From 10080b4fa1699ae3e66e93ea3013e1300c3d6b8e Mon Sep 17 00:00:00 2001 From: superche <35420957+superche@users.noreply.github.com> Date: Tue, 28 Jul 2026 12:18:39 +0800 Subject: [PATCH] fix: align published packages with provenance --- apps/openrouter-facade/package.json | 4 ++-- package-lock.json | 14 +++++++------- packages/contracts/package.json | 7 ++++++- packages/core/package.json | 7 ++++++- packages/mcp-server-pippit/package.json | 9 +++++++-- packages/opencode-plugin-pippit/package.json | 2 +- scripts/plugin-release-workflow.test.ts | 16 ++++++++++++++++ 7 files changed, 45 insertions(+), 14 deletions(-) diff --git a/apps/openrouter-facade/package.json b/apps/openrouter-facade/package.json index 0fc2011..58fd4fa 100644 --- a/apps/openrouter-facade/package.json +++ b/apps/openrouter-facade/package.json @@ -23,8 +23,8 @@ "test": "vitest run --configLoader native" }, "dependencies": { - "@pippit-bridge/contracts": "0.1.0", - "@pippit-bridge/core": "0.1.1", + "@pippit-bridge/contracts": "0.1.1", + "@pippit-bridge/core": "0.1.2", "@pippit-bridge/sdk": "0.1.1", "fastify": "^5.6.2", "zod": "^4.1.12" diff --git a/package-lock.json b/package-lock.json index e37390d..6857d37 100644 --- a/package-lock.json +++ b/package-lock.json @@ -44,8 +44,8 @@ "version": "0.1.0", "license": "MIT", "dependencies": { - "@pippit-bridge/contracts": "0.1.0", - "@pippit-bridge/core": "0.1.1", + "@pippit-bridge/contracts": "0.1.1", + "@pippit-bridge/core": "0.1.2", "@pippit-bridge/sdk": "0.1.1", "fastify": "^5.6.2", "zod": "^4.1.12" @@ -4166,7 +4166,7 @@ }, "packages/core": { "name": "@pippit-bridge/core", - "version": "0.1.1", + "version": "0.1.2", "license": "MIT", "engines": { "node": ">=22.0.0" @@ -4174,7 +4174,7 @@ }, "packages/contracts": { "name": "@pippit-bridge/contracts", - "version": "0.1.0", + "version": "0.1.1", "license": "MIT", "dependencies": { "zod": "^4.1.12" @@ -4188,8 +4188,8 @@ "version": "0.3.0", "license": "MIT", "dependencies": { - "@pippit-bridge/contracts": "0.1.0", - "@pippit-bridge/core": "0.1.1" + "@pippit-bridge/contracts": "0.1.1", + "@pippit-bridge/core": "0.1.2" }, "devDependencies": { "@pippit-bridge/openrouter-facade": "0.1.0" @@ -4209,7 +4209,7 @@ "@opencode-ai/plugin": "^1.18.3" }, "devDependencies": { - "@pippit-bridge/core": "0.1.1", + "@pippit-bridge/core": "0.1.2", "@pippit-bridge/mcp-server": "0.3.0", "@pippit-bridge/sdk": "0.1.1", "zod": "^4.1.12" diff --git a/packages/contracts/package.json b/packages/contracts/package.json index ea66bba..f22373d 100644 --- a/packages/contracts/package.json +++ b/packages/contracts/package.json @@ -1,9 +1,14 @@ { "name": "@pippit-bridge/contracts", - "version": "0.1.0", + "version": "0.1.1", "description": "Runtime and projection contracts shared by Pippit Bridge surfaces", "type": "module", "license": "MIT", + "repository": { + "type": "git", + "url": "git+https://github.com/superche/pippit-bridge.git", + "directory": "packages/contracts" + }, "sideEffects": false, "engines": { "node": ">=22.0.0" diff --git a/packages/core/package.json b/packages/core/package.json index b20f2c5..1802010 100644 --- a/packages/core/package.json +++ b/packages/core/package.json @@ -1,9 +1,14 @@ { "name": "@pippit-bridge/core", - "version": "0.1.1", + "version": "0.1.2", "description": "Shared Pippit model catalog and safe media primitives", "type": "module", "license": "MIT", + "repository": { + "type": "git", + "url": "git+https://github.com/superche/pippit-bridge.git", + "directory": "packages/core" + }, "sideEffects": false, "engines": { "node": ">=22.0.0" diff --git a/packages/mcp-server-pippit/package.json b/packages/mcp-server-pippit/package.json index c955bc4..8c17351 100644 --- a/packages/mcp-server-pippit/package.json +++ b/packages/mcp-server-pippit/package.json @@ -4,6 +4,11 @@ "description": "MCP server and self-contained Codex plugin for Pippit account management plus image and video generation", "type": "module", "license": "MIT", + "repository": { + "type": "git", + "url": "git+https://github.com/superche/pippit-bridge.git", + "directory": "packages/mcp-server-pippit" + }, "sideEffects": false, "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0" @@ -36,8 +41,8 @@ "pippit-mcp": "./dist/stdio.js" }, "dependencies": { - "@pippit-bridge/contracts": "0.1.0", - "@pippit-bridge/core": "0.1.1" + "@pippit-bridge/contracts": "0.1.1", + "@pippit-bridge/core": "0.1.2" }, "devDependencies": { "@pippit-bridge/openrouter-facade": "0.1.0" diff --git a/packages/opencode-plugin-pippit/package.json b/packages/opencode-plugin-pippit/package.json index b9dd10c..169ddc0 100644 --- a/packages/opencode-plugin-pippit/package.json +++ b/packages/opencode-plugin-pippit/package.json @@ -40,7 +40,7 @@ "@opencode-ai/plugin": "^1.18.3" }, "devDependencies": { - "@pippit-bridge/core": "0.1.1", + "@pippit-bridge/core": "0.1.2", "@pippit-bridge/mcp-server": "0.3.0", "@pippit-bridge/sdk": "0.1.1", "zod": "^4.1.12" diff --git a/scripts/plugin-release-workflow.test.ts b/scripts/plugin-release-workflow.test.ts index 3076f90..6eb1220 100644 --- a/scripts/plugin-release-workflow.test.ts +++ b/scripts/plugin-release-workflow.test.ts @@ -56,4 +56,20 @@ describe("plugin release dependency order", () => { } expect(manifest.scripts?.prepack).toBe("npm run build") }) + + it("binds every published package to the provenance repository", async () => { + const packageDirectories = ["contracts", "core", "mcp-server-pippit"] + + for (const directory of packageDirectories) { + const manifest = JSON.parse( + await readFile(resolve(root, `packages/${directory}/package.json`), "utf8"), + ) as { repository?: { directory?: string; type?: string; url?: string } } + + expect(manifest.repository).toEqual({ + directory: `packages/${directory}`, + type: "git", + url: "git+https://github.com/superche/pippit-bridge.git", + }) + } + }) })