v15.0.0 "AAS Core: Local Composition and Reviewable Plans"

[15.0.0] - 2026-07-18 - "AAS Core: Local Composition and Reviewable Plans"

AAS Core becomes the primary product: a local, deterministic engine shared by the aas CLI and read-only aas-mcp, taking coding agents from an explicit project profile to an explainable recommendation, aas-stack.json, validation, and immutable plan preview before any target change.

Added

• Added a repository-canonical antigravity-maintainer-batch-release skill so external clones can follow the mandatory protected maintainer workflow without relying on a machine-local copy.
• Added a public AAS Core guide covering the local agent-first MCP flow, aas-stack.json, CLI validation and immutable plan preview, Workbench review, privacy boundaries, and the current preview qualification.

Changed

• Made the OSS Maintainer bundle self-contained, made the Git pushing helper portable outside this repository, and removed dead maintenance-skill references.
• Aligned secondary user guides, hosted discovery copy, Workbench verification labels, and an ImageGen-produced social card with the AAS Core product hierarchy while preserving direct-distribution, contributor, governance, and historical content.
• Clarified the first-screen AAS Core narrative with one primary product, an explicit project-profile trust boundary, a single Core CTA, and durable generator guards that keep future metadata syncs from restoring the legacy library-first headline.
• Reduced the Core preview workflow to one packed Linux/Node LTS smoke path plus Workbench review, while retaining release-time validation for publication.
• Recentered the README, user onboarding, host guides, package metadata, and hosted catalog narrative on AAS Core while preserving contributor, catalog, plugin, bundle, workflow, compatibility, community, and source-credit content.
• Expanded the curated hosted sitemap from 42 to 180 deterministic skill routes and added crawlable static home/topic fallbacks so search engines can discover useful catalog hubs without mass-indexing the full library.
• Enriched the four search-intent landing pages with real recommended skills, stronger internal links, and matching ItemList structured data while preserving canonical trailing-slash identities.
• Replaced the marketing-only homepage heading with a descriptive AI-agent-skills heading while retaining the existing slogan as supporting copy.

Fixed

• Fixed invalid aas stack validate manifests so the CLI returns the documented structured error and non-zero exit status.
• Corrected the AAS Core release boundary, Workbench artifact-review flow, localized and search-facing narrative, and npm packaging assertions without changing contributor, governance, community, or historical sections.
• Removed the retired certified-v1 verifier corpus, six-job harnesses, tuning runner, paused optimization workflows, heuristic local reviewer, lexical risk inference, and quality-score merge regressions. Objective validation, reference, security, provenance, Tessl-or-exact-head semantic review, and protected canonical-sync gates remain.
• Made the future AAS Core npm onboarding release-safe by linking the published README to the canonical Core guide and deriving the plan runtime version from the manifest catalog identity instead of hardcoding a release number.
• Added the current Bing Webmaster verification identity and updated the legacy Pages redirect generator contract to cover the expanded 187-route sitemap.
• Expanded the legacy Pages bridge to every one of the 1,968 current catalog skills plus seven structural routes, while keeping crawler discovery limited to the curated 187-route sitemap and making migration-readiness checks enforce the same exact catalog coverage.
• Corrected public Workbench copy that implied browser-side install-command generation; Workbench reviews user-supplied Core stack and plan artifacts without filesystem access or installation.

Validation

• Verified the published 15.0.0-rc.3 package end to end in a fresh real Codex client: official MCP configuration, native search_skills, get_skill, recommend_stack, and inspect_stack calls, a valid agent-proposed aas-stack.json, packaged CLI validation, and immutable read-only plan preview without apply or recovery.
• Passed repository validation, reference and documentation-security checks, AAS Core tests, web-app coverage and build, package-content checks, protected CI, CodeQL, Dependency Review, Snyk, Socket, and npm publication verification.