Skip to content
Back to skills

Package Release Procedure

ASecurity

How to trigger server and browser releases in the Prokop monorepo.

  • 33 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 19, 2026
ai-agentsjavascriptjava

Works with

  • cli

Security analysis

A100/100

Scanned October 19, 2026

npx -y skills add prokopai/prokop --skill package-release-procedure --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Package Release Procedure?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Package Release Procedure
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/prokopai-package-release-procedure/badge)](https://www.skillsdirectory.com/skills/prokopai-package-release-procedure)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: package-release-procedure
description: How to trigger server and browser releases in the Prokop monorepo.
---

# Package Release Procedure

## When to Use

Use when triggering or reviewing server or browser releases in the Prokop monorepo.

## Version Contract

- `package.json` is the only build, tag, and package version source.
- `VERSION` files record the latest published version and are updated only by announcement pull requests.
- Manual version bumps touch only the relevant `package.json` files.
- Never bump a version unless the user explicitly asks.
- When release notes are consolidated, keep one server changelog for the shipped product. Put new capabilities under `Added`, and do not create a parallel client changelog.

## Release Workflows

| Workflow | Output | Trigger |
|---|---|---|
| `release.yml` | Server binaries with embedded web client | Manual workflow dispatch |
| `release-browser.yml` | Browser extension | Manual workflow dispatch |

The web client is private and embedded in server binaries. There is no separate client npm publishing workflow. Prokop does not build or publish external tools.

## Procedure

### Published Čapek dependency

1. When a Prokop fix depends on unpublished `@capekai/core` changes, finish and publish the Čapek package first.
2. Only after publication, update Prokop's dependency and lockfile, install the published package, and run the focused integration checks.
3. Keep the Čapek and Prokop commits separate, and do not link Prokop to local Čapek source as a substitute for publication.

### Server

1. Bump `packages/server/package.json` only when explicitly requested.
2. Scan the client, including `.storybook/`, for stale workspace package aliases after package renames. Storybook mocks are typechecked by the production client build.
3. Confirm `packages/client` builds successfully with the release command because its `dist` tree is embedded in every server binary with Bun `--asset`.
4. Trigger `release.yml` with `release_server: true`.
5. Confirm all platform binaries build, include the client assets, and upload before the announcement job runs.

### Browser Extension

1. Bump the browser manifest and package version only when explicitly requested.
2. Trigger `release-browser.yml` with `release_browser: true`.
3. Confirm the release assets and VERSION announcement pull request.

## Pitfalls

- Never manually edit a `VERSION` file before release.
- Use `force: true` only to intentionally recreate an existing release and move its tag.
- Do not publish `@prokopai/client` to npm. The production web client ships inside server binaries.
- Do not publish or upload before validation passes.
- Release jobs must build from the release tag commit, not a mutable branch tip.

## Verification

- Server: verify each binary includes `dist/index.html` and JavaScript assets before upload.
- Browser: verify expected asset names and the announcement job.
- Merge announcement pull requests so `VERSION` files match published releases.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.