jamesaphoenix/release
.codex/skills/release/SKILL.md
Cut a lockstep tx release with enforced preflight validation, workflow monitoring, and npm verification. Use when bumping versions, tagging releases, repairing partial publishes, or checking publish readiness.
$ install --global
skillsauthnpx skillsauth add jamesaphoenix/tx releaseInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:17 AM24.9s2 files scanned
SKILL.md
- name:
- release
- description:
- Cut a lockstep tx release with enforced preflight validation, workflow monitoring, and npm verification. Use when bumping versions, tagging releases, repairing partial publishes, or checking publish readiness.
- short-description:
- Ship a verified tx release
Release
Use this skill when shipping a new tx version.
Default Flow
- Run the local preflight:
node scripts/release-preflight.mjs <version>
- Run the release gates:
bun run sync-readme
bun run test:packages
bunx eslint apps/ packages/ --max-warnings 0
bun run typecheck
- Bump all workspace versions in lockstep:
package.jsonpackages/types/package.jsonpackages/core/package.jsonpackages/test-utils/package.jsonpackages/tx/package.jsonapps/cli/package.jsonapps/agent-sdk/package.jsonapps/api-server/package.jsonapps/mcp-server/package.jsonapps/dashboard/package.jsonapps/docs/package.json
- Commit, push, tag, and create the GitHub release.
- Watch
publish.ymlto completion. - Verify npm registry versions for every published package.
In This Repo
- publish workflow:
.github/workflows/publish.yml - README sync:
scripts/sync-readme.sh - preflight guardrail:
scripts/release-preflight.mjs
Published packages:
@jamesaphoenix/tx-types@jamesaphoenix/tx-core@jamesaphoenix/tx-test-utils@jamesaphoenix/tx@jamesaphoenix/tx-agent-sdk@jamesaphoenix/tx-api-server@jamesaphoenix/tx-mcp-server@jamesaphoenix/tx-cli
Rules
- Always use a fresh version. If a publish failed, ship a new patch version.
- Do not stop at tag creation. The release is not done until
publish.ymlsucceeds. - Treat the workspace as lockstep versioned, including private apps.
- Confirm npm moved, not just GitHub Actions.
Commands
node scripts/release-preflight.mjs <version>
npm view @jamesaphoenix/tx version
git commit -m "chore(release): <version>"
git push origin main
git tag v<version>
git push origin v<version>
gh release create v<version> --title "v<version>" --generate-notes
gh run list --workflow publish.yml --limit 5
gh run watch <run-id> --exit-status
Recovery
If publish fails:
- Inspect the failing step with
gh run view. - Fix the real issue locally.
- Re-run the release gates.
- Cut a fresh patch version.
- Optionally delete the stale failed GitHub release and tag if they should not stay visible.
Related Skills
jamesaphoenix/verify-invariants
development
VerifiedTrustedCommunity
Implement and verify design doc invariants by annotating tests and source code with [INV-*] / @spec tags, then driving tx spec coverage from BUILD toward HARDEN (100% FCI). Works with any design doc that has an invariants block.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/task-spec-loop
data-ai
VerifiedTrustedCommunity
Link tasks to paired PRD/design specs, export all open work to markdown, and keep Ralph-style loops moving by creating tasks, subtasks, and dependency updates through tx primitives.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/skills-sync
development
VerifiedTrustedCommunity
Refresh bundled tx Claude Code and Codex skills in a project from the canonical tx source without manual copy and paste.
2SKILL.mdUpdated Apr 17, 2026
jamesaphoenix/ralph-loop
development
VerifiedTrustedCommunity
Run Ralph against either the full repo queue or tasks linked to one design doc, with injected task/spec/queue context for Codex or Claude runtimes.
2SKILL.mdUpdated Apr 17, 2026