@crvouga/personal 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/releasing.md CHANGED
@@ -43,8 +43,9 @@ and configures/verifies its GitHub trusted publisher. Approve npm login and any
43
43
  npm account/2FA approval in your own terminal/browser. No npm password, recovery
44
44
  code or long-lived publishing token needs to be supplied to this project.
45
45
  The trusted publisher is **`crvouga/personal` / `ci.yml`**, with direct publishing
46
- permission. npm validates the calling workflow for reusable workflows, so this
47
- must be `ci.yml`, not the reusable `release-personal-cli.yml` filename.
46
+ permission. The publishing job runs directly in `ci.yml` so the registered
47
+ workflow and executing workflow have the same identity. Do not move publication
48
+ into a reusable workflow: its OIDC identity can differ from the registered publisher.
48
49
 
49
50
  Bootstrap is retryable: if content is already published, it only checks/configures
50
51
  the publisher. Existing publishers are preserved; no connection is revoked or
@@ -74,7 +75,7 @@ publish-time web 2FA and trusted-publisher setup. npm update notices/progress ar
74
75
  disabled too; keep npm versions owned by the shared mise lock, not a global
75
76
  `npm install -g`. After cancellation or expiry, rerun the command and use its new
76
77
  URL, not an earlier session's URL. Treat approval links as private; never paste
77
- them into reports or shared logs. The browser approval is not proof of publication;
78
+ them into reports or shared logs. Registry verification retries version and latest-tag propagation with 100 seconds of bounded propagation waits without republishing. Transient read failures are retried within that same bound. The browser approval is not proof of publication;
78
79
  wait for registry-integrity and trusted-publisher verification to finish.
79
80
 
80
81
  ## Vault username/password login
@@ -113,8 +114,8 @@ an environment-variable reference, not the token itself.
113
114
  The main **CI** workflow validates the CLI on Linux/macOS/Windows and Node
114
115
  22/24/26, including installing the packed distribution into a clean directory
115
116
  with anonymous registry configuration and running it on real Node. The required
116
- **Check** includes this job. After Check/Fleet pass on main, the reusable
117
- `release-personal-cli.yml` workflow:
117
+ **Check** includes this job. After Check/Fleet pass on main, the release job directly in
118
+ `ci.yml`:
118
119
 
119
120
  1. Reads the public registry and hashes the release inputs.
120
121
  2. Skips publication when the published content hash already matches.
package/schema.json CHANGED
@@ -36,7 +36,17 @@
36
36
  "uniqueItems": true,
37
37
  "default": ["github", "vault", "t3", "toolchain"],
38
38
  "items": {
39
- "enum": ["github", "vault", "t3", "vscode", "toolchain"]
39
+ "enum": [
40
+ "github",
41
+ "vault",
42
+ "t3",
43
+ "vscode",
44
+ "toolchain",
45
+ "codex",
46
+ "claude",
47
+ "services",
48
+ "workstation"
49
+ ]
40
50
  }
41
51
  }
42
52
  }