@aicf/agent-skills 1.0.0-rc.4 → 1.0.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "aicf-agent-skills",
-  "version": "1.0.0-rc.4",
+  "version": "1.0.0",
   "description": "Reusable Agent Skills for building, auditing, testing, migrating, and releasing AI Capability Framework projects.",
   "author": {
     "name": "AICF Contributors",

package/CHANGELOG.md

@@ -2,10 +2,10 @@
 
 All notable public changes to the AICF Agent Skills package are documented here.
 
-## 1.0.0-rc.4 - Unreleased
+## 1.0.0 - Unreleased
 
 - Aligned the skills package, Codex plugin manifest, and all real skill metadata with
-  the AICF `1.0.0-rc.4` release candidate.
+  the AICF `1.0.0` stable release.
 - Added public publish metadata for `@aicf/agent-skills` and documented the
   same-version, same-tag release process with the root package.
 - Added S6 release hardening: stale index checks, release-readiness assertions, stricter

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aicf/agent-skills",
-  "version": "1.0.0-rc.4",
+  "version": "1.0.0",
   "description": "Agent Skills for building, integrating, testing, auditing, and releasing AICF-based AI capability systems.",
   "type": "module",
   "license": "MIT",
@@ -45,7 +45,8 @@
     "check:index": "node scripts/generate-skill-index.mjs ./skills ./docs/skill-index.md --check",
     "test": "node --test tests/*.test.mjs",
     "check:release": "node scripts/check-release-readiness.mjs",
-    "check": "npm run validate && npm run check:triggers && npm run check:index && npm run test && npm run check:public && npm run check:release",
+    "check:release-install": "node scripts/check-release-install.mjs",
+    "check": "npm run validate && npm run check:triggers && npm run check:index && npm run test && npm run check:public && npm run check:release && npm run check:release-install",
     "pack:dry": "npm pack --dry-run"
   },
   "engines": {

package/scripts/check-release-install.mjs

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+import { execFileSync } from "node:child_process";
+import { existsSync, readdirSync } from "node:fs";
+import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import {
+  expectedSkillNames,
+  forbiddenPathFailures,
+  normalizePath,
+  packageRoot
+} from "./lib/skill-common.mjs";
+
+const root = packageRoot();
+const keepTmp = process.env.AICF_KEEP_TMP === "1";
+const npmExecPath = process.env.npm_execpath;
+const npmCommand = npmExecPath ? process.execPath : process.platform === "win32" ? "npm.cmd" : "npm";
+const npmArgs = (...args) => npmExecPath ? [npmExecPath, ...args] : args;
+let tempDirectory;
+
+try {
+  tempDirectory = await mkdtemp(path.join(tmpdir(), "aicf-agent-skills-release-install-"));
+  const packDirectory = path.join(tempDirectory, "pack");
+  const consumerDirectory = path.join(tempDirectory, "consumer");
+  await mkdir(packDirectory, { recursive: true });
+  await mkdir(consumerDirectory, { recursive: true });
+
+  execFileSync(npmCommand, npmArgs("pack", "--pack-destination", packDirectory, "--json"), {
+    cwd: root,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+
+  const tarball = readdirSync(packDirectory)
+    .filter((file) => file.endsWith(".tgz"))
+    .map((file) => path.join(packDirectory, file))[0];
+  if (!tarball) {
+    throw new Error("npm pack did not produce an agent-skills tarball.");
+  }
+
+  execFileSync(npmCommand, npmArgs("init", "-y"), {
+    cwd: consumerDirectory,
+    stdio: "ignore"
+  });
+  execFileSync(npmCommand, npmArgs("install", "--omit=dev", tarball), {
+    cwd: consumerDirectory,
+    stdio: "pipe"
+  });
+
+  const listOutput = execFileSync(npmCommand, npmArgs("exec", "--", "aicf-skills", "list"), {
+    cwd: consumerDirectory,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+
+  for (const skillName of expectedSkillNames) {
+    if (!listOutput.includes(`${skillName}\t`)) {
+      throw new Error(`Installed aicf-skills list output is missing ${skillName}.`);
+    }
+  }
+
+  execFileSync(process.execPath, [
+    "--input-type=module",
+    "-e",
+    `
+      import { createRequire } from "node:module";
+      const require = createRequire(import.meta.url);
+      const pkg = require("@aicf/agent-skills/package.json");
+      if (pkg.name !== "@aicf/agent-skills") throw new Error("Unexpected installed package name.");
+      if (!pkg.bin?.["aicf-skills"]) throw new Error("Missing installed aicf-skills bin metadata.");
+    `
+  ], {
+    cwd: consumerDirectory,
+    stdio: "pipe"
+  });
+
+  const installedRoot = path.join(consumerDirectory, "node_modules", "@aicf", "agent-skills");
+  const requiredFiles = [
+    ".codex-plugin/plugin.json",
+    "skills/README.md",
+    "README.md",
+    "LICENSE",
+    "scripts/aicf-skills.mjs"
+  ];
+  for (const file of requiredFiles) {
+    if (!existsSync(path.join(installedRoot, file))) {
+      throw new Error(`Installed package missing required file: ${file}`);
+    }
+  }
+
+  const installedFiles = walkFiles(installedRoot).map((file) => normalizePath(path.relative(installedRoot, file)));
+  for (const skillName of expectedSkillNames) {
+    if (!installedFiles.includes(`skills/${skillName}/SKILL.md`)) {
+      throw new Error(`Installed package missing skill file: skills/${skillName}/SKILL.md`);
+    }
+  }
+
+  for (const file of installedFiles) {
+    const lower = file.toLowerCase();
+    if (
+      file.startsWith("tests/")
+      || file.includes("/tests/")
+      || file.startsWith("node_modules/")
+      || file.includes("/node_modules/")
+      || lower.includes("provider-payload")
+      || lower.includes("raw-payload")
+      || lower.includes(`raw-${"prompt"}`)
+      || lower.includes("raw-trace")
+      || /(^|\/)traces?(\/|$)/u.test(lower)
+      || /(^|\/)prompts?(\/|$)/u.test(lower)
+      || lower.endsWith(".log")
+    ) {
+      throw new Error(`Installed package contains forbidden file: ${file}`);
+    }
+    const forbidden = forbiddenPathFailures(file, "installed package");
+    if (forbidden.length > 0) {
+      throw new Error(forbidden.join("\n"));
+    }
+  }
+
+  console.log(`Agent skills release install smoke test passed in ${consumerDirectory}.`);
+} finally {
+  if (!keepTmp && tempDirectory) {
+    await rm(tempDirectory, { recursive: true, force: true });
+  }
+}
+
+function walkFiles(directory) {
+  const files = [];
+  if (!existsSync(directory)) return files;
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    const fullPath = path.join(directory, entry.name);
+    if (entry.isDirectory()) {
+      files.push(...walkFiles(fullPath));
+    } else if (entry.isFile()) {
+      files.push(fullPath);
+    }
+  }
+  return files;
+}

package/scripts/check-release-readiness.mjs

@@ -51,7 +51,8 @@ function checkPackageMetadata() {
     "scripts/generate-skill-index.mjs",
     "scripts/install-skills.mjs",
     "scripts/aicf-skills.mjs",
-    "scripts/check-release-readiness.mjs"
+    "scripts/check-release-readiness.mjs",
+    "scripts/check-release-install.mjs"
   ]) {
     requireFile(rel);
   }
@@ -64,6 +65,7 @@ function checkPackageMetadata() {
     "check:index": "node scripts/generate-skill-index.mjs ./skills ./docs/skill-index.md --check",
     test: "node --test tests/*.test.mjs",
     "check:release": "node scripts/check-release-readiness.mjs",
+    "check:release-install": "node scripts/check-release-install.mjs",
     "pack:dry": "npm pack --dry-run"
   };
   for (const [scriptName, expected] of Object.entries(requiredScripts)) {
@@ -71,6 +73,7 @@ function checkPackageMetadata() {
   }
   expect(String(pkg.scripts?.check ?? "").includes("npm run check:index"), "package.json: check must include check:index.");
   expect(String(pkg.scripts?.check ?? "").includes("npm run check:release"), "package.json: check must include check:release.");
+  expect(String(pkg.scripts?.check ?? "").includes("npm run check:release-install"), "package.json: check must include check:release-install.");
 
   for (const requiredFileEntry of [".codex-plugin", "skills", "scripts", "docs", "assets", "README.md", "LICENSE", "CHANGELOG.md"]) {
     expect(pkg.files?.includes(requiredFileEntry), `package.json: files must include ${requiredFileEntry}.`);
@@ -156,7 +159,8 @@ function checkPackContents() {
     "assets/aicf-agent-skills-icon.svg",
     "assets/aicf-agent-skills-logo.svg",
     "scripts/aicf-skills.mjs",
-    "scripts/check-release-readiness.mjs"
+    "scripts/check-release-readiness.mjs",
+    "scripts/check-release-install.mjs"
   ];
 
   for (const skillName of expectedSkillNames) {

package/skills/aicf-action-lifecycle/SKILL.md

@@ -8,7 +8,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "action-lifecycle"
   aicf.skill.scope: "builder"

package/skills/aicf-capability-authoring/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "capability-authoring"
   aicf.skill.scope: "builder"

package/skills/aicf-control-plane-ui/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "control-plane-ui"
   aicf.skill.scope: "builder"

package/skills/aicf-controls-and-budgets/SKILL.md

@@ -8,7 +8,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "controls-budgets"
   aicf.skill.scope: "builder"

package/skills/aicf-docs-and-examples/SKILL.md

@@ -8,7 +8,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "docs-examples"
   aicf.skill.scope: "builder"

package/skills/aicf-eval-authoring/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "evals"
   aicf.skill.scope: "builder"

package/skills/aicf-governance-lifecycle/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "governance"
   aicf.skill.scope: "builder"

package/skills/aicf-migration/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "migration"
   aicf.skill.scope: "builder"

package/skills/aicf-observability-replay/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "observability-replay"
   aicf.skill.scope: "builder"

package/skills/aicf-policy-and-risk/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "policy-risk"
   aicf.skill.scope: "builder"

package/skills/aicf-provider-conformance/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "provider-conformance"
   aicf.skill.scope: "builder"

package/skills/aicf-release-hygiene/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "release-hygiene"
   aicf.skill.scope: "builder"

package/skills/aicf-runtime-integration/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "runtime"
   aicf.skill.scope: "builder"

package/skills/aicf-security-redteam/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "security-redteam"
   aicf.skill.scope: "builder"

package/skills/aicf-skill-pack-maintenance/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "skill-pack-maintenance"
   aicf.skill.scope: "builder"

package/skills/aicf-skill-pack-maintenance/assets/skill-template.md

@@ -6,7 +6,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "example"
   aicf.skill.scope: "builder"

package/skills/aicf-storage-and-aws/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF. AWS work must remain optional and subpath-isolated.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "storage-aws"
   aicf.skill.scope: "builder"

package/skills/aicf-trust-redaction-retention/SKILL.md

@@ -9,7 +9,7 @@ compatibility:
   Codex and Agent Skills-compatible coding agents. Works in repositories using AICF or
   migrating to AICF.
 metadata:
-  aicf.skill.version: "1.0.0-rc.4"
+  aicf.skill.version: "1.0.0"
   aicf.skill.package: "@aicf/agent-skills"
   aicf.skill.category: "trust-redaction-retention"
   aicf.skill.scope: "builder"