@lifeaitools/rdc-skills 0.37.1 → 0.37.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rdc",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "description": "RDC typed-agent dispatch skill suite for Claude Code — plan, build, review, overnight unattended builds with work-item tracking and TDD enforcement.",
   "author": {
     "name": "LIFEAI",

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
+## v0.37.2 — the release doc says what actually happens
+
+### Fixed
+- RELEASE.md step 3 is one command, `work-ship --publish`, which waits for the tag's CI publish, falls back to the token route with npm's reason printed, and installs the exact version once npm serves it (lifeai-env d4ff3f6).
+- RELEASE.md step 4 records the measured CI state: npm's OIDC exchange answers "package not found" for @lifeaitools/rdc-skills, so no trusted publisher matches LIFEAI/rdc-skills publish.yml, and names what corrects it.
+
+---
+
 ## v0.37.1 — one version in every manifest
 
 ### Fixed

package/RELEASE.md

@@ -38,17 +38,27 @@ node scripts/sync-manifest-versions.mjs --check   # exit 1 names any declaration
 #    manifest FAIL) both fail on drift. 0.37.0 shipped clauth-plugin.json at 0.35.10
 #    because the self-test then checked plugin.json alone.
 
-# 3. Commit, tag, and push (the hook already staged every manifest)
-git add CHANGELOG.md
-git commit -m "release: v$(node -e \"console.log(require('./package.json').version)\")"
-git tag "v$(node -e \"console.log(require('./package.json').version)\")"
-git push origin master --tags
-
-# 4. Publish through the tag-triggered GitHub workflow
-
-# 5. Verify the published package
-npm view @lifeaitools/rdc-skills version
-npm install -g @lifeaitools/rdc-skills@latest
+# 3. Ship it — ONE command. Write the release commit message to a file first.
+#    work-ship checks every version field, commits, runs test:acceptance, pushes
+#    master, pushes the tag, WAITS for the tag's publish.yml run, and:
+#      - CI published    -> reports the run id (the version carries provenance)
+#      - CI refused      -> prints npm's own reason as `warn ci-publish`, then
+#                           publishes with the vault's npm token instead
+#    Then it waits until npm SERVES that exact version (npm processes a publish
+#    first; 0.37.1 took 239 s) and installs that version, failing on a mismatch.
+node "$LIFEAI_ENV/sessions/work-ship.mjs" --repo rdc-skills --lane <this worktree> -F <msgfile> --publish
+
+# 4. CI's publish, as measured 2026-09-21: every tag since v0.33.0 was refused at
+#    npm's OIDC exchange with "OIDC token exchange error - package not found" --
+#    npm holds no trusted publisher for @lifeaitools/rdc-skills that matches
+#    LIFEAI / rdc-skills / publish.yml. publish.yml prints that line on every run
+#    (step "OIDC exchange result"). Correcting it takes the npm owner's 2FA:
+#    npmjs.com -> @lifeaitools/rdc-skills -> Settings -> Trusted Publisher, or
+#    `npm trust github @lifeaitools/rdc-skills --file publish.yml --repository LIFEAI/rdc-skills --allow-publish`.
+#    Until then step 3 finishes every release through the token route and says so.
+
+# 5. Refresh the local plugin cache and read the verdict
+rdc-skills-install --profile lifeai
 npm list -g @lifeaitools/rdc-skills --depth=0
 rdc-skills-self-test
 # ^ run this LAST and read the verdict line, not just the section pass counts —

package/clauth-plugin.json

@@ -1,7 +1,7 @@
 {
   "schema": "lifeai.plugin.v1",
   "id": "rdc-skills",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "publisher": "LIFEAI",
   "core": false,
   "documentation": {

package/git-sha.json

@@ -1,3 +1,3 @@
 {
-  "sha": "ed080efda2d2537ca723128a016188aefd8f8fb5"
+  "sha": "c22b3e63abdb2c8628348bd436077688b1243b41"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/rdc-skills",
-  "version": "0.37.1",
+  "version": "0.37.2",
   "description": "RDC typed-agent dispatch skill suite for Claude Code - plan, build, review, overnight builds",
   "keywords": [
     "claude-code",
@@ -19,7 +19,7 @@
     "type": "plugin",
     "skills": "skills/",
     "guides": "guides/",
-    "version": "0.37.1",
+    "version": "0.37.2",
     "commands": "commands/"
   },
   "bin": {