publish

publish is a command for Cursor from QuickerHub/quicker-rpc. It costs 0 tokens per session (2,012 once invoked), scanned A, original, MIT.

A release command for publishing QuickerRpc through a GitHub Release and Quicker actions.

In plain words
What is it for?
Use it to inspect changes, update the version, write a changelog, create a tag, and run the release build.
Why use it?
It enforces increasing version numbers, checks the repository state, and prepares release notes so published versions do not move backwards.

Command for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/quickerhub/quicker-rpc/publish
Clone the repo
git clone --depth 1 https://github.com/QuickerHub/quicker-rpc

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for publish

README.md
[![agentmods](https://agentmods.dev/badge/commands/quickerhub/quicker-rpc/publish.svg)](https://agentmods.dev/commands/quickerhub/quicker-rpc/publish)
Your own site
<a href="https://agentmods.dev/commands/quickerhub/quicker-rpc/publish"><img src="https://agentmods.dev/badge/commands/quickerhub/quicker-rpc/publish.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,012 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.02012
Opus 5 $0.00000 $0.01006
Sonnet 5 $0.00000 $0.00402
Haiku 4.5 $0.00000 $0.00201

Measured 5d ago against content hash 3a8329ce8b1c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

publish scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/commands/publish.md · 125 lines

How it starts

The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.

quicker-rpc 公开发布(GitHub Release + Quicker 动作)

quicker-rpc 仓库根目录 执行。先 Read skill:.cursor/skills/quicker-rpc-publish/SKILL.md.cursor/skills/quicker-qkbuild-version-publish/SKILL.md第三段 +1、版本只增不减)。

版本号(必守)

  • version.jsonQuickerRpc 只能向前递增,禁止减小或回退(含 --version 显式指定)。
  • 新一次公开发布:在已有 tag / 已发布版本之上 严格更大(通常 第三段 +1、第四段 → 0)。
  • 同版本重传(仅阶段三):build.ps1 -Publish -NoVersion 允许与 baseline 相等;仍 禁止更小
  • 脚本会校验:Publish-GitHubRelease.ps1build.ps1 -Publish(见 publish/qkrpc-publish-lib.ps1Assert-QuickerRpcVersionMonotonic)。

阶段一:前置

  1. git status、当前分支;工作区应已提交(Release 会打 tag 到 HEAD)。
  2. Read version.json → 记录 QuickerRpc 四段版本;tag 取前三段(如 0.3.11.0v0.3.11)。
  3. 对照 最新 git tagorigin/main 上 version.json:新版本必须 大于 历史最大值;再 第三段 +1、第四段 → 0 bump 并 commit(禁止仅 revision +1 就当正式包发布;禁止把版本改小)。见 quicker-qkbuild-version-publish
  4. 浏览 git log(自上一 tag 或近几次 commit),撰写 changelog 写入 publish/changelogs/vX.Y.Z.mdcommit(CI 从 tag 指向的 commit 读取此文件)。
  5. (可选)单独阻塞预检:pwsh -NoProfile -File ./publish/Test-QuickerAgentReleaseBuild.ps1block_until_ms600000)。默认不必先跑——发布脚本会与 CI 并行启动预检。

Changelog 建议结构

v0.3.11

CLI
- ...

安装
- ...

插件 / Quicker
- ...

阶段二:GitHub Release(并行预检 + tag → CI)

pwsh -NoProfile -File ./publish/Publish-GitHubRelease.ps1 -WaitForCi
# 修复后重发:
pwsh -NoProfile -File ./publish/Publish-GitHubRelease.ps1 -WaitForCi -ForceRetag

默认:后台本地 Electron 预检 + 立即校验 changelog 并 push tag(与 CI 并行)。优先看 %TEMP%\qkrpc-preflight-vX.Y.Z.log 修错;CI 红字常与本地相同,可边修边忽略。旧顺序(先本地通过再打 tag):-PreflightBeforeTag

CI 仅 Release 上传失败(build 已成功):不必新 tag;GitHub Actions → Run workflowpipeline=release-only,填 artifact_run_id。NSIS/编译失败需 -ForceRetag 全量重编。详见 publish/release-cli-ci.md

block_until_ms ≥ **600000-WaitForCi` 含本地 Electron 预检 + CI Inno + 编译)。

参数 用途
-WaitForCi push tag 后 gh run watch 直到 workflow 成功
-LocalBuild 本地构建并 gh release upload(需 Inno Setup;CI 不可用时)
-ChangelogFile 覆盖默认 publish/changelogs/vX.Y.Z.md
-AllowEmptyChangelog 跳过 changelog 校验(不推荐)
-SkipPreflight 不启动本地 Electron 预检
-PreflightBeforeTag 先阻塞本地 Electron NSIS,通过后再 push tag
-WaitForPreflight 脚本结束前等待并汇报本地预检结果
-ForceRetag 将已有 tag 移到当前 HEAD 并 push -f
-SkipBuild -LocalBuild:已有 zip/setup 时跳过构建
-DryRun 预览 tag / 命令
-Draft 草稿 Release(仅 -LocalBuild

Read the full file on GitHub · 125 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 125 lines · 0 tokens per session scan A 3a8329ce8b1c

Subscribe to this mod's changes

publish is a command published in the GitHub repository QuickerHub/quicker-rpc (13 stars, last pushed 22d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 2,012 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.