audit-tools 0.39.9 → 0.39.10

package/README.md

@@ -201,7 +201,7 @@ Add `--root <repo>` when running from outside the target repository.
 
 ## Develop
 
-TypeScript, Node 20+. From the repo root:
+TypeScript, Node 22+. From the repo root:
 
 ```bash
 npm install     # always run first in a fresh clone/worktree

package/docs/audit-pkg/operator-guide.md

@@ -190,13 +190,15 @@ ranking, cooldowns, and failover belong to the external broker. A machine-level
 ```json
 {
   "sources": [
-    { "id": "relay-fast", "transport": "openai-compatible", "endpoint": "http://127.0.0.1:8791/v1", "model": "pool/fast", "no_auth": true, "worker_kind": "single_shot", "capability_rank": 2 },
-    { "id": "relay-coding", "transport": "openai-compatible", "endpoint": "http://127.0.0.1:8791/v1", "model": "pool/coding", "no_auth": true, "worker_kind": "single_shot", "capability_rank": 1 },
-    { "id": "relay-reasoning", "transport": "openai-compatible", "endpoint": "http://127.0.0.1:8791/v1", "model": "pool/reasoning", "no_auth": true, "worker_kind": "single_shot", "capability_rank": 0 }
+    { "id": "relay-primary", "transport": "openai-compatible", "endpoint": "http://127.0.0.1:8791/v1", "model": "pool/<name>", "no_auth": true, "worker_kind": "single_shot", "capability_rank": 0 }
   ]
 }
 ```
 
+Declare one entry per pool intent you own, ranking them with `capability_rank`.
+`pool/<name>` is a placeholder: the pool names belong to your relay, so ask it for
+its live set rather than copying one from any written list, this guide included.
+
 The relay owns the concrete model lists behind those pool names. Audit-tools still
 enforces packet size/context fit, capability floors, quota/headroom, concurrency,
 result validation, and the local self-spawn guard. No provider-order input or

package/docs/audit-pkg/release.md

@@ -188,8 +188,8 @@ Full maintainer flow:
 npm run release:patch:publish
 ```
 
-That command checks the worktree, runs a fast local typecheck gate (`npm run check` — not the full
-`verify:release` suite, which already ran via CI/the `/ship` preflight), bumps the version, commits,
+That command checks the worktree, runs the full local pre-tag gate (`npm run verify:checks` — every
+non-test check, so a tag can never be cut over a red one), bumps the version, commits,
 tags, pushes `main` and the tag, creates the GitHub Release, waits for `publish-package.yml`, and
 confirms the new npm version resolves.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.39.9",
+  "version": "0.39.10",
   "private": false,
   "license": "ISC",
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",