diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index 02d47f4..527e020 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -11,7 +11,7 @@ "name": "web3d-dev", "displayName": "Web3D Dev", "description": "Three skills for realtime 3D on the web: the three.js WebGPU runtime with TSL, compute, post-processing and a WebGL2 fallback; the glTF asset pipeline from source to frame, with compression, budgets, sourcing and optional Asset Foundry ordering; and a 3D animation protocol covering rigs, clip conventions, blending, GPU and instanced animation, and reduced motion. Every API fact is pinned to a verified three.js release.", - "version": "0.1.3", + "version": "0.1.4", "author": { "name": "ssheleg", "url": "https://x.com/sshlg93" diff --git a/CHANGELOG.md b/CHANGELOG.md index aafdc17..29b544f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.1.4 — 2026-10-13 + +- Validate the owner board's table shape, unique task IDs and immediate Markdown + separator before accepting a change. +- Validate the release job's full-history checkout and refusing ancestry check; + reject unsupported or ambiguous workflow shapes. Forty-two process controls + cover hostile edits and valid board/workflow forms. +- Run complete hosted validation nightly at 23:00 Europe/Warsaw or once for an + explicitly frozen draft-to-ready candidate. Tag releases retain their existing + validation and publication checks. + ## 0.1.3 — 2026-10-10 - **The release refuses a lightweight tag.** `release.yml` gains one step, right after diff --git a/SKILL-CARD.md b/SKILL-CARD.md index 979b0a9..fde57c2 100644 --- a/SKILL-CARD.md +++ b/SKILL-CARD.md @@ -5,7 +5,7 @@ | Field | Value | |---|---| | Pack | `web3d-dev` | -| Version | `0.1.3` | +| Version | `0.1.4` | | Skills | `web3d-runtime`, `web3d-assets`, `web3d-animation` | | License | MIT | | Source | https://github.com/ssheleg/web3d-dev | diff --git a/docs/evidence/backlog.md b/docs/evidence/backlog.md index 9b99cb5..7ea094c 100644 --- a/docs/evidence/backlog.md +++ b/docs/evidence/backlog.md @@ -6,8 +6,9 @@ this board; the source requests are the hub's B-108 and B-109. | ID | Finding and acceptance | State | Evidence | |---|---|---|---| -| GATE-01 | Own validator must reject missing boards, shifted columns and duplicate IDs using each table's header. | implemented on branch; independent review pending | [Task packet](member-gates-20261013/README.md), `test/member_gates_test.py` | -| GATE-02 | Own validator must reject removal of the release job's full-history checkout or unconditional ancestry failure guard. | implemented on branch; independent review pending | [Task packet](member-gates-20261013/README.md), `test/member_gates_test.py` | +| GATE-01 | Own validator must reject missing boards, shifted columns and duplicate IDs using each table's header. | verified and merged; patch release pending | [Task packet](member-gates-20261013/README.md), `test/member_gates_test.py` | +| GATE-02 | Own validator must reject removal of the release job's full-history checkout or unconditional ancestry failure guard. | verified and merged; patch release pending | [Task packet](member-gates-20261013/README.md), `test/member_gates_test.py` | -Remaining: independent review, owner integration, then the coordinator's separate -release and family-pin wave. No native/provider or past release verdict is claimed. +Source review and owner integration are complete; exact merge and eligible-run +receipts are in the [release packet](releases/2026-10-13-member-gates/README.md). +Remaining: patch publication and the coordinator's family-pin/install wave. No native/provider or past release verdict is claimed. diff --git a/docs/evidence/releases/2026-10-13-member-gates/README.md b/docs/evidence/releases/2026-10-13-member-gates/README.md new file mode 100644 index 0000000..9b64354 --- /dev/null +++ b/docs/evidence/releases/2026-10-13-member-gates/README.md @@ -0,0 +1,57 @@ +# web3d-dev 0.1.4: release packet + +Objective: publish the already merged FW02 board and release-ancestry gates as +an exact patch version. The operator authorized this release wave on 2026-10-13. +Hub pins and global installation belong to the coordinating hub wave. + +## Source and acceptance + +- Source main: `02181194157b91f5b79159936d35d1a26ae6b433`; [PR 6](https://github.com/ssheleg/web3d-dev/pull/6). +- Eligible source check: [run 38336375517](https://github.com/ssheleg/web3d-dev/actions/runs/38336375517), success. +- [Implementation packet](../../member-gates-20261013/README.md): 42 process controls, + including 38 hostile plants and four valid shapes. The coordinator independently + replayed the final Telegram controls and verified identical sibling helper/harness hashes. +- This release changes version metadata and evidence only; the source gate implementation + and CI job bodies remain the merged, reviewed ones. + +## Requirements and sequence + +1. Synchronize package, marketplace, plugin, existing skill metadata and skill card + to `0.1.4`; add the exact changelog section, preserving historical versions. +2. Run the owner's required local gate sequentially; strict manifest validation and + payload dry-run supplement it. Record actual outcomes below. +3. Independently review the frozen diff, push a draft PR, then promote it once for + eligible `ready_for_review` checks. Ordinary exact-head squash merge only. +4. Create a new annotated `v0.1.4` at merged canonical main, after confirming the + tag and npm version are absent. Watch the existing release workflow, then verify + the exact registry version and GitHub release. Never rewrite an old tag. +5. Hand source/tag/run receipts to the hub coordinator for pins and installation. + +## Current state and next task + +Plan committed before the metadata change. PR admission, tag creation, publication and installation remain pending. +Next: freeze this receipt, push, then promote the reviewed draft once. No model/provider/native-runtime acceptance is inferred. + +Skills used: make-skill (release construction), task-pipeline (delivery), +agent-sync (local advisory ownership), evidence-docs (source and check receipts). + +## Candidate review and payload + +The coordinator independently reviewed `fb9e7ea75a6d7f7f50a5ad649fa7f003c0b0382a`: **PASS**. Version fields, +new changelog and existing skill metadata agree; there is no executable or workflow +diff. +`npm pack --dry-run --json` exited 0: 20 files, 112371 unpacked bytes; +no `.env`, agent-sync state or Python cache residue. Both common gate files retain +the same SHA-256 digests as the independently reviewed FW02 source wave. + +Draft [PR 7](https://github.com/ssheleg/web3d-dev/pull/7) preserves the +no-per-push CI policy until local checks finish. + +## Local candidate checks + +`npm test`: 15 structural checks, three skills and ten references pass. +`npm run test:negatives`: 13 owner plants plus 42 member process controls pass. +Installer: 11 cases pass. Eval corpus: 22 trigger cases and six scenarios validate +(the corpus was checked, no model eval run is implied). Both strict Claude +manifests and `git diff --check` pass. All commands exited 0. +Local checks do not imply native/model or family-install acceptance. diff --git a/package.json b/package.json index c57d326..7794ec7 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@ssheleg/web3d-dev", - "version": "0.1.3", + "version": "0.1.4", "description": "Three skills for realtime 3D on the web: the three.js WebGPU runtime with TSL, compute, post-processing and a WebGL2 fallback; the glTF asset pipeline from source to frame, with compression, budgets, sourcing and optional Asset Foundry ordering; and a 3D animation protocol covering rigs, clip conventions, blending, GPU and instanced animation, and reduced motion. Every API fact is pinned to a verified three.js release.", "bin": { "web3d-dev": "bin/web3d-dev.js" diff --git a/plugins/web3d-dev/.claude-plugin/plugin.json b/plugins/web3d-dev/.claude-plugin/plugin.json index 13f2298..b4827c7 100644 --- a/plugins/web3d-dev/.claude-plugin/plugin.json +++ b/plugins/web3d-dev/.claude-plugin/plugin.json @@ -3,7 +3,7 @@ "name": "web3d-dev", "displayName": "Web3D Dev", "description": "Three skills for realtime 3D on the web: the three.js WebGPU runtime with TSL, compute, post-processing and a WebGL2 fallback; the glTF asset pipeline from source to frame, with compression, budgets, sourcing and optional Asset Foundry ordering; and a 3D animation protocol covering rigs, clip conventions, blending, GPU and instanced animation, and reduced motion. Every API fact is pinned to a verified three.js release.", - "version": "0.1.3", + "version": "0.1.4", "author": { "name": "ssheleg", "url": "https://x.com/sshlg93" diff --git a/plugins/web3d-dev/skills/web3d-animation/SKILL.md b/plugins/web3d-dev/skills/web3d-animation/SKILL.md index ff57443..04072cd 100644 --- a/plugins/web3d-dev/skills/web3d-animation/SKILL.md +++ b/plugins/web3d-dev/skills/web3d-animation/SKILL.md @@ -18,7 +18,7 @@ compatibility: >- needed to call motion verified — without one the verdict is NOT_RUN, never PASS. metadata: author: ssheleg - version: "0.1.3" + version: "0.1.4" --- # web3d-animation — decide how it moves, then make both halves agree diff --git a/plugins/web3d-dev/skills/web3d-assets/SKILL.md b/plugins/web3d-dev/skills/web3d-assets/SKILL.md index e7505fc..efa9338 100644 --- a/plugins/web3d-dev/skills/web3d-assets/SKILL.md +++ b/plugins/web3d-dev/skills/web3d-assets/SKILL.md @@ -18,7 +18,7 @@ compatibility: >- Asset Foundry is optional: detected through its foundry_* MCP tools or its skill, never assumed. metadata: author: ssheleg - version: "0.1.3" + version: "0.1.4" --- # web3d-assets — from a source to the frame, within a budget someone wrote down diff --git a/plugins/web3d-dev/skills/web3d-runtime/SKILL.md b/plugins/web3d-dev/skills/web3d-runtime/SKILL.md index a6d329e..0eb7237 100644 --- a/plugins/web3d-dev/skills/web3d-runtime/SKILL.md +++ b/plugins/web3d-dev/skills/web3d-runtime/SKILL.md @@ -18,7 +18,7 @@ compatibility: >- visual result verified; without one the verdict is NOT_RUN. metadata: author: ssheleg - version: "0.1.3" + version: "0.1.4" --- # web3d-runtime — the scene runs, on every GPU it meets, and you can prove how fast