@ikon85/agent-workflow-kit 0.30.0 → 0.32.0

package/.claude/skills/to-prd/SKILL.md

@@ -10,6 +10,20 @@ description: "Turn a locked plan (PLAN.md in the worktree, conversation context,
 
 Takes an **already-locked plan** and publishes it as a **Draft-PRD issue**. **Never invents requirements** — only synthesizes what's already decided. Pipeline: `board-to-waves → grill(-with-docs) → to-prd → to-issues`. The **grill sits upstream**; to-prd writes the PRD after the grill. **Slicing + promotion to an anchor (cluster/Wave, child link) = `to-issues`** (future), not here.
 
+<!-- readiness:required-preflight:start -->
+## 0. Required readiness preflight
+
+This is the first executable workflow step. From the project root, before any remote write or other `gh`/`board-sync.py` command, run this read-only check:
+
+```bash
+node scripts/readiness.mjs check --skill to-prd --json
+```
+
+- `verdict=ready`: continue with the existing workflow without announcing the check. **Ready is silent.**
+- `verdict=blocked`: `STOP` before any mutation. Report every required capability as `<capability>=<state>` so `missing`, `pending`, and `invalid` remain distinct, then give exactly one recovery path: **Run `/setup-workflow`, then rerun `/to-prd`.** Do not fall back to bare tracker or board commands.
+- `managedBoard=not-applicable`: `STOP` and report that `/to-prd` is **inapplicable** for a project that deliberately has no managed board. This is a terminal project decision, not invalid evidence and not a partially active mode.
+<!-- readiness:required-preflight:end -->
+
 Board constants (project node, field/status IDs) + helpers live **consumer-side**: read `docs/agents/board-sync.md` from the project root + use the helper `scripts/board-sync.py` (missing → `/setup-workflow` scaffolds the project layer). Issue body **always** via `--body-file` (inline `--body` with backticks/parens crashes bash).
 
 ## 1. Input — source-agnostic

package/.claude/skills/to-waves/SKILL.md

@@ -14,6 +14,20 @@ Takes a **Program-PRD** — the native Sub-Issue anchor over a multi-wave progra
 The **grill and to-prd sit upstream**; to-waves runs once the Program-PRD exists.
 It **never invents structure** — it only unfolds what the plan already decided.
 
+<!-- readiness:required-preflight:start -->
+## 0. Required readiness preflight
+
+This is the first executable workflow step. From the project root, before any remote write or other `gh`/`board-sync.py` command, run this read-only check:
+
+```bash
+node scripts/readiness.mjs check --skill to-waves --json
+```
+
+- `verdict=ready`: continue with the existing workflow without announcing the check. **Ready is silent.**
+- `verdict=blocked`: `STOP` before any mutation. Report every required capability as `<capability>=<state>` so `issueTracker`, `managedBoard`, and `specCompleteness` failures — including distinct `missing`, `pending`, and `invalid` states — stay visible, then give exactly one recovery path: **Run `/setup-workflow`, then rerun `/to-waves`.** Do not fall back to bare tracker or board commands.
+- `managedBoard=not-applicable`: `STOP` and report that `/to-waves` is **inapplicable** for a project that deliberately has no managed board. This is a terminal project decision, not invalid evidence and not a partially active mode.
+<!-- readiness:required-preflight:end -->
+
 Board constants (project node, field/status IDs) + helpers live **consumer-side**:
 read `docs/agents/board-sync.md` from the project root + use the helper
 `scripts/board-sync.py` (missing → `/setup-workflow` scaffolds the project layer).
@@ -36,8 +50,8 @@ target, an anchor is already a single wave.
 
 ## 2. Parse + validate — the graph preflight
 
-Run the graph preflight first — it is **read-only** (a single board read, zero
-mutations):
+After the required readiness preflight, run the graph preflight before preview or
+publication — it is **read-only** (a single board read, zero mutations):
 
 ```bash
 python3 scripts/board-sync.py validate-graph --issue <prd#>

package/.claude/skills/triage/SKILL.md

@@ -14,6 +14,30 @@ Every comment or issue posted to the issue tracker during triage **must** start
 > *This was generated by AI during triage.*
 ```
 
+## Required readiness preflight
+
+Before reading from or writing to the issue tracker, labels, or board, run:
+
+```sh
+node scripts/readiness.mjs check --skill triage --json
+```
+
+Treat the result as authoritative. A `ready` verdict is silent: continue with
+the existing triage flow and all of its confirmation gates. For a `blocked`
+verdict, stop without querying or mutating the issue tracker and report
+`Triage unavailable`, the exact state (`missing`, `pending`, `not-applicable`,
+or `invalid`), and the matching recovery path:
+
+- `issueTracker` → run `/setup-workflow`, then fill
+  `docs/agents/issue-tracker.md`.
+- `managedBoard` → run `/setup-workflow`, then configure
+  `docs/agents/board-sync.md`; `not-applicable` means this board-driven skill is
+  unavailable, not partially usable.
+- `triageLabels` → run `/setup-workflow`, then fill
+  `docs/agents/triage-labels.md`.
+
+Never guess a tracker, label, board, field, status, or fallback workflow.
+
 ## Reference docs
 
 - [AGENT-BRIEF.md](AGENT-BRIEF.md) — how to write durable agent briefs

package/.claude/skills/verify-spike/SKILL.md

@@ -21,10 +21,29 @@ This is the "Verify First" rule with a runnable harness behind it: when you cann
 
 If the question is really "what should this be", it is not a verify-spike — those are open, not yes/no.
 
+## Readiness preflight — first
+
+<!-- readiness:optional-preflight:start -->
+Before framing or running the spike, run this once from the project root:
+
+```bash
+node scripts/readiness.mjs check --skill verify-spike --json
+```
+
+- `ready`: continue without a readiness message. Ready is silent.
+- `degraded`: keep the generic empirical spike active, omit only the inactive block `projectPlacement`, and emit exactly one concise summary: `Readiness degraded — inactive block projectPlacement (verifySpikeLayer: <state>). Run /setup-workflow, configure docs/agents/skills/verify-spike.md, then rerun this skill.`
+- `blocked`: stop before continuing and report the non-ready required capability plus the exact `/setup-workflow` recovery path.
+- Invalid is always visible: include the `invalid` capability state in the single summary and never treat it as an opt-out. Do not emit separate warnings later in the workflow.
+<!-- readiness:optional-preflight:end -->
+
+<!-- readiness:block projectPlacement -->
+When `projectPlacement` is active, read `docs/agents/skills/verify-spike.md` and follow its project-specific harness-placement and import rules.
+<!-- readiness:end -->
+
 ## Steps
 
 1. **Frame one falsifiable question.** Write it down as a single sentence with a yes/no answer and the exact version/context it is scoped to — e.g. "Does `customType.mapFromDriverValue` run on `drizzle-orm@1.0.0-rc.3` + node-postgres?". Name what a YES vs a NO looks like in the output *before* you run anything.
-2. **Build the smallest harness that forces the answer.** Borrow the feedback-loop toolkit from `diagnose` Phase 1 — a one-call throwaway script, a fixture replay, a tiny HTTP/curl probe, a headless-browser assertion. Pick the cheapest one that touches the real thing (real lib version, real runtime, the actual DB read). One command to run; locate it in a clearly-throwaway path (`scratch/`, `*.spike.ts`). If a project layer exists at `docs/agents/skills/verify-spike.md`, follow its harness-placement/import rules — some repos need spikes inside a package dir so real imports resolve.
+2. **Build the smallest harness that forces the answer.** Borrow the feedback-loop toolkit from `diagnose` Phase 1 — a one-call throwaway script, a fixture replay, a tiny HTTP/curl probe, a headless-browser assertion. Pick the cheapest one that touches the real thing (real lib version, real runtime, the actual DB read). One command to run; locate it in a clearly-throwaway path (`scratch/`, `*.spike.ts`).
 3. **Run it and capture the proof.** Keep the raw output — the value, the error, the stack, the HTTP status. The verdict is only as good as the evidence pasted under it.
 4. **Record the verdict durably, with its evidence inline.** Yes/No + the proof (output snippet / `file:line` / version) + the date + the scope it was checked at. Sink it where the decision lives: an ADR, the issue body, the plan, or a PR comment. A verdict without inline evidence is just an unverified claim — keep the proof attached so a later reader does not have to re-run the spike to trust it.
 5. **Delete the harness.** The *answer* is the only keeper. Remove the spike code (or fold the proven fact into real code) so nothing throwaway rots in the repo.

package/.claude/skills/wrapup/SKILL.md

@@ -3,7 +3,7 @@ name: wrapup
 disable-model-invocation: true
 description: >-
   Use ONLY when the user types /wrapup. Session-end "land & clean" for a
-  finished feature/fix worktree — merges the open PR (= triggers prod deploy),
+  finished feature/fix worktree — merges the open PR,
   kills the worktree dev server, removes the worktree + local branch, and
   fast-forwards the main checkout so main is current again, then sweeps
   merged-branch leftovers (local + stale remote whose PR is merged). If the
@@ -20,7 +20,11 @@ Trigger: user types `/wrapup` (optionally with a PR number). **Manual only** —
 
 ## ⚠ Spec context
 
-**Merging to `main` = prod deploy.** The agent never deploys on its own — the user's `/wrapup` input IS the explicit merge+deploy authorization for that run. Never call this skill from a hook, another skill, or autonomously. Deploy banner before the merge, no y/n confirmation (deliberate); the pre-flight hard stops are non-negotiable.
+The user's `/wrapup` input IS the explicit landing authorization for that run.
+It authorizes the normal merge flow whether Prod readiness is ready or degraded;
+it never authorizes the agent to invent or configure a deploy target. Never call
+this skill from a hook, another skill, or autonomously. There is no second merge
+confirmation; the pre-flight hard stops are non-negotiable.
 
 ## Execution model — script does mechanics, the agent does judgment
 
@@ -37,6 +41,17 @@ python3 scripts/wrapup-land.py preflight
 ```
 Hard stop (the only pure precondition): not in a feature worktree / on `main` — the script exits 1. The report carries everything the later steps need: dirty files, `.env` hits, secret-grep hits, issue + parent (leaf vs. anchor slice), existing PR + whether its body has a `**Retro:**` line, parsed `ANNAHMEN.md` drift lines, profile values (`retro_values`, `vor_bau`, remote-sweep switch).
 
+Then run:
+
+```bash
+node scripts/readiness.mjs check --skill wrapup --json
+```
+
+`prodTarget: ready` activates only `deployReport` below. `pending` or `missing`
+omits that block, emits exactly one concise note — `Prod readiness is pending or missing; deploy reporting omitted.` — and landing continues normally.
+`invalid` means malformed or divergent Prod evidence: STOP and report the
+conflicting instruction surfaces; never choose a target on the user's behalf.
+
 ### 2 · Retro gate (blocking, optional retro-exit — before anything is committed)
 One reminder, not a merge confirmation:
 > "Already ran a retro? **(a)** yes / continue → landing now. **(b)** you want one first → the retro starts now; afterwards, invoke `/wrapup` again — repo-file patches then travel in this PR."
@@ -82,10 +97,17 @@ One call covers: push → PR create/reuse (+ drift markers merged into the body)
 STOP → diagnose in the main conversation, fix, re-run `land` (an already-merged PR resumes at teardown).
 
 ### 6 · Post-merge (agent)
-- **Deploy banner**, one line: `⚠ PR #<pr> merged → main deploys (~7 min live).`
 - **Sibling propagation:** for each `drift_markers` entry in the land report, append the note to the target issue's `vor_bau` section + re-stamp its `plan_revision`. Log-based markers → **write directly, then show what was written where** (mandatory report — visibility moved from a pre-gate into the report, decision 2026-07-06); fallback candidates the user hasn't confirmed yet → confirm first. Program context widens the target set to unbuilt wave-stubs/leaves and the Program-PRD itself — same append-only mechanism. **Exception:** appends to the Program-PRD or unbuilt wave-stubs do **not** re-stamp `plan_revision` — that stays reserved for structural wave-plan edits via the `to-waves` escalation path; a mere drift note must not stale-block published stubs.
 - **Anchor close:** report says `anchor_complete: true` → `gh issue close <anchor> -c "Wave complete — all slices merged via PR #<pr>."` and verify board status Done. The guard keeps anchors away from every auto-close — this verified close is the only close path; without it the anchor stays silently open after the last slice. **Then re-run the upward propagation**: the land-time `program-sync` ran BEFORE this close, so on a wave-completing slice the Wellenplan still shows 🔄 and the Phasen-Gate stays unchecked — after the board shows Done, run `python3 scripts/board-sync.py program-sync <program-prd#>` once more (the report's `program_sync.program` names it; skip when the report says the parent is not a program). Board auto-rules can lag the close (Close→Done race) — verify Done first, that's what the token reads.
-- **Report**, concise, from the land JSON: PR merged · issue close (auto/manual) · worktree removed · branch deleted · sweep counts local/remote · anchor synced + complete/pending · program propagation (`program_sync`: Wellenplan refreshed / gates checked / skipped) · propagation writes (what → where) · `main` at `<sha>` · deploy running.
+- **Report**, concise, from the land JSON: PR merged · issue close (auto/manual) · worktree removed · branch deleted · sweep counts local/remote · anchor synced + complete/pending · program propagation (`program_sync`: Wellenplan refreshed / gates checked / skipped) · propagation writes (what → where) · `main` at `<sha>`.
+
+<!-- readiness:block deployReport -->
+- **Deploy-aware report:** read the coherent `## Prod` block; before merging,
+  state the configured deploy trigger and expected outcome. After merge, report
+  the configured target and its actual known state. Do not claim a deployment
+  is running or live unless the configured trigger and observed evidence prove
+  it; keep unknown timing explicit.
+<!-- readiness:end -->
 
 ## Out of scope
 - Live-verify / DoD: must happen **before** `/wrapup` — this skill lands, it does not verify.

package/README.md

@@ -348,6 +348,47 @@ concurrency-safe. Do not run manifest-mutating commands concurrently. Flags:
 
 ## Release notes
 
+### 0.32.0
+
+- changed: `.agents/skills/audit-skills/SKILL.md`
+- changed: `.agents/skills/git-worktree-recover/SKILL.md`
+- changed: `.agents/skills/orchestrate-wave/SKILL.md`
+- changed: `.claude/skills/audit-skills/SKILL.md`
+- changed: `.claude/skills/git-worktree-recover/SKILL.md`
+- changed: `.claude/skills/orchestrate-wave/SKILL.md`
+
+### 0.31.0
+
+- changed: `.agents/skills/board-to-waves/SKILL.md`
+- changed: `.agents/skills/code-review/SKILL.md`
+- changed: `.agents/skills/kit-update/SKILL.md`
+- changed: `.agents/skills/local-ci/SKILL.md`
+- changed: `.agents/skills/project-release/SKILL.md`
+- changed: `.agents/skills/security-audit/SKILL.md`
+- changed: `.agents/skills/setup-workflow/SKILL.md`
+- changed: `.agents/skills/spec-self-critique/SKILL.md`
+- changed: `.agents/skills/to-issues/SKILL.md`
+- changed: `.agents/skills/to-prd/SKILL.md`
+- changed: `.agents/skills/to-waves/SKILL.md`
+- changed: `.agents/skills/triage/SKILL.md`
+- changed: `.agents/skills/verify-spike/SKILL.md`
+- changed: `.agents/skills/wrapup/SKILL.md`
+- changed: `.claude/skills/board-to-waves/SKILL.md`
+- changed: `.claude/skills/code-review/SKILL.md`
+- changed: `.claude/skills/kit-update/SKILL.md`
+- changed: `.claude/skills/local-ci/SKILL.md`
+- changed: `.claude/skills/project-release/SKILL.md`
+- changed: `.claude/skills/security-audit/SKILL.md`
+- changed: `.claude/skills/setup-workflow/SKILL.md`
+- changed: `.claude/skills/spec-self-critique/SKILL.md`
+- changed: `.claude/skills/to-issues/SKILL.md`
+- changed: `.claude/skills/to-prd/SKILL.md`
+- changed: `.claude/skills/to-waves/SKILL.md`
+- changed: `.claude/skills/triage/SKILL.md`
+- changed: `.claude/skills/verify-spike/SKILL.md`
+- changed: `.claude/skills/wrapup/SKILL.md`
+- changed: `scripts/kit-update-pr.mjs`
+
 ### 0.30.0
 
 - added: `.claude/skills/skill-manifest.json`

package/agent-workflow-kit.package.json

@@ -1,5 +1,5 @@
 {
-  "kitVersion": "0.30.0",
+  "kitVersion": "0.32.0",
   "files": [
     {
       "path": ".agents/skills/ask-matt/SKILL.md",
@@ -27,7 +27,7 @@
       "ownerSkill": "audit-skills",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "f99bfc88bf23ad8279583653bdd7b63dcdcff010227258e4adf9e8df69384f7f",
+      "sha256": "662c4dec0c03716c468f202f73f52140ceba84e092873e6619692dde6d7ed0f2",
       "mode": 420,
       "origin": "kit"
     },
@@ -37,7 +37,7 @@
       "ownerSkill": "board-to-waves",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "aaa326544b53b43635f1f212ac3bd18a368e9440c41de748c4eccc911bc615bb",
+      "sha256": "203211bc1bd149918783de4ead312d94c4faf1e4ba25d2625ce34f99a0806282",
       "mode": 420,
       "origin": "kit"
     },
@@ -57,7 +57,7 @@
       "ownerSkill": "code-review",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "071aa46aa0ca2d840e3873288ffd473d4308304c4352177583b22b1bf3fdba02",
+      "sha256": "9d0e54bd73bd4cdd810e714f1a5af07a4cd00b7cc07fe360e587abbf3005f2aa",
       "mode": 420,
       "origin": "kit"
     },
@@ -197,7 +197,7 @@
       "ownerSkill": "git-worktree-recover",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "71e043456586a59ddb83fb3fb1f98c8c269cd7575ade8616238bdb7e07fba4ba",
+      "sha256": "1628f47a5b5f71b7596ec070c8f038a3ce98abe007fce1b7f5c21ea40858124d",
       "mode": 420,
       "origin": "kit"
     },
@@ -377,7 +377,7 @@
       "ownerSkill": "kit-update",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "1ec44ea1c4ab0c74febaf54e99d61122e9153c4820ef923287db7954738b5a99",
+      "sha256": "880766b7aef88760f6d79dd31c3333356eef060623fc053fc61f5d5611765bb8",
       "mode": 420,
       "origin": "kit"
     },
@@ -387,7 +387,7 @@
       "ownerSkill": "local-ci",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "bec1a01930e493676988cb7de220270a6988c27df3fc0880b49cf988d17c4c28",
+      "sha256": "1ebf841e35d0df7e68b2684ba8fd7c674327bcb729a693fd5ed87189ac5e90be",
       "mode": 420,
       "origin": "kit"
     },
@@ -417,7 +417,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "39c0dd4d6f7663ab9a3602aab2869a881497604ca12f53f6ba0ca7debb0a4157",
+      "sha256": "7a94293b7db49f42497d34e6ae0fe9992ab1c770ae0766557618818d6d671c50",
       "mode": 420,
       "origin": "kit"
     },
@@ -427,7 +427,7 @@
       "ownerSkill": "project-release",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "5aa0b0827e8691334c30608df8506c756455ecebcc460efa140889297cf02ed5",
+      "sha256": "754910dc182b3868f9c0f95b7ddb5665fe955f68bc9bea4e44c7c6f4ef5d8df9",
       "mode": 420,
       "origin": "kit"
     },
@@ -537,7 +537,7 @@
       "ownerSkill": "security-audit",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "86f1eb3afd4d71fec8d39e2fbf9c7b69f257e8f6742ea03151fe161a3e5e71e1",
+      "sha256": "2e937d1e8c40b20da0c733e1e5c355531b3e777abf6197795186405afb5e009d",
       "mode": 420,
       "origin": "kit"
     },
@@ -647,7 +647,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "44b5d8e4cbc15be187678ac42e7ce222553878e57ac7b11cf429deddba7656c5",
+      "sha256": "f0d6809b86eec77cf54bccc30e6a7603d831678fcc8b5f52b4e073f9f56a72a8",
       "mode": 420,
       "origin": "kit"
     },
@@ -737,7 +737,7 @@
       "ownerSkill": "spec-self-critique",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "ead51e70453c0121350ebfc15a301b66deb86d29628c50dd0fb0b5c0cbdd322d",
+      "sha256": "586d49acff382484e7db58719a34d257936ffb8c19c9de1a3322f6b1b5e675ad",
       "mode": 420,
       "origin": "kit"
     },
@@ -817,7 +817,7 @@
       "ownerSkill": "to-issues",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "2fc271cda4d1b46b82ac32a9e8aa04cf4349bbac0ea31133ee03458d2c6c2b13",
+      "sha256": "cae01235d1647e30bf60df93d32cb2f9be1b5dc908429514287aaf648f8094e1",
       "mode": 420,
       "origin": "kit"
     },
@@ -847,7 +847,7 @@
       "ownerSkill": "to-prd",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "33c5229fcdae4309c2a5c7ea28c60b8708be276960c628f906a6da5a4450cbbb",
+      "sha256": "dae11a76b317e190f2b10580eda098a3dcf73c0be3806050a7caa1b933107fa6",
       "mode": 420,
       "origin": "kit"
     },
@@ -867,7 +867,7 @@
       "ownerSkill": "to-waves",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "8bed0af37f81f0160079c316f26815f220e1eb3e47359a723262f6fe37978ea0",
+      "sha256": "0229b717783054c87c42e088d1323990b6a30ffc80b337b6c14caf5e8f7964d1",
       "mode": 420,
       "origin": "kit"
     },
@@ -907,7 +907,7 @@
       "ownerSkill": "triage",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "cef71b5f98bb48754e7e540bdb4ebe1f974b7d809c5476d9e29b23230072ff9a",
+      "sha256": "dc27da1360edbc8e52a3b2ba67a9bf3d7d15a1a5403204737d7d0d11b7c53e32",
       "mode": 420,
       "origin": "kit"
     },
@@ -927,7 +927,7 @@
       "ownerSkill": "verify-spike",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "44d6d94ad751ed54828aada2431867b766c285a5b8074d8af9e38c7f1b576d8b",
+      "sha256": "a823094a83cdfde40954f581064a5a64b5fcc41a0b5eba2989c9a20ecb39b02b",
       "mode": 420,
       "origin": "kit"
     },
@@ -957,7 +957,7 @@
       "ownerSkill": "wrapup",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "0b973d9531514f4400e107858ff0070c522d5e542c47123473667ca8337627fd",
+      "sha256": "fd4b4abc17cf3d333057d1a25d3689dbab3fe59d08189b6136ac2198cec0abe4",
       "mode": 420,
       "origin": "kit"
     },
@@ -1189,7 +1189,7 @@
       "ownerSkill": "audit-skills",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "80ab0f1910914f4bcb375bf63aa66a1297a0b873082d7cc4f386d0d931e6015f",
+      "sha256": "dce7c13e9b9c2eb6fe9028f69fe2fe2d48ad50546327c9d9c1232191425f1b7c",
       "mode": 420,
       "origin": "kit"
     },
@@ -1199,7 +1199,7 @@
       "ownerSkill": "board-to-waves",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "1433f500d64adfd0365c0ec74366075fd54e053846c95aafa5ee6773a5fb2ea4",
+      "sha256": "33c897cf670e57b41bf231be7cf1ce3e35634907c94f6b0e037a2eae19adf582",
       "mode": 420,
       "origin": "kit"
     },
@@ -1219,7 +1219,7 @@
       "ownerSkill": "code-review",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "071aa46aa0ca2d840e3873288ffd473d4308304c4352177583b22b1bf3fdba02",
+      "sha256": "9d0e54bd73bd4cdd810e714f1a5af07a4cd00b7cc07fe360e587abbf3005f2aa",
       "mode": 420,
       "origin": "kit"
     },
@@ -1419,7 +1419,7 @@
       "ownerSkill": "git-worktree-recover",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "435c3a32a0c31dbefc774d8f6caa30cae9f23026930292ea0c364d2115ed3e52",
+      "sha256": "3251c8db671286330e48748719e05ee3fdc0555d93d61d7fee3fc0e0d2868e92",
       "mode": 420,
       "origin": "kit"
     },
@@ -1659,7 +1659,7 @@
       "ownerSkill": "kit-update",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "1ec44ea1c4ab0c74febaf54e99d61122e9153c4820ef923287db7954738b5a99",
+      "sha256": "880766b7aef88760f6d79dd31c3333356eef060623fc053fc61f5d5611765bb8",
       "mode": 420,
       "origin": "kit"
     },
@@ -1669,7 +1669,7 @@
       "ownerSkill": "local-ci",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "054fdd664c71875e965d9f362fff34beedf13c4cf9a840be57758792e0d8755d",
+      "sha256": "3af9e71a2b65b66cfa2b40d780badd86b925c1d18e0cb16fdd25041db12f2cbc",
       "mode": 420,
       "origin": "kit"
     },
@@ -1699,7 +1699,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "20a972d7c13f059b1fda4daaeb77da777c898620bf9ec6bf6dd19c31b7e41d90",
+      "sha256": "9690ec772a99131c225037dd4bca884e899c133a8e460c36b26a25d6c6c797e1",
       "mode": 420,
       "origin": "kit"
     },
@@ -1709,7 +1709,7 @@
       "ownerSkill": "project-release",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "5aa0b0827e8691334c30608df8506c756455ecebcc460efa140889297cf02ed5",
+      "sha256": "754910dc182b3868f9c0f95b7ddb5665fe955f68bc9bea4e44c7c6f4ef5d8df9",
       "mode": 420,
       "origin": "kit"
     },
@@ -1819,7 +1819,7 @@
       "ownerSkill": "security-audit",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "b6785a3ef25c70faf59fb94ab1790f8e159ecceeafe75ea20287439ce9d01006",
+      "sha256": "4fcd28c4019e84b6ae5307437ecc979a2d6a490a7a379a7e104b3a4974ca877e",
       "mode": 420,
       "origin": "kit"
     },
@@ -1949,7 +1949,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "44b5d8e4cbc15be187678ac42e7ce222553878e57ac7b11cf429deddba7656c5",
+      "sha256": "f0d6809b86eec77cf54bccc30e6a7603d831678fcc8b5f52b4e073f9f56a72a8",
       "mode": 420,
       "origin": "kit"
     },
@@ -2047,7 +2047,7 @@
       "ownerSkill": "spec-self-critique",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "6352d4e09e5a383cee73d5e5bf7a0e6da6403a479b92b049c2d152a9de3d3cfe",
+      "sha256": "0ed723ebad6ceb74defed56a51aa7cee8c343665288e96ff2b06ef214165c7e1",
       "mode": 420,
       "origin": "kit"
     },
@@ -2127,7 +2127,7 @@
       "ownerSkill": "to-issues",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "c53523f2b7b4023ea33cb25903d7b7a018041ac135fa11777f64fa4bebfcba11",
+      "sha256": "874a636bde53180dab4d69b801c7d3a5c5cbdaf74e1969af56c8d7805163ef24",
       "mode": 420,
       "origin": "kit"
     },
@@ -2157,7 +2157,7 @@
       "ownerSkill": "to-prd",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "9fd7582508fb33cbca2ce945a628b43b502fe942a83d3a16ff495f7c42e59109",
+      "sha256": "621644d4de0bdb02d367381c8cf58584c393b9d385f5f2881c00f9d4f70fd834",
       "mode": 420,
       "origin": "kit"
     },
@@ -2177,7 +2177,7 @@
       "ownerSkill": "to-waves",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "8bed0af37f81f0160079c316f26815f220e1eb3e47359a723262f6fe37978ea0",
+      "sha256": "0229b717783054c87c42e088d1323990b6a30ffc80b337b6c14caf5e8f7964d1",
       "mode": 420,
       "origin": "kit"
     },
@@ -2217,7 +2217,7 @@
       "ownerSkill": "triage",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "6bb979a19e4bf38d1bb4b056523551b09c7b0e5e45a67f51e16b74f0ac703612",
+      "sha256": "ea9be39611b3f007edd12089a03f9b4a408e3651765eb104a966cf85c2717496",
       "mode": 420,
       "origin": "kit"
     },
@@ -2237,7 +2237,7 @@
       "ownerSkill": "verify-spike",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "72caaf97909efcf8e56fdd4c2bb25db10749d172077e38f0beac1a07ab7cb611",
+      "sha256": "ee2258edd8bb9fb03bb1f98926aae20b25147b04aa88af68e06a45a6d75549b5",
       "mode": 420,
       "origin": "kit"
     },
@@ -2267,7 +2267,7 @@
       "ownerSkill": "wrapup",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "7b3266caaf53d0eadae2e16617fbf89fa170c50aaa9a916023c37afb41f05a79",
+      "sha256": "05a4981b54fb5c4ef1b842bbdd45f6ca91cf0047e38e511feac86e20206c0fe7",
       "mode": 420,
       "origin": "kit"
     },
@@ -2475,7 +2475,7 @@
       "path": "scripts/kit-update-pr.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "64e7818003d7c6db227eadad0b114e199399a52a96965ab2f0f496c0a1e5c79c",
+      "sha256": "83f30a4ca938171cfa2f4153917813fae40bf2a906940e047c7066d18284209b",
       "mode": 493,
       "origin": "kit"
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikon85/agent-workflow-kit",
-  "version": "0.30.0",
+  "version": "0.32.0",
   "description": "Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.",
   "type": "module",
   "bin": {

package/scripts/kit-update-pr.mjs

@@ -33,7 +33,7 @@ export async function orchestrateUpdatePullRequest(options) {
     return { status: 'failed', branch, reason: 'multiple-open-pull-requests' };
   }
   await publishBranch(branch);
-  const input = { title: UPDATE_TITLE, body: UPDATE_BODY, branch };
+  const input = { title: UPDATE_TITLE, body: pullRequestBody(update.stdout), branch };
   if (pulls.length === 1) {
     await updatePullRequest(pulls[0].number, input);
     return { status: 'updated', branch, pullRequest: pulls[0].number };
@@ -42,6 +42,19 @@ export async function orchestrateUpdatePullRequest(options) {
   return { status: 'created', branch };
 }
 
+function pullRequestBody(stdout = '') {
+  const labels = ['newly available:', 'newly degraded:', 'newly blocked:', 'still unresolved:'];
+  const clean = stdout.replaceAll(/\x1b\[[0-9;]*m/g, '');
+  const summary = clean.split('\n')
+    .map((line) => line.trim())
+    .filter((line) => labels.some((label) => line.includes(label)))
+    .map((line) => line.slice(Math.min(...labels.map((label) => {
+      const index = line.indexOf(label);
+      return index < 0 ? line.length : index;
+    }))));
+  return [UPDATE_BODY, '## Availability', summary.join('\n') || 'No readiness availability changes reported.'].join('\n\n');
+}
+
 export function createSystemAdapters({
   cwd = process.cwd(), env = process.env, execute = exec,
 } = {}) {

package/scripts/kit-update-pr.test.mjs

@@ -28,6 +28,27 @@ test('a successful update creates one stable update pull request', async () => {
   ]);
 });
 
+test('automated update pull requests carry the behavior availability summary', async () => {
+  const h = harness({ update: {
+    exitCode: 0,
+    stdout: [
+      'newly available: orchestrate-wave',
+      'newly degraded: orchestrate-wave.projectRecipe',
+      'newly blocked: none',
+      'still unresolved: orchestrateWaveRecipe:invalid',
+    ].join('\n'),
+    stderr: '',
+  } });
+
+  await orchestrateUpdatePullRequest(h.options);
+
+  const created = h.calls.find((call) => Array.isArray(call) && call[0] === 'create')[1];
+  assert.match(created.body, /## Availability/);
+  assert.match(created.body, /newly degraded: orchestrate-wave\.projectRecipe/);
+  assert.match(created.body, /still unresolved: orchestrateWaveRecipe:invalid/);
+  assert.match(created.body, /never merged automatically/);
+});
+
 test('a conflict produces a structured report without touching the stable branch', async () => {
   const h = harness({ update: { exitCode: 2, stdout: 'conflicts: 1', stderr: '' } });
   const report = await orchestrateUpdatePullRequest(h.options);

package/scripts/test_retro_wrapup_contract.py

@@ -59,6 +59,23 @@ class RetroEnforcementContract(unittest.TestCase):
 
 
 class WrapupChainingContract(unittest.TestCase):
+    def test_prod_readiness_degrades_reporting_without_blocking_landing(self):
+        required = (
+            "readiness.mjs check --skill wrapup --json",
+            "Prod readiness is pending or missing; deploy reporting omitted.",
+            "landing continues normally",
+            "never authorizes the agent to invent or configure a deploy target",
+            "<!-- readiness:block deployReport -->",
+            "<!-- readiness:end -->",
+        )
+        for surface in SURFACES:
+            with self.subTest(surface=surface):
+                text = skill(surface, "wrapup")
+                for phrase in required:
+                    self.assertIn(phrase, text)
+                self.assertEqual(text.count("<!-- readiness:block deployReport -->"), 1)
+                self.assertEqual(text.count("<!-- readiness:end -->"), 1)
+
     def test_retro_is_model_invocable_on_both_surfaces(self):
         for surface in SURFACES:
             with self.subTest(surface=surface):