@1aboveio/skills 1.0.8 → 1.0.9

package/skills/content/xai-search/scripts/xai_search.sh

@@ -1,187 +1,163 @@
 #!/usr/bin/env bash
-# xAI Search CLI - Search X (Twitter) and Web using xAI Responses API
-# Usage:
-#   xai_search.sh x "query" [--handles user1,user2] [--from YYYY-MM-DD] [--to YYYY-MM-DD]
-#   xai_search.sh web "query" [--domains domain1,domain2]
-
+# xAI Search CLI - native X/Web tools through the Responses API.
 set -euo pipefail
 
-# Get API key from config or environment
-if [[ -z "${XAI_API_KEY:-}" ]]; then
-  # Try to get from OpenClaw skill config
-  if command -v jq &>/dev/null && [[ -f ~/.openclaw/openclaw.json ]]; then
-    XAI_API_KEY=$(jq -r '.skills.entries["xai-search"].apiKey // empty' ~/.openclaw/openclaw.json 2>/dev/null || true)
-  fi
-fi
-
-if [[ -z "${XAI_API_KEY:-}" ]]; then
-  echo "ERROR: XAI_API_KEY not set. Set environment variable or configure in openclaw.json" >&2
-  exit 1
-fi
+usage() {
+  printf '%s\n' \
+    'Usage: xai_search.sh {x|web} "query" [options]' \
+    '' \
+    '  --handles user1,user2   X only; at most 20 handles' \
+    '  --from YYYY-MM-DD       X only; inclusive UTC midnight' \
+    '  --to YYYY-MM-DD         X only; exclusive UTC midnight' \
+    '  --domains d1,d2         Web only; at most 5 domains' \
+    '  --model MODEL           Default: grok-4-1-fast-reasoning' \
+    '  --json                  Raw JSON instead of text and citation URLs' \
+    '  --help                  Show this help' \
+    '' \
+    'XAI_BASE_URL defaults to https://api.x.ai/v1; trailing slashes are removed.' \
+    'Requests go only to <base>/responses (HTTPS); redirects are not followed.' \
+    'XAI_API_KEY overrides skills.entries["xai-search"].apiKey in ~/.openclaw/openclaw.json.' \
+    'For Sub2API, use its public /v1 base, a Grok-group key, and --model with an available model (e.g. grok-4.5).' \
+    'Native search requires Responses, not REST Chat Completions or legacy search_parameters.' \
+    'Handle/date filters do not constrain thread fetches. CSV entries must be nonempty.' \
+    'Sub2API search-call surcharges are not exact upstream fetched-post/profile cost reconciliation.'
+}
 
-if ! command -v jq &>/dev/null; then
-  echo "ERROR: jq is required but not installed. Install jq to use this script." >&2
-  exit 1
-fi
+fail() { printf 'ERROR: %s\n' "$1" >&2; exit "${2:-2}"; }
 
+if [[ "${1:-}" == --help || "${1:-}" == -h ]]; then usage; exit 0; fi
 MODE="${1:-}"
 QUERY="${2:-}"
-
-if [[ -z "$MODE" || -z "$QUERY" ]]; then
-  echo "Usage:" >&2
-  echo "  xai_search.sh x \"query\" [options]    # Search X (Twitter)" >&2
-  echo "  xai_search.sh web \"query\" [options]  # Search the web" >&2
-  echo "" >&2
-  echo "Options:" >&2
-  echo "  --handles user1,user2   Only search posts from these handles (X only)" >&2
-  echo "  --from YYYY-MM-DD       Start date" >&2
-  echo "  --to YYYY-MM-DD         End date" >&2
-  echo "  --domains d1,d2         Only search these domains (web only)" >&2
-  echo "  --model MODEL           Model to use (default: grok-4-1-fast-reasoning)" >&2
-  echo "  --json                  Output raw JSON response" >&2
-  exit 2
-fi
-
+if [[ -z "$MODE" || -z "$QUERY" ]]; then usage >&2; exit 2; fi
+[[ "$MODE" == x || "$MODE" == web ]] || fail "mode must be 'web' or 'x'"
 shift 2
 
-# Parse options
 HANDLES=""
 FROM_DATE=""
 TO_DATE=""
 DOMAINS=""
 MODEL="grok-4-1-fast-reasoning"
 RAW_JSON=0
-
 while [[ $# -gt 0 ]]; do
-  case $1 in
-    --handles)
-      HANDLES="$2"
-      shift 2
-      ;;
-    --from)
-      FROM_DATE="$2"
-      shift 2
-      ;;
-    --to)
-      TO_DATE="$2"
-      shift 2
-      ;;
-    --domains)
-      DOMAINS="$2"
-      shift 2
-      ;;
-    --model)
-      MODEL="$2"
-      shift 2
-      ;;
-    --json)
-      RAW_JSON=1
-      shift
-      ;;
-    *)
-      echo "Unknown option: $1" >&2
-      exit 2
-      ;;
+  case "$1" in
+    --handles|--from|--to|--domains|--model)
+      [[ $# -ge 2 && -n "${2//[[:space:]]/}" && "$2" != --* ]] || fail "$1 requires a value"
+      case "$1" in
+        --handles) HANDLES="$2" ;;
+        --from) FROM_DATE="$2" ;;
+        --to) TO_DATE="$2" ;;
+        --domains) DOMAINS="$2" ;;
+        --model) MODEL="$2" ;;
+      esac
+      shift 2 ;;
+    --json) RAW_JSON=1; shift ;;
+    *) fail 'Unknown option (use --help)' ;;
   esac
 done
 
-# Convert comma-delimited list to JSON array.
+command -v jq &>/dev/null || fail 'jq is required but not installed.' 1
+command -v curl &>/dev/null || fail 'curl is required but not installed.' 1
+
 csv_to_json_array() {
-  local csv="$1"
-  if [[ -z "$csv" ]]; then
-    jq -cn '[]'
-  else
-    jq -cn --arg csv "$csv" '$csv | split(",") | map(gsub("^\\s+|\\s+$"; "")) | map(select(length > 0))'
-  fi
+  jq -cen --arg csv "$1" --argjson max "$2" '
+    $csv | split(",") | map(gsub("^\\s+|\\s+$"; ""))
+    | select(length <= $max and all(.[]; length > 0))
+  ' 2>/dev/null
 }
 
-if [[ "$MODE" != "web" && "$MODE" != "x" ]]; then
-  echo "ERROR: mode must be 'web' or 'x'" >&2
-  exit 2
-fi
+# Validate the calendar without depending on GNU/BSD date parsing differences.
+valid_date() {
+  jq -en --arg date "$1" '
+    $date | capture("\\A(?<y>[0-9]{4})-(?<m>[0-9]{2})-(?<d>[0-9]{2})\\z")
+    | (.y|tonumber) as $y | (.m|tonumber) as $m | (.d|tonumber) as $d
+    | [31, (if ($y%400 == 0 or ($y%4 == 0 and $y%100 != 0)) then 29 else 28 end),
+       31,30,31,30,31,31,30,31,30,31] as $days
+    | $y >= 1 and $m >= 1 and $m <= 12 and $d >= 1 and $d <= $days[$m-1]
+  ' >/dev/null 2>&1
+}
 
-TOOLS_JSON=""
-if [[ "$MODE" == "web" ]]; then
+[[ -z "$FROM_DATE" ]] || valid_date "$FROM_DATE" || fail '--from requires a valid YYYY-MM-DD calendar date'
+[[ -z "$TO_DATE" ]] || valid_date "$TO_DATE" || fail '--to requires a valid YYYY-MM-DD calendar date'
+
+if [[ "$MODE" == web ]]; then
   if [[ -n "$DOMAINS" ]]; then
-    DOMAIN_ARRAY=$(csv_to_json_array "$DOMAINS")
-    TOOLS_JSON=$(jq -cn --argjson domains "$DOMAIN_ARRAY" '[{type:"web_search", allowed_domains:$domains}]')
+    DOMAIN_ARRAY=$(csv_to_json_array "$DOMAINS" 5) || fail '--domains requires 1 to 5 nonempty CSV entries'
+    TOOLS_JSON=$(jq -cn --argjson domains "$DOMAIN_ARRAY" '[{type:"web_search", filters:{allowed_domains:$domains}}]')
   else
     TOOLS_JSON='[{"type":"web_search"}]'
   fi
 else
-  HANDLE_ARRAY=$(csv_to_json_array "$HANDLES")
-  TOOLS_JSON=$(jq -cn \
-    --argjson handles "$HANDLE_ARRAY" \
-    --arg from "$FROM_DATE" \
-    --arg to "$TO_DATE" \
-    '[{
-      type: "x_search",
-      allowed_x_handles: (if ($handles | length) > 0 then $handles else null end),
-      from_date: (if $from != "" then $from else null end),
-      to_date: (if $to != "" then $to else null end)
-    }]')
+  HANDLE_ARRAY='[]'
+  if [[ -n "$HANDLES" ]]; then
+    HANDLE_ARRAY=$(csv_to_json_array "$HANDLES" 20) || fail '--handles requires 1 to 20 nonempty CSV entries'
+  fi
+  TOOLS_JSON=$(jq -cn --argjson handles "$HANDLE_ARRAY" --arg from "$FROM_DATE" --arg to "$TO_DATE" '
+    [{type:"x_search"}
+      + (if ($handles|length) > 0 then {allowed_x_handles:$handles} else {} end)
+      + (if $from != "" then {from_date:$from} else {} end)
+      + (if $to != "" then {to_date:$to} else {} end)]')
 fi
 
-REQUEST_JSON=$(jq -cn \
-  --arg model "$MODEL" \
-  --arg input "$QUERY" \
-  --argjson tools "$TOOLS_JSON" \
-  '{
-    model: $model,
-    input: $input,
-    tools: $tools,
-    tool_choice: "required"
-  }')
-
-RESPONSE=$(curl -sS https://api.x.ai/v1/responses \
-  -H "Authorization: Bearer $XAI_API_KEY" \
-  -H "Content-Type: application/json" \
-  -d "$REQUEST_JSON")
-
-ERROR=$(echo "$RESPONSE" | jq -r '.error.message // .error // empty' 2>/dev/null || true)
-if [[ -n "$ERROR" ]]; then
-  echo "ERROR: $ERROR" >&2
-  exit 1
+BASE_URL="${XAI_BASE_URL-https://api.x.ai/v1}"
+while [[ "$BASE_URL" == */ ]]; do BASE_URL="${BASE_URL%/}"; done
+if ! jq -en --arg base "$BASE_URL" '$base | test("\\Ahttps://[^/@?#\\s]+(/[^?#\\s]*)?\\z")' >/dev/null; then
+  fail 'XAI_BASE_URL must be an HTTPS API base without credentials, query, or fragment'
 fi
 
-if [[ "$RAW_JSON" -eq 1 ]]; then
-  echo "$RESPONSE" | jq '.'
-  exit 0
+if [[ -z "${XAI_API_KEY:-}" && -f "$HOME/.openclaw/openclaw.json" ]]; then
+  XAI_API_KEY=$(jq -r '.skills.entries["xai-search"].apiKey // empty' "$HOME/.openclaw/openclaw.json" 2>/dev/null || true)
+fi
+[[ -n "${XAI_API_KEY:-}" ]] || fail 'XAI_API_KEY not set. Set environment variable or configure in openclaw.json' 1
+[[ "$XAI_API_KEY" != *$'\r'* && "$XAI_API_KEY" != *$'\n'* ]] || fail 'API key must not contain line breaks' 1
+
+REQUEST_JSON=$(jq -cn --arg model "$MODEL" --arg input "$QUERY" --argjson tools "$TOOLS_JSON" \
+  '{model:$model, input:$input, tools:$tools, tool_choice:"required"}')
+
+# Keep the key out of curl argv and private response files out of other users' reach.
+umask 077
+WORK_DIR=$(mktemp -d "${TMPDIR:-/tmp}/xai-search.XXXXXXXX")
+trap 'rm -rf "$WORK_DIR"' EXIT
+printf 'Authorization: Bearer %s\nContent-Type: application/json\n' "$XAI_API_KEY" > "$WORK_DIR/headers"
+if HTTP_STATUS=$(curl --disable --silent --show-error --globoff --proto '=https' \
+  --url "$BASE_URL/responses" --header "@$WORK_DIR/headers" \
+  --data "$REQUEST_JSON" --output "$WORK_DIR/response" --write-out '%{http_code}' 2>/dev/null); then
+  :
+else
+  CURL_STATUS=$?
+  fail "API transport failed (curl exit $CURL_STATUS); check endpoint and connectivity" 1
 fi
 
-OUTPUT_TEXT=$(echo "$RESPONSE" | jq -r '
-  if (.output_text // "") != "" then
-    .output_text
-  else
-    [
-      .output[]?
-      | select(.type == "message" and .role == "assistant")
-      | .content[]?
-      | if .type == "output_text" or .type == "text" then (.text // "") else empty end
-    ] | join("\n")
-  end
-' 2>/dev/null || true)
+# Decode before redaction so JSON escapes cannot hide an echoed credential.
+if ! RESPONSE=$(jq -cs --arg key "$XAI_API_KEY" '
+  if length == 1 and (.[0] | type == "object") then
+    .[0] | walk(
+      if type == "string" then split($key) | join("[REDACTED]")
+      elif type == "object" then with_entries(.key |= (split($key) | join("[REDACTED]")))
+      else . end)
+  else error("Expected one response object") end
+' "$WORK_DIR/response" 2>/dev/null); then
+  fail "API returned malformed or non-JSON response (HTTP $HTTP_STATUS)" 1
+fi
+ERROR=$(printf '%s' "$RESPONSE" | jq -r 'if .error then (.error | if type == "object" then (.message // "upstream error") else tostring end) else empty end' 2>/dev/null)
+if [[ ! "$HTTP_STATUS" =~ ^2[0-9][0-9]$ ]]; then
+  fail "API HTTP $HTTP_STATUS: ${ERROR:-request failed}" 1
+fi
+[[ -z "$ERROR" ]] || fail "API error: $ERROR" 1
 
-if [[ -z "${OUTPUT_TEXT// }" ]]; then
-  echo "ERROR: No response text from API" >&2
-  exit 1
+if [[ "$RAW_JSON" -eq 1 ]]; then
+  printf '%s' "$RESPONSE" | jq '.'
+  exit 0
 fi
 
-echo "$OUTPUT_TEXT"
-
-SOURCES=$(echo "$RESPONSE" | jq -r '
-  [
-    .output[]?
-    | select(.type == "message" and .role == "assistant")
-    | .content[]?
-    | .annotations[]?
-    | select(.type == "url_citation")
-    | .url?
-  ] | unique | .[]?
+OUTPUT_TEXT=$(printf '%s' "$RESPONSE" | jq -r '
+  if (.output_text // "") != "" then .output_text
+  else [.output[]? | select(.type == "message" and .role == "assistant")
+    | .content[]? | if .type == "output_text" or .type == "text" then (.text // "") else empty end] | join("\n") end
 ' 2>/dev/null || true)
-
-if [[ -n "$SOURCES" ]]; then
-  echo ""
-  echo "Sources:"
-  echo "$SOURCES"
-fi
+[[ -n "${OUTPUT_TEXT//[[:space:]]/}" ]] || fail 'No response text from API' 1
+printf '%s\n' "$OUTPUT_TEXT"
+SOURCES=$(printf '%s' "$RESPONSE" | jq -r '
+  [.output[]? | select(.type == "message" and .role == "assistant") | .content[]?
+    | .annotations[]? | select(.type == "url_citation") | .url?] | unique | .[]?
+' 2>/dev/null || true)
+if [[ -n "$SOURCES" ]]; then printf '\nSources:\n%s\n' "$SOURCES"; fi

package/skills/core/distill-writing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: distill-writing
 description: "Learn a house writing style from approved sample documents, or save an explicitly stated project document preference, into WRITING.md and writing/templates/. Use for sample-based style learning, house-style setup or refresh, and requests such as 'remember this for future PRDs' or 'make this our report default', including handoffs from write-doc or plain-language. Preserve manual edits and separate document types. NOT for drafting a document (write-doc) or saving chat-only preferences (plain-language)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Distill a writing style

package/skills/core/distill-writing/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/doc-to-md/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: doc-to-md
 description: "Convert documents (PDF, DOCX, PPTX, XLSX, images) to Markdown so agents can read them. Use as the preprocessing step whenever binary files need to enter agent context — contract review, compliance audit, document analysis, evidence review."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # doc-to-md

package/skills/core/doc-to-md/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/editorial-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: editorial-review
 description: "Review a document or generated report for what it says (does the reader get the answer, is the argument sound, is anything unsupported, obvious or repeated), then fix the content. Use to review, tighten or clarify a doc or report, and as the review step of write-doc and the report skills. NOT for Chinese wording (polish-cn) or code review (better-review)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Editorial review

package/skills/core/editorial-review/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/house-style/SKILL.md

@@ -3,7 +3,7 @@ name: house-style
 description: "Shared reference the writing skills read by path: WRITING.md lookup and precedence, template choice, gap markers, template shape, the bundled templates, and the default English and Chinese style guides. Never select or invoke it as a task."
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # House style

package/skills/core/house-style/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/plain-language/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: plain-language
 description: "Session mode: every reply and status line in plain language — lead with the point, everyday words, full sentences, no filler — in English or Chinese, until turned off. Enable by default when the project has an applicable WRITING.md, even without a slash command. Use for /plain-language, 'talk plainly', '说人话', and explicit requests to remember project reply preferences; /plain-language init persists the default and loading instructions. Save reply rules only under Agent replies; route document preferences to distill-writing. Ordinary mode toggles remain session-only. Turn off with '/plain-language off' or 'normal mode'. NOT for writing a document (write-doc) or reviewing one (editorial-review)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Plain language

package/skills/core/plain-language/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/polish-cn/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: polish-cn
 description: "Polish the Chinese wording of a finished document or report, with a script proving every number, date, identifier, link and protected term is unchanged; prefers a Chinese model and records which ran. Use for '中文润色' or as a report skill's last step. NOT for cutting or restructuring content (editorial-review) or translating (write-doc)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Polish Chinese

package/skills/core/polish-cn/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/reg-parser/SKILL.md

@@ -2,7 +2,7 @@
 name: reg-parser
 version: 1.1.0
 description: "Parse regulatory/scheme documents into structured outputs: convert a regulation (AML, VARS, PCI-DSS, KYC, GDPR) into an audit-ready compliance checklist, or trace contract clauses to a mandate source. Suggest proactively when a regulation PDF accompanies a contract review or compliance task. NOT general summarization (doc-to-md), or writing the gap analysis or policy from the checklist (write-doc)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # reg-parser

package/skills/core/reg-parser/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/terminology/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: terminology
 description: "Build and keep a project's TERMINOLOGY.md: the preferred term per concept in English, 简体 and 繁體, and the terms to avoid. Use to set it up from the project's documents, when the user settles or corrects a term, or when another writing skill needs the format. NOT for writing documents (write-doc) or the code domain model (domain-modeling)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Terminology

package/skills/core/terminology/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/core/write-doc/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: write-doc
 description: "Write or edit documents and compliance reports in the project's house style: BRD, PRD, gap analysis, technical spec, integration guide, proposal, policy, risk procedure, audit report, external assessment, management report or Visa VARS Review Report; English, Chinese or bilingual. Use automatically whenever asked to draft, write, revise or edit a document, without needing a slash command, including 'write up the findings'. Route explicit requests to remember a writing preference to its persistence owner. Markdown by default; export when requested. NOT for ordinary chat replies (plain-language), learning style from samples or preference-only saves (distill-writing), performing an audit (compliance-audit), or WeChat articles (wechat-article-writer)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Write a document

package/skills/core/write-doc/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/engineering/better-review/SKILL.md

@@ -4,7 +4,7 @@ description: "Slash/explicit-only (/better-review). Single-agent adversarial rev
 disable-model-invocation: true
 dependencies:
   - engineering-runtime
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Better Review

package/skills/engineering/better-review/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));

package/skills/engineering/contributing/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: contributing
 description: "The conventions a repo's CONTRIBUTING.md holds, starting with tracker routing: which tracker an issue belongs in (GitHub for engineering, Linear for product), duplicate search, and linking back to the source requirement. Use before creating any issue, spec, epic, ticket or sub-issue on GitHub or Linear, including inside /to-spec, /to-tickets and /triage, and whenever work that started from a Linear issue turns into engineering work. Also writes the rules as the Issue tracking section of the repo's CONTRIBUTING.md. NOT for delivering a PR (github-flow) or splitting work into slices (to-tickets)."
-release-version: 0.43.1
+release-version: 0.44.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Contributing

package/skills/engineering/contributing/release-check.mjs

@@ -2,7 +2,7 @@
 import { spawnSync } from 'node:child_process';
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const DAY_MS = 24 * 60 * 60 * 1000;
@@ -46,6 +46,8 @@ function writeCache(path, value) {
 
 function main(now = Date.now()) {
   if (process.env.ONEABOVEIO_NO_UPDATE_CHECK) return;
+  const bundle = readJson(join(resolve(here, '../../..'), 'package.json'));
+  if (bundle.name === '@1aboveio/skills' && bundle.nativeCodex?.schemaVersion === 1) return;
   const skill = readFileSync(join(here, 'SKILL.md'), 'utf8');
   const name = frontmatterValue(skill, 'name');
   const localVersion = stableVersion(frontmatterValue(skill, 'release-version'));