fix(release): recover solid-query stable collision

[kattsushi]

Closes #249

Type

• Bug fix
• New feature
• Documentation only
• Code refactoring
• Maintenance/tooling
• Breaking change

Summary

Recover the Solid Query stable-version collision without moving latest to the stale 0.5.12 tarball. Add one exact corrective beta path for 0.5.13-beta.0, then update the protected stable matrix to 0.5.13.

Root cause

npm already contains @effectify/solid-query@0.5.12, published before the current validated beta and with different package contents. Its latest remains 0.5.11; promoting that old tarball would not promote the current beta code.

Changes

• Permit one exact manual beta PREPARE singleton: @effectify/solid-query.
• Require positional Nx prepatch, preid=beta, disabled git/staging effects, exact target 0.5.13-beta.0, and exactly two changed paths.
• Structurally suppress only the exact corrective merge 0.5.12-beta.0 → 0.5.13-beta.0.
• Preserve the existing exact seven-project beta incident path and exact-SHA beta FINALIZE.
• Amend protected stable PREPARE/FINALIZE, docs, contracts, and canonical spec to 0.5.13-beta.0 → 0.5.13 for Solid Query.
• Keep the stale 0.5.12 and every prerelease artifact immutable.

Required delivery order

1. Merge this implementation PR.
2. PREPARE/review/merge/FINALIZE @effectify/solid-query@0.5.13-beta.0.
3. PREPARE/review/merge/FINALIZE all seven stable versions, with Solid Query 0.5.13.

Verification

• Strict TDD RED: existing contract rejected missing corrective behavior.
• GREEN: release-policy contract 19/19, zero failures/skips.
• Mutations cover arbitrary singleton, wrong specifier/version/counter/paths, message-only suppression, old stable matrix, and destructive repair.
• Ruby Psych parsed both workflows.
• Nx affected test/typecheck/lint/build passed.
• Repository format and git diff --check passed.
• Exactly five files changed: 90 additions, 22 deletions.

Safety

• No Nx release lifecycle command was executed locally because the lifecycle guard correctly blocked the dry-run command.
• No workflow dispatch, release branch, protected ref, tag, GitHub Release, npm version, or dist-tag was created or changed.
• Merge does not authorize corrective beta PREPARE or any publication; those remain separate exact-SHA human decisions.

[coderabbitai]

Warning

Review limit reached

Next included review available in 18 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 21b303a4-b5c2-45eb-b7e0-4b0c7891514a

📥 Commits

Reviewing files that changed from the base of the PR and between b0ce894 and 1437a61.

📒 Files selected for processing (5)

• .github/SETUP.md
• .github/workflows/cd.yml
• .github/workflows/release-stable.yml
• openspec/specs/protected-stable-promotion/spec.md
• scripts/release-policy-contract.test.mjs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}