@amalgm/chat 0.2.8 → 0.2.9-preview.34176088664

package/PURPOSE.md

@@ -202,3 +202,18 @@ instructions. Amp, Gemini CLI, and Kiro were not installed for individual
 acceptance tests.
 
 The public contracts live in `docs/contracts/` and the shipped Chat skill.
+
+## Managed package delivery
+
+Managed package delivery starts from a clean, exact main or preview source
+commit. The workflow occurrence supplies only its generated version and source
+record; tests run against those candidate inputs before packing. Every native
+gate and publication use that same tarball and integrity. A candidate tag makes
+bytes available to release assembly; it never promotes an installed runtime.
+Release tooling remains available inside each owner repository so a developer
+or CI job never needs access to another private product repository.
+Registry credentials are available only to the final protected publication job,
+after every native examination proves the exact candidate bytes.
+Native consumers install the archive as a dependency, so SDK development
+dependencies never become an end-user installation requirement.
+Each admitted owner gate proves its actual checkout equals the managed source.

package/README.md

@@ -103,7 +103,17 @@ npm test
 npm pack --dry-run
 ```
 
-Package releases use `.github/workflows/publish-package.yml`. A reviewed main
-commit is tagged exactly `v<package version>`; trusted npm publishing stages
-that package, and a maintainer approves the staged artifact with 2FA. Manual
-dirty-worktree publishing is not a release path.
+Managed npm delivery uses `.github/workflows/publish-package.yml` after the
+exact main/preview owner checks pass. The occurrence generates a unique
+prerelease version and records its source SHA; it reruns the owner suite, packs
+once, and installs that tarball on Linux, macOS and Windows before publication.
+The `candidate-main`/`candidate-preview` tags are release-assembly inputs and
+never select installed runtimes. `package.json` declares this owner's gates,
+CLI probes, peer-only exports and lifecycle permissions. The standalone runner
+under `scripts/release/` is intentionally copied across owners to preserve
+private repository access boundaries. The final publish step uses the `NPM_TOKEN`
+secret in the `npm-release` environment. Where npm trusted publishing is
+configured for this repository's `publish-package.yml` and that environment,
+the token can be omitted. Authentication does not replace native certification,
+exact source records or artifact integrity; private source repositories do not
+receive npm's public-source provenance.

package/dist/normalizers/claude.d.ts

@@ -235,6 +235,29 @@ export declare function createClaudeNormalizer(events: EventConstructors): {
             method?: string | undefined;
             payload?: unknown;
         } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.started";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.finished";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+        preTokens?: number | null | undefined;
+        postTokens?: number | null | undefined;
+        durationMs?: number | null | undefined;
     } | {
         ts: number;
         type: "warning";
@@ -310,29 +333,6 @@ export declare function createClaudeNormalizer(events: EventConstructors): {
             source: string;
             exact: boolean;
         } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.started";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.finished";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-        preTokens?: number | null | undefined;
-        postTokens?: number | null | undefined;
-        durationMs?: number | null | undefined;
     })[];
     normalizeClaudeMessage: (message: AnyRecord | null | undefined, state?: ClaudeNormalizerState | null) => ({
         ts: number;
@@ -514,6 +514,29 @@ export declare function createClaudeNormalizer(events: EventConstructors): {
             method?: string | undefined;
             payload?: unknown;
         } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.started";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.finished";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+        preTokens?: number | null | undefined;
+        postTokens?: number | null | undefined;
+        durationMs?: number | null | undefined;
     } | {
         ts: number;
         type: "warning";
@@ -589,29 +612,6 @@ export declare function createClaudeNormalizer(events: EventConstructors): {
             source: string;
             exact: boolean;
         } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.started";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.finished";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-        preTokens?: number | null | undefined;
-        postTokens?: number | null | undefined;
-        durationMs?: number | null | undefined;
     })[];
     stableStringify: typeof stableStringify;
     stringifyClaudeContent: typeof stringifyClaudeContent;

package/dist/normalizers/codex.d.ts

@@ -243,6 +243,29 @@ export declare function createCodexNormalizer(events: EventConstructors): {
             method?: string | undefined;
             payload?: unknown;
         } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.started";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+    } | {
+        ts: number;
+        type: "compaction.finished";
+        trigger: "auto" | "manual" | "model_triggered";
+        providerSessionId?: string | null | undefined;
+        raw?: {
+            source: string;
+            method?: string | undefined;
+            payload?: unknown;
+        } | undefined;
+        preTokens?: number | null | undefined;
+        postTokens?: number | null | undefined;
+        durationMs?: number | null | undefined;
     } | {
         ts: number;
         type: "warning";
@@ -318,29 +341,6 @@ export declare function createCodexNormalizer(events: EventConstructors): {
             source: string;
             exact: boolean;
         } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.started";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-    } | {
-        ts: number;
-        type: "compaction.finished";
-        trigger: "auto" | "manual" | "model_triggered";
-        providerSessionId?: string | null | undefined;
-        raw?: {
-            source: string;
-            method?: string | undefined;
-            payload?: unknown;
-        } | undefined;
-        preTokens?: number | null | undefined;
-        postTokens?: number | null | undefined;
-        durationMs?: number | null | undefined;
     })[];
 };
 /** The Codex normalizer set, closed over injected constructors. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/chat",
-  "version": "0.2.8",
+  "version": "0.2.9-preview.34176088664",
   "description": "A provider-agnostic agent chat SDK with ACP content, prepared execution, normalized streams, and usage.",
   "type": "module",
   "license": "UNLICENSED",
@@ -86,7 +86,12 @@
   },
   "scripts": {
     "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.json",
-    "test": "npm run build && node --test"
+    "test": "npm run build && node --test",
+    "release:admit": "node scripts/release/package.mjs admit",
+    "release:prepare": "node scripts/release/package.mjs prepare",
+    "release:examine": "node scripts/release/package.mjs examine",
+    "release:publish": "node scripts/release/package.mjs publish",
+    "test:release": "node --test scripts/release/*.test.mjs"
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.4.0",
@@ -100,5 +105,24 @@
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "typescript": "^5.7.3"
+  },
+  "amalgmRelease": {
+    "schema": 1,
+    "workflow": "verify.yml",
+    "jobs": [
+      "verify"
+    ],
+    "verify": "test",
+    "cli": []
+  },
+  "allowScripts": {
+    "better-sqlite3@12.11.1": true
+  },
+  "gitHead": "ab03320249fad2a201e21714c855a03b8edcc9fd",
+  "amalgmSource": {
+    "repository": "amalgm-inc/amalgm-chat",
+    "branch": "preview",
+    "commit": "ab03320249fad2a201e21714c855a03b8edcc9fd",
+    "occurrence": "34176088664"
   }
 }