Keep dependency execution in read-only release jobs and validate the original qualified archive with Node built-ins before publication. Refresh registry state on every publisher attempt; retain exact bytes/channel verification, v1 read-only recovery, and installed CLI/MCP checks before MCP publication. Static/docs checks, artifact/registry/recovery tests and real package/rehearsal verification pass. All four hosted package platforms pass. Portable CI retains the independently reproduced main PTX failure in #6675 and fail-fast missing coverage; use the owner-authorized existing PR-only exception, with limitations documented in the PR. Refs #6480.
16 lines
538 B
TypeScript
16 lines
538 B
TypeScript
import type { NpmReleaseState } from "./npm-release-state.mjs";
|
|
|
|
export function readNpmRelease(
|
|
version: string,
|
|
request?: (url: string, init: RequestInit) => Promise<Response>,
|
|
): Promise<NpmReleaseState>;
|
|
export function stableUpdateVersion(
|
|
version: string,
|
|
published: NpmReleaseState,
|
|
): string;
|
|
export function waitForNpmRelease(
|
|
version: string,
|
|
lookup?: (version: string) => Promise<NpmReleaseState>,
|
|
pause?: (milliseconds: number) => Promise<unknown>,
|
|
): Promise<Extract<NpmReleaseState, { status: "published" }>>;
|