feat: version 0.5.0 (#5)

* feat: 0.5.0 task 02 - GitHub Action for score

* feat: 0.5.0 task 03 - agent skill

Ship the portable agent skill that scores the user's current repo locally
and recommends a model class. Self-contained: vendored scorer, no service
dependency, works offline — same property as task 02's PR-diff Action.

- Sibling repo `agent-friendly-skill` (v0.1.1, floats `v0`) ships SKILL.md
  + ncc-bundled dist/index.js. Vendored into this repo via
  `npx skills add hsnice16/agent-friendly-skill#v0`; skills-lock.json pins
  ref + content hash so the bundle is reproducible.
- New /skill SEO landing page: install command, score → model mapping,
  optional SessionStart hook snippets for Claude Code + Codex, FAQ, and
  JSON-LD (BreadcrumbList + SoftwareApplication + FAQPage).
- README "Public API" section documents /api/score for external integrators
  (siblings vendor the scorer; they don't call this at runtime).
- AGENTS.md "Sibling repos" mirror discipline now covers both action and
  skill; SIBLING_VERSION in lib/version.ts is the single-source pin that
  drives ACTION_USES, SKILL_INSTALL_CMD, and the #v0 ref in skills-lock.json.
- Layout footer reorganised into Primary + Tools columns; nav surfaces
  /action and /skill; sitemap and /llms.txt include /skill.
- Panel + CopySnippet gain a tone vocabulary (warn / info / tip) so the
  install card, hook snippets, and per-page CTAs share styling.
- Bundled along: gitignore-aware size signal (uses ignore@7.0.5), tests
  for both .gitignore patterns and the baseline ignore set.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* feat: version 0.5.0

Release prep: bump version (lib/version.ts, package.json, README badge),
add changelog entry summarising the score-diff GitHub Action and the
portable agent skill, mark tasks/0.5.0 done and drop the descoped
history-aware-signals task, prune 0.5.0 from the live roadmap.

Also lands SEO breadcrumbs on About/Changelog/Methodology/Packages/Roadmap
via a shared BreadcrumbJsonLd component, extends sitemap with package
routes, surfaces top scored packages per registry in /llms.txt, and
refreshes the SessionStart hook + cross-repo mirroring note on the
feature-request template.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hsnice16

.claude/settings.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "printf '\\n📦 Agent Friendly Code — current release: 0.4.0\\n  • Read AGENTS.md for conventions, CONTRIBUTING.md for the PR workflow.\\n  • Roadmap: 0.5.0 (quick wins — history-aware signals + PR score-diff + agent skill) → 0.6.0 (auto-refresh + smarter matching — webhook rescoring + alternatives v2) → 0.7.0 (maintainer ownership + at-scale discovery — OAuth opt-out + package overlay at scale) → 1.0.0 (production cut — Postgres + at-scale indexing + benchmark harness).\\n  • Changelog rule: user-facing capabilities only. Codebase hygiene (CI / linter / tests / CONTRIBUTING) does NOT go in lib/changelog.ts.\\n'"
+            "command": "printf '\\n📦 Agent Friendly Code — current release: 0.5.0\\n  • Read AGENTS.md for conventions, CONTRIBUTING.md for the PR workflow.\\n  • Roadmap: 0.6.0 (auto-refresh + smarter matching — webhook rescoring + alternatives v2) → 0.7.0 (maintainer ownership + at-scale discovery — OAuth opt-out + package overlay at scale) → 1.0.0 (production cut — Postgres + at-scale indexing + benchmark harness).\\n  • Changelog rule: user-facing capabilities only. Codebase hygiene (CI / linter / tests / CONTRIBUTING) does NOT go in lib/changelog.ts.\\n'"
           }
         ]
       }

.github/ISSUE_TEMPLATE/feature_request.md

@@ -28,8 +28,8 @@ _Tick whichever applies:_
 
 _Tick whichever applies:_
 
-- [ ] **New signal** — see "Adding a signal" in [AGENTS.md](../../AGENTS.md). Mirrors to the sibling `agent-friendly-action` repo.
-- [ ] **New model** — see "Adding a model" in [AGENTS.md](../../AGENTS.md). Mirrors to the sibling repo.
+- [ ] **New signal** — see "Adding a signal" in [AGENTS.md](../../AGENTS.md). Mirrors to **both** sibling repos (`agent-friendly-action` and `agent-friendly-skill`).
+- [ ] **New model** — see "Adding a model" in [AGENTS.md](../../AGENTS.md). Mirrors to **both** sibling repos.
 - [ ] **New host** — see "Adding a host" in [AGENTS.md](../../AGENTS.md).
 - [ ] **New / changed API route** — `/api/...`. Note breaking-change implications for action + agent-skill consumers.
 - [ ] **New page or UI surface**.

AGENTS.md

@@ -105,7 +105,7 @@ tasks/
   0.2.0/                  # released — dogfood complete (tests, self-score, row-click)
   0.3.0/                  # released — embeddable scores + broader coverage (badge, more agents, alternatives, package lookup)
   0.4.0/                  # released — credible scores + discoverability (docs-cited rationales + agent-specific signals + About/llms.txt/OG)
-  0.5.0/                  # planned — quick wins (history-aware signals + PR score-diff action + agent skill)
+  0.5.0/                  # released — quick wins (PR score-diff action + agent skill)
   0.6.0/                  # planned — auto-refresh + smarter matching (webhook rescoring + alternatives v2)
   0.7.0/                  # planned — maintainer ownership + at-scale discovery (OAuth opt-out + package overlay at scale)
   1.0.0/                  # planned — production cut (Postgres + at-scale indexing + benchmark harness)
@@ -212,7 +212,7 @@ Hooks docs: <https://docs.claude.com/en/docs/claude-code/hooks.html>.
 
 - We `git clone --depth 1 --single-branch` arbitrary URLs — safe by default. We never run post-clone scripts, never `npm install`, never execute code from the clone.
 - SQL: all queries parameterised. No interpolation.
-- HTML: React auto-escapes. The only `dangerouslySetInnerHTML` is server-built JSON-LD with `<` escaped to `<` (`app/layout.tsx`, `app/page.tsx`, `app/action/page.tsx`, `app/skill/page.tsx`, `app/methodology/page.tsx`, `app/repo/[id]/page.tsx`, `app/package/[registry]/[name]/page.tsx`); never feed user-controlled strings into it.
+- HTML: React auto-escapes. The only `dangerouslySetInnerHTML` is server-built JSON-LD with `<` escaped to `<` (`app/layout.tsx`, `app/page.tsx`, `app/about/page.tsx`, `app/action/page.tsx`, `app/skill/page.tsx`, `app/methodology/page.tsx`, `app/package/[registry]/[name]/page.tsx`, `app/repo/[id]/page.tsx`, plus the `BreadcrumbJsonLd` component used by About / Changelog / Methodology / Packages / Roadmap); never feed user-controlled strings into it.
 - Local-path mode reads files; never writes outside `data/` and the clone workspace passed to `shallowClone`.
 - No auth yet (read-only dashboard). When auth lands (`tasks/0.7.0/01-opt-out-claim-flow.md`), do it via OAuth and gate DB writes per user.
 

README.md

@@ -1,6 +1,6 @@
 # Agent Friendly Code
 
-[![Release](https://img.shields.io/badge/release-0.4.0-blue?style=flat-square)](./lib/changelog.ts)
+[![Release](https://img.shields.io/badge/release-0.5.0-blue?style=flat-square)](./lib/changelog.ts)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](./LICENSE)
 [![Next.js 16](https://img.shields.io/badge/Next.js-16-black?style=flat-square)](https://nextjs.org)
 [![Node ≥20.9](https://img.shields.io/badge/node-%E2%89%A520.9-43853d?style=flat-square&logo=node.js&logoColor=white)](https://nodejs.org)
@@ -9,7 +9,7 @@
 
 **A public dashboard that ranks open-source repos by how friendly they are for AI coding agents — per model.**
 
-Next.js 16 + SQLite (`better-sqlite3`), styled with Tailwind CSS 4. Spans GitHub, GitLab, and Bitbucket out of the box. Current release: **0.4.0**.
+Next.js 16 + SQLite (`better-sqlite3`), styled with Tailwind CSS 4. Spans GitHub, GitLab, and Bitbucket out of the box. Current release: **0.5.0**.
 
 ![Agent Friendly Code — leaderboard](./public/demo/light.png)
 
@@ -110,7 +110,7 @@ Run the unit tests with `bun run test` (uses `node --test` + `tsx`; requires Nod
 
 ## Versioning
 
-`lib/version.ts` and `package.json` carry the current release number (currently **0.4.0**). Bumps happen only when we actually cut a release — never when merging intermediate work. The version pill in the header surfaces the number directly; `/changelog` lists what each release shipped.
+`lib/version.ts` and `package.json` carry the current release number (currently **0.5.0**). Bumps happen only when we actually cut a release — never when merging intermediate work. The version pill in the header surfaces the number directly; `/changelog` lists what each release shipped.
 
 ## Stack & rationale
 
@@ -121,7 +121,7 @@ Run the unit tests with `bun run test` (uses `node --test` + `tsx`; requires Nod
 | **Tailwind CSS 4**                                   | Zero-config via `@theme` tokens, no `tailwind.config.*` needed. Tight bundle output.                                                         | Would only leave for something with a stronger design-system story.                                |
 | **`better-sqlite3`**                                 | Single file, inspectable, zero ops overhead. Node-native so Vercel's serverless runtime can load it directly.                                | Postgres when concurrent writers / access control arrive (`tasks/1.0.0/01-postgres-migration.md`). |
 | **Server-first; client islands where needed**        | Cheap, fast, SEO-friendly. Client components only where interactivity demands — mobile nav, search, selects, copy, back-to-top.              | When client islands grow past presentational interactivity → reach for client state mgmt.          |
-| **Shallow git clones** (`--depth 1 --single-branch`) | Bandwidth + speed. Current signals don't need history.                                                                                       | History-aware signals → host APIs or `--filter=blob:none` partial clones.                          |
+| **Shallow git clones** (`--depth 1 --single-branch`) | Bandwidth + speed. Current signals don't need history.                                                                                       | If commit-history ever enters scoring → host APIs or `--filter=blob:none` partial clones.          |
 | **Exact-pinned deps**                                | Deterministic scoring across environments.                                                                                                   | Never.                                                                                             |
 | **One file per signal**                              | Each signal is a small, independent concern — keeps `git log` and code review focused.                                                       | When we bundle signals into dynamic checks (then the unit becomes the bundle).                     |
 
@@ -193,7 +193,6 @@ See `/roadmap` in the running app or the per-version `tasks/` folders for the fu
 
 Versions are sequenced cheap-first so the highest-impact small additions don't get gated on heavy infra:
 
-- **0.5.0 — quick wins**: history-aware signals (maintenance recency, commit velocity, contributor activity) + a GitHub Action that comments the score delta on every PR + a portable agent skill (profiles 8 agents — Claude Code, Cursor, Devin, GPT-5 Codex, Gemini CLI, Aider, OpenHands, Pi; installs into any vercel-labs/skills host) that scores the user's current repo locally and recommends a model. Skill ships as a sibling repo with the scorer vendored — same self-contained property as the action. No new infra.
 - **0.6.0 — auto-refresh + smarter matching**: webhook-driven rescoring (keep scores fresh on every push) + alternatives via README embeddings (cross-language matches the v0.3.0 SQL heuristic misses).
 - **0.7.0 — maintainer ownership + at-scale discovery**: OAuth opt-out / claim flow for maintainers + at-scale package overlay (per-registry leaderboards + userscript that renders the badge inline on npmjs.com / PyPI / crates.io).
 - **1.0.0 — production cut**: Postgres migration for concurrent writers + auto-discovered crawl (target 10k repos) + benchmark harness that derives per-model weights from measured agent success. From here on, breaking API changes require a MAJOR bump.

app/about/page.tsx

@@ -1,20 +1,55 @@
 import { ArrowUpRight } from "@phosphor-icons/react/dist/ssr";
 import type { Metadata } from "next";
 import Link from "next/link";
+import { BreadcrumbJsonLd } from "@/components/BreadcrumbJsonLd";
 import { Panel, PanelHeading } from "@/components/Panel";
-import { APP_NAME, REPO_URL } from "@/lib/version";
+import { APP_NAME, APP_URL, REPO_URL } from "@/lib/version";
 
 export const metadata: Metadata = {
   title: "About",
   alternates: { canonical: "/about" },
   twitter: { title: `About — ${APP_NAME}` },
-  openGraph: { title: `About — ${APP_NAME}`, url: "/about" },
+  openGraph: { title: `About — ${APP_NAME}`, url: "/about", type: "article" },
   description: `Who built ${APP_NAME}, why it exists, and what it isn't. Independent, MIT-licensed, no affiliation with any AI agent vendor.`,
 };
 
+const ABOUT_JSON_LD = {
+  "@context": "https://schema.org",
+  "@graph": [
+    {
+      "@id": `${APP_URL}/about#author`,
+      "@type": "Person",
+      name: "Himanshu Singh",
+      jobTitle: "Software Engineer",
+      url: "https://github.com/hsnice16",
+      worksFor: { "@id": `${APP_URL}/#org` },
+      sameAs: ["https://github.com/hsnice16", "https://github.com/sponsors/hsnice16"],
+    },
+    {
+      "@id": `${APP_URL}/about#page`,
+      "@type": "AboutPage",
+      url: `${APP_URL}/about`,
+      name: `About — ${APP_NAME}`,
+      author: { "@id": `${APP_URL}/about#author` },
+      isPartOf: { "@id": `${APP_URL}/#site` },
+      mainEntity: { "@id": `${APP_URL}/about#author` },
+    },
+  ],
+};
+
 export default function AboutPage() {
   return (
     <>
+      <BreadcrumbJsonLd current={{ name: "About", path: "/about" }} />
+
+      <script
+        type="application/ld+json"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: server-built JSON-LD; `<` is escaped
+        dangerouslySetInnerHTML={{
+          __html: JSON.stringify(ABOUT_JSON_LD).replace(/</g, "\\u003c"),
+        }}
+      />
+
       <section className="my-3 mb-7">
         <h1 className="mb-2.5 text-[30px] font-bold leading-[1.18] tracking-tight">About</h1>
         <p className="m-0 max-w-[72ch] text-[15.5px] text-ink-dim">

app/changelog/page.tsx

@@ -1,21 +1,24 @@
 import type { Metadata } from "next";
 import Link from "next/link";
 
+import { BreadcrumbJsonLd } from "@/components/BreadcrumbJsonLd";
 import { Panel } from "@/components/Panel";
 import { CHANGELOG } from "@/lib/changelog";
 
 export const metadata: Metadata = {
   title: "Changelog",
   twitter: { title: "Changelog" },
   alternates: { canonical: "/changelog" },
-  openGraph: { title: "Changelog", url: "/changelog" },
+  openGraph: { title: "Changelog", url: "/changelog", type: "article" },
   description:
     "What's shipped in each release of Agent Friendly Code — user-facing capabilities, not internal churn. Every bullet corresponds to a roadmap item that landed.",
 };
 
 export default function ChangelogPage() {
   return (
     <>
+      <BreadcrumbJsonLd current={{ name: "Changelog", path: "/changelog" }} />
+
       <section className="my-3 mb-7">
         <h1 className="mb-2.5 text-[30px] font-bold leading-[1.18] tracking-tight">Changelog</h1>
 
@@ -41,10 +44,13 @@ export default function ChangelogPage() {
               <span className="tabular-nums text-sm text-muted">{entry.date}</span>
             </div>
 
-            <ul className="m-0 pl-5 text-[14.5px] text-ink-dim">
+            <ul className="m-0 list-none p-0 text-[14.5px] text-ink-dim">
               {entry.highlights.map((h) => (
-                <li key={h} className="my-1">
-                  {h}
+                <li key={h} className="my-1 flex gap-2">
+                  <span aria-hidden="true" className="select-none text-line">
+                    ·
+                  </span>
+                  <span>{h}</span>
                 </li>
               ))}
             </ul>

app/llms.txt/route.ts

@@ -1,3 +1,5 @@
+import { REGISTRIES } from "@/lib/clients/registries";
+import { getTopPackagesByRegistry } from "@/lib/db";
 import { MODELS } from "@/lib/scoring/weights";
 import {
   ACTION_REPO_URL,
@@ -16,7 +18,22 @@ const HEADERS = {
   "Cache-Control": "public, max-age=3600, s-maxage=86400",
 };
 
+const LLMS_TOP_PACKAGES_PER_REGISTRY = 10;
+
 export function GET(): Response {
+  const topPackagesSection = REGISTRIES.map((registry) => {
+    const rows = getTopPackagesByRegistry(registry, LLMS_TOP_PACKAGES_PER_REGISTRY);
+    if (rows.length === 0) {
+      return "";
+    }
+    const lines = rows.map(
+      (p) => `- [${registry}/${p.name}](${APP_URL}/package/${registry}/${p.name}): ${p.score.toFixed(1)} / 100`,
+    );
+    return `### ${registry}\n\n${lines.join("\n")}`;
+  })
+    .filter(Boolean)
+    .join("\n\n");
+
   const body = `# ${APP_NAME}
 
 > ${APP_DESCRIPTION}
@@ -52,6 +69,10 @@ ${MODELS.map((m) => `- ${m.label} — ${m.rationale}`).join("\n")}
 - [Agent Friendly Action](${ACTION_REPO_URL}): GitHub Action that posts a per-PR score-delta comment — runs entirely inside the maintainer's CI, opt-in via \`AGENTS_BADGE_TOKEN\`, listed on the GitHub Marketplace
 - [Agent Friendly Skill](${SKILL_REPO_URL}): Portable agent skill (Claude Code, Codex, Cursor, Cline, Copilot, …) installable via \`${SKILL_INSTALL_CMD}\` — scores the user's current repo locally, no service dependency
 
+## Top scored packages
+
+${topPackagesSection || "_No packages indexed yet._"}
+
 ## Source
 
 - [Repository](${REPO_URL}): MIT-licensed Next.js app

app/methodology/page.tsx

@@ -2,6 +2,7 @@ import { ArrowUpRight } from "@phosphor-icons/react/dist/ssr";
 import type { Metadata } from "next";
 import Link from "next/link";
 
+import { BreadcrumbJsonLd } from "@/components/BreadcrumbJsonLd";
 import { Panel, PanelHeading } from "@/components/Panel";
 import { SIGNALS } from "@/lib/scoring/signals";
 import { MODELS } from "@/lib/scoring/weights";
@@ -10,7 +11,7 @@ export const metadata: Metadata = {
   title: "Methodology",
   twitter: { title: "Methodology" },
   alternates: { canonical: "/methodology" },
-  openGraph: { title: "Methodology", url: "/methodology" },
+  openGraph: { title: "Methodology", url: "/methodology", type: "article" },
   description:
     "How scores are computed today: the signals checked, the per-model weight profiles, the scoring formula, and what the static-heuristic approach deliberately doesn't measure yet.",
 };
@@ -67,13 +68,15 @@ const FAQ_JSON_LD = {
 export default function MethodologyPage() {
   return (
     <>
+      <BreadcrumbJsonLd current={{ name: "Methodology", path: "/methodology" }} />
       <script
         type="application/ld+json"
         // biome-ignore lint/security/noDangerouslySetInnerHtml: server-built JSON-LD; `<` is escaped
         dangerouslySetInnerHTML={{
           __html: JSON.stringify(FAQ_JSON_LD).replace(/</g, "\\u003c"),
         }}
       />
+
       <section className="my-3 mb-7">
         <h1 className="mb-2.5 text-[30px] font-bold leading-[1.18] tracking-tight">Methodology</h1>
 
@@ -217,12 +220,8 @@ improvement     = closing a gap unlocks  (1 - pass) × weight / Σweight × 100
               <code className="mx-1 rounded border border-line bg-surface-2 px-1 py-0.5 font-mono text-xs">
                 --depth 1 --single-branch
               </code>
-              which fetches the whole working tree at HEAD of the default branch, but no history. Closing this gap is
-              planned as v0.5.0 on the{" "}
-              <Link href="/roadmap" className="text-ink-dim underline-offset-4 hover:text-ink-soft hover:underline">
-                roadmap
-              </Link>
-              .
+              which fetches the whole working tree at HEAD of the default branch, but no history. These describe repo
+              health more than agent behavior, so they sit outside the score for now.
             </li>
 
             <li>How agents actually perform on the repo — that&apos;s the v1.0.0 benchmark harness.</li>

app/package/[registry]/[name]/page.tsx

@@ -2,27 +2,39 @@ import { ArrowUpRight } from "@phosphor-icons/react/dist/ssr";
 import type { Metadata } from "next";
 import Link from "next/link";
 import { notFound } from "next/navigation";
+import { cache } from "react";
 import { HostPill } from "@/components/HostPill";
 import { Panel, PanelHeading } from "@/components/Panel";
 import { ScoreNumber } from "@/components/ScoreNumber";
-import { isRegistry } from "@/lib/clients/registries";
+import { isRegistry, type Registry } from "@/lib/clients/registries";
 import { lookupPackage } from "@/lib/package-lookup";
 import { APP_URL } from "@/lib/version";
 
+const cachedLookup = cache((registry: Registry, name: string) => lookupPackage(registry, name));
+
 export async function generateMetadata({
   params,
 }: {
   params: Promise<{ registry: string; name: string }>;
 }): Promise<Metadata> {
   const { registry, name } = await params;
   const title = `${registry}/${name}`;
+  const description = `Agent-friendliness score for the ${registry} package "${name}" and its source repo.`;
+
+  if (!isRegistry(registry)) {
+    return { title, description, robots: { index: false, follow: true } };
+  }
+
+  const result = await cachedLookup(registry, name);
+  const isThin = result.status !== "scored";
 
   return {
     title,
-    twitter: { title },
+    description,
+    twitter: { title, description },
     alternates: { canonical: `/package/${registry}/${name}` },
-    openGraph: { title, url: `/package/${registry}/${name}`, type: "article" },
-    description: `Agent-friendliness score for the ${registry} package "${name}" and its source repo.`,
+    openGraph: { title, description, url: `/package/${registry}/${name}`, type: "article" },
+    ...(isThin ? { robots: { index: false, follow: true } } : {}),
   };
 }
 
@@ -33,7 +45,7 @@ export default async function Page({ params }: { params: Promise<{ registry: str
     notFound();
   }
 
-  const result = await lookupPackage(registry, name);
+  const result = await cachedLookup(registry, name);
 
   const jsonLd = {
     "@context": "https://schema.org",