@1aboveio/skills 0.13.0 → 0.14.0

package/README.md

@@ -24,7 +24,7 @@ Run the reviewed shell prerequisites separately when you need their capabilities
 #### Matt Pocock Toolkit
 
 ```sh
-SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864 npx skills@1.5.22 add https://codeload.github.com/mattpocock/skills/tar.gz/ed37663cc5fbef691ddfecd080dff42f7e7e350d --global --agent universal claude-code --skill batch-grill-me code-review codebase-design diagnosing-bugs domain-modeling grill-me grill-with-docs grilling handoff improve-codebase-architecture prototype research resolving-merge-conflicts setup-matt-pocock-skills tdd to-spec to-tickets triage wayfinder
+SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864 npx skills@1.5.22 add https://codeload.github.com/mattpocock/skills/tar.gz/ed37663cc5fbef691ddfecd080dff42f7e7e350d --global --agent universal claude-code --skill batch-grill-me code-review codebase-design diagnosing-bugs domain-modeling grill-me grill-with-docs grilling handoff improve-codebase-architecture prototype research resolving-merge-conflicts setup-matt-pocock-skills tdd to-spec to-tickets triage wayfinder --yes
 ```
 
 #### Impeccable
@@ -51,15 +51,17 @@ Running `install` with no `--group` opens the interactive bundle picker; `update
 - `--group <id>` — select one group; repeat the flag, or pass a comma-separated list, for several.
 - `--all` — select every group in the catalog below. Mutually exclusive with `--group`.
 - `--dry-run` — print the planned buckets and native commands, in order, and run none of them.
-- `--yes` — answer the native CLI's prompts, including the overwrite prompt, with yes, and accept
-  every newly declared group member without prompting.
+- `--yes` — accept every newly declared group member and use native symlink deployment without
+  coordinator prompts.
+- `--enable-tdd` — keep TDD installed and allow implicit/model invocation (the default).
+- `--disable-tdd` — keep TDD installed but allow only explicit user invocation.
 
 Selecting several groups (interactive picker, repeated `--group`, or `--all`) installs their
 members as one native `skills add` per skill from the unpacked package, so one skill's failure is
-reported by name and never aborts the rest of the selection.
-
-Without `--yes`, an existing same-named skill produces the native overwrite summary and a prompt.
-Declining leaves the existing content and its links exactly as they were.
+reported by name and never aborts the rest of the selection. Every native add uses `--yes` because
+`skills@1.5.22` has no independent `--symlink` flag: this selects the default canonical store plus
+per-harness symlinks without an installation-method prompt, and also confirms replacement of each
+planned same-named skill. The coordinator still owns group and new-member consent before planning.
 
 ## Groups in this package
 
@@ -82,7 +84,7 @@ is an error — the coordinator never infers groups from the filesystem — and
 no longer selectable are dropped with a warning.
 
 An accepted skill whose installed content already matches this package version's published digest is
-skipped entirely: no native add, no overwrite prompt. When everything remembered is unchanged and no
+skipped entirely: no native add and no replacement. When everything remembered is unchanged and no
 new skill is accepted, the run exits 0 as an explicit no-op. `--dry-run` prints the unchanged,
 would-refresh, and would-add buckets without writing state or invoking the native CLI.
 
@@ -95,8 +97,8 @@ so the next update asks again.
 
 Install and update are best-effort per skill: they continue after a single skill failure, summarize
 every skill as succeeded, unchanged, declined, or failed, and exit non-zero if anything failed. There
-is no rollback or transactional group update; the native CLI remains the sole write and
-overwrite-consent authority. Selection memory follows the same per-skill rule: it is rewritten when
+is no rollback or transactional group update; the native CLI remains the sole filesystem write
+authority. Selection memory follows the same per-skill rule: it is rewritten when
 at least one user-facing member succeeded or was already unchanged, holding exactly those members —
 failed and declined members are omitted — and a run with no user-facing success leaves the prior
 file untouched.
@@ -127,7 +129,7 @@ Removing a group leaves its dependency groups and every unrelated skill installe
 ## Lifecycle
 
 `skills@1.5.22` is the only lifecycle authority for this package. The package
-plans first-party commands; the native CLI owns installation, linking, overwrite consent, update
+plans first-party commands; the native CLI owns installation, linking, replacement, update
 and removal. External prerequisites have separate upstream lifecycle and are never package steps.
 
 ## Licensing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1aboveio/skills",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Install the 1AboveIO first-party skill groups through the native Skills CLI.",
   "license": "MIT",
   "type": "module",

package/runtime/skills/distribution/generated/recipes.json

@@ -8,7 +8,7 @@
       "id": "first-party",
       "type": "first-party",
       "package": "@1aboveio/skills",
-      "version": "0.13.0",
+      "version": "0.14.0",
       "updatePolicy": "pinned-npm-version",
       "members": [
         {
@@ -184,7 +184,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -200,7 +200,7 @@
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime && npm ci --ignore-scripts --prefix \"$HOME/.agents/skills/engineering-runtime/scripts\""
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
               }
             ],
             "onFailure": {
@@ -218,7 +218,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -234,7 +234,7 @@
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime && npm ci --ignore-scripts --prefix \"$HOME/.agents/skills/engineering-runtime/scripts\""
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
               }
             ],
             "onFailure": {
@@ -262,7 +262,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -295,7 +295,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -338,7 +338,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -368,7 +368,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -408,7 +408,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -440,7 +440,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -480,7 +480,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -506,7 +506,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.13.0",
+            "version": "0.14.0",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -538,7 +538,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.13.0",
+          "version": "0.14.0",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -571,7 +571,7 @@
           "commands": [
             {
               "transport": "local",
-              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman airflow-dag-develop app-debug pyspark python-backend better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm ci --ignore-scripts --prefix \"$HOME/.agents/skills/engineering-runtime/scripts\""
+              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman airflow-dag-develop app-debug pyspark python-backend better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
             }
           ],
           "onFailure": {
@@ -589,7 +589,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.13.0",
+          "version": "0.14.0",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -622,7 +622,7 @@
           "commands": [
             {
               "transport": "local",
-              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman airflow-dag-develop app-debug pyspark python-backend better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm ci --ignore-scripts --prefix \"$HOME/.agents/skills/engineering-runtime/scripts\""
+              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr resolve-issues resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman airflow-dag-develop app-debug pyspark python-backend better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
             }
           ],
           "onFailure": {

package/runtime/skills/distribution/scripts/bundles.mjs

@@ -7,6 +7,10 @@ import { emitKeypressEvents } from 'node:readline';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
+import {
+  applyInvocationPolicy,
+  reviewedSourceInjections,
+} from '../../engineering/engineering-runtime/scripts/invocation-policy.mjs';
 import { isMainModule } from '../../engineering/engineering-runtime/scripts/main-module.mjs';
 // The digest authority for the update skip is the ONE existing predicate pair: contentDigest with
 // the published-content scope for first-party members, exact-tree for external ones — the same
@@ -80,6 +84,9 @@ export function loadSelectionState(env = process.env) {
   if (!Array.isArray(parsed.groups)) {
     throw selectionError(path, 'is invalid: groups must be an array');
   }
+  if (parsed.tddImplicitInvocation !== undefined && typeof parsed.tddImplicitInvocation !== 'boolean') {
+    throw selectionError(path, 'is invalid: tddImplicitInvocation must be a boolean');
+  }
   for (const group of parsed.groups) {
     const valid = group
       && typeof group === 'object'
@@ -132,7 +139,14 @@ function rememberedGroupIds(state, catalog, stderr) {
 // declined is dropped entirely, so the next no-arg update never replays a group this run did not
 // actually deliver. The transport label is observational only — both render targets share this
 // file.
-export function selectionForRun(action, groupIds, { renderTarget, now = new Date(), succeededMembers, omitMembers, ...transport } = {}) {
+export function selectionForRun(action, groupIds, {
+  renderTarget,
+  now = new Date(),
+  succeededMembers,
+  omitMembers,
+  tddImplicitInvocation = true,
+  ...transport
+} = {}) {
   const omitted = new Set(omitMembers ?? []);
   const recipes = readRecipes(resolveBundleTransport(transport).recipesPath);
   const groups = new Map(recipes.groups.map((group) => [group.id, group]));
@@ -141,6 +155,7 @@ export function selectionForRun(action, groupIds, { renderTarget, now = new Date
     schemaVersion: SELECTION_SCHEMA_VERSION,
     updatedAt: now.toISOString(),
     transport: { renderTarget },
+    tddImplicitInvocation,
     groups: groupIds
       .map((groupId) => {
         const group = groups.get(groupId);
@@ -274,9 +289,9 @@ function localFirstPartyCommand(command, localRoot, groupId) {
 // adds let the run record exactly which skill failed, continue with the remaining skills, and keep
 // only the succeeded skills in selection memory. Recipe step/member order is preserved
 // (dependency-first), and a member shared by several selected groups (harness-runtime) is still
-// planned exactly once, at its first occurrence. Native `skills add` prompts once per invocation
-// for the installation method, so per-skill execution relies on the native CLI's own non-interactive
-// handling; what the coordinator must guarantee is attribution, ordering and deduplication.
+// planned exactly once, at its first occurrence. The pinned native CLI has no `--symlink` selector,
+// so the coordinator adds `--yes` to choose its default symlink deployment without one installation-
+// method prompt per skill. Attribution, ordering and deduplication remain coordinator-owned.
 const SKILL_TAIL = /^(.*? --skill )(.+?)( && .*)?$/;
 
 // The generated step binds its runtime suffix (` && npm ci ...`) to the whole coalesced command.
@@ -303,7 +318,12 @@ function withYesFlag(command) {
   return `${match[1]}${match[2]} --yes${match[3] || ''}`;
 }
 
-export function planBundleCommands(action, groupIds, { yes = false, skipMembers, omitMembers, ...transport } = {}) {
+export function planBundleCommands(action, groupIds, {
+  enableTdd = true,
+  skipMembers,
+  omitMembers,
+  ...transport
+} = {}) {
   if (!ACTIONS.has(action)) throw new Error(`Unsupported bundle action: ${action}`);
   // Members the user declined this run (#1128) are filtered out of every native --skill list.
   // Support dependencies (harness-runtime) are never omittable: they are silent install
@@ -352,13 +372,19 @@ export function planBundleCommands(action, groupIds, { yes = false, skipMembers,
         }
         let skillCommand = withSkills(bare, [skill]);
         if (suffix && skill === RUNTIME_MEMBER) skillCommand = `${skillCommand}${suffix}`;
-        if (yes) skillCommand = withYesFlag(skillCommand);
+        // The pinned CLI has no --symlink flag. --yes is its only supported way to select the
+        // default symlink deployment without presenting the install-method chooser.
+        skillCommand = withYesFlag(skillCommand);
+        const invocationPolicy = skill === 'tdd' && enableTdd
+          ? undefined
+          : step.invocationPolicies?.find((candidate) => candidate.installName === skill)?.policy;
         const entry = {
           member: skill,
           groupIds: [groupId],
           groupId,
           groupName: group.displayName,
           sourceId: step.sourceId,
+          ...(invocationPolicy ? { invocationPolicy } : {}),
           command: skillCommand,
           cwd: localRoot,
           failureMessage: step.onFailure.message,
@@ -378,6 +404,8 @@ export function planBundleCommands(action, groupIds, { yes = false, skipMembers,
 // exit status, and selection persistence sees exactly which members succeeded.
 export function runBundleCommands(commands, {
   execute = (command, cwd) => spawnSync('/bin/bash', ['-lc', command], { cwd, stdio: 'inherit' }),
+  applyPolicy = applyInvocationPolicy,
+  skillsRoot,
   stdout = process.stdout,
   stderr = process.stderr,
 } = {}) {
@@ -387,8 +415,21 @@ export function runBundleCommands(commands, {
     stdout.write(`\nInstalling ${planned.member} (${planned.sourceId})...\n`);
     const result = execute(planned.command, planned.cwd);
     if (result.status === 0) {
-      succeeded.push(planned);
-      continue;
+      try {
+        if (planned.invocationPolicy) {
+          applyPolicy({
+            installName: planned.member,
+            policy: planned.invocationPolicy,
+            ...(skillsRoot ? { skillsRoot } : {}),
+          });
+        }
+        succeeded.push(planned);
+        continue;
+      } catch (error) {
+        stderr.write(`Invocation policy failed for ${planned.member}: ${error.message}\n`);
+        failed.push({ planned, status: 1 });
+        continue;
+      }
     }
     stderr.write(`${planned.failureMessage}\n`);
     failed.push({ planned, status: Number.isInteger(result.status) ? result.status : 1 });
@@ -414,10 +455,9 @@ function printRunSummary(stdout, { succeeded, failed, unchanged = [], declined =
 // --- Digest classification (epic #1124 / issue #1127) --------------------------------------------
 //
 // An `update` that re-adds a skill whose installed content already digests to what this invocation
-// would install buys nothing and costs the native overwrite prompt. So update classifies every
-// accepted member first and omits the digest-equal ones from the native add — skipping is the ONLY
-// way an unchanged member avoids the prompt, because the native CLI is the sole write authority and
-// the coordinator may not copy, link, or overwrite anything itself.
+// would install buys nothing and replaces identical bytes. So update classifies every accepted
+// member first and omits the digest-equal ones from the native add. The native CLI remains the sole
+// write authority; the coordinator may not copy, link, or overwrite skill trees itself.
 //
 // The digest semantics are borrowed, never re-invented: first-party members digest their PUBLISHED
 // content (`published: true`) on both transports, external members digest the exact reviewed tree,
@@ -445,14 +485,25 @@ export function expectedMemberDigest(source, member, { localRoot }) {
 
 // Classify one installed member directory against its expectation. `skillsRoot` is the canonical
 // installed store (`~/.agents/skills`); the member lives under it by installName.
-export function classifyInstalledMember(source, member, { localRoot, skillsRoot }) {
+export function classifyInstalledMember(source, member, { enableTdd = true, localRoot, skillsRoot }) {
   const directory = join(skillsRoot, member.installName);
   const entry = { member: member.installName, sourceId: source?.id ?? null, directory };
   if (!statSync(directory, { throwIfNoEntry: false })?.isDirectory()) {
     return { ...entry, status: 'missing' };
   }
   const expectedDigest = expectedMemberDigest(source, member, { localRoot });
-  const actualDigest = contentDigest(directory, { published: firstPartySource(source) });
+  let actualDigest;
+  try {
+    const policyInjections = member.installName === 'tdd' && member.invocationPolicy && !enableTdd
+      ? reviewedSourceInjections(directory, member.invocationPolicy)
+      : [];
+    actualDigest = contentDigest(directory, {
+      injected: policyInjections,
+      published: firstPartySource(source),
+    });
+  } catch {
+    return { ...entry, status: 'refresh', expectedDigest, actualDigest: null };
+  }
   return {
     ...entry,
     status: classifyMember({ installed: true, expectedDigest, actualDigest }),
@@ -465,7 +516,7 @@ export function classifyInstalledMember(source, member, { localRoot, skillsRoot
 // deduplicated across groups (the shared support runtime classifies once). The buckets drive both
 // the planner's skip set and the dry-run/no-op rendering. A member the recipe names but its source
 // does not declare gets no expected digest — refresh-or-missing, never a silent skip.
-export function classifySelectedMembers(action, groupIds, { skillsRoot, ...transport } = {}) {
+export function classifySelectedMembers(action, groupIds, { enableTdd = true, skillsRoot, ...transport } = {}) {
   if (!ACTIONS.has(action)) throw new Error(`Unsupported bundle action: ${action}`);
   const { recipesPath, localRoot } = resolveBundleTransport(transport);
   const recipes = readRecipes(recipesPath);
@@ -484,7 +535,7 @@ export function classifySelectedMembers(action, groupIds, { skillsRoot, ...trans
         if (seen.has(installName)) continue;
         seen.add(installName);
         const member = membersByName.get(installName) ?? { installName };
-        const entry = classifyInstalledMember(source, member, { localRoot, skillsRoot });
+        const entry = classifyInstalledMember(source, member, { enableTdd, localRoot, skillsRoot });
         buckets[entry.status].push(entry);
       }
     }
@@ -510,19 +561,21 @@ function printUpdateBuckets(stdout, buckets) {
 function usage() {
   return `Usage:
   node skills/distribution/scripts/bundles.mjs list [--recipes <path>]
-  node skills/distribution/scripts/bundles.mjs <install|update> [--group <id> ... | --all] [--dry-run] [--yes] [--recipes <path>] [--local-root <path>]
+  node skills/distribution/scripts/bundles.mjs <install|update> [--group <id> ... | --all] [--enable-tdd|--disable-tdd] [--dry-run] [--yes] [--recipes <path>] [--local-root <path>]
 
 install without --group/--all opens the interactive picker; update without them replays the
 remembered selection (\${XDG_STATE_HOME:-~/.local/state}/1aboveio-skills/selection.json).
 When a remembered group's current recipe declares members you have not accepted yet, each new skill
 is offered individually and defaults to No; --yes accepts them all, --dry-run lists them without
-prompting.
+prompting. TDD implicit model invocation is enabled by default; --disable-tdd makes TDD explicit-only,
+and --enable-tdd restores implicit invocation. --manual-tdd remains a compatibility alias for
+--disable-tdd.
 `;
 }
 
 function parseArgs(args) {
   const [action = 'install', ...options] = args;
-  const parsed = { action, groupIds: [], all: false, dryRun: false, yes: false };
+  const parsed = { action, groupIds: [], all: false, dryRun: false, yes: false, tddMode: null };
   for (let index = 0; index < options.length; index += 1) {
     const option = options[index];
     if (option === '--group') {
@@ -538,9 +591,15 @@ function parseArgs(args) {
     } else if (option === '--all') parsed.all = true;
     else if (option === '--dry-run') parsed.dryRun = true;
     else if (option === '--yes') parsed.yes = true;
+    else if (option === '--enable-tdd') parsed.tddMode = 'implicit';
+    else if (option === '--disable-tdd' || option === '--manual-tdd') parsed.tddMode = 'manual-only';
     else throw new Error(`Unknown option: ${option}`);
   }
   if (parsed.all && parsed.groupIds.length > 0) throw new Error('Use either --all or --group, not both');
+  const tddOptions = options.filter((option) => ['--enable-tdd', '--disable-tdd', '--manual-tdd'].includes(option));
+  if (tddOptions.length > 1) {
+    throw new Error('Use only one of --enable-tdd or --disable-tdd');
+  }
   return parsed;
 }
 
@@ -683,6 +742,11 @@ async function consentNewMembers(candidates, { yes, stdin, stdout, stderr }) {
   return declined;
 }
 
+function selectionIncludesTdd(groupIds, catalog) {
+  const selected = new Set(groupIds);
+  return catalog.some((bundle) => selected.has(bundle.id) && bundle.members.includes('tdd'));
+}
+
 // Dependencies are injectable so the coordinator seam can be tested black-box: a stubbed native
 // executor, controllable TTY streams, and a fixture XDG environment, without reaching process
 // globals. The default execute is the real shell out to the native Skills CLI — the sole
@@ -690,6 +754,7 @@ async function consentNewMembers(candidates, { yes, stdin, stdout, stderr }) {
 // AFTER those native commands settle.
 export async function runCli(args, {
   execute,
+  applyPolicy,
   stdin = process.stdin,
   stdout = process.stdout,
   stderr = process.stderr,
@@ -726,6 +791,17 @@ export async function runCli(args, {
       priorState = loadPriorSelection(env);
     }
     if (groupIds.length === 0) throw new Error('Select at least one bundle');
+    const includesTdd = selectionIncludesTdd(groupIds, catalog);
+    if (parsed.tddMode && !includesTdd) {
+      throw new Error(`${parsed.tddMode === 'implicit' ? '--enable-tdd' : '--disable-tdd'} requires a selected bundle containing tdd`);
+    }
+    let enableTdd = typeof priorState?.tddImplicitInvocation === 'boolean'
+      ? priorState.tddImplicitInvocation
+      : true;
+    if (includesTdd) {
+      if (parsed.tddMode) enableTdd = parsed.tddMode === 'implicit';
+      stdout.write(`TDD invocation: ${enableTdd ? 'enabled' : 'disabled'}\n`);
+    }
     // New-member consent (#1128): newly declared user-facing members of a group with prior
     // acceptance are offered one at a time, defaulting to No. A dry run only LISTS the would-be
     // candidates — it never prompts and never writes state.
@@ -740,13 +816,13 @@ export async function runCli(args, {
     }
     // Digest skip (#1127): `update` classifies the accepted members against the installed tree and
     // omits the digest-equal ones from the native add. `install` never skips — it is an explicit
-    // request to install, whose overwrite consent belongs to the native prompt. Declined new
-    // members (#1128) are excluded from classification: they never run, so they are not buckets.
+    // request to install/replace the selected members. Declined new members (#1128) are excluded
+    // from classification: they never run, so they are not buckets.
     let buckets;
     let skipMembers;
+    const skillsRoot = join(env.HOME || homedir(), '.agents', 'skills');
     if (parsed.action === 'update') {
-      const skillsRoot = join(env.HOME || homedir(), '.agents', 'skills');
-      buckets = classifySelectedMembers(parsed.action, groupIds, { ...transport, skillsRoot });
+      buckets = classifySelectedMembers(parsed.action, groupIds, { ...transport, enableTdd, skillsRoot });
       skipMembers = new Set(buckets.unchanged.map((entry) => entry.member));
       if (declined.size > 0) {
         for (const key of Object.keys(buckets)) {
@@ -754,7 +830,12 @@ export async function runCli(args, {
         }
       }
     }
-    const commands = planBundleCommands(parsed.action, groupIds, { ...transport, yes: parsed.yes, skipMembers, omitMembers: declined });
+    const commands = planBundleCommands(parsed.action, groupIds, {
+      ...transport,
+      enableTdd,
+      skipMembers,
+      omitMembers: declined,
+    });
     if (parsed.dryRun) {
       if (buckets) printUpdateBuckets(stdout, buckets);
       for (const planned of commands) {
@@ -769,7 +850,13 @@ export async function runCli(args, {
       const skipping = buckets.unchanged.map((entry) => entry.member).filter((member) => !SUPPORT_GROUPS.has(member));
       if (skipping.length > 0) stdout.write(`Up to date, skipping: ${skipping.join(', ')}\n`);
     }
-    const { succeeded, failed } = runBundleCommands(commands, { execute, stdout, stderr });
+    const { succeeded, failed } = runBundleCommands(commands, {
+      execute,
+      applyPolicy,
+      skillsRoot,
+      stdout,
+      stderr,
+    });
     printRunSummary(stdout, {
       succeeded,
       failed,
@@ -791,6 +878,7 @@ export async function runCli(args, {
         renderTarget,
         succeededMembers,
         omitMembers: declined,
+        tddImplicitInvocation: enableTdd,
       });
       if (selection.groups.length > 0) {
         writeSelectionState(selection, env);