Skip to content

chore(release): lock down public release hygiene before changeset PR#2

Closed
pyyush wants to merge 1 commit intofix/e2e-replayfrom
prep/release-hygiene-for-changesets
Closed

chore(release): lock down public release hygiene before changeset PR#2
pyyush wants to merge 1 commit intofix/e2e-replayfrom
prep/release-hygiene-for-changesets

Conversation

@pyyush
Copy link
Copy Markdown
Owner

@pyyush pyyush commented Apr 2, 2026

Why
This branch prepares fix/e2e-replay for a later changeset PR by tightening the public release surface and preventing internal/operator files from being tracked or published.

What changed

  • Strengthened .gitignore for .omx/, .pilot/, .dev-session/, internal docs/plans, and staff-engineer state files.
  • Fixed the release workflow hygiene check so tracked docs/plans/ and runtime state directories are caught correctly.
  • Kept only the single README banner asset tracked and switched the README image to a hosted URL so the npm README renders.
  • Marked both integration packages private and added a prepublishOnly failure to block accidental publishing.

Verification

  • npm ci && npm run build && npm run typecheck && npm test
  • npm ci && npm run typecheck && npm test in integrations/browser-use
  • npm pack --dry-run --json
  • npm publish --dry-run fails for both integration packages as intended

Risks

  • The README banner now depends on the hosted GitHub raw URL staying stable.
  • integrations/browserbase still has a pre-existing package-lock.json mismatch on this base branch, so npm ci there was not part of this prep PR verification.
  • Integration packages are intentionally non-publishable, so they must remain release-only workspaces and not be treated as npm artifacts.

…side-package publish

This narrows the public release surface before the follow-up changeset work.
The workflow now blocks tracked operator docs/state files, the README banner
uses a hosted asset that renders on npm, and integration packages are marked
non-publishable with an explicit prepublish failure.

Constraint: Keep this as a stacked prep PR on top of fix/e2e-replay without bundling unrelated dirty-worktree edits
Rejected: Commit the cleanup from the active dirty worktree directly | risked scooping unrelated uncommitted changes into the PR
Confidence: high
Scope-risk: narrow
Reversibility: clean
Directive: Keep integration packages private unless they gain a deliberate published-package contract and files allowlist
Tested: Root npm ci/build/typecheck/test, browser-use npm ci/typecheck/test, root npm pack --dry-run, integration npm publish --dry-run failure paths
Not-tested: Browserbase npm ci on this base branch; package-lock.json is out of sync before this prep change
@pyyush
Copy link
Copy Markdown
Owner Author

pyyush commented Apr 2, 2026

Closing as redundant. The release-hygiene changes were landed directly onto #1.

@pyyush pyyush closed this Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant