@1aboveio/skills 0.19.0 → 0.19.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1aboveio/skills",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "Install the 1AboveIO first-party skill groups through the native Skills CLI.",
   "license": "MIT",
   "type": "module",

package/runtime/skills/distribution/generated/recipes.json

@@ -8,7 +8,7 @@
       "id": "first-party",
       "type": "first-party",
       "package": "@1aboveio/skills",
-      "version": "0.19.0",
+      "version": "0.19.1",
       "updatePolicy": "pinned-npm-version",
       "members": [
         {
@@ -208,7 +208,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -244,7 +244,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -290,7 +290,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -323,7 +323,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -366,7 +366,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -394,7 +394,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -432,7 +432,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -460,7 +460,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -498,7 +498,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -526,7 +526,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -564,7 +564,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -596,7 +596,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -636,7 +636,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -662,7 +662,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.0",
+            "version": "0.19.1",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -694,7 +694,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.19.0",
+          "version": "0.19.1",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -749,7 +749,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.19.0",
+          "version": "0.19.1",
           "installPath": null,
           "members": [
             "harness-runtime",

package/runtime/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -119,7 +119,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.19.0',
+    version: '0.19.1',
   },
   matt: {
     id: 'matt-pocock',

package/skills/engineering/e2e-test/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: e2e-test
 description: "Playwright end-to-end standard: the 3-tier suite (render-health / functional / journey), generated route manifest, presentation sweep, and CI route gates. Use when browser routes or user flows ship or change, or a Playwright test flakes. NOT for non-browser tests, defining what to test (ensure-coverage), or the curated ALIVE/DEAD gate (smoke)."
+disable-model-invocation: true
 ---
 
 # E2E Testing Standard

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -383,7 +383,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "eff6c7b5931bce5b2265a619bccddd371a89df6ce7bc2edc74f11d00060a71dd",
       "digestExcludes": []
@@ -396,9 +396,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
-      "contentDigest": "08230dc57a53d6526692b50138038abbd80abce1a067e01c52ad6acc182caf7e",
+      "contentDigest": "d97abeff7bdc5ae2e4be2f631d09dba46d4753ce1e67334793364329af59f066",
       "digestExcludes": []
     },
     {
@@ -409,9 +409,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
-      "contentDigest": "9eea7bfba348ddaea1b934c9a7fabdd9b101df8a146e1c93e947da4d335f1d98",
+      "contentDigest": "00cfdd3e5bfbc3e37b1369ad93aae91161e671829760a8867ea9be25047ba461",
       "digestExcludes": []
     },
     {
@@ -422,7 +422,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "58b0556228a9271cf9e33727a05fc08a4fdfd29512ec0936b169f0a55d60e6ef",
       "digestExcludes": []
@@ -435,7 +435,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "38347c30820ba7e8b10433aeb351b7df4fa457b143e4a109293ab53fda961459",
       "digestExcludes": []
@@ -448,9 +448,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
-      "contentDigest": "d32add939c8c673e3bb096dfc95a5aadfa31115c3a854b3a4e0eb3fed1b49794",
+      "contentDigest": "d7daa7080dbaefcd13f3d17a811bd5ad64d7cb9f7506b29b7d3558243bfd3683",
       "digestExcludes": []
     },
     {
@@ -461,9 +461,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
-      "contentDigest": "125318612fe3fd70354ba5393a7019b3e6db5acc14a0d3f653a31f6b06a2e267",
+      "contentDigest": "01c192d8b4fd416af4ea02e8000e5fce0cee723a6ac2f8c0c48372087e1a262e",
       "digestExcludes": []
     },
     {
@@ -474,7 +474,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "ffba0c83491676794c74721f4c6dbae430f5bc186e5a55f0764e29eaeb13829b",
       "digestExcludes": []
@@ -487,7 +487,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "f048fd00c69f2dc666fc7a3096cfeee6dfba73933bfb69602f3f0e26159798cc",
       "digestExcludes": []
@@ -500,7 +500,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
       "contentDigest": "90a7c4e1ad6da1e632ea2c5259e4967ffebb84353adccbca8dfc5d6bc50b60c1",
       "digestExcludes": []
@@ -513,15 +513,15 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       },
-      "contentDigest": "16dcd5bc2b40c8ae7cf6bc41eadd943264b03e70162c3da85624f11a2112bf56",
+      "contentDigest": "03b9c17251069f297b55577809eb3c49291650d95effd6a00348807eb8944e91",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "6f89ee339ca1319fbd167658b1dbb66a1357b482463ba829bf22bf7b0c7c28a3",
+  "releaseIdentity": "3dec5c21fb1bfc991338f1d62b4c91d3967e2ff28f04ba412ec50e74b28a2122",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -579,7 +579,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0",
+        "version": "0.19.1",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -597,7 +597,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.19.0 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.19.1 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -119,7 +119,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.19.0',
+    version: '0.19.1',
   },
   matt: {
     id: 'matt-pocock',

package/skills/engineering/ensure-coverage/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: ensure-coverage
 description: "Define or audit behavior-first test criteria — ACs, required test levels, evidence expectations, mock/integration/E2E policy — across three axes: breadth (Coverage Ledger), depth (over-mocking), presentation (perceivability of browser surfaces). NOT the merge verdict on a PR (review-pr), authoring browser tests (e2e-test), or driving issues to PRs (resolve-issues)."
+disable-model-invocation: true
 ---
 
 # Ensure Coverage

package/skills/engineering/resolve-issues/generated/workflow-repair-policy.json

@@ -237,7 +237,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -248,7 +248,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -259,7 +259,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -270,7 +270,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -281,7 +281,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -292,7 +292,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -303,7 +303,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -314,7 +314,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -325,7 +325,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -336,7 +336,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     },
     {
@@ -347,7 +347,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0"
+        "version": "0.19.1"
       }
     }
   ],
@@ -468,7 +468,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.0",
+        "version": "0.19.1",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -486,7 +486,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.19.0 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.19.1 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/resolve-issues/scripts/run-state.mjs

@@ -3412,7 +3412,7 @@ export const WORKFLOW_PREFLIGHT_COMMANDS = Object.freeze([
 
 const WORKFLOW_VERIFIER_URL = new URL('../../engineering-runtime/scripts/workflow-coherence.mjs', import.meta.url)
 const WORKFLOW_FALLBACK_POLICY_URL = new URL('../generated/workflow-repair-policy.json', import.meta.url)
-export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = '27d1fb2d0bdf9ca37933dff2f0e1863d95f9f147baecbbce9dd3553a4c71a915'
+export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = '916d7e26b51f761140a1d9377810b27f9f51c482fc63a220bb0fbcc34d2eee7a'
 const WORKFLOW_REPAIR_RECIPE_REFERENCE = Object.freeze({
   id: 'engineering-workflow-dependency-first',
   generatedFrom: 'skills/distribution/generated/recipes.json',

package/skills/engineering/rush-release/references/cut.md

@@ -51,8 +51,13 @@ git commit -m "chore(release): <nextVersion>"
 `apply.mjs` requires the confirmed plan's `changelogMarkdown` on stdin, writes
 that section, and bumps the discovered identity files. It refuses a missing or
 empty changelog section rather than silently replacing the plan with a bare
-version heading. If the human edited the notes, write the confirmed markdown
-to stdin instead of the raw plan field.
+version heading. When the plan names `skills/distribution/manifest.json`, it
+delegates to `distribution.mjs version-cut`; that operation updates the public
+npm identity, trusted installed-workflow identity and fallback hash together,
+then regenerates the repository's deterministic distribution artifacts. If any
+step fails it restores every identity and generated file before returning.
+If the human edited the notes, write the confirmed markdown to stdin instead
+of the raw plan field.
 
 Then:
 

package/skills/engineering/rush-release/references/preflight.md

@@ -28,14 +28,22 @@ workflow publishes on `release: published` rather than on tag push, note that
 
 ## 3. Version files
 
-List identity files present at the repo root (and only those):
+First check for `skills/distribution/manifest.json` with exactly one `public-npm`
+render target and `skills/distribution/scripts/distribution.mjs`. That manifest is
+the release identity when present; record it and use the distribution-aware cut in
+`apply.mjs`. It takes precedence over a private root `package.json` with no version,
+because adding a synthetic root version would not change what the publisher ships.
+
+Otherwise, list identity files present at the repo root (and only those):
 
 - `package.json` (and `package-lock.json` when it exists)
 - `pyproject.toml`
 - `VERSION`
 
-Do not bump nested workspace packages unless the human names them. The cut
-must stay metadata-only.
+Do not bump other nested workspace packages unless the human names them. The cut
+must stay metadata-only. A distribution-aware cut may also update trusted runtime
+identity constants, test fixtures that pin that identity, and deterministic generated
+policy/inventory artifacts; those are version metadata, not product behavior.
 
 ## 4. Baseline
 

package/skills/engineering/rush-release/scripts/apply.mjs

@@ -7,8 +7,9 @@
 // Exit: 0 ok · 1 IO/parse failed · 2 usage
 import { existsSync, readFileSync, writeFileSync } from 'node:fs'
 import { join } from 'node:path'
+import { spawnSync } from 'node:child_process'
 import { isMainModule } from '../../engineering-runtime/scripts/main-module.mjs'
-import { discoverVersionFiles, parseSemver } from './plan.mjs'
+import { DISTRIBUTION_MANIFEST, discoverVersionFiles, parseSemver } from './plan.mjs'
 
 export function insertChangelog(markdown, { version, date, section }) {
   const heading = `## [${version}] - ${date}`
@@ -90,11 +91,32 @@ export function bumpPyproject(text, version) {
   return out.join('\n')
 }
 
+export function cutDistributionVersion({ version, cwd }) {
+  const script = join(cwd, 'skills/distribution/scripts/distribution.mjs')
+  const result = spawnSync(process.execPath, [script, 'version-cut', '--version', version, '--repo-root', cwd, '--json'], {
+    cwd,
+    encoding: 'utf8',
+  })
+  if (result.status !== 0) {
+    const error = new Error(result.stderr.trim() || 'distribution version cut failed')
+    error.exitCode = result.status || 1
+    throw error
+  }
+  const parsed = JSON.parse(result.stdout)
+  if (!Array.isArray(parsed.changed) || parsed.changed.length === 0) {
+    const error = new Error('distribution version cut returned no changed files')
+    error.exitCode = 1
+    throw error
+  }
+  return parsed.changed
+}
+
 export function applyRelease({
   version,
   date,
   cwd = process.cwd(),
   changelogSection = null,
+  cutDistribution = cutDistributionVersion,
   now = new Date(),
 } = {}) {
   if (!parseSemver(version)) {
@@ -115,6 +137,11 @@ export function applyRelease({
   writeFileSync(changelogPath, insertChangelog(previous, { version, date: stamp, section: changelogSection }))
   changed.push('CHANGELOG.md')
 
+  if (files.includes(DISTRIBUTION_MANIFEST)) {
+    changed.push(...cutDistribution({ version, cwd }))
+    return { version, date: stamp, changed: [...new Set(changed)] }
+  }
+
   if (files.includes('package.json')) {
     writeFileSync(join(cwd, 'package.json'), bumpPackageJson(readFileSync(join(cwd, 'package.json'), 'utf8'), version))
     changed.push('package.json')

package/skills/engineering/rush-release/scripts/plan.mjs

@@ -22,6 +22,7 @@ const SECTION_BY_TYPE = {
 }
 const INTERNAL_TYPES = new Set(['build', 'chore', 'ci', 'docs', 'style', 'test'])
 const SECTION_ORDER = ['Breaking', 'Added', 'Changed', 'Removed', 'Fixed', 'Security']
+export const DISTRIBUTION_MANIFEST = 'skills/distribution/manifest.json'
 
 export function parseSemver(input) {
   const match = SEMVER_RE.exec(String(input || '').trim())
@@ -104,7 +105,24 @@ export function renderChangelog({ version, date, changes }) {
   return `${lines.join('\n')}\n`
 }
 
+function distributionVersion(text) {
+  try {
+    const manifest = JSON.parse(text)
+    const targets = (manifest.sources ?? [])
+      .flatMap((source) => source.renderTargets ?? [])
+      .filter((target) => target.id === 'public-npm')
+    if (targets.length !== 1 || !parseSemver(targets[0].version)) return null
+    return formatVersion(parseSemver(targets[0].version))
+  } catch {
+    return null
+  }
+}
+
 export function discoverVersionFiles(root) {
+  const distributionPath = join(root, DISTRIBUTION_MANIFEST)
+  if (existsSync(distributionPath) && distributionVersion(readFileSync(distributionPath, 'utf8'))) {
+    return [DISTRIBUTION_MANIFEST]
+  }
   const files = []
   for (const name of ['package.json', 'package-lock.json', 'pyproject.toml', 'VERSION']) {
     if (existsSync(join(root, name))) files.push(name)
@@ -113,6 +131,9 @@ export function discoverVersionFiles(root) {
 }
 
 export function currentVersionFromFiles(root, files = discoverVersionFiles(root)) {
+  if (files.includes(DISTRIBUTION_MANIFEST)) {
+    return distributionVersion(readFileSync(join(root, DISTRIBUTION_MANIFEST), 'utf8'))
+  }
   if (files.includes('package.json')) {
     const pkg = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'))
     const parsed = parseSemver(pkg.version)
@@ -146,12 +167,19 @@ function versionFilesAt(sha, cwd) {
     .split('\n')
     .map((line) => line.trim())
     .filter(Boolean))
+  if (tree.has(DISTRIBUTION_MANIFEST)) {
+    const version = distributionVersion(git(['show', `${sha}:${DISTRIBUTION_MANIFEST}`], cwd))
+    if (version) return [DISTRIBUTION_MANIFEST]
+  }
   return ['package.json', 'package-lock.json', 'pyproject.toml', 'VERSION']
     .filter((name) => tree.has(name))
 }
 
 function versionFromGitFiles(sha, files, cwd) {
   const contents = (path) => git(['show', `${sha}:${path}`], cwd)
+  if (files.includes(DISTRIBUTION_MANIFEST)) {
+    return distributionVersion(contents(DISTRIBUTION_MANIFEST))
+  }
   if (files.includes('package.json')) {
     const parsed = parseSemver(JSON.parse(contents('package.json')).version)
     if (parsed) return formatVersion(parsed)