@1aboveio/skills 0.13.0 → 0.15.0

package/skills/engineering/engineering-runtime/scripts/invocation-policy.mjs

@@ -0,0 +1,187 @@
+#!/usr/bin/env node
+
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+
+import { isMainModule } from './main-module.mjs';
+
+export const MANUAL_ONLY = 'manual-only';
+const SKILL_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+
+function frontmatterBounds(contents) {
+  const match = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(contents);
+  if (!match) throw new Error('SKILL.md must begin with YAML frontmatter');
+  return { body: match[1], end: match[0].length };
+}
+
+function manualOnlySkill(contents) {
+  const frontmatter = frontmatterBounds(contents);
+  const declarations = frontmatter.body.match(/^disable-model-invocation\s*:\s*.*$/gm) ?? [];
+  if (declarations.length > 1) throw new Error('SKILL.md repeats disable-model-invocation');
+
+  const body = declarations.length === 1
+    ? frontmatter.body.replace(/^disable-model-invocation\s*:\s*.*$/m, 'disable-model-invocation: true')
+    : `${frontmatter.body}\ndisable-model-invocation: true`;
+  return `---\n${body}\n---\n${contents.slice(frontmatter.end)}`;
+}
+
+function manualOnlyOpenAi(contents) {
+  const policyHeaders = contents.match(/^policy\s*:\s*$/gm) ?? [];
+  if (policyHeaders.length > 1) throw new Error('agents/openai.yaml repeats policy');
+  if (policyHeaders.length === 0) {
+    const prefix = contents.length === 0 || contents.endsWith('\n') ? contents : `${contents}\n`;
+    return `${prefix}policy:\n  allow_implicit_invocation: false\n`;
+  }
+
+  const lines = contents.split('\n');
+  const policyIndex = lines.findIndex((line) => /^policy\s*:\s*$/.test(line));
+  let policyEnd = lines.length;
+  for (let index = policyIndex + 1; index < lines.length; index += 1) {
+    if (/^[^\s#][^:]*\s*:/.test(lines[index])) {
+      policyEnd = index;
+      break;
+    }
+  }
+  const declarations = lines
+    .slice(policyIndex + 1, policyEnd)
+    .filter((line) => /^\s+allow_implicit_invocation\s*:/.test(line));
+  if (declarations.length > 1) throw new Error('agents/openai.yaml repeats policy.allow_implicit_invocation');
+  if (declarations.length === 1) {
+    return lines.map((line, index) => (
+      index > policyIndex && index < policyEnd && /^\s+allow_implicit_invocation\s*:/.test(line)
+        ? '  allow_implicit_invocation: false'
+        : line
+    )).join('\n');
+  }
+  lines.splice(policyIndex + 1, 0, '  allow_implicit_invocation: false');
+  return lines.join('\n');
+}
+
+export function manualOnlyPolicyFindings(skillDirectory) {
+  const findings = [];
+  const skillPath = join(skillDirectory, 'SKILL.md');
+  const openaiPath = join(skillDirectory, 'agents', 'openai.yaml');
+  if (!existsSync(skillPath)) return ['SKILL.md is missing'];
+  const skill = readFileSync(skillPath, 'utf8');
+  const declarations = frontmatterBounds(skill).body.match(/^disable-model-invocation\s*:\s*true\s*$/gm) ?? [];
+  if (declarations.length !== 1) findings.push('SKILL.md must declare disable-model-invocation: true exactly once');
+  if (!existsSync(openaiPath)) {
+    findings.push('agents/openai.yaml is missing');
+  } else {
+    const openai = readFileSync(openaiPath, 'utf8');
+    const policies = openai.match(/^policy\s*:\s*$/gm) ?? [];
+    const implicit = openai.match(/^\s+allow_implicit_invocation\s*:\s*false\s*$/gm) ?? [];
+    if (policies.length !== 1 || implicit.length !== 1) {
+      findings.push('agents/openai.yaml must declare policy.allow_implicit_invocation: false exactly once');
+    }
+  }
+  return findings;
+}
+
+// Restore the reviewed upstream bytes for source-integrity hashing. The installed tree must first
+// pass manualOnlyPolicyFindings; these exact trailing additions are the only intentional divergence.
+export function reviewedSourceInjections(skillDirectory, policy) {
+  if (policy !== MANUAL_ONLY) return [];
+  const findings = manualOnlyPolicyFindings(skillDirectory);
+  if (findings.length > 0) throw new Error(findings.join('; '));
+  const skill = readFileSync(join(skillDirectory, 'SKILL.md'), 'utf8')
+    .replace(/^disable-model-invocation: true\n/m, '');
+  const openai = readFileSync(join(skillDirectory, 'agents', 'openai.yaml'), 'utf8')
+    .replace(/policy:\n  allow_implicit_invocation: false\n?$/, '');
+  return [
+    { relativePath: 'SKILL.md', contents: skill },
+    { relativePath: 'agents/openai.yaml', contents: openai },
+  ];
+}
+
+export function clearInvocationPolicy({ installName, policy, skillsRoot = join(homedir(), '.agents', 'skills') }) {
+  if (!SKILL_NAME.test(installName ?? '')) throw new Error(`invalid installed skill name ${JSON.stringify(installName)}`);
+  if (policy !== MANUAL_ONLY) throw new Error(`unsupported invocation policy ${JSON.stringify(policy)}`);
+  const skillDirectory = join(skillsRoot, installName);
+  const skillPath = join(skillDirectory, 'SKILL.md');
+  const openaiPath = join(skillDirectory, 'agents', 'openai.yaml');
+  if (!existsSync(skillPath) || !existsSync(openaiPath)) throw new Error(`installed skill is incomplete: ${skillDirectory}`);
+  const skill = readFileSync(skillPath, 'utf8');
+  const openai = readFileSync(openaiPath, 'utf8');
+  const hasSkillPolicy = /^disable-model-invocation\s*:/m.test(frontmatterBounds(skill).body);
+  const hasOpenAiPolicy = /^policy\s*:\s*$/m.test(openai) || /^\s+allow_implicit_invocation\s*:/m.test(openai);
+  if (!hasSkillPolicy && !hasOpenAiPolicy) {
+    return { installName, policy: 'implicit', skillDirectory, changed: false };
+  }
+  const injected = Object.fromEntries(reviewedSourceInjections(skillDirectory, policy)
+    .map((entry) => [entry.relativePath, entry.contents]));
+  writeFileSync(skillPath, injected['SKILL.md']);
+  writeFileSync(openaiPath, injected['agents/openai.yaml']);
+  return { installName, policy: 'implicit', skillDirectory, changed: true };
+}
+
+export function applyInvocationPolicy({ installName, policy, skillsRoot = join(homedir(), '.agents', 'skills') }) {
+  if (!SKILL_NAME.test(installName ?? '')) throw new Error(`invalid installed skill name ${JSON.stringify(installName)}`);
+  if (policy !== MANUAL_ONLY) throw new Error(`unsupported invocation policy ${JSON.stringify(policy)}`);
+  const skillDirectory = join(skillsRoot, installName);
+  const skillPath = join(skillDirectory, 'SKILL.md');
+  if (!existsSync(skillPath)) throw new Error(`installed skill is missing: ${skillPath}`);
+  const openaiPath = join(skillDirectory, 'agents', 'openai.yaml');
+
+  const skillBefore = readFileSync(skillPath, 'utf8');
+  const skillAfter = manualOnlySkill(skillBefore);
+  if (skillAfter !== skillBefore) writeFileSync(skillPath, skillAfter);
+
+  mkdirSync(dirname(openaiPath), { recursive: true });
+  const openaiBefore = existsSync(openaiPath) ? readFileSync(openaiPath, 'utf8') : '';
+  const openaiAfter = manualOnlyOpenAi(openaiBefore);
+  if (openaiAfter !== openaiBefore) writeFileSync(openaiPath, openaiAfter);
+
+  const findings = manualOnlyPolicyFindings(skillDirectory);
+  if (findings.length > 0) throw new Error(findings.join('; '));
+  return { installName, policy, skillDirectory, changed: skillAfter !== skillBefore || openaiAfter !== openaiBefore };
+}
+
+function selectionEnablesTdd(env = process.env) {
+  const stateHome = env.XDG_STATE_HOME || join(env.HOME || homedir(), '.local', 'state');
+  const path = join(stateHome, '1aboveio-skills', 'selection.json');
+  if (!existsSync(path)) return true;
+  try {
+    const state = JSON.parse(readFileSync(path, 'utf8'));
+    if (state.tddImplicitInvocation === undefined) return true;
+    if (typeof state.tddImplicitInvocation !== 'boolean') {
+      throw new Error('tddImplicitInvocation must be a boolean');
+    }
+    return state.tddImplicitInvocation;
+  } catch (error) {
+    throw new Error(`cannot read TDD invocation selection at ${path}: ${error.message}`);
+  }
+}
+
+export function reconcileInvocationPolicy(options) {
+  return selectionEnablesTdd(options.env)
+    ? clearInvocationPolicy(options)
+    : applyInvocationPolicy(options);
+}
+
+function parseArgs(argv) {
+  const parsed = { installName: null, policy: null, skillsRoot: undefined, fromSelection: false };
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--skill') parsed.installName = argv[++index];
+    else if (arg === '--policy') parsed.policy = argv[++index];
+    else if (arg === '--skills-root') parsed.skillsRoot = argv[++index];
+    else if (arg === '--from-selection') parsed.fromSelection = true;
+    else throw new Error(`unknown argument ${arg}`);
+  }
+  return parsed;
+}
+
+if (isMainModule(import.meta.url)) {
+  try {
+    const parsed = parseArgs(process.argv.slice(2));
+    const result = parsed.fromSelection
+      ? reconcileInvocationPolicy(parsed)
+      : applyInvocationPolicy(parsed);
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+  } catch (error) {
+    process.stderr.write(`invocation-policy: ${error.message}\n`);
+    process.exitCode = 1;
+  }
+}

package/skills/engineering/engineering-runtime/scripts/workflow-coherence.mjs

@@ -3,12 +3,14 @@ import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { isAbsolute, join, normalize, relative } from 'node:path';
 import { isDeepStrictEqual } from 'node:util';
 
+import { reviewedSourceInjections } from './invocation-policy.mjs';
 import { isMainModule } from './main-module.mjs';
 import {
   HARNESS_RUNTIME_DEPENDENCY_MEMBERS,
   MATT_DEPENDENCY_MEMBERS,
   WORKFLOW_OWNED_MEMBERS,
   WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES,
+  WORKFLOW_TRUSTED_INVOCATION_POLICIES,
   WORKFLOW_TRUSTED_REPAIR_RECIPE,
   WORKFLOW_TRUSTED_SOURCES,
 } from './workflow-policy.mjs';
@@ -18,6 +20,7 @@ export {
   MATT_DEPENDENCY_MEMBERS,
   WORKFLOW_OWNED_MEMBERS,
   WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES,
+  WORKFLOW_TRUSTED_INVOCATION_POLICIES,
   WORKFLOW_TRUSTED_REPAIR_RECIPE,
 } from './workflow-policy.mjs';
 
@@ -67,6 +70,9 @@ export const WORKFLOW_TRUSTED_POLICY = deepFreeze({
       ownership: 'dependency',
       sourcePath: MATT_MEMBER_PATHS[installName],
       expectedSource: MATT_SOURCE,
+      ...(WORKFLOW_TRUSTED_INVOCATION_POLICIES.find((entry) => entry.installName === installName)
+        ? { invocationPolicy: WORKFLOW_TRUSTED_INVOCATION_POLICIES.find((entry) => entry.installName === installName).policy }
+        : {}),
     })),
     ...HARNESS_RUNTIME_DEPENDENCY_MEMBERS.map((installName) => ({
       installName,
@@ -331,6 +337,9 @@ function validateManifest(manifest) {
         || JSON.stringify(member.digestExcludes) !== JSON.stringify(expectedExcludes)) {
         add('member-digest-contract-invalid', memberName, 'The member digest exclusion contract is missing or malformed.');
       }
+      if (member.invocationPolicy !== expectedMember.invocationPolicy) {
+        add('member-invocation-policy-invalid', memberName, 'The runtime invocation policy is missing or malformed.');
+      }
     }
   }
 
@@ -465,8 +474,18 @@ export function verifyWorkflowCoherence(options = {}) {
       // for a member to claim a scope its source does not have — and `validateManifest` has already
       // proved `expectedSource` deep-equal to the trusted policy above (`member-source-identity-
       // invalid` returns before this loop), so the derivation reads trusted data, not manifest claims.
+      let policyInjections = [];
+      if (layout === 'installed' && member.invocationPolicy) {
+        try {
+          policyInjections = reviewedSourceInjections(directory, member.invocationPolicy);
+        } catch {
+          // An unchanged upstream tree is the explicit "implicit enabled" option. Partial or
+          // malformed overlays still fail because their raw digest matches neither allowed state.
+        }
+      }
       actualDigest = contentDigest(directory, {
         exclude: member.digestExcludes,
+        injected: policyInjections,
         published: firstPartySource(member.expectedSource),
       });
     } catch (error) {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -47,6 +47,10 @@ export const MATT_DEPENDENCY_MEMBERS = deepFreeze([
 // runtime imports. Order follows the coherence member census so the same tree always
 // produces the same identity. A generated file remains part of its owner's content
 // digest and is also named explicitly so a scoped verdict reports every identity used.
+export const WORKFLOW_TRUSTED_INVOCATION_POLICIES = deepFreeze([
+  { installName: 'tdd', policy: 'manual-only' },
+]);
+
 export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
   {
     invokedSkill: 'resolve-issues',
@@ -93,7 +97,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.13.0',
+    version: '0.15.0',
   },
   matt: {
     id: 'matt-pocock',
@@ -106,6 +110,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
 
 const nativeSkillsPrefix = 'npx skills@1.5.22 add';
 const nativeSkillsTarget = '--global --agent universal claude-code --skill';
+const invocationPolicyCommand = 'node "$HOME/.agents/skills/engineering-runtime/scripts/invocation-policy.mjs" --skill tdd --policy manual-only --from-selection';
 const externalArchiveLimits = 'SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864';
 const mattMembersArgument = MATT_DEPENDENCY_MEMBERS.join(' ');
 const firstPartyMembers = deepFreeze([
@@ -135,9 +140,10 @@ export const WORKFLOW_TRUSTED_REPAIR_RECIPE = deepFreeze({
       revision: WORKFLOW_TRUSTED_SOURCES.matt.revision,
       installPath: null,
       members: MATT_DEPENDENCY_MEMBERS,
+      invocationPolicies: WORKFLOW_TRUSTED_INVOCATION_POLICIES,
       commands: [{
         transport: 'https',
-        command: `${externalArchiveLimits} ${nativeSkillsPrefix} https://codeload.github.com/mattpocock/skills/tar.gz/${WORKFLOW_TRUSTED_SOURCES.matt.revision} ${nativeSkillsTarget} ${mattMembersArgument}`,
+        command: `${externalArchiveLimits} ${nativeSkillsPrefix} https://codeload.github.com/mattpocock/skills/tar.gz/${WORKFLOW_TRUSTED_SOURCES.matt.revision} ${nativeSkillsTarget} ${mattMembersArgument} --yes && ${invocationPolicyCommand}`,
       }],
       onFailure: {
         action: 'stop',
@@ -154,7 +160,7 @@ export const WORKFLOW_TRUSTED_REPAIR_RECIPE = deepFreeze({
       commands: [
         {
           transport: 'npm',
-          command: `npx ${publicPackageRelease} install --group engineering-workflow`,
+          command: `npx ${publicPackageRelease} install --group engineering-workflow --yes`,
         },
       ],
       onFailure: {

package/skills/engineering/resolve-issues/generated/workflow-repair-policy.json

@@ -178,7 +178,8 @@
         "repository": "https://github.com/mattpocock/skills",
         "revision": "ed37663cc5fbef691ddfecd080dff42f7e7e350d",
         "reviewedTree": "04b0fcb78e3de7c58744fcba2528354cc64ab988"
-      }
+      },
+      "invocationPolicy": "manual-only"
     },
     {
       "installName": "to-spec",
@@ -236,7 +237,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -247,7 +248,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -258,7 +259,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -269,7 +270,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -280,7 +281,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -291,7 +292,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -302,7 +303,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -313,7 +314,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     },
     {
@@ -324,7 +325,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0"
+        "version": "0.15.0"
       }
     }
   ],
@@ -404,10 +405,16 @@
           "triage",
           "wayfinder"
         ],
+        "invocationPolicies": [
+          {
+            "installName": "tdd",
+            "policy": "manual-only"
+          }
+        ],
         "commands": [
           {
             "transport": "https",
-            "command": "SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864 npx skills@1.5.22 add https://codeload.github.com/mattpocock/skills/tar.gz/ed37663cc5fbef691ddfecd080dff42f7e7e350d --global --agent universal claude-code --skill batch-grill-me code-review codebase-design diagnosing-bugs domain-modeling grill-me grill-with-docs grilling handoff improve-codebase-architecture prototype research resolving-merge-conflicts setup-matt-pocock-skills tdd to-spec to-tickets triage wayfinder"
+            "command": "SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864 npx skills@1.5.22 add https://codeload.github.com/mattpocock/skills/tar.gz/ed37663cc5fbef691ddfecd080dff42f7e7e350d --global --agent universal claude-code --skill batch-grill-me code-review codebase-design diagnosing-bugs domain-modeling grill-me grill-with-docs grilling handoff improve-codebase-architecture prototype research resolving-merge-conflicts setup-matt-pocock-skills tdd to-spec to-tickets triage wayfinder --yes && node \"$HOME/.agents/skills/engineering-runtime/scripts/invocation-policy.mjs\" --skill tdd --policy manual-only --from-selection"
           }
         ],
         "onFailure": {
@@ -419,7 +426,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.13.0",
+        "version": "0.15.0",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -435,7 +442,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.13.0 install --group engineering-workflow"
+            "command": "npx @1aboveio/skills@0.15.0 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/resolve-issues/scripts/run-state.mjs

@@ -3412,7 +3412,7 @@ export const WORKFLOW_PREFLIGHT_COMMANDS = Object.freeze([
 
 const WORKFLOW_VERIFIER_URL = new URL('../../engineering-runtime/scripts/workflow-coherence.mjs', import.meta.url)
 const WORKFLOW_FALLBACK_POLICY_URL = new URL('../generated/workflow-repair-policy.json', import.meta.url)
-export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = 'f6e7bc339163103ada9e97781dd53eb1ae987df06a14adba9495563b04d153f0'
+export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = '7dde46aecddba9c837b567cf73d69eed42390912fa6d76c6d7468773f0d59a2d'
 const WORKFLOW_REPAIR_RECIPE_REFERENCE = Object.freeze({
   id: 'engineering-workflow-dependency-first',
   generatedFrom: 'skills/distribution/generated/recipes.json',
@@ -3449,7 +3449,8 @@ const WORKFLOW_NATIVE_TARGET = '--global --agent universal claude-code --skill'
 // The archive limits are part of the external command, not decoration: dropping them is how a
 // pinned-archive install becomes an unbounded download.
 const WORKFLOW_EXTERNAL_ARCHIVE_LIMITS = 'SKILLS_DOWNLOAD_MAX_BYTES=33554432 SKILLS_EXTRACT_MAX_FILES=4096 SKILLS_EXTRACT_MAX_BYTES=67108864'
-const WORKFLOW_RUNTIME_DEPENDENCY_INSTALL = ' && npm ci --ignore-scripts --prefix "$HOME/.agents/skills/engineering-runtime/scripts"'
+const WORKFLOW_RUNTIME_DEPENDENCY_INSTALL = ' && npm --prefix "$(realpath "$HOME/.agents/skills/engineering-runtime/scripts")" ci --ignore-scripts'
+const WORKFLOW_INVOCATION_POLICY_COMMAND = 'node "$HOME/.agents/skills/engineering-runtime/scripts/invocation-policy.mjs" --skill tdd --policy manual-only --from-selection'
 const WORKFLOW_MATT_REPOSITORY = 'https://github.com/mattpocock/skills'
 // Restated, not derived. Advancing the Matt pin already edits this file (the fallback policy hash
 // below moves with it), so pinning the revision here costs no drift a maintainer was not already paying.
@@ -3467,8 +3468,9 @@ const WORKFLOW_FIRST_PARTY_MEMBERS = Object.freeze([
 ])
 const WORKFLOW_RECIPE_FIELDS = Object.freeze(['id', 'generatedFrom', 'groupId', 'lifecycle', 'renderTarget', 'stopOnFailure', 'steps'])
 const WORKFLOW_COMMAND_FIELDS = Object.freeze(['transport', 'command'])
-const WORKFLOW_EXTERNAL_STEP_FIELDS = Object.freeze(['sourceId', 'sourceType', 'repository', 'revision', 'installPath', 'members', 'commands', 'onFailure'])
-const WORKFLOW_CHECKOUT_STEP_FIELDS = WORKFLOW_EXTERNAL_STEP_FIELDS
+const WORKFLOW_INVOCATION_POLICY_FIELDS = Object.freeze(['installName', 'policy'])
+const WORKFLOW_EXTERNAL_STEP_FIELDS = Object.freeze(['sourceId', 'sourceType', 'repository', 'revision', 'installPath', 'members', 'invocationPolicies', 'commands', 'onFailure'])
+const WORKFLOW_CHECKOUT_STEP_FIELDS = Object.freeze(['sourceId', 'sourceType', 'repository', 'revision', 'installPath', 'members', 'commands', 'onFailure'])
 const WORKFLOW_PACKAGE_STEP_FIELDS = Object.freeze(['sourceId', 'sourceType', 'package', 'version', 'installPath', 'members', 'commands', 'onFailure'])
 
 function exactFields(record, fields) {
@@ -3501,6 +3503,7 @@ function validStepFailure(step) {
 
 function validMattStep(step) {
   const members = WORKFLOW_MATT_MEMBERS.join(' ')
+  const invocationPolicy = step?.invocationPolicies?.[0]
   return exactFields(step, WORKFLOW_EXTERNAL_STEP_FIELDS)
     && step.sourceId === 'matt-pocock'
     && step.sourceType === 'external'
@@ -3508,9 +3511,14 @@ function validMattStep(step) {
     && step.revision === WORKFLOW_MATT_REVISION
     && step.installPath === null
     && exactList(step.members, WORKFLOW_MATT_MEMBERS)
+    && Array.isArray(step.invocationPolicies)
+    && step.invocationPolicies.length === 1
+    && exactFields(invocationPolicy, WORKFLOW_INVOCATION_POLICY_FIELDS)
+    && invocationPolicy.installName === 'tdd'
+    && invocationPolicy.policy === 'manual-only'
     && exactCommands(step.commands, [{
       transport: 'https',
-      command: `${WORKFLOW_EXTERNAL_ARCHIVE_LIMITS} ${WORKFLOW_NATIVE_CLI} add https://codeload.github.com/mattpocock/skills/tar.gz/${WORKFLOW_MATT_REVISION} ${WORKFLOW_NATIVE_TARGET} ${members}`,
+      command: `${WORKFLOW_EXTERNAL_ARCHIVE_LIMITS} ${WORKFLOW_NATIVE_CLI} add https://codeload.github.com/mattpocock/skills/tar.gz/${WORKFLOW_MATT_REVISION} ${WORKFLOW_NATIVE_TARGET} ${members} --yes && ${WORKFLOW_INVOCATION_POLICY_COMMAND}`,
     }])
     && validStepFailure(step)
 }
@@ -3544,7 +3552,7 @@ const WORKFLOW_REPAIR_RENDER_TARGETS = new Map(Object.entries({
       && WORKFLOW_EXACT_PACKAGE_VERSION.test(step.version ?? '')
       && exactCommands(step.commands, [{
         transport: 'npm',
-        command: `npx ${WORKFLOW_PUBLIC_PACKAGE}@${step.version} install --group ${recipe.groupId}`,
+        command: `npx ${WORKFLOW_PUBLIC_PACKAGE}@${step.version} install --group ${recipe.groupId} --yes`,
       }]),
   }),
 }))