@deltabox/toolchain 1.0.7 → 1.1.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,78 +1,324 @@
1
1
  # Changelog
2
2
 
3
- ## 1.0.7 (October 2026)
3
+ ## 1.1.22 (October 2026)
4
4
 
5
5
  <!-- release:start -->
6
6
 
7
7
  ### Bug fixes
8
+ #### Ci
9
+ - Skip the Marketplace publish when VSCE_PAT is unset ([#fe4b3ad](https://github.com/deltabox-studio/toolchain/commit/fe4b3ad) by [T0chi](https://github.com/T0chi))
10
+ - The VS Code Marketplace publish was the only failing release step (no
11
+ VSCE_PAT set). Make it a no-op while the secret is unset and publish
12
+ automatically once it is added to the `toolchain / release` environment.
13
+ - Also remove the temporary OIDC diagnostic step now that the release publishes.
14
+
15
+ <!-- release:end -->
16
+
17
+
18
+ ## 1.1.21 (October 2026)
19
+
20
+ ### Bug fixes
21
+ #### Ci
22
+ - Publish to npm directly, falling back to a staged publish ([#85cffe7](https://github.com/deltabox-studio/toolchain/commit/85cffe7) by [T0chi](https://github.com/T0chi))
23
+ - Try `npm publish` first and fall back to `npm stage publish` on failure, so
24
+ toggling the trusted publisher's publish/stage permissions on npm never breaks
25
+ the release: a direct publish succeeds when allowed, and a staged publish (always
26
+ permitted) is used otherwise.
27
+ ### Documentation
28
+ - Show the published npm version in the README badge ([#5f83ca2](https://github.com/deltabox-studio/toolchain/commit/5f83ca2) by [T0chi](https://github.com/T0chi))
29
+ - Replace the static npm-name badge with a shields.io npm/v badge so the README
30
+ shows the currently published version.
31
+
32
+ ## 1.1.20 (October 2026)
33
+
34
+ ### Bug fixes
35
+ #### Ci
36
+ - Stage npm releases via OIDC instead of publishing directly ([#53d1f52](https://github.com/deltabox-studio/toolchain/commit/53d1f52) by [T0chi](https://github.com/T0chi))
37
+ - Default to `npm stage publish` for OIDC trusted publishing: it always stages
38
+ the version and defers the maintainer's 2FA approval, and is always permitted
39
+ for a trusted publisher (unlike direct `npm publish`, which the package's 2FA
40
+ policy rejects). Drop the automation-token fallback and require npm >= 11.15.1
41
+ (the first with `npm stage`).
42
+
43
+ ## 1.1.19 (October 2026)
44
+
45
+ ### Chores
46
+ #### Ci
47
+ - Add a temporary OIDC diagnostic to the release workflow ([#7b42e33](https://github.com/deltabox-studio/toolchain/commit/7b42e33) by [T0chi](https://github.com/T0chi))
48
+ - The publish still fails after binding the environment, and npm falls back to
49
+ the (automation) token and 403s. Add a temporary step that decodes the OIDC
50
+ claims and calls the token-exchange endpoint directly so the exact
51
+ trusted-publisher mismatch is visible in the log. Removed once fixed.
52
+
53
+ ## 1.1.18 (October 2026)
54
+
55
+ ### Bug fixes
56
+ #### Ci
57
+ - Bind the release job to the OIDC environment ([#7b8f1b4](https://github.com/deltabox-studio/toolchain/commit/7b8f1b4) by [T0chi](https://github.com/T0chi))
58
+ - The npm OIDC trusted publisher is bound to the GitHub environment
59
+ "toolchain / release", but the release job declared no environment. The OIDC
60
+ environment claim therefore did not match, the token exchange failed, and npm
61
+ silently fell back to the placeholder token (the misleading E404).
62
+ - Declare `environment: 'toolchain / release'` on the job and add an optional
63
+ NODE_AUTH_TOKEN fallback (the environment's NPM_TOKEN) to the publish step.
64
+ OIDC is still tried first, so the token is never relied on.
8
65
  #### Vscode
9
- - Package the VSIX without vp; ignore vite.config.ts; untrack *.vsix ([#9d1e403](https://github.com/deltabox-studio/toolchain/commit/9d1e403) by [T0chi](https://github.com/T0chi))
10
- ### Continuous integration
66
+ - Spawn the CLI safely on Windows ([#99e3ad1](https://github.com/deltabox-studio/toolchain/commit/99e3ad1) by [T0chi](https://github.com/T0chi))
67
+ - `spawn('npx.cmd', ...)` throws EINVAL synchronously on Windows, and
68
+ `captureCli`/`runCli` call spawn inside a Promise executor, so the throw
69
+ rejected the promise and the command aborted with no UI ("nothing happens").
70
+ This fired whenever the CLI resolved to the npx.cmd fallback (a workspace
71
+ without a local @deltabox/toolchain), e.g. "From template..." which round-trips
72
+ template:list --json through captureCli.
73
+ - Add a pure win-spawn module (ported from the shared spawnCross) that escapes
74
+ the command + args and runs a .cmd shim through cmd.exe; use it from spawnCli.
75
+ captureCli/runCli no longer reject on a spawn failure. Also fix cliInvocation
76
+ for the integrated terminal: process.execPath is the VS Code binary in the
77
+ extension host, so it now uses `npx dbx` / `npx --yes @deltabox/toolchain`.
78
+
79
+ ## 1.1.17 (October 2026)
80
+
81
+ ### Bug fixes
82
+ #### Ci
83
+ - Upgrade npm before publishing for OIDC trusted publishing ([#657d4b9](https://github.com/deltabox-studio/toolchain/commit/657d4b9) by [T0chi](https://github.com/T0chi))
84
+ - Node 22 bundles npm 10.x, but npm OIDC trusted publishing requires
85
+ npm >= 11.5.1. Without it `npm publish` fell back to token auth and the
86
+ registry answered a misleading 404, so every release since 1.0.7 failed
87
+ at the publish step. Add an explicit npm upgrade step before the publish
88
+ step in the generated release workflow.
89
+
90
+ ## 1.1.16 (October 2026)
91
+
92
+ ### Documentation
93
+ - Reindent the README table of contents ([#5646bcc](https://github.com/deltabox-studio/toolchain/commit/5646bcc) by [T0chi](https://github.com/T0chi))
94
+ - Theme-aware logo (light/dark) + invert the home hero logo in dark mode ([#fd3691f](https://github.com/deltabox-studio/toolchain/commit/fd3691f) by [T0chi](https://github.com/T0chi))
95
+
96
+ ## 1.1.15 (October 2026)
97
+
98
+ ### Chores
99
+ - Formatted README.md ([#4485c48](https://github.com/deltabox-studio/toolchain/commit/4485c48) by [T0chi](https://github.com/T0chi))
100
+
101
+ ## 1.1.14 (October 2026)
102
+
103
+ ### Documentation
104
+ - Highlight the Vite/Vite+ plugin in the README and docs ([#8218179](https://github.com/deltabox-studio/toolchain/issues/8218179) by [T0chi](https://github.com/T0chi))
105
+
106
+ ## 1.1.13 (October 2026)
107
+
108
+ ### Chores
109
+ - Re-enable npm provenance (repo is public) ([#71ed60d](https://github.com/deltabox-studio/toolchain/commit/71ed60d) by [T0chi](https://github.com/T0chi))
110
+
111
+ ## 1.1.12 (October 2026)
112
+
113
+ ### Chores
114
+ - Disable npm provenance (unsupported from a private repo) ([#f118193](https://github.com/deltabox-studio/toolchain/commit/f118193) by [T0chi](https://github.com/T0chi))
115
+
116
+ ## 1.1.11 (October 2026)
117
+
118
+ ### Documentation
119
+ - Drop backticks from the landing feature cards ([#9d6ed28](https://github.com/deltabox-studio/toolchain/commit/9d6ed28) by [T0chi](https://github.com/T0chi))
120
+ - Use currentColor for the logo so it shows on light mode ([#907a07e](https://github.com/deltabox-studio/toolchain/commit/907a07e) by [T0chi](https://github.com/T0chi))
121
+ - Fix README formatting ([#2dc01d4](https://github.com/deltabox-studio/toolchain/commit/2dc01d4) by [T0chi](https://github.com/T0chi))
122
+ - Make the logo black in light mode (white in dark) ([#c6d9410](https://github.com/deltabox-studio/toolchain/commit/c6d9410) by [T0chi](https://github.com/T0chi))
123
+ ### CI
124
+ - Auto-fix format + lint in the CI check step ([#9da9797](https://github.com/deltabox-studio/toolchain/commit/9da9797) by [T0chi](https://github.com/T0chi))
125
+
126
+ ## 1.1.10 (October 2026)
127
+
128
+ ### Chores
129
+ - Removed unnecessary shields ([#1efbe68](https://github.com/deltabox-studio/toolchain/commit/1efbe68) by [T0chi](https://github.com/T0chi))
130
+
131
+ ## 1.1.9 (October 2026)
132
+
133
+ ### Documentation
134
+ - Reindent the README lists ([#1d41d68](https://github.com/deltabox-studio/toolchain/commit/1d41d68) by [T0chi](https://github.com/T0chi))
135
+ - Mirror the VS Code extension installation guide from the README ([#1889832](https://github.com/deltabox-studio/toolchain/issues/1889832) by [T0chi](https://github.com/T0chi))
136
+ ### Chores
137
+ - Update VS Code extension installation guide in README.md ([#aab06d5](https://github.com/deltabox-studio/toolchain/commit/aab06d5) by [T0chi](https://github.com/T0chi))
138
+
139
+ ## 1.1.8 (October 2026)
140
+
141
+ ### Documentation
142
+ - Hide the site title next to the navbar logo ([#c7935ec](https://github.com/deltabox-studio/toolchain/commit/c7935ec) by [T0chi](https://github.com/T0chi))
143
+
144
+ ## 1.1.7 (October 2026)
145
+
146
+ ### Chores
147
+ - Revise CLI commands and VS Code extension details ([#7f043f9](https://github.com/deltabox-studio/toolchain/commit/7f043f9) by [T0chi](https://github.com/T0chi))
148
+
149
+ ## 1.1.6 (October 2026)
150
+
151
+ ### Documentation
152
+ - Use box2d.svg for the navbar/hero logo and box2d_bg.svg for the favicon ([#2c7a094](https://github.com/deltabox-studio/toolchain/commit/2c7a094) by [T0chi](https://github.com/T0chi))
153
+
154
+ ## 1.1.5 (October 2026)
155
+
156
+ ### Bug fixes
157
+ #### Changelog
158
+ - Bump only the version field and stage only owned files ([#8b14cc9](https://github.com/deltabox-studio/toolchain/commit/8b14cc9) by [T0chi](https://github.com/T0chi))
159
+
160
+ ## 1.1.4 (October 2026)
161
+
162
+ ### Documentation
163
+ - Trim the README and refresh the docs/license sections ([#a20deb5](https://github.com/deltabox-studio/toolchain/commit/a20deb5) by [T0chi](https://github.com/T0chi))
164
+ ### Chores
165
+ - Name the changelog and tsconfig bins explicitly ([#50144cd](https://github.com/deltabox-studio/toolchain/commit/50144cd) by [T0chi](https://github.com/T0chi))
166
+
167
+ ## 1.1.3 (October 2026)
168
+
169
+ ### Chores
170
+ #### Changelog
171
+ - Title the CI section "CI" instead of "Continuous integration" ([#09deb7f](https://github.com/deltabox-studio/toolchain/commit/09deb7f) by [T0chi](https://github.com/T0chi))
172
+
173
+ ## 1.1.2 (October 2026)
174
+
175
+ ### Documentation
176
+ - Add a tests badge to the README ([#01513ee](https://github.com/deltabox-studio/toolchain/commit/01513ee) by [T0chi](https://github.com/T0chi))
177
+ - Fix CHANGELOG.md mojibake and add backticks to code refs ([#6b721eb](https://github.com/deltabox-studio/toolchain/commit/6b721eb) by [T0chi](https://github.com/T0chi))
178
+
179
+ ## 1.1.1 (October 2026)
180
+
181
+ ### Documentation
182
+
183
+ - Publish `config.schema.json` at the docs site root ([#b7680cb](https://github.com/deltabox-studio/toolchain/commit/b7680cb) by [T0chi](https://github.com/T0chi))
184
+ - The VitePress build now copies the generated dbx JSON schema into the dist
185
+ root, so it is served at https://toolchain.deltabox.studio/config.schema.json.
186
+
187
+ ### CI
188
+
11
189
  #### Release
12
- - Release on push to main (tag + GitHub Release + npm + Marketplace) ([#4714b1a](https://github.com/deltabox-studio/toolchain/commit/4714b1a) by [T0chi](https://github.com/T0chi))
13
- - Replaces the generated release-PR workflow with a hand-written one that, on
14
- each push to main, packages the VS Code extension, creates the v<version> tag
15
- and a GitHub Release (notes from CHANGELOG.md + the .vsix asset), publishes
16
- @deltabox/toolchain to npm, and publishes the extension to the VS Code
17
- Marketplace. Idempotent: skipped when the tag already exists.
18
190
 
19
- <!-- release:end -->
191
+ - Publish to npm via trusted publishing (OIDC) ([#41be869](https://github.com/deltabox-studio/toolchain/commit/41be869) by [T0chi](https://github.com/T0chi))
192
+ - Drop the `NPM_TOKEN`-based `yarn npm publish` (which also staged). Use npm
193
+ trusted publishing: `id-token: write`, setup-node `registry-url`, `yarn pack`
194
+ (resolves `catalog:`/`workspace:`) + `npm publish <tarball>` — provenance is
195
+ generated automatically. Re-enable `publishConfig.provenance`.
196
+
197
+ ## 1.1.0 (October 2026)
198
+
199
+ ### New features
200
+
201
+ #### Vite
202
+
203
+ - Add a `dbx()` Vite+ plugin and `defineDbxConfig` wrapper ([#a1edaf9](https://github.com/deltabox-studio/toolchain/commit/a1edaf9) by [T0chi](https://github.com/T0chi))
204
+ - Lets Vite+-only consumers drive dbx from `vite.config.ts`: `dbx()` runs
205
+ `dbx sync` before dev/build (or `dbx sync --check` in CI) and re-syncs on
206
+ input changes; `defineDbxConfig()` also registers the `vp run dbx:*` tasks
207
+ (Vite+ reads `run.tasks` from the static config, not a plugin hook).
208
+
209
+ ### Chores
210
+
211
+ - Name the `changelog`/`tsconfig` bins explicitly ([#94c6c17](https://github.com/deltabox-studio/toolchain/commit/94c6c17) by [T0chi](https://github.com/T0chi))
212
+
213
+ ### Package changes
214
+
215
+ #### Updated
216
+
217
+ - `vite` `^8.3.0` → `>=5`
218
+
219
+ ## 1.0.8 (October 2026)
220
+
221
+ ### CI
20
222
 
223
+ #### Release
224
+
225
+ - Manage the release workflow from `dbx.config.ts` ([#bf55b70](https://github.com/deltabox-studio/toolchain/commit/bf55b70) by [T0chi](https://github.com/T0chi))
226
+ - Drop the hand-written `.github/workflows/release.yml`; the release flow (tag +
227
+ GitHub Release with the VSIX + notes, `npm publish`, Marketplace publish) is
228
+ now defined under `changelog.workflows.release` in the config and generated
229
+ by `dbx sync`. Removes the need to hand-write CI.
230
+
231
+ ## 1.0.7 (October 2026)
232
+
233
+ ### Bug fixes
234
+
235
+ #### Vscode
236
+
237
+ - Package the VSIX without `vp`; ignore `vite.config.ts`; untrack `*.vsix` ([#9d1e403](https://github.com/deltabox-studio/toolchain/commit/9d1e403) by [T0chi](https://github.com/T0chi))
238
+
239
+ ### CI
240
+
241
+ #### Release
242
+
243
+ - Release on push to `main` (tag + GitHub Release + npm + Marketplace) ([#4714b1a](https://github.com/deltabox-studio/toolchain/commit/4714b1a) by [T0chi](https://github.com/T0chi))
244
+ - Replaces the generated release-PR workflow with a hand-written one that, on
245
+ each push to `main`, packages the VS Code extension, creates the `v<version>`
246
+ tag and a GitHub Release (notes from `CHANGELOG.md` + the `.vsix` asset),
247
+ publishes `@deltabox/toolchain` to npm, and publishes the extension to the VS
248
+ Code Marketplace. Idempotent: skipped when the tag already exists.
21
249
 
22
250
  ## 1.0.6 (October 2026)
23
251
 
24
252
  ### Documentation
253
+
25
254
  - Add GitHub social links to the navbar and footer ([#2925f1a](https://github.com/deltabox-studio/toolchain/commit/2925f1a) by [T0chi](https://github.com/T0chi))
255
+
26
256
  ### Chores
27
- - Name the changelog/tsconfig bins explicitly and disable publish provenance ([#ba2737d](https://github.com/deltabox-studio/toolchain/commit/ba2737d) by [T0chi](https://github.com/T0chi))
257
+
258
+ - Name the `changelog`/`tsconfig` bins explicitly and disable publish provenance ([#ba2737d](https://github.com/deltabox-studio/toolchain/commit/ba2737d) by [T0chi](https://github.com/T0chi))
28
259
 
29
260
  ## 1.0.5 (October 2026)
30
261
 
31
262
  ### Documentation
263
+
32
264
  - Update tagline ([#e1fa86e](https://github.com/deltabox-studio/toolchain/commit/e1fa86e) by [T0chi](https://github.com/T0chi))
33
265
 
34
266
  ## 1.0.4 (October 2026)
35
267
 
36
268
  ### Documentation
37
- - Add a table of contents to the README ([#b2702e8](https://github.com/deltabox-studio/toolchain/commit/b2702e8) by [T0chi](https://github.com/T0chi))
269
+
270
+ - Add a table of contents to the `README` ([#b2702e8](https://github.com/deltabox-studio/toolchain/commit/b2702e8) by [T0chi](https://github.com/T0chi))
271
+
38
272
  ### Chores
273
+
39
274
  - Fix grammar in the package description ([#8a199b8](https://github.com/deltabox-studio/toolchain/commit/8a199b8) by [T0chi](https://github.com/T0chi))
40
275
 
41
276
  ## 1.0.3 (October 2026)
42
277
 
43
278
  ### Documentation
44
- - Highlight the config generator and link toolchain.deltabox.studio ([#836cd36](https://github.com/deltabox-studio/toolchain/commit/836cd36) by [T0chi](https://github.com/T0chi))
279
+
280
+ - Highlight the config generator and link `toolchain.deltabox.studio` ([#836cd36](https://github.com/deltabox-studio/toolchain/commit/836cd36) by [T0chi](https://github.com/T0chi))
281
+
45
282
  ### Chores
46
- - Exclude CHANGELOG.md from Oxfmt (the changelog pipeline owns its format) ([#f6ad3c0](https://github.com/deltabox-studio/toolchain/commit/f6ad3c0) by [T0chi](https://github.com/T0chi))
47
- - Add MPL-2.0 LICENSE and the project homepage ([#cea0fb5](https://github.com/deltabox-studio/toolchain/commit/cea0fb5) by [T0chi](https://github.com/T0chi))
283
+
284
+ - Exclude `CHANGELOG.md` from Oxfmt (the changelog pipeline owns its format) ([#f6ad3c0](https://github.com/deltabox-studio/toolchain/commit/f6ad3c0) by [T0chi](https://github.com/T0chi))
285
+ - Add MPL-2.0 `LICENSE` and the project homepage ([#cea0fb5](https://github.com/deltabox-studio/toolchain/commit/cea0fb5) by [T0chi](https://github.com/T0chi))
48
286
 
49
287
  ## 1.0.2 (October 2026)
50
288
 
51
289
  ### Tests
290
+
52
291
  #### Changelog
292
+
53
293
  - Update the release workflow reference fixture ([#e7efe0a](https://github.com/deltabox-studio/toolchain/commit/e7efe0a) by [T0chi](https://github.com/T0chi))
54
294
 
55
295
  ## 1.0.1 (October 2026)
56
296
 
57
297
  ### Bug fixes
298
+
58
299
  #### Changelog
59
- - Tolerate a missing CHANGELOG.md in the release workflow ([#18ad219](https://github.com/deltabox-studio/toolchain/commit/18ad219) by [T0chi](https://github.com/T0chi))
60
- - The release PR job extracted notes with awk, which failed when CHANGELOG.md
61
- did not exist yet (a fresh repo). Fall back to an empty notes string.
62
- - Create CHANGELOG.md when missing; ignore dry-run output ([#f5e4926](https://github.com/deltabox-studio/toolchain/commit/f5e4926) by [T0chi](https://github.com/T0chi))
63
- - prependChangelogEntry read the existing file unconditionally, so the first
64
- run on a repo without a CHANGELOG.md failed with ENOENT. Seed it with a
65
- '# Changelog' header instead. Also gitignore CHANGELOG.proposed.md.
66
- - Resolve repo root from cwd instead of the module location ([#5278e57](https://github.com/deltabox-studio/toolchain/commit/5278e57) by [T0chi](https://github.com/T0chi))
67
- - Running dbx changelog from source (or from the published package in
68
- node_modules) walked up from import.meta.url and landed on the wrong
69
- package.json, so it looked for CHANGELOG.md in the wrong directory and
70
- failed. Resolve the nearest package.json above the working directory instead.
300
+
301
+ - Tolerate a missing `CHANGELOG.md` in the release workflow ([#18ad219](https://github.com/deltabox-studio/toolchain/commit/18ad219) by [T0chi](https://github.com/T0chi))
302
+ - The release PR job extracted notes with `awk`, which failed when
303
+ `CHANGELOG.md` did not exist yet (a fresh repo). Fall back to an empty notes
304
+ string.
305
+ - Create `CHANGELOG.md` when missing; ignore dry-run output ([#f5e4926](https://github.com/deltabox-studio/toolchain/commit/f5e4926) by [T0chi](https://github.com/T0chi))
306
+ - `prependChangelogEntry` read the existing file unconditionally, so the first
307
+ run on a repo without a `CHANGELOG.md` failed with `ENOENT`. Seed it with a
308
+ `# Changelog` header instead. Also gitignore `CHANGELOG.proposed.md`.
309
+ - Resolve repo root from `cwd` instead of the module location ([#5278e57](https://github.com/deltabox-studio/toolchain/commit/5278e57) by [T0chi](https://github.com/T0chi))
310
+ - Running `dbx changelog` from source (or from the published package in
311
+ `node_modules`) walked up from `import.meta.url` and landed on the wrong
312
+ `package.json`, so it looked for `CHANGELOG.md` in the wrong directory and
313
+ failed. Resolve the nearest `package.json` above the working directory
314
+ instead.
315
+
71
316
  ### Chores
317
+
72
318
  - Add extension keyword ([#99721f3](https://github.com/deltabox-studio/toolchain/commit/99721f3) by [T0chi](https://github.com/T0chi))
73
- - Drop Netlify config (docs move to Railway); move PLAN.md out of the repo ([#e51b714](https://github.com/deltabox-studio/toolchain/commit/e51b714) by [T0chi](https://github.com/T0chi))
319
+ - Drop Netlify config (docs move to Railway); move `PLAN.md` out of the repo ([#e51b714](https://github.com/deltabox-studio/toolchain/commit/e51b714) by [T0chi](https://github.com/T0chi))
74
320
  - Update package description and keywords ([#d75b503](https://github.com/deltabox-studio/toolchain/commit/d75b503) by [T0chi](https://github.com/T0chi))
75
- - Initial commit of @deltabox/toolchain ([#ed4673b](https://github.com/deltabox-studio/toolchain/commit/ed4673b) by [T0chi](https://github.com/T0chi))
76
- - Self-hosts CI + changelog: dbx.config.ts drives the generated workflows,
77
- commitlint config and Conventional-Commits VS Code settings. Config file is
78
- dbx.config.* with sections wrapped under oolchain.
321
+ - Initial commit of `@deltabox/toolchain` ([#ed4673b](https://github.com/deltabox-studio/toolchain/commit/ed4673b) by [T0chi](https://github.com/T0chi))
322
+ - Self-hosts CI + changelog: `dbx.config.ts` drives the generated workflows,
323
+ commitlint config and Conventional-Commits VS Code settings. Config file is
324
+ `dbx.config.*` with sections wrapped under `toolchain`.