Leogriel v1.0.0-beta.2
Pre-release
Pre-release
·
19 commits
to main
since this release
Leogriel beta
- Published the first reproducible Leogriel-branded prerelease across all twelve coordinated
@leogriel/*packages with the npmnextdist-tag. - Carries forward the complete rebrand from skillctl: the
leogrielcommand,@leogriel/*package scope,.leogriel/state paths, repository and documentation URLs, first-party skill, and woven-thread visual identity. - Preserves
agent-skills.json,agent-skills.lock, lock schema1.0, config schema1, the canonical integrity algorithm, and read compatibility for documented legacy skillctl state.
Capabilities included
- Includes discovery and provider-aware search, immutable GitHub/npm/skills.sh resolution,
info, deterministicoutdatedand atomicupdateplanning. - Includes reconciliable
doctor/sync, explicit unmanaged-target replacement with verified backups, full backup lifecycle commands, plugin inspection and lifecycle management, offline audit with SARIF, and shell completions. - Includes the shared strict
SKILL.mdparser, field-aware streaming secret redaction, opt-in versioned artifacts, and advanced audit categories with remediation and confidence. - Includes experimental paired behavioral testing through
@leogriel/testing, with an isolated Codex runner, deterministic assertions and verdicts, default-deny networking, API-key or explicit ChatGPT-profile authentication, and opt-in live smoke diagnostics.
Fixed
- Clean every package
distdirectory and remove TypeScript incremental build metadata before release builds, preventing stale Windows output from leaking into npm tarballs. - Rebuild packages topologically from a clean state before
npm pack, then install and smoke-test all twelve generated archives. - Mark semantic prerelease versions as GitHub prereleases instead of stable releases.
- Keep release publication idempotent: verify existing npm SRI or canonical archive content, run registry smoke tests on Windows, macOS, and Linux, and create the tag and GitHub prerelease only after every gate succeeds.
Publishing and migration
- Uses npm Trusted Publishing for all twelve packages from
.github/workflows/release.ymlin thenpm-productionenvironment, without a long-livedNPM_TOKEN; npm generates provenance automatically. - New installations use
npm install -g @leogriel/cli@1.0.0-beta.2. Existing users should uninstall@skillctl/cliand install@leogriel/cli. - The historical
@skillctl/*packages remain separate and receive no new code. They can be deprecated with a migration notice after this prerelease passes registry verification.