@mannyc1/ts-release 0.0.1 → 0.0.2

package/dist/targets/npm.js

@@ -1,15 +1,47 @@
 import * as Effect from "effect/Effect";
-import { CommandSpec, irreversibleGate, noApprovalGate, PublishCommandOperation, ValidateCommandOperation } from "../domain/operation.js";
+import { CommandSpec, irreversibleGate, noApprovalGate, PublishCommandOperation, ValidateCommandOperation, VerifyRemoteOperation } from "../domain/operation.js";
+import { TargetAuthSetup, TargetCapabilities, TargetRequiredPermission } from "../domain/target.js";
 import { rejectNoDryRunInStrictMode, targetCapabilitiesFor, validationNoteOperation, validationStrategyForDryRun } from "./adapter-helpers.js";
-const envNames = (target) => target.tokenEnv === undefined ? [] : [target.tokenEnv];
+const isTrustedPublishing = (target) => target.trustedPublishing !== undefined;
+const envNames = (target) => isTrustedPublishing(target) || target.tokenEnv === undefined ? [] : [target.tokenEnv];
+const trustedPublishingRequiredEnvNames = [
+    "ACTIONS_ID_TOKEN_REQUEST_URL",
+    "ACTIONS_ID_TOKEN_REQUEST_TOKEN"
+];
+const requiredAuthEnvNames = (target) => isTrustedPublishing(target) ? trustedPublishingRequiredEnvNames : envNames(target);
+const redactedAuthEnvNames = (target) => isTrustedPublishing(target) ? trustedPublishingRequiredEnvNames : envNames(target);
 const npmCommand = (target, args, cwd, includeAuth) => CommandSpec.make({
     executable: "npm",
     args: [...args],
     ...(cwd === undefined ? {} : { cwd }),
-    requiredEnv: includeAuth ? envNames(target) : [],
-    redactedEnv: includeAuth ? envNames(target) : []
+    requiredEnv: includeAuth ? requiredAuthEnvNames(target) : [],
+    redactedEnv: includeAuth ? redactedAuthEnvNames(target) : []
 });
-export const npmTargetCapabilities = (target) => targetCapabilitiesFor(target, validationStrategyForDryRun(target.dryRunSupport));
+const trustedPublishingAuthSetup = (workflow) => TargetAuthSetup.make({
+    runsIn: "ci",
+    provider: "github-actions",
+    workflow,
+    requiredPermissions: [
+        TargetRequiredPermission.make({ name: "id-token", value: "write" })
+    ],
+    prerequisites: ["npm-package-exists"]
+});
+export const npmTargetCapabilities = (target) => {
+    const trustedPublishing = target.trustedPublishing;
+    if (trustedPublishing === undefined) {
+        return targetCapabilitiesFor(target, validationStrategyForDryRun(target.dryRunSupport));
+    }
+    return TargetCapabilities.make({
+        targetId: target.id,
+        targetTag: target._tag,
+        authRequirement: "trusted-publishing",
+        dryRunSupport: target.dryRunSupport,
+        mutability: target.mutability,
+        recovery: target.recovery,
+        validationStrategy: validationStrategyForDryRun(target.dryRunSupport),
+        authSetup: trustedPublishingAuthSetup(trustedPublishing.workflow)
+    });
+};
 const npmDryRunOperation = (target) => {
     const dryRunSupport = target.dryRunSupport;
     return dryRunSupport === "native"
@@ -31,6 +63,32 @@ const npmDryRunOperation = (target) => {
             skippedMessage: "npm dry-run validation was skipped because this target declares no dry-run support."
         });
 };
+const npmAuthOperation = (target) => target.trustedPublishing !== undefined
+    ? validationNoteOperation({
+        id: `${target.id}:npm-trusted-publishing-auth`,
+        targetId: target.id,
+        dryRunSupport: "simulated",
+        simulatedDescription: "Record npm trusted publishing authentication mode.",
+        skippedDescription: "Record skipped npm trusted publishing authentication mode.",
+        simulatedMessage: `NPM trusted publishing authenticates during npm publish with CI OIDC; npm whoami does not validate this mode. This target expects provider ${target.trustedPublishing.provider}, workflow ${target.trustedPublishing.workflow}, GitHub Actions permission id-token: write, and package ${target.packageName} to already exist on the registry.`,
+        skippedMessage: "NPM trusted publishing authentication validation was skipped."
+    })
+    : ValidateCommandOperation.make({
+        id: `${target.id}:npm-whoami`,
+        targetId: target.id,
+        description: "Validate npm CLI authentication.",
+        risk: "read-only",
+        gate: noApprovalGate("npm whoami checks CLI authentication without publishing."),
+        command: npmCommand(target, ["whoami", "--registry", target.registry], undefined, true)
+    });
+const npmPackageExistsOperation = (target) => ValidateCommandOperation.make({
+    id: `${target.id}:npm-package-exists`,
+    targetId: target.id,
+    description: "Verify npm package exists before trusted publishing.",
+    risk: "read-only",
+    gate: noApprovalGate("npm view checks package metadata without publishing."),
+    command: npmCommand(target, ["view", target.packageName, "name", "--registry", target.registry], undefined, false)
+});
 const npmPublishArgs = (target) => {
     const args = ["publish", target.packagePath, "--registry", target.registry];
     if (target.access !== undefined) {
@@ -52,22 +110,24 @@ export const planNpmOperations = Effect.fn("planNpmOperations")(function* (targe
             gate: noApprovalGate("CLI availability validation is read-only."),
             command: npmCommand(target, ["--version"], undefined, false)
         }),
-        ValidateCommandOperation.make({
-            id: `${target.id}:npm-whoami`,
-            targetId: target.id,
-            description: "Validate npm CLI authentication.",
-            risk: "read-only",
-            gate: noApprovalGate("npm whoami checks CLI authentication without publishing."),
-            command: npmCommand(target, ["whoami", "--registry", target.registry], undefined, true)
-        }),
+        npmAuthOperation(target),
+        ...(target.trustedPublishing?.verifyPackageExists === true ? [npmPackageExistsOperation(target)] : []),
         npmDryRunOperation(target),
         PublishCommandOperation.make({
             id: `${target.id}:npm-publish`,
             targetId: target.id,
-            description: `Publish ${model.identity.name}@${model.identity.version} to npm.`,
+            description: `Publish ${target.packageName}@${model.identity.version} to npm.`,
             risk: "irreversible",
             gate: irreversibleGate("npm package versions are immutable once published."),
             command: npmCommand(target, npmPublishArgs(target), undefined, true)
+        }),
+        VerifyRemoteOperation.make({
+            id: `${target.id}:npm-version-verify`,
+            targetId: target.id,
+            description: `Verify ${target.packageName}@${model.identity.version} exists on npm.`,
+            risk: "read-only",
+            gate: noApprovalGate("npm view verifies published package metadata without publishing."),
+            command: npmCommand(target, ["view", `${target.packageName}@${model.identity.version}`, "version", "--registry", target.registry], undefined, false)
         })
     ];
     return operations;

package/dist/targets/npm.js.map

@@ -1 +1 @@
-{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/targets/npm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,cAAc,EAEd,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,wBAAwB,CAAA;AAI/B,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,sBAAsB,CAAA;AAI7B,MAAM,QAAQ,GAAG,CAAC,MAAyB,EAAyB,EAAE,CACpE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AAExD,MAAM,UAAU,GAAG,CACjB,MAAyB,EACzB,IAA2B,EAC3B,GAAuB,EACvB,WAAoB,EACP,EAAE,CACf,WAAW,CAAC,IAAI,CAAC;IACf,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IACrC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;IAChD,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;CACjD,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAyB,EAAsB,EAAE,CACrF,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;AAElF,MAAM,kBAAkB,GAAG,CAAC,MAAyB,EAAa,EAAE;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAA;IAC1C,OAAO,aAAa,KAAK,QAAQ;QAC/B,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;YAC9B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,mBAAmB;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,sDAAsD;YACnE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,mEAAmE,CAAC;YACzF,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;SACnG,CAAC;QACF,CAAC,CAAC,uBAAuB,CAAC;YACxB,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,mBAAmB;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,aAAa;YACb,oBAAoB,EAAE,0CAA0C;YAChE,kBAAkB,EAAE,wCAAwC;YAC5D,gBAAgB,EACd,mHAAmH;YACrH,cAAc,EAAE,qFAAqF;SACtG,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,MAAyB,EAAyB,EAAE;IAC1E,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EACvE,MAAyB,EACzB,KAAmB;IAEnB,KAAK,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,wDAAwD,CAAC,CAAA;IAC1G,MAAM,UAAU,GAAqB;QACnC,wBAAwB,CAAC,IAAI,CAAC;YAC5B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,cAAc;YAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,6BAA6B;YAC1C,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,2CAA2C,CAAC;YACjE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;SAC7D,CAAC;QACF,wBAAwB,CAAC,IAAI,CAAC;YAC5B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,aAAa;YAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,kCAAkC;YAC/C,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,0DAA0D,CAAC;YAChF,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC;SACxF,CAAC;QACF,kBAAkB,CAAC,MAAM,CAAC;QAC1B,uBAAuB,CAAC,IAAI,CAAC;YAC3B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,cAAc;YAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,WAAW,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,UAAU;YAC/E,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,gBAAgB,CAAC,oDAAoD,CAAC;YAC5E,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC;SACrE,CAAC;KACH,CAAA;IAED,OAAO,UAAU,CAAA;AACnB,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,SAAS,EAAE,mBAAmB;IAC9B,YAAY,EAAE,qBAAqB;IACnC,cAAc,EAAE,iBAAiB;CAClC,CAAA"}
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/targets/npm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,cAAc,EAEd,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAEL,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,sBAAsB,CAAA;AAI7B,MAAM,mBAAmB,GAAG,CAAC,MAAyB,EAAW,EAAE,CACjE,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAA;AAExC,MAAM,QAAQ,GAAG,CAAC,MAAyB,EAAyB,EAAE,CACpE,mBAAmB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AAEvF,MAAM,iCAAiC,GAAG;IACxC,8BAA8B;IAC9B,gCAAgC;CACjC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,MAAyB,EAAyB,EAAE,CAChF,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAEpF,MAAM,oBAAoB,GAAG,CAAC,MAAyB,EAAyB,EAAE,CAChF,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAEpF,MAAM,UAAU,GAAG,CACjB,MAAyB,EACzB,IAA2B,EAC3B,GAAuB,EACvB,WAAoB,EACP,EAAE,CACf,WAAW,CAAC,IAAI,CAAC;IACf,UAAU,EAAE,KAAK;IACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;IACrC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;IAC5D,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;CAC7D,CAAC,CAAA;AAEJ,MAAM,0BAA0B,GAAG,CAAC,QAAgB,EAAmB,EAAE,CACvE,eAAe,CAAC,IAAI,CAAC;IACnB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,gBAAgB;IAC1B,QAAQ;IACR,mBAAmB,EAAE;QACnB,wBAAwB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KACpE;IACD,aAAa,EAAE,CAAC,oBAAoB,CAAC;CACtC,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAyB,EAAsB,EAAE;IACrF,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAClD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,eAAe,EAAE,oBAAoB;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,kBAAkB,EAAE,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC;QACrE,SAAS,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,QAAQ,CAAC;KAClE,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,MAAyB,EAAa,EAAE;IAClE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAA;IAC1C,OAAO,aAAa,KAAK,QAAQ;QAC/B,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;YAC9B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,mBAAmB;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,sDAAsD;YACnE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,mEAAmE,CAAC;YACzF,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;SACnG,CAAC;QACF,CAAC,CAAC,uBAAuB,CAAC;YACxB,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,mBAAmB;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,aAAa;YACb,oBAAoB,EAAE,0CAA0C;YAChE,kBAAkB,EAAE,wCAAwC;YAC5D,gBAAgB,EACd,mHAAmH;YACrH,cAAc,EAAE,qFAAqF;SACtG,CAAC,CAAA;AACN,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CAAC,MAAyB,EAAa,EAAE,CAChE,MAAM,CAAC,iBAAiB,KAAK,SAAS;IACpC,CAAC,CAAC,uBAAuB,CAAC;QACxB,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,8BAA8B;QAC9C,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,aAAa,EAAE,WAAW;QAC1B,oBAAoB,EAAE,oDAAoD;QAC1E,kBAAkB,EAAE,4DAA4D;QAChF,gBAAgB,EACd,8IAA8I,MAAM,CAAC,iBAAiB,CAAC,QAAQ,cAAc,MAAM,CAAC,iBAAiB,CAAC,QAAQ,4DAA4D,MAAM,CAAC,WAAW,oCAAoC;QAClV,cAAc,EAAE,+DAA+D;KAChF,CAAC;IACF,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC;QAC9B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,aAAa;QAC7B,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,cAAc,CAAC,0DAA0D,CAAC;QAChF,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC;KACxF,CAAC,CAAA;AAEN,MAAM,yBAAyB,GAAG,CAAC,MAAyB,EAAa,EAAE,CACzE,wBAAwB,CAAC,IAAI,CAAC;IAC5B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,qBAAqB;IACrC,QAAQ,EAAE,MAAM,CAAC,EAAE;IACnB,WAAW,EAAE,sDAAsD;IACnE,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,cAAc,CAAC,sDAAsD,CAAC;IAC5E,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;CACnH,CAAC,CAAA;AAEJ,MAAM,cAAc,GAAG,CAAC,MAAyB,EAAyB,EAAE;IAC1E,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC3B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EACvE,MAAyB,EACzB,KAAmB;IAEnB,KAAK,CAAC,CAAC,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,wDAAwD,CAAC,CAAA;IAC1G,MAAM,UAAU,GAAqB;QACnC,wBAAwB,CAAC,IAAI,CAAC;YAC5B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,cAAc;YAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,6BAA6B;YAC1C,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,2CAA2C,CAAC;YACjE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;SAC7D,CAAC;QACF,gBAAgB,CAAC,MAAM,CAAC;QACxB,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,kBAAkB,CAAC,MAAM,CAAC;QAC1B,uBAAuB,CAAC,IAAI,CAAC;YAC3B,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,cAAc;YAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,WAAW,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,UAAU;YAC9E,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,gBAAgB,CAAC,oDAAoD,CAAC;YAC5E,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC;SACrE,CAAC;QACF,qBAAqB,CAAC,IAAI,CAAC;YACzB,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,qBAAqB;YACrC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,UAAU,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,iBAAiB;YACpF,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,cAAc,CAAC,kEAAkE,CAAC;YACxF,OAAO,EAAE,UAAU,CACjB,MAAM,EACN,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,EACrG,SAAS,EACT,KAAK,CACN;SACF,CAAC;KACH,CAAA;IAED,OAAO,UAAU,CAAA;AACnB,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,SAAS,EAAE,mBAAmB;IAC9B,YAAY,EAAE,qBAAqB;IACnC,cAAc,EAAE,iBAAiB;CAClC,CAAA"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const RELEASE_VERSION = "0.0.2";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,UAAU,CAAA"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const RELEASE_VERSION = "0.0.2";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAA"}

package/dist/workflows/config.d.ts

@@ -0,0 +1,81 @@
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import * as Schema from "effect/Schema";
+import { ConfigReadError } from "../config/errors.js";
+import { ReleaseEligibilityCheckError } from "../planner/errors.js";
+import { RELEASE_VERSION } from "../version.js";
+export type * from "../types/effect-internal.js";
+export { RELEASE_VERSION };
+export declare const ReleasePlanFormat: Schema.Literals<readonly ["json", "text"]>;
+export type ReleasePlanFormat = typeof ReleasePlanFormat.Type;
+declare const ReleaseConfigOptions_base: Schema.Class<ReleaseConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+}>, {}>;
+export declare class ReleaseConfigOptions extends ReleaseConfigOptions_base {
+}
+declare const PlanReleaseConfigOptions_base: Schema.Class<PlanReleaseConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly format: Schema.optionalKey<Schema.Literals<readonly ["json", "text"]>>;
+}>, {}>;
+export declare class PlanReleaseConfigOptions extends PlanReleaseConfigOptions_base {
+}
+declare const RenderReleaseConfigOptions_base: Schema.Class<RenderReleaseConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly execute: Schema.optionalKey<Schema.Boolean>;
+}>, {}>;
+export declare class RenderReleaseConfigOptions extends RenderReleaseConfigOptions_base {
+}
+declare const ReleaseExecutionOptions_base: Schema.Class<ReleaseExecutionOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly execute: Schema.optionalKey<Schema.Boolean>;
+    readonly approveIrreversible: Schema.optionalKey<Schema.Boolean>;
+}>, {}>;
+export declare class ReleaseExecutionOptions extends ReleaseExecutionOptions_base {
+}
+declare const ReleaseStatusOptions_base: Schema.Class<ReleaseStatusOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly format: Schema.optionalKey<Schema.Literals<readonly ["json", "text"]>>;
+}>, {}>;
+export declare class ReleaseStatusOptions extends ReleaseStatusOptions_base {
+}
+declare const ReleaseResumeConfigOptions_base: Schema.Class<ReleaseResumeConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly execute: Schema.optionalKey<Schema.Boolean>;
+    readonly approveIrreversible: Schema.optionalKey<Schema.Boolean>;
+}>, {}>;
+export declare class ReleaseResumeConfigOptions extends ReleaseResumeConfigOptions_base {
+}
+declare const ReleaseReconcileConfigOptions_base: Schema.Class<ReleaseReconcileConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly execute: Schema.optionalKey<Schema.Boolean>;
+}>, {}>;
+export declare class ReleaseReconcileConfigOptions extends ReleaseReconcileConfigOptions_base {
+}
+declare const ReleaseEligibilityConfigOptions_base: Schema.Class<ReleaseEligibilityConfigOptions, Schema.Struct<{
+    readonly root: Schema.optionalKey<Schema.String>;
+    readonly configPath: Schema.optionalKey<Schema.String>;
+    readonly packagePath: Schema.optionalKey<Schema.String>;
+}>, {}>;
+export declare class ReleaseEligibilityConfigOptions extends ReleaseEligibilityConfigOptions_base {
+}
+export declare const planReleaseConfig: (options?: PlanReleaseConfigOptions | undefined) => Effect.Effect<import("../domain/release.js").ReleasePlan, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../targets/registry.js").MissingTargetAdapterError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const renderReleaseConfigPlan: (options?: PlanReleaseConfigOptions | undefined) => Effect.Effect<string, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../targets/registry.js").MissingTargetAdapterError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const renderReleaseConfig: (options?: RenderReleaseConfigOptions | undefined) => Effect.Effect<import("../domain/evidence.js").EvidenceBundle, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").WorkspaceWriteError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const validateReleaseConfig: (options?: ReleaseConfigOptions | undefined) => Effect.Effect<import("../domain/evidence.js").EvidenceBundle, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const executeReleaseConfig: (options?: ReleaseExecutionOptions | undefined) => Effect.Effect<import("../domain/evidence.js").EvidenceBundle, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const verifyReleaseConfig: (options?: ReleaseConfigOptions | undefined) => Effect.Effect<import("../domain/evidence.js").EvidenceBundle, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto | import("../host/http.js").ReleaseHttp>;
+export declare const runReleaseConfig: (options?: ReleaseExecutionOptions | undefined) => Effect.Effect<import("../domain/evidence.js").ReleaseWorkflowEvidence, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").WorkspaceWriteError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto | import("../host/http.js").ReleaseHttp>;
+export declare const statusReleaseConfig: (options?: ReleaseStatusOptions | undefined) => Effect.Effect<import("../domain/status.js").ReleaseStatusReport, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").EvidenceReadError | import("../targets/registry.js").MissingTargetAdapterError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const renderReleaseStatus: (options?: ReleaseStatusOptions | undefined) => Effect.Effect<string, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").EvidenceReadError | import("../targets/registry.js").MissingTargetAdapterError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto>;
+export declare const resumeReleaseConfig: (options?: ReleaseResumeConfigOptions | undefined) => Effect.Effect<import("../domain/evidence.js").ReleaseWorkflowEvidence, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").EvidenceReadError | import("../planner/errors.js").WorkspaceWriteError | import("../planner/errors.js").ResumeBlockedError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto | import("../host/http.js").ReleaseHttp>;
+export declare const reconcileReleaseConfig: (options?: ReleaseReconcileConfigOptions | undefined) => Effect.Effect<import("../domain/evidence.js").EvidenceBundle, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | import("../domain/operation.js").ExecutionApprovalError | import("../planner/errors.js").ReleaseNormalizationError | import("../planner/errors.js").PlanConstructionError | import("../planner/errors.js").RemoteStateInspectionError | import("../planner/errors.js").ReconciliationBlockedError | import("../planner/errors.js").OperationFailedError | import("../targets/registry.js").MissingTargetAdapterError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../targets/registry.js").TargetRegistry | import("../host/host.js").ReleaseCommandRunner | import("effect/Crypto").Crypto | import("../host/http.js").ReleaseHttp>;
+export declare const checkReleaseConfigEligibility: (options?: ReleaseEligibilityConfigOptions | undefined) => Effect.Effect<import("../domain/remote-state.js").ReleaseEligibilityDecision, ConfigReadError | import("../config/errors.js").ConfigParseError | import("../config/errors.js").ConfigValidationError | ReleaseEligibilityCheckError | import("../host/host.js").CommandRunnerError, FileSystem.FileSystem | Path.Path | import("../host/host.js").ReleaseCommandRunner>;
+//# sourceMappingURL=config.d.ts.map

package/dist/workflows/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/workflows/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAuBrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,mBAAmB,6BAA6B,CAAA;AAEhD,OAAO,EAAE,eAAe,EAAE,CAAA;AAE1B,eAAO,MAAM,iBAAiB,4CAAoC,CAAA;AAClE,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;;;;;AAE7D,qBAAa,oBAAqB,SAAQ,yBAGxC;CAAG;;;;;;AAEL,qBAAa,wBAAyB,SAAQ,6BAI5C;CAAG;;;;;;AAEL,qBAAa,0BAA2B,SAAQ,+BAI9C;CAAG;;;;;;;AAEL,qBAAa,uBAAwB,SAAQ,4BAK3C;CAAG;;;;;;AAEL,qBAAa,oBAAqB,SAAQ,yBAIxC;CAAG;;;;;;;AAEL,qBAAa,0BAA2B,SAAQ,+BAK9C;CAAG;;;;;;AAEL,qBAAa,6BAA8B,SAAQ,kCAMjD;CAAG;;;;;;AAEL,qBAAa,+BAAgC,SAAQ,oCAMnD;CAAG;AAmGL,eAAO,MAAM,iBAAiB,6jBAQ5B,CAAA;AAEF,eAAO,MAAM,uBAAuB,yhBAOlC,CAAA;AAEF,eAAO,MAAM,mBAAmB,wuBAK9B,CAAA;AAEF,eAAO,MAAM,qBAAqB,4tBAKhC,CAAA;AAEF,eAAO,MAAM,oBAAoB,+tBAK/B,CAAA;AAEF,eAAO,MAAM,mBAAmB,owBAK9B,CAAA;AAEF,eAAO,MAAM,gBAAgB,q0BAK3B,CAAA;AAEF,eAAO,MAAM,mBAAmB,mnBAK9B,CAAA;AAEF,eAAO,MAAM,mBAAmB,wkBAO9B,CAAA;AAEF,eAAO,MAAM,mBAAmB,+6BAK9B,CAAA;AAEF,eAAO,MAAM,sBAAsB,q4BAKjC,CAAA;AAEF,eAAO,MAAM,6BAA6B,oaASxC,CAAA"}

package/dist/workflows/config.js

@@ -0,0 +1,191 @@
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import * as Schema from "effect/Schema";
+import { ConfigReadError } from "../config/errors.js";
+import { parseReleaseIntent } from "../config/load.js";
+import { DEFAULT_CONFIG_PATH } from "../config/schema.js";
+import { ExecutionApproval } from "../domain/operation.js";
+import { createReleasePlan } from "../planner/create-release-plan.js";
+import { executePlan, renderPlan, runApprovedReleaseWorkflow, validatePlan, verifyPlan } from "../planner/executor.js";
+import { renderPlanJson, renderPlanText } from "../planner/render-plan.js";
+import { ReleaseResumeOptions, renderReleaseStatusJson, renderReleaseStatusText, resumeApprovedReleaseWorkflow, statusReleasePlan } from "../planner/status.js";
+import { reconcileReleasePlan, ReleaseReconcileOptions } from "../planner/reconcile.js";
+import { checkReleaseEligibility, ReleasePackageManifest, releaseEligibilityRemoteCheckFromIntent } from "../planner/release-eligibility.js";
+import { ReleaseEligibilityCheckError } from "../planner/errors.js";
+import { RELEASE_VERSION } from "../version.js";
+export { RELEASE_VERSION };
+export const ReleasePlanFormat = Schema.Literals(["json", "text"]);
+export class ReleaseConfigOptions extends Schema.Class("ReleaseConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String)
+}) {
+}
+export class PlanReleaseConfigOptions extends Schema.Class("PlanReleaseConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    format: Schema.optionalKey(ReleasePlanFormat)
+}) {
+}
+export class RenderReleaseConfigOptions extends Schema.Class("RenderReleaseConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    execute: Schema.optionalKey(Schema.Boolean)
+}) {
+}
+export class ReleaseExecutionOptions extends Schema.Class("ReleaseExecutionOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    execute: Schema.optionalKey(Schema.Boolean),
+    approveIrreversible: Schema.optionalKey(Schema.Boolean)
+}) {
+}
+export class ReleaseStatusOptions extends Schema.Class("ReleaseStatusOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    format: Schema.optionalKey(ReleasePlanFormat)
+}) {
+}
+export class ReleaseResumeConfigOptions extends Schema.Class("ReleaseResumeConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    execute: Schema.optionalKey(Schema.Boolean),
+    approveIrreversible: Schema.optionalKey(Schema.Boolean)
+}) {
+}
+export class ReleaseReconcileConfigOptions extends Schema.Class("ReleaseReconcileConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    execute: Schema.optionalKey(Schema.Boolean)
+}) {
+}
+export class ReleaseEligibilityConfigOptions extends Schema.Class("ReleaseEligibilityConfigOptions")({
+    root: Schema.optionalKey(Schema.String),
+    configPath: Schema.optionalKey(Schema.String),
+    packagePath: Schema.optionalKey(Schema.String)
+}) {
+}
+const configRoot = (path, options) => {
+    if (options.root !== undefined) {
+        return options.root;
+    }
+    if (options.configPath !== undefined && path.isAbsolute(options.configPath)) {
+        return path.dirname(options.configPath);
+    }
+    return ".";
+};
+const configPath = (options) => options.configPath ?? DEFAULT_CONFIG_PATH;
+const packagePath = (options) => options.packagePath ?? "package.json";
+const configReadPath = (path, options) => {
+    const pathName = configPath(options);
+    return path.isAbsolute(pathName) ? pathName : path.resolve(configRoot(path, options), pathName);
+};
+const packageReadPath = (path, options) => {
+    const pathName = packagePath(options);
+    return path.isAbsolute(pathName) ? pathName : path.resolve(configRoot(path, options), pathName);
+};
+const approvalFromOptions = (options) => ExecutionApproval.make({
+    execute: options.execute ?? false,
+    approveIrreversible: options.approveIrreversible ?? false
+});
+const resumeOptionsFromConfigOptions = (options) => ReleaseResumeOptions.make({
+    execute: options.execute ?? false,
+    approveIrreversible: options.approveIrreversible ?? false
+});
+const reconcileOptionsFromConfigOptions = (options) => ReleaseReconcileOptions.make({
+    execute: options.execute ?? false
+});
+const renderApprovalFromOptions = (options) => ExecutionApproval.make({
+    execute: options.execute ?? false,
+    approveIrreversible: false
+});
+const readReleaseConfig = Effect.fn("workflows.config.readReleaseConfig")(function* (options) {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    const pathName = configPath(options);
+    const readPath = configReadPath(path, options);
+    return yield* fs.readFileString(readPath).pipe(Effect.mapError((error) => ConfigReadError.make({
+        path: pathName,
+        reason: error.message
+    })));
+});
+const decodePackageManifest = Schema.decodeUnknownEffect(ReleasePackageManifest);
+const readPackageManifest = Effect.fn("workflows.config.readPackageManifest")(function* (options) {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    const pathName = packagePath(options);
+    const readPath = packageReadPath(path, options);
+    const contents = yield* fs.readFileString(readPath).pipe(Effect.mapError((error) => ConfigReadError.make({
+        path: pathName,
+        reason: error.message
+    })));
+    const parsed = yield* Effect.try({
+        try: () => JSON.parse(contents),
+        catch: (cause) => ReleaseEligibilityCheckError.make({
+            reason: `package manifest is not valid JSON: ${cause instanceof Error ? cause.message : String(cause)}`
+        })
+    });
+    return yield* decodePackageManifest(parsed).pipe(Effect.mapError((error) => ReleaseEligibilityCheckError.make({
+        reason: `package manifest is missing release identity fields: ${error.message}`
+    })));
+});
+export const planReleaseConfig = Effect.fn("workflows.config.planReleaseConfig")(function* (options = PlanReleaseConfigOptions.make({})) {
+    const path = yield* Path.Path;
+    const pathName = configPath(options);
+    const contents = yield* readReleaseConfig(options);
+    const intent = yield* parseReleaseIntent(contents, pathName);
+    return yield* createReleasePlan(intent, configRoot(path, options), pathName);
+});
+export const renderReleaseConfigPlan = Effect.fn("workflows.config.renderReleaseConfigPlan")(function* (options = PlanReleaseConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return (options.format ?? "text") === "json"
+        ? renderPlanJson(plan)
+        : renderPlanText(plan);
+});
+export const renderReleaseConfig = Effect.fn("workflows.config.renderReleaseConfig")(function* (options = RenderReleaseConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* renderPlan(plan, renderApprovalFromOptions(options));
+});
+export const validateReleaseConfig = Effect.fn("workflows.config.validateReleaseConfig")(function* (options = ReleaseConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* validatePlan(plan);
+});
+export const executeReleaseConfig = Effect.fn("workflows.config.executeReleaseConfig")(function* (options = ReleaseExecutionOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* executePlan(plan, approvalFromOptions(options));
+});
+export const verifyReleaseConfig = Effect.fn("workflows.config.verifyReleaseConfig")(function* (options = ReleaseConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* verifyPlan(plan);
+});
+export const runReleaseConfig = Effect.fn("workflows.config.runReleaseConfig")(function* (options = ReleaseExecutionOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* runApprovedReleaseWorkflow(plan, approvalFromOptions(options));
+});
+export const statusReleaseConfig = Effect.fn("workflows.config.statusReleaseConfig")(function* (options = ReleaseStatusOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* statusReleasePlan(plan);
+});
+export const renderReleaseStatus = Effect.fn("workflows.config.renderReleaseStatus")(function* (options = ReleaseStatusOptions.make({})) {
+    const report = yield* statusReleaseConfig(options);
+    return (options.format ?? "text") === "json"
+        ? renderReleaseStatusJson(report)
+        : renderReleaseStatusText(report);
+});
+export const resumeReleaseConfig = Effect.fn("workflows.config.resumeReleaseConfig")(function* (options = ReleaseResumeConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* resumeApprovedReleaseWorkflow(plan, resumeOptionsFromConfigOptions(options));
+});
+export const reconcileReleaseConfig = Effect.fn("workflows.config.reconcileReleaseConfig")(function* (options = ReleaseReconcileConfigOptions.make({})) {
+    const plan = yield* planReleaseConfig(options);
+    return yield* reconcileReleasePlan(plan, reconcileOptionsFromConfigOptions(options));
+});
+export const checkReleaseConfigEligibility = Effect.fn("workflows.config.checkReleaseConfigEligibility")(function* (options = ReleaseEligibilityConfigOptions.make({})) {
+    const pathName = configPath(options);
+    const contents = yield* readReleaseConfig(options);
+    const intent = yield* parseReleaseIntent(contents, pathName);
+    const manifest = yield* readPackageManifest(options);
+    const remoteCheck = yield* releaseEligibilityRemoteCheckFromIntent(manifest, intent);
+    return yield* checkReleaseEligibility(remoteCheck);
+});
+//# sourceMappingURL=config.js.map

package/dist/workflows/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/workflows/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,0BAA0B,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACtH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1E,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACxC,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAI/C,OAAO,EAAE,eAAe,EAAE,CAAA;AAE1B,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAGlE,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,KAAK,CAAuB,sBAAsB,CAAC,CAAC;IACnG,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;CAC9C,CAAC;CAAG;AAEL,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,KAAK,CAA2B,0BAA0B,CAAC,CAAC;IAC/G,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;CAC9C,CAAC;CAAG;AAEL,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,KAAK,CAA6B,4BAA4B,CAAC,CAAC;IACrH,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;CAC5C,CAAC;CAAG;AAEL,MAAM,OAAO,uBAAwB,SAAQ,MAAM,CAAC,KAAK,CAA0B,yBAAyB,CAAC,CAAC;IAC5G,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;IAC3C,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;CACxD,CAAC;CAAG;AAEL,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,KAAK,CAAuB,sBAAsB,CAAC,CAAC;IACnG,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;CAC9C,CAAC;CAAG;AAEL,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,KAAK,CAA6B,4BAA4B,CAAC,CAAC;IACrH,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;IAC3C,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;CACxD,CAAC;CAAG;AAEL,MAAM,OAAO,6BAA8B,SAAQ,MAAM,CAAC,KAAK,CAC7D,+BAA+B,CAChC,CAAC;IACA,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC;CAC5C,CAAC;CAAG;AAEL,MAAM,OAAO,+BAAgC,SAAQ,MAAM,CAAC,KAAK,CAC/D,iCAAiC,CAClC,CAAC;IACA,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;CAC/C,CAAC;CAAG;AAEL,MAAM,UAAU,GAAG,CAAC,IAAe,EAAE,OAA6B,EAAU,EAAE;IAC5E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAA;IACrB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,OAA6B,EAAU,EAAE,CAC3D,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAA;AAE3C,MAAM,WAAW,GAAG,CAAC,OAAwC,EAAU,EAAE,CACvE,OAAO,CAAC,WAAW,IAAI,cAAc,CAAA;AAEvC,MAAM,cAAc,GAAG,CAAC,IAAe,EAAE,OAA6B,EAAU,EAAE;IAChF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;AACjG,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,IAAe,EAAE,OAAwC,EAAU,EAAE;IAC5F,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;AACjG,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,OAAgC,EAAqB,EAAE,CAClF,iBAAiB,CAAC,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;IACjC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,KAAK;CAC1D,CAAC,CAAA;AAEJ,MAAM,8BAA8B,GAAG,CAAC,OAAmC,EAAwB,EAAE,CACnG,oBAAoB,CAAC,IAAI,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;IACjC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,KAAK;CAC1D,CAAC,CAAA;AAEJ,MAAM,iCAAiC,GAAG,CAAC,OAAsC,EAA2B,EAAE,CAC5G,uBAAuB,CAAC,IAAI,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;CAClC,CAAC,CAAA;AAEJ,MAAM,yBAAyB,GAAG,CAAC,OAAmC,EAAqB,EAAE,CAC3F,iBAAiB,CAAC,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;IACjC,mBAAmB,EAAE,KAAK;CAC3B,CAAC,CAAA;AAEJ,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAAC,OAA6B;IAC/G,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CACH,CACF,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,MAAM,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAA;AAEhF,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EACrF,OAAwC;IAExC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CACH,CACF,CAAA;IACD,MAAM,MAAM,GAAY,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,4BAA4B,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACxG,CAAC;KACL,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,4BAA4B,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,wDAAwD,KAAK,CAAC,OAAO,EAAE;KAChF,CAAC,CACH,CACF,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EACxF,UAAoC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC5D,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;AAC9E,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAAC,QAAQ,CAAC,EACpG,UAAoC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,MAAM;QAC1C,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAC5F,UAAsC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;IAEzE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAA;AACpE,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAAC,QAAQ,CAAC,EAChG,UAAgC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAAC,QAAQ,CAAC,EAC9F,UAAmC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;IAEnE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;AAC/D,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAC5F,UAAgC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EACtF,UAAmC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;IAEnE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAA;AAC9E,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAC5F,UAAgC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACvC,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAC5F,UAAgC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;IAE7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAClD,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,MAAM;QAC1C,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAC5F,UAAsC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;IAEzE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,6BAA6B,CAAC,IAAI,EAAE,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAA;AAC5F,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,EAClG,UAAyC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;IAE/E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,iCAAiC,CAAC,OAAO,CAAC,CAAC,CAAA;AACtF,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,EAAE,CAAC,gDAAgD,CAAC,CAAC,QAAQ,CAAC,EAChH,UAA2C,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;IAEnF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,uCAAuC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACpF,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAA;AACpD,CAAC,CAAC,CAAA"}

package/dist/workflows/evidence.d.ts

@@ -0,0 +1,21 @@
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { EvidenceBundle, ReleaseWorkflowEvidence, ReleaseWorkflowFailureEvidence } from "../domain/evidence.js";
+import { ReleasePlan } from "../domain/release.js";
+export type * from "../types/effect-internal.js";
+declare const WorkflowEvidencePathsWritten_base: Schema.Class<WorkflowEvidencePathsWritten, Schema.Struct<{
+    readonly render: Schema.optionalKey<Schema.String>;
+    readonly validation: Schema.optionalKey<Schema.String>;
+    readonly execution: Schema.optionalKey<Schema.String>;
+    readonly verification: Schema.optionalKey<Schema.String>;
+}>, {}>;
+export declare class WorkflowEvidencePathsWritten extends WorkflowEvidencePathsWritten_base {
+}
+export declare const releaseEvidencePath: (plan: ReleasePlan, name: string) => string;
+export declare const writeNamedEvidence: (plan: ReleasePlan, name: string, evidence: EvidenceBundle) => Effect.Effect<string, import("../planner/errors.js").EvidenceWriteError, import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+export declare const writeFailedOperationEvidence: (plan: ReleasePlan, name: string, error: {
+    readonly evidence?: EvidenceBundle | undefined;
+}) => Effect.Effect<string | undefined, import("../planner/errors.js").EvidenceWriteError, import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+type WritableWorkflowEvidence = ReleaseWorkflowEvidence | ReleaseWorkflowFailureEvidence;
+export declare const writeWorkflowEvidence: (plan: ReleasePlan, evidence: WritableWorkflowEvidence) => Effect.Effect<WorkflowEvidencePathsWritten, import("../planner/errors.js").EvidenceWriteError, import("effect/FileSystem").FileSystem | import("effect/Path").Path>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/workflows/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/workflows/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAA;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAIlD,mBAAmB,6BAA6B,CAAA;;;;;;;AAEhD,qBAAa,4BAA6B,SAAQ,iCAOhD;CAAG;AAEL,eAAO,MAAM,mBAAmB,GAAI,MAAM,WAAW,EAAE,MAAM,MAAM,KAAG,MAC5B,CAAA;AAE1C,eAAO,MAAM,kBAAkB,8MAQ7B,CAAA;AAEF,eAAO,MAAM,4BAA4B;wBAGV,cAAc,GAAG,SAAS;+JAMvD,CAAA;AAEF,KAAK,wBAAwB,GAAG,uBAAuB,GAAG,8BAA8B,CAAA;AAExF,eAAO,MAAM,qBAAqB,gOA8BhC,CAAA"}

package/dist/workflows/evidence.js

@@ -0,0 +1,45 @@
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { writeEvidenceBundle } from "../planner/evidence-recorder.js";
+import { workflowEvidencePaths } from "../planner/status.js";
+export class WorkflowEvidencePathsWritten extends Schema.Class("WorkflowEvidencePathsWritten")({
+    render: Schema.optionalKey(Schema.String),
+    validation: Schema.optionalKey(Schema.String),
+    execution: Schema.optionalKey(Schema.String),
+    verification: Schema.optionalKey(Schema.String)
+}) {
+}
+export const releaseEvidencePath = (plan, name) => `${plan.evidenceDirectory}/${name}.json`;
+export const writeNamedEvidence = Effect.fn("workflows.evidence.writeNamedEvidence")(function* (plan, name, evidence) {
+    const path = releaseEvidencePath(plan, name);
+    yield* writeEvidenceBundle(path, evidence, plan.source.root);
+    return path;
+});
+export const writeFailedOperationEvidence = Effect.fn("workflows.evidence.writeFailedOperationEvidence")(function* (plan, name, error) {
+    if (error.evidence === undefined) {
+        return undefined;
+    }
+    return yield* writeNamedEvidence(plan, name, error.evidence);
+});
+export const writeWorkflowEvidence = Effect.fn("workflows.evidence.writeWorkflowEvidence")(function* (plan, evidence) {
+    const paths = workflowEvidencePaths(plan);
+    const written = {};
+    if (evidence.render !== undefined) {
+        written.render = paths.render;
+        yield* writeEvidenceBundle(paths.render, evidence.render, plan.source.root);
+    }
+    if (evidence.validation !== undefined) {
+        written.validation = paths.validation;
+        yield* writeEvidenceBundle(paths.validation, evidence.validation, plan.source.root);
+    }
+    if (evidence.execution !== undefined) {
+        written.execution = paths.execution;
+        yield* writeEvidenceBundle(paths.execution, evidence.execution, plan.source.root);
+    }
+    if (evidence.verification !== undefined) {
+        written.verification = paths.verification;
+        yield* writeEvidenceBundle(paths.verification, evidence.verification, plan.source.root);
+    }
+    return WorkflowEvidencePathsWritten.make(written);
+});
+//# sourceMappingURL=evidence.js.map

package/dist/workflows/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/workflows/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAI5D,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,KAAK,CAC5D,8BAA8B,CAC/B,CAAC;IACA,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;CAChD,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAiB,EAAE,IAAY,EAAU,EAAE,CAC7E,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,OAAO,CAAA;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAAC,QAAQ,CAAC,EAC5F,IAAiB,EACjB,IAAY,EACZ,QAAwB;IAExB,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC5C,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC5D,OAAO,IAAI,CAAA;AACb,CAAC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,EAAE,CAAC,iDAAiD,CAAC,CAAC,QAAQ,CAAC,EAChH,IAAiB,EACjB,IAAY,EACZ,KAAyD;IAEzD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;AAC9D,CAAC,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAAC,QAAQ,CAAC,EAClG,IAAiB,EACjB,QAAkC;IAElC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,OAAO,GAKT,EAAE,CAAA;IAEN,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC7B,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;QACrC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QACnC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QACzC,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACzF,CAAC;IAED,OAAO,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACnD,CAAC,CAAC,CAAA"}

package/dist/workflows/live.d.ts

@@ -0,0 +1,7 @@
+import * as Layer from "effect/Layer";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import { ReleaseHttp } from "../host/http.js";
+import { TargetRegistry } from "../targets/registry.js";
+export type * from "../types/effect-internal.js";
+export declare const LiveReleaseWorkflowLayer: Layer.Layer<ReleaseHttp | TargetRegistry, never, HttpClient.HttpClient>;
+//# sourceMappingURL=live.d.ts.map

package/dist/workflows/live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../src/workflows/live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG7C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAEvD,mBAAmB,6BAA6B,CAAA;AAEhD,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,KAAK,CAChD,WAAW,GAAG,cAAc,EAC5B,KAAK,EACL,UAAU,CAAC,UAAU,CAItB,CAAA"}

package/dist/workflows/live.js

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { LiveReleaseHttpLayer } from "../host/http-live.js";
+import { LiveTargetRegistryLayer } from "../targets/live.js";
+export const LiveReleaseWorkflowLayer = Layer.mergeAll(LiveReleaseHttpLayer, LiveTargetRegistryLayer);
+//# sourceMappingURL=live.js.map

package/dist/workflows/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../src/workflows/live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAGrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAK5D,MAAM,CAAC,MAAM,wBAAwB,GAIjC,KAAK,CAAC,QAAQ,CAChB,oBAAoB,EACpB,uBAAuB,CACxB,CAAA"}

package/examples/README.md

@@ -18,12 +18,15 @@ Focused examples:
 
 - `multi-target`: one release coordinated across GitHub Releases, npm, and Homebrew.
 - `npm-only`: npm package directory with native npm dry-run validation.
+- `npm-first-publish`: token-based npm bootstrap config for the first version before switching to trusted publishing.
 - `github-release`: GitHub release asset with simulated GitHub dry-run validation.
 - `homebrew-tap`: Homebrew tap formula rendering with simulated formula validation.
 - `pypi-registry`: prebuilt Python distribution planned for TestPyPI with Twine.
 - `scoop-bucket`: Scoop bucket manifest rendering with simulated validation.
 - `non-strict-skips`: non-strict config that records skipped dry-run evidence.
 
-TestPyPI is still a real registry publish target, not a dry-run. The example
-only renders the plan; do not run publish operations without intentional
-credentials and approval flags.
+`npm-first-publish` demonstrates only the bootstrap shape for a package that
+does not exist on npm yet. Replace it with trusted publishing after the first
+version exists. TestPyPI is still a real registry publish target, not a dry-run.
+The examples only render plans; do not run publish operations without
+intentional credentials and approval flags.

package/examples/multi-target/release.config.json

@@ -36,8 +36,13 @@
       "_tag": "NpmRegistryTarget",
       "id": "npm",
       "registry": "https://registry.npmjs.org",
+      "packageName": "release-example-multi-target",
       "packagePath": ".",
-      "tokenEnv": "NPM_TOKEN",
+      "trustedPublishing": {
+        "provider": "github-actions",
+        "workflow": "release.yml",
+        "packageExists": true
+      },
       "dryRunSupport": "native",
       "mutability": "immutable",
       "recovery": "publish-new-version"