@appsforgood/next-supabase-kit 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. package/CHANGELOG.md +8 -0
  2. package/DOGFOOD.md +14 -0
  3. package/README.md +432 -358
  4. package/REPOSITORY_SETTINGS.md +3 -1
  5. package/SUPPLY_CHAIN.md +3 -2
  6. package/dist/index.js +52 -20
  7. package/dist/index.js.map +1 -1
  8. package/examples/next-supabase-installed/.agent-kit/config.json +30 -0
  9. package/examples/next-supabase-installed/.agent-kit/manifest.json +9 -10
  10. package/examples/next-supabase-installed/audit-output.json +1 -1
  11. package/examples/next-supabase-installed/tree.txt +0 -3
  12. package/package.json +2 -1
  13. package/templates/next-supabase/.github/workflows/agent-kit-audit.yml +6 -7
  14. package/templates/next-supabase/DEPLOYMENT.md +2 -0
  15. package/templates/next-supabase/LOOP_CODING.md +1 -1
  16. package/templates/next-supabase/QUALITY_GATES.md +1 -0
  17. package/templates/next-supabase/TESTING.md +17 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.3.0
4
+
5
+ - Make GitHub Actions opt-in for fresh installs while preserving local verification gates and existing downstream workflows.
6
+
7
+ ## 0.2.1
8
+
9
+ - Rewrite the public README with verified setup commands and task-oriented examples for audits, council sessions, UI review, upgrades, and optional runtime orchestration.
10
+
3
11
  ## 0.2.0
4
12
 
5
13
  - Ship the leading-harness release: hash-aware manifest v2 updates, audit v2 with SARIF and suppressions, hardened localhost Agent Studio APIs, and optional executable council workflows through `@appsforgood/agent-kit-runtime`. Runtime workflows use validated roster routing, SQLite checkpoints, explicit approval gates, provider and allowlisted MCP adapters, Docker-first tools, isolated Git worktrees, bounded retries/timeouts, cancellation, redacted evidence, and scoped commits. Release automation now publishes and verifies the runtime and root packages with separate SBOM attestations before creating a GitHub release.
package/DOGFOOD.md CHANGED
@@ -185,3 +185,17 @@ Scope: README/docs discoverability + three new Antigravity adapters
185
185
  | Roster | `testing` and `code-review` workflows; planning triggers for spec keywords |
186
186
  | Historical scope | `/build`, `/webperf`, `/code-simplify`, and `/build auto` were deferred in this 0.1.7 review; the later runtime ships bounded roster workflows rather than cloning those command semantics |
187
187
  | Verification | `npm test`, `agent-kit adapter validate antigravity` after build |
188
+
189
+ ## 2026-07-11 - README Examples Release 0.2.1
190
+
191
+ Date: 2026-07-11
192
+ Scope: publish the verified README rewrite through npm Trusted Publishing and confirm the public artifacts.
193
+
194
+ | Evidence | Result |
195
+ | --- | --- |
196
+ | Local release gate | `npm run release:check` passed with 200 tests, coverage gates, package/adapters/examples/install/Studio/setup/audit checks, zero dependency vulnerabilities, SBOM validation, and package dry runs. |
197
+ | Root package | `@appsforgood/next-supabase-kit@0.2.1` is public and the `latest` dist-tag resolves to `0.2.1`. |
198
+ | Published README | npm returns the rewritten quick start, audit, council-session, frontend-review, update, and optional-runtime examples for `0.2.1`. |
199
+ | Runtime package | `@appsforgood/agent-kit-runtime` remains at `0.1.3`; the release workflow correctly skipped its unchanged package. |
200
+ | GitHub release | [`v0.2.1`](https://github.com/lukey662/agentsandskills/releases/tag/v0.2.1) was created only after public-registry verification. |
201
+ | Supply chain | Trusted Publishing used GitHub Actions OIDC and generated the root-package SBOM attestation before publication. |