feat(scripts): port 1-click deploy and npm trust tooling with lib/tools structure - #11
Merged
Merged
Conversation
…ls structure - Port publish-and-setup-npm-trust and check-publish tools adapted for generated packages - Delineate scripts/ into lib/ (pure helpers, manifest generators) and tools/ (CLI commands) - Declare strict, scoped permission shebangs on all tool scripts - Remove docs/publishing/ runbooks in favor of automated scripts and CONTRIBUTING.md - Update release.yml and repo documentation for the new script paths
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Automates the one-time npm OIDC bootstrap and registry verification by porting
publish-and-setup-npm-trustandcheck-publishfromsystemfsoftware/systemfsoftware, adapted to handle generated platform binary packages rather than workspace-discovered packages.scripts/intoscripts/lib/(pure manifest generators, CLI parsers, targets table, distribution set helpers) andscripts/tools/(executable CLI tools with scoped shebang permissions).scripts/tools/publish-and-setup-npm-trust.tsto discover the root launcher plus the 5 platform packages generated fromtargets.json, stage debut placeholders, and registernpm trust githubOIDC publishers.scripts/tools/check-publish.tsto report live registry presence and provenance attestations with--preflightand--checkvalidation gates.docs/publishing/manuals with a conciseCONTRIBUTING.mdreference..github/workflows/release.ymlandscripts/deno.jsonctasks for thelib/andtools/structure.Validation
deno task lintpassing across all 9 script files.deno task check-matrixpasses with.github/workflows/release.yml.deno task check:publishsuccessfully queriesregistry.npmjs.organd reports status for all 6 packages.deno task publish:unpublished --dry-runplans the staging and trust sequence for debut packages.pnpm lintandpnpm typecheckpassing in workspace.