@podo/skill-validator 0.1.0-canary.0 → 0.1.0

package/README.md

@@ -4,8 +4,8 @@ Offline Node 22+ validator for directories containing `SKILL.md`. Uses the
 website's deterministic rules, security heuristics, static package checks, and
 token estimates. No network requests, AI calls, or execution of skill scripts.
 
-**Public npm package:** `@podo/skill-validator`. The initial canary is
-`0.1.0-canary.0`; verify its registry publication before installing it.
+**Public npm package:** `@podo/skill-validator`. Stable installations should pin
+`0.1.0`; verify its registry publication before installing it.
 The package does not require Cloudsmith or Nexus. Direct npm downloads from the
 target Jenkins agent still need a network/policy check. The source repository
 does not need to move to distribute this package.
@@ -27,11 +27,11 @@ Both `skill-validator` and `skillval` invoke the same command.
 
 ## Install from public npm
 
-**After the canary is published and verified**, pin its exact version:
+**After the stable release is published and verified**, pin its exact version:
 
 ```sh
 npm install --save-dev --save-exact --ignore-scripts \
-  @podo/skill-validator@0.1.0-canary.0 \
+  @podo/skill-validator@0.1.0 \
   --registry=https://registry.npmjs.org/
 ./node_modules/.bin/skill-validator validate skills
 ```
@@ -212,7 +212,7 @@ stage('Skill Validator (advisory)') {
                 npm exec --yes --ignore-scripts \
                   --registry=https://registry.npmjs.org/ \
                   --@podo:registry=https://registry.npmjs.org/ \
-                  --package=@podo/skill-validator@0.1.0-canary.0 -- \
+                  --package=@podo/skill-validator@0.1.0 -- \
                   skill-validator validate plugins --fail-on none \
                   --format junit,json,markdown \
                   --report-dir skill-validator-report --quiet
@@ -281,7 +281,7 @@ only the executable, schema, package metadata, README, license, and dependency
 notices. Inspect the artifact for sensitive material before the first upload.
 
 CLI tags are independent of web `vX.Y.Z` tags and do not require a Playground
-deploy. After the first canary upload, verify its public access and integrity,
+deploy. After each release, verify its public access and integrity,
 install it in a clean directory without credentials, and run it on a real Jenkins
 agent before enabling consumer integration. Publication does not establish
 Jenkins compatibility: that remains a separate acceptance check.

package/dist/cli.js

@@ -8451,7 +8451,7 @@ function render(format, report, quiet = false) {
 }
 
 // src/bin/cli.ts
-var HELP = `skill-validator ${"0.1.0-canary.0"}
+var HELP = `skill-validator ${"0.1.0"}
 
 Usage:
   skill-validator [validate] [paths...]   Validate directories (default: skills/ or .)
@@ -8511,7 +8511,7 @@ function main(args) {
     return EXIT_OK;
   }
   if (values.version) {
-    console.log("0.1.0-canary.0");
+    console.log("0.1.0");
     return EXIT_OK;
   }
   const commands = /* @__PURE__ */ new Set(["validate", "doctor", "rules", "prompt"]);
@@ -8552,7 +8552,7 @@ ${webOnlyReason(rule.id) ? `Web/live only; not run by the CLI (${webOnlyReason(r
   const inputs = positionals.length ? positionals.map((path) => resolve4(cwd, path)) : [existsSync2(join4(cwd, "skills")) ? join4(cwd, "skills") : cwd];
   const { skills: dirs, unsearched } = discoverSkills(root, inputs, ignoreMatcher(config.ignore));
   if (command === "doctor") {
-    console.log(`skill-validator ${"0.1.0-canary.0"}
+    console.log(`skill-validator ${"0.1.0"}
 node          ${process.versions.node}
 repository    ${printable(root)}
 config        ${printable(configPath ?? "not found (defaults)")}
@@ -8573,7 +8573,7 @@ not run       ${SKIPPED_CHECKS.join(", ")}`);
     const skill = validateBundle(bundle, { dir: inside(root, dir), skippedChecks: SKIPPED_CHECKS });
     return { bundle, skill };
   });
-  const report = createReport(loaded, config, "0.1.0-canary.0");
+  const report = createReport(loaded, config, "0.1.0");
   if (command === "prompt") {
     const entry = loaded[0];
     const findings = entry.skill.findings.map((finding) => scrubEvidence({ ...finding, severity: config.ruleSeverities[finding.id] ?? finding.severity }));
@@ -8604,7 +8604,7 @@ try {
     process.exitCode = EXIT_USAGE;
   } else {
     console.error(`skill-validator: internal error (exit ${EXIT_INTERNAL})`);
-    console.error(`version ${"0.1.0-canary.0"} \xB7 node ${process.versions.node}`);
+    console.error(`version ${"0.1.0"} \xB7 node ${process.versions.node}`);
     console.error("package information: https://www.npmjs.com/package/@podo/skill-validator");
     if (process.env.SKILL_VALIDATOR_DEBUG === "1") console.error(error);
     process.exitCode = EXIT_INTERNAL;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@podo/skill-validator",
-  "version": "0.1.0-canary.0",
+  "version": "0.1.0",
   "description": "Validate agent skills (SKILL.md packages): structure, security, and token budget.",
   "type": "module",
   "license": "MIT",