@open-agent-toolkit/cli 0.2.26 → 0.2.28

package/dist/release/public-package-contract.js

@@ -18,6 +18,23 @@ const PACKED_DEPENDENCY_FIELDS = [
     'optionalDependencies',
     'peerDependencies',
 ];
+const MIT_LICENSE_BODY = `Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.`;
 const PUBLIC_PACKAGE_CONTRACTS = [
     {
         workspaceDir: 'packages/cli',
@@ -32,8 +49,42 @@ const PUBLIC_PACKAGE_CONTRACTS = [
             'assets/templates/repo-agents.md',
             'assets/templates/pjm-agents.md',
             'assets/templates/reference-agents.md',
+            'assets/skills/explainer-kit/scripts/lib/package-coverage.mjs',
+            'assets/skills/explainer-kit/scripts/lib/source-backlinks.mjs',
+            'assets/NOTICES.md',
             'README.md',
         ],
+        requiredPackedTextFiles: [
+            {
+                path: 'assets/NOTICES.md',
+                requiredContents: [
+                    '**Source:** https://github.com/obra/superpowers',
+                    '**Version referenced:** 5.0.7',
+                    `Copyright (c) 2025 Jesse Vincent\n\n${MIT_LICENSE_BODY}`,
+                    '**Source:** https://github.com/shadcn/improve/tree/main/skills/improve',
+                    '**Version referenced:** `main` (retrieved 2026-07-12)',
+                    `Copyright (c) 2026 shadcn\n\n${MIT_LICENSE_BODY}`,
+                    '**Source:** https://github.com/nicobailon/visual-explainer',
+                    '**Version referenced:** 0.8.1',
+                    `Copyright (c) 2025 Nico Bailon\n\n${MIT_LICENSE_BODY}`,
+                ],
+            },
+            {
+                path: 'assets/skills/explainer-kit/scripts/lib/package-coverage.mjs',
+                requiredContents: [
+                    'explainer-kit.package-coverage/v2',
+                    'export function requiredImmutablePackagePaths',
+                    'export async function validateImmutablePackageEvidence',
+                ],
+            },
+            {
+                path: 'assets/skills/explainer-kit/scripts/lib/source-backlinks.mjs',
+                requiredContents: [
+                    'explainer-kit.source-backlinks/v1',
+                    'export function parseCanonicalGithubBlobUrl',
+                ],
+            },
+        ],
         forbiddenPathPatterns: [...COMMON_FORBIDDEN_PATH_PATTERNS],
         versionPolicyAdditionalRoots: [
             '.agents/skills',
@@ -50,6 +101,7 @@ const PUBLIC_PACKAGE_CONTRACTS = [
         role: 'support-library',
         requiredMetadataFields: [...COMMON_METADATA_FIELDS, 'exports', 'types'],
         requiredPaths: ['dist/index.js', 'dist/index.d.ts', 'README.md'],
+        requiredPackedTextFiles: [],
         forbiddenPathPatterns: [...COMMON_FORBIDDEN_PATH_PATTERNS],
         versionPolicyAdditionalRoots: [],
         versionPolicyIgnorePatterns: [],
@@ -60,6 +112,7 @@ const PUBLIC_PACKAGE_CONTRACTS = [
         role: 'docs-library',
         requiredMetadataFields: [...COMMON_METADATA_FIELDS, 'exports', 'types'],
         requiredPaths: ['dist/index.js', 'dist/index.d.ts', 'README.md'],
+        requiredPackedTextFiles: [],
         forbiddenPathPatterns: [...COMMON_FORBIDDEN_PATH_PATTERNS],
         versionPolicyAdditionalRoots: [],
         versionPolicyIgnorePatterns: [],
@@ -70,6 +123,7 @@ const PUBLIC_PACKAGE_CONTRACTS = [
         role: 'docs-library',
         requiredMetadataFields: [...COMMON_METADATA_FIELDS, 'exports', 'types'],
         requiredPaths: ['dist/index.js', 'dist/index.d.ts', 'README.md'],
+        requiredPackedTextFiles: [],
         forbiddenPathPatterns: [...COMMON_FORBIDDEN_PATH_PATTERNS],
         versionPolicyAdditionalRoots: [],
         versionPolicyIgnorePatterns: [],
@@ -80,6 +134,7 @@ const PUBLIC_PACKAGE_CONTRACTS = [
         role: 'docs-library',
         requiredMetadataFields: [...COMMON_METADATA_FIELDS, 'exports', 'types'],
         requiredPaths: ['dist/index.js', 'dist/index.d.ts', 'README.md'],
+        requiredPackedTextFiles: [],
         forbiddenPathPatterns: [...COMMON_FORBIDDEN_PATH_PATTERNS],
         versionPolicyAdditionalRoots: [],
         versionPolicyIgnorePatterns: [],
@@ -101,6 +156,10 @@ export function getPublicPackageContracts() {
         ...contract,
         requiredMetadataFields: [...contract.requiredMetadataFields],
         requiredPaths: [...contract.requiredPaths],
+        requiredPackedTextFiles: contract.requiredPackedTextFiles.map((requirement) => ({
+            ...requirement,
+            requiredContents: [...requirement.requiredContents],
+        })),
         forbiddenPathPatterns: [...contract.forbiddenPathPatterns],
         versionPolicyAdditionalRoots: [...contract.versionPolicyAdditionalRoots],
         versionPolicyIgnorePatterns: [...contract.versionPolicyIgnorePatterns],
@@ -115,6 +174,22 @@ export function findMissingPackedPaths(packedPaths, contract) {
 export function findForbiddenPackedPaths(packedPaths, contract) {
     return packedPaths.filter((packedPath) => contract.forbiddenPathPatterns.some((pattern) => matchesGlob(packedPath, pattern)));
 }
+export function findMissingPackedTextContents(packedTextFiles, contract) {
+    const missing = [];
+    for (const requirement of contract.requiredPackedTextFiles) {
+        const contents = packedTextFiles[requirement.path];
+        if (contents === undefined) {
+            missing.push(`${requirement.path} (missing file)`);
+            continue;
+        }
+        for (const requiredContent of requirement.requiredContents) {
+            if (!contents.includes(requiredContent)) {
+                missing.push(`${requirement.path} (missing ${requiredContent.split('\n')[0]})`);
+            }
+        }
+    }
+    return missing;
+}
 export function findWorkspaceProtocolDependencySpecs(packageJson) {
     const workspaceSpecs = [];
     for (const dependencyField of PACKED_DEPENDENCY_FIELDS) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-agent-toolkit/cli",
-  "version": "0.2.26",
+  "version": "0.2.28",
   "private": false,
   "description": "Open Agent Toolkit CLI",
   "homepage": "https://github.com/voxmedia/open-agent-toolkit/tree/main/packages/cli",
@@ -34,7 +34,7 @@
     "ora": "^9.0.0",
     "yaml": "2.8.2",
     "zod": "^3.25.76",
-    "@open-agent-toolkit/control-plane": "0.2.26"
+    "@open-agent-toolkit/control-plane": "0.2.28"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",