morluto
790657dc0d
Validate original exact-source qualification, release tag, retained package provenance and npm integrity before the corrected public-package canary. Publish only the existing release's MCP metadata through a shared idempotent publisher; never recreate tags or npm versions.
29 lines
537 B
TypeScript
29 lines
537 B
TypeScript
export function selectRecoveryRelease(input: {
|
|
repository: string;
|
|
version: string;
|
|
run: unknown;
|
|
jobs: unknown;
|
|
release: unknown;
|
|
tagSha: string;
|
|
}): {
|
|
version: string;
|
|
source_sha: string;
|
|
run_id: number;
|
|
run_attempt: number;
|
|
};
|
|
|
|
export function verifyRecoveryPackage(input: {
|
|
directory: string;
|
|
sourceSha: string;
|
|
runId: number;
|
|
runAttempt: number;
|
|
version: string;
|
|
integrity: string;
|
|
}): Promise<{
|
|
version: string;
|
|
sourceSha: string;
|
|
runId: number;
|
|
runAttempt: number;
|
|
integrity: string;
|
|
}>;
|