@vibesdotdev/infra-deploy 0.0.1 → 1.0.0-rc.4

package/dist/cli/npm/publish/release-phases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-phases.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-phases.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAIxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAE7E,OAAO,EACL,iCAAiC,EACjC,8BAA8B,EAC9B,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAO9B,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAmB,OAShE;IACC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAClC,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAClC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAE,EACvB,KAAK,EACL,MAAM,CAAC,KAAK,CAAE,CACf,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AA+BD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OA6B/C;IACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACrE,MAAM,OAAO,GAAmD,EAAE,CAAC;IACnE,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;QAC7C,OAAO,EAAE,OAAO,CAAC,cAAc;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,OAAO,cAAc,CAAC;gBACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,GAAG,EAAE,SAAS;gBACd,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,MAAM,EAAE,IAAI;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,gBAAgB,EAAE,CAAC;gBACnB,EAAE;gBACF,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS;gBACT,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK;gBACL,YAAY,EAAE,KAAK;gBACnB,eAAe,EAAE,KAAK;gBACtB,WAAW,EAAE,OAAO,CAAC,eAAe;gBACpC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,eAAe,EAAE,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBACnE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;gBAClD,MAAM;gBACN,KAAK,EAAE;oBACL,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,SAAS;oBACT,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,EAAE;oBACF,KAAK;oBACL,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,YAAY,EAAE,OAAO,CAAC,YAAY;iBACnC;gBACD,KAAK,EAAE;oBACL,WAAW,EAAE,OAAO,CAAC,eAAe;oBACpC,IAAI,EAAE,OAAO,CAAC,WAAW;oBACzB,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS;oBACT,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;oBACpD,cAAc,EAAE,IAAI,GAAG,CACrB,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3D,CACF;iBACF;aACF,CAAC,CAAC;YACH,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC7C,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/C,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC9B,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,OAAO;oBAAE,SAAS;gBAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CACxC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAC9C,CAAC;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,CAAC,IAAI,EAAE,CAC1D,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBACpE,iCAAiC,CAAC;oBAChC,QAAQ;oBACR,QAAQ,EAAE,MAAM,CAAC,OAAO;oBACxB,OAAO,EAAE,4CAA4C,MAAM,CAAC,IAAI,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,8BAA8B,CAAC;gBACnC,OAAO,EAAE,OAAO,CAAC,aAAa;gBAC9B,SAAS;gBACT,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,gBAAgB;gBAChB,aAAa,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI;aACjD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,mCAAmC,CAAC;gBACxC,MAAM;gBACN,SAAS;gBACT,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,gBAAgB;gBAChB,aAAa,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI;aACjD,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,wBAAwB,CAC9C,MAAM,EACN,gBAAgB,CACjB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,iCAAiC,CAAC;oBAChC,QAAQ,EAAE,eAAe;oBACzB,QAAQ,EAAE,MAAM,CAAC,OAAO;oBACxB,OAAO,EAAE,4CAA4C,MAAM,CAAC,IAAI,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;YAC5C,gBAAgB,GAAG,KAAK,CAAC;YACzB,OAAO,MAAM,CAAC,OAAO;gBACnB,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;gBAC9B,CAAC,CAAC,4BAA4B,CAAC;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM;oBACN,cAAc,EAAE,MAAM;oBACtB,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;oBAC3C,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;oBAC3C,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,kBAAkB;oBAClB,KAAK;oBACL,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,eAAe;oBACf,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,EAAE;iBACH,CAAC,CAAC;QACT,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1D,gBAAgB;gBACd,CAAC,OAAO,CAAC,MAAM;oBACf,OAAO;oBACP,QAAQ,CAAC,cAAc,GAAG,CAAC;oBAC3B,CAAC,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC;QACD,iBAAiB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;KAChE,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}

package/dist/cli/npm/publish/release-plan.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Release planning for `vibes infra npm publish`: from the requested package
+ * directories to the release set (`planRegistryReleaseSet`), its
+ * dependency-first build closure, each package's owning Forge source and
+ * provenance, and the publish, artifact and Registry-input targets.
+ */
+import type { ChildEnvRuntime } from "../../shared/runtime-execution.ts";
+import { type RegistryReleaseSetPlan, type RegistryReleaseWorkspacePackage } from "@vibesdotdev/registry";
+import type { RuntimeExecution } from "@vibesdotdev/kernel/execution";
+import type { WorkspacePackage } from "../../shared/build-workspace-artifacts.ts";
+import type { RegistryForgeSourceIdentity, RegistryReleaseBuildPackage, RegistryReleasePublishTarget } from "./types.ts";
+/** Resolves a Forge repository reference to its stable repository id. */
+export type ForgeRepositoryIdResolver = {
+    resolveRepositoryId(ref: string): Promise<string>;
+};
+/** The planned release and every target derived from it. */
+export type RegistryReleaseTargets = {
+    /** npm scope for registry configuration, from the flag or the first root. */
+    scope: string;
+    releasePlan: RegistryReleaseSetPlan;
+    /** Dependency-first build order of the whole release closure. */
+    buildPackageOrder: string[];
+    /** Every package the release builds, at its SOURCE version. */
+    buildPackages: RegistryReleaseBuildPackage[];
+    /** Every release output (publish order), including unrequested closure members. */
+    artifactTargets: RegistryReleasePublishTarget[];
+    /** The requested roots: the only outputs this invocation may publish. */
+    publishTargets: RegistryReleasePublishTarget[];
+    /** Workspace packages the release consumes from the Registry, not builds. */
+    workspaceInputRegistryTargets: RegistryReleasePublishTarget[];
+    /**
+     * Source records of the workspace Registry inputs outside the build closure (an optional peer a
+     * proof profile requires): sealed from the Registry by their source identity, never built.
+     */
+    workspaceInputPackages: RegistryReleaseBuildPackage[];
+    /** Forge identity of the compose workspace that holds the release lock. */
+    lockSourceIdentity: RegistryForgeSourceIdentity;
+};
+/**
+ * The packages a release needs a source record for: its build closure, then each workspace Registry
+ * input outside it (an optional peer a proof profile requires is never built, but is sealed by its
+ * source identity). `workspaceInputNames` are every workspace input, in requirement order.
+ */
+export declare function releaseRecordNames(buildPackageOrder: readonly string[], externalRequirements: readonly {
+    name: string;
+    source: "registry" | "workspace";
+}[]): {
+    workspaceInputNames: string[];
+    recordNames: string[];
+};
+/** Plan the release set and every target for the requested package directories. */
+export declare function planRegistryReleaseTargets(options: {
+    packageDirs: readonly string[];
+    explicitScope?: string;
+    workspaceRoot: string;
+    workspace: ReadonlyMap<string, RegistryReleaseWorkspacePackage>;
+    workspacePackageScope: ReadonlyMap<string, WorkspacePackage>;
+    registryOverride?: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+    /** Resolved after the release set is planned, as the Forge API is only needed then. */
+    forgeApiClient: () => Promise<ForgeRepositoryIdResolver>;
+}): Promise<RegistryReleaseTargets>;
+//# sourceMappingURL=release-plan.d.ts.map

package/dist/cli/npm/publish/release-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-plan.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-plan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACrC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAclF,OAAO,KAAK,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAEpB,yEAAyE;AACzE,MAAM,MAAM,yBAAyB,GAAG;IACtC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD,CAAC;AAEF,4DAA4D;AAC5D,MAAM,MAAM,sBAAsB,GAAG;IACnC,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,sBAAsB,CAAC;IACpC,iEAAiE;IACjE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,+DAA+D;IAC/D,aAAa,EAAE,2BAA2B,EAAE,CAAC;IAC7C,mFAAmF;IACnF,eAAe,EAAE,4BAA4B,EAAE,CAAC;IAChD,yEAAyE;IACzE,cAAc,EAAE,4BAA4B,EAAE,CAAC;IAC/C,6EAA6E;IAC7E,6BAA6B,EAAE,4BAA4B,EAAE,CAAC;IAC9D;;;OAGG;IACH,sBAAsB,EAAE,2BAA2B,EAAE,CAAC;IACtD,2EAA2E;IAC3E,kBAAkB,EAAE,2BAA2B,CAAC;CACjD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,iBAAiB,EAAE,SAAS,MAAM,EAAE,EACpC,oBAAoB,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CAAA;CAAE,EAAE;;;EAcpF;AAED,mFAAmF;AACnF,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACxD,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAChE,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;IACzB,uFAAuF;IACvF,cAAc,EAAE,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAC1D,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoLlC"}

package/dist/cli/npm/publish/release-plan.js

@@ -0,0 +1,178 @@
+import { publishAccessForManifest, planRegistryReleaseSet, } from "@vibesdotdev/registry";
+import { mapWithConcurrency } from "./concurrency.js";
+import { resolveRegistryForgeSourceIdentity, resolveRegistryOwningRepositoryRoots, resolveRegistryWorkspaceProvenance, } from "./forge-source-identity.js";
+import { readPackageJson } from "./fs-paths.js";
+import { parsePublisherManifest } from "./publisher-manifest.js";
+import { isPublicNpmProofRegistry, resolvePublishRegistry, } from "./registry-credentials.js";
+import { planRegistryReleaseBuildPackageOrder } from "./release-build.js";
+/**
+ * The packages a release needs a source record for: its build closure, then each workspace Registry
+ * input outside it (an optional peer a proof profile requires is never built, but is sealed by its
+ * source identity). `workspaceInputNames` are every workspace input, in requirement order.
+ */
+export function releaseRecordNames(buildPackageOrder, externalRequirements) {
+    const workspaceInputNames = [
+        ...new Set(externalRequirements
+            .filter((requirement) => requirement.source === "workspace")
+            .map((requirement) => requirement.name)),
+    ];
+    const inBuildOrder = new Set(buildPackageOrder);
+    return {
+        workspaceInputNames,
+        recordNames: [...buildPackageOrder, ...workspaceInputNames.filter((name) => !inBuildOrder.has(name))],
+    };
+}
+/** Plan the release set and every target for the requested package directories. */
+export async function planRegistryReleaseTargets(options) {
+    const { workspace, workspaceRoot, execution } = options;
+    const isPublicNpmTarget = options.registryOverride !== undefined &&
+        isPublicNpmProofRegistry(options.registryOverride);
+    const isEligibleWorkspaceRootMember = (entry) => {
+        if (entry.manifest.private === true)
+            return false;
+        if (!isPublicNpmTarget)
+            return true;
+        return (publishAccessForManifest(parsePublisherManifest(entry.manifest)) ===
+            "public");
+    };
+    const workspaceEntriesByDir = new Map([...workspace.values()].map((entry) => [entry.directory, entry]));
+    const roots = [];
+    for (const packageDir of options.packageDirs) {
+        if (packageDir === workspaceRoot &&
+            !workspaceEntriesByDir.has(workspaceRoot)) {
+            for (const entry of workspace.values()) {
+                if (isEligibleWorkspaceRootMember(entry)) {
+                    roots.push(entry.manifest.name);
+                }
+            }
+            continue;
+        }
+        const pkg = await readPackageJson(options.runtime, packageDir);
+        roots.push(pkg.name);
+    }
+    const scope = options.explicitScope ??
+        roots.find((name) => name.startsWith("@") && name.includes("/"))?.split("/")[0] ??
+        "@vibesdotdev";
+    const profiles = roots.flatMap((root) => (workspace.get(root)?.manifest.vibes?.publishProofProfiles ?? []).map((profile) => ({
+        ...profile,
+        root,
+    })));
+    const releasePlan = planRegistryReleaseSet({ roots, workspace, profiles });
+    // Every graph package's access derives from its tier; a manifest that
+    // disagrees refuses here, before the release builds anything.
+    for (const name of releasePlan.publishOrder) {
+        const planned = workspace.get(name);
+        if (!planned)
+            throw new Error(`Release planner lost workspace package ${name}`);
+        publishAccessForManifest(parsePublisherManifest(planned.manifest));
+    }
+    const buildPackageOrder = await planRegistryReleaseBuildPackageOrder({
+        workspaceRoot,
+        releasePlan,
+        workspacePackageScope: options.workspacePackageScope,
+        runtime: options.runtime,
+    });
+    const forgeApiClient = await options.forgeApiClient();
+    // Workspace Registry inputs are sealed from the Registry, never built. One outside the build
+    // closure (an optional peer a proof profile requires; 8f2209973 keeps every optional peer out of
+    // the closure) still needs its source record, so its sealed artifact is proven against its source.
+    const { workspaceInputNames, recordNames } = releaseRecordNames(buildPackageOrder, releasePlan.externalRequirements);
+    const inBuildOrder = new Set(buildPackageOrder);
+    const plannedDirectories = recordNames.map((name) => {
+        const planned = workspace.get(name);
+        if (!planned)
+            throw new Error(`Release build planner lost workspace package ${name}`);
+        return planned.directory;
+    });
+    const sourceRoots = await resolveRegistryOwningRepositoryRoots({
+        registeredWorkspaceRoot: workspaceRoot,
+        packageDirs: plannedDirectories,
+        execution,
+        runtime: options.runtime,
+    });
+    const uniqueSourceRoots = [...new Set(sourceRoots.values())].sort();
+    const sourceIdentities = new Map(await mapWithConcurrency(uniqueSourceRoots, 4, async (sourceRoot) => {
+        const identity = await resolveRegistryForgeSourceIdentity({
+            sourceRoot,
+            execution,
+            runtime: options.runtime,
+            resolveRepositoryId: (repositoryRef) => forgeApiClient.resolveRepositoryId(repositoryRef),
+        });
+        return [sourceRoot, identity];
+    }));
+    const lockSourceIdentity = await resolveRegistryForgeSourceIdentity({
+        sourceRoot: workspaceRoot,
+        execution,
+        runtime: options.runtime,
+        resolveRepositoryId: (repositoryRef) => forgeApiClient.resolveRepositoryId(repositoryRef),
+    });
+    const records = [];
+    for (const name of recordNames) {
+        const planned = workspace.get(name);
+        if (!planned)
+            throw new Error(`Release build planner lost workspace package ${name}`);
+        const sourceRoot = sourceRoots.get(planned.directory);
+        if (!sourceRoot)
+            throw new Error(`Release build planner lost source owner for ${name}`);
+        const sourceIdentity = sourceIdentities.get(sourceRoot);
+        if (!sourceIdentity)
+            throw new Error(`Release build planner lost Forge identity for ${name}`);
+        records.push({
+            name,
+            version: planned.manifest.version,
+            packageDir: planned.directory,
+            sourceRoot,
+            workspaceProvenance: await resolveRegistryWorkspaceProvenance({
+                runtime: options.runtime,
+                workspaceRoot: sourceRoot,
+                packageDir: planned.directory,
+                workspace,
+                forgeRepository: sourceIdentity.repository,
+                forgeRepositoryId: sourceIdentity.repositoryId,
+            }),
+        });
+    }
+    const recordByName = new Map(records.map((record) => [record.name, record]));
+    const buildPackages = records.filter((record) => inBuildOrder.has(record.name));
+    const workspaceInputPackages = records.filter((record) => !inBuildOrder.has(record.name));
+    const buildPackageByName = new Map(buildPackages.map((buildPackage) => [buildPackage.name, buildPackage]));
+    const registryFor = (planned) => resolvePublishRegistry(parsePublisherManifest(planned.manifest), options.registryOverride);
+    const artifactTargets = releasePlan.publishOrder.map((name) => {
+        const buildPackage = buildPackageByName.get(name);
+        if (!buildPackage)
+            throw new Error(`Release planner lost build package ${name}`);
+        const planned = workspace.get(name);
+        if (!planned)
+            throw new Error(`Release planner lost workspace package ${name}`);
+        const node = releasePlan.publishNodes.find((candidate) => candidate.name === name);
+        if (!node)
+            throw new Error(`Release planner lost release node ${name}`);
+        return { ...buildPackage, registry: registryFor(planned), roles: node.roles };
+    });
+    const requestedNames = new Set(roots);
+    const publishTargets = artifactTargets.filter((target) => requestedNames.has(target.name));
+    const workspaceInputRegistryTargets = workspaceInputNames.map((name) => {
+        const record = recordByName.get(name);
+        const planned = workspace.get(name);
+        if (!record || !planned) {
+            throw new Error(`Release planner lost workspace Registry input ${name}`);
+        }
+        return {
+            ...record,
+            registry: registryFor(planned),
+            roles: ["runtime"],
+        };
+    });
+    return {
+        scope,
+        releasePlan,
+        buildPackageOrder,
+        buildPackages,
+        artifactTargets,
+        publishTargets,
+        workspaceInputRegistryTargets,
+        workspaceInputPackages,
+        lockSourceIdentity,
+    };
+}
+//# sourceMappingURL=release-plan.js.map

package/dist/cli/npm/publish/release-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-plan.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-plan.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GAGvB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,kCAAkC,EAClC,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oCAAoC,EAAE,MAAM,oBAAoB,CAAC;AAoC1E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,iBAAoC,EACpC,oBAAmF;IAEnF,MAAM,mBAAmB,GAAG;QAC1B,GAAG,IAAI,GAAG,CACR,oBAAoB;aACjB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC;aAC3D,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAC1C;KACF,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO;QACL,mBAAmB;QACnB,WAAW,EAAE,CAAC,GAAG,iBAAiB,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;KACtG,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAYhD;IACC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACxD,MAAM,iBAAiB,GACrB,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,wBAAwB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,6BAA6B,GAAG,CACpC,KAAsC,EAC7B,EAAE;QACX,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,CACL,wBAAwB,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChE,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CACzB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAU,CAC7C,CACF,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7C,IACE,UAAU,KAAK,aAAa;YAC5B,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,EACzC,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvC,IAAI,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GACT,OAAO,CAAC,aAAa;QACrB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CACrE,GAAG,CACJ,CAAC,CAAC,CAAC;QACJ,cAAc,CAAC;IACjB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,GAAG,CACnE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACZ,GAAG,OAAO;QACV,IAAI;KACL,CAAC,CACH,CACF,CAAC;IACF,MAAM,WAAW,GAAG,sBAAsB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,sEAAsE;IACtE,8DAA8D;IAC9D,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACpE,wBAAwB,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,oCAAoC,CAAC;QACnE,aAAa;QACb,WAAW;QACX,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IACtD,6FAA6F;IAC7F,iGAAiG;IACjG,mGAAmG;IACnG,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACrH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,oCAAoC,CAAC;QAC7D,uBAAuB,EAAE,aAAa;QACtC,WAAW,EAAE,kBAAkB;QAC/B,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,MAAM,kBAAkB,CAAC,iBAAiB,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;YACxD,UAAU;YACV,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,mBAAmB,EAAE,CAAC,aAAa,EAAE,EAAE,CACrC,cAAc,CAAC,mBAAmB,CAAC,aAAa,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAU,CAAC;IACzC,CAAC,CAAC,CACH,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC;QAClE,UAAU,EAAE,aAAa;QACzB,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,mBAAmB,EAAE,CAAC,aAAa,EAAE,EAAE,CACrC,cAAc,CAAC,mBAAmB,CAAC,aAAa,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,cAAc;YACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,UAAU;YACV,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;gBAC5D,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,UAAU;gBACzB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,SAAS;gBACT,eAAe,EAAE,cAAc,CAAC,UAAU;gBAC1C,iBAAiB,EAAE,cAAc,CAAC,YAAY;aAC/C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,OAAwC,EAAE,EAAE,CAC/D,sBAAsB,CACpB,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxC,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACJ,MAAM,eAAe,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CACxC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CACvC,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC,CAAC;IACF,MAAM,6BAA6B,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC;YAC9B,KAAK,EAAE,CAAC,SAAS,CAAU;SAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,WAAW;QACX,iBAAiB;QACjB,aAAa;QACb,eAAe;QACf,cAAc;QACd,6BAA6B;QAC7B,sBAAsB;QACtB,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/cli/npm/publish/release-preflight.job.impl.d.ts

@@ -0,0 +1,16 @@
+import { type VibesRuntime } from "@vibesdotdev/kernel";
+import type { JobDescriptor, JobExecutionContext, JobImplementation } from "@vibesdotdev/kernel/kinds";
+import { type ReleaseLeasePreflightJobInput, type ReleaseLeasePreflightJobOutput } from "../../../schemas/release-jobs.ts";
+export default class ReleaseLeasePreflightJob implements JobImplementation<ReleaseLeasePreflightJobInput, ReleaseLeasePreflightJobOutput> {
+    readonly descriptor: JobDescriptor;
+    private readonly context;
+    readonly id: string;
+    readonly type: "default";
+    readonly isolation: "inline";
+    constructor(descriptor: JobDescriptor, context: {
+        runtime: VibesRuntime;
+    });
+    handle(job: JobExecutionContext<ReleaseLeasePreflightJobInput>): Promise<ReleaseLeasePreflightJobOutput>;
+    private continue;
+}
+//# sourceMappingURL=release-preflight.job.impl.d.ts.map

package/dist/cli/npm/publish/release-preflight.job.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-preflight.job.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-preflight.job.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEvG,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACpC,MAAM,kCAAkC,CAAC;AAS1C,MAAM,CAAC,OAAO,OAAO,wBAAyB,YAAW,iBAAiB,CAAC,6BAA6B,EAAE,8BAA8B,CAAC;IAMrI,QAAQ,CAAC,UAAU,EAAE,aAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;gBAG5B,UAAU,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAK/C,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,6BAA6B,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC;YAoChG,QAAQ;CAgCvB"}

package/dist/cli/npm/publish/release-preflight.job.impl.js

@@ -0,0 +1,71 @@
+import { CapabilityError, CaughtFailureSchema, settle, valueFreeFailure, } from "@vibesdotdev/kernel";
+import { getVibesClient } from "@vibesdotdev/kernel/client";
+import { JsonValueSchema } from "@vibesdotdev/kernel/schemas/json";
+import { ReleaseLeasePreflightJobOutputSchema, } from "../../../schemas/release-jobs.js";
+import { GRANT_READ_LAG_RETRY_DELAYS_MS } from "./managed-lease.js";
+import { createPlatformRegistryClient } from "./platform-registry.js";
+import { classifyPreflightAnswer } from "./lease-preflight-answer.js";
+import { RELEASE_PREFLIGHT_JOB_ID } from "./release-jobs.consumer.plugin.js";
+const PREFLIGHT_JOB_TIMEOUT_MS = 45 * 60_000;
+const PREFLIGHT_PATH = "/api/registry/publish-leases/preflight";
+export default class ReleaseLeasePreflightJob {
+    descriptor;
+    context;
+    id;
+    type = "default";
+    isolation = "inline";
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.context = context;
+        this.id = descriptor.id;
+    }
+    async handle(job) {
+        const { body, registry, createGrants } = job.data;
+        const attempts = job.data.retry.attempts + 1;
+        const requested = await settle(async () => {
+            const requestBody = JsonValueSchema.parse(JSON.parse(JSON.stringify(body)));
+            return createPlatformRegistryClient(this.context.runtime, job.signal).raw(PREFLIGHT_PATH, "POST", requestBody, registry);
+        });
+        if (!requested.ok) {
+            if (job.signal?.aborted)
+                throw requested.cause;
+            return ReleaseLeasePreflightJobOutputSchema.parse({
+                status: "unreachable",
+                failure: valueFreeFailure(CaughtFailureSchema.parse(requested.cause)),
+                attempts,
+            });
+        }
+        const response = requested.value;
+        const answer = classifyPreflightAnswer(response, body.packageName);
+        const delayMs = createGrants && answer.kind === "missing-grant"
+            ? GRANT_READ_LAG_RETRY_DELAYS_MS[job.data.retry.attempts]
+            : undefined;
+        if (delayMs !== undefined) {
+            return this.continue(job, job.data, delayMs);
+        }
+        return ReleaseLeasePreflightJobOutputSchema.parse({
+            status: "answered",
+            response,
+            attempts,
+        });
+    }
+    async continue(job, input, delayMs) {
+        if (!job.park) {
+            throw new CapabilityError("Release preflight continuation requires Workers park support.", "UNAVAILABLE", { reason: "release-preflight-park-unavailable" });
+        }
+        const workers = await getVibesClient("workers", this.context.runtime);
+        const nextAttempt = input.retry.attempts + 1;
+        const receipt = await workers.startJob(RELEASE_PREFLIGHT_JOB_ID, { ...input, retry: { attempts: nextAttempt } }, {
+            signal: job.signal,
+            jobId: `${input.runId}:${nextAttempt}`,
+            dispatch: { delayMs },
+            metadata: { release: "infra-deploy", operation: "lease-preflight", attempt: nextAttempt },
+        });
+        return ReleaseLeasePreflightJobOutputSchema.parse(await job.park(() => workers.completeJob(receipt, {
+            signal: job.signal,
+            cancelOnAbort: true,
+            timeoutMs: PREFLIGHT_JOB_TIMEOUT_MS,
+        })));
+    }
+}
+//# sourceMappingURL=release-preflight.job.impl.js.map

package/dist/cli/npm/publish/release-preflight.job.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-preflight.job.impl.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-preflight.job.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,MAAM,EACN,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAGnE,OAAO,EACL,oCAAoC,GAGrC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC7C,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAEhE,MAAM,CAAC,OAAO,OAAO,wBAAwB;IAMhC;IACQ;IANV,EAAE,CAAS;IACX,IAAI,GAAG,SAAkB,CAAC;IAC1B,SAAS,GAAG,QAAiB,CAAC;IAEvC,YACW,UAAyB,EACjB,OAAkC;QAD1C,eAAU,GAAV,UAAU,CAAe;QACjB,YAAO,GAAP,OAAO,CAA2B;QAEnD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAuD;QAClE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5E,OAAO,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CACvE,cAAc,EACd,MAAM,EACN,WAAW,EACX,QAAQ,CACT,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,SAAS,CAAC,KAAK,CAAC;YAC/C,OAAO,oCAAoC,CAAC,KAAK,CAAC;gBAChD,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACrE,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;QACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe;YAC7D,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,oCAAoC,CAAC,KAAK,CAAC;YAChD,MAAM,EAAE,UAAU;YAClB,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,GAAuD,EACvD,KAAoC,EACpC,OAAe;QAEf,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CACvB,+DAA+D,EAC/D,aAAa,EACb,EAAE,MAAM,EAAE,oCAAoC,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAgB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CACpC,wBAAwB,EACxB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAC9C;YACE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,EAAE;YACtC,QAAQ,EAAE,EAAE,OAAO,EAAE;YACrB,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE;SAC1F,CACF,CAAC;QACF,OAAO,oCAAoC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CACpE,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,wBAAwB;SACpC,CAAC,CACH,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/cli/npm/publish/release-publish.job.impl.d.ts

@@ -0,0 +1,18 @@
+import { type VibesRuntime } from "@vibesdotdev/kernel";
+import type { JobDescriptor, JobExecutionContext, JobImplementation } from "@vibesdotdev/kernel/kinds";
+import { type ReleasePublishJobInput, type ReleasePublishJobOutput } from "../../../schemas/release-jobs.ts";
+export default class ReleasePublishJob implements JobImplementation<ReleasePublishJobInput, ReleasePublishJobOutput> {
+    readonly descriptor: JobDescriptor;
+    private readonly context;
+    readonly id = "infra-deploy.release.publish";
+    readonly type: "default";
+    readonly isolation: "inline";
+    constructor(descriptor: JobDescriptor, context: {
+        runtime: VibesRuntime;
+    });
+    handle(job: JobExecutionContext<ReleasePublishJobInput>): Promise<ReleasePublishJobOutput>;
+    private resolveOtp;
+    private resolvePublishToken;
+    private continue;
+}
+//# sourceMappingURL=release-publish.job.impl.d.ts.map

package/dist/cli/npm/publish/release-publish.job.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-publish.job.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/release-publish.job.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAIvG,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAE7B,MAAM,kCAAkC,CAAC;AAqN1C,MAAM,CAAC,OAAO,OAAO,iBAAkB,YAAW,iBAAiB,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;IAMhH,QAAQ,CAAC,UAAU,EAAE,aAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,QAAQ,CAAC,EAAE,kCAA0B;IACrC,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;gBAG5B,UAAU,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAG/C,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;YA8DlF,UAAU;YAQV,mBAAmB;YAiBnB,QAAQ;CAgDvB"}