@open-agent-toolkit/cli 0.2.65 → 0.2.67

package/assets/skills/create-agnostic-skill/references/docs/skills-guide.md

@@ -2,7 +2,7 @@
 
 Agent Skills ecosystem research and notes across providers.
 
-_Last updated: July 2026_
+_Last updated: September 2026_
 
 ---
 
@@ -55,7 +55,7 @@ license: MIT # License name or reference to bundled file
 compatibility:
   | # Max 500 chars — intended product, system packages, network needs
   Requires Node.js 18+
-allowed-tools: Read Grep Glob # Space-delimited tool list (experimental)
+allowed-tools: Read Grep Glob # Spec example: space-delimited. OAT writes commas and never parses the separator — see the separator note below
 metadata: # Arbitrary key-value pairs
   author: my-org
   version: '1.0'
@@ -64,7 +64,20 @@ metadata: # Arbitrary key-value pairs
 
 ### Spec Constraints
 
-- SKILL.md should be **under 500 lines / ~5,000 tokens**
+The size budget in the first bullet is **OAT's authoring guidance**, not a published
+specification limit — no spec text in this document's sources imposes either number
+(checked against https://agentskills.io/specification on 2026-09-09).
+The remaining bullets restate the spec's own file-layout guidance.
+
+**Separator note:** the spec's `allowed-tools` example is space-delimited. OAT writes
+the value comma-separated, and OAT never parses the separator — `validateOatSkills` in
+`packages/cli/src/validation/skills.ts` only checks that the key is present, and `getToolDetail` in
+`packages/cli/src/commands/tools/info/index.ts` reads the raw scalar. The comma form is therefore an
+authoring convention, not a runtime contract. Backstop:
+`it('declares allowed-tools as a comma-separated list in every canonical skill')` in
+`packages/cli/src/validation/skills.test.ts`.
+
+- SKILL.md should be **under 500 lines / ~5,000 tokens** (OAT authoring budget)
 - Use **relative paths** from skill root: `See [guide](references/REFERENCE.md)`
 - Keep file references **one level deep** from SKILL.md
 - Scripts should be **self-contained** or clearly document dependencies
@@ -79,12 +92,13 @@ If you want a skill to work across Claude Code, Cursor, Codex CLI, and Gemini CL
 1. Follow the Agent Skills spec folder layout and constraints
 2. Keep frontmatter minimal and conservative:
    - `name`: lowercase letters + numbers + hyphens, max 64 chars, must match folder name, no leading/trailing hyphen
-   - `description`: **single line**, ≤ 500 chars (Codex enforces this), describes _when to use_ + _what_
+   - `description`: **single line**, ≤ 500 chars, describes _when to use_ + _what_. This is OAT's house rule, not a provider requirement: `validateOatSkills` in `packages/cli/src/validation/skills.ts` enforces it only for skills whose directory name starts with `oat-`; elsewhere it is an unenforced authoring convention for portability. Backstops in `packages/cli/src/validation/skills.test.ts`: `it('reports description longer than 500 characters')` and `it('does not report a description longer than 500 characters for a non-oat-* skill')`. The spec allows 1024
 3. Put detailed instructions in the Markdown body (and/or `references/`), not in `description`
 4. Treat extra frontmatter keys as **best-effort extensions**:
    - Claude Code supports many optional frontmatter keys
-   - Codex CLI explicitly **ignores unknown keys** (safe to include, won't break, won't be used)
    - Cursor + Gemini support a subset; some keys are undocumented
+   - An unread key is inert rather than guaranteed harmless. See the Frontmatter Compatibility Matrix
+     below for the per-provider picture and for which entries are verified rather than inherited
 
 ### Cross-Provider Safe Template
 
@@ -129,6 +143,10 @@ Provider-specific fields can be layered on top but should be treated as non-port
 
 ## Frontmatter Compatibility Matrix
 
+This is the **single canonical frontmatter matrix** for this repository, verified against
+provider documentation on **2026-09-08** (re-verified 2026-09-09). Where any other table —
+including the third-party `npx skills` matrix below — disagrees with it, this table governs.
+
 Legend: ✅ documented support | ⚠️ provider-specific semantics | 💤 ignored (documented) | ❓ not documented / unknown
 
 | Field                          | Agent Skills Spec | Cursor      | Claude Code     | Codex CLI       | Copilot             | Gemini CLI    |
@@ -151,7 +169,22 @@ Legend: ✅ documented support | ⚠️ provider-specific semantics | 💤 ignor
 ² Claude Code uses first paragraph of body if `description` omitted
 ³ Copilot may require `license` in practice (see https://github.com/github/copilot-cli/issues/894)
 
-**Key takeaway:** Codex's "ignores extra keys" means you can include Claude/Cursor-only fields without breaking Codex, but you cannot depend on them affecting Codex behavior. `name` + `description` are the only truly portable interface.
+**Consolidation note (2026-09-08).** This table absorbed the shorter 5-column matrix that
+`create-agnostic-skill/SKILL.md` used to carry. Every field row from that table survives here. Two cells
+were deliberately changed rather than dropped silently: the old table asserted Cursor `❌` for
+`context` / `agent` and for `hooks`, and no current Cursor documentation substantiates a positive claim of
+non-support, so both are recorded here as `❓ not documented` instead. The old table carried no footnote or
+caveat that is missing above.
+
+**Key takeaway:** `name` + `description` are the only truly portable interface. Layer provider-specific
+fields on top of that baseline, but treat an unread key as inert rather than guaranteed harmless.
+
+**Codex and unknown keys — unverified as of 2026-09-08.** This document previously stated that Codex CLI
+explicitly ignores unknown frontmatter keys. That statement is retained here as an inherited claim, not a
+checked one: the current Codex skills documentation at https://learn.chatgpt.com/docs/build-skills carries no
+statement about unknown or extra frontmatter keys (checked 2026-09-08, re-checked 2026-09-09). The `💤 ignored`
+Codex cells above rest on that earlier, no-longer-restated documentation. Do not depend on a Claude-only or
+Cursor-only field having any effect under Codex, and do not treat its inertness there as documented.
 
 ---
 
@@ -222,7 +255,7 @@ supported home for Cursor-only skills. Cursor also reads `.claude/skills/` and
 
 ### Codex CLI (OpenAI)
 
-**Docs:** https://developers.openai.com/codex/skills
+**Docs:** https://learn.chatgpt.com/docs/build-skills
 
 **Skill locations (by precedence, high → low):**
 
@@ -238,10 +271,10 @@ supported home for Cursor-only skills. Cursor also reads `.claude/skills/` and
 **Codex-specific behaviors:**
 
 - **Uses `.agents/skills/` natively at all scopes** — Codex scans `.agents/skills/` from CWD up to repo root, plus `$HOME/.agents/skills` for user-level
-- **Ignores unknown frontmatter keys** — you can include Claude/Cursor-specific fields without breaking Codex, but they won't affect behavior
 - **Does NOT deduplicate** same-named skills — multiple can appear in selectors
 - `name`: ≤ 100 chars, **single line** (spec says 64; use 64 for max portability)
-- `description`: ≤ 500 chars, **single line** (spec says 1024; use 500 for max portability)
+- **Skill-list context budget (verified 2026-09-08 against https://learn.chatgpt.com/docs/build-skills, re-verified 2026-09-09):** the initial skills list — each skill's name, description, and file path — uses at most 2% of the model's context window, or 8,000 characters when the context window is unknown. If many skills are installed, Codex shortens skill descriptions first, and for large skill sets it may omit skills from the list and show a warning. The budget applies only to the initial list; the full `SKILL.md` is read once a skill is selected. The page states **no** single-line requirement and **no** character limit for `description`
+- `description`: OAT's own house rule — not a Codex rule — is a single-line scalar of at most 500 characters. `validateOatSkills` in `packages/cli/src/validation/skills.ts` enforces it **only for skills whose directory name starts with `oat-`**; for every other skill it is an unenforced repository authoring convention. Backstops in `packages/cli/src/validation/skills.test.ts`: `it('reports description longer than 500 characters')` and `it('does not report a description longer than 500 characters for a non-oat-* skill')`. Because implicit matching depends on `description`, front-load trigger keywords so the skill still matches when a host shortens it
 - Markdown body stays on disk and **is not injected unless explicitly invoked**
 - Built-in `$skill-creator` and `$skill-installer` skills
 - `/skills` slash command or `$` prefix for explicit invocation
@@ -368,6 +401,12 @@ For automated distribution, use **OAT sync** (for local/internal skills) or **`n
 
 ```bash
 # OAT sync — manages local canonical → provider distribution with manifest tracking
+# --scope all is correct here: this section is about user-level distribution.
+# --scope project writes only this repository's provider views; --scope user writes only
+# the invoking user's home-scope views; --scope all writes both and is the default when
+# the flag is omitted. Inside a repository, prefer --scope project. Owner: computePlans in
+# packages/cli/src/commands/sync/index.ts (the project/user mapping split); backstop:
+# packages/cli/src/commands/sync/index.test.ts.
 oat sync --scope all
 
 # npx skills — installs remote skills from GitHub or skills.sh
@@ -385,7 +424,11 @@ and `~/.copilot/skills/` as legacy Copilot adoption inputs, not mirrors.
 
 ## Cross-Tool Compatibility (npx skills Matrix)
 
-From the `npx skills` CLI compatibility matrix:
+This is a **third-party, vendor-published claim** from the `npx skills` CLI compatibility matrix,
+reproduced as published (retrieved 2026-09-08, re-checked 2026-09-09), not independently verified here.
+Where it disagrees with the canonical Frontmatter Compatibility Matrix above — notably on `allowed-tools`,
+which it marks supported everywhere while the canonical matrix records `💤 ignored` for Codex and `❓` for
+Cursor — **the canonical matrix governs**.
 
 | Feature         | Claude Code | Codex | Cursor | Copilot | Gemini CLI | Amp | Roo | OpenCode | Cline |
 | --------------- | ----------- | ----- | ------ | ------- | ---------- | --- | --- | -------- | ----- |
@@ -420,7 +463,7 @@ At startup, agents load _only_ `name` + `description` across potentially 100+ sk
 
 1. **Lead with triggering conditions**: "Use when…" / "Run this when…" / "Triggers when…"
 2. **Include keywords for disambiguation**: nouns + verbs that differentiate from similar skills
-3. **Keep it single-line**: Codex enforces single-line ≤ 500 chars
+3. **Keep it single-line**: OAT's house rule is a single-line scalar of at most 500 characters — `validateOatSkills` in `packages/cli/src/validation/skills.ts` enforces it only for skills whose directory name starts with `oat-`, backstopped by `it('reports description longer than 500 characters')` and `it('does not report a description longer than 500 characters for a non-oat-* skill')` in `packages/cli/src/validation/skills.test.ts`. No provider is documented as requiring it; the spec allows 1024
 4. **Don't summarize the workflow**: providers route on description without reading the body
 
 Examples:
@@ -481,7 +524,7 @@ Examples:
 
 Same-named skills at a more specific scope overwrite those from a less specific scope. This mirrors the AGENTS.md "nearest file wins" pattern and is well-suited for monorepos where packages need different conventions.
 
-**Source:** https://developers.openai.com/codex/skills, https://developers.openai.com/codex/config-advanced/, https://github.com/vercel-labs/skills
+**Source:** https://learn.chatgpt.com/docs/build-skills, https://developers.openai.com/codex/config-advanced/, https://github.com/vercel-labs/skills
 
 ### Q: What's the practical token cost of skills via progressive disclosure vs. same content in AGENTS.md?
 
@@ -563,7 +606,7 @@ ln -s ../../.agents/skills/my-skill .claude/skills/my-skill    # Claude Code + C
 `.agents/skills/` natively at project and user scope. No skill symlinks are
 needed for those providers.
 
-**Source:** https://cursor.com/docs/context/skills, https://code.visualstudio.com/docs/copilot/customization/agent-skills, https://developers.openai.com/codex/skills, https://github.com/vercel-labs/skills
+**Source:** https://cursor.com/docs/context/skills, https://code.visualstudio.com/docs/copilot/customization/agent-skills, https://learn.chatgpt.com/docs/build-skills, https://github.com/vercel-labs/skills
 
 ### Q: How does Claude Code's skill description character budget interact with many installed skills?
 
@@ -589,7 +632,7 @@ needed for those providers.
 
 **Answer:** Uncertain. The `npx skills` compatibility matrix marks `allowed-tools` as ✅ for Cursor, but Cursor's own documentation does not explicitly document the field. Their docs only list `name`, `description`, `license`, `compatibility`, `metadata`, and `disable-model-invocation` as supported frontmatter.
 
-The safe assumption: Cursor likely doesn't error on `allowed-tools` (similar to Codex's "ignore unknown keys" behavior), but whether it actually restricts tool access based on the field is unconfirmed. Treat `allowed-tools` as **Claude Code-specific for enforcement** and include it as a documentation signal for other tools.
+The safe assumption: Cursor likely doesn't error on `allowed-tools`, but whether it actually restricts tool access based on the field is unconfirmed. (The comparable Codex "ignores unknown keys" behavior is itself an inherited, unverified claim — see the note under the Frontmatter Compatibility Matrix.) Treat `allowed-tools` as **Claude Code-specific for enforcement** and include it as a documentation signal for other tools.
 
 **Source:** https://cursor.com/docs/context/skills, https://github.com/vercel-labs/skills#compatibility
 
@@ -597,7 +640,7 @@ The safe assumption: Cursor likely doesn't error on `allowed-tools` (similar to
 
 **Answer:** Treat this as a two-layer pattern: frontmatter hinting for discovery, then provider-native interaction at runtime.
 
-- **Layer 1 (discovery UX):** Use `argument-hint` when a provider supports it (for slash/autocomplete discoverability), but do not treat it as input collection. Codex ignores unknown frontmatter keys, so `argument-hint` is non-functional there.
+- **Layer 1 (discovery UX):** Use `argument-hint` when a provider supports it (for slash/autocomplete discoverability), but do not treat it as input collection. `argument-hint` is not documented as functional under Codex; see the unknown-key note under the Frontmatter Compatibility Matrix for how far that claim is verified.
 - **Layer 2 (runtime clarification):** Use the provider's native user-question mechanism when available:
   - **Claude Agent SDK:** Handle `AskUserQuestion` in `canUseTool`. If you restrict tools with a `tools` array, include `AskUserQuestion` explicitly. Parse `questions[]` (`question`, `header`, `options`, `multiSelect`) and return `answers` mapped by question text.
   - **Codex:** Use `request_user_input` when the runtime exposes it. As of PR #12735 (Feb 25, 2026), Codex app-server behavior was expanded so Default mode can use `request_user_input`, with guidance to prefer assumptions first and ask only when unavoidable; rollout can still be mode/config dependent in host environments.

package/assets/skills/create-agnostic-skill/references/skill-template.md

@@ -43,7 +43,7 @@ metadata:
   # only when `metadata.version` is absent.
   # author: my-org
 
-# === Claude Code / Cursor extension fields (ignored by Codex, safe to include) ===
+# === Claude Code / Cursor extension fields (not read by every provider) ===
 argument-hint: '[required-arg] [--optional-flag]'
 # Claude Code only: Shows in autocomplete after /skill-name
 
@@ -52,6 +52,10 @@ disable-model-invocation: true
 
 allowed-tools: Read, Write, Glob, Grep
 # Claude Code only: Tools agent can use without permission prompts
+# Write the list comma-separated: the spec's example is space-delimited, but OAT
+# writes commas and never parses the separator. Backstop:
+# it('declares allowed-tools as a comma-separated list in every canonical skill')
+# in packages/cli/src/validation/skills.test.ts
 
 user-invocable: true
 # Claude Code only: Set false for helper skills that shouldn't appear in / menu
@@ -116,7 +120,6 @@ Include code blocks for commands:
 ```bash
 example command
 ```
-````
 
 ### Step 2: Second Step Title
 
@@ -174,17 +177,16 @@ Successful completion means:
 - ✅ Second condition is met
 - ✅ Artifacts created or modified as expected
 - ✅ Skill can be invoked with /skill-name
-
-```
+````
 
 ## Detail Level Guidelines
 
-| Skill Type | Detail Level | Examples |
-|------------|--------------|----------|
-| Complex workflows | Detailed | docs-new, docs-review |
-| Simple command-like | Concise | update-doc-refs, create-ticket |
-| Reference/standards | Detailed | repo-documentation |
-| Helper (auto-invoked) | Moderate | read-relevant-docs |
+| Skill Type            | Detail Level | Examples                       |
+| --------------------- | ------------ | ------------------------------ |
+| Complex workflows     | Detailed     | docs-new, docs-review          |
+| Simple command-like   | Concise      | update-doc-refs, create-ticket |
+| Reference/standards   | Detailed     | repo-documentation             |
+| Helper (auto-invoked) | Moderate     | read-relevant-docs             |
 
 ## Versioning Guidance
 
@@ -197,15 +199,16 @@ Successful completion means:
 
 **Portable baseline:** `name` + `description` are the only fields that work identically across all providers. Everything else is either spec-optional or provider-specific.
 
-**Safe layering strategy:** Start with the portable fields, then layer provider-specific fields on top. Codex explicitly ignores unknown keys, so including Claude-specific fields (like `allowed-tools`, `user-invocable`) won't break Codex — they just won't have effect there.
+**Safe layering strategy:** Start with the portable fields, then layer provider-specific fields on top. Providers differ in which extension fields they read, and an unread field is inert rather than guaranteed harmless, so treat a Claude-specific field as having no effect elsewhere rather than as universally safe. The dated per-provider picture lives in one place: see `references/docs/skills-guide.md`.
 
-**Description constraints for max portability:**
-- Single line (Codex enforces this)
-- ≤ 500 chars (Codex limit; spec allows 1024)
+**Description constraints:**
+
+- Single line, ≤ 500 chars — OAT's house rule, not a provider requirement. `validateOatSkills` in `packages/cli/src/validation/skills.ts` enforces it only for skills whose directory name starts with `oat-`; for every other skill it is an unenforced convention this repository follows for portability. Backstops in `packages/cli/src/validation/skills.test.ts`: `it('reports description longer than 500 characters')` and `it('does not report a description longer than 500 characters for a non-oat-* skill')`. The spec allows 1024
 - Lead with "Use when..." or "Run this when..."
 - Front-load trigger keywords in first 50 chars (may be truncated at scale)
 
 **Skill budget awareness (Claude Code):**
+
 - Claude Code has a ~16,000 character budget for skill descriptions at startup
 - At 60+ skills, descriptions may be silently truncated
 - Keep descriptions concise; the body handles detail
@@ -213,4 +216,3 @@ Successful completion means:
 **Shared references:** Keep a shared doc's canonical copy in `.agents/docs/` (edit it in one place). If a distributed skill needs it at invocation time, vendor it into `references/docs/` as a symlink to the canonical file (`ln -s ../../../../docs/my-guide.md references/docs/my-guide.md`); the build materializes the symlink so the doc travels with the skill. Reference the bundled `references/docs/...` path — a bare `.agents/docs/...` reference dangles once the skill is installed in another repo.
 
 For the full compatibility matrix and resolved research questions, see `references/docs/skills-guide.md`.
-```

package/assets/skills/oat-agent-instructions-apply/SKILL.md

@@ -5,7 +5,7 @@ disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash(git:*), Bash(gh:*), Glob, Grep, AskUserQuestion
 metadata:
-  version: 1.7.1
+  version: 1.7.2
 ---
 
 # Agent Instructions Apply

package/assets/skills/oat-agent-instructions-apply/references/instruction-file-templates/glob-scoped-rule.md

@@ -37,15 +37,13 @@ See `frontmatter/` for provider-specific frontmatter examples.
 ```{lang}
 {example}
 ```
-````
 
 ### Incorrect
 
 ```{lang}
 {counter-example}
 ```
-
-```
+````
 
 ## Guidance
 
@@ -56,4 +54,3 @@ See `frontmatter/` for provider-specific frontmatter examples.
 - Only the frontmatter wrapper changes per provider (see `frontmatter/` directory)
 - Use progressive disclosure: keep the rule short and link to deeper docs/examples when needed
 - Do not encode style trivia unless it is backed by repo evidence and genuinely helps the matching files
-```

package/assets/skills/oat-doctor/SKILL.md

@@ -6,7 +6,7 @@ disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Bash, Glob, Grep, AskUserQuestion
 metadata:
-  version: 1.2.2
+  version: 1.2.4
 ---
 
 # OAT Doctor
@@ -195,7 +195,7 @@ it, and lists every skill that pack ships.
 
 `project-management` pack skills:
 
-- oat-pjm-add-backlog-item, oat-pjm-decision
+- oat-pjm-add-backlog-item, oat-pjm-decision, oat-pjm-remote
 - oat-pjm-update-repo-reference, oat-pjm-review-backlog
 
 `research` pack skills:
@@ -238,11 +238,8 @@ OAT ▸ DOCTOR SUMMARY
 | Pack      | Scope   | Skills | Status   |
 | --------- | ------- | ------ | -------- |
 | core      | user    | 2/2    | current  |
-| docs      | project | 7/7    | current  |
 | workflows | project | 40/40  | current  |
 | ideas     | user    | 4/4    | current  |
-| project-management | project | 4/4 | current |
-| research  | project | 6/6    | current  |
 | utility   | project | 10/10  | outdated |
 
 ## Outdated Skills
@@ -255,7 +252,7 @@ OAT ▸ DOCTOR SUMMARY
 
 - **docs** pack: authoring-docs, oat-agent-instructions-analyze, oat-agent-instructions-apply, oat-docs-analyze, oat-docs-apply, oat-docs-authoring, oat-docs-bootstrap (7 skills available)
   → Run: oat tools install docs --scope {scope}
-- **project-management** pack: oat-pjm-add-backlog-item, oat-pjm-decision, oat-pjm-update-repo-reference, oat-pjm-review-backlog (4 skills available)
+- **project-management** pack: oat-pjm-add-backlog-item, oat-pjm-decision, oat-pjm-remote, oat-pjm-update-repo-reference, oat-pjm-review-backlog (5 skills available)
   → Run: oat tools install project-management --scope {scope}
 - **research** pack: analyze, compare, deep-research, recon, skeptic, synthesize (6 skills available)
   → Run: oat tools install research --scope {scope}

package/assets/skills/oat-pjm-remote/SKILL.md

@@ -0,0 +1,101 @@
+---
+name: oat-pjm-remote
+description: Use when explicitly intaking, publishing, refreshing, reconciling, or continuing an OAT PJM remote binding through a live host capability. Keeps policy, approval, state, and success verdicts in the OAT CLI while the host discovers and invokes currently granted execution capabilities.
+disable-model-invocation: false
+user-invocable: true
+allowed-tools: Read, Bash, AskUserQuestion
+metadata:
+  version: 1.0.2
+---
+
+# Operate Remote Project Bindings
+
+Use the OAT CLI as the authority for policy, approval, durable operation state,
+and verified outcomes. Your role is limited to live capability discovery,
+executing the exact semantic action emitted by the CLI, and returning one
+bounded sanitized observation.
+
+## Progress Indicators (User-Facing)
+
+Provide short updates at the durable boundaries: preflight, CLI preview or
+handoff, live capability selection, observation submission, and terminal CLI
+verdict. Never describe a host invocation result as success before the CLI has
+verified authoritative read-back.
+
+```text
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+OAT ▸ REMOTE PROJECT MANAGEMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+- `[1/4] Verifying PJM adoption and local policy…`
+- `[2/4] Discovering a matching live host capability…`
+- `[3/4] Preparing the durable CLI action with bounded evidence…`
+- `[4/4] Submitting evidence for CLI verification…`
+
+## Preflight
+
+Run:
+
+```bash
+oat pjm doctor --json
+```
+
+Continue only when `adoption.state` is `declared` or `inferred-legacy`. For
+`none` or `partial-initialization`, stop before any remote action and direct the
+operator to `oat pjm init`.
+
+## Live Capability Discovery
+
+Before the first provider-contacting remote command, inspect currently granted
+MCP or connector tools and their live descriptions. Select a capability only
+when its semantic operation, provider, and exact
+account/workspace/site/repository context match the request.
+
+If no capable granted connector exists, you may inspect an already configured
+provider CLI and its live help before the first attempt. Do not install a tool,
+request authentication material, encode or retain its command dialect, or
+switch execution surfaces after an attempt begins.
+
+Construct only the bounded provider-neutral capability evidence accepted by the
+CLI: provider, exact context, surface kind, availability, semantic capabilities,
+observation time, and evidence digest. Never include a native tool name, schema,
+catalog, raw description, help text, request, or response.
+
+## Lifecycle
+
+1. Complete live capability discovery before the first provider-contacting
+   remote command.
+2. Run the requested `oat pjm remote` command in JSON mode and pass the bounded
+   evidence through `--capability-evidence-stdin`. For mutations, also supply
+   only the current caller-owned authority evidence requested by the command.
+3. Treat CLI policy, preview, approval, safety, and terminal verdicts as
+   authoritative. Never broaden a field mask or reconstruct publication
+   content from repository files.
+4. When the CLI returns `pending` with `externalAction`, follow
+   [the action protocol](references/external-action-protocol.md) and execute the
+   exact emitted semantic action at most once.
+5. Submit exactly one sanitized observation through `operation continue`.
+6. Continue only while the CLI emits another exact action for the same durable
+   operation. Stop on any terminal CLI envelope.
+
+Never infer success from a connector result, process exit, or visible remote
+change. Only a CLI `ok` envelope after authoritative read-back is success.
+
+## Discussion Reads
+
+Discussion is read-only evidence. Honor the CLI-provided page/cursor and maximum
+item limit. Return only the bounded sanitized observation. Do not persist a
+thread, assignee list, activity history, or native response. A requested local
+distillation is a separate local edit and never comment synchronization.
+
+## Safety Boundary
+
+- Never read, request, print, or persist authentication headers or credential
+  values.
+- Never scan the repository, worktree, Git history, or arbitrary files for
+  secrets.
+- Never add fields to the normalized outbound projection.
+- Never pass native requests, raw provider payloads, tool catalogs, or help
+  output into durable OAT evidence.
+- Never declare remote success directly.

package/assets/skills/oat-pjm-remote/references/external-action-protocol.md

@@ -0,0 +1,43 @@
+# External Action Protocol
+
+The CLI emits a versioned provider-neutral action containing a durable
+operation ID, step ID, action digest, provider context, semantic intent,
+expected observation contract, and (for mutation) the exact outbound
+projection and safety-result digests.
+
+Initial live connector discovery (or configured-CLI-help fallback) and bounded
+provider-neutral capability evidence construction happen before the first
+provider-contacting remote command. The evidence is passed through
+`--capability-evidence-stdin`; native tool names, schemas, catalogs,
+descriptions, help text, requests, and responses are excluded.
+
+Before execution:
+
+1. Confirm the action belongs to the current durable operation and step.
+2. Confirm the previously selected capability remains currently granted.
+3. Confirm semantic operation and exact provider context.
+4. For a mutation, confirm the projection and safety digests are present. Do
+   not reconstruct, enrich, or reinterpret the projection.
+
+Execute at most once. Return only one observation with:
+
+- the unchanged operation ID, step ID, and action digest;
+- observation time and host-surface kind;
+- bounded capability evidence digest and exact provider context;
+- sanitized classification, durable identity/aliases when observed,
+  allowlisted fields, revision evidence, and a diagnostic code.
+
+Do not return a native request, raw response, captured catalog, live help text,
+process environment, authentication data, or provider-generated success claim.
+Use:
+
+```bash
+oat pjm remote operation continue \
+  --operation <operation-id> \
+  --observation-stdin \
+  --json
+```
+
+A repeated, stale, mismatched, oversized, or unsanitized observation must be
+rejected by the CLI. An ambiguous post-attempt outcome remains uncertain and
+must be reconciled before any new execution choice or retry.

package/assets/skills/oat-project-autonomous/references/gate-inventory.md

@@ -276,7 +276,7 @@ remains immutable baseline evidence for the original p01-t01 verification.
 | `oat-dispatch-subagents/references/record-schema.md`           | `78f8069274a8 -> NG`; `1c9a84c4d1e0 -> NG`; `2a63da6e3a96 -> NG`; `30762d53b043 -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `oat-project-dispatch-subagents/SKILL.md`                      | `eca03ad1ca12 -> PDISPATCH-01`; `59fbcdc79cea -> PDISPATCH-01`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | `oat-project-plan/SKILL.md`                                    | `f99e44b39932 -> PLAN-12`; `7e6a9854504b -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
-| `oat-project-complete/SKILL.md`                                | `0177956707aa -> NG`; `8305b5bb65ef -> NG`; `2cd0503c0ef5 -> NG`; `44f54ef110a5 -> NG`; `fbf1ff53808a -> NG`; `6b774ee567b4 -> NG`; `8cc1fa5aab1e -> COMPLETE-01`; `4c209fbb4716 -> COMPLETE-01`; `02e4175e1171 -> COMPLETE-01`; `d698d4f98e76 -> COMPLETE-01`; `9f86a7218d93 -> COMPLETE-01`; `024713698d9a -> COMPLETE-01`; `c327995053fa -> COMPLETE-01`; `61f81d4ec7c1 -> COMPLETE-01`; `14fb2e56809f -> COMPLETE-01`; `7d4ff668744d -> COMPLETE-01`; `502a6c141784 -> COMPLETE-01`; `fb7e2db356af -> COMPLETE-01`; `f73f8476360a -> NG`; `1e15f420039f -> NG`; `cc234032ddd7 -> NG`; `c3d25f1398bb -> NG`; `ca13a6645df2 -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| `oat-project-complete/SKILL.md`                                | `0177956707aa -> NG`; `8305b5bb65ef -> NG`; `2cd0503c0ef5 -> NG`; `44f54ef110a5 -> NG`; `fbf1ff53808a -> NG`; `6b774ee567b4 -> NG`; `8cc1fa5aab1e -> COMPLETE-01`; `4c209fbb4716 -> COMPLETE-01`; `02e4175e1171 -> COMPLETE-01`; `d698d4f98e76 -> COMPLETE-01`; `9f86a7218d93 -> COMPLETE-01`; `024713698d9a -> COMPLETE-01`; `c327995053fa -> COMPLETE-01`; `61f81d4ec7c1 -> COMPLETE-01`; `14fb2e56809f -> COMPLETE-01`; `7d4ff668744d -> COMPLETE-01`; `502a6c141784 -> COMPLETE-01`; `fb7e2db356af -> COMPLETE-01`; `f73f8476360a -> NG`; `1e15f420039f -> NG`; `cc234032ddd7 -> NG`; `1dd54687229b -> NG`; `fc05c8303cd2 -> NG`; `24be721d635e -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `oat-project-lite/references/docs/autonomy-contract.md`        | `* -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | `oat-project-implement/references/completion-and-closeout.md`  | `87f1424a8692 -> NG`; `6b1ec05182f0 -> IMPLEMENT-11`; `e6d696a27c91 -> NG`; `c77f8ccb52ad -> NG`; `48de2614c0ba -> IMPLEMENT-11`; `32d53f5212e5 -> IMPLEMENT-11`; `7cdb4a9c57b7 -> IMPLEMENT-11`; `16ffc0aa099b -> IMPLEMENT-11`; `d6868ea10b3f -> IMPLEMENT-11`; `4f05ff5567be -> IMPLEMENT-11`; `c70b47ae7a6d -> IMPLEMENT-11`; `5fafd093b58e -> NG`; `21ceaf7e658a -> NG`; `249427a9f475 -> NG`; `8a7ec13a9b7c -> NG`; `9aeb7fce2012 -> IMPLEMENT-18`; `f11a7cdda220 -> IMPLEMENT-18`; `4523ac029152 -> NG`; `6e87b08c4046 -> NG`; `baa6052c7f0a -> IMPLEMENT-18`; `27d3fad116b1 -> IMPLEMENT-18`; `2cfbeb4388a5 -> IMPLEMENT-18`; `c56ea56a56db -> NG`; `43e2e3c1380d -> IMPLEMENT-17`; `b49690277fb5 -> NG`; `df12304d6a36 -> NG`; `52eacac11fef -> IMPLEMENT-17`; `60092df6b17b -> IMPLEMENT-17`; `361872c6b00e -> IMPLEMENT-17`; `d2bc711a75fb -> IMPLEMENT-17`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `oat-project-quick-start/SKILL.md`                             | `4f393afc3b4d -> QS-13`; `40ddcac880ef -> NG`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |