release - SKILL.md Agent Skill

name: release description: Prepare, validate, and publish a Pake release. Not for version bumps without release intent. version: 1.1.0 allowed-tools: - Bash - Read - Grep - Glob disable-model-invocation: true

Release Skill

Use this skill when preparing or executing a Pake release.

Version Files

Four files must be updated in sync — never update one without the others:

package.json → "version"
src-tauri/Cargo.toml → version under [package]
src-tauri/Cargo.lock → version for package pake
src-tauri/tauri.conf.json → "version"

Release Checklist

Pre-Release

Confirm the new version number (check current: cat package.json | jq .version)
Update all four version files above
Run pnpm run format — must pass cleanly
Run pnpm test — must pass cleanly. If the release workflow step fails with pnpm install ... exit code 1 against the CN mirror, re-run once; a single transient flake is acceptable, two consecutive failures is not.
Run pnpm run cli:build — Rollup + TS must pass (catches type errors that format misses).
Run pnpm run release:check — verifies version sync, package contents, and npm dry-run
No uncommitted changes: git status
Commit version bump with message: chore: bump version to VX.X.X

Tagging (triggers CI)

git tag -a VX.X.X -m "Release VX.X.X"
git push origin VX.X.X

Tag format: uppercase V prefix (e.g. V3.11.0), not v3.11.0.

Post-Tag Verification

Confirm CI triggered: gh run list --workflow=release.yml
Watch CI status: gh run watch
Verify GitHub Release was created: gh release view VX.X.X
Confirm npm workflow exists and is active: gh workflow list --all | grep "Publish npm Package"
Confirm npm Trusted Publishing triggered: gh run list --workflow=npm-publish.yml
Verify npm published the package: npm view pake-cli version and npm view pake-cli@X.Y.Z dist.tarball

npm publishes through Trusted Publishing from .github/workflows/npm-publish.yml. Configure npm package settings with GitHub Actions, tw93/Pake, workflow file npm-publish.yml, and no environment. Local npm publish is only a fallback if CI or registry state blocks the trusted path.

Trusted Publishing Notes

The first real Trusted Publishing test must use a new version and a new V* tag; do not retry an already-published version.
npm package settings should use the strict publishing option: require two-factor authentication and disallow tokens. Trusted Publishing still works with this setting.
If local fallback is unavoidable, prefer npm exec --yes --package=pnpm@10.26.2 -- npm publish --registry=https://registry.npmjs.org so prepublishOnly can find the pinned pnpm version.
Do not reply to GitHub issues or close them as released until npm view pake-cli@X.Y.Z version returns the expected version.

Build Commands (local only)

# Current platform
pnpm build

# macOS universal binary
pnpm build:mac

Cross-platform builds (Windows/Linux) are handled by CI, not locally.

Safety Rules

NEVER auto-commit or auto-push without explicit user request
NEVER tag before all checks pass
ALWAYS verify the four version files are in sync before tagging