@lapxo/bound 0.2.2 → 0.2.4

package/.github/workflows/release.yml

@@ -0,0 +1,67 @@
+name: release
+on:
+  workflow_run:
+    workflows: [tag]
+    types: [completed]
+  workflow_dispatch:
+jobs:
+  stage:
+    if: github.event_name == 'workflow_dispatch' || (github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.head_branch == 'main')
+    concurrency: release-delivery
+    environment: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.workflow_run.head_sha || github.sha }}
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+      - run: npm ci --ignore-scripts
+      - run: npm run build
+      - run: npm install --global npm@'12.1.0' --ignore-scripts
+      - name: Prepare release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          TAG="v$(node -p "require('./package.json').version")"
+          printf 'TAG=%s\n' "$TAG" >> "$GITHUB_ENV"
+          git fetch origin "refs/tags/$TAG:refs/tags/$TAG"
+          gh api --paginate "repos/$GITHUB_REPOSITORY/releases" --jq '.[].tag_name' > "$RUNNER_TEMP/release-tags"
+          if grep -Fxq "$TAG" "$RUNNER_TEMP/release-tags"; then
+            printf 'RELEASE %s · exists\n' "$TAG"
+          else
+            gh release create "$TAG" --verify-tag --draft --title "$TAG" --generate-notes
+            printf 'RELEASE %s · draft created · awaiting signed assets\n' "$TAG"
+          fi
+      - name: Read owner approval
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          mkdir .release
+          gh release download "$TAG" --pattern approval-signed --dir .release
+          node dist/cli/verb.js fold --as release .release/approval-signed > .release/verdict
+          cat .release/verdict
+      - name: Stage the approved release archive
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          read -r status digest archive source extra < .release/verdict
+          test "$status" = READY
+          test -z "$extra"
+          gh release download "$TAG" --pattern "$archive" --dir .release
+          printf '%s  %s\n' "${digest#sha256:}" ".release/$archive" | sha256sum -c -
+          expected="$(node -p "require('./package.json').name+'@'+require('./package.json').version")"
+          actual="$(tar -xOf ".release/$archive" package/package.json | node -p "const p=JSON.parse(require('fs').readFileSync(0,'utf8'));p.name+'@'+p.version")"
+          test "$actual" = "$expected"
+          printf 'SOURCE release/%s/%s · %s · declared %s\n' "$TAG" "$archive" "$digest" "$source"
+          gh release edit "$TAG" --draft=false
+          printf 'RELEASE %s · published · %s\n' "$TAG" "$digest"
+          npm stage publish ".release/$archive" --access public --ignore-scripts
+          printf 'STAGED %s · %s · owner approval pending\n' "$actual" "$digest"

package/.github/workflows/test.yml

@@ -0,0 +1,35 @@
+name: test
+on:
+  push:
+    branches: [main]
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        node: [22, 24]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+      - run: npm ci
+      - run: npm run build
+      - name: Run tests
+        run: |
+          set -euo pipefail
+          npm test 2>&1 | tee "$RUNNER_TEMP/bound-tests.log"
+      - run: npm pack --pack-destination "$RUNNER_TEMP" --silent
+      - name: Preserve test logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: bound-node-${{ matrix.node }}
+          path: ${{ runner.temp }}/bound-tests.log
+          if-no-files-found: ignore

package/CITATION.cff

@@ -0,0 +1,19 @@
+cff-version: 1.2.0
+message: "Cite it by the paper it rests on, Two-Sided Constraints on a Valued Lattice."
+type: software
+title: "@lapxo/bound"
+version: "0.2.4"
+authors:
+  - name: "Lapxo"
+license: "MIT"
+preferred-citation:
+  type: article
+  title: "Two-Sided Constraints on a Valued Lattice"
+  authors:
+    - family-names: "Ochoa"
+      given-names: "N."
+  year: 2026
+  version: "1.0.0"
+  publisher:
+    name: "Zenodo"
+  doi: "10.5281/zenodo.21858428"