@1aboveio/skills 1.0.1 → 1.0.3

package/skills/engineering/contributing/scripts/persist-conventions.test.mjs

@@ -0,0 +1,118 @@
+// Tests for persist-conventions: the real CLI against real files in a temp repo.
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { spawnSync } from 'node:child_process'
+import { lstatSync, mkdtempSync, readFileSync, readlinkSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { markers } from './persist-conventions-core.mjs'
+
+const CLI = fileURLToPath(new URL('./persist-conventions.mjs', import.meta.url))
+const [START, END] = markers('tracker')
+
+function withRepo(fn, remote) {
+  const dir = mkdtempSync(join(tmpdir(), 'contributing-'))
+  try {
+    if (remote) {
+      spawnSync('git', ['init', '-q', dir])
+      spawnSync('git', ['-C', dir, 'remote', 'add', 'origin', remote])
+    }
+    return fn(dir, (name) => readFileSync(join(dir, name), 'utf8'))
+  } finally {
+    rmSync(dir, { recursive: true, force: true })
+  }
+}
+
+function run(dir, ...args) {
+  const res = spawnSync(process.execPath, [CLI, '--repo-root', dir, ...args], { encoding: 'utf8' })
+  return { code: res.status, out: res.stdout }
+}
+
+test('--write creates CONTRIBUTING.md with the section, the repo from origin, and the Linear projects', () => {
+  withRepo((dir, read) => {
+    const { code } = run(dir, '--linear-project', 'Checkout Risk', '--write')
+    assert.equal(code, 0)
+    const text = read('CONTRIBUTING.md')
+    assert.ok(text.startsWith('# Contributing\n'))
+    assert.ok(text.includes(START) && text.includes(END))
+    assert.match(text, /GitHub issues on `acme\/widgets`/)
+    assert.match(text, /Linear \(projects: Checkout Risk\)/)
+    assert.match(text, /gh issue list --repo acme\/widgets/)
+    assert.doesNotMatch(text, /\{\{/)
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('an https remote and an explicit --github-repo both name the repo', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--write').code, 0)
+    assert.match(read('CONTRIBUTING.md'), /GitHub issues on `acme\/widgets`\. Product work is tracked in Linear\./)
+  }, 'https://github.com/acme/widgets')
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--github-repo', 'acme/other', '--write').code, 0)
+    assert.match(read('CONTRIBUTING.md'), /`acme\/other`/)
+  })
+})
+
+test('without a GitHub remote or --github-repo it refuses with exit 2 and writes nothing', () => {
+  withRepo((dir) => {
+    const { code, out } = run(dir, '--write')
+    assert.equal(code, 2)
+    assert.match(out, /--github-repo/)
+    assert.throws(() => readFileSync(join(dir, 'CONTRIBUTING.md')))
+  })
+})
+
+test('--if-missing appends to an existing CONTRIBUTING.md once, then leaves the section alone', () => {
+  withRepo((dir, read) => {
+    writeFileSync(join(dir, 'CONTRIBUTING.md'), '# Contributing\n\nRun the tests.\n')
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    const first = read('CONTRIBUTING.md')
+    assert.ok(first.startsWith('# Contributing\n\nRun the tests.\n'))
+    assert.ok(first.includes(START))
+
+    const edited = first.replace('acme/widgets`. Product', 'acme/widgets`. Hand-edited. Product')
+    writeFileSync(join(dir, 'CONTRIBUTING.md'), edited)
+    const { code, out } = run(dir, '--if-missing', '--linear-project', 'Other', '--write')
+    assert.equal(code, 0)
+    assert.match(out, /already present/)
+    assert.equal(read('CONTRIBUTING.md'), edited)
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('without --write it previews and writes nothing', () => {
+  withRepo((dir) => {
+    const { code, out } = run(dir)
+    assert.equal(code, 0)
+    assert.match(out, /CONTRIBUTING\.md: would create/)
+    assert.throws(() => readFileSync(join(dir, 'CONTRIBUTING.md')))
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('the first run indexes CONTRIBUTING.md from AGENTS.md and links CLAUDE.md, once', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    assert.match(read('AGENTS.md'), /\[CONTRIBUTING\.md\]\(CONTRIBUTING\.md\).*issue tracking/)
+    assert.ok(lstatSync(join(dir, 'CLAUDE.md')).isSymbolicLink())
+    assert.equal(readlinkSync(join(dir, 'CLAUDE.md')), 'AGENTS.md')
+  }, 'git@github.com:acme/widgets.git')
+  withRepo((dir, read) => {
+    writeFileSync(join(dir, 'AGENTS.md'), '# Agents\n\nSee CONTRIBUTING.md for everything.\n')
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    assert.equal(read('AGENTS.md'), '# Agents\n\nSee CONTRIBUTING.md for everything.\n')
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('--if-missing restores a missing AGENTS.md index even when the section is already present', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--write').code, 0)
+    const section = read('CONTRIBUTING.md')
+    writeFileSync(join(dir, 'AGENTS.md'), '# Agents\n')
+    const { code, out } = run(dir, '--if-missing', '--write')
+    assert.equal(code, 0)
+    assert.match(out, /already present; 1 index file\(s\) written/)
+    assert.match(read('AGENTS.md'), /^# Agents\n\n## Contributing\n/)
+    assert.equal(read('CONTRIBUTING.md'), section)
+  }, 'git@github.com:acme/widgets.git')
+})

package/skills/engineering/e2e-test/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: e2e-test
 description: "Playwright end-to-end standard: the 3-tier suite (render-health / functional / journey), generated route manifest, and presentation sweep. Use when browser routes or user flows ship or change, or a Playwright test flakes. NOT for non-browser tests, defining what to test (ensure-coverage), the curated ALIVE/DEAD golden-path gate (golden-path), or CI workflow YAML (github-actions)."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # E2E Testing Standard

package/skills/engineering/engineering-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: engineering-runtime
 description: Internal support package for shared Engineering Workflow executable behavior. Never select or invoke this package as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Engineering Runtime

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -11,6 +11,7 @@
     "golden-path",
     "test-quality",
     "better-review",
+    "contributing",
     "engineering-runtime"
   ],
   "dependencies": [
@@ -368,7 +369,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "ede57e946935943c0a9738f61f98a681de40ac829f15b506b3d555af3c837d5e",
+      "contentDigest": "cce3cfb21f16ea64b5b008ef9970b1cdf4cf2b1410f32105e3b305821acf1c1f",
       "digestExcludes": []
     },
     {
@@ -381,7 +382,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "342e1e3d8622a8c0ea731ea547d81307f9668dc3b47cec48e2d656644429d59b",
+      "contentDigest": "c87e5250fe86e4e01f5bf8d4db59f77893de385bba4fc34742429147b22b5253",
       "digestExcludes": []
     },
     {
@@ -394,7 +395,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "22baa247d353404a8f5d62118fd5413a0dcab8b31ea8d4a149a366119935728a",
+      "contentDigest": "5e449cef39b924bddd4b24cf64ea63b5b93e745194100d797ddd830bd00a97b7",
       "digestExcludes": []
     },
     {
@@ -407,7 +408,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "d6c36b7fe99028bb50ce426179582fbf5f26acc10eabf64ea7b539c3d7bb4e94",
+      "contentDigest": "35b0a26911041468eda83f0b3829f343806d39292a381984de39fef2f813ec4b",
       "digestExcludes": []
     },
     {
@@ -420,7 +421,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "f9d590fea8293be09e612bf3a7a2710838be170dc467633ee51e78964fc0a604",
+      "contentDigest": "b9e265715330e802d711d0a47012bc32c91d882656e227530f51b08976672d20",
       "digestExcludes": []
     },
     {
@@ -433,7 +434,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "12cc3a98706ee99d2d7196a03b75488c57617e7fcac51f5c1cc7ff4e8b458cd3",
+      "contentDigest": "6b4736a329dcf2d35eeb74ea019aaa39b82fb129fbd735e55d68c3bab063d046",
       "digestExcludes": []
     },
     {
@@ -446,7 +447,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "4295daaf41ab71b8553eda46aed7d715243839c58876e7d59d6edf4a2488c5e8",
+      "contentDigest": "d2645ec3b2b28cc08cd4026d6ffb7e56d43e31031c024004b79a07a5fc59bb25",
       "digestExcludes": []
     },
     {
@@ -459,7 +460,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "0f4f8ba5b8c072a056eaf9fdadcb23b0d2cbd15da35bd9c61eb133f544f7a48e",
+      "contentDigest": "61708f1a0dd9024f7cc1c99661c074cee6299587220f22ce197d2ec312a79370",
       "digestExcludes": []
     },
     {
@@ -472,7 +473,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "4fb9681275ad9d4505939a987f9c6c48ad7edd5e1620f3bfcb8b64b33c1c307a",
+      "contentDigest": "ece6ce482174817c58344af70149085a594df54b8e70e8535ec267e26f5e00ab",
       "digestExcludes": []
     },
     {
@@ -485,7 +486,20 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "6fd11ca849b3cd62e2d723b0857ce83cd47bef74f6c563bc790e0d5fa19a94ea",
+      "contentDigest": "ddaf8300548bcf2628fa6b6f6933885e05dc0451f5ca0e9bb6629fcca2c673bb",
+      "digestExcludes": []
+    },
+    {
+      "installName": "contributing",
+      "ownership": "owned",
+      "sourcePath": "skills/engineering/contributing",
+      "expectedSource": {
+        "id": "first-party",
+        "type": "first-party",
+        "repository": "1aboveio/ai",
+        "revision": "main"
+      },
+      "contentDigest": "00c5971a8363fc1382afa6914707e764c9d3d0cb76a8e3a3ffcfd1d9d5fd5da5",
       "digestExcludes": []
     },
     {
@@ -498,13 +512,13 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "c112b4366f5db260f0d9256c471d7ca76b9a97346a257645665b58f0c0feb17a",
+      "contentDigest": "1599a61cc8f82eec8dd1b426604ec55ba65c503e4c793c5e57670e737e765462",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "54e0cb4f3d607e8babde1a5cb3dee9e1c659fb55696a3a431d69d541363da645",
+  "releaseIdentity": "5d71cce8b6dec3bb1fe3ad66fa046bdc870d197d110685d2d8981410c56f5686",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -575,16 +589,17 @@
           "golden-path",
           "test-quality",
           "better-review",
+          "contributing",
           "engineering-runtime"
         ],
         "commands": [
           {
             "transport": "https",
-            "command": "npx skills@1.5.22 add 1aboveio/ai --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+            "command": "npx skills@1.5.22 add 1aboveio/ai --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review contributing engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
           },
           {
             "transport": "ssh",
-            "command": "npx skills@1.5.22 add git@github.com:1aboveio/ai.git --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+            "command": "npx skills@1.5.22 add git@github.com:1aboveio/ai.git --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review contributing engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -16,6 +16,7 @@ export const WORKFLOW_OWNED_MEMBERS = deepFreeze([
   'golden-path',
   'test-quality',
   'better-review',
+  'contributing',
   'engineering-runtime',
 ]);
 

package/skills/engineering/ensure-coverage/SKILL.md

@@ -2,7 +2,7 @@
 name: ensure-coverage
 description: "Define or audit behavior-first test criteria — ACs, required test levels, mock/integration/E2E policy — across three axes: breadth (Coverage Ledger), depth (over-mocking), presentation (perceivability of browser surfaces). NOT judging whether a single test is any good (test-quality), authoring browser tests (e2e-test), reviewing a PR (better-review), or delivering issues (resolve-issues)."
 disable-model-invocation: true
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Ensure Coverage

package/skills/engineering/golden-path/SKILL.md

@@ -3,7 +3,7 @@ name: golden-path
 description: "Golden-path E2E: the short list of user journeys whose failure blocks a release, kept in a repo as one contract (golden-paths.json) with a generated GOLDEN_PATHS.md and a generated GitHub Actions workflow, and run against a local build or a deployed URL for an ALIVE/DEAD verdict. Use to set golden paths up in a repo ('init golden paths', 'add golden-path CI'), to migrate an older smoke.manifest.json or a hand-built smoke setup ('audit', 'migrate smoke'), to add, change, or remove a golden path, to ask 'is the build alive?' or run them before a PR or release, or when a change touches a flow listed in GOLDEN_PATHS.md. NOT for writing the Playwright specs themselves (e2e-test), deciding what a change must prove (ensure-coverage), or general workflow YAML (github-actions)."
 dependencies:
   - e2e-test
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Golden path

package/skills/engineering/harness-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: harness-runtime
 description: Internal import-only library shared by first-party engineering packages. Not a workflow skill; never select or invoke it as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Harness Runtime

package/skills/engineering/resolve-issues/SKILL.md

@@ -8,7 +8,7 @@ dependencies:
   - better-review
   - golden-path
   - harness-runtime
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve issues

package/skills/engineering/resolve-release/SKILL.md

@@ -4,7 +4,7 @@ description: "Slash/explicit-only (/resolve-release). Full GitHub Flow release f
 disable-model-invocation: true
 metadata:
   workflow-role: coordinator
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve release

package/skills/engineering/rush-issues/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-issues
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush issues (shortcut of resolve-issues)

package/skills/engineering/rush-release/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-release
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush release (shortcut of resolve-release)

package/skills/engineering/test-quality/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: test-quality
 description: "Seven principles for tests that catch real bugs, and an audit that reports weak, redundant, and not-coverage tests without fixing them. Use when writing, changing, or reviewing tests, or when asked whether tests are useful, redundant, over-mocked, flaky, only assert static text, or test config files, or asked to make a slow test suite faster without losing coverage, or when the user asks to write the testing conventions into a repo's CONTRIBUTING.md. NOT defining what a spec must prove (ensure-coverage) or authoring browser tests (e2e-test)."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Test Quality

package/skills/engineering/test-quality/scripts/persist-conventions-core.mjs

@@ -5,7 +5,8 @@
 // section, so no main-module guard here.
 //
 // Byte-identical copies live in test-quality (Testing conventions), github-flow
-// (CI conventions, Delivery) and data-catalog (Data catalog conventions);
+// (CI conventions, Delivery), data-catalog (Data catalog conventions) and
+// contributing (Issue tracking);
 // skills/conventions-sections.test.mjs keeps them identical and proves the sections
 // coexist in one file.
 //
@@ -22,7 +23,7 @@ const MENTIONS_CONTRIBUTING = /(?:^|[^\w-])CONTRIBUTING\.md/
 export const AGENTS_SECTION = [
   '## Contributing',
   '',
-  `Follow [${CONTRIBUTING_FILE}](${CONTRIBUTING_FILE}) when writing, reviewing, or delivering code: tests, CI, data definitions, and what to do after each commit.`,
+  `Follow [${CONTRIBUTING_FILE}](${CONTRIBUTING_FILE}) when writing, reviewing, or delivering code, or creating issues: tests, CI, data definitions, issue tracking, and what to do after each commit.`,
   '',
 ].join('\n')
 

package/skills/risk-compliance/compliance-audit/SKILL.md

@@ -2,7 +2,7 @@
 name: compliance-audit
 version: 2.9.0
 description: "Audit operations against financial-compliance checklists (AML/KYC, VARS, PCI-DSS, TPA oversight, onboarding, transaction monitoring). Produces tracker.md (with a tracker.xlsx export) and phase-trail.md with layered validation; cites evidence by original filename. Input: reg-parser or the built-in VARS checklist."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Compliance Audit

package/skills/risk-compliance/contract-compare/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: contract-compare
 description: "Compare two or more contracts side-by-side for structured diff, gap analysis, and benchmarking. Use when: comparing contracts or agreements, contract diff, compare terms, vendor-vs-vendor, compare our template vs theirs, compliance gap between contracts. NOT for single-contract risk review — use contract-review for that."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Contract Compare

package/skills/risk-compliance/contract-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: contract-review
 description: "Review contracts for legal, commercial, and compliance risks via convert → chunk review → merge → validate (+ optional mandate preprocessing). Use for reviewing, auditing, or checking any contract, agreement, NDA, MSA, or SLA; input a file path (PDF/DOCX/TXT) or pasted text."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Contract Review

package/skills/risk-compliance/doc-authenticity/SKILL.md

@@ -3,7 +3,7 @@ name: doc-authenticity
 version: 0.4.1
 description: "Screen PDF documents and raster images for fabrication, tampering, Photoshop or other image-editor use, and content validity. Detects file type, runs format-specific authenticity forensics, classifies bank statements, conversation logs, invoices, agreements, and other documents, then applies type-specific validity checks. Produces separate authenticity (NO_EVIDENCE_OF_MODIFICATION / SUSPICIOUS / LIKELY_MODIFIED / INCONCLUSIVE) and validity (VALID / INVALID / INCONCLUSIVE) verdicts. Use whenever a user asks whether a document, screenshot, scan, statement, invoice, contract, chat log, receipt, or payment evidence is genuine, original, edited, Photoshopped, manipulated, fake, or valid."
 disable-model-invocation: true
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Document and Image Authenticity

package/skills/risk-compliance/fraud-analysis/SKILL.md

@@ -10,7 +10,7 @@ description: >
   impact, and a business report. Use for fraud, scam, mule, account-takeover,
   chargeback, dispute, transfer, collection, or payout risk analysis even when the
   user does not name this skill.
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Fraud Analysis

package/skills/risk-compliance/payment-analysis/SKILL.md

@@ -14,7 +14,7 @@ description: >
   transactions" — even if they do not say payment-analysis. Do NOT use for
   supervised fraud-rule mining (fraud-analysis) or TLD / MCC-miscoding
   clusters (tld-detection).
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Payment Analysis

package/skills/risk-compliance/report-writing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: report-writing
 description: "Convert compliance audit findings into audience-formatted reports. Four styles: VARS Review Report (Visa's official 2025 template, required verbatim for VARS engagements), Audit Report (compliance team), External Assessment (regulators/external auditors), Management Report (board/C-suite). Use whenever audit output needs to become a deliverable, even just 'write up the findings'."
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Report Writing

package/skills/risk-compliance/similar-domain/SKILL.md

@@ -8,7 +8,7 @@ description: >
   links, an entity chain, and a watchlist for the operator's next domains.
   Not transaction data (tld-detection) or fraud rules (fraud-analysis).
 disable-model-invocation: true
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Similar Domain

package/skills/risk-compliance/tld-detection/SKILL.md

@@ -11,7 +11,7 @@ description: >
   with a ≤3-sentence summary.
   Not payment-analysis, fraud-analysis, or website research (similar-domain).
 disable-model-invocation: true
-release-version: 0.38.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # TLD Detection