agentxchain 2.19.0 → 2.20.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentxchain",
-  "version": "2.19.0",
+  "version": "2.20.0",
   "description": "CLI for AgentXchain — governed multi-agent software delivery",
   "type": "module",
   "bin": {
@@ -28,6 +28,7 @@
     "preflight:release:strict": "bash scripts/release-preflight.sh --strict",
     "postflight:release": "bash scripts/release-postflight.sh",
     "postflight:downstream": "bash scripts/release-downstream-truth.sh",
+    "bump:release": "bash scripts/release-bump.sh",
     "sync:homebrew": "bash scripts/sync-homebrew.sh",
     "build:macos": "bun build bin/agentxchain.js --compile --target=bun-darwin-arm64 --outfile=dist/agentxchain-macos-arm64",
     "build:linux": "bun build bin/agentxchain.js --compile --target=bun-linux-x64 --outfile=dist/agentxchain-linux-x64",

package/scripts/release-bump.sh

@@ -0,0 +1,126 @@
+#!/usr/bin/env bash
+# Release identity creation — replaces raw `npm version <semver>`.
+# Creates version bump commit + annotated tag with fail-closed verification.
+# Usage: bash scripts/release-bump.sh --target-version <semver>
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+CLI_DIR="${SCRIPT_DIR}/.."
+cd "$CLI_DIR"
+
+TARGET_VERSION=""
+
+usage() {
+  echo "Usage: bash scripts/release-bump.sh --target-version <semver>" >&2
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --target-version)
+      if [[ -z "${2:-}" ]]; then
+        echo "Error: --target-version requires a semver argument" >&2
+        usage
+        exit 1
+      fi
+      if ! [[ "$2" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+        echo "Error: invalid semver: $2" >&2
+        usage
+        exit 1
+      fi
+      TARGET_VERSION="$2"
+      shift 2
+      ;;
+    *)
+      usage
+      exit 1
+      ;;
+  esac
+done
+
+if [[ -z "$TARGET_VERSION" ]]; then
+  echo "Error: --target-version is required" >&2
+  usage
+  exit 1
+fi
+
+echo "AgentXchain Release Identity: ${TARGET_VERSION}"
+echo "============================================="
+
+# 1. Assert clean tree
+echo "[1/7] Checking git tree cleanliness..."
+if ! git diff --quiet HEAD 2>/dev/null || [ -n "$(git ls-files --others --exclude-standard 2>/dev/null)" ]; then
+  echo "FAIL: Working tree is not clean. Commit or stash changes before creating release identity." >&2
+  exit 1
+fi
+echo "  OK: tree is clean"
+
+# 2. Assert not already at target version
+echo "[2/7] Checking current version..."
+CURRENT_VERSION=$(node -e "console.log(JSON.parse(require('fs').readFileSync('package.json','utf8')).version)")
+if [[ "$CURRENT_VERSION" == "$TARGET_VERSION" ]]; then
+  echo "FAIL: package.json is already at ${TARGET_VERSION}. Cannot double-bump." >&2
+  exit 1
+fi
+echo "  OK: current version is ${CURRENT_VERSION}, bumping to ${TARGET_VERSION}"
+
+# 3. Assert tag does not already exist
+echo "[3/7] Checking for existing tag..."
+if git rev-parse "v${TARGET_VERSION}" >/dev/null 2>&1; then
+  echo "FAIL: tag v${TARGET_VERSION} already exists. Delete it first or choose a different version." >&2
+  exit 1
+fi
+echo "  OK: tag v${TARGET_VERSION} does not exist"
+
+# 4. Update version files (no git operations)
+echo "[4/7] Updating version files..."
+npm version "$TARGET_VERSION" --no-git-tag-version
+echo "  OK: package.json updated to ${TARGET_VERSION}"
+
+# 5. Stage version files
+echo "[5/7] Staging version files..."
+git add package.json
+if [[ -f package-lock.json ]]; then
+  git add package-lock.json
+fi
+echo "  OK: version files staged"
+
+# 6. Create release commit
+echo "[6/7] Creating release commit..."
+git commit -m "${TARGET_VERSION}"
+RELEASE_SHA=$(git rev-parse HEAD)
+COMMIT_MSG=$(git log -1 --format=%s)
+if [[ "$COMMIT_MSG" != "$TARGET_VERSION" ]]; then
+  echo "FAIL: commit message is '${COMMIT_MSG}', expected '${TARGET_VERSION}'" >&2
+  exit 1
+fi
+echo "  OK: commit ${RELEASE_SHA:0:7} with message '${TARGET_VERSION}'"
+
+# 7. Create annotated tag
+echo "[7/7] Creating annotated tag..."
+git tag -a "v${TARGET_VERSION}" -m "v${TARGET_VERSION}"
+TAG_SHA=$(git rev-parse "v${TARGET_VERSION}")
+if [[ -z "$TAG_SHA" ]]; then
+  echo "FAIL: tag v${TARGET_VERSION} was not created" >&2
+  exit 1
+fi
+TAG_TYPE=$(git cat-file -t "v${TARGET_VERSION}")
+if [[ "$TAG_TYPE" != "tag" ]]; then
+  echo "FAIL: v${TARGET_VERSION} is ${TAG_TYPE}, expected annotated tag object" >&2
+  exit 1
+fi
+TAG_TARGET=$(git rev-parse "v${TARGET_VERSION}^{}")
+if [[ "$TAG_TARGET" != "$RELEASE_SHA" ]]; then
+  echo "FAIL: tag v${TARGET_VERSION} resolves to ${TAG_TARGET:0:7}, expected ${RELEASE_SHA:0:7}" >&2
+  exit 1
+fi
+echo "  OK: annotated tag v${TARGET_VERSION} at ${TAG_SHA:0:7} -> ${TAG_TARGET:0:7}"
+
+echo ""
+echo "============================================="
+echo "Release identity created successfully."
+echo "  Version: ${TARGET_VERSION}"
+echo "  Commit:  ${RELEASE_SHA:0:7}"
+echo "  Tag:     v${TARGET_VERSION}"
+echo ""
+echo "Next: npm run preflight:release:strict -- --target-version ${TARGET_VERSION}"
+echo "Then: git push origin main --follow-tags"