Skip to content

Prepare plugin 0.1.0 release candidate - #24

Merged
raghubetina merged 4 commits into
mainfrom
codex/improve-publication-progress
Aug 7, 2026
Merged

Prepare plugin 0.1.0 release candidate#24
raghubetina merged 4 commits into
mainfrom
codex/improve-publication-progress

Conversation

@raghubetina

@raghubetina raghubetina commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Summary

  • distinguish application Compilation from retained GitHub Publication progress and render only allowlisted phases, retry timing, and safe reason codes
  • preserve structured final CLI errors while teaching safe singleton recovery only after the prior Compile invocation exits
  • adopt ordinary plugin 0.1.0 with the pre-1.0 minor-breaking/patch-compatible policy and no compatibility aliases
  • pin the exact published CLI 0.1.0 main revision and API-contract 0.2.x compatibility line
  • keep npm next as an approval-gated channel independent of SemVer and leave latest and the public marketplace catalog unchanged
  • make plugin publication OIDC-only, rehearse registry/tag/catalog ordering before tagging, and reconcile consumed identities against the immutable protected-tag compatibility bytes

Verification

  • 61/61 repository tests
  • npm audit: 0 vulnerabilities
  • exact CLI contract and deterministic plugin package checks against d37d8b6775a0b97ce10bd651485bd308fed1dda2
  • live read-only prospective npm/protected-tag/catalog reconciliation
  • Skill validator and gh skill publish --dry-run
  • final max-effort independent review: approved, no material findings

Candidate identity

  • plugin version: 0.1.0
  • plugin tarball SHA-256: 02fad6cd2207f3d2ab7598f0aa67825520ebc5b807294e0c241774ee3ac6a89d
  • Skills runtime digest: 8506cad9c9e4e6739f39d95a4e2cfb84b5e0ca63bd05ddec06400c7f27d0b835
  • compatibility document SHA-256: 5d2d8de815c8d90761171bc42ef10f3e3635f4ed4614fa257d3c921b305acdab

Release boundary

This remains a draft source-integration PR. The public catalog still serves plugin alpha.3, npm latest is not moved, and this PR does not authorize or perform a plugin publication, release tag, catalog promotion, service deployment, API-contract activation, or staging mutation. Service API 0.2 activation and plugin 0.1.0 publication/promotion remain an explicitly approved and announced maintenance-window sequence.

Distinguish artifact compilation from retained GitHub publication so
agents can report safe phases and retries without guessing at causes.

Bind the alpha.5 plugin candidate to the API 0.2 and CLI alpha.3
contract, and test singleton recovery and release-window boundaries.
Use ordinary versions so compatibility lines, not prerelease labels, carry the breaking-change policy. Keep next as a separate approval-gated channel, pin the published CLI, and guard OIDC publication and release ordering.
Separate checkout tooling identity from the installable release and rehearse registry, protected-tag, and catalog ordering before an immutable tag is created. Reconcile only coherent exact identities after publication so catalog promotion and later CI remain viable.
Compare a consumed candidate compatibility document with its immutable protected-tag blob so the recorded tarball digest cannot drift after release. Pin the exact release-order invocations and rejection paths that enforce this boundary.
@raghubetina raghubetina changed the title Clarify Compile publication progress Prepare plugin 0.1.0 release candidate Aug 7, 2026
@raghubetina
raghubetina marked this pull request as ready for review August 7, 2026 21:02
@raghubetina
raghubetina merged commit d5713b8 into main Aug 7, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant