Release validation covers TypeScript, runtime behavior, skill/template/package integrity, the npm payload, both native clients, and the public docs.
Harness Checks
pnpm --filter cadre-ai check
pnpm --filter cadre-ai test
pnpm --filter cadre-ai validatecheckruns strict TypeScript without emitting.testbuilds both bundles and runs CLI plus integration tests.validatebuilds and verifies manifests, marketplace catalogs, package identity, the solecadre-aibin, self-contained dependency policy, skills, agent isolation rules, templates, MCP configs, and absence of retired source.
Package Inspection
pnpm --filter cadre-ai pack --dry-runConfirm the payload contains manifests, MCP configs, skills, agents, immutable
templates, license, README, and both runtime bundles. It must not contain source
tests, development dependencies, node_modules, or a second binary alias.
Documentation Checks
pnpm --filter cadre-docs checkThis runs content validation, ESLint, TypeScript, and the static Next.js build.
The docs package version and release notes must match harness/package.json.
Native Installer Validation
Build locally and install for both supported clients:
pnpm --filter cadre-ai build
node harness/dist/cadre-cli.mjs doctor
node harness/dist/cadre-cli.mjs install --target all --scope user
codex plugin list --json
claude plugin list --jsonVerify:
- both clients report
cadre@cadreinstalled and enabled at the candidate version (with installation cache-buster metadata where applicable); - Codex launches
./dist/cadre-mcp.mjsfrom the packaged plugin root; - Claude launches
${CLAUDE_PLUGIN_ROOT}/dist/cadre-mcp.mjs; - Codex has the plugin-scoped MCP approval mode;
- Claude has both the
cadreenabled server andmcp__cadre__*allow rule; - a new Codex session and reloaded Claude session discover all ten skills.
There is no current install --check mode. Native listing and a real skill/MCP
smoke test are the verification path.
Release Sequence
- Update runtime, package, and both plugin manifest versions together.
- Update docs package version and release notes.
- Install with the locked workspace dependencies.
- Run harness check, tests, validation, and package inspection.
- Run the complete docs check.
- Validate local-build installation against Codex and Claude.
- Stop and fix any installer, listing, discovery, MCP, permission, or version mismatch before creating or publishing the release.
Publishing, tagging, pushing, and external release creation require explicit user authorization; local validation does not imply it.