release

Release the Kit

This skill is the producer half of kit versioning. It reads ONLY the kit's own git history and writes the version artifacts — the git tag, .kit-version, kit-changelog.yaml, CHANGELOG.md, and dashboard/package.json — in one commit so version and content always travel together. It is idempotent per version: re-running it on a version that is already released, tagged, and pushed is a no-op at every step (append-only changelog, pre-existing-tag guard, idempotent GitHub release). The changelog's detect/apply prose is authored generically and is never executed.

See references/changelog-schema.md for the full record schema, the intent contract, the deterministic commit→type mapping, and the rendering rules.

Step 0: Prerequisites

Run each check; branch on the sentinel it prints.

# Clean working tree (untracked files are allowed; tracked modifications are not)
git diff --quiet && git diff --cached --quiet && echo "TREE_OK" || echo "TREE_DIRTY"

# On the default branch
def=$(git symbolic-ref refs/remotes/origin/HEAD 2>/dev/null | sed 's@^refs/remotes/origin/@@')
[ -z "$def" ] && def=main
[ "$(git branch --show-current)" = "$def" ] && echo "BRANCH_OK" || echo "BRANCH_WRONG"

# A baseline tag exists and is >= v0.1.0
git fetch --tags --quiet 2>/dev/null
last=$(git tag --list 'v*' --sort=-v:refname | head -1)
[ -n "$last" ] && echo "LAST_TAG=$last" || echo "TAGS_MISSING"

# Signing capability (decides -s vs -a in Step 7)
if [ -n "$(git config --get user.signingkey)" ] && git tag -s __sigprobe__ -m x >/dev/null 2>&1; then
  git tag -d __sigprobe__ >/dev/null 2>&1; echo "SIGN_OK"
else
  git tag -d __sigprobe__ >/dev/null 2>&1; echo "SIGN_NONE"
fi

# GitHub CLI auth (for the release in Step 8)
gh auth status >/dev/null 2>&1 && echo "GH_OK" || echo "GH_NONE"

• TREE_DIRTY → stop. Tell the user to commit or stash; a release commits a curated set, never accidental WIP.
• BRANCH_WRONG → stop. Releases are cut from the default branch only.
• TAGS_MISSING → stop. The baseline v0.1.0 tag must exist first (it is created once, during the versioning foundation). Do not invent one.
• SIGN_NONE → continue, but downgrade the Step-7 tag from git tag -s to git tag -a and log: "no usable signing key — creating an annotated (unsigned) tag." Never abort for this.
• GH_NONE → continue; in Step 8 skip gh release create and print the exact command for the user to run later.