limina 0.0.3 → 0.0.4

package/README.md

@@ -34,6 +34,7 @@ Limina makes these rules reviewable, runnable, and suitable for CI.
 - **Compatibility path generation**: writes opt-in `tsconfig.dts.paths.generated.json` files for `workspace:*` dependencies whose package exports still point at build artifacts.
 - **Checker target runner**: runs configured TypeScript and UI-framework checker entries in `typecheck` or `build` execution mode.
 - **Published package checks**: validates built package outputs with `publint`, Are The Types Wrong, and a runtime import boundary audit.
+- **Release checks**: verifies npm tarball hygiene, source/packed manifest consistency, and registry-backed workspace publish order.
 - **Composable pipelines**: combines built-in checks and shell commands into named workflows such as `typecheck`, `package`, and `publish`.
 - **Typed configuration**: ships `defineConfig(...)` for editor hints and typed user configs.
 
@@ -95,8 +96,8 @@ export default defineConfig({
     ],
   },
 
-  packageChecks: {
-    targets: [
+  package: {
+    entries: [
       {
         name: '@acme/core',
         outDir: 'packages/core/dist',
@@ -106,7 +107,7 @@ export default defineConfig({
 
   pipelines: {
     package: ['package:check'],
-    publish: ['graph:check', 'proof:check', 'package:check'],
+    publish: ['graph:check', 'proof:check', 'package:check', 'release:check'],
   },
 });
 ```
@@ -151,7 +152,7 @@ A dependency declared as `link:`, `file:`, `catalog:`, or normal semver is treat
 
 ### Package checks
 
-Source graph checks do not prove that an installed package works for consumers. `limina package check` inspects built package outputs under `packageChecks.targets[].outDir` and checks the actual package manifest, exports, type resolution, and runtime imports. Publishable outputs whose `package.json` does not set `private: true` must also include root `README.md` and `LICENSE.md` files.
+Source graph checks do not prove that an installed package works for consumers. `limina package check` inspects built package outputs under `package.entries[].outDir` and checks the actual package manifest, exports, type resolution, and runtime imports with `publint`, `attw`, and `boundary`. `limina release check` owns npm publish hygiene: private-output rejection, required README/license files, source map bans, source/packed manifest consistency, and registry-backed workspace publish order.
 
 ## CLI
 
@@ -171,9 +172,11 @@ limina [--config limina.config.mjs] [--mode mode] <command>
 | `limina checker build`                          | Run build execution for checker entries that support it.                              |
 | `limina checker typecheck`                      | Run source-only checker entries such as `svelte-check`.                               |
 | `limina package check`                          | Run configured package output checks.                                                 |
-| `limina package check --package <name>`         | Check one configured package target.                                                  |
+| `limina package check --package <name>`         | Check one configured package entry.                                                   |
 | `limina package check --tool <tool>`            | Run only `publint`, `attw`, or `boundary`.                                            |
 | `limina package check --attw-profile <profile>` | Override the ATTW profile: `strict`, `node16`, or `esm-only`.                         |
+| `limina release check`                          | Check release hygiene and dependency consistency for the cwd package entry.           |
+| `limina release check --package <name>`         | Check release hygiene and dependency consistency for one or more package entries.     |
 
 ## Configuration reference
 
@@ -269,11 +272,11 @@ proof: {
 
 Checker entries cover files validated by TypeScript or framework-aware tools. Allowlist entries are the final fallback after all configured checker entries fail to cover a source file; they should be rare and must include a reason.
 
-### `packageChecks`
+### `package`
 
 ```js
-packageChecks: {
-  targets: [
+package: {
+  entries: [
     {
       name: '@acme/core',
       outDir: 'packages/core/dist',
@@ -289,7 +292,7 @@ packageChecks: {
 }
 ```
 
-`outDir` must point at the built package directory that contains the publish-ready `package.json`. If that manifest does not set `private: true`, the same directory must also contain `README.md` and `LICENSE.md`.
+`outDir` must point at the built package directory that contains the publish-ready `package.json`. `package:check` uses this output for consumer-facing resolver and runtime checks; `release:check` packs the same output and verifies publish hygiene such as README/license files and source map bans.
 
 ### `pipelines`
 
@@ -356,7 +359,7 @@ Run the command from inside the workspace, or pass `--config ./limina.config.mjs
 
 Limina infers the workspace root from `pnpm-workspace.yaml`. Place the config inside the workspace or pass a config path located under the workspace root.
 
-### `packageChecks.targets[x].outDir` is invalid
+### `package.entries[x].outDir` is invalid
 
 Set `outDir` to the built package directory, not the source package directory, unless that directory is itself the publish-ready package output.
 

package/chunks/{dep-UWxsul2A.js → dep-ZRIm_-Zk.js}

@@ -1054,6 +1054,7 @@ const InitLogger = logger.getLoggerByGroup("task.init");
 const PackageLogger = logger.getLoggerByGroup("task.package");
 const PathsLogger = logger.getLoggerByGroup("task.paths");
 const ProofLogger = logger.getLoggerByGroup("task.proof");
+const ReleaseLogger = logger.getLoggerByGroup("task.release");
 const SourceLogger = logger.getLoggerByGroup("task.source");
 const TypecheckLogger = logger.getLoggerByGroup("task.typecheck");
 function clearCliScreen() {
@@ -2397,4 +2398,4 @@ function createLiminaFlowReporter(options = {}) {
 }
 
 //#endregion
-export { shouldResolveThroughGraph as A, collectGraphProjectRoutes as B, formatArtifactDependencyPolicy as C, isRelativeSpecifier$1 as D, isDtsProjectConfig as E, getPublishDependencySections as F, formatReferences as G, createExtensionPattern as H, isWorkspaceDependencySpecifier as I, isOrdinaryTypecheckConfigPath as J, getDtsCompanionConfigPath as K, collectCheckerEntryProjectRoutes as L, collectWorkspacePackages as M, findPackageForSpecifier as N, parseProject as O, getPackageRootSpecifier as P, resolveReferencePath as Q, collectGraphProjectRoute as R, findTargetProject as S, inferPackageProject as T, createExtraFileExtensions as U, collectSourceGraphProjectExtensions as V, createFormatHost as W, readJsonConfig as X, parseProjectFileNamesForExtensions as Y, resolveProjectConfigPath as Z, normalizeGraphRules as _, runSourceCheck as a, findImporterForFile as b, GraphLogger as c, ProofLogger as d, clearCliScreen as f, getDeniedRefRule as g, getDeniedDepRuleForSpecifier as h, runCheckerTypecheck as i, collectImporters as j, resolveInternalImport as k, PackageLogger as l, getDeniedDepRuleForPackage as m, createLiminaFlowReporter as n, runInit as o, formatErrorMessage$1 as p, getRawReferencePaths as q, runCheckerBuild as r, CliLogger as s, LiminaFlowReporter as t, PathsLogger as u, collectImportsFromFile as v, getTypecheckConfigPath as w, findPackageForFile as x, createFileOwnerLookup as y, collectGraphProjectRouteFromRoot as z };
+export { resolveReferencePath as $, resolveInternalImport as A, collectGraphProjectRouteFromRoot as B, findTargetProject as C, isDtsProjectConfig as D, inferPackageProject as E, getPackageRootSpecifier as F, createFormatHost as G, collectSourceGraphProjectExtensions as H, getPublishDependencySections as I, getRawReferencePaths as J, formatReferences as K, isWorkspaceDependencySpecifier as L, collectImporters as M, collectWorkspacePackages as N, isRelativeSpecifier$1 as O, findPackageForSpecifier as P, resolveProjectConfigPath as Q, collectCheckerEntryProjectRoutes as R, findPackageForFile as S, getTypecheckConfigPath as T, createExtensionPattern as U, collectGraphProjectRoutes as V, createExtraFileExtensions as W, parseProjectFileNamesForExtensions as X, isOrdinaryTypecheckConfigPath as Y, readJsonConfig as Z, getDeniedRefRule as _, runSourceCheck as a, createFileOwnerLookup as b, GraphLogger as c, ProofLogger as d, ReleaseLogger as f, getDeniedDepRuleForSpecifier as g, getDeniedDepRuleForPackage as h, runCheckerTypecheck as i, shouldResolveThroughGraph as j, parseProject as k, PackageLogger as l, formatErrorMessage$1 as m, createLiminaFlowReporter as n, runInit as o, clearCliScreen as p, getDtsCompanionConfigPath as q, runCheckerBuild as r, CliLogger as s, LiminaFlowReporter as t, PathsLogger as u, normalizeGraphRules as v, formatArtifactDependencyPolicy as w, findImporterForFile as x, collectImportsFromFile as y, collectGraphProjectRoute as z };