Source profileQuality 91/100Review permissions

vectorize-io/hindsight/.claude/skills/hs-release/SKILL.md

hs-release

Cut a core Hindsight release (vX.Y.Z) and open the changelog + blog PR. Use when asked to cut/start a release, bump the version, or publish a new Hindsight version.

Source repository stars
21,057
Declared platforms
0
Static risk flags
1
Last source update
2026-08-25
Source checked
2026-08-25

Decision brief

What it does: where it fits

Cut a core Hindsight release and open the accompanying changelog/blog PR. This is for the core product version (API, clients, CLI, control plane, Helm). Integrations are versioned independently — use scripts/release-integration.sh for those, not this skill.

Best for

  • Use when asked to cut/start a release, bump the version, or publish a new Hindsight version.

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexNot declaredNo explicit evidencePortability before use
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/vectorize-io/hindsight --skill ".claude/skills/hs-release"
Safe inspection promptEditorial

Inspect the Agent Skill "hs-release" from https://github.com/vectorize-io/hindsight/blob/71894da9319617d5cb5ecc0ca162af7e98cc6ed4/.claude/skills/hs-release/SKILL.md at commit 71894da9319617d5cb5ecc0ca162af7e98cc6ed4. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    Step 0 — Pre-flight

    1. Decide the base. A release is cut from the latest origin/main, never from a feature branch. git fetch origin --tags first. Confirm the "couple of fixes" the user means are actually merged to main (git log v..origin/main --oneline). 2. Find where main is checked out. main is o…

    Decide the base. A release is cut from the latest origin/main, never from a featureFind where main is checked out. main is often already checked out in a sibling worktreePitfall: never pipe the checkout in an && chain like
  2. 02

    Step 1 — Cut the release

    Run from the worktree on a clean main:

    Run from the worktree on a clean main:release.sh bumps the version in every component, regenerates the OpenAPI spec + all client SDKs, updates docs versioning, commits Release v, tags v, and pushes the commit and tag directly to main. The push triggers the…Verify after: gh run list --limit 5 should show the Release v workflow running, and git ls-remote --tags origin v should return the tag.
  3. 03

    Step 2 — Changelog + blog PR (separate)

    Done after the tag exists, as its own PR (precedent: v0.8.0 = 2053, v0.8.1 = 2080). Work on a branch off the new main:

    Explain user impact, not internals/mechanism. Lead with what the user can now do and what toDo not list integrations in the release blog. The core blog covers core engine / API /Call out an upgrade recommendation when there are operational/data-integrity fixes.
  4. 04

    Changelog

    LLM-summarizes the commits between the previous tag and v and prepends an entry to hindsight-docs/src/pages/changelog/index.md. Requires OPENAIAPIKEY (already in the repo .env). It excludes hindsight-integrations/ source, but new integrations whose commits also touched docs will…

    LLM-summarizes the commits between the previous tag and v and prepends an entry to hindsight-docs/src/pages/changelog/index.md. Requires OPENAIAPIKEY (already in the repo .env). It excludes hindsight-integrations/ sourc…
  5. 05

    Blog post

    Hand-write hindsight-docs/blog/YYYY-MM-DD-version-X-Y-Z.md (mirror an existing one; patch releases are short — see 2026-06-02-version-0-7-2.md). Guidance:

    Explain user impact, not internals/mechanism. Lead with what the user can now do and what toDo not list integrations in the release blog. The core blog covers core engine / API /Call out an upgrade recommendation when there are operational/data-integrity fixes.

Permission review

Static risk signals and limitations

Runs scripts

medium · line 49

The documentation asks the agent to run terminal commands or scripts.

git checkout -b docs-changelog-<version> origin/main

Runs scripts

medium · line 98

The documentation asks the agent to run terminal commands or scripts.

git add -A

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score91/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars21,057SourceRepository attention, not individual Skill quality
Compatibility0 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
vectorize-io/hindsight
Skill path
.claude/skills/hs-release/SKILL.md
Commit
71894da9319617d5cb5ecc0ca162af7e98cc6ed4
License
MIT
Collected
2026-08-25
Default branch
main
View the original SKILL.md

Hindsight Release

Cut a core Hindsight release and open the accompanying changelog/blog PR. This is for the core product version (API, clients, CLI, control plane, Helm). Integrations are versioned independently — use scripts/release-integration.sh for those, not this skill.

The release is irreversible and outward-facing: it tags a version and pushes it straight to main, which triggers CI that publishes packages to PyPI / npm / Helm. Confirm the version number and that the intended fixes are already merged to main before you start.

Step 0 — Pre-flight

  1. Decide the base. A release is cut from the latest origin/main, never from a feature branch. git fetch origin --tags first. Confirm the "couple of fixes" the user means are actually merged to main (git log v<prev>..origin/main --oneline).
  2. Find where main is checked out. main is often already checked out in a sibling worktree (git worktree list). You cannot check out main in a second worktree — run the release in the worktree that already holds it. If that worktree is dirty with throwaway cruft (.next-* tsconfig paths, screenshots), git stash push -u, fast-forward to origin/main, run the release, then git stash pop.
  3. Pitfall: never pipe the checkout in an && chain like git checkout main 2>&1 | tail && git reset --hard ... — the pipe's exit status is tail's (always 0), so a failed checkout won't stop the chain and the reset fires on the wrong branch. Check out as its own command and verify git branch --show-current before resetting.

Step 1 — Cut the release

Run from the worktree on a clean main:

./scripts/release.sh <version>     # e.g. 0.8.1  (no leading v)

release.sh bumps the version in every component, regenerates the OpenAPI spec + all client SDKs, updates docs versioning, commits Release v<version>, tags v<version>, and pushes the commit and tag directly to main. The push triggers the Release GitHub Actions workflow that builds and publishes the packages. It is not a PR.

Verify after: gh run list --limit 5 should show the Release v<version> workflow running, and git ls-remote --tags origin v<version> should return the tag.

Step 2 — Changelog + blog PR (separate)

Done after the tag exists, as its own PR (precedent: v0.8.0 = #2053, v0.8.1 = #2080). Work on a branch off the new main:

git checkout -b docs-changelog-<version> origin/main

Only spin up a separate worktree (git worktree add ../hindsight-changelog-<version> -b docs-changelog-<version> origin/main) if you can't get a clean checkout otherwise — e.g. main is held in another worktree and the current one has work you don't want to disturb.

Branch naming: use the docs- (hyphen) convention, e.g. docs-changelog-0.8.1. A remote branch literally named docs exists, so any docs/... branch is rejected on push with directory file conflict.

Changelog

uv run --directory hindsight-dev generate-changelog <version>

LLM-summarizes the commits between the previous tag and v<version> and prepends an entry to hindsight-docs/src/pages/changelog/index.md. Requires OPENAI_API_KEY (already in the repo .env). It excludes hindsight-integrations/ source, but new integrations whose commits also touched docs will still appear — that matches precedent, leave them in the changelog.

Blog post

Hand-write hindsight-docs/blog/YYYY-MM-DD-version-X-Y-Z.md (mirror an existing one; patch releases are short — see 2026-06-02-version-0-7-2.md). Guidance:

  • Explain user impact, not internals/mechanism. Lead with what the user can now do and what to set. Config/env-var names are fine (developer-facing), code symbols and internals are not.
  • Do not list integrations in the release blog. The core blog covers core engine / API / ops changes; each integration ships its own changelog. (Integrations may still appear in the generated changelog/index.md — that's fine; just keep them out of the blog.)
  • Call out an upgrade recommendation when there are operational/data-integrity fixes.
  • Validate formatting: npx prettier --check <blog file>.

Sync the docs skill

./scripts/generate-docs-skill.sh

Refreshes skills/hindsight-docs/references/changelog/index.md. It will also bump skills/hindsight-docs/references/openapi.json by one version — release.sh regenerates the skill before bumping OpenAPI, so the skill copy lags a version in the release commit; this step syncs it. Expect a one-line version diff there; keep it.

Commit, push, PR

git add -A
git commit --no-verify -m "docs: changelog and blog post for v<version>"
git push -u origin docs-changelog-<version>
gh pr create --base main --title "docs: changelog and blog post for v<version>" --body "..."

Expected files in the PR: the changelog entry, the new blog post, the regenerated skill changelog mirror, and the skill openapi.json version sync.

Cleanup

If you created a temporary worktree, remove it once the PR is up (git worktree remove ../hindsight-changelog-<version>; the branch stays on origin). Restore any stash you popped in Step 0.

Frequently asked questions

What to verify before installation and use

What does the hs-release source document cover?

Cut a core Hindsight release and open the accompanying changelog/blog PR. This is for the core product version (API, clients, CLI, control plane, Helm). Integrations are versioned independently — use scripts/release-integration.sh for those, not this skill.

How do I install hs-release?

The source record exposes this install command: npx skills add https://github.com/vectorize-io/hindsight --skill ".claude/skills/hs-release". Inspect the command and pinned source before running it.

Which permission-related actions were detected?

Static rules flagged exec-script in the source; the page lists the matching lines and excerpts.

Alternatives

Compare before choosing