@1aboveio/skills 0.20.3 → 0.20.4

package/README.md

@@ -57,8 +57,9 @@ Running `install` with no `--group` opens the interactive bundle picker; `update
 - `--disable-tdd` — keep TDD installed but allow only explicit user invocation.
 
 Selecting several groups (interactive picker, repeated `--group`, or `--all`) installs their
-members as one native `skills add` per skill from the unpacked package. A failure is reported by
-name, blocks only transitive dependents, and never aborts unrelated skills. Every native add uses `--yes` because
+members in bulk: adjacent members from one source share one native `skills add` from the unpacked
+package. Every member is digest-verified afterward, so a failure remains attributed by name,
+blocks only transitive dependents, and never aborts unrelated source batches. Every native add uses `--yes` because
 `skills@1.5.22` has no independent `--symlink` flag: this selects the default canonical store plus
 per-harness symlinks without an installation-method prompt, and also confirms replacement of each
 planned same-named skill. The coordinator still owns group and new-member consent before planning.
@@ -104,11 +105,11 @@ copy. The default is No; `--yes` accepts archival non-interactively. Removal is
 same pinned native Skills CLI, only after the declared replacement is installed or already current.
 Declined or failed archival remains in selection memory so a later update offers it again.
 
-Install and update are best-effort per skill: they continue after a single skill failure except for
-skills whose required dependency is unavailable, summarize
+Install and update are best-effort per member over bulk source commands: they continue after a
+member failure except for skills whose required dependency is unavailable, summarize
 every skill as succeeded, unchanged, declined, or failed, and exit non-zero if anything failed. There
 is no rollback or transactional group update; the native CLI remains the sole filesystem write
-authority. Selection memory follows the same per-skill rule: it is rewritten when
+authority. Selection memory follows the same per-member rule: it is rewritten when
 at least one user-facing member succeeded or was already unchanged, holding exactly those members —
 failed and declined members are omitted — and a run with no user-facing success leaves the prior
 file untouched.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1aboveio/skills",
-  "version": "0.20.3",
+  "version": "0.20.4",
   "description": "Install the 1AboveIO first-party skill groups through the native Skills CLI.",
   "license": "MIT",
   "type": "module",

package/runtime/skills/distribution/generated/recipes.json

@@ -24,7 +24,7 @@
       "id": "first-party",
       "type": "first-party",
       "package": "@1aboveio/skills",
-      "version": "0.20.3",
+      "version": "0.20.4",
       "updatePolicy": "pinned-npm-version",
       "members": [
         {
@@ -263,7 +263,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -297,7 +297,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -341,7 +341,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -374,7 +374,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -417,7 +417,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -445,7 +445,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -483,7 +483,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -511,7 +511,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -549,7 +549,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -579,7 +579,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -619,7 +619,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -647,7 +647,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -685,7 +685,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -715,7 +715,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -755,7 +755,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -787,7 +787,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime",
@@ -827,7 +827,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -853,7 +853,7 @@
             "sourceId": "first-party",
             "sourceType": "first-party",
             "package": "@1aboveio/skills",
-            "version": "0.20.3",
+            "version": "0.20.4",
             "installPath": null,
             "members": [
               "harness-runtime"
@@ -885,7 +885,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.20.3",
+          "version": "0.20.4",
           "installPath": null,
           "members": [
             "harness-runtime",
@@ -945,7 +945,7 @@
           "sourceId": "first-party",
           "sourceType": "first-party",
           "package": "@1aboveio/skills",
-          "version": "0.20.3",
+          "version": "0.20.4",
           "installPath": null,
           "members": [
             "harness-runtime",

package/runtime/skills/distribution/scripts/bundles.mjs

@@ -305,19 +305,14 @@ function localFirstPartyCommand(command, localRoot, groupId) {
   return command.replace(NATIVE_ADD_SOURCE, (_match, prefix) => `${prefix}${shellArgument(localRoot)}`);
 }
 
-// The coordinator executes one native add PER SKILL (#1129) rather than coalescing a whole source
-// into one invocation. A coalesced add can only attribute a failure to the entire source; per-skill
-// adds let the run record exactly which skill failed, continue with the remaining skills, and keep
-// only the succeeded skills in selection memory. Recipe step/member order is preserved
-// (dependency-first), and a member shared by several selected groups (harness-runtime) is still
-// planned exactly once, at its first occurrence. The pinned native CLI has no `--symlink` selector,
-// so the coordinator adds `--yes` to choose its default symlink deployment without one installation-
-// method prompt per skill. Attribution, ordering and deduplication remain coordinator-owned.
-const SKILL_TAIL = /^(.*? --skill )(.+?)( && .*)?$/;
+// The coordinator preserves generated dependency/member order, then coalesces each contiguous run
+// from one source into a native add. A member shared by groups is included once and retains every
+// owning selection for memory. Per-member attribution comes from post-install digest verification,
+// not process count.
+const SKILL_TAIL = /^(.*? --skill )(.+?)( --yes)?( && .*)?$/;
 
-// The generated step binds its runtime suffix (` && npm ci ...`) to the whole coalesced command.
-// Per skill it belongs to the runtime member's own add, so the dependency install runs only after
-// engineering-runtime itself was actually added — never after a sibling, never when it was skipped.
+// The generated step binds its runtime suffix (` && npm ci ...`) to engineering-runtime. Keep it on
+// the source batch only when that member remains selected after digest and consent filtering.
 const RUNTIME_MEMBER = 'engineering-runtime';
 
 function skillsFromCommand(command) {
@@ -329,14 +324,14 @@ function skillsFromCommand(command) {
 function withSkills(command, skills) {
   const match = SKILL_TAIL.exec(command);
   if (!match) throw new Error(`Native add has no --skill list to rewrite: ${command}`);
-  return `${match[1]}${skills.join(' ')}${match[3] || ''}`;
+  return `${match[1]}${skills.join(' ')}${match[3] || ''}${match[4] || ''}`;
 }
 
 function withYesFlag(command) {
   // --yes must bind to `skills`, not to a trailing `&& npm ci ...`.
   const match = SKILL_TAIL.exec(command);
   if (!match) return `${command} --yes`;
-  return `${match[1]}${match[2]} --yes${match[3] || ''}`;
+  return `${match[1]}${match[2]} --yes${match[4] || ''}`;
 }
 
 export function planBundleCommands(action, groupIds, {
@@ -363,12 +358,10 @@ export function planBundleCommands(action, groupIds, {
     if (!requested.includes(groupId)) requested.push(groupId);
   }
 
-  // Plan from the selected groups (not recipes.all). A public package may expose only a subset of
-  // groups while still shipping a full recipes.all from the private catalog; using that all-plan
-  // would install skills that are not in the selection / not in the package.
+  // Plan individual member records first. The execution boundary coalesces adjacent records from
+  // the same source without weakening per-member dependency, policy, or selection metadata.
   const planned = [];
   const plannedByMember = new Map();
-
   for (const groupId of requested) {
     const group = groups.get(groupId);
     for (const step of group[action].steps) {
@@ -379,14 +372,10 @@ export function planBundleCommands(action, groupIds, {
       const command = step.sourceId === 'first-party'
         ? localFirstPartyCommand(generated.command, localRoot, groupId)
         : generated.command;
-      // An explicit member subset (the digest skip) removes members from the native add but never
-      // reorders the rest: the remaining skills keep recipe order, support dependency first.
-      // Declined new members (#1128) are also filtered out, but consent never applies to support
-      // dependencies (harness-runtime): they are silent install dependencies, not capabilities.
       const skills = skillsFromCommand(command)
         .filter((skill) => !skipMembers?.has(skill))
         .filter((skill) => SUPPORT_GROUPS.has(skill) || !omit.has(skill));
-      const suffix = SKILL_TAIL.exec(command)?.[3] || '';
+      const suffix = SKILL_TAIL.exec(command)?.[4] || '';
       const bare = suffix ? command.slice(0, command.length - suffix.length) : command;
       for (const skill of skills) {
         const existing = plannedByMember.get(skill);
@@ -396,8 +385,6 @@ export function planBundleCommands(action, groupIds, {
         }
         let skillCommand = withSkills(bare, [skill]);
         if (suffix && skill === RUNTIME_MEMBER) skillCommand = `${skillCommand}${suffix}`;
-        // The pinned CLI has no --symlink flag. --yes is its only supported way to select the
-        // default symlink deployment without presenting the install-method chooser.
         skillCommand = withYesFlag(skillCommand);
         const invocationPolicy = skill === 'tdd' && enableTdd
           ? undefined
@@ -415,22 +402,51 @@ export function planBundleCommands(action, groupIds, {
           ...(memberMetadata.get(skill)?.requires?.length > 0
             ? { requires: memberMetadata.get(skill).requires }
             : {}),
+          metadata: memberMetadata.get(skill) ?? { installName: skill },
         };
         plannedByMember.set(skill, entry);
         planned.push(entry);
       }
     }
   }
-
   return planned;
 }
 
-// Continue-on-failure (#1129): planned per-skill adds run in dependency order. A failed skill blocks
-// only members that require it; unrelated later skills still run. The caller summarizes the buckets,
-// decides the exit status, and persists only members whose required closure is ready.
-export function runBundleCommands(commands, {
+export function coalesceBundleCommands(commands) {
+  const batches = [];
+  for (const planned of commands) {
+    const previous = batches.at(-1);
+    if (!previous || previous.sourceId !== planned.sourceId || previous.cwd !== planned.cwd) {
+      batches.push({
+        sourceId: planned.sourceId,
+        members: [planned],
+        command: planned.command,
+        cwd: planned.cwd,
+        failureMessage: planned.failureMessage,
+      });
+      continue;
+    }
+    previous.members.push(planned);
+    const suffix = previous.members.map(({ command }) => SKILL_TAIL.exec(command)?.[4] || '').find(Boolean) || '';
+    const bare = suffix && previous.command.endsWith(suffix)
+      ? previous.command.slice(0, previous.command.length - suffix.length)
+      : previous.command;
+    previous.command = withSkills(bare, previous.members.map(({ member }) => member));
+    if (suffix) previous.command = `${previous.command}${suffix}`;
+  }
+  for (const batch of batches) {
+    batch.groupIds = [...new Set(batch.members.flatMap((member) => member.groupIds))];
+    batch.groupName = [...new Set(batch.members.map((member) => member.groupName))].join(', ');
+  }
+  return batches;
+}
+
+// Source batches continue independently. Within each batch, command status is only process evidence;
+// installed-content verification is the per-member authority used for attribution and memory.
+export function runBundleCommands(batches, {
   execute = (command, cwd) => spawnSync('/bin/bash', ['-lc', command], { cwd, stdio: 'inherit' }),
   applyPolicy = applyInvocationPolicy,
+  verifyMember,
   skillsRoot,
   stdout = process.stdout,
   stderr = process.stderr,
@@ -439,35 +455,79 @@ export function runBundleCommands(commands, {
   const succeeded = [];
   const failed = [];
   const available = new Set(satisfiedMembers);
-  for (const planned of commands) {
-    const blockedBy = (planned.requires ?? []).filter((dependency) => !available.has(dependency));
-    if (blockedBy.length > 0) {
-      stderr.write(`Dependency failed for ${planned.member}: ${blockedBy.join(', ')} is not available\n`);
-      failed.push({ planned, status: 1, blockedBy });
-      continue;
+  for (const candidate of batches) {
+    const legacySingle = !Array.isArray(candidate.members);
+    const batch = legacySingle ? { ...candidate, members: [candidate] } : candidate;
+    let runnable = [...batch.members];
+    let changed = true;
+    while (changed) {
+      changed = false;
+      const runnableNames = new Set(runnable.map(({ member }) => member));
+      for (const planned of [...runnable]) {
+        const blockedBy = (planned.requires ?? [])
+          .filter((dependency) => !available.has(dependency) && !runnableNames.has(dependency));
+        if (blockedBy.length === 0) continue;
+        stderr.write(`Dependency failed for ${planned.member}: ${blockedBy.join(', ')} is not available\n`);
+        failed.push({ planned, status: 1, blockedBy });
+        runnable = runnable.filter((candidate) => candidate !== planned);
+        changed = true;
+      }
     }
-    stdout.write(`\nInstalling ${planned.member} (${planned.sourceId})...\n`);
-    const result = execute(planned.command, planned.cwd);
-    if (result.status === 0) {
-      try {
-        if (planned.invocationPolicy) {
+    if (runnable.length === 0) continue;
+    let command = batch.command;
+    let batchSuffix = '';
+    if (!legacySingle) {
+      batchSuffix = SKILL_TAIL.exec(batch.command)?.[4] || '';
+      command = withSkills(batch.command, runnable.map(({ member }) => member));
+      if (batchSuffix && !runnable.some(({ member }) => member === RUNTIME_MEMBER)) {
+        command = command.slice(0, command.length - batchSuffix.length);
+      }
+    }
+    stdout.write(`\nInstalling ${runnable.map(({ member }) => member).join(', ')} (${batch.sourceId})...\n`);
+    const result = execute(command, batch.cwd);
+    const status = Number.isInteger(result.status) ? result.status : 1;
+    const policyFailures = new Set();
+    if (status === 0) {
+      for (const planned of runnable) {
+        if (!planned.invocationPolicy) continue;
+        try {
           applyPolicy({
             installName: planned.member,
             policy: planned.invocationPolicy,
             ...(skillsRoot ? { skillsRoot } : {}),
           });
+        } catch (error) {
+          stderr.write(`Invocation policy failed for ${planned.member}: ${error.message}\n`);
+          policyFailures.add(planned.member);
         }
-        succeeded.push(planned);
-        available.add(planned.member);
+      }
+    } else {
+      stderr.write(`${batch.failureMessage}\n`);
+    }
+    for (const planned of runnable) {
+      if (policyFailures.has(planned.member)) {
+        failed.push({ planned, status: 1 });
         continue;
+      }
+      if (status !== 0 && batchSuffix && planned.member === RUNTIME_MEMBER) {
+        stderr.write(`Post-install command failed for ${planned.member}\n`);
+        failed.push({ planned, status });
+        continue;
+      }
+      try {
+        const verified = verifyMember ? verifyMember(planned) : status === 0;
+        if (verified) {
+          succeeded.push(planned);
+          available.add(planned.member);
+        } else {
+          stderr.write(`Post-install verification failed for ${planned.member}\n`);
+          failed.push({ planned, status: status || 1 });
+        }
       } catch (error) {
-        stderr.write(`Invocation policy failed for ${planned.member}: ${error.message}\n`);
+        stderr.write(`Post-install verification failed for ${planned.member}: ${error.message}\n`);
         failed.push({ planned, status: 1 });
-        continue;
       }
     }
-    stderr.write(`${planned.failureMessage}\n`);
-    failed.push({ planned, status: Number.isInteger(result.status) ? result.status : 1 });
   }
   return { succeeded, failed };
 }
@@ -873,6 +933,7 @@ function selectionIncludesTdd(groupIds, catalog) {
 export async function runCli(args, {
   execute,
   applyPolicy,
+  verifyMember,
   stdin = process.stdin,
   stdout = process.stdout,
   stderr = process.stderr,
@@ -968,10 +1029,11 @@ export async function runCli(args, {
       skipMembers,
       omitMembers: declined,
     });
+    const batches = coalesceBundleCommands(commands);
     if (parsed.dryRun) {
       if (buckets) printUpdateBuckets(stdout, buckets);
-      for (const planned of commands) {
-        stdout.write(`\n${planned.groupName} / ${planned.sourceId} / ${planned.member}\n${planned.command}\n`);
+      for (const batch of batches) {
+        stdout.write(`\n${batch.groupName} / ${batch.sourceId} / ${batch.members.map(({ member }) => member).join(', ')}\n${batch.command}\n`);
       }
       if (buckets && commands.length === 0 && archiveCandidates.length === 0) {
         stdout.write('Nothing to do: every accepted skill is already up to date.\n');
@@ -984,9 +1046,21 @@ export async function runCli(args, {
       const skipping = buckets.unchanged.map((entry) => entry.member).filter((member) => !SUPPORT_GROUPS.has(member));
       if (skipping.length > 0) stdout.write(`Up to date, skipping: ${skipping.join(', ')}\n`);
     }
-    const { succeeded, failed } = runBundleCommands(commands, {
+    const verificationTransport = resolveBundleTransport(transport);
+    const verificationSources = new Map(readRecipes(verificationTransport.recipesPath).sources
+      .map((source) => [source.id, source]));
+    const verifyInstalledMember = verifyMember ?? (execute ? undefined : (planned) => {
+      const source = verificationSources.get(planned.sourceId);
+      return classifyInstalledMember(source, planned.metadata, {
+        enableTdd,
+        localRoot: verificationTransport.localRoot,
+        skillsRoot,
+      }).status === 'unchanged';
+    });
+    const { succeeded, failed } = runBundleCommands(batches, {
       execute,
       applyPolicy,
+      verifyMember: verifyInstalledMember,
       skillsRoot,
       stdout,
       stderr,
@@ -1001,13 +1075,14 @@ export async function runCli(args, {
       [...commands, ...(buckets?.unchanged ?? [])],
       stderr,
     ));
+    const coherentSucceeded = succeeded.filter((planned) => readyMembers.has(planned.member));
     const archives = runArchiveCommands(
       archiveCandidates.filter((candidate) => !declinedArchives.has(candidate.installName)),
       readyMembers,
       { execute, skillsRoot, stdout, stderr },
     );
     printRunSummary(stdout, {
-      succeeded,
+      succeeded: coherentSucceeded,
       failed,
       unchanged: buckets?.unchanged.map((entry) => entry.member),
       declined: [...declined],

package/runtime/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -86,7 +86,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.20.3',
+    version: '0.20.4',
   },
   matt: {
     id: 'matt-pocock',

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -342,7 +342,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "eff6c7b5931bce5b2265a619bccddd371a89df6ce7bc2edc74f11d00060a71dd",
       "digestExcludes": []
@@ -355,7 +355,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "d97abeff7bdc5ae2e4be2f631d09dba46d4753ce1e67334793364329af59f066",
       "digestExcludes": []
@@ -368,7 +368,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "fe2ec3bae2bfec2dbef19db30ab0272391d7c1d9b6893341a76a9f339adefc57",
       "digestExcludes": []
@@ -381,7 +381,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "58b0556228a9271cf9e33727a05fc08a4fdfd29512ec0936b169f0a55d60e6ef",
       "digestExcludes": []
@@ -394,7 +394,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "d28dd4d3c4394df0cc7e6b48d0e5daa7d2277701ea459e39fba99acf1d8ff670",
       "digestExcludes": []
@@ -407,7 +407,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "56fb5843788c9073b0d5a65ffa72bd7d2fa80dc6a1ff06fb0e19fab513c51502",
       "digestExcludes": []
@@ -420,7 +420,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "f048fd00c69f2dc666fc7a3096cfeee6dfba73933bfb69602f3f0e26159798cc",
       "digestExcludes": []
@@ -433,7 +433,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
       "contentDigest": "d533684db4483cfc90be2aa7161980b6548057ef18a4b54f0cdbcd53c79dd46d",
       "digestExcludes": []
@@ -446,15 +446,15 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3"
+        "version": "0.20.4"
       },
-      "contentDigest": "aa7b7dbeec2fd5d64883f4b6bf5ae99a3f77cad84f635cfbdf7cb1999de362e6",
+      "contentDigest": "86a91b567eabe6143a4ecac3cbec7271da252978202f292e287bb3a8da95a797",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "4804a31efab8c7a93325ebdfeee74ce04c89130470d4eb5a878b37ac183266cd",
+  "releaseIdentity": "ffa735d74d402c79fbd8cbca332b415422884ee88f914412d4aa88c2d1353cb9",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -512,7 +512,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.20.3",
+        "version": "0.20.4",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -528,7 +528,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.20.3 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.20.4 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -86,7 +86,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.20.3',
+    version: '0.20.4',
   },
   matt: {
     id: 'matt-pocock',