@plutoframework/frontend 0.1.0 → 0.1.2

package/README.md

@@ -165,5 +165,44 @@ Tests cover transition rejection, duplicate actions, stale callbacks, reset,
 disposal, executor failures, React Strict Mode/SSR and 1,500 deterministic property
 runs over arbitrary event sequences. Mutation smoke is a bounded set of seeded
 mutations, not a comprehensive mutation engine. CI tests React 18.3.1 and 19.3.1.
-The package is published manually after inspecting its tarball; no npm credentials
-are stored in this repository or in GitHub Actions.
+Releases publish through GitHub Actions using npm trusted publishing (OIDC);
+no npm credentials are stored in this repository or in GitHub Actions.
+
+## Publish a release
+
+The `publish.yml` workflow publishes stable `vMAJOR.MINOR.PATCH` tags using npm
+trusted publishing and provenance. It checks tag/version agreement and main-branch
+ancestry, runs tests and mutation checks, and verifies packed consumers before
+publishing. Prereleases are rejected. Manual dispatch accepts an existing tag for
+retrying a failed publish; npm never overwrites an already published version.
+
+After merging the intended changes into main:
+
+```sh
+npm version patch
+git push origin main --follow-tags
+```
+
+The one-time npm trusted publisher is scoped to:
+
+| Setting        | Value            |
+| -------------- | ---------------- |
+| Organization   | `plutoframework` |
+| Repository     | `pluto-frontend` |
+| Workflow       | `publish.yml`    |
+| Environment    | None             |
+| Allowed action | `npm publish`    |
+
+The workflow uses GitHub-hosted runners with `id-token: write`; npm exchanges the
+workflow identity for a short-lived publish credential. No `NPM_TOKEN` secret is
+needed. See [npm trusted publishing](https://docs.npmjs.com/trusted-publishers/).
+
+## Source readability
+
+Development tooling uses ESLint Stylistic with an 80-column expanded convention.
+Run `npm run fmt` to apply the canonical Prettier + ESLint result. `npm run check`
+checks formatting without writing, then lint, types, behavior tests and builds.
+Braces, multiline blocks, separated object/type fields and logical blank lines
+are enforced; nested ternaries require explicit branches or named mappings.
+The policy is visible in `scripts/readability.mjs`. These are dev-only tools and
+add no runtime dependencies to state or React entrypoints.

package/dist/react/index.js

@@ -3,5 +3,8 @@ import { useSyncExternalStore } from "react";
 /** Subscribe only. The host owns the controller's reset/disposal lifecycle. */
 export function useMachine(machine) {
     const state = useSyncExternalStore(machine.subscribe, machine.getSnapshot, machine.getInitialSnapshot);
-    return { state, send: machine.send };
+    return {
+        state,
+        send: machine.send,
+    };
 }

package/dist/state/machine.js

@@ -8,21 +8,25 @@ export function createMachine(options) {
     const listeners = new Set();
     const executions = new Set();
     function notify() {
-        for (const listener of [...listeners])
+        for (const listener of [...listeners]) {
             listener();
+        }
     }
     function cancel() {
         // Fence callbacks BEFORE synchronous abort handlers can send events.
         epoch++;
-        for (const controller of executions)
+        for (const controller of executions) {
             controller.abort();
+        }
         executions.clear();
     }
     async function send(event) {
-        if (disposed)
+        if (disposed) {
             return false;
-        if (evaluating)
+        }
+        if (evaluating) {
             throw new Error("Transitions must not send events");
+        }
         const generation = epoch;
         evaluating = true;
         let decision;
@@ -32,8 +36,9 @@ export function createMachine(options) {
         finally {
             evaluating = false;
         }
-        if (!decision.accepted)
+        if (!decision.accepted) {
             return false;
+        }
         if (decision.effect !== undefined && !execute) {
             throw new Error("An effect requires an executor");
         }
@@ -44,8 +49,9 @@ export function createMachine(options) {
         try {
             notify();
             // Subscribers may reset/dispose the flow during notification.
-            if (generation !== epoch || disposed)
+            if (generation !== epoch || disposed) {
                 return true;
+            }
             if (decision.effect !== undefined && execute) {
                 await execute(decision.effect, {
                     signal: controller.signal,
@@ -68,8 +74,9 @@ export function createMachine(options) {
         getSnapshot: () => current,
         getInitialSnapshot: () => initial,
         subscribe(listener) {
-            if (disposed)
+            if (disposed) {
                 return () => { };
+            }
             listeners.add(listener);
             return () => {
                 listeners.delete(listener);
@@ -77,15 +84,17 @@ export function createMachine(options) {
         },
         send,
         reset() {
-            if (disposed)
+            if (disposed) {
                 return;
+            }
             cancel();
             current = initial;
             notify();
         },
         dispose() {
-            if (disposed)
+            if (disposed) {
                 return;
+            }
             disposed = true;
             cancel();
             listeners.clear();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plutoframework/frontend",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Explicit, typed frontend state transitions and React subscriptions for Pluto applications.",
   "type": "module",
   "license": "MIT",
@@ -38,22 +38,27 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
-    "fmt": "prettier --write .",
-    "check": "prettier --check . && tsc --noEmit && npm test && npm run build",
-    "test": "vitest run",
+    "fmt": "node scripts/format.mjs && eslint .",
+    "check": "node scripts/format.mjs --check && eslint . && tsc --noEmit && npm test && npm run build",
+    "test": "vitest run && node --test scripts/format.test.mjs",
     "test:mutation": "python3 scripts/mutation.py",
     "prepack": "npm run build"
   },
   "devDependencies": {
-    "typescript": "5.9.3",
-    "vitest": "5.0.5",
-    "fast-check": "4.10.2",
-    "react": "19.3.1",
-    "react-dom": "19.3.1",
+    "@eslint/js": "10.0.1",
+    "@stylistic/eslint-plugin": "5.10.0",
+    "@testing-library/react": "16.3.3",
     "@types/react": "19.3.0",
     "@types/react-dom": "19.3.0",
-    "@testing-library/react": "16.3.3",
+    "eslint": "10.13.0",
+    "eslint-plugin-react-hooks": "7.1.1",
+    "fast-check": "4.10.2",
     "jsdom": "30.1.3",
-    "prettier": "3.9.10"
+    "prettier": "3.9.10",
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.72.1",
+    "vitest": "5.0.5"
   }
 }