standdown 0.2.0 → 0.2.2

package/README.md

@@ -3,6 +3,7 @@
 </p>
 
 <p align="center">
+  <img src="https://img.shields.io/badge/status-alpha-E5484D?labelColor=1C1917" alt="project status: alpha">
   <a href="https://www.npmjs.com/package/standdown"><img src="https://img.shields.io/npm/v/standdown?color=F5A623&label=npm&labelColor=1C1917" alt="npm version"></a>
   <a href="https://github.com/dupe-com/standdown/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/dupe-com/standdown/ci.yml?branch=main&label=CI&labelColor=1C1917" alt="CI status"></a>
   <img src="https://img.shields.io/badge/dependencies-0-2ea043?labelColor=1C1917" alt="zero runtime dependencies">
@@ -11,6 +12,14 @@
   <a href="https://affiliatecoc.org"><img src="https://img.shields.io/badge/aligned-Affiliate%20CoC-F5A623?labelColor=1C1917" alt="aligned with the Affiliate Code of Conduct"></a>
 </p>
 
+> [!WARNING]
+> **Alpha — expect bugs and breaking changes.** standdown is pre-1.0 and under
+> active development: the API may shift between minor versions and edge cases are
+> still being found. Because it makes revenue-affecting decisions, pin your
+> version, verify it against your own integration with the
+> [conformance grader](./audit), and please
+> [report anything that misbehaves](https://github.com/dupe-com/standdown/issues).
+
 > **Your extension shouldn't steal the sale.** `standdown` detects existing
 > affiliate attribution, suppresses competing activation, and proves the
 > decision was made locally — never on a server.
@@ -99,7 +108,48 @@ npm install standdown
 ```
 
 `standdown` is published to npm and versioned with semver from `0.1.0`. Releases
-are cut by a human; the repo does not publish from CI.
+are cut by a human with `npm run release` (see [RELEASING.md](./RELEASING.md));
+the repo does not publish from CI.
+
+## Set it up with an AI agent
+
+The fastest path: hand the whole integration to your coding agent. Copy this
+prompt into Claude Code, Cursor, Copilot, etc. — pointed at your extension's repo:
+
+```text
+Integrate the `standdown` npm library into this browser extension so it stops
+hijacking affiliate attribution when a partner already owns the sale. Follow the
+official guide at https://raw.githubusercontent.com/dupe-com/standdown/main/AGENTS.md.
+
+Do the full loop:
+1. `npm install standdown`.
+2. Pick the adapter: `standdown/webext` for a Chromium MV3 extension, or
+   `standdown/content` for Safari / content-script-only.
+3. Find every place this extension fires affiliate attribution (redirects, link
+   rewrites, cookie writes) and gate each behind the stand-down decision — do
+   nothing when `decision.standDown` is true.
+4. Bundle per examples/mv3-extension (subpath imports don't resolve raw in
+   extension contexts).
+5. Build the unpacked extension, then grade it:
+   git clone https://github.com/dupe-com/standdown && cd standdown/audit && \
+     npm install && npx tsx grade/grade.ts <path-to-unpacked-extension>
+   Report the letter grade and fix anything below A.
+
+Preserve the invariants: decisions stay local and synchronous (no network in the
+decision path), no user identity in signals, and fail toward standing down.
+```
+
+**Already have homegrown stand-down logic?** Use the brownfield prompt in
+[`ADOPTING.md`](./ADOPTING.md) instead — it migrates your existing decision path
+onto the library provably, without risking revenue in the switch.
+
+**Claude Code users** can skip the prompt: this repo ships two skills in
+[`.claude/skills/standdown`](./.claude/skills/standdown) (greenfield install) and
+[`skills/adopt-standdown`](./skills/adopt-standdown) (brownfield migration). Copy
+the one you want into your project's `.claude/skills/` (or `~/.claude/skills/`)
+and run `/standdown` (or `/adopt-standdown`). Agents that read
+[`AGENTS.md`](./AGENTS.md) or
+[`llms.txt`](./llms.txt) get the same playbook automatically.
 
 ## Webext Quickstart
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "standdown",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Affiliate stand-down, done right, for browser extensions.",
   "author": "Dupe (https://dupe.com)",
   "repository": {
@@ -63,7 +63,8 @@
     "lint": "biome check .",
     "build": "tsup",
     "test": "vitest run",
-    "policies-cite-check": "node scripts/policies-cite-check.mjs"
+    "policies-cite-check": "node scripts/policies-cite-check.mjs",
+    "release": "bash scripts/release.sh"
   },
   "dependencies": {},
   "devDependencies": {