@ikon85/agent-workflow-kit 0.36.2 → 0.36.4

package/README.md

@@ -445,6 +445,16 @@ the old way. Decision record:
 
 ## Release notes
 
+### 0.36.4
+
+- changed: `scripts/release-delta-guard.mjs`
+- changed: `scripts/release-delta-guard.test.mjs`
+- changed: `src/lib/updateReconcile.mjs`
+
+### 0.36.3
+
+- Metadata-only release.
+
 ### 0.36.2
 
 - changed: `.claude/skills/to-issues/SKILL.md`

package/agent-workflow-kit.package.json

@@ -1,5 +1,5 @@
 {
-  "kitVersion": "0.36.2",
+  "kitVersion": "0.36.4",
   "files": [
     {
       "path": ".agents/skills/ask-matt/SKILL.md",
@@ -2683,7 +2683,7 @@
       "path": "scripts/release-delta-guard.mjs",
       "kind": "script",
       "installRole": "maintainer",
-      "sha256": "1d2aab5f15bca25167b166b37232139916cf814e94de873fa74a653ecf9a4619",
+      "sha256": "566d7bae5526af2f8863d7a06dfa3016c9383b241b616cd43757eb7b46555895",
       "mode": 420,
       "origin": "kit"
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikon85/agent-workflow-kit",
-  "version": "0.36.2",
+  "version": "0.36.4",
   "description": "Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.",
   "type": "module",
   "bin": {

package/scripts/release-delta-guard.mjs

@@ -1,6 +1,6 @@
 /** Block shipped changes whose version or checked manifest does not match a fresh build. */
 import { execFileSync } from 'node:child_process';
-import { mkdir, mkdtemp, readFile, rm } from 'node:fs/promises';
+import { mkdir, mkdtemp, readFile, readdir, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -24,6 +24,12 @@ const describe = (delta) => ['added', 'removed', 'changed']
   .filter((kind) => delta[kind].length)
   .map((kind) => `${kind}: ${delta[kind].join(', ')}`).join('; ');
 
+function mergeDeltas(...deltas) {
+  return Object.fromEntries(['added', 'removed', 'changed'].map((kind) => [
+    kind, [...new Set(deltas.flatMap((delta) => delta[kind]))].sort(),
+  ]));
+}
+
 export function recommendBump(delta) {
   if (delta.removed.length) return 'major';
   if (delta.added.length) return 'minor';
@@ -40,7 +46,11 @@ function bumpKind(before, after) {
 }
 
 export function assessRelease(input) {
-  const delta = manifestDelta(input.baseManifest, input.builtManifest);
+  const bundleDelta = manifestDelta(input.baseManifest, input.builtManifest);
+  const packageDelta = input.basePackagePayload && input.currentPackagePayload
+    ? manifestDelta(input.basePackagePayload, input.currentPackagePayload)
+    : { added: [], removed: [], changed: [] };
+  const delta = mergeDeltas(bundleDelta, packageDelta);
   const checkedDrift = manifestDelta(input.checkedManifest, input.builtManifest);
   const payloadDrift = manifestDelta(input.builtManifest, input.payloadManifest);
   const errors = [];
@@ -99,6 +109,18 @@ export function resolveBaseTag({ repoRoot, baseVersion, tagPrefix = 'v' }) {
 }
 
 export async function packedPayloadManifest({ repoRoot, manifest }) {
+  const payload = await packedPackagePayload({ repoRoot });
+  const indexed = byPath(payload);
+  return {
+    kitVersion: manifest.kitVersion,
+    files: manifest.files.map((entry) => ({
+      ...entry,
+      sha256: indexed.get(entry.path),
+    })),
+  };
+}
+
+export async function packedPackagePayload({ repoRoot }) {
   const tempRoot = await mkdtemp(join(tmpdir(), 'awkit-package-payload-'));
   try {
     const packOutput = execFileSync(
@@ -110,17 +132,38 @@ export async function packedPayloadManifest({ repoRoot, manifest }) {
     await mkdir(unpackDir);
     execFileSync('tar', ['-xzf', join(tempRoot, filename), '-C', unpackDir]);
     return {
-      kitVersion: manifest.kitVersion,
-      files: await Promise.all(manifest.files.map(async (entry) => ({
-        ...entry,
-        sha256: sha256(await readFile(join(unpackDir, 'package', entry.path))),
-      }))),
+      files: await packageFiles(join(unpackDir, 'package')),
     };
   } finally {
     await rm(tempRoot, { recursive: true, force: true });
   }
 }
 
+async function packageFiles(root, relative = '') {
+  const files = [];
+  for (const entry of await readdir(join(root, relative), { withFileTypes: true })) {
+    const path = relative ? `${relative}/${entry.name}` : entry.name;
+    if (entry.isDirectory()) files.push(...await packageFiles(root, path));
+    else if (entry.isFile()) {
+      files.push({ path, sha256: sha256(await readFile(join(root, path))) });
+    }
+  }
+  return files.sort((a, b) => a.path.localeCompare(b.path));
+}
+
+async function packagePayloadAtRef(repoRoot, ref) {
+  const archiveRoot = await mkdtemp(join(tmpdir(), 'awkit-package-base-'));
+  try {
+    const archive = execFileSync('git', ['archive', '--format=tar', ref], {
+      cwd: repoRoot, maxBuffer: 50 * 1024 * 1024,
+    });
+    execFileSync('tar', ['-xf', '-', '-C', archiveRoot], { input: archive });
+    return await packedPackagePayload({ repoRoot: archiveRoot });
+  } finally {
+    await rm(archiveRoot, { recursive: true, force: true });
+  }
+}
+
 export async function checkReleaseDelta({ repoRoot, baseRef = 'origin/main' } = {}) {
   repoRoot ??= join(dirname(fileURLToPath(import.meta.url)), '..');
   const distDir = await mkdtemp(join(tmpdir(), 'awkit-release-guard-'));
@@ -129,6 +172,7 @@ export async function checkReleaseDelta({ repoRoot, baseRef = 'origin/main' } =
     const currentPackage = JSON.parse(await readFile(join(repoRoot, 'package.json'), 'utf8'));
     const builtManifest = JSON.parse(await readFile(join(distDir, 'agent-workflow-kit.package.json'), 'utf8'));
     const baseVersion = gitShowJson(repoRoot, baseRef, 'package.json').version;
+    const currentPackagePayload = await packedPackagePayload({ repoRoot });
     return assessRelease({
       baseVersion,
       baseTag: resolveBaseTag({ repoRoot, baseVersion }),
@@ -136,7 +180,15 @@ export async function checkReleaseDelta({ repoRoot, baseRef = 'origin/main' } =
       baseManifest: gitShowJson(repoRoot, baseRef, 'agent-workflow-kit.package.json'),
       checkedManifest: JSON.parse(await readFile(join(repoRoot, 'agent-workflow-kit.package.json'), 'utf8')),
       builtManifest,
-      payloadManifest: await packedPayloadManifest({ repoRoot, manifest: builtManifest }),
+      payloadManifest: {
+        kitVersion: builtManifest.kitVersion,
+        files: builtManifest.files.map((entry) => ({
+          ...entry,
+          sha256: byPath(currentPackagePayload).get(entry.path),
+        })),
+      },
+      basePackagePayload: await packagePayloadAtRef(repoRoot, baseRef),
+      currentPackagePayload,
     });
   } finally { await rm(distDir, { recursive: true, force: true }); }
 }

package/scripts/release-delta-guard.test.mjs

@@ -39,6 +39,25 @@ test('an unbumped shipped change is blocked with its concrete delta', () => {
   assert.match(result.errors.join('\n'), /version remains 1\.2\.3/);
 });
 
+test('an npm runtime change outside the Consumer manifest still requires a release', () => {
+  const consumer = { kitVersion: '1.2.3', files: [file('skill.md', 'same')] };
+  const result = assessRelease({
+    baseVersion: '1.2.3',
+    currentVersion: '1.2.3',
+    baseManifest: consumer,
+    builtManifest: consumer,
+    checkedManifest: consumer,
+    payloadManifest: consumer,
+    basePackagePayload: { files: [file('src/cli.mjs', 'old')] },
+    currentPackagePayload: { files: [file('src/cli.mjs', 'new')] },
+  });
+
+  assert.equal(result.ok, false);
+  assert.deepEqual(result.delta.changed, ['src/cli.mjs']);
+  assert.equal(result.recommendedBump, 'patch');
+  assert.match(result.errors.join('\n'), /version remains 1\.2\.3/);
+});
+
 test('dead checked-manifest entries are rejected', () => {
   const result = assessRelease({
     baseVersion: '1.2.3', currentVersion: '1.3.0',

package/src/commands/update.mjs

@@ -135,7 +135,7 @@ async function previewReadinessAdoption(context) {
     candidatePreview.generated = readiness.generated;
     candidatePreview.migrations = readiness.migrations;
     candidatePreview.migrated = readiness.migrated;
-    if (!readiness.migrationConflicts.length) {
+    if (!readiness.migrationConflicts.length && !candidatePreview.conflicts.length) {
       await verifyCandidateSchema(candidateRoot, {
         pkg, preview: candidatePreview, priorReadinessManifest, nextReadinessManifest,
       });

package/src/lib/updateReconcile.mjs

@@ -143,7 +143,8 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
     const userEdited = current !== prior.installedSha256;
     const currentMode = (await lstat(dest)).mode & 0o777;
     const upstreamChanged = file.sha256 !== prior.installedSha256
-      || currentMode !== file.mode;
+      || currentMode !== file.mode
+      || packageMetadataChanged(file, prior);
     if (!userEdited && upstreamChanged) {
       if (!dryRun) await writeAtomic(dest, await readFile(join(kitRoot, file.path)), file.mode);
       nextInstalled.push(entry(file, file.sha256));
@@ -185,7 +186,8 @@ export async function reconcile({ kitRoot, consumerRoot, decide = () => false, d
     }
   }
 
-  result.manifestChanged = consumer.installRole !== CONSUMER_INSTALL_ROLE ||
+  result.manifestChanged = consumer.kitVersion !== pkg.kitVersion ||
+    consumer.installRole !== CONSUMER_INSTALL_ROLE ||
     result.bridgeRetired.length > 0 ||
     nextInstalled.some((next) => installedIdx.get(next.path)?.installRole !== next.installRole);
 
@@ -227,6 +229,12 @@ function withInstallRole(installed, installRole = CONSUMER_INSTALL_ROLE) {
   return { ...installed, installRole };
 }
 
+function packageMetadataChanged(file, installed) {
+  return ['kind', 'ownerSkill', 'surface'].some(
+    (key) => (file[key] ?? null) !== (installed[key] ?? null),
+  );
+}
+
 async function projectExtensionEvidence(consumerRoot, path) {
   const match = /^docs\/agents\/skills\/([a-z0-9-]+)\.md$/.exec(path);
   if (!match) return null;