@timurproko/a1 0.1.4 → 0.1.5-dev.7eabe9e
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -3
- package/dist/native/darwin-arm64/manifest.json +1 -1
- package/dist/native/linux-x64/manifest.json +1 -1
- package/dist/native/win32-x64/manifest.json +2 -2
- package/dist/native/win32-x64/process-guardian.exe +0 -0
- package/docs/architecture/toolchain.md +1 -1
- package/docs/ci-release-runbook.md +5 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -62,9 +62,10 @@ ever published from a workstation.
|
|
|
62
62
|
### Previews — npm `next`
|
|
63
63
|
|
|
64
64
|
Automatic. Every push to `develop` publishes one, versioned
|
|
65
|
-
`<major.minor.patch>-dev.<
|
|
66
|
-
|
|
67
|
-
commits and need no command
|
|
65
|
+
`<major.minor.patch>-dev.<short commit>` — the base from whatever `package.json`
|
|
66
|
+
declares, the suffix naming the commit it was built from. It is stamped at publish
|
|
67
|
+
time and never committed, so previews cost no commits and need no command, and an
|
|
68
|
+
installed preview says exactly which source produced it.
|
|
68
69
|
|
|
69
70
|
```sh
|
|
70
71
|
a1 update:next # install the newest preview
|
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
"platform": "darwin",
|
|
6
6
|
"architecture": "arm64",
|
|
7
7
|
"capability": "unsupported",
|
|
8
|
-
"builtAt": "2026-08-
|
|
8
|
+
"builtAt": "2026-08-23T18:39:47.990Z",
|
|
9
9
|
"artifact": {
|
|
10
10
|
"filename": "process-guardian",
|
|
11
11
|
"sha256": "7524bf568992517f50ed53196c861c5edeba0d7275633bb4735ab45bd5963a28",
|
|
@@ -5,7 +5,7 @@
|
|
|
5
5
|
"platform": "linux",
|
|
6
6
|
"architecture": "x64",
|
|
7
7
|
"capability": "supported",
|
|
8
|
-
"builtAt": "2026-08-
|
|
8
|
+
"builtAt": "2026-08-23T18:39:54.484Z",
|
|
9
9
|
"artifact": {
|
|
10
10
|
"filename": "process-guardian",
|
|
11
11
|
"sha256": "29e22fe29de2828982bc67ef418c4adcaab1490281477b7bea592ec6fe621bcd",
|
|
@@ -5,10 +5,10 @@
|
|
|
5
5
|
"platform": "win32",
|
|
6
6
|
"architecture": "x64",
|
|
7
7
|
"capability": "supported",
|
|
8
|
-
"builtAt": "2026-08-
|
|
8
|
+
"builtAt": "2026-08-23T18:40:21.111Z",
|
|
9
9
|
"artifact": {
|
|
10
10
|
"filename": "process-guardian.exe",
|
|
11
|
-
"sha256": "
|
|
11
|
+
"sha256": "e4c81b717d532ad8093d27b775dcd9baaae84e387c05e8759ada7912f5cb4120",
|
|
12
12
|
"size": 172544
|
|
13
13
|
},
|
|
14
14
|
"provenance": {
|
|
Binary file
|
|
@@ -71,7 +71,7 @@ Presentation acceptance is the reader comparing `a1 pi` with pinned Pi. `node sc
|
|
|
71
71
|
|
|
72
72
|
## Publication
|
|
73
73
|
|
|
74
|
-
One workflow publishes both channels: `.github/workflows/release.yml`, triggered by every push to `develop`. What the pushed commit declares decides the channel: a prerelease version publishes a preview under npm `next` at a
|
|
74
|
+
One workflow publishes both channels: `.github/workflows/release.yml`, triggered by every push to `develop`. What the pushed commit declares decides the channel: a prerelease version publishes a preview under npm `next` at a `-dev.<short commit>` version stamped at publish time, and a stable version publishes under npm `latest`. Both pack once, validate those exact bytes on Windows, Linux, and macOS, and publish with provenance from the `npm-publish` environment. The publisher never rebuilds, a preview never changes `latest`, and the release tag, GitHub Release, and `master` are written only after the registry has the package.
|
|
75
75
|
|
|
76
76
|
`docs/ci-release-runbook.md` is the operational reference.
|
|
77
77
|
|
|
@@ -33,9 +33,11 @@ demand.
|
|
|
33
33
|
Every push to `develop` publishes a preview to the npm `next` tag. Nothing to
|
|
34
34
|
dispatch and nothing to approve.
|
|
35
35
|
|
|
36
|
-
The version is stamped at publish time — `<major.minor.patch>-dev.<
|
|
37
|
-
|
|
38
|
-
|
|
36
|
+
The version is stamped at publish time — `<major.minor.patch>-dev.<short commit>`,
|
|
37
|
+
the base taken from whatever `package.json` declares and the suffix from the commit
|
|
38
|
+
being published — and is never written back to the repository. An installed preview
|
|
39
|
+
therefore names the exact source it came from, and rebuilding a commit produces the
|
|
40
|
+
same version rather than a new one. `develop` therefore carries one open prerelease version between
|
|
39
41
|
releases, and no commit is ever spent on a preview.
|
|
40
42
|
|
|
41
43
|
One consequence worth knowing: a push that would republish an existing version
|