@vibesdotdev/infra-deploy 0.0.1 → 1.0.0-rc.4

package/dist/cli/npm/publish/release-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-executor.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-executor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,SAAS,EACT,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,iBAAiB,GAElB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAChC,yFAAyF,CAAC;AAC5F;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,mCAAmC,CAAC;AACzE,yEAAyE;AACzE,MAAM,CAAC,MAAM,8BAA8B,GACzC,mDAAmD,CAAC;AAyBtD,SAAS,eAAe,CACtB,OAAe,EACf,IAAyB,EACzB,MAA6B,EAC7B,OAAgC;IAEhC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,OAK7D;IAKC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,uBAAuB,GAAG,MAAM,eAAe,CACnD,KAAK,EACL,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CACrD,CAAC;IACF,MAAM,oBAAoB,GAAG,MAAM,eAAe,CAChD,KAAK,EACL,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CACrD,CAAC;IACF,MAAM,qBAAqB,GAAG,MAAM,iBAAiB,CACnD,OAAO,CAAC,OAAO,EACf,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,oBAAoB,CAAC,CACtD,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAChD,OAAO,CAAC,OAAO,EACf,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CACnD,CAAC;IACF,IAAI,qBAAqB,KAAK,uBAAuB,EAAE,CAAC;QACtD,MAAM,eAAe,CACnB,2DAA2D,uBAAuB,cAAc,qBAAqB,EAAE,EACvH,mBAAmB,EACnB,0BAA0B,EAC1B,EAAE,QAAQ,EAAE,uBAAuB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,eAAe,CACnB,2EAA2E,oBAAoB,cAAc,kBAAkB,EAAE,EACjI,mBAAmB,EACnB,2BAA2B,EAC3B,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;AACtE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kCAAkC,CAAC,QAAiB;IAClE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,CACnB,gEAAgE,EAChE,eAAe,EACf,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,GAAuB,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;QACtC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,eAAe,CACnB,sFAAsF,EACtF,eAAe,EACf,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;AAC1D,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,gCAAgC,GAC3C,gEAAgE,CAAC;AACnE,gEAAgE;AAChE,MAAM,CAAC,MAAM,gCAAgC,GAAG,UAAU,CAAC;AAE3D,KAAK,UAAU,eAAe,CAC5B,OAAwB,EACxB,GAAW,EACX,IAAuB,EACvB,oBAAuC,CAAC,CAAC,CAAC;IAE1C,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,OAAO;QACP,SAAS;QACT,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,aAAa;QACzB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,GAAG;KACJ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,eAAe,CACnB,6BAA6B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,UAAU,IAAI,GAAG,EAC7E,aAAa,EACb,sBAAsB,EACtB,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,wCAAwC,CACtD,QAAiB;IAEjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,eAAe,CACnB,gEAAgE,EAChE,eAAe,EACf,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,UAAU,KAAK,8BAA8B,EAAE,CAAC;QAClD,MAAM,eAAe,CACnB,2DAA2D,8BAA8B,cAAc,UAAU,EAAE,EACnH,eAAe,EACf,+BAA+B,EAC/B,EAAE,QAAQ,EAAE,8BAA8B,EAAE,QAAQ,EAAE,UAAU,EAAE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAwB,EACxB,aAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IACzE,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1D,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,aAAqB;AACrB,8EAA8E;AAC9E,OAAmB;IAEnB,MAAM,aAAa,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,KAAK,EACL,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CACzF,CAAC;IACF,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,eAAe,CACnB,iEAAiE,aAAa,cAAc,QAAQ,EAAE,EACtG,eAAe,EACf,wBAAwB,EACxB,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,OAAO,EACP,aAAa,EACb,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,mBAAmB,CAAC,EACzD,CAAC,CAAC,EAAE,CAAC,CAAC,CACP,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,8EAA8E;YAC9E,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,qDAAqD,EAAE;gBACtF,GAAG;gBACH,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI;aAC9C,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;QACzD,MAAM,eAAe,CACnB,yDAAyD,8BAA8B,EAAE,EACzF,aAAa,EACb,0BAA0B,EAC1B,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE;QAC3D,QAAQ;QACR,aAAa;QACb,sBAAsB;QACtB,IAAI;QACJ,gCAAgC;QAChC,gCAAgC;KACjC,CAAC,CAAC,CAAC,MAAM,CAAC;IACX,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,eAAe,CACnB,6FAA6F,KAAK,EAAE,EACpG,mBAAmB,EACnB,0BAA0B,EAC1B,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,OAAO,EACP,aAAa,EACb,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,CAAC,EACrD,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CACZ,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,eAAe,CACnB,mFAAmF,EACnF,aAAa,EACb,yBAAyB,EACzB,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/npm/publish/release-grants.client.impl.d.ts

@@ -0,0 +1,10 @@
+import { BaseRuntimeClient } from "@vibesdotdev/kernel/client";
+import type { JobExecutionContext } from "@vibesdotdev/kernel/kinds";
+import type { ReleaseGrantIdentity } from "../../../schemas/release-grants.ts";
+/** Runtime-owned coordination for exact release output grants. */
+export default class ReleaseGrantsClient extends BaseRuntimeClient {
+    private readonly passes;
+    ensureGrants(repositoryId: string, releasePackages: readonly ReleaseGrantIdentity[], registry: string | undefined, signal?: AbortSignal, park?: JobExecutionContext<unknown>["park"]): Promise<void>;
+    protected onDispose(): Promise<void>;
+}
+//# sourceMappingURL=release-grants.client.impl.d.ts.map

package/dist/cli/npm/publish/release-grants.client.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-grants.client.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-grants.client.impl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG/E,kEAAkE;AAClE,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,iBAAiB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAErD,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,SAAS,oBAAoB,EAAE,EAChD,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,GAAE,WAA2C,EACnD,IAAI,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC;cAgDS,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CAIpD"}

package/dist/cli/npm/publish/release-grants.client.impl.js

@@ -0,0 +1,63 @@
+import { valueFreeFailure } from "@vibesdotdev/kernel";
+import { BaseRuntimeClient } from "@vibesdotdev/kernel/client";
+import { getVibesClient } from "@vibesdotdev/kernel/client";
+import { ReleaseGrantJobOutputSchema } from "../../../schemas/release-jobs.js";
+import { RELEASE_GRANT_JOB_ID } from "./release-jobs.consumer.plugin.js";
+/** Runtime-owned coordination for exact release output grants. */
+export default class ReleaseGrantsClient extends BaseRuntimeClient {
+    passes = new Map();
+    async ensureGrants(repositoryId, releasePackages, registry, signal = this.runtime.lifecycle.signal, park) {
+        await this.ensureLoaded();
+        const key = JSON.stringify([
+            registry ?? null,
+            repositoryId,
+            releasePackages
+                .map((candidate) => `${candidate.packageName}\0${candidate.directory}`)
+                .sort(),
+        ]);
+        const passes = this.passes;
+        const existing = passes.get(key);
+        if (existing)
+            return park ? park(() => existing) : existing;
+        let stored;
+        const pass = (async () => {
+            try {
+                for (const candidate of releasePackages) {
+                    const input = { repositoryId, candidate };
+                    if (registry !== undefined)
+                        input.registry = registry;
+                    const workers = await getVibesClient("workers", this.runtime);
+                    const receipt = await workers.startJob(RELEASE_GRANT_JOB_ID, input, {
+                        signal,
+                    });
+                    const complete = () => workers.completeJob(receipt, {
+                        signal,
+                        cancelOnAbort: true,
+                        timeoutMs: 20 * 60_000,
+                    });
+                    const result = await (park ? park(complete) : complete());
+                    ReleaseGrantJobOutputSchema.parse(result);
+                }
+            }
+            catch (error) {
+                if (stored !== undefined && passes.get(key) === stored)
+                    passes.delete(key);
+                if (error instanceof Error && error.cause === undefined) {
+                    Object.defineProperty(error, "cause", {
+                        value: valueFreeFailure(error),
+                        enumerable: false,
+                    });
+                }
+                throw error;
+            }
+        })();
+        stored = pass;
+        passes.set(key, pass);
+        return pass;
+    }
+    async onDispose() {
+        await Promise.allSettled(this.passes.values());
+        this.passes.clear();
+    }
+}
+//# sourceMappingURL=release-grants.client.impl.js.map

package/dist/cli/npm/publish/release-grants.client.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-grants.client.impl.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-grants.client.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,EAAE,2BAA2B,EAA6B,MAAM,kCAAkC,CAAC;AAE1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,kEAAkE;AAClE,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,iBAAiB;IAC/C,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE3D,KAAK,CAAC,YAAY,CAChB,YAAoB,EACpB,eAAgD,EAChD,QAA4B,EAC5B,SAAsB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EACnD,IAA2C;QAE3C,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,QAAQ,IAAI,IAAI;YAChB,YAAY;YACZ,eAAe;iBACZ,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;iBACtE,IAAI,EAAE;SACV,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAE5D,IAAI,MAAiC,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC;gBACH,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;oBACxC,MAAM,KAAK,GAAyB,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;oBAChE,IAAI,QAAQ,KAAK,SAAS;wBAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;oBACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAgB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,EAAE;wBAClE,MAAM;qBACP,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE;wBAC3B,MAAM;wBACN,aAAa,EAAE,IAAI;wBACnB,SAAS,EAAE,EAAE,GAAG,MAAM;qBACvB,CAAC,CAAC;oBACL,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC1D,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;oBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3E,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxD,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE;wBACpC,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC;wBAC9B,UAAU,EAAE,KAAK;qBAClB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAEkB,KAAK,CAAC,SAAS;QAChC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/cli/npm/publish/release-jobs.client.d.ts

@@ -0,0 +1,39 @@
+import { type VibesRuntime } from "@vibesdotdev/kernel";
+import type { UIContext } from "@vibesdotdev/cli/providers";
+import { ReleaseLeasePreflightJobOutputSchema, type ReleasePublishJobInput } from "../../../schemas/release-jobs.ts";
+import type { PublishResult, RegistryReleasePublishTarget, RegistryWorkspaceProvenance } from "./types.ts";
+import type { ManagedRegistryReleaseWorkspaceWire } from "./release-workspace.ts";
+import type { ManagedPublishLeaseBody } from "../../../schemas/release-jobs.ts";
+export declare function dispatchReleaseLeasePreflight(options: {
+    runtime: VibesRuntime;
+    body: ManagedPublishLeaseBody;
+    registry: string;
+    createGrants: boolean;
+    signal?: AbortSignal;
+}): Promise<ReturnType<typeof ReleaseLeasePreflightJobOutputSchema.parse>>;
+export declare function dispatchSealedReleasePublish(options: {
+    runtime: VibesRuntime;
+    target: RegistryReleasePublishTarget;
+    sealedArtifact: PublishResult;
+    workspaceRoot: string;
+    scope: string;
+    tag?: string;
+    otp?: string;
+    provenance: boolean;
+    rateLimitRetries: number;
+    rateLimitDelayMs: number;
+    publishDelayMs?: number;
+    delayBeforePublish?: boolean;
+    quiet: boolean;
+    managedLease: boolean;
+    authorityVerify: boolean;
+    artifactDir?: string;
+    workspaceProvenance: RegistryWorkspaceProvenance;
+    expectedGitHead: string;
+    releaseWorkspace: ManagedRegistryReleaseWorkspaceWire;
+    publishTargets: readonly RegistryReleasePublishTarget[];
+    tokenSecret?: NonNullable<ReleasePublishJobInput["tokenSecret"]>;
+    ui: Pick<UIContext, "info" | "warn" | "log">;
+    signal?: AbortSignal;
+}): Promise<PublishResult>;
+//# sourceMappingURL=release-jobs.client.d.ts.map

package/dist/cli/npm/publish/release-jobs.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.client.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.client.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAEL,oCAAoC,EAIpC,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAC3G,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,wBAAsB,6BAA6B,CAAC,OAAO,EAAE;IAC3D,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oCAAoC,CAAC,KAAK,CAAC,CAAC,CAqBzE;AAiBD,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,4BAA4B,CAAC;IACrC,cAAc,EAAE,aAAa,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,2BAA2B,CAAC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,mCAAmC,CAAC;IACtD,cAAc,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACxD,WAAW,CAAC,EAAE,WAAW,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkGzB"}

package/dist/cli/npm/publish/release-jobs.client.js

@@ -0,0 +1,124 @@
+import { CapabilityError, settle } from "@vibesdotdev/kernel";
+import { getVibesClient } from "@vibesdotdev/kernel/client";
+import { EnvironmentTierSchema } from "@vibesdotdev/secrets";
+import { ReleaseLeasePreflightJobInputSchema, ReleaseLeasePreflightJobOutputSchema, ReleasePublishJobEventSchema, ReleasePublishJobInputSchema, ReleasePublishJobOutputSchema, } from "../../../schemas/release-jobs.js";
+import { RELEASE_PREFLIGHT_JOB_ID, RELEASE_PUBLISH_JOB_ID } from "./release-jobs.consumer.plugin.js";
+export async function dispatchReleaseLeasePreflight(options) {
+    const input = ReleaseLeasePreflightJobInputSchema.parse({
+        runId: globalThis.crypto.randomUUID(),
+        body: options.body,
+        registry: options.registry,
+        createGrants: options.createGrants,
+        retry: { attempts: 0 },
+    });
+    const workers = await getVibesClient("workers", options.runtime);
+    let output;
+    for await (const event of workers.runJobStreaming(RELEASE_PREFLIGHT_JOB_ID, input, {
+        signal: options.signal ?? options.runtime.lifecycle.signal,
+    })) {
+        if (event.type === "completed") {
+            output = ReleaseLeasePreflightJobOutputSchema.parse(event.data);
+        }
+    }
+    if (!output) {
+        throw new Error("Workers preflight job ended without a result.");
+    }
+    return output;
+}
+async function storeTemporaryNpmOtp(runtime, otp) {
+    const tier = EnvironmentTierSchema.parse(runtime.scope.qualifiers.environmentTier);
+    const secrets = await getVibesClient("secrets", runtime);
+    const key = `VIBES_NPM_OTP_${globalThis.crypto.randomUUID()}`;
+    const store = secrets.env(tier);
+    await store.set(key, otp);
+    return {
+        reference: { key },
+        cleanup: () => store.unset(key),
+    };
+}
+export async function dispatchSealedReleasePublish(options) {
+    const runtime = options.runtime;
+    if (!runtime.hasKind("workers/flow") ||
+        runtime.query("workers/flow").enabled().descriptors().length === 0) {
+        throw new CapabilityError("The release publisher requires a composed Workers flow to dispatch background jobs.", "UNAVAILABLE", { reason: "release-workers-flow-unavailable" });
+    }
+    const temporaryOtp = options.otp === undefined
+        ? undefined
+        : await storeTemporaryNpmOtp(runtime, options.otp);
+    const dispatched = await settle(async () => {
+        const input = ReleasePublishJobInputSchema.parse({
+            runId: globalThis.crypto.randomUUID(),
+            packageDir: options.target.packageDir,
+            workspaceRoot: options.workspaceRoot,
+            registry: options.target.registry,
+            scope: options.scope,
+            tag: options.tag,
+            publishDelayMs: options.publishDelayMs,
+            otpSecret: temporaryOtp?.reference,
+            provenance: options.provenance,
+            rateLimitRetries: options.rateLimitRetries,
+            rateLimitDelayMs: options.rateLimitDelayMs,
+            quiet: options.quiet,
+            managedLease: options.managedLease,
+            authorityVerify: options.authorityVerify,
+            artifactDir: options.artifactDir,
+            workspaceProvenance: options.workspaceProvenance,
+            expectedGitHead: options.expectedGitHead,
+            releaseWorkspace: options.releaseWorkspace,
+            publishTargets: options.publishTargets,
+            sealedArtifact: options.sealedArtifact,
+            version: options.target.version,
+            tokenSecret: options.tokenSecret,
+            retry: {
+                attempts: 0,
+                transientRetries: 0,
+                rateLimitRetries: 0,
+                leaseDeadlineAt: runtime.lifecycle.now() + 20 * 60_000,
+                grantReadLagAttempt: 0,
+                leasePolls: 0,
+                publishDelayPending: options.delayBeforePublish ?? false,
+            },
+        });
+        const workers = await getVibesClient("workers", runtime);
+        let output;
+        for await (const event of workers.runJobStreaming(RELEASE_PUBLISH_JOB_ID, input, {
+            signal: options.signal ?? runtime.lifecycle.signal,
+        })) {
+            if (event.type === "release-output") {
+                const reported = ReleasePublishJobEventSchema.parse(event.data);
+                options.ui[reported.level](reported.message);
+                continue;
+            }
+            if (event.type === "completed") {
+                output = ReleasePublishJobOutputSchema.parse(event.data);
+            }
+        }
+        if (!output) {
+            throw new Error(`Workers publish job ended without a result for ${options.target.name}@${options.target.version}.`);
+        }
+        if (output.status === "failed") {
+            const details = [
+                output.failure.name,
+                output.failure.code,
+                output.failure.reason,
+                output.registryStatus === undefined ? undefined : `HTTP ${output.registryStatus}`,
+            ]
+                .filter((part) => Boolean(part))
+                .join("/");
+            throw new Error(`Could not publish ${output.name}@${output.version} after ${output.attempts} attempt(s) (${details}).`, { cause: output.failure });
+        }
+        return output.result;
+    });
+    const cleanup = temporaryOtp
+        ? await settle(() => temporaryOtp.cleanup())
+        : undefined;
+    if (!dispatched.ok && cleanup && !cleanup.ok) {
+        throw new AggregateError([dispatched.cause, cleanup.cause], "Release publish failed and its temporary OTP cleanup also failed.", { cause: dispatched.cause });
+    }
+    if (!dispatched.ok)
+        throw dispatched.cause;
+    if (cleanup && !cleanup.ok)
+        throw cleanup.cause;
+    return dispatched.value;
+}
+//# sourceMappingURL=release-jobs.client.js.map

package/dist/cli/npm/publish/release-jobs.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.client.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAqB,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EACL,mCAAmC,EACnC,oCAAoC,EACpC,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,GAE9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAKrG,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAMnD;IACC,MAAM,KAAK,GAAG,mCAAmC,CAAC,KAAK,CAAC;QACtD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QACrC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAgB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,MAAiF,CAAC;IACtF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC,wBAAwB,EAAE,KAAK,EAAE;QACjF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;KAC3D,CAAC,EAAE,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,GAAW;IAIpE,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAgB,SAAS,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,iBAAiB,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO;QACL,SAAS,EAAE,EAAE,GAAG,EAAE;QAClB,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAwBlD;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IACE,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,qFAAqF,EACrF,aAAa,EACb,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS;QAC5C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;QACzC,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,CAAC;YAC/C,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;YACrC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;YACrC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,YAAY,EAAE,SAAS;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE;gBACL,QAAQ,EAAE,CAAC;gBACX,gBAAgB,EAAE,CAAC;gBACnB,gBAAgB,EAAE,CAAC;gBACnB,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM;gBACtD,mBAAmB,EAAE,CAAC;gBACtB,UAAU,EAAE,CAAC;gBACb,mBAAmB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;aACzD;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAgB,SAAS,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,MAA0E,CAAC;QAC/E,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC,sBAAsB,EAAE,KAAK,EAAE;YAC/E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM;SACnD,CAAC,EAAE,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,kDAAkD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,CACnG,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACd,MAAM,CAAC,OAAO,CAAC,IAAI;gBACnB,MAAM,CAAC,OAAO,CAAC,IAAI;gBACnB,MAAM,CAAC,OAAO,CAAC,MAAM;gBACrB,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,cAAc,EAAE;aAClF;iBACE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iBAC/C,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,QAAQ,gBAAgB,OAAO,IAAI,EACtG,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAC1B,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,YAAY;QAC1B,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,cAAc,CACtB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EACjC,mEAAmE,EACnE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAC5B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,MAAM,UAAU,CAAC,KAAK,CAAC;IAC3C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IAChD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC"}

package/dist/cli/npm/publish/release-jobs.consumer.plugin.d.ts

@@ -0,0 +1,20 @@
+import type { JobDescriptor } from "@vibesdotdev/kernel/kinds";
+export declare const RELEASE_GRANT_JOB_ID = "infra-deploy.release.grant";
+export declare const RELEASE_PUBLISH_JOB_ID = "infra-deploy.release.publish";
+export declare const RELEASE_PREFLIGHT_JOB_ID = "infra-deploy.release.preflight";
+export declare const releaseWorkerDescriptor: {
+    readonly kind: "workers/worker";
+    readonly id: "infra-deploy.release";
+    readonly name: "Registry release worker";
+    readonly description: "Serve Registry grants, lease preflights and sealed publication";
+    readonly hardware: ["consumer"];
+    readonly queue: "infra-deploy-release";
+    readonly concurrency: 1;
+    readonly enabled: true;
+};
+export declare const releasePublishJobDescriptor: JobDescriptor;
+export declare const releasePreflightJobDescriptor: JobDescriptor;
+export declare const releaseGrantJobDescriptor: JobDescriptor;
+declare const releaseJobsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default releaseJobsPlugin;
+//# sourceMappingURL=release-jobs.consumer.plugin.d.ts.map

package/dist/cli/npm/publish/release-jobs.consumer.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.consumer.plugin.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.consumer.plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAU/D,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE,eAAO,MAAM,sBAAsB,iCAAiC,CAAC;AACrE,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,eAAO,MAAM,uBAAuB;;;;;;;;;CASlC,CAAC;AAEH,eAAO,MAAM,2BAA2B,eAgBtC,CAAC;AAEH,eAAO,MAAM,6BAA6B,eAgBxC,CAAC;AAEH,eAAO,MAAM,yBAAyB,eAcpC,CAAC;AAEH,QAAA,MAAM,iBAAiB,6CAuBrB,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/cli/npm/publish/release-jobs.consumer.plugin.js

@@ -0,0 +1,82 @@
+import { createRuntimeAsset, createRuntimePlugin, loader } from "@vibesdotdev/kernel";
+import { ReleaseGrantJobInputSchema, ReleaseGrantJobOutputSchema, ReleaseLeasePreflightJobInputSchema, ReleaseLeasePreflightJobOutputSchema, ReleasePublishJobInputSchema, ReleasePublishJobOutputSchema, } from "../../../schemas/release-jobs.js";
+export const RELEASE_GRANT_JOB_ID = "infra-deploy.release.grant";
+export const RELEASE_PUBLISH_JOB_ID = "infra-deploy.release.publish";
+export const RELEASE_PREFLIGHT_JOB_ID = "infra-deploy.release.preflight";
+export const releaseWorkerDescriptor = createRuntimeAsset({
+    kind: 'workers/worker',
+    id: 'infra-deploy.release',
+    name: 'Registry release worker',
+    description: 'Serve Registry grants, lease preflights and sealed publication',
+    hardware: ['consumer'],
+    queue: 'infra-deploy-release',
+    concurrency: 1,
+    enabled: true,
+});
+export const releasePublishJobDescriptor = createRuntimeAsset({
+    kind: "workers/job",
+    id: RELEASE_PUBLISH_JOB_ID,
+    hardware: ['consumer'],
+    name: "Publish a sealed Registry release output",
+    description: "Publish one sealed package with Workers-owned retry progression",
+    queue: "infra-deploy-release",
+    dispatch: "background",
+    retries: { maxAttempts: 1 },
+    timeout: 45 * 60_000,
+    dispatchBounds: { delayMs: { max: 24 * 60 * 60_000 } },
+    schemas: {
+        input: ReleasePublishJobInputSchema,
+        output: ReleasePublishJobOutputSchema,
+    },
+    enabled: true,
+});
+export const releasePreflightJobDescriptor = createRuntimeAsset({
+    kind: "workers/job",
+    id: RELEASE_PREFLIGHT_JOB_ID,
+    hardware: ['consumer'],
+    name: "Preflight a Registry release lease",
+    description: "Check a release lease with Workers-owned grant visibility retries",
+    queue: "infra-deploy-release",
+    dispatch: "background",
+    retries: { maxAttempts: 1 },
+    timeout: 45 * 60_000,
+    dispatchBounds: { delayMs: { max: 24 * 60 * 60_000 } },
+    schemas: {
+        input: ReleaseLeasePreflightJobInputSchema,
+        output: ReleaseLeasePreflightJobOutputSchema,
+    },
+    enabled: true,
+});
+export const releaseGrantJobDescriptor = createRuntimeAsset({
+    kind: "workers/job",
+    id: RELEASE_GRANT_JOB_ID,
+    hardware: ['consumer'],
+    name: "Grant a Registry release output",
+    description: "Create the exact package grant needed by a managed release lease",
+    queue: "infra-deploy-release",
+    dispatch: "background",
+    retries: { maxAttempts: 3, backoff: "exponential", delay: 1_000 },
+    schemas: {
+        input: ReleaseGrantJobInputSchema,
+        output: ReleaseGrantJobOutputSchema,
+    },
+    enabled: true,
+});
+const releaseJobsPlugin = createRuntimePlugin({
+    id: "infra-deploy.release-jobs",
+    name: "Infra Deploy release jobs",
+    dependencies: ["workers"],
+    descriptors: [
+        releaseWorkerDescriptor,
+        releaseGrantJobDescriptor, releasePreflightJobDescriptor, releasePublishJobDescriptor,
+        { id: 'infra-deploy.release-grants', kind: 'runtime/client' },
+    ],
+    loaders: [
+        loader('infra-deploy.release-grants', { kind: 'runtime/client' }, () => import("./release-grants.client.impl.js")),
+        loader(RELEASE_GRANT_JOB_ID, { kind: "workers/job", scope: "consumer" }, () => import("./release-jobs.impl.js")),
+        loader(RELEASE_PREFLIGHT_JOB_ID, { kind: "workers/job", scope: "consumer" }, () => import("./release-preflight.job.impl.js")),
+        loader(RELEASE_PUBLISH_JOB_ID, { kind: "workers/job", scope: "consumer" }, () => import("./release-publish.job.impl.js")),
+    ],
+});
+export default releaseJobsPlugin;
+//# sourceMappingURL=release-jobs.consumer.plugin.js.map

package/dist/cli/npm/publish/release-jobs.consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.consumer.plugin.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.consumer.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEtF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,mCAAmC,EACnC,oCAAoC,EACpC,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAC;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAEzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;IACxD,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,gEAAgE;IAC7E,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAgB;IAC3E,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,sBAAsB;IAC1B,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,IAAI,EAAE,0CAA0C;IAChD,WAAW,EAAE,iEAAiE;IAC9E,KAAK,EAAE,sBAAsB;IAC7B,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;IAC3B,OAAO,EAAE,EAAE,GAAG,MAAM;IACpB,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE;IACtD,OAAO,EAAE;QACP,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,6BAA6B;KACtC;IACD,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,kBAAkB,CAAgB;IAC7E,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,IAAI,EAAE,oCAAoC;IAC1C,WAAW,EAAE,mEAAmE;IAChF,KAAK,EAAE,sBAAsB;IAC7B,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;IAC3B,OAAO,EAAE,EAAE,GAAG,MAAM;IACpB,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE;IACtD,OAAO,EAAE;QACP,KAAK,EAAE,mCAAmC;QAC1C,MAAM,EAAE,oCAAoC;KAC7C;IACD,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAgB;IACzE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,IAAI,EAAE,iCAAiC;IACvC,WAAW,EAAE,kEAAkE;IAC/E,KAAK,EAAE,sBAAsB;IAC7B,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE;IACjE,OAAO,EAAE;QACP,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,2BAA2B;KACpC;IACD,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;IAC5C,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,2BAA2B;IACjC,YAAY,EAAE,CAAC,SAAS,CAAC;IACzB,WAAW,EAAE;QACX,uBAAuB;QACvB,yBAAyB,EAAE,6BAA6B,EAAE,2BAA2B;QACrF,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE;KAC9D;IACD,OAAO,EAAE;QACP,MAAM,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CACrE,MAAM,CAAC,iCAAiC,CAAC,CAC1C;QACD,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAC5E,MAAM,CAAC,wBAAwB,CAAC,CACjC;QACD,MAAM,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAChF,MAAM,CAAC,iCAAiC,CAAC,CAC1C;QACD,MAAM,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAC9E,MAAM,CAAC,+BAA+B,CAAC,CACxC;KACF;CACF,CAAC,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/cli/npm/publish/release-jobs.impl.d.ts

@@ -0,0 +1,15 @@
+import type { VibesRuntime } from "@vibesdotdev/kernel";
+import type { JobDescriptor, JobExecutionContext, JobImplementation } from "@vibesdotdev/kernel/kinds";
+import type { ReleaseGrantJobInput, ReleaseGrantJobOutput } from "../../../schemas/release-jobs.ts";
+export default class ReleaseGrantJob implements JobImplementation<ReleaseGrantJobInput, ReleaseGrantJobOutput> {
+    readonly descriptor: JobDescriptor;
+    private readonly context;
+    readonly id: string;
+    readonly type: "default";
+    readonly isolation: "inline";
+    constructor(descriptor: JobDescriptor, context: {
+        runtime: VibesRuntime;
+    });
+    handle(job: JobExecutionContext<ReleaseGrantJobInput>): Promise<ReleaseGrantJobOutput>;
+}
+//# sourceMappingURL=release-jobs.impl.d.ts.map

package/dist/cli/npm/publish/release-jobs.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEvG,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAIpG,MAAM,CAAC,OAAO,OAAO,eAAgB,YAAW,iBAAiB,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;IAM1G,QAAQ,CAAC,UAAU,EAAE,aAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;gBAG5B,UAAU,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAK/C,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAkC7F"}

package/dist/cli/npm/publish/release-jobs.impl.js

@@ -0,0 +1,42 @@
+import { createPlatformRegistryClient, registryErrorMessage } from "./platform-registry.js";
+const PACKAGE_GRANTS_PATH = "/api/registry/package-grants";
+export default class ReleaseGrantJob {
+    descriptor;
+    context;
+    id;
+    type = "default";
+    isolation = "inline";
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.id = descriptor.id;
+    }
+    async handle(job) {
+        const { repositoryId, candidate, registry } = job.data;
+        let lastFailure = "unknown error";
+        try {
+            const response = await createPlatformRegistryClient(this.context.runtime, job.signal).raw(PACKAGE_GRANTS_PATH, "POST", {
+                packageName: candidate.packageName,
+                repositoryId,
+                directory: candidate.directory,
+            }, registry);
+            if (response.ok)
+                return { granted: true, attempts: job.attempt };
+            lastFailure = `(${response.status}) ${registryErrorMessage(response.payload)}`;
+        }
+        catch (cause) {
+            if (job.signal?.aborted)
+                throw cause;
+            lastFailure = cause instanceof Error ? cause.message : "request failed";
+            if (job.attempt >= job.maxAttempts) {
+                throw new Error(`Could not grant ${candidate.packageName} (directory ${candidate.directory} of repository ${repositoryId}) after ${job.attempt} attempts: ${lastFailure}`, { cause });
+            }
+            throw new Error(lastFailure, { cause });
+        }
+        if (job.attempt >= job.maxAttempts) {
+            throw new Error(`Could not grant ${candidate.packageName} (directory ${candidate.directory} of repository ${repositoryId}) after ${job.attempt} attempts: ${lastFailure}`);
+        }
+        throw new Error(lastFailure);
+    }
+}
+//# sourceMappingURL=release-jobs.impl.js.map

package/dist/cli/npm/publish/release-jobs.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-jobs.impl.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-jobs.impl.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG5F,MAAM,mBAAmB,GAAG,8BAA8B,CAAC;AAE3D,MAAM,CAAC,OAAO,OAAO,eAAe;IAMvB;IACQ;IANV,EAAE,CAAS;IACX,IAAI,GAAG,SAAkB,CAAC;IAC1B,SAAS,GAAG,QAAiB,CAAC;IAEvC,YACW,UAAyB,EACjB,OAAkC;QAD1C,eAAU,GAAV,UAAU,CAAe;QACjB,YAAO,GAAP,OAAO,CAA2B;QAEnD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAA8C;QACzD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACvD,IAAI,WAAW,GAAG,eAAe,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CACvF,mBAAmB,EACnB,MAAM,EACN;gBACE,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,YAAY;gBACZ,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,EACD,QAAQ,CACT,CAAC;YACF,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACjE,WAAW,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACrC,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACxE,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,CAAC,WAAW,eAAe,SAAS,CAAC,SAAS,kBAAkB,YAAY,WAAW,GAAG,CAAC,OAAO,cAAc,WAAW,EAAE,EACzJ,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,CAAC,WAAW,eAAe,SAAS,CAAC,SAAS,kBAAkB,YAAY,WAAW,GAAG,CAAC,OAAO,cAAc,WAAW,EAAE,CAC1J,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/cli/npm/publish/release-lock.d.ts

@@ -0,0 +1,143 @@
+/**
+ * The release lock: which committed workspace manifest and Bun lock a release
+ * builds from, proof that both are committed at the lock commit, and the lock
+ * source of a session (non-sealed) publish.
+ */
+import type { ChildEnvRuntime } from "../../shared/runtime-execution.ts";
+import type { RuntimeExecution } from "@vibesdotdev/kernel/execution";
+import { type ManagedRegistryReleaseWorkspace } from "./release-workspace.ts";
+import type { RegistryForgeSourceIdentity, RegistryReleaseBuildPackage } from "./types.ts";
+/** The release workspace manifest and its sibling `bun.lock`, relative and absolute. */
+export type RegistryReleaseWorkspacePaths = {
+    workspaceManifestPath: string;
+    lockfilePath: string;
+    workspaceManifestAbsolutePath: string;
+    lockfileAbsolutePath: string;
+};
+/**
+ * The release workspace manifest and its sibling `bun.lock`, relative and absolute,
+ * rejecting paths that escape the workspace.
+ */
+export declare function resolveRegistryReleaseWorkspacePaths(options: {
+    runtime: ChildEnvRuntime;
+    workspaceRoot: string;
+    workspaceManifestPath?: string;
+}): Promise<RegistryReleaseWorkspacePaths>;
+/**
+ * Throw unless every segment of the path is a real (non-symlink) entry in the workspace.
+ */
+export declare function assertCanonicalRegistryReleaseWorkspaceFile(options: {
+    runtime: ChildEnvRuntime;
+    workspaceRoot: string;
+    path: string;
+}): Promise<void>;
+/** Landed `refs/heads/main` on the canonical Forge remote — not a dirty local HEAD. */
+export declare function resolveForgeRefSha(options: {
+    sourceRoot: string;
+    repository: string;
+    ref: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<string>;
+/**
+ * The commit a session publish locks to: the workspace's verified snapshot, else Forge main.
+ */
+export declare function resolveSessionPublishLockGitHead(options: {
+    workspaceRoot: string;
+    expectedGitHeads: ReadonlyMap<string, string>;
+    lockSource: RegistryForgeSourceIdentity;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<string>;
+/** SHA-256 of a file as committed at `gitHead` (never the worktree copy). */
+export declare function hashCommittedGitPath(options: {
+    sourceRoot: string;
+    gitHead: string;
+    path: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<string>;
+/**
+ * Throw unless the worktree release manifest and lock match their committed bytes;
+ * returns the committed manifest and both digests.
+ */
+export declare function assertRegistryReleaseWorkspaceFilesCommitted(options: {
+    workspaceRoot: string;
+    lockGitHead: string;
+    paths: RegistryReleaseWorkspacePaths;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<{
+    workspaceManifest: Uint8Array;
+    workspaceManifestSha256: string;
+    lockfileSha256: string;
+}>;
+/**
+ * Session product path: pack a developer-workspace member without requiring it
+ * in `release/registry/package.json`. A Developer composition binds to its
+ * committed release manifest and lock; a standalone owner repository binds to
+ * its committed root manifest and Bun lock. `--release-workspace-manifest`
+ * remains the sealed closure path.
+ */
+export declare function resolveSessionPublishLockPaths(options: {
+    composeWorkspaceRoot: string;
+    lockGitHead: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<{
+    workspaceManifestPath: string;
+    lockfilePath: string;
+}>;
+/**
+ * The release workspace of a session publish, locked to the committed root or
+ * `release/registry` manifest and lock.
+ */
+export declare function buildSessionPublishReleaseWorkspace(options: {
+    composeWorkspaceRoot: string;
+    buildPackages: readonly RegistryReleaseBuildPackage[];
+    packages: readonly RegistryReleaseBuildPackage[];
+    buildPackageOrder: readonly string[];
+    expectedGitHeads: ReadonlyMap<string, string>;
+    lockSource: RegistryForgeSourceIdentity;
+    lockGitHead: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<ManagedRegistryReleaseWorkspace>;
+/** Seals the release workspace once the outputs' versions are assigned. */
+export type RegistryReleaseWorkspaceSealer = (assigned: {
+    buildPackages: readonly RegistryReleaseBuildPackage[];
+    packages: readonly RegistryReleaseBuildPackage[];
+}) => Promise<ManagedRegistryReleaseWorkspace>;
+/**
+ * Verify every build source is a clean, landed snapshot and the release lock
+ * is committed and landed. Returns each source root's verified commit and the
+ * sealer for the release workspace, which names exact outputs and so is
+ * sealed only after version assignment.
+ */
+export declare function verifyRegistryReleaseLock(options: {
+    workspaceRoot: string;
+    buildPackages: readonly RegistryReleaseBuildPackage[];
+    buildPackageOrder: readonly string[];
+    lockSource: RegistryForgeSourceIdentity;
+    /** Explicit sealed release workspace files; absent for a session publish. */
+    releaseWorkspacePaths?: RegistryReleaseWorkspacePaths;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+    /**
+     * ADR-0017 RC major-version exception (see `rc-major-exception.ts`): skip
+     * only the landed-on-canonical-main assertions. Snapshots stay clean and
+     * committed.
+     */
+    rcMajorException?: boolean;
+}): Promise<{
+    expectedGitHeads: Map<string, string>;
+    sealReleaseWorkspace: RegistryReleaseWorkspaceSealer;
+}>;
+//# sourceMappingURL=release-lock.d.ts.map

package/dist/cli/npm/publish/release-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-lock.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-lock.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAMzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAatE,OAAO,EAEL,KAAK,+BAA+B,EAGrC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,2BAA2B,EAC3B,2BAA2B,EAC5B,MAAM,YAAY,CAAC;AAEpB,wFAAwF;AACxF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,6BAA6B,EAAE,MAAM,CAAC;IACtC,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oCAAoC,CAAC,OAAO,EAAE;IAClE,OAAO,EAAE,eAAe,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA+CzC;AAED;;GAEG;AACH,wBAAsB,2CAA2C,CAAC,OAAO,EAAE;IACzE,OAAO,EAAE,eAAe,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAED,uFAAuF;AACvF,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBlB;AAED;;GAEG;AACH,wBAAsB,gCAAgC,CAAC,OAAO,EAAE;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,2BAA2B,CAAC;IACxC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlB;AAED,6EAA6E;AAC7E,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BlB;AAED;;;GAGG;AACH,wBAAsB,4CAA4C,CAAC,OAAO,EAAE;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,6BAA6B,CAAC;IACrC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC;IACV,iBAAiB,EAAE,UAAU,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CA4CD;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAAC,OAAO,EAAE;IAC5D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC;IAAE,qBAAqB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAmDnE;AAED;;;GAGG;AACH,wBAAsB,mCAAmC,CAAC,OAAO,EAAE;IACjE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtD,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACjD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,2BAA2B,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAmC3C;AAED,2EAA2E;AAC3E,MAAM,MAAM,8BAA8B,GAAG,CAAC,QAAQ,EAAE;IACtD,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtD,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAClD,KAAK,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtD,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,UAAU,EAAE,2BAA2B,CAAC;IACxC,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IACtD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;IACzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC;IACV,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,oBAAoB,EAAE,8BAA8B,CAAC;CACtD,CAAC,CAsGD"}