@1aboveio/skills 1.0.2 → 1.0.3

package/skills/engineering/contributing/release-check.mjs

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const WEEK_MS = 7 * DAY_MS;
+const here = dirname(fileURLToPath(import.meta.url));
+
+function readJson(path, fallback = {}) {
+  try { return JSON.parse(readFileSync(path, 'utf8')); } catch { return fallback; }
+}
+
+function frontmatterValue(text, key) {
+  const frontmatter = /^---\n([\s\S]*?)\n---/.exec(text)?.[1] ?? '';
+  const match = new RegExp('^' + key + ':\\s*([^\\n]+)$', 'm').exec(frontmatter);
+  return match?.[1].trim().replace(/^['"]|['"]$/g, '') ?? null;
+}
+
+function repositoryOf(source) {
+  const value = String(source ?? '').trim();
+  const match = /^(?:git@github\.com:|https:\/\/github\.com\/)?([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+?)(?:\.git)?$/.exec(value);
+  return match?.[1] ?? null;
+}
+
+function stableVersion(value) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(String(value ?? '').trim());
+  return match ? match.slice(1).map(Number) : null;
+}
+
+function newer(left, right) {
+  for (let index = 0; index < 3; index += 1) {
+    if (left[index] !== right[index]) return left[index] > right[index];
+  }
+  return false;
+}
+
+function writeCache(path, value) {
+  try {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(value));
+  } catch { /* A read-only cache must not block skill use. */ }
+}
+
+function main(now = Date.now()) {
+  if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
+  const name = frontmatterValue(skill, 'name');
+  const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));
+  if (!name || !localVersion) return;
+
+  const lock = readJson(join(process.env.HOME || homedir(), '.agents', '.skill-lock.json'));
+  const entry = lock.skills?.[name];
+  const repository = repositoryOf(entry?.sourceUrl || entry?.source);
+  if (!repository) return;
+
+  const cacheRoot = process.env.XDG_CACHE_HOME || join(process.env.HOME || homedir(), '.cache');
+  const cachePath = join(cacheRoot, '1aboveio-skills', 'release-check.json');
+  const all = readJson(cachePath);
+  const cache = all[repository] && typeof all[repository] === 'object' ? all[repository] : {};
+
+  if (!cache.lastCheck || now - cache.lastCheck >= DAY_MS) {
+    const result = spawnSync('gh', ['api', 'repos/' + repository + '/releases/latest', '--jq', '.tag_name'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      timeout: 1500,
+    });
+    cache.lastCheck = now;
+    if (result.status === 0 && stableVersion(result.stdout)) cache.latestTag = result.stdout.trim();
+    else delete cache.latestTag;
+    all[repository] = cache;
+    writeCache(cachePath, all);
+  }
+
+  const latestVersion = stableVersion(cache.latestTag);
+  if (!latestVersion || !newer(latestVersion, localVersion)) return;
+  if (cache.notifiedTag === cache.latestTag && cache.notifiedAt && now - cache.notifiedAt < WEEK_MS) return;
+
+  cache.notifiedTag = cache.latestTag;
+  cache.notifiedAt = now;
+  all[repository] = cache;
+  writeCache(cachePath, all);
+  const command = `npx skills@1.5.23 add '${repository}#${cache.latestTag}' --global --agent universal claude-code --skill ${name} --yes`;
+  process.stdout.write(
+    `UPDATE_AVAILABLE: A newer 1AboveIO skills release (${cache.latestTag}) is available; this skill is `
+      + `v${localVersion.join('.')}. Ask once whether to refresh ${name}. On approval run \`${command}\`. `
+      + 'The refreshed instructions apply next session. Either way, continue the current task and do not ask again this session.\n',
+  );
+}
+
+try { main(); } catch { /* Update checks are advisory and always fail silent. */ }

package/skills/engineering/contributing/scripts/persist-conventions-core.mjs

@@ -0,0 +1,118 @@
+// persist-conventions-core — write one skill's section into a repo's
+// CONTRIBUTING.md, point AGENTS.md at the file, and make CLAUDE.md a symlink to
+// AGENTS.md (Claude Code reads CLAUDE.md, not AGENTS.md). Import-only: each skill's
+// `persist-conventions.mjs` is the always-running CLI wrapper that names its
+// section, so no main-module guard here.
+//
+// Byte-identical copies live in test-quality (Testing conventions), github-flow
+// (CI conventions, Delivery), data-catalog (Data catalog conventions) and
+// contributing (Issue tracking);
+// skills/conventions-sections.test.mjs keeps them identical and proves the sections
+// coexist in one file.
+//
+// A section sits between `conventions:<id>` markers, so a re-run replaces only
+// that block and keeps everything else, including other skills' sections.
+// Nothing is written without --write: the user triggers the write, not an agent.
+
+import fs from 'node:fs'
+import path from 'node:path'
+
+export const CONTRIBUTING_FILE = 'CONTRIBUTING.md'
+const MENTIONS_CONTRIBUTING = /(?:^|[^\w-])CONTRIBUTING\.md/
+
+export const AGENTS_SECTION = [
+  '## Contributing',
+  '',
+  `Follow [${CONTRIBUTING_FILE}](${CONTRIBUTING_FILE}) when writing, reviewing, or delivering code, or creating issues: tests, CI, data definitions, issue tracking, and what to do after each commit.`,
+  '',
+].join('\n')
+
+export function markers(id) {
+  return [`<!-- conventions:${id}:start -->`, `<!-- conventions:${id}:end -->`]
+}
+
+export function sectionBlock({ id, owner, body }) {
+  const [start, end] = markers(id)
+  const note = `<!-- Written by the ${owner} skill: re-run its persist-conventions.mjs --write to update; edit outside these markers. -->`
+  return `${start}\n${note}\n\n${body.trim()}\n${end}\n`
+}
+
+// Pure: the new CONTRIBUTING.md text given the current one (or null).
+export function renderConventions(current, id, block) {
+  if (current == null) return `# Contributing\n\n${block}`
+  const [start, end] = markers(id)
+  const from = current.indexOf(start)
+  const to = current.indexOf(end)
+  if (from !== -1 && to > from) {
+    const after = current.slice(to + end.length).replace(/^\r?\n/, '')
+    return current.slice(0, from) + block + after
+  }
+  return `${current.replace(/\s*$/, '')}\n\n${block}`
+}
+
+// Pure: the new AGENTS.md text given the current one (or null).
+export function renderAgents(current) {
+  if (current == null) return `# AGENTS.md\n\n${AGENTS_SECTION}`
+  if (MENTIONS_CONTRIBUTING.test(current)) return current
+  return `${current.replace(/\s*$/, '')}\n\n${AGENTS_SECTION}`
+}
+
+// A missing CLAUDE.md becomes a symlink to AGENTS.md.
+export const LINK_TO_AGENTS = Symbol('link CLAUDE.md to AGENTS.md')
+
+// Pure: the new CLAUDE.md text given the current one (or null). A missing file
+// becomes LINK_TO_AGENTS; a regular file keeps its content and gains the pointer
+// unless it already names AGENTS.md or CONTRIBUTING.md.
+export function renderClaude(current) {
+  if (current == null) return LINK_TO_AGENTS
+  if (/(?:^|[^\w-])(?:AGENTS|CONTRIBUTING)\.md/.test(current)) return current
+  return `${current.replace(/\s*$/, '')}\n\n${AGENTS_SECTION}`
+}
+
+export function persist(repoRoot, section, { write = false } = {}) {
+  const block = sectionBlock(section)
+  const plan = [
+    [CONTRIBUTING_FILE, (text) => renderConventions(text, section.id, block)],
+    ['AGENTS.md', renderAgents],
+    ['CLAUDE.md', renderClaude],
+  ]
+  return plan.map(([name, render]) => {
+    const file = path.join(repoRoot, name)
+    if (fs.lstatSync(file, { throwIfNoEntry: false })?.isSymbolicLink()) return { file: name, action: 'unchanged' }
+    const current = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : null
+    const next = render(current)
+    const action = current == null ? 'create' : next === current ? 'unchanged' : 'update'
+    if (next === LINK_TO_AGENTS) {
+      if (write) fs.symlinkSync('AGENTS.md', file)
+      return { file: name, action: 'link' }
+    }
+    if (write && action !== 'unchanged') fs.writeFileSync(file, next)
+    return { file: name, action }
+  })
+}
+
+// `section` = { id, owner, title, body }. Exit 0 on success, 2 on a usage error.
+export function runCli(argv, section, { cwd = process.cwd(), log = console.log } = {}) {
+  let repoRoot = cwd
+  let write = false
+  for (let i = 0; i < argv.length; i++) {
+    if (argv[i] === '--write') write = true
+    else if (argv[i] === '--repo-root' && argv[i + 1]) repoRoot = path.resolve(cwd, argv[++i])
+    else {
+      log(`persist-conventions: unknown argument ${argv[i]}`)
+      return 2
+    }
+  }
+  if (!fs.statSync(repoRoot, { throwIfNoEntry: false })?.isDirectory()) {
+    log(`persist-conventions: not a directory: ${repoRoot}`)
+    return 2
+  }
+  const results = persist(repoRoot, section, { write })
+  const done = { create: 'created', link: 'linked to AGENTS.md', update: 'updated', unchanged: 'unchanged' }
+  for (const r of results) log(`  ${r.file}: ${write || r.action === 'unchanged' ? done[r.action] : `would ${r.action}`}`)
+  const changed = results.filter((r) => r.action !== 'unchanged').length
+  log(write
+    ? `persist-conventions: ${section.title}: ${changed} file(s) written, ${results.length - changed} unchanged`
+    : `persist-conventions: ${section.title}: preview only, ${changed} file(s) would change; re-run with --write to write`)
+  return 0
+}

package/skills/engineering/contributing/scripts/persist-conventions.mjs

@@ -0,0 +1,84 @@
+// persist-conventions — the tracker routing rules as the `## Issue tracking`
+// section of a repo's CONTRIBUTING.md (../SKILL.md, First use in a repo).
+// Previews unless --write; --if-missing leaves an existing section alone.
+//
+//   node persist-conventions.mjs [--repo-root <dir>] [--github-repo <owner/name>]
+//     [--linear-project <name>]... [--if-missing] [--write]
+//
+// The GitHub repo defaults to the `origin` remote of --repo-root.
+import fs from 'node:fs'
+import path from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+import { CONTRIBUTING_FILE, LINK_TO_AGENTS, markers, renderAgents, renderClaude, runCli } from './persist-conventions-core.mjs'
+
+const ID = 'tracker'
+const TEMPLATE = fs.readFileSync(fileURLToPath(new URL('../references/tracker-conventions.md', import.meta.url)), 'utf8')
+
+function githubRepoFromRemote(url) {
+  const m = /github\.com[:/]([\w.-]+\/[\w.-]+?)(?:\.git)?\/?$/.exec(url.trim())
+  return m ? m[1] : null
+}
+
+function renderBody(githubRepo, linearProjects) {
+  const linear = linearProjects.length
+    ? ` (projects: ${linearProjects.join(', ')})`
+    : ''
+  return TEMPLATE.replaceAll('{{githubRepo}}', githubRepo).replaceAll('{{linearProjects}}', linear)
+}
+
+// The section stays as it is; only a missing AGENTS.md index or CLAUDE.md link is added.
+function indexOnly(repoRoot, write, log) {
+  let changed = 0
+  for (const [name, render] of [['AGENTS.md', renderAgents], ['CLAUDE.md', renderClaude]]) {
+    const file = path.join(repoRoot, name)
+    if (fs.lstatSync(file, { throwIfNoEntry: false })?.isSymbolicLink()) continue
+    const current = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : null
+    const next = render(current)
+    if (next === current) continue
+    changed++
+    log(`  ${name}: ${write ? 'written' : 'would change'}`)
+    if (!write) continue
+    if (next === LINK_TO_AGENTS) fs.symlinkSync('AGENTS.md', file)
+    else fs.writeFileSync(file, next)
+  }
+  return changed ? `${changed} index file(s) ${write ? 'written' : 'would change'}` : 'nothing written'
+}
+
+function main(argv, { log = console.log } = {}) {
+  const rest = []
+  const linearProjects = []
+  let githubRepo = null
+  let ifMissing = false
+  let repoRoot = process.cwd()
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i]
+    if (arg === '--linear-project' && argv[i + 1]) linearProjects.push(argv[++i])
+    else if (arg === '--github-repo' && argv[i + 1]) githubRepo = argv[++i]
+    else if (arg === '--if-missing') ifMissing = true
+    else {
+      if (arg === '--repo-root' && argv[i + 1]) repoRoot = path.resolve(argv[i + 1])
+      rest.push(arg)
+    }
+  }
+  if (!githubRepo) {
+    const remote = spawnSync('git', ['-C', repoRoot, 'remote', 'get-url', 'origin'], { encoding: 'utf8' })
+    githubRepo = remote.status === 0 ? githubRepoFromRemote(remote.stdout) : null
+  }
+  if (!githubRepo) {
+    log('persist-conventions: no GitHub origin remote; pass --github-repo <owner/name>')
+    return 2
+  }
+  if (ifMissing) {
+    const file = path.join(repoRoot, CONTRIBUTING_FILE)
+    const current = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : ''
+    if (current.includes(markers(ID)[0])) {
+      log(`persist-conventions: Issue tracking: section already present; ${indexOnly(repoRoot, argv.includes('--write'), log)}`)
+      return 0
+    }
+  }
+  const section = { id: ID, owner: 'contributing', title: 'Issue tracking', body: renderBody(githubRepo, linearProjects) }
+  return runCli(rest, section, { log })
+}
+
+process.exitCode = main(process.argv.slice(2))

package/skills/engineering/contributing/scripts/persist-conventions.test.mjs

@@ -0,0 +1,118 @@
+// Tests for persist-conventions: the real CLI against real files in a temp repo.
+import { test } from 'node:test'
+import assert from 'node:assert/strict'
+import { spawnSync } from 'node:child_process'
+import { lstatSync, mkdtempSync, readFileSync, readlinkSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import { markers } from './persist-conventions-core.mjs'
+
+const CLI = fileURLToPath(new URL('./persist-conventions.mjs', import.meta.url))
+const [START, END] = markers('tracker')
+
+function withRepo(fn, remote) {
+  const dir = mkdtempSync(join(tmpdir(), 'contributing-'))
+  try {
+    if (remote) {
+      spawnSync('git', ['init', '-q', dir])
+      spawnSync('git', ['-C', dir, 'remote', 'add', 'origin', remote])
+    }
+    return fn(dir, (name) => readFileSync(join(dir, name), 'utf8'))
+  } finally {
+    rmSync(dir, { recursive: true, force: true })
+  }
+}
+
+function run(dir, ...args) {
+  const res = spawnSync(process.execPath, [CLI, '--repo-root', dir, ...args], { encoding: 'utf8' })
+  return { code: res.status, out: res.stdout }
+}
+
+test('--write creates CONTRIBUTING.md with the section, the repo from origin, and the Linear projects', () => {
+  withRepo((dir, read) => {
+    const { code } = run(dir, '--linear-project', 'Checkout Risk', '--write')
+    assert.equal(code, 0)
+    const text = read('CONTRIBUTING.md')
+    assert.ok(text.startsWith('# Contributing\n'))
+    assert.ok(text.includes(START) && text.includes(END))
+    assert.match(text, /GitHub issues on `acme\/widgets`/)
+    assert.match(text, /Linear \(projects: Checkout Risk\)/)
+    assert.match(text, /gh issue list --repo acme\/widgets/)
+    assert.doesNotMatch(text, /\{\{/)
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('an https remote and an explicit --github-repo both name the repo', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--write').code, 0)
+    assert.match(read('CONTRIBUTING.md'), /GitHub issues on `acme\/widgets`\. Product work is tracked in Linear\./)
+  }, 'https://github.com/acme/widgets')
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--github-repo', 'acme/other', '--write').code, 0)
+    assert.match(read('CONTRIBUTING.md'), /`acme\/other`/)
+  })
+})
+
+test('without a GitHub remote or --github-repo it refuses with exit 2 and writes nothing', () => {
+  withRepo((dir) => {
+    const { code, out } = run(dir, '--write')
+    assert.equal(code, 2)
+    assert.match(out, /--github-repo/)
+    assert.throws(() => readFileSync(join(dir, 'CONTRIBUTING.md')))
+  })
+})
+
+test('--if-missing appends to an existing CONTRIBUTING.md once, then leaves the section alone', () => {
+  withRepo((dir, read) => {
+    writeFileSync(join(dir, 'CONTRIBUTING.md'), '# Contributing\n\nRun the tests.\n')
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    const first = read('CONTRIBUTING.md')
+    assert.ok(first.startsWith('# Contributing\n\nRun the tests.\n'))
+    assert.ok(first.includes(START))
+
+    const edited = first.replace('acme/widgets`. Product', 'acme/widgets`. Hand-edited. Product')
+    writeFileSync(join(dir, 'CONTRIBUTING.md'), edited)
+    const { code, out } = run(dir, '--if-missing', '--linear-project', 'Other', '--write')
+    assert.equal(code, 0)
+    assert.match(out, /already present/)
+    assert.equal(read('CONTRIBUTING.md'), edited)
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('without --write it previews and writes nothing', () => {
+  withRepo((dir) => {
+    const { code, out } = run(dir)
+    assert.equal(code, 0)
+    assert.match(out, /CONTRIBUTING\.md: would create/)
+    assert.throws(() => readFileSync(join(dir, 'CONTRIBUTING.md')))
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('the first run indexes CONTRIBUTING.md from AGENTS.md and links CLAUDE.md, once', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    assert.match(read('AGENTS.md'), /\[CONTRIBUTING\.md\]\(CONTRIBUTING\.md\).*issue tracking/)
+    assert.ok(lstatSync(join(dir, 'CLAUDE.md')).isSymbolicLink())
+    assert.equal(readlinkSync(join(dir, 'CLAUDE.md')), 'AGENTS.md')
+  }, 'git@github.com:acme/widgets.git')
+  withRepo((dir, read) => {
+    writeFileSync(join(dir, 'AGENTS.md'), '# Agents\n\nSee CONTRIBUTING.md for everything.\n')
+    assert.equal(run(dir, '--if-missing', '--write').code, 0)
+    assert.equal(read('AGENTS.md'), '# Agents\n\nSee CONTRIBUTING.md for everything.\n')
+  }, 'git@github.com:acme/widgets.git')
+})
+
+test('--if-missing restores a missing AGENTS.md index even when the section is already present', () => {
+  withRepo((dir, read) => {
+    assert.equal(run(dir, '--write').code, 0)
+    const section = read('CONTRIBUTING.md')
+    writeFileSync(join(dir, 'AGENTS.md'), '# Agents\n')
+    const { code, out } = run(dir, '--if-missing', '--write')
+    assert.equal(code, 0)
+    assert.match(out, /already present; 1 index file\(s\) written/)
+    assert.match(read('AGENTS.md'), /^# Agents\n\n## Contributing\n/)
+    assert.equal(read('CONTRIBUTING.md'), section)
+  }, 'git@github.com:acme/widgets.git')
+})

package/skills/engineering/e2e-test/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: e2e-test
 description: "Playwright end-to-end standard: the 3-tier suite (render-health / functional / journey), generated route manifest, and presentation sweep. Use when browser routes or user flows ship or change, or a Playwright test flakes. NOT for non-browser tests, defining what to test (ensure-coverage), the curated ALIVE/DEAD golden-path gate (golden-path), or CI workflow YAML (github-actions)."
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # E2E Testing Standard

package/skills/engineering/engineering-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: engineering-runtime
 description: Internal support package for shared Engineering Workflow executable behavior. Never select or invoke this package as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Engineering Runtime

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -11,6 +11,7 @@
     "golden-path",
     "test-quality",
     "better-review",
+    "contributing",
     "engineering-runtime"
   ],
   "dependencies": [
@@ -368,7 +369,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "2ab5f74d40dd23a789d969bb3a496093bb0c59e0779f93ab56520594f52263e8",
+      "contentDigest": "cce3cfb21f16ea64b5b008ef9970b1cdf4cf2b1410f32105e3b305821acf1c1f",
       "digestExcludes": []
     },
     {
@@ -381,7 +382,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "c2dd5e6cbcb4fe7431ff9c76f64e3161a0542adadd3e1583b40ea9311e0325f2",
+      "contentDigest": "c87e5250fe86e4e01f5bf8d4db59f77893de385bba4fc34742429147b22b5253",
       "digestExcludes": []
     },
     {
@@ -394,7 +395,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "3f03df4e4e13a0e7612a6e61f879d03f954262b71b38f4db0a74990c9d0207ef",
+      "contentDigest": "5e449cef39b924bddd4b24cf64ea63b5b93e745194100d797ddd830bd00a97b7",
       "digestExcludes": []
     },
     {
@@ -407,7 +408,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "1ac457031b530489676ef9cff0e2673bf128208ea71003c48538bdd3b8a6b52c",
+      "contentDigest": "35b0a26911041468eda83f0b3829f343806d39292a381984de39fef2f813ec4b",
       "digestExcludes": []
     },
     {
@@ -420,7 +421,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "edecc0808b1a4e9942f7f9351a258cb55396119038133d93473f12e17c5f674d",
+      "contentDigest": "b9e265715330e802d711d0a47012bc32c91d882656e227530f51b08976672d20",
       "digestExcludes": []
     },
     {
@@ -433,7 +434,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "1bab372a4b5d1a94582aad5621244a88d440f883454dab36a78ba761dcc542f3",
+      "contentDigest": "6b4736a329dcf2d35eeb74ea019aaa39b82fb129fbd735e55d68c3bab063d046",
       "digestExcludes": []
     },
     {
@@ -446,7 +447,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "f3fdfb8a0fc271c89af97dc5ae181ffecb7ea14435f11defdcfe955cd18d3ba7",
+      "contentDigest": "d2645ec3b2b28cc08cd4026d6ffb7e56d43e31031c024004b79a07a5fc59bb25",
       "digestExcludes": []
     },
     {
@@ -459,7 +460,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "1b2f489154398520dc81e3b900f7b602e29e3269dba41a458e61e83909d116c7",
+      "contentDigest": "61708f1a0dd9024f7cc1c99661c074cee6299587220f22ce197d2ec312a79370",
       "digestExcludes": []
     },
     {
@@ -472,7 +473,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "dc14758f5fcaad60dd9f51a7f28b43954d53d687d816034ca2cda39518b7323a",
+      "contentDigest": "ece6ce482174817c58344af70149085a594df54b8e70e8535ec267e26f5e00ab",
       "digestExcludes": []
     },
     {
@@ -485,7 +486,20 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "78254999055badb626b2423046bc66704b8ebe324da83e9166242581b8d658f6",
+      "contentDigest": "ddaf8300548bcf2628fa6b6f6933885e05dc0451f5ca0e9bb6629fcca2c673bb",
+      "digestExcludes": []
+    },
+    {
+      "installName": "contributing",
+      "ownership": "owned",
+      "sourcePath": "skills/engineering/contributing",
+      "expectedSource": {
+        "id": "first-party",
+        "type": "first-party",
+        "repository": "1aboveio/ai",
+        "revision": "main"
+      },
+      "contentDigest": "00c5971a8363fc1382afa6914707e764c9d3d0cb76a8e3a3ffcfd1d9d5fd5da5",
       "digestExcludes": []
     },
     {
@@ -498,13 +512,13 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "b803a7a37fb23fa514dc5abee57244950248dc3a36d90480c785cca49a49332e",
+      "contentDigest": "1599a61cc8f82eec8dd1b426604ec55ba65c503e4c793c5e57670e737e765462",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "d47473fb493e8ce0e8c44999c8f9dd9bad253087592ce0724d1391169bee2469",
+  "releaseIdentity": "5d71cce8b6dec3bb1fe3ad66fa046bdc870d197d110685d2d8981410c56f5686",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -575,16 +589,17 @@
           "golden-path",
           "test-quality",
           "better-review",
+          "contributing",
           "engineering-runtime"
         ],
         "commands": [
           {
             "transport": "https",
-            "command": "npx skills@1.5.22 add 1aboveio/ai --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+            "command": "npx skills@1.5.22 add 1aboveio/ai --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review contributing engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
           },
           {
             "transport": "ssh",
-            "command": "npx skills@1.5.22 add git@github.com:1aboveio/ai.git --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
+            "command": "npx skills@1.5.22 add git@github.com:1aboveio/ai.git --global --agent universal claude-code --skill harness-runtime e2e-test ensure-coverage rush-issues resolve-issues rush-release resolve-release golden-path test-quality better-review contributing engineering-runtime && npm --prefix \"$(realpath \"$HOME/.agents/skills/engineering-runtime/scripts\")\" ci --ignore-scripts"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -16,6 +16,7 @@ export const WORKFLOW_OWNED_MEMBERS = deepFreeze([
   'golden-path',
   'test-quality',
   'better-review',
+  'contributing',
   'engineering-runtime',
 ]);
 

package/skills/engineering/ensure-coverage/SKILL.md

@@ -2,7 +2,7 @@
 name: ensure-coverage
 description: "Define or audit behavior-first test criteria — ACs, required test levels, mock/integration/E2E policy — across three axes: breadth (Coverage Ledger), depth (over-mocking), presentation (perceivability of browser surfaces). NOT judging whether a single test is any good (test-quality), authoring browser tests (e2e-test), reviewing a PR (better-review), or delivering issues (resolve-issues)."
 disable-model-invocation: true
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Ensure Coverage

package/skills/engineering/golden-path/SKILL.md

@@ -3,7 +3,7 @@ name: golden-path
 description: "Golden-path E2E: the short list of user journeys whose failure blocks a release, kept in a repo as one contract (golden-paths.json) with a generated GOLDEN_PATHS.md and a generated GitHub Actions workflow, and run against a local build or a deployed URL for an ALIVE/DEAD verdict. Use to set golden paths up in a repo ('init golden paths', 'add golden-path CI'), to migrate an older smoke.manifest.json or a hand-built smoke setup ('audit', 'migrate smoke'), to add, change, or remove a golden path, to ask 'is the build alive?' or run them before a PR or release, or when a change touches a flow listed in GOLDEN_PATHS.md. NOT for writing the Playwright specs themselves (e2e-test), deciding what a change must prove (ensure-coverage), or general workflow YAML (github-actions)."
 dependencies:
   - e2e-test
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Golden path

package/skills/engineering/harness-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: harness-runtime
 description: Internal import-only library shared by first-party engineering packages. Not a workflow skill; never select or invoke it as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Harness Runtime

package/skills/engineering/resolve-issues/SKILL.md

@@ -8,7 +8,7 @@ dependencies:
   - better-review
   - golden-path
   - harness-runtime
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve issues

package/skills/engineering/resolve-release/SKILL.md

@@ -4,7 +4,7 @@ description: "Slash/explicit-only (/resolve-release). Full GitHub Flow release f
 disable-model-invocation: true
 metadata:
   workflow-role: coordinator
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve release

package/skills/engineering/rush-issues/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-issues
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush issues (shortcut of resolve-issues)

package/skills/engineering/rush-release/SKILL.md

@@ -6,7 +6,7 @@ metadata:
   workflow-role: coordinator
 dependencies:
   - resolve-release
-release-version: 0.39.0
+release-version: 0.40.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Rush release (shortcut of resolve-release)