release: prepare Socket v10.0.2

ROADMAP.md

@@ -1191,8 +1191,10 @@ and test/production deployments for GitHub Actions.
 - [x] Add `game-dev-skills:metalfx-game-rendering-workflow`, `metal-asset-streaming-workflow`, and `metal-neural-rendering-workflow` for native MetalFX integration, GPU asset residency/streaming, and carefully gated experimental neural rendering.
 - [x] Overhaul `agent-portability-skills` so its docs, tests, generated bootstrap content, and sync audit logic target Codex/OpenAI plus the open `.agents/skills` discovery mirror only. Remove stale expectations for retired child maintainer docs such as reality-audit and install-surface docs, and keep the wording away from unsupported non-Codex or generic multi-agent surfaces.
 - [x] Consolidate README, CONTRIBUTING, AGENTS, coordinated docs, and ROADMAP
-  maintenance workflows into `repository-skills` so repository operations and
-  repository documentation have one owner.
+  maintenance workflows into `repository-skills`, then absorb the coordinated
+  docs lifecycle into `maintain-project-repo` so every repository install,
+  refresh, and calling bootstrap creates or refreshes the canonical document
+  set without a parallel umbrella skill.
 - [x] Add a first `agent-engineering-skills:design-agent-automation-workflow` planning skill for agent and automation design. It chooses between Codex app automations, `codex exec`, Codex subagents, OpenAI Agents SDK services, LangGraph graphs, Hermes-specific workflows, or no automation yet while delegating stack-specific implementation to the owning plugin.
 - [x] Added `agent-engineering-skills:design-agent-eval-workflow` for agent, skill, prompt, and automation eval planning, and skewed automation guidance toward safe full automation with exact escalation gates instead of broad human review.
 - [x] Replaced the legacy Apple app guidance and sync routes with the unified `bootstrap-xcode-workspace` workflow and its managed `just align` contract.

docs/maintainers/automation-suitability.md

@@ -154,7 +154,7 @@ as the default Socket maintainer automation runtime.
 | `maintain-project-agents` | `codex exec` for one repo; code-owned service for policy rollout | It changes durable agent instructions, so apply mode should be branch-and-PR gated. App automation is good for drift reports. |
 | `maintain-project-contributing` | `codex exec` for one repo; code-owned service for standardization campaigns | It owns contributor workflow. Good candidate for automated apply after check-only evidence. |
 | `maintain-project-readme` | `codex exec` for one repo; code-owned service for product-doc sweep | It keeps README product-focused and hands contributor details to `CONTRIBUTING.md`, which makes it safer for repeated repo-wide application. |
-| `maintain-project-repo` | `codex exec` first; code-owned service for coordinated rollout | It installs managed scripts and CI wrappers. It is deterministic, but the write surface is broad enough that every repo should get a PR. |
+| `maintain-project-repo` | `codex exec` first; code-owned service for coordinated rollout | It installs managed scripts and CI wrappers and creates or refreshes canonical project docs through their owner workflows. It is deterministic, but the write surface is broad enough that every repo should get a PR. |
 | `maintain-project-roadmap` | App check-only or `codex exec`; code-owned service only for planning sync | Roadmaps reflect human priorities. Automate stale-structure fixes, but keep milestone meaning human-reviewed. |
 | `bootstrap-xcode-workspace --operation align` | `codex exec` for one product workspace | It refreshes the one managed Apps/Packages/Services guidance boundary and repository maintenance surface without classifying the repository. |
 | `bootstrap-xcode-workspace --operation align` | `codex exec` for one repo; code-owned service for Apple-product workspace alignment | It safely owns only marked guidance, the managed hook, and marked Just recipes while preserving product-local content. |

docs/maintainers/validation-and-test-audit.md

@@ -69,8 +69,7 @@ root and the root full profile already owns their checks.
 | `tests/test_model_lab_skill_contracts.py` | 9 | Protects current inventory/routing, authorization controls, experiment validation, paired comparison correctness, provenance stability, and version alignment. |
 | `tests/test_release_version.py` | 4 | Exercises target discovery, aligned SemVer calculation, split-version rejection, and atomic manifest/lockfile updates. |
 | `tests/test_release_workflow.py` | 10 | Exercises PR/check gating, branch ownership/accounting, version ordering, publication checks, evidence generation, and the single release CLI. |
-| `tests/test_repository_docs_workflow.py` | 5 | Exercises coordinator selection, flag routing, responsibility drift detection, and structured error output. |
-| `tests/test_repository_maintenance_workflow.py` | 21 | Exercises generated validation/release assets, profile installation, workspace dispatch, delayed GitHub state, prerelease metadata, notes selection, branch accounting, triggers, and preservation of repo-owned extensions. |
+| `tests/test_repository_maintenance_workflow.py` | 29 | Exercises generated validation/release assets, mandatory documentation creation and refresh, non-mutating reports, owner dispatch, bootstrap integration, workspace dispatch, delayed GitHub state, prerelease metadata, notes selection, branch accounting, triggers, and preservation of repo-owned extensions. |
 | `tests/test_spi_add_package.py` | 10 | Exercises canonical URL/form construction, live form validation, package readiness, tag/toolchain checks, and the explicit prohibition on unauthorized alternate submission writes. |
 | `tests/test_swiftasb_skills_install.py` | 2 | Performs a real temporary Codex marketplace install and verifies the published .NET skill inventory. |
 | `tests/test_unified_swift_workspace_contracts.py` | 7 | Protects positive package/workspace context, component ownership, target layout, native-local/cloud deployment, immutable artifacts, and Soto lifecycle policy. |

docs/releases/v10.0.2.md

@@ -0,0 +1,40 @@
+# Socket v10.0.2
+
+## Changes
+
+- Makes `repository-skills:maintain-project-repo` the coordinated owner for
+  repository tooling and canonical project documentation.
+- Runs README, CONTRIBUTING, AGENTS, and ROADMAP creation or refresh during
+  every `maintain-project-repo` install and refresh, including repository
+  bootstraps that call the installer.
+- Makes `report-only` and dry-run operations audit the same four documents
+  without writing them, and returns their owner reports and cross-document
+  responsibility findings in the repository workflow result.
+- Treats missing README and ROADMAP files as reportable, auto-fixable findings,
+  matching the existing CONTRIBUTING and AGENTS behavior.
+
+## Breaking Changes
+
+- Removes the standalone `repository-skills:maintain-project-docs` skill.
+  Coordinated documentation sweeps now use `maintain-project-repo`; individual
+  document maintenance still uses the matching `maintain-project-readme`,
+  `maintain-project-contributing`, `maintain-project-agents`, or
+  `maintain-project-roadmap` owner.
+- `maintain-project-repo --operation install|refresh` now creates or updates the
+  canonical documentation set as part of the same local operation. There is no
+  skip-docs compatibility path.
+
+## Upgrade
+
+- Replace coordinated `$maintain-project-docs` invocations with
+  `$maintain-project-repo`.
+- Use `--operation report-only` for a non-mutating tooling and documentation
+  report, or `--operation refresh` to update both surfaces.
+- Review the four canonical documents in the resulting branch or pull request,
+  because repository refreshes now include their bounded owner-workflow edits.
+
+## Verification
+
+- `uv run pytest tests/test_repository_maintenance_workflow.py tests/test_unified_swift_workspace_contracts.py -q`
+- `uv run scripts/export_hermes_skills.py --check`
+- `uv run scripts/validate_socket.py --profile compatibility`

plugins/agent-engineering-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-engineering-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Agent-system design, orchestration, scheduling, external-agent, and evaluation workflow skills.",
   "author": {
     "name": "Gale",

plugins/agent-portability-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-portability-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Skills for agent portability, ACP, A2A, Zed, Hermes, Codex plugin surfaces, and host adapter guidance.",
   "author": {
     "name": "Gale",

plugins/agentdeck/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentdeck",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Local Codex runtime utilities for thread, hook, and app-server workflows.",
   "author": {
     "name": "Gale",

plugins/android-dev-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "android-dev-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Android, Kotlin, Java, Gradle, Android Gradle Plugin, testing, lint, UI implementation, and release-readiness workflow skills.",
   "author": {
     "name": "Gale",

plugins/apple-creator-studio-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-creator-studio-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Human-facing and Computer Use-aware Apple Creator Studio workflows for Final Cut Pro editing, Motion templates, Compressor delivery, Logic Pro production, MainStage concert preparation, and GarageBand projects.",
   "author": {
     "name": "Gale",

plugins/apple-dev-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-dev-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Apple development workflows for Codex, including macOS privacy permissions, sandbox file access, entitlement diagnosis, virtualization, SwiftPM, Xcode, app extensions, media, provisioning, SwiftUI, AppKit, Safari, security, OpenAPI, and DocC.",
   "author": {
     "name": "Gale",

plugins/apple-dev-skills/skills/bootstrap-xcode-workspace/SKILL.md

@@ -165,7 +165,9 @@ project migration entrypoint.
 - Hand service generation to `server-side-swift:workspace-service-component`;
   do not let the framework generator own or replace the product workspace.
 - Hand repository maintenance to `repository-skills:maintain-project-repo` with
-  the `xcode-workspace` profile.
+  the `xcode-workspace` profile. Its install operation also creates or refreshes
+  README.md, CONTRIBUTING.md, AGENTS.md, and ROADMAP.md through the canonical
+  document-owner workflows; do not add a second bootstrap-only docs path.
 - When Xcode-only state is required, use the root workspace and Xcode workflows;
   otherwise run the nearest package operation directly.
 

plugins/cloud-deployment-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cloud-deployment-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Codex skills for routing cloud deployment work through official provider plugins, MCP servers, CLIs, and a reusable Dockerized-service release and deployment contract.",
   "author": {
     "name": "Gale",

plugins/cloud-inference-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cloud-inference-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Cloud AI inference workflow skills for routing model serving, training, conversion, and GPU infrastructure work across Runpod, Hugging Face, AWS, Vast.ai, CoreWeave, and similar providers.",
   "author": {
     "name": "Gale",

plugins/codebase-understanding-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-understanding-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Code-path exploration, call-site tracing, and evidence-based codebase explanation skills.",
   "author": {
     "name": "Gale",

plugins/cybersecurity-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cybersecurity-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Defensive cybersecurity, isolated Linux and macOS analysis labs, suspicious-content and malware analysis, macOS defense, vulnerability testing, pentesting, and incident response workflows.",
   "skills": "./skills/",
   "author": {

plugins/dotnet-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dotnet-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Codex skills for choosing, bootstrapping, building, testing, packaging, diagnosing, and maintaining .NET projects, including F# web applications, with F# and C# as equal first-party languages.",
   "author": {
     "name": "Gale",

plugins/game-dev-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "game-dev-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Apple platform game development workflow skills for native Metal rendering, Game Porting Toolkit routing, MetalFX, GPU asset streaming, neural rendering, frameworks, input, haptics, and profiling.",
   "author": {
     "name": "Gale",

plugins/messaging-collaboration-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "messaging-collaboration-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Codex workflows for chat apps, bots, collaboration, iMessage, Apple notifications and Push to Talk, VoIP, and default communication-app planning.",
   "author": {
     "name": "Gale",

plugins/model-lab-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "model-lab-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Reproducible model training, evaluation, intervention, and runtime research workflows.",
   "author": {
     "name": "Gale"

plugins/network-protocol-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "network-protocol-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Codex skills for choosing, planning, implementing, and diagnosing modern application transports and real-time networking protocols, including QUIC, HTTP/3, WebRTC, Media over QUIC, WebTransport-adjacent handoffs, protocol maturity checks, and stack-specific implementation routing.",
   "author": {
     "name": "Gale",

plugins/professional-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "professional-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Professional workflow skills for job search, career materials, and external professional services.",
   "author": {
     "name": "Gale",

plugins/python-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "python-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Bundled Python-focused Codex skills for uv bootstrapping, project implementation, diagnostics, packaging, tooling, CI, upgrades, FastAPI service maintenance, FastMCP service maintenance, and testing workflows.",
   "author": {
     "name": "Gale",

plugins/repository-skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "repository-skills",
-  "version": "10.0.1",
+  "version": "10.0.2",
   "description": "Repository operations, documentation maintenance, GitHub settings, worktree, and release workflow skills.",
   "author": {
     "name": "Gale",