.0"
442
442
  },
443
443
  "contentDigest": "f048fd00c69f2dc666fc7a3096cfeee6dfba73933bfb69602f3f0e26159798cc",
444
444
  "digestExcludes": []
@@ -451,7 +451,7 @@
451
451
  "id": "first-party",
452
452
  "type": "first-party",
453
453
  "package": "@1aboveio/skills",
454
- "version": "0.12.0"
454
+ "version": "0.13.0"
455
455
  },
456
456
  "contentDigest": "90a7c4e1ad6da1e632ea2c5259e4967ffebb84353adccbca8dfc5d6bc50b60c1",
457
457
  "digestExcludes": []
@@ -464,15 +464,15 @@
464
464
  "id": "first-party",
465
465
  "type": "first-party",
466
466
  "package": "@1aboveio/skills",
467
- "version": "0.12.0"
467
+ "version": "0.13.0"
468
468
  },
469
- "contentDigest": "e9bfbdfcbca59efce2c530a8a68f66466b0333dcb046760aab4eaee53ec7e559",
469
+ "contentDigest": "fde380e2e8812d5926aa10b424c0fc8ce03c4b5aeec6f359dae2c4f509ff5f67",
470
470
  "digestExcludes": [
471
471
  "coherence/workflow.json"
472
472
  ]
473
473
  }
474
474
  ],
475
- "releaseIdentity": "559141ff07a7aa2b7e20884c7a3a636c4b23207993d25b7ba00b8a872def0517",
475
+ "releaseIdentity": "20ba85bc4da566d3574aca6990057c19bc670b0825b69bfd6cbea3065fb53d47",
476
476
  "lifecycleAuthority": "native-skills-cli",
477
477
  "repairRecipe": {
478
478
  "id": "engineering-workflow-dependency-first",
@@ -524,7 +524,7 @@
524
524
  "sourceId": "first-party",
525
525
  "sourceType": "first-party",
526
526
  "package": "@1aboveio/skills",
527
- "version": "0.12.0",
527
+ "version": "0.13.0",
528
528
  "installPath": null,
529
529
  "members": [
530
530
  "harness-runtime",
@@ -540,7 +540,7 @@
540
540
  "commands": [
541
541
  {
542
542
  "transport": "npm",
543
- "command": "npx @1aboveio/skills@0.12.0 install --group engineering-workflow"
543
+ "command": "npx @1aboveio/skills@0.13.0 install --group engineering-workflow"
544
544
  }
545
545
  ],
546
546
  "onFailure": {
@@ -93,7 +93,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
93
93
  id: 'first-party',
94
94
  type: 'first-party',
95
95
  package: '@1aboveio/skills',
96
- version: '0.12.0',
96
+ version: '0.13.0',
97
97
  },
98
98
  matt: {
99
99
  id: 'matt-pocock',
@@ -236,7 +236,7 @@
236
236
  "id": "first-party",
237
237
  "type": "first-party",
238
238
  "package": "@1aboveio/skills",
239
- "version": "0.12.0"
239
+ "version": "0.13.0"
240
240
  }
241
241
  },
242
242
  {
@@ -247,7 +247,7 @@
247
247
  "id": "first-party",
248
248
  "type": "first-party",
249
249
  "package": "@1aboveio/skills",
250
- "version": "0.12.0"
250
+ "version": "0.13.0"
251
251
  }
252
252
  },
253
253
  {
@@ -258,7 +258,7 @@
258
258
  "id": "first-party",
259
259
  "type": "first-party",
260
260
  "package": "@1aboveio/skills",
261
- "version": "0.12.0"
261
+ "version": "0.13.0"
262
262
  }
263
263
  },
264
264
  {
@@ -269,7 +269,7 @@
269
269
  "id": "first-party",
270
270
  "type": "first-party",
271
271
  "package": "@1aboveio/skills",
272
- "version": "0.12.0"
272
+ "version": "0.13.0"
273
273
  }
274
274
  },
275
275
  {
@@ -280,7 +280,7 @@
280
280
  "id": "first-party",
281
281
  "type": "first-party",
282
282
  "package": "@1aboveio/skills",
283
- "version": "0.12.0"
283
+ "version": "0.13.0"
284
284
  }
285
285
  },
286
286
  {
@@ -291,7 +291,7 @@
291
291
  "id": "first-party",
292
292
  "type": "first-party",
293
293
  "package": "@1aboveio/skills",
294
- "version": "0.12.0"
294
+ "version": "0.13.0"
295
295
  }
296
296
  },
297
297
  {
@@ -302,7 +302,7 @@
302
302
  "id": "first-party",
303
303
  "type": "first-party",
304
304
  "package": "@1aboveio/skills",
305
- "version": "0.12.0"
305
+ "version": "0.13.0"
306
306
  }
307
307
  },
308
308
  {
@@ -313,7 +313,7 @@
313
313
  "id": "first-party",
314
314
  "type": "first-party",
315
315
  "package": "@1aboveio/skills",
316
- "version": "0.12.0"
316
+ "version": "0.13.0"
317
317
  }
318
318
  },
319
319
  {
@@ -324,7 +324,7 @@
324
324
  "id": "first-party",
325
325
  "type": "first-party",
326
326
  "package": "@1aboveio/skills",
327
- "version": "0.12.0"
327
+ "version": "0.13.0"
328
328
  }
329
329
  }
330
330
  ],
@@ -419,7 +419,7 @@
419
419
  "sourceId": "first-party",
420
420
  "sourceType": "first-party",
421
421
  "package": "@1aboveio/skills",
422
- "version": "0.12.0",
422
+ "version": "0.13.0",
423
423
  "installPath": null,
424
424
  "members": [
425
425
  "harness-runtime",
@@ -435,7 +435,7 @@
435
435
  "commands": [
436
436
  {
437
437
  "transport": "npm",
438
- "command": "npx @1aboveio/skills@0.12.0 install --group engineering-workflow"
438
+ "command": "npx @1aboveio/skills@0.13.0 install --group engineering-workflow"
439
439
  }
440
440
  ],
441
441
  "onFailure": {
@@ -3412,7 +3412,7 @@ export const WORKFLOW_PREFLIGHT_COMMANDS = Object.freeze([
3412
3412
 
3413
3413
  const WORKFLOW_VERIFIER_URL = new URL('../../engineering-runtime/scripts/workflow-coherence.mjs', import.meta.url)
3414
3414
  const WORKFLOW_FALLBACK_POLICY_URL = new URL('../generated/workflow-repair-policy.json', import.meta.url)
3415
- export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = 'c6bde1d0b0e4c2bca363e396c5f0d1892996aa61e0531ae188626ebc6c971f3f'
3415
+ export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = 'f6e7bc339163103ada9e97781dd53eb1ae987df06a14adba9495563b04d153f0'
3416
3416
  const WORKFLOW_REPAIR_RECIPE_REFERENCE = Object.freeze({
3417
3417
  id: 'engineering-workflow-dependency-first',
3418
3418
  generatedFrom: 'skills/distribution/generated/recipes.json',