@1aboveio/skills 0.19.3 → 0.20.1

package/README.md

@@ -65,11 +65,11 @@ planned same-named skill. The coordinator still owns group and new-member consen
 
 ## Groups in this package
 
-- `engineering-workflow` — Engineering Workflow: e2e-test, ensure-coverage, implement-and-pr, rush-issues, resolve-issues, rush-release, resolve-release, review-pr, smoke, engineering-runtime
+- `engineering-workflow` — Engineering Workflow: e2e-test, ensure-coverage, implement-and-pr, rush-issues, rush-release, review-pr, smoke, engineering-runtime
 - `delivery-infrastructure` — Delivery Infrastructure: cloud-build, cloud-debug, cloud-deploy, docker, google-cloud, mergify, podman
 - `backend` — Backend: app-debug, python-backend
 - `data-science` — Data Science: airflow, pyspark
-- `payment` — Payment: fraud-analysis, payment-analysis
+- `payment` — Payment: fraud-analysis, payment-analysis, tld-detection
 - `fullstack` — Fullstack: better-auth, monorepo, nextjs-fullstack, prisma-setup, shadcn, zod-v4
 
 Internal dependencies, installed with the groups above and not selectable on their own: `harness-runtime`.
@@ -97,6 +97,11 @@ non-interactively.
 Declined skills are never uninstalled by the coordinator and stay out of the remembered acceptance,
 so the next update asks again.
 
+When a release archives a previously accepted skill, `update` asks before removing that installed
+copy. The default is No; `--yes` accepts archival non-interactively. Removal is performed by the
+same pinned native Skills CLI, only after the declared replacement is installed or already current.
+Declined or failed archival remains in selection memory so a later update offers it again.
+
 Install and update are best-effort per skill: they continue after a single skill failure, summarize
 every skill as succeeded, unchanged, declined, or failed, and exit non-zero if anything failed. There
 is no rollback or transactional group update; the native CLI remains the sole filesystem write
@@ -117,7 +122,7 @@ owns — copy the command for the group you want to remove:
 
 ```
 # Engineering Workflow
-npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime
+npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime
 # Delivery Infrastructure
 npx skills@1.5.22 remove --global --agent universal claude-code --skill cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman
 # Backend
@@ -125,7 +130,7 @@ npx skills@1.5.22 remove --global --agent universal claude-code --skill app-debu
 # Data Science
 npx skills@1.5.22 remove --global --agent universal claude-code --skill airflow pyspark
 # Payment
-npx skills@1.5.22 remove --global --agent universal claude-code --skill fraud-analysis payment-analysis
+npx skills@1.5.22 remove --global --agent universal claude-code --skill fraud-analysis payment-analysis tld-detection
 # Fullstack
 npx skills@1.5.22 remove --global --agent universal claude-code --skill better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1aboveio/skills",
-  "version": "0.19.3",
+  "version": "0.20.1",
   "description": "Install the 1AboveIO first-party skill groups through the native Skills CLI.",
   "license": "MIT",
   "type": "module",

package/runtime/skills/distribution/generated/recipes.json

@@ -3,12 +3,28 @@
   "generatedFrom": "skills/distribution/manifest.json",
   "renderTarget": "public-npm",
   "lifecycleAuthority": "native-skills-cli",
+  "archives": [
+    {
+      "installName": "resolve-issues",
+      "formerGroupId": "engineering-workflow",
+      "archivedIn": "0.20.0",
+      "replacement": "rush-issues",
+      "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill resolve-issues"
+    },
+    {
+      "installName": "resolve-release",
+      "formerGroupId": "engineering-workflow",
+      "archivedIn": "0.20.0",
+      "replacement": "rush-release",
+      "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill resolve-release"
+    }
+  ],
   "sources": [
     {
       "id": "first-party",
       "type": "first-party",
       "package": "@1aboveio/skills",
-      "version": "0.19.3",
+      "version": "0.20.1",
       "updatePolicy": "pinned-npm-version",
       "members": [
         {
@@ -35,24 +51,12 @@
           "role": "skill",
           "licenseResponsibility": "1aboveio-mit"
         },
-        {
-          "installName": "resolve-issues",
-          "path": "skills/engineering/resolve-issues",
-          "role": "skill",
-          "licenseResponsibility": "1aboveio-mit"
-        },
         {
           "installName": "rush-release",
           "path": "skills/engineering/rush-release",
           "role": "skill",
           "licenseResponsibility": "1aboveio-mit"
         },
-        {
-          "installName": "resolve-release",
-          "path": "skills/engineering/resolve-release",
-          "role": "skill",
-          "licenseResponsibility": "1aboveio-mit"
-        },
         {
           "installName": "review-pr",
           "path": "skills/engineering/review-pr",
@@ -149,6 +153,12 @@
           "role": "skill",
           "licenseResponsibility": "1aboveio-mit"
         },
+        {
+          "installName": "tld-detection",
+          "path": "skills/payment/tld-detection",
+          "role": "skill",
+          "licenseResponsibility": "1aboveio-mit"
+        },
         {
           "installName": "better-auth",
           "path": "skills/fullstack/better-auth",
@@ -208,7 +218,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -216,9 +226,7 @@
               "ensure-coverage",
               "implement-and-pr",
               "rush-issues",
-              "resolve-issues",
               "rush-release",
-              "resolve-release",
               "review-pr",
               "smoke",
               "engineering-runtime"
@@ -226,7 +234,7 @@
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
               }
             ],
             "onFailure": {
@@ -244,7 +252,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -252,9 +260,7 @@
               "ensure-coverage",
               "implement-and-pr",
               "rush-issues",
-              "resolve-issues",
               "rush-release",
-              "resolve-release",
               "review-pr",
               "smoke",
               "engineering-runtime"
@@ -262,7 +268,7 @@
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
               }
             ],
             "onFailure": {
@@ -273,7 +279,7 @@
         ]
       },
       "uninstall": {
-        "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime",
+        "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime",
         "removesDependencies": false
       }
     },
@@ -290,7 +296,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -323,7 +329,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -366,7 +372,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -394,7 +400,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -432,7 +438,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -460,7 +466,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -498,17 +504,18 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
               "fraud-analysis",
-              "payment-analysis"
+              "payment-analysis",
+              "tld-detection"
             ],
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime fraud-analysis payment-analysis"
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime fraud-analysis payment-analysis tld-detection"
               }
             ],
             "onFailure": {
@@ -526,17 +533,18 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
               "fraud-analysis",
-              "payment-analysis"
+              "payment-analysis",
+              "tld-detection"
             ],
             "commands": [
               {
                 "transport": "local",
-                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime fraud-analysis payment-analysis"
+                "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime fraud-analysis payment-analysis tld-detection"
               }
             ],
             "onFailure": {
@@ -547,7 +555,7 @@
         ]
       },
       "uninstall": {
-        "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill fraud-analysis payment-analysis",
+        "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill fraud-analysis payment-analysis tld-detection",
         "removesDependencies": false
       }
     },
@@ -564,7 +572,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -596,7 +604,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -636,7 +644,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -662,7 +670,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.19.3",
+            "version": "0.20.1",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -694,7 +702,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.19.3",
+          "version": "0.20.1",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -702,9 +710,7 @@
             "ensure-coverage",
             "implement-and-pr",
             "rush-issues",
-            "resolve-issues",
             "rush-release",
-            "resolve-release",
             "review-pr",
             "smoke",
             "engineering-runtime",
@@ -721,6 +727,7 @@
             "pyspark",
             "fraud-analysis",
             "payment-analysis",
+            "tld-detection",
             "better-auth",
             "monorepo",
             "nextjs-fullstack",
@@ -731,7 +738,7 @@
           "commands": [
             {
               "transport": "local",
-              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis tld-detection better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
             }
           ],
           "onFailure": {
@@ -749,7 +756,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.19.3",
+          "version": "0.20.1",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -757,9 +764,7 @@
             "ensure-coverage",
             "implement-and-pr",
             "rush-issues",
-            "resolve-issues",
             "rush-release",
-            "resolve-release",
             "review-pr",
             "smoke",
             "engineering-runtime",
@@ -776,6 +781,7 @@
             "pyspark",
             "fraud-analysis",
             "payment-analysis",
+            "tld-detection",
             "better-auth",
             "monorepo",
             "nextjs-fullstack",
@@ -786,7 +792,7 @@
           "commands": [
             {
               "transport": "local",
-              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+              "command": "npx skills@1.5.22 add . --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis tld-detection better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
             }
           ],
           "onFailure": {
@@ -797,7 +803,7 @@
       ]
     },
     "uninstall": {
-      "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues resolve-issues rush-release resolve-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 harness-runtime"
+      "command": "npx skills@1.5.22 remove --global --agent universal claude-code --skill e2e-test ensure-coverage implement-and-pr rush-issues rush-release review-pr smoke engineering-runtime cloud-build cloud-debug cloud-deploy docker google-cloud mergify podman app-debug python-backend airflow pyspark fraud-analysis payment-analysis tld-detection better-auth monorepo nextjs-fullstack prisma-setup shadcn zod-v4 harness-runtime"
     }
   }
 }

package/runtime/skills/distribution/scripts/bundles.mjs

@@ -204,6 +204,20 @@ export function newMemberCandidates(action, groupIds, priorState, transport = {}
   return candidates;
 }
 
+// Archived members are offered only to users who previously accepted them in the same group.
+// This keeps retirement explicit and prevents a release from treating filesystem presence as
+// consent. A successful removal drops the old acceptance; a decline or failure preserves it so a
+// later update offers the archive again.
+export function archivedMemberCandidates(action, groupIds, priorState, transport = {}) {
+  if (action !== 'update' || !priorState) return [];
+  const recipes = readRecipes(resolveBundleTransport(transport).recipesPath);
+  const selected = new Set(groupIds);
+  const acceptedByGroup = new Map(priorState.groups
+    .map((group) => [group.id, new Set(group.acceptedMembers)]));
+  return (recipes.archives ?? []).filter((archive) => selected.has(archive.formerGroupId)
+    && acceptedByGroup.get(archive.formerGroupId)?.has(archive.installName));
+}
+
 // Prior acceptance for the new-member consent delta on explicit selections (picker, --group,
 // --all). ABSENT memory is tolerated — a first-time selection needs no delta — but CORRUPT memory
 // fails closed with the same clear error as the no-arg replay: guessing acceptance from a file we
@@ -574,7 +588,8 @@ install without --group/--all opens the interactive picker; update without them
 remembered selection (\${XDG_STATE_HOME:-~/.local/state}/1aboveio-skills/selection.json).
 When a remembered group's current recipe declares members you have not accepted yet, each new skill
 is offered individually and defaults to No; --yes accepts them all, --dry-run lists them without
-prompting. TDD implicit model invocation is enabled by default; --disable-tdd makes TDD explicit-only,
+prompting. Retired accepted skills are likewise kept by default; --yes archives them through the
+native Skills CLI after their replacement is current. TDD implicit model invocation is enabled by default; --disable-tdd makes TDD explicit-only,
 and --enable-tdd restores implicit invocation. --manual-tdd remains a compatibility alias for
 --disable-tdd.
 `;
@@ -749,6 +764,63 @@ async function consentNewMembers(candidates, { yes, stdin, stdout, stderr }) {
   return declined;
 }
 
+async function consentArchivedMembers(candidates, { yes, stdin, stdout, stderr }) {
+  const declined = new Set();
+  if (yes) {
+    for (const candidate of candidates) stdout.write(`Accepting archive of retired skill "${candidate.installName}" (--yes)\n`);
+    return declined;
+  }
+  if (!stdin.isTTY) {
+    for (const candidate of candidates) {
+      stderr.write(`Keeping retired skill "${candidate.installName}": no interactive terminal (default No; re-run with --yes to archive)\n`);
+      declined.add(candidate.installName);
+    }
+    return declined;
+  }
+  const prompter = createLinePrompter({ stdin, stdout });
+  for (const candidate of candidates) {
+    const answer = await prompter.ask(
+      `Archive retired skill "${candidate.installName}" (replaced by ${candidate.replacement})? [y/N] `,
+    );
+    if (/^y(es)?$/i.test(answer)) stdout.write(`Archiving ${candidate.installName}\n`);
+    else {
+      stdout.write(`Keeping ${candidate.installName}\n`);
+      declined.add(candidate.installName);
+    }
+  }
+  return declined;
+}
+
+function runArchiveCommands(candidates, readyMembers, {
+  execute = (command) => spawnSync('/bin/bash', ['-lc', command], { stdio: 'inherit' }),
+  skillsRoot,
+  stdout = process.stdout,
+  stderr = process.stderr,
+} = {}) {
+  const succeeded = [];
+  const failed = [];
+  for (const candidate of candidates) {
+    if (!readyMembers.has(candidate.replacement)) {
+      stderr.write(`Keeping ${candidate.installName}: replacement ${candidate.replacement} was not installed or current\n`);
+      failed.push({ candidate, status: 1 });
+      continue;
+    }
+    if (!statSync(join(skillsRoot, candidate.installName), { throwIfNoEntry: false })) {
+      stdout.write(`Retired skill ${candidate.installName} is already absent.\n`);
+      succeeded.push(candidate);
+      continue;
+    }
+    stdout.write(`\nArchiving ${candidate.installName} (replaced by ${candidate.replacement})...\n`);
+    const result = execute(`${candidate.command} --yes`);
+    if (result.status === 0) succeeded.push(candidate);
+    else {
+      stderr.write(`Failed to archive retired skill ${candidate.installName}; it remains installed.\n`);
+      failed.push({ candidate, status: Number.isInteger(result.status) ? result.status : 1 });
+    }
+  }
+  return { succeeded, failed };
+}
+
 function selectionIncludesTdd(groupIds, catalog) {
   const selected = new Set(groupIds);
   return catalog.some((bundle) => selected.has(bundle.id) && bundle.members.includes('tdd'))
@@ -822,6 +894,20 @@ export async function runCli(args, {
     } else if (candidates.length > 0) {
       declined = await consentNewMembers(candidates, { yes: parsed.yes, stdin, stdout, stderr });
     }
+    const archiveCandidates = archivedMemberCandidates(parsed.action, groupIds, priorState, transport);
+    let declinedArchives = new Set();
+    if (archiveCandidates.length > 0 && parsed.dryRun) {
+      for (const candidate of archiveCandidates) {
+        stdout.write(`Retired skill "${candidate.installName}" (replaced by ${candidate.replacement}) — would prompt to archive (default: No); --yes accepts archival\n`);
+      }
+    } else if (archiveCandidates.length > 0) {
+      declinedArchives = await consentArchivedMembers(archiveCandidates, {
+        yes: parsed.yes,
+        stdin,
+        stdout,
+        stderr,
+      });
+    }
     // Digest skip (#1127): `update` classifies the accepted members against the installed tree and
     // omits the digest-equal ones from the native add. `install` never skips — it is an explicit
     // request to install/replace the selected members. Declined new members (#1128) are excluded
@@ -849,7 +935,9 @@ export async function runCli(args, {
       for (const planned of commands) {
         stdout.write(`\n${planned.groupName} / ${planned.sourceId} / ${planned.member}\n${planned.command}\n`);
       }
-      if (buckets && commands.length === 0) stdout.write('Nothing to do: every accepted skill is already up to date.\n');
+      if (buckets && commands.length === 0 && archiveCandidates.length === 0) {
+        stdout.write('Nothing to do: every accepted skill is already up to date.\n');
+      }
       return 0;
     }
     if (commands.length === 0 && buckets) {
@@ -865,6 +953,15 @@ export async function runCli(args, {
       stdout,
       stderr,
     });
+    const readyMembers = new Set([
+      ...succeeded.map((planned) => planned.member),
+      ...(buckets?.unchanged.map((entry) => entry.member) ?? []),
+    ]);
+    const archives = runArchiveCommands(
+      archiveCandidates.filter((candidate) => !declinedArchives.has(candidate.installName)),
+      readyMembers,
+      { execute, skillsRoot, stdout, stderr },
+    );
     printRunSummary(stdout, {
       succeeded,
       failed,
@@ -875,10 +972,7 @@ export async function runCli(args, {
     // native add or were already digest-equal. A group with no recordable member is omitted from
     // the written set, and a run with no recordable member at all leaves prior memory untouched;
     // a decline never becomes remembered acceptance.
-    const succeededMembers = [
-      ...succeeded.map((planned) => planned.member),
-      ...(buckets?.unchanged.map((entry) => entry.member) ?? []),
-    ];
+    const succeededMembers = [...readyMembers];
     if (succeededMembers.length > 0) {
       const renderTarget = declaredRenderTarget(transport);
       const selection = selectionForRun(parsed.action, groupIds, {
@@ -889,10 +983,22 @@ export async function runCli(args, {
         tddImplicitInvocation: enableTdd,
       });
       if (selection.groups.length > 0) {
+        const retainedArchives = new Set([
+          ...declinedArchives,
+          ...archives.failed.map((entry) => entry.candidate.installName),
+        ]);
+        for (const archive of archiveCandidates) {
+          if (!retainedArchives.has(archive.installName)) continue;
+          const group = selection.groups.find((candidate) => candidate.id === archive.formerGroupId);
+          if (group && !group.acceptedMembers.includes(archive.installName)) {
+            group.acceptedMembers.push(archive.installName);
+          }
+        }
         writeSelectionState(selection, env);
       }
     }
-    return failed.length > 0 ? failed[0].status : 0;
+    if (failed.length > 0) return failed[0].status;
+    return archives.failed.length > 0 ? archives.failed[0].status : 0;
   } catch (error) {
     stderr.write(`${error.message}\n`);
     return 2;

package/runtime/skills/engineering/engineering-runtime/scripts/workflow-coherence.mjs

@@ -288,7 +288,7 @@ function validateManifest(manifest) {
     add('digest-algorithm-invalid', 'engineering-runtime', 'The coherence digest algorithm is missing or unsupported.');
   }
   if (JSON.stringify(manifest.ownedMembers) !== JSON.stringify(WORKFLOW_OWNED_MEMBERS)) {
-    add('owned-census-invalid', 'engineering-runtime', 'The exact ten-member Workflow ownership census is missing or malformed.');
+    add('owned-census-invalid', 'engineering-runtime', 'The exact eight-member Workflow ownership census is missing or malformed.');
   }
   if (JSON.stringify(manifest.dependencies) !== JSON.stringify([
     { groupId: 'matt-pocock-toolkit', members: MATT_DEPENDENCY_MEMBERS },
@@ -297,11 +297,9 @@ function validateManifest(manifest) {
     add('dependency-census-invalid', 'engineering-runtime', 'The exact Matt and harness runtime dependency census is missing or malformed.');
   }
   if (!exactContract(manifest.dependencyClosures, WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES)) {
-    const names = new Set(Array.isArray(manifest.dependencyClosures)
-      ? manifest.dependencyClosures.map((closure) => closure?.invokedSkill)
-      : []);
-    const member = WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES.find((closure) => !names.has(closure.invokedSkill))?.invokedSkill
-      ?? 'resolve-issues';
+    const actual = Array.isArray(manifest.dependencyClosures) ? manifest.dependencyClosures : [];
+    const member = WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES.find((closure, index) =>
+      !isDeepStrictEqual(actual[index], closure))?.invokedSkill ?? 'engineering-runtime';
     add('dependency-closure-invalid', member, 'The invoked-skill dependency closure is missing, weakened, reordered or malformed.');
   }