@crossdelta/platform-sdk 0.26.13 → 0.26.15

package/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to `@crossdelta/platform-sdk` will be documented in this fil
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.26.15] - 2026-11-04
+
+### Fixed
+- **The generated `lint-and-tests.yml` follows the workspace workflow again.** The template missed the
+  split lint steps (Biome lint, Biome format, custom lint rules and their tests) and the new
+  `typecheck` job, which type-checks the affected packages with each package's own tsconfig.
+  The sync leaves out what only exists in the source repository: the Biome format step for
+  `packages/jackherd` and `packages/pf-mcp`, the custom lint rule steps and the `KNOWN_RED` skip
+  list of the typecheck job, so a generated workspace has no step pointing at a missing path.
+
+## [0.26.14] - 2026-11-02
+
+### Fixed
+- **The generated `build-and-deploy.yml` installs the Pulumi CLI before its first pulumi call.**
+  Only `Pulumi up` installed the CLI through `pulumi/actions`; the client build upload reads the
+  bucket from `pulumi stack output` and the deploy job's image comparison runs ahead of `Pulumi up`,
+  both relying on a CLI the runner image used to ship. On `ubuntu-26.04` they failed with
+  `pulumi: command not found` (exit 127). The template's deploy job now installs the CLI
+  unconditionally; its build job has no client build upload to need it.
+
+## [0.26.13] - 2026-10-31
+
+### Removed
+- **The `cap:build:android:pilot` task is gone from the workspace `turbo.json` template.** The script
+  built debug-signed production APKs, which a properly signed release cannot update.
+
 ## [0.26.12] - 2026-10-28
 
 ### Fixed

package/bin/templates/workspace/.github/workflows/build-and-deploy.yml.hbs

@@ -483,6 +483,12 @@ jobs:
           npm-token: $\{{ github.token }}
           ignore-scripts: 'true'
 
+      # The runner image no longer ships the Pulumi CLI (ubuntu-26.04, 2026-11-02), and the first
+      # `pulumi` call of this job is the comparison below, ahead of `Pulumi up`. Without a `command`
+      # the action only installs it.
+      - name: Install the Pulumi CLI
+        uses: pulumi/actions@v7
+
       # The scopes this deploy moves to another image than the stack runs, from the stack's
       # `scopeImages` output of the last `up`. The steps that follow a new image (the Studio smoke
       # check among them) hang off this list rather than off a build marker: a dispatch that builds

package/bin/templates/workspace/.github/workflows/lint-and-tests.yml.hbs

@@ -17,7 +17,7 @@ permissions:
   contents: read
   pull-requests: read
 
-# A draft skips lint and test under their own check names: GitHub shows the newest check run per
+# A draft skips lint, test and typecheck under their own check names: GitHub shows the newest check run per
 # name, and a draft push followed at once by `gh pr ready` leaves two runs on one commit, so a
 # skipped "lint" could land after, and hide, the real one. A docs-only PR runs them but skips every
 # step after the file check, so both end as a success and a required check never waits for a run
@@ -49,9 +49,9 @@ jobs:
           cache-restore-keys: bun-v4-$\{{ runner.os }}-
           ignore-scripts: 'true'
 
-      - name: Run Linter
+      - name: Biome lint
         if: steps.docs-only.outputs.docs_only != 'true'
-        run: bun run --if-present lint
+        run: bunx biome lint .
 
       - name: Component manifest
         if: steps.docs-only.outputs.docs_only != 'true'
@@ -131,6 +131,64 @@ jobs:
             bun run --if-present test
           fi
 
+  # Types are checked per package with the package's own tsconfig, as `scripts/pre-commit-checks.ts`
+  # does. The packages are built first (the install runs the root `prepare`): a package's types
+  # resolve through its dependencies' dist.
+  typecheck:
+    name: $\{{ github.event.pull_request.draft && 'typecheck (draft)' || 'typecheck' }}
+    if: github.event.pull_request.draft == false
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 2
+
+      - name: Check for docs-only changes
+        id: docs-only
+        uses: ./.github/actions/pr-docs-only
+        with:
+          patterns: docs/**/*.md
+          github-token: $\{{ github.token }}
+
+      - name: Setup Bun and install dependencies
+        if: steps.docs-only.outputs.docs_only != 'true'
+        uses: ./.github/actions/setup-bun-install
+        with:
+          enable-cache: 'true'
+          cache-key: bun-v4-$\{{ runner.os }}-$\{{ hashFiles('bun.lock', 'bunfig.toml') }}
+          cache-restore-keys: bun-v4-$\{{ runner.os }}-
+
+      # Same scope rule as the test job: `turbo ls --affected` names the changed packages and their
+      # dependents, and a change to a root file every package reads checks them all.
+      - name: Run Typecheck
+        if: steps.docs-only.outputs.docs_only != 'true'
+        env:
+          GLOBAL_PATHS: package.json bunfig.toml tsconfig.json .npmrc .bun-version patches/ .github/workflows/lint-and-tests.yml .github/actions/setup-bun-install/
+          TURBO_SCM_BASE: HEAD^1
+          TURBO_SCM_HEAD: HEAD
+        run: |
+          # shellcheck disable=SC2086 # GLOBAL_PATHS is a space-separated pathspec list
+          CHANGED=$(git diff --name-only HEAD^1 HEAD -- $GLOBAL_PATHS | head -1)
+          if [ -n "$CHANGED" ]; then
+            echo "::notice::${CHANGED} changed: typechecking every package."
+            PACKAGES=$(bunx turbo ls --output=json | jq -r '.packages.items[].path')
+          else
+            PACKAGES=$(bunx turbo ls --affected --output=json | jq -r '.packages.items[].path')
+          fi
+          FAILED=""
+          for PACKAGE in $PACKAGES; do
+            [ -f "$PACKAGE/tsconfig.json" ] || continue
+            echo "::group::tsc $PACKAGE"
+            (cd "$PACKAGE" && bunx tsc --noEmit) || FAILED="$FAILED $PACKAGE"
+            echo "::endgroup::"
+          done
+          if [ -n "$FAILED" ]; then
+            echo "::error::Type errors in:${FAILED}"
+            exit 1
+          fi
+
   e2e:
     runs-on: ubuntu-latest
     timeout-minutes: 30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossdelta/platform-sdk",
-  "version": "0.26.13",
+  "version": "0.26.15",
   "description": "Platform toolkit for event-driven microservices — keeping code and infrastructure in lockstep.",
   "keywords": [
     "cli",