@1aboveio/skills 1.0.0 → 1.0.2

package/skills/core/plain-language/SKILL.md

@@ -0,0 +1,57 @@
+---
+name: plain-language
+description: "Session mode: every reply and status line in plain language — lead with the point, everyday words, full sentences, no filler — in English or Chinese, until turned off. Use for /plain-language, \"plain language mode\", \"talk plainly\", \"说人话\", or when the user's instructions say to use plain-language. Turn off with \"/plain-language off\" or \"normal mode\". NOT for writing a document (write-doc) or reviewing one (editorial-review)."
+release-version: 0.39.0
+---
+**Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
+# Plain language
+
+Write every reply in this style for the rest of the session, including status lines and
+summaries, until the user says `/plain-language off` or "normal mode". A switch to another
+reply style (such as caveman) also ends it.
+
+- Invoked with no other request: reply in one line that the mode is on. Otherwise do not
+  mention the mode; just answer in it.
+- Invoked with `off`: reply in one line that the mode is off, and stop following this page.
+- Code, commands, file paths, identifiers, error text and commit messages stay exact.
+- Follow the section for the reply's language; a mixed reply follows both.
+
+## Every reply
+
+- **Lead with the point.** The answer or recommendation first, then the reasons.
+- **Cut every word that does no work.** No greeting, no restating the question, no recap
+  of what you just said.
+- **Fit the length to the question.** A short question gets a short answer; add detail
+  only when the reader needs it to act.
+- **Use the short everyday word.** Explain a needed technical term in a few words the first
+  time. Never leverage, robust, seamless, holistic, streamline, delve.
+- **Name who does what.** "The script deletes the branch", not "the branch is deleted".
+- **State findings plainly; hedge only real uncertainty, and say what it depends on.**
+- **Write full sentences, not telegraphic notes.** Keep if, when, because and but.
+  Example: "It is 0 if there were no collections," not "0 when none."
+- **Give every range its endpoints and say which are included.**
+- **When "and" and "or" meet in one condition, group them.** Give each condition its subject.
+- **Make every "it", "this" and "they" point to one obvious noun.**
+- **Never add a number, date, condition or cause you do not have,** and never turn "may"
+  into "will".
+- One thought per sentence; most sentences under 25 words.
+- Between tool calls, write one plain sentence on what you are doing and why, or nothing.
+
+## 中文回复
+
+- 先给结论，再给理由；不写问候式开场、宣传口号和空泛形容。
+- 写完整的句子，不写电报体。示例：`若窗口内无收款，则为 0`，而不是 `无收款为 0`。
+- 区间和阈值写明端点，并写明端点是否包含。
+- 并列的条件逐个写全对象。示例：`客户已认证，且客户是个人或商户`，而不是 `客户是个人或商户且已认证`。
+- 指代可能不清时，用具体名称替代「该」「其」「此」「上述」「相关」。
+- 不用掩盖具体动作的词，改写为实际含义：赋能 → 提供；抓手 → 关键措施；对齐 → 统一、确认一致；拉通 / 打通 → 连接。
+- 不用装饰性连接词：值得注意的是、不难看出、综上所述。
+- 中文与英文、数字之间加一个半角空格。
+
+## When a rule makes a reply worse
+
+Fix the sentence another way. Never shorten a warning, an irreversible step or an ordered
+procedure to save words.
+
+Full guides: [style-en](../house-style/references/style-en.md),
+[style-zh](../house-style/references/style-zh.md) (from `house-style`, when installed).

package/skills/core/plain-language/release-check.mjs

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const WEEK_MS = 7 * DAY_MS;
+const here = dirname(fileURLToPath(import.meta.url));
+
+function readJson(path, fallback = {}) {
+  try { return JSON.parse(readFileSync(path, 'utf8')); } catch { return fallback; }
+}
+
+function frontmatterValue(text, key) {
+  const frontmatter = /^---\n([\s\S]*?)\n---/.exec(text)?.[1] ?? '';
+  const match = new RegExp('^' + key + ':\\s*([^\\n]+)$', 'm').exec(frontmatter);
+  return match?.[1].trim().replace(/^['"]|['"]$/g, '') ?? null;
+}
+
+function repositoryOf(source) {
+  const value = String(source ?? '').trim();
+  const match = /^(?:git@github\.com:|https:\/\/github\.com\/)?([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/.exec(value);
+  return match?.[1] ?? null;
+}
+
+function stableVersion(value) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(String(value ?? '').trim());
+  return match ? match.slice(1).map(Number) : null;
+}
+
+function newer(left, right) {
+  for (let index = 0; index < 3; index += 1) {
+    if (left[index] !== right[index]) return left[index] > right[index];
+  }
+  return false;
+}
+
+function writeCache(path, value) {
+  try {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(value));
+  } catch { /* A read-only cache must not block skill use. */ }
+}
+
+function main(now = Date.now()) {
+  if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
+  const name = frontmatterValue(skill, 'name');
+  const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));
+  if (!name || !localVersion) return;
+
+  const lock = readJson(join(process.env.HOME || homedir(), '.agents', '.skill-lock.json'));
+  const entry = lock.skills?.[name];
+  const repository = repositoryOf(entry?.sourceUrl || entry?.source);
+  if (!repository) return;
+
+  const cacheRoot = process.env.XDG_CACHE_HOME || join(process.env.HOME || homedir(), '.cache');
+  const cachePath = join(cacheRoot, '1aboveio-skills', 'release-check.json');
+  const all = readJson(cachePath);
+  const cache = all[repository] && typeof all[repository] === 'object' ? all[repository] : {};
+
+  if (!cache.lastCheck || now - cache.lastCheck >= DAY_MS) {
+    const result = spawnSync('gh', ['api', 'repos/' + repository + '/releases/latest', '--jq', '.tag_name'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      timeout: 1500,
+    });
+    cache.lastCheck = now;
+    if (result.status === 0 && stableVersion(result.stdout)) cache.latestTag = result.stdout.trim();
+    else delete cache.latestTag;
+    all[repository] = cache;
+    writeCache(cachePath, all);
+  }
+
+  const latestVersion = stableVersion(cache.latestTag);
+  if (!latestVersion || !newer(latestVersion, localVersion)) return;
+  if (cache.notifiedTag === cache.latestTag && cache.notifiedAt && now - cache.notifiedAt < WEEK_MS) return;
+
+  cache.notifiedTag = cache.latestTag;
+  cache.notifiedAt = now;
+  all[repository] = cache;
+  writeCache(cachePath, all);
+  const command = `npx skills@1.5.23 add '${repository}#${cache.latestTag}' --global --agent universal claude-code --skill ${name} --yes`;
+  process.stdout.write(
+    `UPDATE_AVAILABLE: A newer 1AboveIO skills release (${cache.latestTag}) is available; this skill is `
+      + `v${localVersion.join('.')}. Ask once whether to refresh ${name}. On approval run \`${command}\`. `
+      + 'The refreshed instructions apply next session. Either way, continue the current task and do not ask again this session.\n',
+  );
+}
+
+try { main(); } catch { /* Update checks are advisory and always fail silent. */ }

package/skills/core/polish-cn/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: polish-cn
 description: "Polish the Chinese wording of a finished document or report, with a script proving every number, date, identifier, link and protected term is unchanged; prefers a Chinese model and records which ran. Use for '中文润色' or as a report skill's last step. NOT for cutting or restructuring content (editorial-review) or translating (write-doc)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Polish Chinese

package/skills/core/polish-cn/references/models.md

@@ -29,7 +29,7 @@ Set the model in the call's structured model argument. A model name inside the p
 nothing.
 
 - **Pi:** start a subagent with the provider-qualified id from Pi's model catalog, such as
-  `model: "deepseek/deepseek-v4-flash"`, and read-only tools.
+  `model: "deepseek/deepseek-flash"`, and read-only tools.
 - **Codex CLI**, with a Chinese provider configured in `~/.codex/config.toml`:
   `codex exec -m <model id> --sandbox read-only --ephemeral --skip-git-repo-check -o reply.txt "<brief and input>"`.
   Otherwise use option 2.

package/skills/core/reg-parser/SKILL.md

@@ -2,7 +2,7 @@
 name: reg-parser
 version: 1.1.0
 description: "Parse regulatory/scheme documents into structured outputs: convert a regulation (AML, VARS, PCI-DSS, KYC, GDPR) into an audit-ready compliance checklist, or trace contract clauses to a mandate source. Suggest proactively when a regulation PDF accompanies a contract review or compliance task. NOT general summarization (doc-to-md), or writing the gap analysis or policy from the checklist (write-doc)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # reg-parser

package/skills/core/terminology/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: terminology
 description: "Build and keep a project's TERMINOLOGY.md: the preferred term per concept in English, 简体 and 繁體, and the terms to avoid. Use to set it up from the project's documents, when the user settles or corrects a term, or when another writing skill needs the format. NOT for writing documents (write-doc) or the code domain model (domain-modeling)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Terminology

package/skills/core/write-doc/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: write-doc
 description: "Write or edit a Markdown document in the project's house style, using the nearest WRITING.md and a document template (BRD, PRD, gap analysis, technical spec, integration guide, commercial proposal, compliance policy, risk operations procedure, or the project's own); English, Chinese or bilingual. NOT for learning a style from samples (distill-writing), audit reports from findings (report-writing), or WeChat articles (wechat-article-writer)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Write a document

package/skills/engineering/better-review/SKILL.md

@@ -4,7 +4,7 @@ description: "Slash/explicit-only (/better-review). Single-agent adversarial rev
 disable-model-invocation: true
 dependencies:
   - engineering-runtime
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Better Review

package/skills/engineering/e2e-test/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: e2e-test
 description: "Playwright end-to-end standard: the 3-tier suite (render-health / functional / journey), generated route manifest, and presentation sweep. Use when browser routes or user flows ship or change, or a Playwright test flakes. NOT for non-browser tests, defining what to test (ensure-coverage), the curated ALIVE/DEAD golden-path gate (golden-path), or CI workflow YAML (github-actions)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # E2E Testing Standard

package/skills/engineering/engineering-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: engineering-runtime
 description: Internal support package for shared Engineering Workflow executable behavior. Never select or invoke this package as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Engineering Runtime

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -368,7 +368,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "65f5c1ea66766af0142b6dbb393ff78cbd0f76857a6a15f3d723a9a0e7781b5f",
+      "contentDigest": "2ab5f74d40dd23a789d969bb3a496093bb0c59e0779f93ab56520594f52263e8",
       "digestExcludes": []
     },
     {
@@ -381,7 +381,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "b9521718f15b2ca5a017985753636fa572afffa45fa2575781dc7df4c420b951",
+      "contentDigest": "c2dd5e6cbcb4fe7431ff9c76f64e3161a0542adadd3e1583b40ea9311e0325f2",
       "digestExcludes": []
     },
     {
@@ -394,7 +394,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "4ef4939700b85c5967d0e5a58a048362a811848ffece55127b721b067fa5f745",
+      "contentDigest": "3f03df4e4e13a0e7612a6e61f879d03f954262b71b38f4db0a74990c9d0207ef",
       "digestExcludes": []
     },
     {
@@ -407,7 +407,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "13c1a4ee34d6d6ab8e0a5f17cf2eb9b329f4bb5bb82c3b0779a69d114223ce6e",
+      "contentDigest": "1ac457031b530489676ef9cff0e2673bf128208ea71003c48538bdd3b8a6b52c",
       "digestExcludes": []
     },
     {
@@ -420,7 +420,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "f5eaad3c94aae6d1d0f8f73f8ba114960d3305251197639b32f0bfe281bd19de",
+      "contentDigest": "edecc0808b1a4e9942f7f9351a258cb55396119038133d93473f12e17c5f674d",
       "digestExcludes": []
     },
     {
@@ -433,7 +433,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "d56cd19cb929ae350cf27cfaf23d5ef657952f088b32462f2c7bcb1ec64938ef",
+      "contentDigest": "1bab372a4b5d1a94582aad5621244a88d440f883454dab36a78ba761dcc542f3",
       "digestExcludes": []
     },
     {
@@ -446,7 +446,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "ad6b8191d48dd87839f2d55bf9257fa0cd6dd42e6c794b4318c7f67e0d70eec8",
+      "contentDigest": "f3fdfb8a0fc271c89af97dc5ae181ffecb7ea14435f11defdcfe955cd18d3ba7",
       "digestExcludes": []
     },
     {
@@ -459,7 +459,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "87ffc2cee5960b54511e68b107e7606e4870b88d4708b7e8640d19581f864727",
+      "contentDigest": "1b2f489154398520dc81e3b900f7b602e29e3269dba41a458e61e83909d116c7",
       "digestExcludes": []
     },
     {
@@ -472,7 +472,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "4403cf6307c6be24dbaf599da80e9b1dd4b2fa88f07f5faae50b6cfa4f7ed9c7",
+      "contentDigest": "dc14758f5fcaad60dd9f51a7f28b43954d53d687d816034ca2cda39518b7323a",
       "digestExcludes": []
     },
     {
@@ -485,7 +485,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "4861516cb1e56b08b45598ce51420ac798c82048c131548501e7a1cae8334244",
+      "contentDigest": "78254999055badb626b2423046bc66704b8ebe324da83e9166242581b8d658f6",
       "digestExcludes": []
     },
     {
@@ -498,13 +498,13 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "05e84947b4ee2e6c0ef6d1821b025fda2bcccaa76119fbe0768f6e2380fc24eb",
+      "contentDigest": "b803a7a37fb23fa514dc5abee57244950248dc3a36d90480c785cca49a49332e",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "c4adc38a256bef4923a461688b32c7aaae0660c937d010207ce766b8b042cc87",
+  "releaseIdentity": "d47473fb493e8ce0e8c44999c8f9dd9bad253087592ce0724d1391169bee2469",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",

package/skills/engineering/ensure-coverage/SKILL.md

@@ -2,7 +2,7 @@
 name: ensure-coverage
 description: "Define or audit behavior-first test criteria — ACs, required test levels, mock/integration/E2E policy — across three axes: breadth (Coverage Ledger), depth (over-mocking), presentation (perceivability of browser surfaces). NOT judging whether a single test is any good (test-quality), authoring browser tests (e2e-test), reviewing a PR (better-review), or delivering issues (resolve-issues)."
 disable-model-invocation: true
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Ensure Coverage

package/skills/engineering/golden-path/SKILL.md

@@ -3,7 +3,7 @@ name: golden-path
 description: "Golden-path E2E: the short list of user journeys whose failure blocks a release, kept in a repo as one contract (golden-paths.json) with a generated GOLDEN_PATHS.md and a generated GitHub Actions workflow, and run against a local build or a deployed URL for an ALIVE/DEAD verdict. Use to set golden paths up in a repo ('init golden paths', 'add golden-path CI'), to migrate an older smoke.manifest.json or a hand-built smoke setup ('audit', 'migrate smoke'), to add, change, or remove a golden path, to ask 'is the build alive?' or run them before a PR or release, or when a change touches a flow listed in GOLDEN_PATHS.md. NOT for writing the Playwright specs themselves (e2e-test), deciding what a change must prove (ensure-coverage), or general workflow YAML (github-actions)."
 dependencies:
   - e2e-test
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Golden path

package/skills/engineering/harness-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: harness-runtime
 description: Internal import-only library shared by first-party engineering packages. Not a workflow skill; never select or invoke it as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Harness Runtime

package/skills/engineering/harness-runtime/model-catalog-seed.test.mjs

@@ -252,13 +252,13 @@ test('the shipped seed keeps its remaining per-harness disagreements (not collap
   assert.ok(!grok47.ids.codex, 'codex holds no grok entry')
   assert.deepEqual(grok46.tiers.pi, { high: 'deep-reasoner' }, 'grok-4.7 does not re-tier grok-4.6')
 
-  // deepseek-v4-flash moved 2026-08-13 from high:balanced-coder to max:balanced-coder.
+  // deepseek-flash moved 2026-08-13 from high:balanced-coder to max:balanced-coder.
   // The 55.4 figure previously cited as @high is the vendor max point (official board:
   // [max] 53%±4). Pinned so a silent restore of the high point has to be deliberate.
-  const flash = seed.models.find((m) => m.canonical === 'deepseek-v4-flash')
-  assert.ok(flash, 'seed must carry deepseek-v4-flash')
+  const flash = seed.models.find((m) => m.canonical === 'deepseek-flash')
+  assert.ok(flash, 'seed must carry deepseek-flash')
   for (const harness of ['claude-code', 'codex', 'pi']) {
-    assert.deepEqual(flash.tiers[harness], { max: 'balanced-coder' }, `deepseek-v4-flash@${harness}`)
+    assert.deepEqual(flash.tiers[harness], { max: 'balanced-coder' }, `deepseek-flash@${harness}`)
   }
 
   // DeepSWE measured luna at high (44.2%±2.9), so its higher-effort results are not

package/skills/engineering/harness-runtime/references/model-catalog-seed.json

@@ -315,12 +315,12 @@
       "note": "Agrees across both harnesses it is seeded from: deep-reasoner at max. CHANGED 2026-08-13: 0813 GA replaced the 2026-08-01 preview classification (claude-code high:scoped-coder, pi high:balanced-coder — that disagreement is now historical). BENCHMARK (rule 6), vendor-reported DeepSWE v1.1 62.7 — DeepSeek V4 Pro 0813 Agent comparison table, 2026-08-12/13. BenchLM cites the same 62.7 as DeepSeek V4 Pro (Max); no CI, and DeepSeek did not publish a high-effort DeepSWE number for 0813. Banked at MAX because that is the only published operating point, so it is the model's pushed point, not a throttled seat (same posture as kimi-k3). Do NOT read 62.7 down onto high — measured max→high drops on this board have run 1 to 23 points, and a high point is unclaimed until someone measures it. Like-for-like against the official board's max/xhigh cluster: luna@max 67±4 (balanced-coder at max after the 2026-08-08 reband), gpt-5.5@xhigh 67±6 (deep-reasoner), opus-4.8@max 59±2 (deep-reasoner). 62.7 sits with that deep-reasoner band and above flash's official max 53±4 / vendor 54.4, so the name ordering now tracks the evidence (flash is now also banked at max: 53%±4 official / 54.4 vendor, balanced-coder). Not on the official DeepSWE v1.1 board (last updated 2026-08-07, 21 models) — vendor number, not an independent Datacurve run. No high point is claimed; do not restore the preview high bands from this score."
     },
     {
-      "canonical": "deepseek-v4-flash",
+      "canonical": "deepseek-flash",
       "family": "deepseek",
       "ids": {
-        "claude-code": "deepseek-v4-flash",
-        "codex": "deepseek-v4-flash",
-        "pi": "deepseek/deepseek-v4-flash"
+        "claude-code": "deepseek-flash",
+        "codex": "deepseek-flash",
+        "pi": "deepseek/deepseek-flash"
       },
       "tiers": {
         "claude-code": {

package/skills/engineering/resolve-issues/SKILL.md

@@ -8,7 +8,7 @@ dependencies:
   - better-review
   - golden-path
   - harness-runtime
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve issues

package/skills/engineering/resolve-issues/scripts/preflight-models.test.mjs

@@ -197,7 +197,7 @@ test('the ask lists the discovered ladder rungs first, in ladder order, before o
     ...points,
     { id: 'deepseek/deepseek-v4-pro', effort: 'max', tier: 'deep-reasoner', family: 'deepseek', key: 'deepseek/deepseek-v4-pro@max' },
     { id: 'kimi-coding/k3', effort: 'high', tier: 'deep-reasoner', family: 'kimi', key: 'kimi-coding/k3@high' },
-    { id: 'deepseek/deepseek-v4-flash', effort: 'max', tier: 'balanced-coder', family: 'deepseek', key: 'deepseek/deepseek-v4-flash@max' },
+    { id: 'deepseek/deepseek-flash', effort: 'max', tier: 'balanced-coder', family: 'deepseek', key: 'deepseek/deepseek-flash@max' },
   ]
   const high = recommendImplementer(many, 'high', 'pi')
   const highAsk = buildAsk(many.find((p) => p.key === high.key), many, rankReviewers(many, high, 'pi'), { risk: 'high', harness: 'pi' })

package/skills/engineering/resolve-release/SKILL.md

@@ -4,7 +4,7 @@ description: "Slash/explicit-only (/resolve-release). Full GitHub Flow release f
 disable-model-invocation: true
 metadata:
   workflow-role: coordinator
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve release

package/skills/engineering/rush-issues/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-issues
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush issues (shortcut of resolve-issues)

package/skills/engineering/rush-release/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-release
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush release (shortcut of resolve-release)

package/skills/engineering/test-quality/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: test-quality
 description: "Seven principles for tests that catch real bugs, and an audit that reports weak, redundant, and not-coverage tests without fixing them. Use when writing, changing, or reviewing tests, or when asked whether tests are useful, redundant, over-mocked, flaky, only assert static text, or test config files, or asked to make a slow test suite faster without losing coverage, or when the user asks to write the testing conventions into a repo's CONTRIBUTING.md. NOT defining what a spec must prove (ensure-coverage) or authoring browser tests (e2e-test)."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Test Quality

package/skills/risk-compliance/compliance-audit/SKILL.md

@@ -2,7 +2,7 @@
 name: compliance-audit
 version: 2.9.0
 description: "Audit operations against financial-compliance checklists (AML/KYC, VARS, PCI-DSS, TPA oversight, onboarding, transaction monitoring). Produces tracker.md (with a tracker.xlsx export) and phase-trail.md with layered validation; cites evidence by original filename. Input: reg-parser or the built-in VARS checklist."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Compliance Audit

package/skills/risk-compliance/contract-compare/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: contract-compare
 description: "Compare two or more contracts side-by-side for structured diff, gap analysis, and benchmarking. Use when: comparing contracts or agreements, contract diff, compare terms, vendor-vs-vendor, compare our template vs theirs, compliance gap between contracts. NOT for single-contract risk review — use contract-review for that."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Contract Compare

package/skills/risk-compliance/contract-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: contract-review
 description: "Review contracts for legal, commercial, and compliance risks via convert → chunk review → merge → validate (+ optional mandate preprocessing). Use for reviewing, auditing, or checking any contract, agreement, NDA, MSA, or SLA; input a file path (PDF/DOCX/TXT) or pasted text."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Contract Review

package/skills/risk-compliance/doc-authenticity/SKILL.md

@@ -3,7 +3,7 @@ name: doc-authenticity
 version: 0.4.1
 description: "Screen PDF documents and raster images for fabrication, tampering, Photoshop or other image-editor use, and content validity. Detects file type, runs format-specific authenticity forensics, classifies bank statements, conversation logs, invoices, agreements, and other documents, then applies type-specific validity checks. Produces separate authenticity (NO_EVIDENCE_OF_MODIFICATION / SUSPICIOUS / LIKELY_MODIFIED / INCONCLUSIVE) and validity (VALID / INVALID / INCONCLUSIVE) verdicts. Use whenever a user asks whether a document, screenshot, scan, statement, invoice, contract, chat log, receipt, or payment evidence is genuine, original, edited, Photoshopped, manipulated, fake, or valid."
 disable-model-invocation: true
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Document and Image Authenticity

package/skills/risk-compliance/fraud-analysis/SKILL.md

@@ -10,7 +10,7 @@ description: >
   impact, and a business report. Use for fraud, scam, mule, account-takeover,
   chargeback, dispute, transfer, collection, or payout risk analysis even when the
   user does not name this skill.
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Fraud Analysis

package/skills/risk-compliance/payment-analysis/SKILL.md

@@ -14,7 +14,7 @@ description: >
   transactions" — even if they do not say payment-analysis. Do NOT use for
   supervised fraud-rule mining (fraud-analysis) or TLD / MCC-miscoding
   clusters (tld-detection).
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Payment Analysis

package/skills/risk-compliance/report-writing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: report-writing
 description: "Convert compliance audit findings into audience-formatted reports. Four styles: VARS Review Report (Visa's official 2025 template, required verbatim for VARS engagements), Audit Report (compliance team), External Assessment (regulators/external auditors), Management Report (board/C-suite). Use whenever audit output needs to become a deliverable, even just 'write up the findings'."
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Report Writing

package/skills/risk-compliance/similar-domain/SKILL.md

@@ -8,7 +8,7 @@ description: >
   links, an entity chain, and a watchlist for the operator's next domains.
   Not transaction data (tld-detection) or fraud rules (fraud-analysis).
 disable-model-invocation: true
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Similar Domain

package/skills/risk-compliance/tld-detection/SKILL.md

@@ -11,7 +11,7 @@ description: >
   with a ≤3-sentence summary.
   Not payment-analysis, fraud-analysis, or website research (similar-domain).
 disable-model-invocation: true
-release-version: 0.36.0
+release-version: 0.39.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # TLD Detection