Source profileQuality 84/100Review permissions

code-yeongyu/oh-my-openagent/.agents/skills/publish/SKILL.md

publish

Publish oh-my-opencode to npm by triggering the GitHub Actions publish workflow and verifying its artifacts. Ship-only: never runs pre-publish-review or re-reviews merged code unless the user explicitly asks. Argument: <patch|minor|major>. Triggers: publish, release, deploy, npm publish.

Source repository stars
67,195
Declared platforms
0
Static risk flags
2
Last source update
2026-08-04
Source checked
2026-08-04

Decision brief

What it does—and where it fits

origin/dev is already gated: every PR and push ran CI (test/typecheck/codex-compatibility on 3 OSes), and the publish workflow re-runs those same gates before anything is published.

Best for

    Not for

    • Tasks that require unconfirmed production actions or broad system permissions.
    • Environments where the pinned source and install steps cannot be inspected.

    Compatibility matrix

    Platform support, with evidence labels

    PlatformStatusEvidenceWhat to check
    CodexNot declaredNo explicit evidencePortability before use
    Claude CodeNot declaredNo explicit evidencePortability before use
    CursorNot declaredNo explicit evidencePortability before use
    Gemini CLINot declaredNo explicit evidencePortability before use
    Open the compatibility checker

    Installation

    Inspect first. Install second.

    The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

    Source-detected install commandSource
    npx skills add https://github.com/code-yeongyu/oh-my-openagent --skill ".agents/skills/publish"
    Safe inspection promptEditorial

    Inspect the Agent Skill "publish" from https://github.com/code-yeongyu/oh-my-openagent/blob/9cee074da29e2b17d709db35449c4f9c04cdc1bd/.agents/skills/publish/SKILL.md at commit 9cee074da29e2b17d709db35449c4f9c04cdc1bd. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

    Workflow

    What the source asks the agent to do

    1. 01

      CRITICAL: PUBLISH IS SHIP-ONLY — GO STRAIGHT TO THE WORKFLOW

      origin/dev is already gated: every PR and push ran CI (test/typecheck/codex-compatibility on 3 OSes), and the publish workflow re-runs those same gates before anything is published.

      NEVER run /pre-publish-review, /review-work, or any code re-review as part of a publish request. Those run ONLY when the user explicitly asks for a review.NEVER "fix" code, open PRs, or enter fix-and-re-audit loops during a publish. If the workflow fails or something looks broken, report it and STOP — a publish is the wrong place to repair the tree.A publish request with a bump type goes from Step 0 to Step 3 (trigger) in minutes. The only human-scale work is release notes, drafted while CI runs.
    2. 02

      CRITICAL: FULL WORKFLOW MEANS THREE RELEASE SURFACES

      Publishing is complete only after all release surfaces are verified:

      Publishing is complete only after all release surfaces are verified:The publish workflow must not be reported complete while any of oh-my-opencode, oh-my-openagent, lazycodex-ai, or code-yeongyu/lazycodex verification is unresolved.
    3. 03

      CRITICAL: FULL WORKFLOW MEANS DISCORD TOO

      Publishing is not complete until the Discord release announcement has been attempted.

      DO NOT stop after creating the GitHub release.DO NOT stop after drafting or applying release notes.DO NOT wait for a second user acknowledgement if the user already confirmed the publish.
    4. 04

      STEP 0: REGISTER TODO LIST (MANDATORY FIRST ACTION)

      Before doing ANYTHING else, create a detailed todo list using TodoWrite:

      Before doing ANYTHING else, create a detailed todo list using TodoWrite:Mark each todo as inprogress when starting, completed when done. ONE AT A TIME.
    5. 05

      STEP 1: CONFIRM BUMP TYPE

      If the user already named a bump type (argument or message), that IS the confirmation — state it and continue immediately. Only ask and wait when no bump type was given.

      If the user already named a bump type (argument or message), that IS the confirmation — state it and continue immediately. Only ask and wait when no bump type was given.

    Permission review

    Static risk signals and limitations

    Runs scripts

    medium · line 38

    The documentation asks the agent to run terminal commands or scripts.

    After Step 3 (trigger), you MUST drive the run to a terminal conclusion AND complete every post-trigger step before ending your turn. You may NOT end the turn, hand off, or stop for the day while ANY of these is unresolved:

    Writes files

    medium · line 42

    The documentation asks the agent to create, modify, or delete local files.

    **Enhanced summary applied** — Step 6 + Step 7: draft (mandatory for patch/minor/major) AND `gh release edit --notes-file` applied. "Patch is optional" is wrong; patch summaries are MANDATORY.

    Runs scripts

    medium · line 109

    The documentation asks the agent to run terminal commands or scripts.

    git log @{u}..HEAD --oneline

    Writes files

    medium · line 319

    The documentation asks the agent to create, modify, or delete local files.

    gh release edit "v${NEW_VERSION}" --notes-file /tmp/final-release-v${NEW_VERSION}.md

    Evidence record

    Why each signal appears

    EvidenceSourceComputedTestedEditorial
    SignalValueEvidence typeMeaning
    Quality score84/100ComputedDocumentation, specificity, maintenance, and trust rules
    Repository stars67,195SourceRepository attention, not individual Skill quality
    Compatibility0 platformsSourceDeclared in the catalog source record
    Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

    Pinned source

    Provenance and original SKILL.md

    Repository
    code-yeongyu/oh-my-openagent
    Skill path
    .agents/skills/publish/SKILL.md
    Commit
    9cee074da29e2b17d709db35449c4f9c04cdc1bd
    License
    NOASSERTION
    Collected
    2026-08-04
    Default branch
    dev
    View the original SKILL.md

    You are the release manager for oh-my-opencode. Execute the FULL publish workflow from start to finish.

    CRITICAL: PUBLISH IS SHIP-ONLY — GO STRAIGHT TO THE WORKFLOW

    origin/dev is already gated: every PR and push ran CI (test/typecheck/codex-compatibility on 3 OSes), and the publish workflow re-runs those same gates before anything is published.

    • NEVER run /pre-publish-review, /review-work, or any code re-review as part of a publish request. Those run ONLY when the user explicitly asks for a review.
    • NEVER "fix" code, open PRs, or enter fix-and-re-audit loops during a publish. If the workflow fails or something looks broken, report it and STOP — a publish is the wrong place to repair the tree.
    • A publish request with a bump type goes from Step 0 to Step 3 (trigger) in minutes. The only human-scale work is release notes, drafted while CI runs.

    CRITICAL: FULL WORKFLOW MEANS THREE RELEASE SURFACES

    Publishing is complete only after all release surfaces are verified:

    Release layerSurfaceRequired proof
    omo pure componentsCore/MCP/shared-skill changes inside the published package payloadRelease notes call out layer-specific version impact (from the workflow changelog, or /get-unpublished-changes when the user requested it).
    omo opencodeoh-my-opencode and oh-my-openagent npm packages plus platform packagesnpm versions and GitHub release exist for the selected bump.
    omo codexlazycodex-ai, Codex plugin metadata, and code-yeongyu/lazycodex marketplace releaseCodex plugin metadata is stamped with the release version, lazycodex-ai publishes, and the LazyCodex repo release is created when the marketplace payload changed.

    The publish workflow must not be reported complete while any of oh-my-opencode, oh-my-openagent, lazycodex-ai, or code-yeongyu/lazycodex verification is unresolved.

    CRITICAL: FULL WORKFLOW MEANS DISCORD TOO

    Publishing is not complete until the Discord release announcement has been attempted.

    • DO NOT stop after creating the GitHub release.
    • DO NOT stop after drafting or applying release notes.
    • DO NOT wait for a second user acknowledgement if the user already confirmed the publish.
    • After the release notes are finalized, immediately run Step 7.5 and post to Discord.
    • If Discord posting fails after authentication/retry, report the failure clearly and continue the remaining verification steps. A skipped Discord step is a workflow failure.

    CRITICAL: NO EARLY TURN-END AFTER TRIGGER (COMPLETION CONTRACT)

    Once gh workflow run publish succeeds, the publish is NOT done. A prior session forgot this: it triggered the workflow and ended its turn, leaving the release unverified, the enhanced summary unwritten, and the Discord announcement unsent. That mistake is why this section exists.

    After Step 3 (trigger), you MUST drive the run to a terminal conclusion AND complete every post-trigger step before ending your turn. You may NOT end the turn, hand off, or stop for the day while ANY of these is unresolved:

    1. Run conclusiongh run view <id> --json conclusion must return success (poll while drafting notes; never sleep idle).
    2. Release exists — Step 5: gh release view v${NEW_VERSION} resolves.
    3. Enhanced summary applied — Step 6 + Step 7: draft (mandatory for patch/minor/major) AND gh release edit --notes-file applied. "Patch is optional" is wrong; patch summaries are MANDATORY.
    4. Discord announced — Step 7.5: agent-discordbot message send attempted; either a message id is recorded OR a clear failure is reported to the user. A skipped Discord step is a workflow failure.
    5. npm verified — Step 8: npm view oh-my-opencode version (and oh-my-openagent, lazycodex-ai) shows ${NEW_VERSION}.

    Only after all five are green may you end the turn. If the run fails, run gh run view <id> --log-failed, report it, and STOP (do not repair the tree mid-publish). If a post-trigger step fails for an external reason (npm propagation, Discord auth), report it clearly and continue the remaining steps — do not let one failure abort the rest.

    This contract applies to the slash-command copies (.agents/command/publish.md, .opencode/command/publish.md) too; they are kept byte-identical to this skill per the .agents/AGENTS.md drift rule.

    CRITICAL: ARGUMENT REQUIREMENT

    You MUST receive a version bump type from the user. Valid options:

    • patch: Bug fixes, backward-compatible (1.1.7 → 1.1.8)
    • minor: New features, backward-compatible (1.1.7 → 1.2.0)
    • major: Breaking changes (1.1.7 → 2.0.0)

    If the user did not provide a bump type argument, STOP IMMEDIATELY and ask:

    "To proceed with deployment, please specify a version bump type: patch, minor, or major"

    DO NOT PROCEED without explicit user confirmation of bump type.


    STEP 0: REGISTER TODO LIST (MANDATORY FIRST ACTION)

    Before doing ANYTHING else, create a detailed todo list using TodoWrite:

    [
      { "id": "confirm-bump", "content": "Confirm version bump type with user (patch/minor/major)", "status": "in_progress", "priority": "high" },
      { "id": "check-uncommitted", "content": "Check for uncommitted changes and commit if needed", "status": "pending", "priority": "high" },
      { "id": "sync-remote", "content": "Sync with remote (pull --rebase && push if unpushed commits)", "status": "pending", "priority": "high" },
      { "id": "run-workflow", "content": "Trigger GitHub Actions publish workflow", "status": "pending", "priority": "high" },
      { "id": "wait-workflow", "content": "Wait for workflow completion (poll every 30s)", "status": "pending", "priority": "high" },
      { "id": "verify-and-preview", "content": "Verify release created + preview auto-generated changelog & contributor thanks", "status": "pending", "priority": "high" },
      { "id": "draft-summary", "content": "Draft enhanced release summary (mandatory for all release types)", "status": "pending", "priority": "high" },
      { "id": "apply-summary", "content": "Prepend enhanced summary to release", "status": "pending", "priority": "high" },
      { "id": "discord-announce", "content": "MANDATORY: post release announcement to Discord channel immediately after release notes are finalized", "status": "pending", "priority": "high" },
      { "id": "verify-npm", "content": "Verify npm package published successfully", "status": "pending", "priority": "high" },
      { "id": "verify-lazycodex", "content": "Verify lazycodex-ai publish, Codex plugin metadata version stamp, and code-yeongyu/lazycodex release/sync", "status": "pending", "priority": "high" },
      { "id": "verify-platform-binaries", "content": "Spot-check platform binary packages on npm", "status": "pending", "priority": "high" },
      { "id": "final-confirmation", "content": "Final confirmation to user with links", "status": "pending", "priority": "low" }
    ]
    

    Mark each todo as in_progress when starting, completed when done. ONE AT A TIME.


    STEP 1: CONFIRM BUMP TYPE

    If the user already named a bump type (argument or message), that IS the confirmation — state it and continue immediately. Only ask and wait when no bump type was given.


    STEP 2: CHECK UNCOMMITTED CHANGES

    Run: git status --porcelain

    • If there are uncommitted changes, warn user and ask if they want to commit first
    • If clean, proceed

    STEP 2.5: SYNC WITH REMOTE (MANDATORY)

    Check if there are unpushed commits:

    git log @{u}..HEAD --oneline
    

    If there are unpushed commits, you MUST sync before triggering workflow:

    git pull --rebase && git push
    

    This ensures the GitHub Actions workflow runs on the latest code including all local commits.


    STEP 3: TRIGGER GITHUB ACTIONS WORKFLOW

    Run the publish workflow:

    gh workflow run publish -f bump={bump_type}
    

    Wait 3 seconds, then get the run ID:

    gh run list --workflow=publish --limit=1 --json databaseId,status --jq '.[0]'
    

    STEP 4: WAIT FOR WORKFLOW COMPLETION

    The publish run is a single workflow with sequential stages. Expected timeline (from recent real runs, ~30 min total):

    Stage (job)What it doesTypical
    test / typecheck / codex-compatibility (3 OS)Re-runs the CI gates on the release source4–8 min (Windows is the long pole)
    prepare-release-stateStamps versions, opens + auto-merges the release: vX.Y.Z PR, waits for that PR's required CI checks10–15 min (dominant stage)
    publish-platform (build + publish, 12 targets)Builds and publishes both platform package families3–4 min
    publish-mainreleasePublishes oh-my-opencode / oh-my-openagent / lazycodex-ai, creates the GitHub release, syncs code-yeongyu/lazycodex4–6 min

    Poll job-level status every 30 seconds and report stage transitions to the user:

    gh run view {run_id} --json status,conclusion,jobs --jq '{status, conclusion, stage: ([.jobs[] | select(.status=="in_progress") | .name] | join(", "))}'
    

    IMPORTANT: Use polling loop, NOT sleep commands. Use the waiting time to draft the enhanced release summary (Step 6) — do not sit idle, and do not start any review activity.

    If conclusion is failure, show error and stop:

    gh run view {run_id} --log-failed
    

    STEP 5: VERIFY RELEASE & PREVIEW AUTO-GENERATED CONTENT

    Two goals: confirm the release exists, then show the user what the workflow already generated.

    # Pull latest (workflow committed version bump)
    git pull --rebase
    NEW_VERSION=$(node -p "require('./package.json').version")
    
    # Verify release exists on GitHub
    gh release view "v${NEW_VERSION}" --json tagName,url --jq '{tag: .tagName, url: .url}'
    

    After verifying, generate a local preview of the auto-generated content:

    bun run script/generate-changelog.ts
    

    The following content is ALREADY included in the release automatically:

    • Commit changelog (grouped by feat/fix/refactor)
    • Contributor thank-you messages (for non-team contributors)

    You do NOT need to write any of this. It's handled.

    For all release types, an enhanced summary is required — I'll draft one in the next step.

    APPROVAL GATE (single, binary): The user's initial publish request with a named bump type IS the only approval this workflow requires. Do NOT wait for a separate acknowledgement here. Present the preview, then IMMEDIATELY proceed to Step 6. The only exception: if the user explicitly said "let me review the changelog before you continue" (or equivalent), stop and wait. Otherwise continue without ending the turn.


    STEP 6: DRAFT ENHANCED RELEASE SUMMARY

    Release TypeAction
    patchMANDATORY. Draft a concise bug-fix / change summary. Do NOT proceed without one.
    minorMANDATORY. Draft a concise feature summary. Do NOT proceed without one.
    majorMANDATORY. Draft a full release narrative with migration notes if applicable. Do NOT proceed without one.

    LAST RELEASE BEFORE THE OMO NATIVE CLI PUBLIC RELEASE

    When the user identifies this as the final release before the OmO Native CLI public release, the GitHub summary MUST begin with this dedicated heading and the Discord announcement MUST repeat it as a dedicated heading immediately after @here:

    ## LAST RELEASE BEFORE THE OMO NATIVE CLI PUBLIC RELEASE

    What You're Writing (and What You're NOT)

    You are writing the headline layer — a product announcement that sits ABOVE the auto-generated commit log. Think "release blog post", not "git log".

    Token refresh is now automatic and seamless. Sessions no longer expire mid-task — the system silently rotates credentials in the background. If you've been frustrated by random logouts, this release fixes that.

    Rules are now cached by file modification time. If your project has 50+ rule files, you'll notice startup is noticeably faster — we measured a 3x improvement in our test suite.

    Drafting Process

    1. Analyze the commit list from Step 5's preview. Identify 2-5 themes that matter to users.
    2. Write the summary to /tmp/release-summary-v${NEW_VERSION}.md.
    3. Present the draft to the user for review and approval before applying.
    # Write your draft here
    cat > /tmp/release-summary-v${NEW_VERSION}.md << 'SUMMARY_EOF'
    {your_enhanced_summary}
    SUMMARY_EOF
    
    cat /tmp/release-summary-v${NEW_VERSION}.md
    

    APPROVAL GATE (same single gate): The initial publish confirmation covers this step too. Present the draft, then IMMEDIATELY proceed to Step 7 (apply) and Step 7.5 (Discord). Do NOT stop to wait for approval unless the user explicitly requested a release-note review hold before the publish started. The Discord announcement (Step 7.5) is mandatory and must not be blocked by a review hold that was never requested.


    STEP 7: APPLY ENHANCED SUMMARY TO RELEASE

    This step is MANDATORY. The enhanced summary from Step 6 must always be applied.

    ┌─────────────────────────────────────┐
    │  Enhanced Summary (from Step 6)     │  ← You wrote this
    │  - Theme-based, user-impact focused │
    ├─────────────────────────────────────┤
    │  ---  (separator)                   │
    ├─────────────────────────────────────┤
    │  Auto-generated Commit Changelog    │  ← Workflow wrote this
    │  - feat/fix/refactor grouped        │
    │  - Contributor thank-you messages   │
    └─────────────────────────────────────┘
    
    # 1. Fetch existing auto-generated body
    EXISTING_BODY=$(gh release view "v${NEW_VERSION}" --json body --jq '.body')
    
    # 2. Combine: enhanced summary on top, auto-generated below
    {
      cat /tmp/release-summary-v${NEW_VERSION}.md
      echo ""
      echo "---"
      echo ""
      echo "$EXISTING_BODY"
    } > /tmp/final-release-v${NEW_VERSION}.md
    
    # 3. Update the release (additive only)
    gh release edit "v${NEW_VERSION}" --notes-file /tmp/final-release-v${NEW_VERSION}.md
    
    # 4. Confirm
    echo "✅ Release v${NEW_VERSION} updated with enhanced summary."
    gh release view "v${NEW_VERSION}" --json url --jq '.url'
    

    STEP 7.5: POST RELEASE NOTES TO DISCORD

    After the release notes are finalized, post them to the Discord channel. This step is mandatory for every publish run.

    Never skip this step because the release summary was awaiting approval. If the user already confirmed the publish, continue through Discord before stopping.

    1. Read recent messages in the channel to match the existing announcement style:
    JOBDORI_BOT_ID=1486173823354146917
    agent-discordbot message list 1454708427392680067 --bot "$JOBDORI_BOT_ID" --limit 5
    
    1. If agent-discordbot is unavailable or unauthorized, stop and report that the Jobdori token path failed. Only then may a human decide whether to use agent-discord.

    2. Post the release announcement to channel 1454708427392680067 matching the style of previous announcements. The message should follow this structure:

    @here
    
    🎉 **oh-my-opencode v{VERSION} — {Short Tagline}**
    
    **Feature 1** — one-line description.
    
    **Feature 2** — one-line description.
    
    **Feature 3** — one-line description.
    
    Plus {summary of remaining changes}.
    
    📦 Install / upgrade:
    `bun i -g oh-my-opencode@{VERSION}`  (or `npm`)
    
    📝 Full release notes: {RELEASE_URL}
    
    JOBDORI_BOT_ID=1486173823354146917
    RELEASE_URL=$(gh release view "v${NEW_VERSION}" --json url --jq '.url')
    agent-discordbot message send 1454708427392680067 "{your message following the style above}" --bot "$JOBDORI_BOT_ID"
    

    If the message fails to send, warn the user and continue — do NOT block the publish workflow on Discord errors.


    STEP 8: VERIFY NPM PUBLICATION

    Poll npm registry until the new version appears:

    npm view oh-my-opencode version
    

    Compare with expected version. If not matching after 2 minutes, warn user about npm propagation delay.


    STEP 8.5: SPOT-CHECK PLATFORM BINARY PACKAGES

    Platform packages are built and published by the publish-platform jobs INSIDE the same publish run — there is no separate workflow to wait for, and publish-main already refuses to publish unless matching platform binaries exist. Spot-check a representative sample:

    for PKG in oh-my-opencode-darwin-arm64 oh-my-openagent-linux-x64 oh-my-opencode-windows-x64; do
      npm view "$PKG" version
    done
    

    Each should show ${NEW_VERSION}. On mismatch, warn the user and point at the publish-platform jobs in the run — do not re-run anything yourself.


    STEP 9: FINAL CONFIRMATION

    Report success to user with:


    ERROR HANDLING

    • Workflow fails: Show failed logs, suggest checking Actions tab
    • Release not found: Wait and retry, may be propagation delay
    • npm not updated: npm can take 1-5 minutes to propagate, inform user
    • Permission denied: User may need to re-authenticate with gh auth login
    • Platform jobs fail: Show logs from the publish-platform jobs in the same run, name the failing target, and stop — publish-main is blocked by design until they pass

    LANGUAGE

    Respond to user in English.

    Alternatives

    Compare before choosing

    Computed 9618,447

    teng-lin/notebooklm-py

    notebooklm

    Complete API for Google NotebookLM - full programmatic access including features not in the web UI. Create notebooks, add sources, generate all artifact types, download in multiple formats. Activates on explicit /notebooklm or intent like "create a podcast about X"

    Computed 961,066

    TencentCloudBase/CloudBase-AI-Toolkit

    cloudbase-agent-python

    Build production-ready AI agent backends using the CloudBase Agent Python SDK — create agents with LangGraph/CrewAI/LlamaIndex, serve them via FastAPI with AG-UI protocol streaming + OpenAI-compatible endpoints, add tools (bash, filesystem, MCP, code execution), memory (in-memory, TDAI, MySQL, MongoDB), observability (OpenTelemetry/Langfuse), and middleware (auth, logging). Use this skill when the user wants to create an AI agent server, build a chatbot backend, set up human-in-the-loop workflow

    Computed 95237,532

    affaan-m/ECC

    mle-workflow

    Production machine-learning engineering workflow for data contracts, reproducible training, model evaluation, deployment, monitoring, and rollback. Use when building, reviewing, or hardening ML systems beyond one-off notebooks.

    Computed 9532,606

    K-Dense-AI/scientific-agent-skills

    simpy

    Build, inspect, test, and analyze bounded process-based discrete-event simulations with SimPy, including events, resources, interrupts, monitoring, replications, warm-up, and reproducible output analysis.