Skip to content

jsr: publish @polymorph/webcrypto-deltic (OIDC workflow, license, fast types) - #384

Merged
lannbot merged 2 commits into
mainfrom
jsr-publish
Aug 17, 2026
Merged

jsr: publish @polymorph/webcrypto-deltic (OIDC workflow, license, fast types)#384
lannbot merged 2 commits into
mainfrom
jsr-publish

Conversation

@lannbot

@lannbot lannbot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

Publishes the deltic host module to JSR as @polymorph/webcrypto-deltic — part of the family-wide JSR rollout (packages created/linked via the JSR UI; publishing is GitHub Actions OIDC via the new jsr-publish workflow, no tokens).

  • LICENSE: Apache-2.0 (the family license decision; deltic's precedent). Manifest gains license + publish.exclude: [tests].
  • Dependency constraint: @deltic/runtime becomes ^0.1.0 in the published manifest — published constraints must be ranges so consumers' graphs resolve one shared runtime (module identity for instanceof ComponentException). The conformance driver's repo-internal config keeps its exact pin; deltic-pin-check now asserts the two deno.locks resolve to one @deltic version. Negative-tested against a doctored lock.
  • Fast types: all 28 slow-type sites annotated (type-only; zero behavior change); deno publish --dry-run clean.

Gates: dry-run clean · deltic-module-check 17/17 · pin gate green (and red under doctoring).

After merge: dispatch jsr-publish to put 0.1.0 live.

The deltic host module publishes to JSR (scope @PolyMorph) as the
family's canonical browser-first webcrypto module. The manifest gains
the license field and a publish exclude for tests/; the @deltic/runtime
dependency becomes a caret range (published constraints must be ranges
so consumers resolve one shared runtime), while the conformance
driver's repo-internal config keeps its exact pin — the pin gate now
asserts the two deno.locks RESOLVE to one @deltic version instead of
comparing specifier strings. All public-API slow types annotated so JSR
generates fast types and Node .d.ts (type-only; zero behavior change).
LICENSE: Apache-2.0, the family's license (deltic's precedent).
jsr-publish.yml publishes via GitHub Actions OIDC (the package's repo
link on jsr.io authorizes it; no tokens), dispatched manually per
release; duplicate versions are rejected by JSR, so re-runs fail as
no-ops.

Gates: deno publish --dry-run clean; deltic-module-check (17/17);
deltic-pin-check green, and red under a deliberately doctored lock.
@lannbot
lannbot enabled auto-merge August 17, 2026 17:57
…he deltic module is the canonical JS surface)
@lannbot
lannbot merged commit 99e51dc into main Aug 17, 2026
9 of 10 checks passed
@lannbot
lannbot deleted the jsr-publish branch August 17, 2026 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants