@agentxm/extension-publish 0.28.4 → 0.28.5

package/dist/src/archive.d.ts

@@ -48,6 +48,8 @@ export interface PlannedZipArchive {
     readonly archive: Uint8Array;
     readonly plan: ArchivePlan;
 }
+/** Whether one archive-relative path survives the declared publish boundary. */
+export declare const isArchivePathIncluded: (archivePath: string, ignore?: ReadonlyArray<string>) => boolean;
 /**
  * Build a zip archive of a directory.
  * Files are stored at the root of the zip (no enclosing directory).

package/dist/src/archive.js

@@ -21,6 +21,8 @@ import { expandGlob } from "./internal/glob.js";
 // eslint-disable-next-line no-restricted-syntax -- ZIP's driver API requires Date; this fixed value never reads the ambient clock.
 const DETERMINISTIC_MTIME = new Date(2020, 0, 1, 0, 0, 0, 0);
 const READ_CONCURRENCY = 16;
+/** Whether one archive-relative path survives the declared publish boundary. */
+export const isArchivePathIncluded = (archivePath, ignore = []) => ignore.every((pattern) => expandGlob(pattern, [archivePath]).length === 0);
 /**
  * Build a zip archive of a directory.
  * Files are stored at the root of the zip (no enclosing directory).

package/dist/src/index.d.ts

@@ -12,7 +12,8 @@ export { PublishFailed } from "./errors.js";
 export { PUBLISHABLE_TYPES, isPublishableType, type PublishableType } from "./publishable-types.js";
 export { runPublishLintGate, type PublishLintArgs } from "./lint-gate.js";
 export { PublishIgnoreError, protectedPublishPaths, publishArchiveOptions, resolvePublishIgnore, } from "./publish-ignore.js";
-export { buildZipArchive, planZipArchive, type ArchivePlan, type ArchivePlanFile, type ArchivePlanPattern, type BuildZipArchiveOptions, type PlannedZipArchive, } from "./archive.js";
+export { buildZipArchive, isArchivePathIncluded, planZipArchive, type ArchivePlan, type ArchivePlanFile, type ArchivePlanPattern, type BuildZipArchiveOptions, type PlannedZipArchive, } from "./archive.js";
+export { assessPublishSourceState, publishSourceRiskCondition, type PublishSourceAssessment, type PublishSourceDifference, type PublishSourceState, } from "./source-state.js";
 export { settlePublish, type PublishSettlement, type PublishSettlementFailure, type SettledPublish, } from "./settlement.js";
 export { exactPublishUploadBinding, previewPublishUploadBinding, publishAuthenticationPreconditions, type PublishGrant, type ResolvedPublishPreview, } from "./authorization.js";
 export { buildPublishJobs, type PublishPlanCandidate } from "./jobs.js";

package/dist/src/index.js

@@ -12,7 +12,8 @@ export { PublishFailed } from "./errors.js";
 export { PUBLISHABLE_TYPES, isPublishableType } from "./publishable-types.js";
 export { runPublishLintGate } from "./lint-gate.js";
 export { PublishIgnoreError, protectedPublishPaths, publishArchiveOptions, resolvePublishIgnore, } from "./publish-ignore.js";
-export { buildZipArchive, planZipArchive, } from "./archive.js";
+export { buildZipArchive, isArchivePathIncluded, planZipArchive, } from "./archive.js";
+export { assessPublishSourceState, publishSourceRiskCondition, } from "./source-state.js";
 export { settlePublish, } from "./settlement.js";
 export { exactPublishUploadBinding, previewPublishUploadBinding, publishAuthenticationPreconditions, } from "./authorization.js";
 export { buildPublishJobs } from "./jobs.js";

package/dist/src/source-state.d.ts

@@ -0,0 +1,31 @@
+import * as Effect from "effect/Effect";
+import { GitDirectoryComparison, type GitOperationFailed } from "@agentxm/extension-sources";
+import type { PlanRiskCondition } from "@agentxm/workspace-operations";
+import type { ArchivePlan } from "./archive.js";
+export interface PublishSourceDifference {
+    readonly path: string;
+    readonly change: "added" | "modified" | "deleted";
+}
+export interface PublishSourceState {
+    readonly basis: "git-head";
+    readonly status: "matches-head" | "differs-from-head" | "no-head";
+    readonly revision?: string;
+    readonly directory: string;
+    readonly differences: ReadonlyArray<PublishSourceDifference>;
+    readonly differenceCount: number;
+    readonly truncated: boolean;
+}
+export interface PublishSourceAssessment {
+    /** Complete identity used to reject source evidence that changed after planning. */
+    readonly fingerprint: string;
+    /** Omitted when the package is not contained in a Git worktree. */
+    readonly state?: PublishSourceState;
+}
+/** Assess only source differences that can change the filtered Registry archive. */
+export declare const assessPublishSourceState: (args: {
+    readonly directory: string;
+    readonly archivePlan: ArchivePlan;
+    readonly ignore?: ReadonlyArray<string>;
+}) => Effect.Effect<PublishSourceAssessment, GitOperationFailed, GitDirectoryComparison>;
+export declare const publishSourceRiskCondition: (fqn: string, state: PublishSourceState | undefined) => PlanRiskCondition | undefined;
+//# sourceMappingURL=source-state.d.ts.map

package/dist/src/source-state.js

@@ -0,0 +1,58 @@
+import * as crypto from "node:crypto";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import { GitDirectoryComparison, } from "@agentxm/extension-sources";
+import { isArchivePathIncluded } from "./archive.js";
+const PUBLIC_DIFFERENCE_LIMIT = 50;
+const sourceFingerprint = (value) => crypto.createHash("sha256").update(JSON.stringify(value)).digest("hex");
+const publicDifferences = (differences) => differences.slice(0, PUBLIC_DIFFERENCE_LIMIT).map(({ path, change }) => ({ path, change }));
+/** Assess only source differences that can change the filtered Registry archive. */
+export const assessPublishSourceState = (args) => Effect.gen(function* () {
+    const git = yield* GitDirectoryComparison;
+    const currentPaths = [...args.archivePlan.included, ...args.archivePlan.excluded]
+        .map(({ path }) => path)
+        .sort((left, right) => left.localeCompare(right));
+    const comparison = yield* git.compare({ directory: args.directory, currentPaths });
+    if (Option.isNone(comparison)) {
+        return { fingerprint: sourceFingerprint({ status: "outside-git" }) };
+    }
+    const materialDifferences = comparison.value.differences.filter(({ path }) => isArchivePathIncluded(path, args.ignore));
+    const status = comparison.value.headRevision === undefined
+        ? "no-head"
+        : materialDifferences.length === 0
+            ? "matches-head"
+            : "differs-from-head";
+    const state = {
+        basis: "git-head",
+        status,
+        ...(comparison.value.headRevision === undefined
+            ? {}
+            : { revision: comparison.value.headRevision }),
+        directory: comparison.value.repositoryDirectory,
+        differences: publicDifferences(materialDifferences),
+        differenceCount: materialDifferences.length,
+        truncated: materialDifferences.length > PUBLIC_DIFFERENCE_LIMIT,
+    };
+    return {
+        state,
+        fingerprint: sourceFingerprint({
+            state,
+            differences: materialDifferences,
+        }),
+    };
+});
+export const publishSourceRiskCondition = (fqn, state) => {
+    if (state === undefined || state.status === "matches-head")
+        return undefined;
+    const detail = state.status === "no-head"
+        ? `${fqn} is inside a Git worktree with no HEAD commit.`
+        : `${fqn} has ${state.differenceCount} Registry archive ${state.differenceCount === 1 ? "path" : "paths"} not represented by Git HEAD ${state.revision ?? "unknown"}.`;
+    return {
+        level: "override-required",
+        id: `publish/archive-not-at-head:${fqn}`,
+        policy: "accept-warnings",
+        requiredFlag: "--accept-warnings",
+        detail,
+    };
+};
+//# sourceMappingURL=source-state.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentxm/extension-publish",
-  "version": "0.28.4",
+  "version": "0.28.5",
   "description": "AXM extension-publish feature: publish selection policy, publication validation, archive planning, authentication requirements, upload settlement, and recovery for the axm CLI. Unstable and unsupported — use the axm.sh CLI.",
   "type": "module",
   "license": "FSL-1.1-MIT",
@@ -18,6 +18,7 @@
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",
+      "axm-source": "./src/index.ts",
       "default": "./dist/src/index.js"
     }
   },
@@ -37,11 +38,12 @@
   "dependencies": {
     "effect": "4.0.0-rc.112",
     "fflate": "^0.8.3",
-    "@agentxm/extension-model": "^0.28.4",
-    "@agentxm/registry-client": "^0.28.4",
-    "@agentxm/extension-workspace": "^0.28.4",
-    "@agentxm/registry-protocol": "^0.28.4",
-    "@agentxm/workspace-operations": "^0.28.4"
+    "@agentxm/extension-sources": "^0.28.5",
+    "@agentxm/extension-model": "^0.28.5",
+    "@agentxm/registry-protocol": "^0.28.5",
+    "@agentxm/registry-client": "^0.28.5",
+    "@agentxm/workspace-operations": "^0.28.5",
+    "@agentxm/extension-workspace": "^0.28.5"
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.0-rc.112",