Skip to content

fix(release): publish editor surface tarball as local file - #7

Merged
lightninglu10 merged 1 commit into
stagingfrom
freecut-package-publish-path-fix-5319
Aug 18, 2026
Merged

fix(release): publish editor surface tarball as local file#7
lightninglu10 merged 1 commit into
stagingfrom
freecut-package-publish-path-fix-5319

Conversation

@lightninglu10

@lightninglu10lightninglu10 commented Aug 18, 2026

Copy link
Copy Markdown

Summary

  • Pass the generated editor-surface tarball to npm with an explicit ./artifacts/...tgz local path.
  • Preserve full-history checkout, provenance and tag validation, deterministic build, consumer smoke, GitHub Packages registry, and GITHUB_TOKEN.

Verification

  • actionlint
  • npm ci --ignore-scripts
  • npm run verify:provenance
  • npm run package:editor-surface
  • npm run test:editor-surface:consumer -- --artifact artifacts/freecut-editor-surface-0.2.0.tgz
  • npm publish --dry-run ./artifacts/freecut-editor-surface-0.2.0.tgz --registry=https://npm.pkg.github.com
  • git diff --check

No package publication was performed.

Refs quantfive/codepress#5319

@lightninglu10lightninglu10 self-assigned this Aug 18, 2026
@lightninglu10
lightninglu10 marked this pull request as ready for review August 18, 2026 00:10
@lightninglu10
lightninglu10 merged commit 1a570eb into stagingAug 18, 2026
3 checks passed
lightninglu10 added a commit that referenced this pull request Aug 20, 2026
* chore(provenance): add reproducible FreeCut package baseline
* feat(editor): add CodePress command adapter boundary
* fix(editor): harden fractional frame adapter paths
* fix(editor): close adapter boundary review gaps
* feat(editor): add host-backed FreeCut surface
* fix(editor): guard host mode from audio skim persistence
* feat(package): publish host-backed editor surface
* chore(package): publish editor surface privately
* fix(package): keep private publish guard below quality threshold
* fix(package): gate publish on packed consumer smoke
* fix(package): keep consumer smoke outside root check
* Add caption commands and FreeCut caption UI (#3)
* add caption command and editor ui
* fix(editor): mount caption editor in production shell
* feat(editor): route captions through host surface
* fix(editor): preserve caption background opacity
* fix(release): fetch full history for editor surface publish (#6)
* fix(release): publish editor surface tarball as local file (#7)
* feat(editor): add host-backed transcript consumer
* fix(editor): keep host-visible sidebar tab across authoritative snapshots
Applying a transcript edit installs the authoritative snapshot, and the
host runtime reset the active sidebar tab to Media on every install.
That unmounted the transcript panel before it could show its applied
state or its inline revision-conflict error (the conflict only reached
the user through the host notify channel).
Preserve the active tab when host mode still shows it (media always,
text/transcript per capability and port), and keep resetting tabs host
mode does not expose. Cover the applied and conflict outcomes through
the real MediaSidebar path.
* publish the editor surface to public npm via trusted publishing
the package is MIT and built from a public repo, so routing it through a
private registry only bought a credential every consumer had to obtain.
0.3.0 is already on npmjs.org with the same bytes it had on github packages.
- publishConfig targets registry.npmjs.org with public access, and the
packaging guard now enforces that instead of the opposite
- the release workflow authenticates with OIDC (id-token: write) rather than
a GITHUB_TOKEN with packages: write, so there is no token to rotate, and
publishes with --provenance
- it also runs on merges into the codepress integration branch, not just on
release tags, and no-ops when the version is already published
- sync-upstream keeps main a clean mirror of walterlow/freecut and warns when
the integration branch falls behind
- README drops the registry and token setup consumers no longer need
* point the publish and sync workflows at codepress-main
the integration branch could not be named codepress: refs/heads/codepress/
is already a directory in the ref namespace (PR #10's bootstrap branch), so
git rejects a ref at refs/heads/codepress outright.
* drop the stale github packages line from the surface readme
the rewrite left the old sentence directly above its replacement, so the
readme claimed both registries in consecutive lines.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@lightninglu10