@crvouga/personal 0.1.2 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cli.mjs +1 -1
- package/package.json +3 -3
- package/releasing.md +3 -2
package/cli.mjs
CHANGED
|
@@ -4133,7 +4133,7 @@ function commandError(error, output) {
|
|
|
4133
4133
|
|
|
4134
4134
|
// packages/personal-cli/src/app.ts
|
|
4135
4135
|
import { parseArgs } from "node:util";
|
|
4136
|
-
var VERSION = "0.1.
|
|
4136
|
+
var VERSION = "0.1.3";
|
|
4137
4137
|
function wantsInteractive(args, terminal, ci) {
|
|
4138
4138
|
if (args.includes("--json") || args.includes("--non-interactive"))
|
|
4139
4139
|
return false;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@crvouga/personal",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.3",
|
|
4
4
|
"description": "Interactive, agent-friendly developer fleet command center",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
@@ -37,8 +37,8 @@
|
|
|
37
37
|
"registry": "https://registry.npmjs.org/"
|
|
38
38
|
},
|
|
39
39
|
"personalCli": {
|
|
40
|
-
"contentHash": "
|
|
41
|
-
"sourceCommit": "
|
|
40
|
+
"contentHash": "1ac1f6314fac17a14b6d62ca5f7ef6d567813c1fbe1e5e9b53a7580790a9b076",
|
|
41
|
+
"sourceCommit": "a241493b1e75735369bab9ca2bbcd575f80c5053",
|
|
42
42
|
"dirty": false
|
|
43
43
|
}
|
|
44
44
|
}
|
package/releasing.md
CHANGED
|
@@ -81,7 +81,7 @@ publish-time web 2FA and trusted-publisher setup. npm update notices/progress ar
|
|
|
81
81
|
disabled too; keep npm versions owned by the shared mise lock, not a global
|
|
82
82
|
`npm install -g`. After cancellation or expiry, rerun the command and use its new
|
|
83
83
|
URL, not an earlier session's URL. Treat approval links as private; never paste
|
|
84
|
-
them into reports or shared logs. Registry verification retries version and latest-tag propagation with
|
|
84
|
+
them into reports or shared logs. Registry verification retries version and latest-tag propagation with 310 seconds of bounded propagation waits without republishing. Transient read failures are retried within that same bound. The browser approval is not proof of publication;
|
|
85
85
|
wait for registry-integrity and trusted-publisher verification to finish.
|
|
86
86
|
|
|
87
87
|
## Vault username/password login
|
|
@@ -130,7 +130,8 @@ with anonymous registry configuration and running it on real Node. The required
|
|
|
130
130
|
4. Builds, allowlist-checks, packs and consumer-tests the exact tarball.
|
|
131
131
|
5. Publishes using npm's **GitHub OIDC trusted publishing**, without npm secrets.
|
|
132
132
|
6. Confirms the content hash, SHA-512 integrity and latest tag, with bounded
|
|
133
|
-
read-only retries for registry propagation.
|
|
133
|
+
read-only retries for registry propagation. Registry reads bypass stale CDN
|
|
134
|
+
cache entries and verification waits for matching content and integrity. Unconfirmed outcomes fail rather
|
|
134
135
|
than blindly republish.
|
|
135
136
|
|
|
136
137
|
Publishing is serialized with non-cancelling concurrency. Dispatch **CI** on main
|