docguard-cli 0.37.0__tar.gz → 0.38.0__tar.gz

{docguard_cli-0.37.0 → docguard_cli-0.38.0}/.agent/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.36.2
+  version: 0.38.0
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.36.2 -->
+<!-- docguard:version: 0.38.0 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.37.0/extensions/spec-kit-docguard → docguard_cli-0.38.0/.agent}/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.37.0
+  version: 0.38.0
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.37.0 -->
+<!-- docguard:version: 0.38.0 -->
 
 # DocGuard Guard Skill
 

{docguard_cli-0.37.0/extensions/spec-kit-docguard → docguard_cli-0.38.0/.agent}/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.37.0
+  version: 0.38.0
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.37.0 -->
+<!-- docguard:version: 0.38.0 -->
 
 # DocGuard Review Skill
 

{docguard_cli-0.37.0/extensions/spec-kit-docguard → docguard_cli-0.38.0/.agent}/skills/docguard-score/SKILL.md

@@ -6,10 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.37.0
+  version: 0.38.0
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.37.0 -->
+<!-- docguard:version: 0.38.0 -->
 
 # DocGuard Score Skill
 

{docguard_cli-0.37.0 → docguard_cli-0.38.0}/.agent/skills/docguard-sync/SKILL.md

@@ -4,10 +4,10 @@ description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-trut
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.36.2
+  version: 0.38.0
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.36.2 -->
+<!-- docguard:version: 0.38.0 -->
 
 # DocGuard Sync Skill
 

{docguard_cli-0.37.0 → docguard_cli-0.38.0}/.docguard-specs.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://raccioly.github.io/docguard/schemas/docguard-specs.schema.json",
-  "schemaVersion": 1,
+  "schemaVersion": 2,
   "specs": [
     {
       "specId": "docguard.document-lifecycle",
@@ -8,7 +8,7 @@
       "reviewed": {
         "lifecycle": {
           "approval": "approved",
-          "delivery": "in_progress",
+          "delivery": "verified",
           "context": "current",
           "retirementReason": null,
           "storage": "working_tree",
@@ -30,7 +30,43 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": null
+          "lastReviewedRevision": "834e0a2299402205f5bdca7a55e353bad71bab28",
+          "outcomes": [
+            {
+              "revision": "834e0a2299402205f5bdca7a55e353bad71bab28",
+              "reason": "Implemented and reviewed R2 lifecycle transactions, reconciliation classifications, qualified evidence gates, active-context regeneration, and Spec Kit completion hooks.",
+              "evidence": [
+                "cli/commands/reconcile.mjs",
+                "cli/commands/retire.mjs",
+                "cli/commands/specs.mjs",
+                "cli/commands/sync.mjs",
+                "cli/docguard.mjs",
+                "cli/scanners/document-lifecycle.mjs",
+                "cli/scanners/lifecycle-context.mjs",
+                "cli/scanners/reconciliation.mjs",
+                "cli/scanners/requirement-evidence.mjs",
+                "cli/scanners/retirement-manifest.mjs",
+                "cli/scanners/spec-registry.mjs",
+                "cli/shared-sync-scope.mjs",
+                "cli/validators/traceability.mjs",
+                "cli/writers/file-transaction.mjs",
+                "cli/writers/spec-outcomes.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/archive.test.mjs",
+                "tests/document-lifecycle.test.mjs",
+                "tests/file-transaction.test.mjs",
+                "tests/hooks-contract.test.mjs",
+                "tests/reconcile.test.mjs",
+                "tests/spec-completion.test.mjs",
+                "tests/spec-registry.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
         }
       },
       "intent": {
@@ -68,7 +104,7 @@
         "artifacts": [
           {
             "path": "specs/006-document-lifecycle/spec.md",
-            "digest": "sha256:aa2c1bf75f10408a08deb6665f35c27468f037c58c630303a89443b97ced1d9e"
+            "digest": "sha256:4874baea0ec2439d9a5f6223eecb10ac53755c1e48c974d5cd42c9915d75e281"
           },
           {
             "path": "specs/006-document-lifecycle/plan.md",
@@ -76,14 +112,135 @@
           },
           {
             "path": "specs/006-document-lifecycle/tasks.md",
-            "digest": "sha256:9bd8203ad8e666f7f71d6302c61ff1cfd1c1e75379da89b84cc790a69aff6a2b"
+            "digest": "sha256:cc9191b7aafd1bbcab99c2d050dafa7d40ccc1b883aeff81ae6cc58aaca4717a"
           }
         ],
         "taskCompletion": {
-          "checked": 14,
+          "checked": 23,
           "total": 23
         },
-        "implementationEvidence": [],
+        "implementationEvidence": [
+          {
+            "requirementId": "FR-002",
+            "file": "cli/scanners/document-lifecycle.mjs",
+            "line": 22
+          },
+          {
+            "requirementId": "FR-007",
+            "file": "cli/scanners/retirement-manifest.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-010",
+            "file": "cli/commands/reconcile.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-010",
+            "file": "cli/commands/sync.mjs",
+            "line": 15
+          },
+          {
+            "requirementId": "FR-010",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-010",
+            "file": "cli/shared-sync-scope.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-011",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-012",
+            "file": "cli/commands/reconcile.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-012",
+            "file": "cli/docguard.mjs",
+            "line": 16
+          },
+          {
+            "requirementId": "FR-012",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 5
+          },
+          {
+            "requirementId": "FR-013",
+            "file": "cli/commands/retire.mjs",
+            "line": 7
+          },
+          {
+            "requirementId": "FR-013",
+            "file": "cli/scanners/requirement-evidence.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-013",
+            "file": "cli/scanners/spec-registry.mjs",
+            "line": 7
+          },
+          {
+            "requirementId": "FR-013",
+            "file": "cli/validators/traceability.mjs",
+            "line": 14
+          },
+          {
+            "requirementId": "FR-013",
+            "file": "cli/writers/file-transaction.mjs",
+            "line": 9
+          },
+          {
+            "requirementId": "FR-014",
+            "file": "cli/scanners/lifecycle-context.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-016",
+            "file": "cli/commands/specs.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-016",
+            "file": "cli/scanners/requirement-evidence.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-016",
+            "file": "cli/scanners/spec-registry.mjs",
+            "line": 8
+          },
+          {
+            "requirementId": "FR-016",
+            "file": "cli/writers/spec-outcomes.mjs",
+            "line": 3
+          },
+          {
+            "requirementId": "FR-017",
+            "file": "cli/commands/specs.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-017",
+            "file": "cli/scanners/lifecycle-context.mjs",
+            "line": 4
+          },
+          {
+            "requirementId": "FR-020",
+            "file": "cli/commands/specs.mjs",
+            "line": 5
+          },
+          {
+            "requirementId": "FR-020",
+            "file": "cli/docguard.mjs",
+            "line": 17
+          }
+        ],
         "testEvidence": [
           {
             "requirementId": "FR-001",
@@ -145,11 +302,31 @@
             "file": "tests/archive.test.mjs",
             "line": 18
           },
+          {
+            "requirementId": "FR-010",
+            "file": "tests/reconcile.test.mjs",
+            "line": 12
+          },
+          {
+            "requirementId": "FR-011",
+            "file": "tests/reconcile.test.mjs",
+            "line": 13
+          },
+          {
+            "requirementId": "FR-012",
+            "file": "tests/reconcile.test.mjs",
+            "line": 14
+          },
           {
             "requirementId": "FR-012",
             "file": "tests/spec-registry.test.mjs",
             "line": 11
           },
+          {
+            "requirementId": "FR-013",
+            "file": "tests/file-transaction.test.mjs",
+            "line": 8
+          },
           {
             "requirementId": "FR-013",
             "file": "tests/spec-registry.test.mjs",
@@ -165,10 +342,35 @@
             "file": "tests/spec-registry.test.mjs",
             "line": 13
           },
+          {
+            "requirementId": "FR-016",
+            "file": "tests/spec-completion.test.mjs",
+            "line": 11
+          },
+          {
+            "requirementId": "FR-017",
+            "file": "tests/spec-completion.test.mjs",
+            "line": 12
+          },
+          {
+            "requirementId": "FR-018",
+            "file": "tests/hooks-contract.test.mjs",
+            "line": 11
+          },
+          {
+            "requirementId": "FR-019",
+            "file": "tests/hooks-contract.test.mjs",
+            "line": 12
+          },
           {
             "requirementId": "FR-020",
             "file": "tests/archive.test.mjs",
-            "line": 22
+            "line": 23
+          },
+          {
+            "requirementId": "FR-020",
+            "file": "tests/spec-completion.test.mjs",
+            "line": 13
           },
           {
             "requirementId": "SC-001",
@@ -190,6 +392,16 @@
             "file": "tests/document-lifecycle.test.mjs",
             "line": 12
           },
+          {
+            "requirementId": "SC-005",
+            "file": "tests/archive.test.mjs",
+            "line": 22
+          },
+          {
+            "requirementId": "SC-006",
+            "file": "tests/reconcile.test.mjs",
+            "line": 15
+          },
           {
             "requirementId": "SC-007",
             "file": "tests/spec-registry.test.mjs",

{docguard_cli-0.37.0 → docguard_cli-0.38.0}/.github/scripts/speckit-submission.py

@@ -24,10 +24,48 @@ Usage: speckit-submission.py (--url|--body) <version> <download_url>
 """
 import sys
 import json
+from pathlib import Path
 from urllib.parse import urlencode, quote
 
 FORM_URL = "https://github.com/github/spec-kit/issues/new"
 TEMPLATE = "extension_submission.yml"
+MANIFEST = Path(__file__).resolve().parents[2] / "extensions/spec-kit-docguard/extension.yml"
+DESCRIPTION = (
+    "Documentation integrity for AI-assisted repositories: lifecycle registry, "
+    "drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub "
+    "Actions, and Spec Kit hooks."
+)
+TAGS = ["documentation", "validation", "traceability", "ai-agents", "spec-kit"]
+
+
+def manifest_inventory(path: Path = MANIFEST):
+    """Read command and hook names from the extension manifest without PyYAML."""
+    commands, hooks = [], []
+    section = subsection = None
+    for raw in path.read_text(encoding="utf-8").splitlines():
+        line = raw.split("#", 1)[0].rstrip()
+        if not line.strip():
+            continue
+        content = line.lstrip()
+        indent = len(line) - len(content)
+
+        if indent == 0:
+            section = content[:-1] if content.endswith(":") else None
+            subsection = None
+            continue
+
+        if section == "provides":
+            if indent == 2:
+                subsection = content[:-1] if content.endswith(":") else None
+            elif (subsection == "commands" and indent == 4
+                  and content.startswith("- name:")):
+                commands.append(content.split(":", 1)[1].strip().strip("\"'"))
+        elif section == "hooks" and indent == 2 and content.endswith(":"):
+            hooks.append(content[:-1])
+
+    if not commands or not hooks:
+        raise RuntimeError(f"Could not read commands and hooks from {path}")
+    return commands, hooks
 
 
 def changelog_section(version: str) -> str:
@@ -56,19 +94,13 @@ def changelog_section(version: str) -> str:
 
 
 def build(version: str, download_url: str):
+    commands, hooks = manifest_inventory()
+    command_count, hook_count = len(commands), len(hooks)
     catalog_entry = {
         "docguard": {
             "name": "DocGuard — CDD Enforcement",
             "id": "docguard",
-            "description": (
-                "A documentation-integrity engine with an MCP server, "
-                "SARIF/JUnit output, and a deterministic zero-LLM core. "
-                "Validates, scores, and traces documentation against code — "
-                "27 validators, stable finding codes, adoption baseline for "
-                "legacy repos, compliance-evidence reports, GitHub Action "
-                "with PR annotations, spec-kit hooks. Pure Node.js, one "
-                "pinned dep."
-            ),
+            "description": DESCRIPTION,
             "author": "raccioly",
             "version": version,
             "download_url": download_url,
@@ -88,11 +120,8 @@ def build(version: str, download_url: str):
                     {"name": "node", "version": ">=18.0.0", "required": True}
                 ],
             },
-            "provides": {"commands": 6, "hooks": 3},
-            "tags": [
-                "documentation", "validation", "quality", "cdd",
-                "traceability", "ai-agents", "enforcement", "spec-kit",
-            ],
+            "provides": {"commands": command_count, "hooks": hook_count},
+            "tags": TAGS,
             "verified": False,
             "downloads": 0,
             "stars": 0,
@@ -120,17 +149,16 @@ def build(version: str, download_url: str):
          "- node (>=18.0.0) - required\n"
          "- npx - required\n"
          "- specify - optional (auto-initializes the SDD workflow during docguard init)"),
-        ("commands-count", "Number of Commands", "6"),
-        ("hooks-count", "Number of Hooks (optional)", "3"),
-        ("tags", "Tags",
-         "documentation, validation, quality, cdd, traceability, ai-agents, enforcement, spec-kit"),
+        ("commands-count", "Number of Commands", str(command_count)),
+        ("hooks-count", "Number of Hooks (optional)", str(hook_count)),
+        ("tags", "Tags", ", ".join(TAGS)),
         ("features", "Key Features",
          "- Configurable quality gate with severity triage and a remediation plan\n"
          "- AI-driven documentation repair with codebase research and validation loops\n"
          "- Cross-document semantic consistency analysis (read-only review)\n"
          "- CDD maturity score with an ROI-based improvement roadmap\n"
          "- Reverse-engineers canonical docs from an existing codebase\n"
-         "- spec-kit workflow hooks (after_implement, before_tasks, after_tasks)"),
+         f"- spec-kit workflow hooks ({', '.join(hooks)})"),
         ("testing", "Testing Checklist", None),
         ("requirements", "Submission Requirements", None),
         ("testing-details", "Testing Details",
@@ -139,8 +167,8 @@ def build(version: str, download_url: str):
          f"specify extension add docguard --from {download_url}\n```\n\n"
          "**Scenarios to verify for this release:**\n"
          "1. Extension installs from the release ZIP without manifest validation errors.\n"
-         "2. All six `speckit.docguard.*` commands resolve and run.\n"
-         "3. The three workflow hooks register against spec-kit's lifecycle."),
+         f"2. All {command_count} declared `speckit.docguard.*` commands resolve and run.\n"
+         f"3. All {hook_count} declared workflow hooks register against spec-kit's lifecycle."),
         ("example-usage", "Example Usage",
          "```bash\n"
          "# Install the extension\n"

docguard_cli-0.38.0/.github/scripts/sync-release-version.mjs

@@ -0,0 +1,150 @@
+#!/usr/bin/env node
+
+/**
+ * Synchronize every active release surface with package.json.
+ *
+ * The allowlist is deliberate: release metadata and copyable install templates
+ * must move together, while historical references in changelogs, roadmaps, and
+ * completed specifications must remain untouched.
+ */
+
+import { existsSync, readFileSync, readdirSync, unlinkSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { safeWrite } from '../../cli/writers/generate-io.mjs';
+
+const SCRIPT_PATH = fileURLToPath(import.meta.url);
+const STABLE_VERSION = /^\d+\.\d+\.\d+$/;
+
+function replaceRequired(content, pattern, replacement, label, expected = 1) {
+  let count = 0;
+  const next = content.replace(pattern, (...args) => {
+    count++;
+    return typeof replacement === 'function' ? replacement(...args) : replacement;
+  });
+  if (count !== expected) {
+    throw new Error(`${label}: expected ${expected} version field${expected === 1 ? '' : 's'}, found ${count}`);
+  }
+  return next;
+}
+
+function stageText(staged, root, relPath, transform) {
+  const fullPath = resolve(root, relPath);
+  if (!existsSync(fullPath)) throw new Error(`${relPath}: required release surface is missing`);
+  const current = readFileSync(fullPath, 'utf8');
+  staged.set(fullPath, transform(current));
+}
+
+function stageJson(staged, root, relPath, transform) {
+  stageText(staged, root, relPath, content => {
+    let value;
+    try { value = JSON.parse(content); } catch (error) {
+      throw new Error(`${relPath}: invalid JSON: ${error.message}`);
+    }
+    transform(value);
+    return `${JSON.stringify(value, null, 2)}\n`;
+  });
+}
+
+function writeWithoutReleaseBackup(filePath, content) {
+  const previous = readFileSync(filePath, 'utf8');
+  if (previous === content) return false;
+  safeWrite(filePath, content);
+  // Git is the durable backup for these tracked release surfaces. Remove the
+  // temporary .bak only after safeWrite succeeds so it cannot enter a release.
+  const backup = `${filePath}.bak`;
+  if (existsSync(backup)) unlinkSync(backup);
+  return true;
+}
+
+export function syncReleaseVersion(root = process.cwd()) {
+  const packagePath = resolve(root, 'package.json');
+  const pkg = JSON.parse(readFileSync(packagePath, 'utf8'));
+  const version = pkg.version;
+  if (!STABLE_VERSION.test(version || '')) {
+    throw new Error(`package.json: expected a stable x.y.z version, got ${JSON.stringify(version)}`);
+  }
+
+  const staged = new Map();
+
+  stageText(staged, root, 'pyproject.toml', content => replaceRequired(
+    content,
+    /(\[project\][\s\S]*?^version\s*=\s*")[^"\n]+(")/m,
+    (_match, before, after) => `${before}${version}${after}`,
+    'pyproject.toml [project].version',
+  ));
+
+  stageJson(staged, root, 'server.json', server => {
+    if (!Array.isArray(server.packages)) throw new Error('server.json: packages must be an array');
+    const npmPackages = server.packages.filter(item => item?.registryType === 'npm' && item?.identifier === pkg.name);
+    if (npmPackages.length !== 1) {
+      throw new Error(`server.json: expected one npm package for ${pkg.name}, found ${npmPackages.length}`);
+    }
+    server.version = version;
+    npmPackages[0].version = version;
+  });
+
+  stageText(staged, root, 'extensions/spec-kit-docguard/extension.yml', content => replaceRequired(
+    content,
+    /^  version:\s*["'][^"'\n]+["']/m,
+    `  version: "${version}"`,
+    'extensions/spec-kit-docguard/extension.yml extension.version',
+  ));
+
+  for (const relPath of [
+    'templates/ci/github-actions.yml',
+    'extensions/spec-kit-docguard/templates/github-workflows/docguard-guard.yml',
+  ]) {
+    stageText(staged, root, relPath, content => replaceRequired(
+      content,
+      /docguard-cli@\d+\.\d+\.\d+/g,
+      `docguard-cli@${version}`,
+      `${relPath} DocGuard CLI pin`,
+    ));
+  }
+
+  const skillsRoot = resolve(root, 'extensions/spec-kit-docguard/skills');
+  if (!existsSync(skillsRoot)) throw new Error('extensions/spec-kit-docguard/skills: required release surface is missing');
+  const skillFiles = readdirSync(skillsRoot, { withFileTypes: true })
+    .filter(entry => entry.isDirectory())
+    .map(entry => join(skillsRoot, entry.name, 'SKILL.md'))
+    .filter(existsSync)
+    .sort();
+  if (skillFiles.length === 0) throw new Error('extensions/spec-kit-docguard/skills: no SKILL.md files found');
+
+  for (const fullPath of skillFiles) {
+    const relPath = relative(root, fullPath);
+    const current = readFileSync(fullPath, 'utf8');
+    let next = replaceRequired(
+      current,
+      /^  version:\s*\d+\.\d+\.\d+$/m,
+      `  version: ${version}`,
+      `${relPath} metadata.version`,
+    );
+    next = replaceRequired(
+      next,
+      /<!-- docguard:version:\s*\d+\.\d+\.\d+ -->/g,
+      `<!-- docguard:version: ${version} -->`,
+      `${relPath} docguard version marker`,
+    );
+    staged.set(fullPath, next);
+  }
+
+  // All parsing and cardinality checks finish before the first write. A missing
+  // or duplicated field therefore leaves every release surface untouched.
+  const changed = [];
+  for (const [filePath, content] of staged) {
+    if (writeWithoutReleaseBackup(filePath, content)) changed.push(relative(root, filePath));
+  }
+  return { version, changed };
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === SCRIPT_PATH) {
+  try {
+    const result = syncReleaseVersion();
+    console.log(`Synchronized ${result.changed.length} release surfaces to v${result.version}.`);
+  } catch (error) {
+    console.error(`Release version sync failed: ${error.message}`);
+    process.exitCode = 1;
+  }
+}

{docguard_cli-0.37.0 → docguard_cli-0.38.0}/.github/workflows/scheduled-release.yml

@@ -111,9 +111,13 @@ jobs:
           awk '/^## \[Unreleased\]/ { print; print ""; while ((getline line < "/tmp/entry.md") > 0) print line; next } { print }' \
             CHANGELOG.md > /tmp/CHANGELOG.new && mv /tmp/CHANGELOG.new CHANGELOG.md
 
-          # Keep the spec-kit extension metadata in lockstep (same thing
-          # `docguard fix --write` does locally before a manual release).
-          node cli/docguard.mjs fix --write || true
+          # Synchronize every active publication surface from package.json.
+          # This is fail-closed: missing or duplicated fields stop the release
+          # before any release metadata is written.
+          node .github/scripts/sync-release-version.mjs
+          # The extension skills are authoritative. Refresh their checked-in
+          # `.agent` copies before the parity test and release commit.
+          node --input-type=module -e "import { ensureSkills } from './cli/ensure-skills.mjs'; ensureSkills(process.cwd(), { format: 'json', noSpecKit: true });"
 
           echo "NEW_VERSION=$NEW" >> "$GITHUB_ENV"
 
@@ -148,7 +152,7 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
           git checkout -b "$BRANCH"
-          git add package.json package-lock.json CHANGELOG.md extensions/ .agent/ 2>/dev/null || true
+          git add package.json package-lock.json pyproject.toml server.json CHANGELOG.md templates/ extensions/ .agent/ 2>/dev/null || true
           git commit -m "release: v${NEW_VERSION} — automated weekly batch
 
           Cut by .github/workflows/scheduled-release.yml. Publishing itself is