Update here.now optional skill to 1.19.0

[adamludwin]

Summary

Updates the official/productivity/here-now optional skill from 1.15.3 to 1.18.0, matching the current upstream bundle (https://github.com/heredotnow/skill):

• Workspace publishing: publish.sh --workspace <subdomain> publishes into a shared team account — the Site belongs to the workspace, serves at {label}.{workspace}.here.now, and the script reports the team URL as publish_result.account_url. The selector is sent as an x-herenow-account header on create/update and finalize; the flag requires an API key and is rejected in combination with --from-drive.
• SKILL.md documents workspace access modes (member-only default vs. personal-Site restricted), adds a "Publish to a workspace" section, and refreshes docs-reading guidance.
• Frontmatter follows the skill authoring standard: one-sentence description ≤ 60 chars; the trigger-phrase list lives in the "When to use" body section.
• Adds tests/skills/test_here_now_skill.py covering the frontmatter standard, claim-token request-body behavior (anonymous and API-key updates), the removed --forkable/fork-meta surface, and the new workspace selector behavior.

Test plan

• python -m pytest tests/skills/test_here_now_skill.py — 13 passed
• bash -n on publish.sh and drive.sh
• Description standard verified (56 chars, one sentence, no skill-name repetition)

[adamludwin]

Refreshed this PR to the current here.now skill release (1.16.0), which adds Site access control guidance. Scripts are unchanged from the last push and pass bash -n. Would appreciate a review when someone has a chance — happy to adjust anything needed to land it.

[teknium1]

Thanks for refreshing the optional skill and adding the Site access-control guidance. Current main is still at 1.15.3 in optional-skills/productivity/here-now/SKILL.md:4, so this remains useful work.

Problems

• The new frontmatter description at optional-skills/productivity/here-now/SKILL.md:3 is multi-sentence and far beyond the hardline limit. AGENTS.md:888-892 requires modernized skills to use one sentence, no more than 60 characters, ending with a period.
• The helper changes remove the existing --forkable and fork-meta behavior and change the anonymous-only claim-token guards currently present at optional-skills/productivity/here-now/scripts/publish.sh:108-110 and :264-269. The stated bash -n checks cover syntax, not these request-body compatibility changes.

Suggested changes

• Compress the frontmatter description; keep the trigger phrases and access-control detail in the skill body/tags.
• Add tests/skills/test_here_now_skill.py for frontmatter and intended publish payload behavior, including the API-key/claim-token case and the intended replacement for --forkable.

This is an automated hermes-sweeper review.

[teknium1]

AGENTS.md:888-892 requires a modernized skill description to be one sentence, at most 60 characters, and end with a period. Please reduce this listing description and retain the detailed trigger phrases in the body or tags.

[adamludwin]

Done — description is now Publish sites to live URLs and store files in cloud Drives. (59 chars, one sentence). Trigger phrases moved to a "When to use" section in the body; tags unchanged. Enforced going forward by the new tests/skills/test_here_now_skill.py.

[adamludwin]

Thanks for the review — all points addressed in the latest push, which also bumps the skill to the current release (1.17.0):

• Description: compressed to Publish sites to live URLs and store files in cloud Drives. (59 chars, one sentence, ends with a period, no skill-name repetition). Trigger phrases now live in a "When to use" body section; discovery tags are unchanged.
• --forkable / fork-meta removal is intentional: forking was removed from the here.now product, and the public API no longer accepts a forkable field (it's gone from the OpenAPI spec at https://here.now/openapi.json). There is no replacement flag — the capability no longer exists, so keeping the flag would send a field the server ignores while advertising a feature that doesn't work.
• Claim-token guard change is intentional and compatible: the server only consults claimToken for anonymous sites, so including it alongside an API key is a no-op. Auto-loading it regardless of auth mode matches the canonical upstream bundle and keeps slug updates working for still-unclaimed sites.
• Tests: added tests/skills/test_here_now_skill.py (10 tests, passing) — frontmatter standards plus request-body behavior by running the real publish.sh against a stubbed curl: claim token auto-load with and without an API key, explicit --claim-token override, --forkable rejected as an unknown option, forkable absent from request bodies, and fork-meta.json excluded from the upload manifest.

[adamludwin]

CI note: the failing job is tests/tools/test_mcp_tool_session_expired.py::test_session_expired_retry_waits_for_new_session, which is unrelated to this diff (skill files + skill tests only — tests/skills/test_here_now_skill.py passes, 13/13, in the same slice). The same test fails on recent main CI runs as well, so it appears to be a pre-existing flake/breakage rather than something introduced here.

[adamludwin]

Refreshed to the current here.now skill release (1.19.0). Two things in this push beyond the routine version bump:

Two publish.sh bug fixes (both shipped in our canonical bundle, worth having in the official catalog — the second one affects every macOS user):

• Exclude .herenow/state.json from directory collection. The script writes this local state cache itself, and previously uploaded it as site content on republish; for anonymous sites it contains the claim token.
• Replace seq 0 $((UPLOAD_COUNT - 1)) with a C-style loop. BSD/macOS seq 0 -1 counts down, so a republish where every file was unchanged (zero uploads needed) iterated twice with null paths and died between create and finalize, stranding the site in a pending state.

Skill content: adds Site version history — every publish records an immutable version, with list/preview/restore endpoints (docs).

Per this repo's testing standard, tests/skills/test_here_now_skill.py gains two cases covering the fixed behaviors (state.json excluded from the create manifest; zero-upload republish still reaches finalize). All 15 tests pass locally and both scripts pass bash -n.