Run these gates before publishing a release or deployment image.
Preferred one-command gate:
npm run release:checkThe gate verifies required release documents and then runs the commands below.
npm run typechecknpm run buildnpm run release:artifact-smokenpm run eval:release-localnpm run release:diagnosticsnpm run reference:evidence-smokenpm run reference:parity -- --strictnpm testnpm run eval:smokenpm run eval:benchmarknpm run maturity:check- Run the targeted capability and security regression set when ACP, Responses, memory hooks, inline context references, skill platform gates, checkpoint/rollback, transactional patch, MCP OAuth/allowlist, credential pool, tool lifecycle hooks, browser screenshot artifacts, model routing policy diagnostics, runtime mutation checkpoint rollback, release gates, maturity artifacts, or CLI checkpoint slash operations changed:
node ./scripts/run-tests.mjs tests/gateway.test.ts tests/model-client.test.ts tests/runtime.test.ts tests/context.test.ts tests/workspace.test.ts tests/tools.test.ts tests/cli-chat.test.ts tests/evals.test.ts tests/extensions.test.ts tests/release-check.test.ts tests/maturity-artifacts.test.ts - Verify
examples/evals/capability-scorecard.jsonreflects the shipped capability status, includingacp-cancel-and-event-projection,responses-streaming-adapter,memory-lifecycle,inline-context-references,skill-platform-gates,workspace-checkpoints,credential-pool-rotation,tool-lifecycle-hooks,browser-screenshot-artifact,model-routing-policy-diagnostics,runtime-mutation-checkpoint-rollback, andcli-checkpoint-slash-surface. Treat transactional patch and MCP OAuth/allowlist changes as security/evidence surfaces covered bydocs/security.md,tests/extensions.test.ts,tests/tools.test.ts, andtests/workspace.test.ts, not standalone scorecard IDs unless new capabilities are added. - Review
docs/security.mdand deployment secret configuration for any new trust boundary. - Confirm the deployment security gates cover ACP gateway routes, Responses streaming and tool calls, memory provider hook writes, inline reference labeling, skill materialization safety, checkpoint/rollback revalidation, transactional patch rollback, MCP OAuth allowlists, credential pool isolation, tool lifecycle hook policy inheritance, browser_screenshot artifact metadata, model routing policy diagnostics with credential raw redaction, runtime opt-in mutation checkpoint rollback after final verification failure, and CLI
/checkpoints,/checkpoint <label>,/rollback <id>operations. - Build the container with
docker build -f deploy/Dockerfile -t omni-agent:latest .. - Start a gateway-only deployment and verify
GET /health. - Record benchmark JSON output and any maturity issues in the release notes.