@savvy-web/silk-effects 1.2.0 → 1.3.1

package/commitlint/hook/envelope.js

@@ -33,14 +33,10 @@ const PostToolUseEnvelope = Schema.Struct({
 		stderr: Schema.optional(Schema.String)
 	})
 });
-const UserPromptSubmitEnvelope = Schema.Struct({
-	hook_event_name: Schema.Literal("UserPromptSubmit"),
-	prompt: Schema.String
-});
 const SessionStartEnvelope = Schema.Struct({
 	hook_event_name: Schema.Literal("SessionStart"),
 	source: Schema.optional(Schema.String)
 });
 
 //#endregion
-export { PostToolUseEnvelope, PreToolUseEnvelope, SessionStartEnvelope, UserPromptSubmitEnvelope };
+export { PostToolUseEnvelope, PreToolUseEnvelope, SessionStartEnvelope };

package/commitlint/hook/output.js

@@ -34,12 +34,6 @@ function postToolUseAdvise(message) {
 		additionalContext: message
 	} };
 }
-function userPromptSubmitContext(message) {
-	return { hookSpecificOutput: {
-		hookEventName: "UserPromptSubmit",
-		additionalContext: message
-	} };
-}
 
 //#endregion
-export { postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, sessionStartContext, userPromptSubmitContext };
+export { postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, sessionStartContext };

package/commitlint/index.js

@@ -10,8 +10,8 @@ import { ERROR_EXPLANATIONS, ERROR_SUGGESTIONS, getExplanation, getSuggestion }
 import { format } from "./formatter/format.js";
 import { prompter } from "./prompt/prompter.js";
 import { detectScopes } from "./detection/scopes.js";
-import { PostToolUseEnvelope, PreToolUseEnvelope, SessionStartEnvelope, UserPromptSubmitEnvelope } from "./hook/envelope.js";
-import { postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, sessionStartContext, userPromptSubmitContext } from "./hook/output.js";
+import { PostToolUseEnvelope, PreToolUseEnvelope, SessionStartEnvelope } from "./hook/envelope.js";
+import { postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, sessionStartContext } from "./hook/output.js";
 import { parseBashCommand } from "./hook/parse-bash-command.js";
 import { HookSilencer } from "./hook/silence-logger.js";
 import { inferTicketId, readBranchInfo } from "./hook/diagnostics/branch.js";
@@ -61,7 +61,6 @@ var commitlint_exports = /* @__PURE__ */ __exportAll({
 	TDD_STATES: () => TDD_STATES,
 	TYPE_EMOJIS: () => TYPE_EMOJIS,
 	TYPE_EMOJIS_UNICODE: () => TYPE_EMOJIS_UNICODE,
-	UserPromptSubmitEnvelope: () => UserPromptSubmitEnvelope,
 	VERBOSITY_LINE_THRESHOLD: () => 25,
 	VERBOSITY_WORD_THRESHOLD: () => 400,
 	buildSigningDiagnostic: () => buildSigningDiagnostic,
@@ -105,7 +104,6 @@ var commitlint_exports = /* @__PURE__ */ __exportAll({
 	signingFlagConflictRule: () => signingFlagConflictRule,
 	softWrapRule: () => softWrapRule,
 	staticConfig: () => staticConfig,
-	userPromptSubmitContext: () => userPromptSubmitContext,
 	verbosityRule: () => verbosityRule,
 	writeCache: () => writeCache
 });

package/index.d.ts

@@ -5810,11 +5810,6 @@ declare const PostToolUseEnvelope: Schema.Struct<{
   }>;
 }>;
 type PostToolUseEnvelope = Schema.Schema.Type<typeof PostToolUseEnvelope>;
-declare const UserPromptSubmitEnvelope: Schema.Struct<{
-  hook_event_name: Schema.Literal<["UserPromptSubmit"]>;
-  prompt: typeof Schema.String;
-}>;
-type UserPromptSubmitEnvelope = Schema.Schema.Type<typeof UserPromptSubmitEnvelope>;
 declare const SessionStartEnvelope: Schema.Struct<{
   hook_event_name: Schema.Literal<["SessionStart"]>;
   source: Schema.optional<typeof Schema.String>;
@@ -5834,7 +5829,6 @@ declare function preToolUseAdvise(message: string): HookOutput;
 declare function preToolUseSilent(): HookOutput;
 declare function sessionStartContext(message: string): HookOutput;
 declare function postToolUseAdvise(message: string): HookOutput;
-declare function userPromptSubmitContext(message: string): HookOutput;
 //#endregion
 //#region src/commitlint/hook/parse-bash-command.d.ts
 type ParsedKind = "git-commit" | "git-commit-amend" | "gh-pr-create" | "gh-pr-edit" | "unknown";
@@ -5981,7 +5975,7 @@ declare const VERBOSITY_LINE_THRESHOLD = 25;
 declare const VERBOSITY_WORD_THRESHOLD = 400;
 declare const verbosityRule: Rule<VerbosityInput, never>;
 declare namespace index_d_exports$1 {
-  export { BranchInfo, COMMIT_TYPES, COMMIT_TYPE_DEFINITIONS, ClosesTrailerCtx, ClosesTrailerInput, CommitType, CommitTypeDefinition, CommitlintConfig, CommitlintPlugin, CommitlintUserConfig, ConfigOptions, DCO_SIGNOFF_TEXT, DEFAULT_BODY_MAX_LINE_LENGTH, ERROR_EXPLANATIONS, ERROR_SUGGESTIONS, ForbiddenContentInput, FormatterResult, HookOutput, RuleSeverity as HookRuleSeverity, HookSilencer, ISSUES_CACHE_RELATIVE_PATH, ISSUES_CACHE_TTL_SECONDS, Inquirer, LintOutcome, LockfilePresence, OpenIssue, PackageManager$1 as PackageManager, ParsedCommit, ParsedKind, PlanLeakageInput, PostToolUseEnvelope, PostToolUseEnvelope as PostToolUseEnvelopeType, PreToolUseEnvelope, PreToolUseEnvelope as PreToolUseEnvelopeType, PromptConfig, PromptConfigOptions, PromptQuestion, PromptSettings, PrompterOptions, Question, RawSigningInputs, ReleaseFormat, ResolvedPromptConfig, Rule, RuleApplicability, RuleConfigTuple, RuleHit, RuleResult, RuleSeverity$1 as RuleSeverity, RulesConfig, SessionStartEnvelope, SessionStartEnvelope as SessionStartEnvelopeType, SigningDiagnostic, SigningFlagCtx, SigningFlagInput, SoftWrapInput, TDD_SCOPE_PATTERN, TDD_STATES, TYPE_EMOJIS, TYPE_EMOJIS_UNICODE, TypeEnumEntry, UserPromptSubmitEnvelope, UserPromptSubmitEnvelope as UserPromptSubmitEnvelopeType, VERBOSITY_LINE_THRESHOLD, VERBOSITY_WORD_THRESHOLD, VerbosityInput, buildSigningDiagnostic, closesTrailerRule, createPromptConfig, createTypeEnum, CommitlintConfig as default, defaultPromptConfig, detectDCO, detectFromLockfiles, detectPackageManager, detectScopes, emojiPromptConfig, fetchAndCacheOpenIssues, forbiddenContentRule, format, getExplanation, getSuggestion, getTypeEmoji, hasClosingTrailer, inferTicketId, parseBashCommand, parseGpgKeyExpiry, parseHuskyConfigPath, parsePackageManagerField, partitionHits, planLeakageRule, postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, prompter, readBranchInfo, readCache, readCommitlintConfigPath, readOpenIssuesFromCache, readOrFetchOpenIssues, readSigningDiagnostic, sessionStartContext, signingFlagConflictRule, softWrapRule, staticConfig, userPromptSubmitContext, verbosityRule, writeCache };
+  export { BranchInfo, COMMIT_TYPES, COMMIT_TYPE_DEFINITIONS, ClosesTrailerCtx, ClosesTrailerInput, CommitType, CommitTypeDefinition, CommitlintConfig, CommitlintPlugin, CommitlintUserConfig, ConfigOptions, DCO_SIGNOFF_TEXT, DEFAULT_BODY_MAX_LINE_LENGTH, ERROR_EXPLANATIONS, ERROR_SUGGESTIONS, ForbiddenContentInput, FormatterResult, HookOutput, RuleSeverity as HookRuleSeverity, HookSilencer, ISSUES_CACHE_RELATIVE_PATH, ISSUES_CACHE_TTL_SECONDS, Inquirer, LintOutcome, LockfilePresence, OpenIssue, PackageManager$1 as PackageManager, ParsedCommit, ParsedKind, PlanLeakageInput, PostToolUseEnvelope, PostToolUseEnvelope as PostToolUseEnvelopeType, PreToolUseEnvelope, PreToolUseEnvelope as PreToolUseEnvelopeType, PromptConfig, PromptConfigOptions, PromptQuestion, PromptSettings, PrompterOptions, Question, RawSigningInputs, ReleaseFormat, ResolvedPromptConfig, Rule, RuleApplicability, RuleConfigTuple, RuleHit, RuleResult, RuleSeverity$1 as RuleSeverity, RulesConfig, SessionStartEnvelope, SessionStartEnvelope as SessionStartEnvelopeType, SigningDiagnostic, SigningFlagCtx, SigningFlagInput, SoftWrapInput, TDD_SCOPE_PATTERN, TDD_STATES, TYPE_EMOJIS, TYPE_EMOJIS_UNICODE, TypeEnumEntry, VERBOSITY_LINE_THRESHOLD, VERBOSITY_WORD_THRESHOLD, VerbosityInput, buildSigningDiagnostic, closesTrailerRule, createPromptConfig, createTypeEnum, CommitlintConfig as default, defaultPromptConfig, detectDCO, detectFromLockfiles, detectPackageManager, detectScopes, emojiPromptConfig, fetchAndCacheOpenIssues, forbiddenContentRule, format, getExplanation, getSuggestion, getTypeEmoji, hasClosingTrailer, inferTicketId, parseBashCommand, parseGpgKeyExpiry, parseHuskyConfigPath, parsePackageManagerField, partitionHits, planLeakageRule, postToolUseAdvise, preToolUseAdvise, preToolUseAllow, preToolUseDeny, preToolUseSilent, prompter, readBranchInfo, readCache, readCommitlintConfigPath, readOpenIssuesFromCache, readOrFetchOpenIssues, readSigningDiagnostic, sessionStartContext, signingFlagConflictRule, softWrapRule, staticConfig, verbosityRule, writeCache };
 }
 /**
  * Dynamic commitlint configuration factory.
@@ -7906,7 +7900,7 @@ declare const MARKDOWNLINT_TEMPLATE: {
   readonly fix: true;
   readonly gitignore: true;
   readonly noBanner: true;
-  readonly ignores: readonly ["**/node_modules", "**/.cache", "**/coverage", "**/.coverage", "**/dist", "**/CHANGELOG.md", "**/.claude/plans", "**/docs/superpowers", "**/__test__/**/fixtures/**", "**/__fixtures__/**"];
+  readonly ignores: readonly ["**/.git", "**/node_modules", "**/.cache", "**/coverage", "**/.coverage", "**/dist", "**/CHANGELOG.md", "**/.claude/plans", "**/docs/superpowers", "**/__test__/**/fixtures/**", "**/__fixtures__/**"];
   readonly customRules: readonly ["@savvy-web/silk/changesets/markdownlint"];
   readonly config: {
     readonly default: true;

package/lint/cli/templates/markdownlint.gen.js

@@ -16,6 +16,7 @@ const MARKDOWNLINT_TEMPLATE = {
 	gitignore: true,
 	noBanner: true,
 	ignores: [
+		"**/.git",
 		"**/node_modules",
 		"**/.cache",
 		"**/coverage",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@savvy-web/silk-effects",
-	"version": "1.2.0",
+	"version": "1.3.1",
 	"private": false,
 	"description": "Shared Effect library for Silk Suite conventions",
 	"homepage": "https://github.com/savvy-web/systems/tree/main/packages/silk-effects",

package/services/SilkPublishability.js

@@ -16,6 +16,26 @@ const DEFAULT_REGISTRIES = {
 	github: "https://npm.pkg.github.com"
 };
 /**
+* Whether a registry endpoint participates in npm-style SLSA provenance.
+*
+* @remarks
+* The npm public registry and GitHub Packages both accept provenance attestations through the
+* Sigstore/OIDC trusted-publishing flow, so a {@link PublishTarget} bound to either is marked
+* `provenance: true` by default — this is what gates the release action's attestation step. JSR
+* and custom registries do not participate and resolve to `false`. Matching is endpoint-based
+* (not target-key based) so a custom key pointed at one of these registries still opts in.
+*/
+const provenanceForRegistry = (registry) => {
+	const normalized = /^[a-z]+:\/\//i.test(registry) ? registry : `https://${registry}`;
+	let hostname;
+	try {
+		hostname = new URL(normalized).hostname.toLowerCase();
+	} catch {
+		return false;
+	}
+	return hostname === "registry.npmjs.org" || hostname === "npm.pkg.github.com";
+};
+/**
 * Silk publishability rules over `workspaces-effect`'s {@link PublishTarget}.
 *
 * @remarks
@@ -57,28 +77,41 @@ var SilkPublishability = class {
 					name: t.name,
 					registry: t.registry,
 					directory: dirByGroup.get(t.group) ?? `dist/prod/${t.group}/pkg`,
-					access
+					access,
+					provenance: provenanceForRegistry(t.registry)
 				}));
 			}
-			return Object.keys(targets).map((id) => new PublishTarget({
+			return Object.entries(targets).map(([id, target]) => {
+				const registry = typeof target === "object" && target !== null && typeof target.registry === "string" ? target.registry : DEFAULT_REGISTRIES[id] ?? pc?.registry ?? NPM_DEFAULT;
+				return new PublishTarget({
+					name: pkgName,
+					registry,
+					directory: `dist/prod/${id}/pkg`,
+					access,
+					provenance: provenanceForRegistry(registry)
+				});
+			});
+		}
+		if (pc && (pc.access === "public" || pc.access === "restricted")) {
+			const registry = pc.registry ?? NPM_DEFAULT;
+			return [new PublishTarget({
+				name: pkgName,
+				registry,
+				directory: pc.directory ?? ".",
+				access: pc.access,
+				provenance: provenanceForRegistry(registry)
+			})];
+		}
+		if (raw.private !== true) {
+			const registry = pc?.registry ?? NPM_DEFAULT;
+			return [new PublishTarget({
 				name: pkgName,
-				registry: DEFAULT_REGISTRIES[id] ?? pc?.registry ?? NPM_DEFAULT,
-				directory: `dist/prod/${id}/pkg`,
-				access
-			}));
+				registry,
+				directory: pc?.directory ?? ".",
+				access: pc?.access ?? "public",
+				provenance: provenanceForRegistry(registry)
+			})];
 		}
-		if (pc && (pc.access === "public" || pc.access === "restricted")) return [new PublishTarget({
-			name: pkgName,
-			registry: pc.registry ?? NPM_DEFAULT,
-			directory: pc.directory ?? ".",
-			access: pc.access
-		})];
-		if (raw.private !== true) return [new PublishTarget({
-			name: pkgName,
-			registry: pc?.registry ?? NPM_DEFAULT,
-			directory: pc?.directory ?? ".",
-			access: pc?.access ?? "public"
-		})];
 		return [];
 	}
 	/**