jamesaphoenix/release
.claude/skills/release/SKILL.md
Release a new lockstep version of tx to GitHub and npm with preflight validation, workflow monitoring, and registry verification.
$ install --global
skillsauthnpx skillsauth add jamesaphoenix/tx releaseInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:13 AM49.1s1 file scanned
SKILL.md
- name:
- release
- description:
- Release a new lockstep version of tx to GitHub and npm with preflight validation, workflow monitoring, and registry verification.
- disable-model-invocation:
- true
- argument-hint:
- [version]
Release tx
Use this skill when cutting a real workspace release.
The version argument is required, for example:
/release 0.9.3
Rules
- Use a fresh version every time. If a publish partially failed, do not reuse that version.
- Treat the workspace as lockstep versioned.
- Publish every non-private package.
- Do not stop at tag creation. Wait for
publish.ymland verify npm.
Release Surface
Lockstep bump these workspace versions:
package.jsonpackages/types/package.jsonpackages/core/package.jsonpackages/test-utils/package.jsonpackages/tx/package.jsonapps/cli/package.jsonapps/agent-sdk/package.jsonapps/api-server/package.jsonapps/mcp-server/package.jsonapps/dashboard/package.jsonapps/docs/package.json
Published packages:
@jamesaphoenix/tx-types@jamesaphoenix/tx-core@jamesaphoenix/tx-test-utils@jamesaphoenix/tx@jamesaphoenix/tx-agent-sdk@jamesaphoenix/tx-api-server@jamesaphoenix/tx-mcp-server@jamesaphoenix/tx-cli
Preflight
Run the enforced local preflight first:
node scripts/release-preflight.mjs "$ARGUMENTS"
Then run the release gates:
bun run sync-readme
bun run test:packages
bunx eslint apps/ packages/ --max-warnings 0
bun run typecheck
Also confirm the target version is not already live:
npm view @jamesaphoenix/tx version
Version Bump
Update all 11 workspace package.json files to the target version.
Do not leave private apps behind on old versions. Keep the repo in lockstep.
Commit, Tag, Push
Use a conventional commit:
git add package.json packages/*/package.json apps/*/package.json
git commit -m "chore(release): $ARGUMENTS"
git push origin main
git tag v$ARGUMENTS
git push origin v$ARGUMENTS
Create GitHub Release
gh release create v$ARGUMENTS --title "v$ARGUMENTS" --generate-notes
If this is a recovery release, replace generated notes with a short explicit summary of the recovery reason.
Monitor Publish
Poll the publish workflow until it reaches a terminal state:
gh run list --workflow publish.yml --limit 5
gh run watch <run-id> --exit-status
If it fails:
gh run view <run-id> --json jobs
gh run view <run-id> --job <job-id> --log
Fix forward with a fresh patch version. Do not mutate a failed public version.
Verify npm
Confirm all published packages reached the target version:
npm view @jamesaphoenix/tx version
npm view @jamesaphoenix/tx-types version
npm view @jamesaphoenix/tx-core version
npm view @jamesaphoenix/tx-test-utils version
npm view @jamesaphoenix/tx-agent-sdk version
npm view @jamesaphoenix/tx-api-server version
npm view @jamesaphoenix/tx-mcp-server version
npm view @jamesaphoenix/tx-cli version
Failure Patterns This Skill Guards Against
- publish workflow missing a non-private package
- provenance failure from missing package metadata
- partial publish followed by an attempted version reuse
- cutting a tag without checking the actual publish run
- docs/SDK mismatch because the package never shipped
- release noise from local
.tx/runtime state
Related Skills
jamesaphoenix/verify-invariants
development
VerifiedTrustedCommunity
Implement and verify design doc invariants by annotating tests and source code with [INV-*] / @spec tags, then driving tx spec coverage from BUILD toward HARDEN (100% FCI). Works with any design doc that has an invariants block.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/task-spec-loop
data-ai
VerifiedTrustedCommunity
Link tasks to paired PRD/design specs, export all open work to markdown, and keep Ralph-style loops moving by creating tasks, subtasks, and dependency updates through tx primitives.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/skills-sync
development
VerifiedTrustedCommunity
Refresh bundled tx Claude Code and Codex skills in a project from the canonical tx source without manual copy and paste.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/ralph-loop
development
VerifiedTrustedCommunity
Run Ralph against either the full repo queue or tasks linked to one design doc, with injected task/spec/queue context for Codex or Claude runtimes.
2SKILL.mdUpdated Apr 17, 2026