@softspark/ai-toolkit 2.6.1 → 2.6.2

package/CHANGELOG.md

@@ -7,6 +7,16 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v2.6.2 — Eject Count Fix (2026-04-17)
+
+### Fixed
+- **`ai-toolkit eject` skill count** — reported `95 skills` while `validate.py` reported `94`. Root cause: eject iterated every directory under `app/skills/`, including the shared `_lib/` helper (no `SKILL.md`). Now matches `validate.py` semantics — skips underscore-prefixed dirs and requires `SKILL.md` for the count. `_lib/` is still copied so dependent skills (`ci`, `test`, `build`, `lint`) keep working after eject.
+
+### Added
+- **Two eject tests** in `tests/test_eject.bats` — `eject reports skill count matching validate.py (excludes _lib helpers)` and `eject still copies _lib helper directory for dependent skills`. Test count: 658 → 660.
+
+---
+
 ## v2.6.1 — HIPAA Scanner Precision (2026-04-17)
 
 ### Changed

package/README.md

@@ -6,31 +6,14 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Skills](https://img.shields.io/badge/skills-94-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-44-blue)](app/agents/)
-[![Tests](https://img.shields.io/badge/tests-658%20passing-success)](tests/)
+[![Tests](https://img.shields.io/badge/tests-660%20passing-success)](tests/)
 
 ---
 
-## What's New in v2.6.1
+## What's New in v2.6.2
 
-- **HIPAA scanner precision** — Cat 3 TLS regexes anchored (`ssl.CERT_NONE`, `[,(] ssl=False`) to eliminate false positives on feature flags and constant names
-- **Cross-language isolation** — new `LANG_EXTENSIONS` filter ensures Python regexes don't match `.java` files in mixed projects, and vice versa
-- **`SECURE_SSL_REDIRECT = False` HIGH → WARN** — commonly False in dev settings; reviewer confirms prod config instead of flooding every Django project with HIGH findings
-- **11 new bats tests** (`tests/test_hipaa_scan.bats`) — fixture-driven positive/negative cases covering the Python pattern expansion and isolation guarantee. Test count: 647 → 658
-
-## What's New in v2.6.0
-
-- **opencode integration** — `ai-toolkit install --editors opencode` generates `AGENTS.md`, `.opencode/agents/`, `.opencode/commands/`, plus a JS plugin bridging our Bash hooks to opencode's lifecycle events
-- **opencode MCP merge** — `.mcp.json` servers are translated into `opencode.json` under the `mcp` key, preserving user-authored entries
-- **Global opencode configs** — `~/.config/opencode/{AGENTS.md,agents/,commands/}` managed from `state.json`, auto-refreshed on `update`
-- **Shared AGENTS.md** — opencode and Codex CLI both read the same `AGENTS.md` via distinct marker sections; installing both does not clobber either
-
-## What's New in v2.5.0
-
-- **`/seo-validate`** — 9-category SEO scanner with automated `seo-scanner.py` script (community contribution)
-- **`/a11y-validate`** — WCAG 2.1/2.2 + EAA accessibility scanner with `a11y-scanner.py` script (community contribution)
-- **Design Craft** — 7-domain impeccable design vocabulary in `frontend-specialist` + `frontend-lead` persona
-- **GEO/AEO reference** — Answer Engine Optimization patterns for AI answer engines
-- **94 skills** — 31 task + 31 hybrid + 32 knowledge
+- **`ai-toolkit eject` skill count** now matches `validate.py` — previously reported `95 skills` because the shared `_lib/` helper directory (no `SKILL.md`) was counted. Now skips underscore-prefixed dirs and requires `SKILL.md`; `_lib/` is still copied so dependent skills (`ci`, `test`, `build`, `lint`) keep working after eject.
+- **Two new eject tests** — `eject reports skill count matching validate.py` and `eject still copies _lib helper directory for dependent skills`. Test count: 658 → 660.
 
 See [CHANGELOG.md](CHANGELOG.md) for full history.
 
@@ -158,7 +141,7 @@ ai-toolkit/
 │   └── ARCHITECTURE.md  # Full system design
 ├── kb/                  # Reference docs, procedures, plans
 ├── scripts/             # Validation, install, evaluation scripts
-├── tests/               # Bats test suite (658 tests)
+├── tests/               # Bats test suite (660 tests)
 └── CHANGELOG.md
 ```
 

package/app/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ai-toolkit",
   "description": "Professional-grade Claude Code toolkit with persona presets, skill security auditor, expanded lifecycle hooks, experimental opt-in plugin packs, benchmark harvesting, and multi-tool support.",
-  "version": "2.6.1",
+  "version": "2.6.2",
   "author": {
     "name": "SoftSpark",
     "url": "https://github.com/softspark"

package/kb/procedures/release-preparation-sop.md

@@ -3,9 +3,9 @@ title: "SOP: Release Preparation"
 category: procedures
 service: ai-toolkit
 tags: [sop, release, version, publish, changelog, semver]
-version: "1.5.0"
+version: "1.6.0"
 created: "2026-04-10"
-last_updated: "2026-04-13"
+last_updated: "2026-04-17"
 description: "Step-by-step checklist for preparing a new ai-toolkit release — version sync, changelog, artifact regeneration, validation, and tagging. Run BEFORE every git tag."
 ---
 
@@ -163,12 +163,15 @@ Add entry at the top of `CHANGELOG.md` (after the header, before previous releas
 
 1. Change the heading version: `## What's New in vX.Y.Z`
 2. Replace bullet points with 3-5 highlights from this release
-3. Keep the `See [CHANGELOG.md](CHANGELOG.md) for full history.` link
+3. **Keep only the latest version block.** Delete the previous `## What's New in vA.B.C` section(s). README is the shop window, not the archive — users see the current release, full history lives in `CHANGELOG.md`.
+4. Keep the `See [CHANGELOG.md](CHANGELOG.md) for full history.` link directly below the bullet list.
 
 > **Warning:** This section is the first thing users see after the badges.
 > A stale version here (e.g., "What's New in v2.1.3" when shipping v2.3.0)
 > signals an unmaintained project. Do NOT skip this step.
 
+> **Single-version rule:** README.md must contain **exactly one** `## What's New in vX.Y.Z` heading at any time. If you find multiple stacked (e.g. v2.6.1 + v2.6.0 + v2.5.0), that is a SOP drift — collapse to the latest on the next release commit.
+
 ---
 
 ## Phase 4: Regenerate Artifacts

package/llms-full.txt

@@ -3518,9 +3518,9 @@ title: "SOP: Release Preparation"
 category: procedures
 service: ai-toolkit
 tags: [sop, release, version, publish, changelog, semver]
-version: "1.5.0"
+version: "1.6.0"
 created: "2026-04-10"
-last_updated: "2026-04-13"
+last_updated: "2026-04-17"
 description: "Step-by-step checklist for preparing a new ai-toolkit release — version sync, changelog, artifact regeneration, validation, and tagging. Run BEFORE every git tag."
 ---
 
@@ -3678,12 +3678,15 @@ Add entry at the top of `CHANGELOG.md` (after the header, before previous releas
 
 1. Change the heading version: `## What's New in vX.Y.Z`
 2. Replace bullet points with 3-5 highlights from this release
-3. Keep the `See [CHANGELOG.md](CHANGELOG.md) for full history.` link
+3. **Keep only the latest version block.** Delete the previous `## What's New in vA.B.C` section(s). README is the shop window, not the archive — users see the current release, full history lives in `CHANGELOG.md`.
+4. Keep the `See [CHANGELOG.md](CHANGELOG.md) for full history.` link directly below the bullet list.
 
 > **Warning:** This section is the first thing users see after the badges.
 > A stale version here (e.g., "What's New in v2.1.3" when shipping v2.3.0)
 > signals an unmaintained project. Do NOT skip this step.
 
+> **Single-version rule:** README.md must contain **exactly one** `## What's New in vX.Y.Z` heading at any time. If you find multiple stacked (e.g. v2.6.1 + v2.6.0 + v2.5.0), that is a SOP drift — collapse to the latest on the next release commit.
+
 ---
 
 ## Phase 4: Regenerate Artifacts

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.6.1",
+  "version": "2.6.2",
   "components": {
     "agents": {
       "description": "44 specialized agents (orchestrator, backend, frontend, security, devops, etc.)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softspark/ai-toolkit",
-  "version": "2.6.1",
+  "version": "2.6.2",
   "description": "Professional-grade AI coding toolkit: 94 skills, 44 agents, multi-platform support (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, Google Antigravity, Codex CLI, opencode), machine-enforced safety constitution, persona presets, skill security auditor, expanded lifecycle hooks, 11 plugin packs, and benchmark tooling.",
   "keywords": [
     "claude",

package/scripts/eject.py

@@ -69,7 +69,11 @@ def main() -> None:
             if dest.exists():
                 shutil.rmtree(dest)
             shutil.copytree(skill, dest)
-            skill_count += 1
+            # Count only real skills. Underscore-prefixed dirs (e.g. `_lib/`)
+            # are shared helpers that must be copied so dependent skills keep
+            # working, but are not skills themselves — matches validate.py.
+            if not skill.name.startswith("_") and (skill / "SKILL.md").is_file():
+                skill_count += 1
     print(f"  Copied: {skill_count} skills")
 
     # -- CLAUDE.md: inline all rules -----------------------------------------