libretto 0.6.18 → 0.6.20

package/README.md

@@ -28,17 +28,14 @@ https://github.com/user-attachments/assets/9b9a0ab3-5133-4b20-b3be-459943349d18
 ## Installation
 
 ```bash
-# Install the Libretto command once. Requires Node.js and npm.
-curl -fsSL https://libretto.sh/install.sh | bash
-
-# Add Libretto to your project
+# Add Libretto to your project. Requires Node.js and npm.
 npm install libretto
 
 # First-time onboarding: install skills and download Chromium
-libretto setup
+npx libretto setup
 
 # Check workspace readiness at any time
-libretto status
+npx libretto status
 ```
 
 `setup` creates the `.libretto/` directory, installs agent skills, and downloads Chromium unless you pass `--skip-browsers`.
@@ -76,17 +73,17 @@ Agents can use Libretto to reproduce the failure, pause the workflow at any poin
 You can also use Libretto directly from the command line. All commands accept `--session <name>` to target a specific session.
 
 ```bash
-libretto open <url>                    # launch browser and open a URL
-libretto run ./integration.ts --headless # run a workflow and close on success
-libretto run ./integration.ts --headless --stay-open-on-success # keep a successful run inspectable
-libretto snapshot --session <name>     # capture a screenshot and compact accessibility tree
-libretto exec "<code>"                 # execute Playwright TypeScript against the open page
-libretto close                         # close the browser
+npx libretto open <url>                    # launch browser and open a URL
+npx libretto run ./integration.ts --headless # run a workflow and close on success
+npx libretto run ./integration.ts --headless --stay-open-on-success # keep a successful run inspectable
+npx libretto snapshot --session <name>     # capture a screenshot and compact accessibility tree
+npx libretto exec "<code>"                 # execute Playwright TypeScript against the open page
+npx libretto close                         # close the browser
 ```
 
 `run` sessions are inspectable through the same daemon-backed commands as `open` sessions. Successful runs close the browser by default; pass `--stay-open-on-success` to keep the browser open for `pages`, `snapshot`, and `exec`. Failed or paused workflows keep the browser open so you can inspect the exact page state before fixing or resuming the workflow.
 
-Run `libretto help` for the full list of commands.
+Run `npx libretto help` for the full list of commands.
 
 ## Configuration
 

package/README.template.md

@@ -26,17 +26,14 @@ https://github.com/user-attachments/assets/9b9a0ab3-5133-4b20-b3be-459943349d18
 ## Installation
 
 ```bash
-# Install the Libretto command once. Requires Node.js and npm.
-curl -fsSL https://libretto.sh/install.sh | bash
-
-# Add Libretto to your project
+# Add Libretto to your project. Requires Node.js and npm.
 npm install libretto
 
 # First-time onboarding: install skills and download Chromium
-libretto setup
+npx libretto setup
 
 # Check workspace readiness at any time
-libretto status
+npx libretto status
 ```
 
 `setup` creates the `.libretto/` directory, installs agent skills, and downloads Chromium unless you pass `--skip-browsers`.
@@ -74,17 +71,17 @@ Agents can use Libretto to reproduce the failure, pause the workflow at any poin
 You can also use Libretto directly from the command line. All commands accept `--session <name>` to target a specific session.
 
 ```bash
-libretto open <url>                    # launch browser and open a URL
-libretto run ./integration.ts --headless # run a workflow and close on success
-libretto run ./integration.ts --headless --stay-open-on-success # keep a successful run inspectable
-libretto snapshot --session <name>     # capture a screenshot and compact accessibility tree
-libretto exec "<code>"                 # execute Playwright TypeScript against the open page
-libretto close                         # close the browser
+npx libretto open <url>                    # launch browser and open a URL
+npx libretto run ./integration.ts --headless # run a workflow and close on success
+npx libretto run ./integration.ts --headless --stay-open-on-success # keep a successful run inspectable
+npx libretto snapshot --session <name>     # capture a screenshot and compact accessibility tree
+npx libretto exec "<code>"                 # execute Playwright TypeScript against the open page
+npx libretto close                         # close the browser
 ```
 
 `run` sessions are inspectable through the same daemon-backed commands as `open` sessions. Successful runs close the browser by default; pass `--stay-open-on-success` to keep the browser open for `pages`, `snapshot`, and `exec`. Failed or paused workflows keep the browser open so you can inspect the exact page state before fixing or resuming the workflow.
 
-Run `libretto help` for the full list of commands.
+Run `npx libretto help` for the full list of commands.
 
 ## Configuration
 

package/dist/cli/cli.js

@@ -2,27 +2,14 @@ import { ensureLibrettoSetup } from "./core/context.js";
 import { createCLIApp } from "./router.js";
 import {
   readCurrentCliVersion,
-  warnIfInstalledSkillOutOfDate
+  warnIfLibrettoVersionsDiffer
 } from "./core/skill-version.js";
 import { loadEnv } from "../shared/env/load-env.js";
 function renderVersion() {
   return readCurrentCliVersion();
 }
 function printSetupAudit() {
-  warnIfInstalledSkillOutOfDate();
-}
-function isPackageManagerExec(env = process.env) {
-  return env.npm_command === "exec";
-}
-function warnIfPackageManagerExec() {
-  if (!isPackageManagerExec()) return;
-  console.error(
-    [
-      "Warning: running Libretto through a package manager is deprecated and will be removed in a future release.",
-      "Install the native command instead:",
-      "  curl -fsSL https://libretto.sh/install.sh | bash"
-    ].join("\n")
-  );
+  warnIfLibrettoVersionsDiffer();
 }
 function isRootHelpRequest(rawArgs) {
   if (rawArgs.length === 0) return true;
@@ -42,7 +29,6 @@ async function runLibrettoCLI() {
   const rawArgs = process.argv.slice(2);
   let exitCode = 0;
   loadEnv();
-  warnIfPackageManagerExec();
   ensureLibrettoSetup();
   const app = createCLIApp();
   try {

package/dist/cli/commands/browser.js

@@ -17,7 +17,7 @@ import {
   setSessionMode,
   validateSessionName
 } from "../core/session.js";
-import { warnIfInstalledSkillOutOfDate } from "../core/skill-version.js";
+import { warnIfLibrettoVersionsDiffer } from "../core/skill-version.js";
 import { SimpleCLI } from "affordance";
 import {
   sessionOption,
@@ -88,7 +88,7 @@ const openInput = SimpleCLI.input({
 const openCommand = SimpleCLI.command({
   description: "Launch browser and open URL"
 }).input(openInput).use(withAutoSession()).use(withExperiments()).handle(async ({ input, ctx }) => {
-  warnIfInstalledSkillOutOfDate();
+  warnIfLibrettoVersionsDiffer();
   assertSessionAvailableForStart(ctx.session, ctx.logger);
   const providerName = resolveProviderName(input.provider);
   if (providerName === "local") {
@@ -141,7 +141,7 @@ const connectInput = SimpleCLI.input({
 const connectCommand = SimpleCLI.command({
   description: "Connect to an existing Chrome DevTools Protocol (CDP) endpoint"
 }).input(connectInput).use(withAutoSession()).use(withExperiments()).handle(async ({ input, ctx }) => {
-  warnIfInstalledSkillOutOfDate();
+  warnIfLibrettoVersionsDiffer();
   await runConnectWithLogger(
     input.cdpUrl,
     ctx.session,

package/dist/cli/commands/deploy.js

@@ -93,6 +93,10 @@ const deployInput = SimpleCLI.input({
       name: "entry-point",
       help: "Entry point file (default: index.ts)"
     }),
+    autoRepair: SimpleCLI.flag({
+      name: "auto-repair",
+      help: "Route failed jobs for this deployment to autofix"
+    }),
     external: SimpleCLI.option(
       z.string().optional().transform(
         (value) => value?.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0) ?? []
@@ -120,6 +124,7 @@ const deployCommand = SimpleCLI.command({
     entry_point: entryPoint
   };
   if (input.description) createPayload.description = input.description;
+  if (input.autoRepair) createPayload.auto_repair = true;
   console.log("Uploading deployment...");
   const body = await orpcCall({
     apiUrl,

package/dist/cli/commands/execution.js

@@ -23,7 +23,7 @@ import {
   setSessionStatus,
   writeSessionState
 } from "../core/session.js";
-import { warnIfInstalledSkillOutOfDate } from "../core/skill-version.js";
+import { warnIfLibrettoVersionsDiffer } from "../core/skill-version.js";
 import { readLibrettoConfig } from "../core/config.js";
 import { renderSnapshotDiff } from "../../shared/snapshot/diff-snapshots.js";
 import {
@@ -682,7 +682,7 @@ function resolveRunParams(rawInlineParams, paramsFile) {
 const runCommand = SimpleCLI.command({
   description: "Run the default-exported Libretto workflow from a file"
 }).input(runInput).use(withAutoSession()).use(withExperiments()).handle(async ({ input, ctx }) => {
-  warnIfInstalledSkillOutOfDate();
+  warnIfLibrettoVersionsDiffer();
   await stopExistingFailedRunSession(ctx.session, ctx.logger);
   assertSessionAvailableForStart(ctx.session, ctx.logger);
   const params = resolveRunParams(input.params, input.paramsFile);

package/dist/cli/commands/update.js

@@ -1,8 +1,16 @@
 import { spawnSync } from "node:child_process";
 import { readFileSync } from "node:fs";
+import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { SimpleCLI } from "affordance";
-const UPDATE_COMMAND = "curl -fsSL https://libretto.sh/install.sh | bash";
+import { REPO_ROOT } from "../core/context.js";
+import {
+  detectProjectPackageManager,
+  installCommand
+} from "../../shared/package-manager.js";
+function packageInstallCommand(packageManager, packageSpec) {
+  return `${installCommand(packageManager)} ${packageSpec}`;
+}
 function readCurrentCliVersion() {
   const packageJsonPath = fileURLToPath(
     new URL("../../../package.json", import.meta.url)
@@ -17,6 +25,21 @@ function readCurrentCliVersion() {
   }
   return manifest.version;
 }
+function readPackageVersion(packageJsonPath) {
+  try {
+    const manifest = JSON.parse(
+      readFileSync(packageJsonPath, "utf8")
+    );
+    return manifest.version?.trim() || null;
+  } catch {
+    return null;
+  }
+}
+function readLocalPackageVersion() {
+  return readPackageVersion(
+    join(REPO_ROOT, "node_modules", "libretto", "package.json")
+  );
+}
 function readLatestNpmVersion() {
   const result = spawnSync("npm", ["view", "libretto@latest", "version"], {
     encoding: "utf8"
@@ -65,55 +88,61 @@ const updateInput = SimpleCLI.input({
     })
   }
 });
-function formatUpdateFailure(status, signal) {
-  const knownState = status === null ? `installer was interrupted${signal ? ` by ${signal}` : ""}.` : `installer exited with status ${status}.`;
+function formatUpdateFailure(status, signal, updateCommand2) {
+  const knownState = status === null ? `package update was interrupted${signal ? ` by ${signal}` : ""}.` : `package update exited with status ${status}.`;
   return [
     "Error: failed to update Libretto to the latest version.",
     `Known state: ${knownState}`,
-    `Try: ${UPDATE_COMMAND}`,
+    `Try: ${updateCommand2}`,
     "Help: libretto help update"
   ].join("\n");
 }
 const updateCommand = SimpleCLI.command({
   description: "Update Libretto to the latest version"
 }).input(updateInput).handle(async ({ input }) => {
+  const packageManager = detectProjectPackageManager();
+  const updateCommand2 = packageInstallCommand(packageManager, "libretto@latest");
   if (input.dryRun) {
     console.log("Update command:");
-    console.log(`  ${UPDATE_COMMAND}`);
+    console.log(`  ${updateCommand2}`);
     console.log("No changes made.");
     return;
   }
   const currentVersion = readCurrentCliVersion();
+  const localPackageVersion = readLocalPackageVersion();
+  const installedVersion = localPackageVersion ?? currentVersion;
   const latestVersion = readLatestNpmVersion();
-  console.log(`Current version: ${currentVersion}`);
+  console.log(`Current version: ${installedVersion}`);
   console.log(`Latest version: ${latestVersion}`);
-  if (currentVersion === latestVersion) {
-    console.log(`Libretto is already up to date (${currentVersion}).`);
+  if (localPackageVersion && installedVersion === latestVersion) {
+    console.log(`Libretto is already up to date (${installedVersion}).`);
     console.log("No further action required.");
     return;
   }
-  console.log("Updating Libretto to latest...");
-  const result = spawnSync("bash", ["-lc", UPDATE_COMMAND], {
+  if (!localPackageVersion) {
+    console.log("Local package: not installed");
+  }
+  console.log("Updating local Libretto package to latest...");
+  const result = spawnSync(updateCommand2, {
     stdio: "inherit",
-    env: {
-      ...process.env,
-      LIBRETTO_VERSION: "latest"
-    }
+    shell: true
   });
   if (result.error) {
     throw new Error(
       [
-        "Error: failed to start the Libretto installer.",
+        "Error: failed to start the Libretto package update.",
         `Known state: ${result.error.message}`,
-        `Try: ${UPDATE_COMMAND}`,
+        `Try: ${updateCommand2}`,
         "Help: libretto help update"
       ].join("\n")
     );
   }
   if (result.status !== 0) {
-    throw new Error(formatUpdateFailure(result.status, result.signal));
+    throw new Error(
+      formatUpdateFailure(result.status, result.signal, updateCommand2)
+    );
   }
-  console.log("Libretto updated to latest.");
+  console.log("Local Libretto package updated to latest.");
   console.log("No further action required.");
 });
 export {

package/dist/cli/core/daemon/daemon.js

@@ -47,6 +47,7 @@ import {
   loadDefaultWorkflow
 } from "../workflow-runtime.js";
 import { WorkflowController } from "../workflow-runner/runner.js";
+import { validateWorkflowInput } from "../../../shared/workflow/workflow.js";
 function isOperationalPage(page) {
   const url = page.url();
   return !url.startsWith("devtools://") && !url.startsWith("chrome-error://");
@@ -682,6 +683,7 @@ async function main() {
       loadedWorkflow = await loadDefaultWorkflow(
         getAbsoluteIntegrationPath(config.workflow.integrationPath)
       );
+      validateWorkflowInput(loadedWorkflow, config.workflow.params ?? {});
     } catch (error) {
       throw new UserFacingStartupError(
         error instanceof Error ? error.message : String(error)

package/dist/cli/core/skill-version.js

@@ -7,6 +7,15 @@ const INSTALLED_SKILL_PATHS = [
   [".claude", "skills", "libretto", "SKILL.md"]
 ];
 let cachedCliVersion = null;
+function readPackageVersion(packageJsonPath) {
+  if (!existsSync(packageJsonPath)) {
+    return null;
+  }
+  const manifest = JSON.parse(
+    readFileSync(packageJsonPath, "utf8")
+  );
+  return manifest.version?.trim() || null;
+}
 function readCurrentCliVersion() {
   if (cachedCliVersion) {
     return cachedCliVersion;
@@ -14,17 +23,20 @@ function readCurrentCliVersion() {
   const packageJsonPath = fileURLToPath(
     new URL("../../../package.json", import.meta.url)
   );
-  const manifest = JSON.parse(
-    readFileSync(packageJsonPath, "utf8")
-  );
-  if (!manifest.version) {
+  const version = readPackageVersion(packageJsonPath);
+  if (!version) {
     throw new Error(
       `Unable to determine current libretto version from ${packageJsonPath}.`
     );
   }
-  cachedCliVersion = manifest.version;
+  cachedCliVersion = version;
   return cachedCliVersion;
 }
+function readLocalPackageVersion() {
+  return readPackageVersion(
+    join(REPO_ROOT, "node_modules", "libretto", "package.json")
+  );
+}
 function readInstalledSkillVersion(skillPath) {
   if (!existsSync(skillPath)) {
     return null;
@@ -45,30 +57,52 @@ function readInstalledSkillVersion(skillPath) {
   );
   return versionMatch?.[1]?.trim() ?? null;
 }
-function findInstalledSkillVersionMismatch() {
-  const cliVersion = readCurrentCliVersion();
+function readInstalledSkillVersions() {
+  const versions = /* @__PURE__ */ new Set();
   for (const relativePathParts of INSTALLED_SKILL_PATHS) {
     const skillPath = join(REPO_ROOT, ...relativePathParts);
     const installedVersion = readInstalledSkillVersion(skillPath);
-    if (installedVersion && installedVersion !== cliVersion) {
-      return { installedVersion, cliVersion };
+    if (installedVersion) {
+      versions.add(installedVersion);
     }
   }
-  return null;
+  return [...versions];
+}
+function formatSkillVersions(versions) {
+  if (versions.length === 0) {
+    return "not installed";
+  }
+  return versions.join(", ");
+}
+function formatVersionWarning(components) {
+  const skillLabel = components.skillVersions.length > 1 ? "agent skills" : "agent skill";
+  return [
+    "WARNING: Libretto skill version does not match the local package.",
+    `  local package: ${components.localPackageVersion ?? `${components.cliVersion}  (current command)`}`,
+    `  ${skillLabel}:   ${formatSkillVersions(components.skillVersions)}`,
+    "Fix: run libretto setup"
+  ].join("\n");
 }
-function warnIfInstalledSkillOutOfDate() {
+function warnIfLibrettoVersionsDiffer() {
   try {
-    const mismatch = findInstalledSkillVersionMismatch();
-    if (!mismatch) {
+    const cliVersion = readCurrentCliVersion();
+    const localPackageVersion = readLocalPackageVersion();
+    const packageVersion = localPackageVersion ?? cliVersion;
+    const skillVersions = readInstalledSkillVersions();
+    if (skillVersions.length === 0 || skillVersions.every((skillVersion) => skillVersion === packageVersion)) {
       return;
     }
     console.error(
-      `Warning: Your agent skill (${mismatch.installedVersion}) is out of date with your Libretto CLI (${mismatch.cliVersion}). Please run \`libretto setup\` to update your skills to the correct version.`
+      formatVersionWarning({
+        cliVersion,
+        localPackageVersion,
+        skillVersions
+      })
     );
   } catch {
   }
 }
 export {
   readCurrentCliVersion,
-  warnIfInstalledSkillOutOfDate
+  warnIfLibrettoVersionsDiffer
 };

package/dist/index.d.ts

@@ -12,7 +12,7 @@ export { InstrumentationOptions, InstrumentedPage, installInstrumentation, instr
 export { GhostCursorOptions, ensureGhostCursor, ghostClick, hideGhostCursor, moveGhostCursor } from './shared/visualization/ghost-cursor.js';
 export { HighlightOptions, clearHighlights, ensureHighlightLayer, showHighlight } from './shared/visualization/highlight.js';
 export { BrowserSession, LaunchBrowserArgs, launchBrowser } from './shared/run/browser.js';
-export { ExportedLibrettoWorkflow, LIBRETTO_WORKFLOW_BRAND, LibrettoWorkflow, LibrettoWorkflowContext, LibrettoWorkflowHandler, LibrettoWorkflowInputError, LibrettoWorkflowSchemas, getDefaultWorkflowFromModuleExports, getWorkflowFromModuleExports, getWorkflowsFromModuleExports, isLibrettoWorkflow, workflow } from './shared/workflow/workflow.js';
+export { ExportedLibrettoWorkflow, LIBRETTO_WORKFLOW_BRAND, LibrettoWorkflow, LibrettoWorkflowContext, LibrettoWorkflowHandler, LibrettoWorkflowInputError, LibrettoWorkflowSchemas, WorkflowInputValidator, getDefaultWorkflowFromModuleExports, getWorkflowFromModuleExports, getWorkflowsFromModuleExports, isLibrettoWorkflow, validateWorkflowInput, workflow } from './shared/workflow/workflow.js';
 import 'zod';
 import 'playwright';
 import 'ai';

package/dist/index.js

@@ -59,6 +59,7 @@ import {
   LibrettoWorkflow,
   LibrettoWorkflowInputError,
   LIBRETTO_WORKFLOW_BRAND,
+  validateWorkflowInput,
   workflow
 } from "./shared/workflow/workflow.js";
 const isDirectExecution = () => {
@@ -113,5 +114,6 @@ export {
   prettyConsoleSink,
   serializeSessionState,
   showHighlight,
+  validateWorkflowInput,
   workflow
 };

package/dist/shared/workflow/workflow.d.ts

@@ -16,6 +16,11 @@ declare class LibrettoWorkflowInputError extends Error {
     readonly zodError: z.ZodError;
     constructor(workflowName: string, zodError: z.ZodError);
 }
+type WorkflowInputValidator = {
+    readonly name: string;
+    readonly inputSchema?: z.ZodType;
+};
+declare function validateWorkflowInput(workflow: WorkflowInputValidator, input: unknown): void;
 declare class LibrettoWorkflow<InputSchema extends z.ZodType = z.ZodType<unknown>, OutputSchema extends z.ZodType = z.ZodType<unknown>> {
     readonly [LIBRETTO_WORKFLOW_BRAND] = true;
     readonly name: string;
@@ -40,4 +45,4 @@ declare function getWorkflowFromModuleExports(moduleExports: WorkflowModuleExpor
 declare function workflow<InputSchema extends z.ZodType, OutputSchema extends z.ZodType>(name: string, schemas: LibrettoWorkflowSchemas<InputSchema, OutputSchema>, handler: LibrettoWorkflowHandler<z.infer<InputSchema>, z.infer<OutputSchema>>): LibrettoWorkflow<InputSchema, OutputSchema>;
 declare function workflow<Input = unknown, Output = unknown>(name: string, handler: LibrettoWorkflowHandler<Input, Output>): LibrettoWorkflow<z.ZodType<Input>, z.ZodType<Output>>;
 
-export { type ExportedLibrettoWorkflow, LIBRETTO_WORKFLOW_BRAND, LibrettoWorkflow, type LibrettoWorkflowContext, type LibrettoWorkflowHandler, LibrettoWorkflowInputError, type LibrettoWorkflowSchemas, getDefaultWorkflowFromModuleExports, getWorkflowFromModuleExports, getWorkflowsFromModuleExports, isLibrettoWorkflow, workflow };
+export { type ExportedLibrettoWorkflow, LIBRETTO_WORKFLOW_BRAND, LibrettoWorkflow, type LibrettoWorkflowContext, type LibrettoWorkflowHandler, LibrettoWorkflowInputError, type LibrettoWorkflowSchemas, type WorkflowInputValidator, getDefaultWorkflowFromModuleExports, getWorkflowFromModuleExports, getWorkflowsFromModuleExports, isLibrettoWorkflow, validateWorkflowInput, workflow };

package/dist/shared/workflow/workflow.js

@@ -19,6 +19,17 @@ function formatZodErrorMessage(workflowName, zodError) {
     ...lines
   ].join("\n");
 }
+function parseWorkflowInput(workflowName, inputSchema, input) {
+  if (!inputSchema) return input;
+  const result = inputSchema.safeParse(input);
+  if (!result.success) {
+    throw new LibrettoWorkflowInputError(workflowName, result.error);
+  }
+  return result.data;
+}
+function validateWorkflowInput(workflow2, input) {
+  parseWorkflowInput(workflow2.name, workflow2.inputSchema, input);
+}
 class LibrettoWorkflow {
   [LIBRETTO_WORKFLOW_BRAND] = true;
   name;
@@ -38,16 +49,7 @@ class LibrettoWorkflow {
     this.handler = handler;
   }
   async run(ctx, input) {
-    let parsed;
-    if (this.inputSchema) {
-      const result = this.inputSchema.safeParse(input);
-      if (!result.success) {
-        throw new LibrettoWorkflowInputError(this.name, result.error);
-      }
-      parsed = result.data;
-    } else {
-      parsed = input;
-    }
+    const parsed = parseWorkflowInput(this.name, this.inputSchema, input);
     return this.handler(ctx, parsed);
   }
 }
@@ -118,5 +120,6 @@ export {
   getWorkflowFromModuleExports,
   getWorkflowsFromModuleExports,
   isLibrettoWorkflow,
+  validateWorkflowInput,
   workflow
 };

package/docs/releasing.md

@@ -28,17 +28,19 @@ GitHub Actions needs these repository secrets:
 
 The release workflow uses a GitHub Actions environment named `release`. Create that environment in the repository settings (no required reviewers — access is controlled by branch protection on `main` instead).
 
-On npm, configure `libretto` to trust this repository and workflow for publishing. The trusted publisher fields should match:
+On npm, configure each published package to trust this repository and workflow for publishing:
 
 - Organization or user: `saffron-health`
 - Repository: `libretto`
 - Workflow filename: `release.yml`
 - Environment name: `release`
 
-If you prefer the CLI, the setup command is:
+If you prefer the CLI, run one setup command per package with npm 11.10.0 or newer:
 
 ```bash
-npm trust github libretto --repo saffron-health/libretto --file release.yml --env release
+npx --yes npm@11.13.0 trust github libretto --repo saffron-health/libretto --file release.yml --env release --yes
+npx --yes npm@11.13.0 trust github affordance --repo saffron-health/libretto --file release.yml --env release --yes
+npx --yes npm@11.13.0 trust github create-libretto --repo saffron-health/libretto --file release.yml --env release --yes
 ```
 
 Trusted publishing only works on supported cloud-hosted runners. This workflow uses `ubuntu-latest`, which satisfies that requirement. npm also requires a recent toolchain for trusted publishing, so the publish job runs on Node 24.
@@ -80,7 +82,7 @@ The workflow:
 1. Reads the version from `packages/libretto/package.json`.
 2. Checks whether that version already exists on npm and in GitHub Releases.
 3. Runs install, type-check, and tests for the `libretto` package in a verification job.
-4. Publishes `libretto@X.Y.Z` to npm from `packages/libretto` with trusted publishing if it is not already published.
+4. Publishes `affordance` first, then `libretto@X.Y.Z`, then `create-libretto@X.Y.Z` with trusted publishing.
 5. Creates GitHub release `vX.Y.Z` with generated release notes if it does not already exist.
 
 This makes the workflow safe to re-run after partial failures. For example, if npm publish succeeds but GitHub release creation fails, a re-run will skip npm and only create the missing release.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "libretto",
-  "version": "0.6.18",
+  "version": "0.6.20",
   "description": "AI-powered browser automation library and CLI built on Playwright",
   "license": "MIT",
   "homepage": "https://libretto.sh",