v0.1.0-alpha.3

GoLive 0.1.0-alpha.3 — an alpha release of the skill and the bundled zero-dependency runtime.

What changed since 0.1.0-alpha.2

• Account isolation in the authentication journey. auth.isolation: true (with auth.identityPath and auth.isolationPath) seeds a second real test account, and the auth-isolation check signs in as both and reads the app's own routes: each account must see only its own user id and rows, a cross-account read fails critically, and a refused or undeclared route skips with the app-code task named. Implemented and mock-covered; its live run comes separately.
• The opt-in auth:smtp step. With auth.smtp: resend, the auth project's custom SMTP is written through an approved plan — Resend's host and port, the sender the app already uses, and a password taken from a sending key golive issued — and auth-policy then reports custom SMTP via Resend instead of warning about the built-in mailer. The password is write-only, so the read-back confirms the settings and a real auth email remains the only full proof. Implemented and mock-covered, not live-validated.
• Preview promotion and rollback. release.promote: true releases by promotion (promote:production re-points production at the preview deployment golive deployed and recorded), and release.rollback: true re-points production at an earlier deployment golive itself recorded. Both work on a host that can prove what production serves; a host that cannot is refused with a warning rather than guessed at.
• Auth-session evidence fix. The probe names the tables it read, and a refused protected path is corroborated against the public root, so an app's own 401 is no longer confused with an edge one.
• Release-gate dependency fix. release:check declares preview:deploy as its prerequisite and is the last step of a cut plan, so what it gates is the promotion — not a production deploy the plan emitted before it.

Install

Skills CLI (GitHub, recommended — works without npm):

npx skills add https://github.com/mikehasa/golive-skill --skill golive --global

npm (same bundle, plus the standalone installer and the terminal CLI):

npx golive@alpha install --agent codex

Verify either copy with node <installed-skill>/scripts/golive.mjs version --json; this release reports version 0.1.0-alpha.3, ref v0.1.0-alpha.3 and bundle digest 8dadea83b8f79576205751980a4a46940ffb5c9966f93dec5a8d9c736c5b3359.

The attached tarball is the artifact published to npm as golive@0.1.0-alpha.3 (sha1 491ba203d555a8be80af852b8560270a7c671162).