@cleocode/skills 2026.9.21 → 2026.9.23

package/README.md

@@ -31,69 +31,52 @@ yarn add @cleocode/skills
 
 ## Included Skills
 
-### Core Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-codebase-mapper** | Analysis | Maps project structure, stack, and architecture |
-| **ct-memory** | Memory | Manages persistent knowledge storage and retrieval |
-| **ct-orchestrator** | Orchestration | Coordinates multi-agent workflows and spawning |
-| **ct-task-executor** | Execution | General task execution with protocol compliance |
-| **ct-validator** | Validation | Validates compliance against rules and schemas |
-
-### Research Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-research-agent** | Research | Multi-source research aggregation and synthesis |
-| **ct-epic-architect** | Planning | Epic decomposition and task planning |
-| **ct-spec-writer** | Specification | RFC 2119 technical specification writing |
-| **ct-docs-lookup** | Documentation | Library and framework documentation queries |
-
-### Documentation Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-documentor** | Documentation | Documentation creation and management |
-| **ct-docs-write** | Writing | User-facing documentation writing |
-| **ct-docs-review** | Review | Documentation style guide compliance |
-
-### Workflow Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-dev-workflow** | Development | Git workflows, commits, releases |
-| **ct-contribution** | Contribution | Multi-agent consensus contributions |
-| **ct-skill-creator** | Skill Dev | Creating and validating CLEO skills |
-| **ct-skill-validator** | Validation | Skill compliance validation |
-
-### Quality Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-grade** | Grading | Session quality evaluation |
-| **ct-stickynote** | Notes | Quick ephemeral sticky notes |
-
-### Integration Skills
-
-| Skill | Purpose | Description |
-|-------|---------|-------------|
-| **ct-cleo** | CLEO | Task management protocol operations |
-
-### Specialized Skills
-
-Additional skills for specific domains:
-- **better-auth-svelte** - Better-Auth with SvelteKit
-- **drizzle-orm** - Drizzle ORM guidance
-- **expo-production-deploy** - Expo app deployment
-- **flarectl** - Cloudflare CLI management
-- **github-guru** - GitHub workflows
-- **neonctl** - Neon Postgres CLI
-- **payment-provider-oauth** - Payment provider OAuth
-- **railway** - Railway infrastructure
-- **resend** - Resend email API
-- **svelte5-sveltekit** - Svelte 5 development
-- **yt-dlp-webapp** - YouTube download backends
+Tiers and install behaviour come from each SKILL.md's `metadata` (owner decision
+D11157). `packages/skills/skills/manifest.json` is generated from them by
+`node scripts/skills/generate-manifest.mjs`; gates 29-31 keep the manifest,
+installability and every documented `cleo` command honest.
+
+### Core (installed to every harness, always relevant)
+
+| Skill | Purpose |
+|-------|---------|
+| **ct-cleo** | CLEO task management protocol - session, task, and workflow guidance. |
+| **ct-dev-workflow** | Development workflow orchestration for task-driven development with atomic commits, conventional commit messag… |
+| **ct-documentor** | Documentation coordinator with CLEO style guide compliance. |
+| **ct-lead** | Phase Lead orchestration playbook for spawning and supervising a parallel worker swarm in one wave. |
+| **ct-orchestrator** | Pipeline-aware orchestration skill for managing complex workflows through subagent delegation. |
+| **ct-task-executor** | General implementation task execution for completing assigned CLEO tasks by following instructions and produci… |
+
+### On demand (installed; loaded by description or by stage guidance)
+
+| Skill | Purpose |
+|-------|---------|
+| **ct-adr-recorder** | Records Architecture Decision Records from accepted consensus verdicts. |
+| **ct-artifact-publisher** | Builds and publishes artifacts to registries (npm, PyPI, cargo, docker, GitHub releases, generic tarballs) fol… |
+| **ct-codebase-mapper** | Orient in an unfamiliar or large codebase with CLEO's code-intelligence graph (cleo nexus) and project map (cl… |
+| **ct-consensus-voter** | Runs structured multi-agent voting for decision tasks with confidence scores, conflict detection, and HITL esc… |
+| **ct-contribution** | Guided workflow for multi-agent consensus contributions. |
+| **ct-council** | Convene "The Council" — a 5-advisor, shuffled gate-based peer-review, chairman-synthesis workflow for reviewin… |
+| **ct-epic-architect** | Epic planning and task decomposition for breaking down large initiatives into atomic, executable tasks. |
+| **ct-ivt-looper** | Runs a project-agnostic autonomous Implement-then-Validate-then-Test compliance loop on any git worktree. |
+| **ct-provenance-keeper** | Generates in-toto v1 attestations, SLSA-level provenance records, SBOMs (CycloneDX or SPDX), and sigstore/cosi… |
+| **ct-release-orchestrator** | Orchestrates the canonical 4-verb release pipeline introduced by SPEC-T9345: cleo release plan, then cleo rele… |
+| **ct-research-agent** | Multi-source research and investigation combining web search, documentation lookup via Context7, and codebase … |
+| **ct-spec-writer** | Technical specification writing using RFC 2119 language for clear, unambiguous requirements. |
+| **ct-validator** | Compliance validation for verifying systems, documents, or code against requirements, schemas, or standards. |
+
+### Internal (CLEO development only; never installed to a harness)
+
+| Skill | Purpose |
+|-------|---------|
+| **ct-grade** | CLEO session grading and A/B behavioral analysis with token tracking. |
+| **ct-skill-author** | Create, improve and validate CLEO skills. |
+
+Merged or retired in T12649: ct-docs-write and ct-docs-review are references of
+ct-documentor; ct-memory and ct-stickynote are references of ct-cleo;
+ct-skill-creator and ct-skill-validator became ct-skill-author; ct-docs-lookup
+(use the Context7 MCP) and ct-master-tac were retired; signaldock-connect moved
+to the SignalDock repository.
 
 ## Skill Structure
 

package/frontmatter.d.mts

@@ -0,0 +1,60 @@
+/**
+ * Types for `@cleocode/skills/frontmatter.mjs` — the SKILL.md frontmatter
+ * rules shared by gate 29 and `cleo skills validate` (T12655).
+ */
+
+/** Tag-like text the Agent Skills standard rejects. */
+export declare const TAG_PATTERN: RegExp;
+/** Allowed `metadata.tier` values. */
+export declare const SKILL_TIERS: readonly ['core', 'on-demand', 'internal'];
+/** Allowed `metadata.install` values. */
+export declare const SKILL_INSTALL_MODES: readonly ['harness', 'internal'];
+/** Allowed `metadata.stability` values. */
+export declare const SKILL_STABILITIES: readonly ['experimental', 'stable', 'deprecated'];
+/** Numeric tier written into manifest entries. */
+export declare const TIER_NUMBER: { readonly core: 0; readonly 'on-demand': 1; readonly internal: 3 };
+/** CAAMP catalogue `category` derived from the tier. */
+export declare const CATEGORY_FOR_TIER: {
+  readonly core: 'core';
+  readonly 'on-demand': 'recommended';
+  readonly internal: 'meta';
+};
+/** Top-level keys a SKILL.md may not declare (derived from `metadata.tier`). */
+export declare const DERIVED_TOP_LEVEL_KEYS: readonly ['tier', 'core', 'category'];
+/** Top-level keys that moved under `metadata:`. */
+export declare const MOVED_TO_METADATA_KEYS: readonly ['loomStage'];
+/** Maximum `description` length accepted by harness skill loaders. */
+export declare const MAX_DESCRIPTION_LENGTH: 1024;
+
+/** Parsed SKILL.md frontmatter. */
+export interface ParsedFrontmatter {
+  /** No parse errors. */
+  ok: boolean;
+  /** Top-level scalars (block scalars folded to one line). */
+  fields: Record<string, string>;
+  /** The nested `metadata:` map. */
+  metadata: Record<string, string>;
+  /** Lists nested under `metadata:` (e.g. `covers`). */
+  metadataLists: Record<string, string[]>;
+  /** Top-level block and inline lists. */
+  lists: Record<string, string[]>;
+  /** Every top-level key in order, duplicates included. */
+  keys: string[];
+  /** Parse errors. */
+  errors: string[];
+}
+
+/** Parse SKILL.md text into its frontmatter. */
+export declare function parseFrontmatter(text: string): ParsedFrontmatter;
+
+/**
+ * Validate one bundled skill's frontmatter against the CLEO contract.
+ *
+ * @param fm - Parsed frontmatter plus `name`, the skill's directory name.
+ * @param ctx - `loomStages` enables the `metadata.loomStage` binding check.
+ * @returns Human-readable problems (empty when valid).
+ */
+export declare function validateFrontmatter(
+  fm: ParsedFrontmatter & { name: string },
+  ctx?: { loomStages?: Map<string, string> },
+): string[];

package/frontmatter.mjs

@@ -0,0 +1,277 @@
+/**
+ * SKILL.md frontmatter rules for CLEO's bundled skills — the one copy shared
+ * by the arch gates (`scripts/skills/lib/skill-frontmatter.mjs`, gate 29) and
+ * the runtime (`cleo skills validate`, T12655), so the two cannot disagree.
+ *
+ * Pure: no fs, no dependencies. The gates run on a bare checkout (no
+ * `pnpm install`), and the frontmatter grammar used by skills is a flat map
+ * plus one nested `metadata:` map and folded/literal block scalars. Anything
+ * outside that grammar is reported as an error rather than guessed at.
+ *
+ * @module @cleocode/skills/frontmatter
+ * @task T12648
+ * @task T12655
+ */
+
+/** Tag-like text the Agent Skills standard rejects (same test as CAAMP's validateSkill). */
+export const TAG_PATTERN = /<[^>]+>/;
+
+/** Allowed `metadata.tier` values — the skill's delivery class (D11157). */
+export const SKILL_TIERS = /** @type {const} */ (['core', 'on-demand', 'internal']);
+
+/** Allowed `metadata.install` values. */
+export const SKILL_INSTALL_MODES = /** @type {const} */ (['harness', 'internal']);
+
+/** Allowed `metadata.stability` values. */
+export const SKILL_STABILITIES = /** @type {const} */ (['experimental', 'stable', 'deprecated']);
+
+/**
+ * Numeric tier written into manifest entries for existing numeric readers
+ * (CAAMP catalogue, `packages/skills/index.js`), derived from the class.
+ */
+export const TIER_NUMBER = /** @type {const} */ ({ core: 0, 'on-demand': 1, internal: 3 });
+
+/**
+ * CAAMP catalogue `category` written into manifest entries, derived from the
+ * class so the two cannot disagree (T12653).
+ */
+export const CATEGORY_FOR_TIER = /** @type {const} */ ({
+  core: 'core',
+  'on-demand': 'recommended',
+  internal: 'meta',
+});
+
+/**
+ * Top-level keys a SKILL.md may not declare, because the manifest derives
+ * them from `metadata.tier` (T12648, T12653).
+ */
+export const DERIVED_TOP_LEVEL_KEYS = /** @type {const} */ (['tier', 'core', 'category']);
+
+/**
+ * Top-level keys that moved under `metadata:` (T12649). Each maps to its
+ * `metadata.<key>` home.
+ */
+export const MOVED_TO_METADATA_KEYS = /** @type {const} */ (['loomStage']);
+
+/** Maximum `description` length accepted by harness skill loaders. */
+export const MAX_DESCRIPTION_LENGTH = 1024;
+
+/**
+ * Parse the scalar on the right of `key:`.
+ *
+ * @param {string} raw - Text after the colon.
+ * @returns {string} Unquoted scalar ('' for an empty value).
+ */
+function scalar(raw) {
+  const v = raw.trim();
+  if ((v.startsWith('"') && v.endsWith('"')) || (v.startsWith("'") && v.endsWith("'"))) {
+    return v.slice(1, -1);
+  }
+  return v;
+}
+
+/**
+ * Parse SKILL.md text into its frontmatter.
+ *
+ * @param {string} text - Full SKILL.md content.
+ * @returns {{
+ *   ok: boolean,
+ *   fields: Record<string, string>,
+ *   metadata: Record<string, string>,
+ *   metadataLists: Record<string, string[]>,
+ *   lists: Record<string, string[]>,
+ *   keys: string[],
+ *   errors: string[],
+ * }} `fields` holds top-level scalars (block scalars folded to one line;
+ *   nested maps omitted), `lists` top-level block (`- item`) and inline
+ *   (`[a, b]`) lists, `keys` every top-level key in order (duplicates
+ *   included), `metadata` the nested `metadata:` map and `metadataLists`
+ *   its nested lists (`metadata.covers`).
+ */
+export function parseFrontmatter(text) {
+  const errors = [];
+  // T12649: a CRLF checkout (Windows autocrlf) must parse identically.
+  const lines = text.replace(/\r\n?/g, '\n').split('\n');
+  if (lines[0] !== '---') {
+    return {
+      ok: false,
+      fields: {},
+      metadata: {},
+      metadataLists: {},
+      lists: {},
+      keys: [],
+      errors: ['no frontmatter block'],
+    };
+  }
+  const end = lines.indexOf('---', 1);
+  if (end === -1) {
+    return {
+      ok: false,
+      fields: {},
+      metadata: {},
+      metadataLists: {},
+      lists: {},
+      keys: [],
+      errors: ['unterminated frontmatter'],
+    };
+  }
+  const body = lines.slice(1, end);
+  /** @type {Record<string, string>} */
+  const fields = {};
+  /** @type {Record<string, string>} */
+  const metadata = {};
+  /** @type {Record<string, string[]>} */
+  const lists = {};
+  /** @type {Record<string, string[]>} */
+  const metadataLists = {};
+  const keys = [];
+
+  for (let i = 0; i < body.length; i++) {
+    const line = body[i];
+    if (line.trim() === '' || line.trimStart().startsWith('#')) continue;
+    if (/^\s/.test(line) || line.startsWith('- ')) continue; // continuation of a nested value
+    const m = /^([A-Za-z][\w-]*):(.*)$/.exec(line);
+    if (!m) {
+      errors.push(`unparseable frontmatter line ${i + 2}: ${line}`);
+      continue;
+    }
+    const [, key, rest] = m;
+    keys.push(key);
+    const value = rest.trim();
+
+    if (key === 'metadata' && value === '') {
+      // A blank line inside the block does not end it; the next unindented
+      // key does (T12649).
+      // A nested list (`  covers:` then `    - item`) is collected into
+      // metadataLists (T12124).
+      let listKey = null;
+      for (let j = i + 1; j < body.length; j++) {
+        if (body[j].trim() === '') continue;
+        if (!/^\s+\S/.test(body[j])) break;
+        const item = /^\s+-\s+(.*)$/.exec(body[j]);
+        if (item && listKey) {
+          metadataLists[listKey].push(scalar(item[1]));
+          continue;
+        }
+        const mm = /^\s+([A-Za-z][\w-]*):(.*)$/.exec(body[j]);
+        if (!mm) continue;
+        listKey = null;
+        if (mm[2].trim() === '') {
+          listKey = mm[1];
+          metadataLists[listKey] = [];
+        } else {
+          metadata[mm[1]] = scalar(mm[2]);
+        }
+      }
+      continue;
+    }
+    if (value === '>' || value === '>-' || value === '|' || value === '|-') {
+      const parts = [];
+      for (let j = i + 1; j < body.length && (/^\s+\S/.test(body[j]) || body[j] === ''); j++) {
+        parts.push(body[j].trim());
+      }
+      fields[key] = parts.filter(Boolean).join(' ');
+      continue;
+    }
+    if (value === '') {
+      // A block list (`key:` then `  - item` lines) — T12649.
+      const items = [];
+      for (let j = i + 1; j < body.length && /^\s+-\s/.test(body[j]); j++) {
+        items.push(scalar(body[j].replace(/^\s+-\s+/, '')));
+      }
+      lists[key] = items;
+    } else if (value.startsWith('[') && value.endsWith(']')) {
+      lists[key] = value
+        .slice(1, -1)
+        .split(',')
+        .map((s) => scalar(s))
+        .filter(Boolean);
+    }
+    fields[key] = scalar(value);
+  }
+
+  return { ok: errors.length === 0, fields, metadata, metadataLists, lists, keys, errors };
+}
+
+/**
+ * Validate one skill's frontmatter against the SSoT contract.
+ *
+ * @param {ReturnType<typeof parseFrontmatter> & { name: string }} fm - Parsed frontmatter
+ *   plus `name`, the skill's directory name.
+ * @param {{ loomStages?: Map<string, string> }} [ctx] - `loomStages` (from
+ *   {@link loadLoomStages}) enables the `metadata.loomStage` binding check.
+ * @returns {string[]} Human-readable problems (empty when valid).
+ */
+export function validateFrontmatter(fm, ctx = {}) {
+  const problems = [...fm.errors];
+  const seen = new Set();
+  for (const k of fm.keys) {
+    if (seen.has(k)) problems.push(`duplicate top-level key '${k}' (invalid YAML)`);
+    seen.add(k);
+  }
+  if (fm.fields.name !== fm.name) {
+    problems.push(`name '${fm.fields.name ?? ''}' does not equal its directory '${fm.name}'`);
+  }
+  const description = fm.fields.description ?? '';
+  if (description === '') problems.push('description is missing');
+  if (description.length > MAX_DESCRIPTION_LENGTH) {
+    problems.push(`description is ${description.length} chars (max ${MAX_DESCRIPTION_LENGTH})`);
+  }
+  // T12655: the Agent Skills standard (CAAMP validateSkill) rejects tag-like
+  // text; `epic-<TID>` in a description passed this gate and failed
+  // `cleo skills validate`. Write placeholders as `{TID}`.
+  for (const field of ['name', 'description']) {
+    if (TAG_PATTERN.test(fm.fields[field] ?? '')) {
+      problems.push(`${field} contains angle-bracket (XML/HTML tag) text; write placeholders as {name}`);
+    }
+  }
+  for (const key of DERIVED_TOP_LEVEL_KEYS) {
+    if (key in fm.fields) {
+      problems.push(
+        `top-level ${key} is not allowed — it is derived from metadata.tier (core|on-demand|internal)`,
+      );
+    }
+  }
+  for (const key of MOVED_TO_METADATA_KEYS) {
+    if (key in fm.fields) problems.push(`top-level ${key} moved — declare metadata.${key}`);
+  }
+  const md = fm.metadata;
+  if (md.loomStage !== undefined && ctx.loomStages) {
+    const owner = ctx.loomStages.get(md.loomStage);
+    if (owner === undefined) {
+      problems.push(
+        `metadata.loomStage '${md.loomStage}' is not a STAGE_SKILL_MAP stage or a .cant protocol id`,
+      );
+    } else if (owner !== fm.name) {
+      problems.push(
+        `metadata.loomStage '${md.loomStage}' is bound to '${owner}', not '${fm.name}'`,
+      );
+    }
+  }
+  if (!md.version) problems.push('metadata.version is missing');
+  else if (!/^\d+\.\d+\.\d+$/.test(md.version)) {
+    problems.push(`metadata.version '${md.version}' is not X.Y.Z`);
+  }
+  if (fm.fields.version !== undefined && fm.fields.version !== md.version) {
+    problems.push(
+      `top-level version '${fm.fields.version}' disagrees with metadata.version '${md.version ?? ''}'`,
+    );
+  }
+  if (!SKILL_TIERS.includes(md.tier)) {
+    problems.push(`metadata.tier '${md.tier ?? ''}' must be one of ${SKILL_TIERS.join('|')}`);
+  }
+  if (!SKILL_INSTALL_MODES.includes(md.install)) {
+    problems.push(
+      `metadata.install '${md.install ?? ''}' must be one of ${SKILL_INSTALL_MODES.join('|')}`,
+    );
+  }
+  if (md.tier === 'internal' && md.install === 'harness') {
+    problems.push('metadata.tier internal cannot have metadata.install harness');
+  }
+  if (md.stability !== undefined && !SKILL_STABILITIES.includes(md.stability)) {
+    problems.push(
+      `metadata.stability '${md.stability}' must be one of ${SKILL_STABILITIES.join('|')}`,
+    );
+  }
+  return problems;
+}

package/index.d.ts

@@ -1,4 +1,4 @@
-// --- Skill Entry (from skills.json) ---
+// --- Skill Entry (derived from skills/manifest.json, T12653) ---
 
 export interface SkillEntry {
   name: string;
@@ -87,7 +87,7 @@ export interface ValidationResult {
 
 // --- Existing exports (preserved) ---
 
-/** All skill entries from skills.json */
+/** All skill entries, derived from skills/manifest.json */
 export declare const skills: SkillEntry[];
 
 /** Parsed manifest.json dispatch registry */
@@ -99,7 +99,7 @@ export declare const shared: Record<string, unknown>;
 /** List all skill names */
 export declare function listSkills(): string[];
 
-/** Get skill metadata from skills.json by name */
+/** Get skill metadata by name */
 export declare function getSkill(name: string): SkillEntry | undefined;
 
 /** Resolve absolute path to a skill's SKILL.md file */

package/index.js

@@ -19,23 +19,48 @@ const libraryRoot = LIBRARY_ROOT;
 
 // --- Core data ---
 
-/** Parsed skills.json index */
-const skillsIndex = JSON.parse(
-  fs.readFileSync(path.join(LIBRARY_ROOT, 'skills.json'), 'utf8')
-);
-
-/** Parsed manifest.json dispatch registry */
+/**
+ * Parsed manifest.json — the only skills index. It is generated from SKILL.md
+ * frontmatter by scripts/skills/generate-manifest.mjs; skills.json was
+ * removed in T12653.
+ */
 const manifest = JSON.parse(
   fs.readFileSync(path.join(SKILLS_ROOT, 'manifest.json'), 'utf8')
 );
 
+/**
+ * Map a manifest entry to the catalog SkillEntry shape (the manifest `path`
+ * names the directory; the catalog path names SKILL.md). Mirrors
+ * catalogEntryFromManifest in @cleocode/caamp.
+ * @param {object} m - Manifest skill entry
+ * @returns {object} SkillEntry
+ */
+function toSkillEntry(m) {
+  return {
+    name: m.name,
+    description: m.description,
+    version: m.version,
+    path: m.path.endsWith('SKILL.md') ? m.path : `${m.path}/SKILL.md`,
+    references: m.references || [],
+    core: m.core === undefined ? m.deliveryTier === 'core' : m.core,
+    category: m.category || 'recommended',
+    tier: m.tier,
+    protocol: m.protocol === undefined ? null : m.protocol,
+    dependencies: m.dependencies || [],
+    sharedResources: m.sharedResources || [],
+    compatibility: m.compatibility || [],
+    license: m.license || 'MIT',
+    metadata: { deliveryTier: m.deliveryTier, install: m.install },
+  };
+}
+
 /** Parsed _shared/placeholders.json */
 const shared = JSON.parse(
   fs.readFileSync(path.join(SHARED_ROOT, 'placeholders.json'), 'utf8')
 );
 
-/** All skill entries from skills.json */
-const skills = skillsIndex.skills;
+/** All skill entries, derived from manifest.json */
+const skills = manifest.skills.map(toSkillEntry);
 
 // --- Existing API (preserved) ---
 
@@ -48,7 +73,7 @@ function listSkills() {
 }
 
 /**
- * Get skill metadata from skills.json by name.
+ * Get skill metadata by name.
  * @param {string} name - Skill name (e.g. "ct-research-agent")
  * @returns {object|undefined}
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/skills",
-  "version": "2026.9.21",
+  "version": "2026.9.23",
   "description": "CLEO skill definitions - bundled with CLEO monorepo",
   "main": "index.js",
   "types": "index.d.ts",
@@ -9,7 +9,9 @@
     "profiles",
     "*.json",
     "*.js",
-    "*.d.ts"
+    "*.d.ts",
+    "*.mjs",
+    "*.d.mts"
   ],
   "devDependencies": {
     "vitest": "^4.1.4"

package/profiles/core.json

@@ -1,7 +1,14 @@
 {
   "name": "core",
-  "description": "Orchestration and LOOM (RCASD-IVTR+C) pipeline awareness",
+  "description": "The six core skills (D11157): CLEO protocol, orchestration, phase leads, task execution, dev workflow and documentation",
   "extends": "minimal",
-  "skills": ["ct-orchestrator", "loom"],
-  "includeProtocols": ["agent-protocol"]
+  "skills": [
+    "ct-orchestrator",
+    "ct-lead",
+    "ct-dev-workflow",
+    "ct-documentor"
+  ],
+  "includeProtocols": [
+    "agent-protocol"
+  ]
 }

package/profiles/full.json

@@ -1,10 +1,14 @@
 {
   "name": "full",
-  "description": "All skills including execution, documentation, quality, and meta",
+  "description": "Every skill installed to harnesses. Equal to recommended: internal skills (ct-grade, ct-skill-author) are never installed (D11157)",
   "extends": "recommended",
-  "skills": [
-    "ct-dev-workflow", "ct-documentor", "ct-docs-lookup", "ct-docs-write", "ct-docs-review",
-    "ct-contribution", "ct-grade", "ct-skill-creator"
-  ],
-  "includeProtocols": ["implementation", "contribution", "release", "testing", "artifact-publish", "provenance"]
+  "skills": [],
+  "includeProtocols": [
+    "implementation",
+    "contribution",
+    "release",
+    "testing",
+    "artifact-publish",
+    "provenance"
+  ]
 }

package/profiles/recommended.json

@@ -1,7 +1,33 @@
 {
   "name": "recommended",
-  "description": "Full LOOM (RCASD-IVTR+C pipeline) skills for epic-driven development",
+  "description": "Core plus the on-demand skills: every LOOM (RCASD-IVTR+C) stage skill, council and codebase mapping",
   "extends": "core",
-  "skills": ["ct-council", "ct-epic-architect", "ct-research-agent", "ct-spec-writer", "ct-validator", "loom"],
-  "includeProtocols": ["research", "consensus", "specification", "decomposition", "validation", "adr"]
+  "skills": [
+    "ct-research-agent",
+    "ct-consensus-voter",
+    "ct-adr-recorder",
+    "ct-spec-writer",
+    "ct-epic-architect",
+    "ct-validator",
+    "ct-ivt-looper",
+    "ct-release-orchestrator",
+    "ct-contribution",
+    "ct-artifact-publisher",
+    "ct-provenance-keeper",
+    "ct-council",
+    "ct-codebase-mapper"
+  ],
+  "includeProtocols": [
+    "research",
+    "consensus",
+    "specification",
+    "decomposition",
+    "validation",
+    "adr",
+    "testing",
+    "release",
+    "contribution",
+    "artifact-publish",
+    "provenance"
+  ]
 }