ci/release: Modularize publish workflow distribution stages (HXH0R5)

.agentplane/tasks/202605011626-HXH0R5/README.md

@@ -0,0 +1,130 @@
+---
+id: "202605011626-HXH0R5"
+title: "Modularize publish workflow distribution stages"
+status: "DOING"
+priority: "high"
+owner: "CODER"
+revision: 5
+origin:
+  system: "manual"
+depends_on:
+  - "202605011626-4TQ11R"
+tags:
+  - "ci"
+  - "code"
+  - "release"
+verify:
+  - "bun run release:distribution:check"
+  - "bun run workflows:command-check"
+plan_approval:
+  state: "approved"
+  updated_at: "2026-05-01T16:28:43.802Z"
+  updated_by: "ORCHESTRATOR"
+  note: null
+verification:
+  state: "ok"
+  updated_at: "2026-05-01T17:05:54.208Z"
+  updated_by: "CODER"
+  note: "Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed."
+commit: null
+comments:
+  -
+    author: "CODER"
+    body: "Start: modularize hosted release publication stages around the generated release distribution manifest and explicit channel evidence."
+events:
+  -
+    type: "status"
+    at: "2026-05-01T17:01:34.610Z"
+    author: "CODER"
+    from: "TODO"
+    to: "DOING"
+    note: "Start: modularize hosted release publication stages around the generated release distribution manifest and explicit channel evidence."
+  -
+    type: "verify"
+    at: "2026-05-01T17:05:54.208Z"
+    author: "CODER"
+    state: "ok"
+    note: "Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed."
+doc_version: 3
+doc_updated_at: "2026-05-01T17:05:54.216Z"
+doc_updated_by: "CODER"
+description: "Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest."
+sections:
+  Summary: |-
+    Modularize publish workflow distribution stages
+
+    Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+  Scope: |-
+    - In scope: Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+    - Out of scope: unrelated refactors not required for "Modularize publish workflow distribution stages".
+  Plan: "Plan: refactor release publication so distribution stages are explicit modules driven by release-distribution.json. Keep npm/GitHub asset publication blocking, make external package manager publication explicit and evidence-backed, and improve workflow log summaries. Verification: workflows command check and release distribution check."
+  Verify Steps: |-
+    1. Run `bun run workflows:command-check`. Expected: it succeeds and confirms the requested outcome for this task.
+    2. Run `bun run release:distribution:check`. Expected: it succeeds and confirms the requested outcome for this task.
+    3. Review the changed artifact or behavior for the `code` task. Expected: the requested outcome is visible and matches the approved scope.
+    4. Compare the final result against the task summary and touched scope. Expected: remaining follow-up is either resolved or explicit in ## Findings.
+  Verification: |-
+    <!-- BEGIN VERIFICATION RESULTS -->
+    ### 2026-05-01T17:05:54.208Z — VERIFY — ok
+
+    By: CODER
+
+    Note: Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed.
+
+    VerifyStepsRef: doc_version=3, doc_updated_at=2026-05-01T17:01:34.610Z, excerpt_hash=sha256:585a286ef6decc5aba7c9768f6bb201b0fe5de13160a6417bc55542fb4792f07
+
+    <!-- END VERIFICATION RESULTS -->
+  Rollback Plan: |-
+    - Revert task-related commit(s).
+    - Re-run required checks to confirm rollback safety.
+  Findings: |-
+    - Observation: publish-result now loads release-distribution.json when provided, records release assets and channel states, and reports missing distribution manifests as incomplete evidence. publish.yml uploads a release-distribution artifact and passes the manifest into publish-result.
+      Impact: Hosted publish evidence is now modular and inspectable: npm/GitHub release outcomes remain separate from distribution manifest assets and credentials-gated channel state.
+      Resolution: Commit manifest script, workflow wiring, and release tests for the modular distribution evidence path.
+id_source: "generated"
+---
+## Summary
+
+Modularize publish workflow distribution stages
+
+Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+
+## Scope
+
+- In scope: Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+- Out of scope: unrelated refactors not required for "Modularize publish workflow distribution stages".
+
+## Plan
+
+Plan: refactor release publication so distribution stages are explicit modules driven by release-distribution.json. Keep npm/GitHub asset publication blocking, make external package manager publication explicit and evidence-backed, and improve workflow log summaries. Verification: workflows command check and release distribution check.
+
+## Verify Steps
+
+1. Run `bun run workflows:command-check`. Expected: it succeeds and confirms the requested outcome for this task.
+2. Run `bun run release:distribution:check`. Expected: it succeeds and confirms the requested outcome for this task.
+3. Review the changed artifact or behavior for the `code` task. Expected: the requested outcome is visible and matches the approved scope.
+4. Compare the final result against the task summary and touched scope. Expected: remaining follow-up is either resolved or explicit in ## Findings.
+
+## Verification
+
+<!-- BEGIN VERIFICATION RESULTS -->
+### 2026-05-01T17:05:54.208Z — VERIFY — ok
+
+By: CODER
+
+Note: Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed.
+
+VerifyStepsRef: doc_version=3, doc_updated_at=2026-05-01T17:01:34.610Z, excerpt_hash=sha256:585a286ef6decc5aba7c9768f6bb201b0fe5de13160a6417bc55542fb4792f07
+
+<!-- END VERIFICATION RESULTS -->
+
+## Rollback Plan
+
+- Revert task-related commit(s).
+- Re-run required checks to confirm rollback safety.
+
+## Findings
+
+- Observation: publish-result now loads release-distribution.json when provided, records release assets and channel states, and reports missing distribution manifests as incomplete evidence. publish.yml uploads a release-distribution artifact and passes the manifest into publish-result.
+  Impact: Hosted publish evidence is now modular and inspectable: npm/GitHub release outcomes remain separate from distribution manifest assets and credentials-gated channel state.
+  Resolution: Commit manifest script, workflow wiring, and release tests for the modular distribution evidence path.

.agentplane/tasks/202605011626-HXH0R5/pr/diffstat.txt

@@ -0,0 +1,5 @@
+ .github/workflows/publish.yml                      |   8 ++
+ .../release/publish-workflow-contract.test.ts      |   9 +-
+ .../write-publish-result-manifest-script.test.ts   | 101 ++++++++++++++++++++-
+ scripts/manifest.mjs                               |  66 +++++++++++++-
+ 4 files changed, 181 insertions(+), 3 deletions(-)

.agentplane/tasks/202605011626-HXH0R5/pr/github-body.md

@@ -0,0 +1,37 @@
+## Summary
+
+Modularize publish workflow distribution stages
+
+Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+
+## Scope
+
+- In scope: Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+- Out of scope: unrelated refactors not required for "Modularize publish workflow distribution stages".
+
+## Verification
+
+- State: ok
+- Note: Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed.
+- Full verification checklist lives in local review.md.
+
+## Handoff Notes
+
+- No handoff notes recorded yet. Use `agentplane pr note ...` to append one.
+
+<details>
+<summary>Raw evidence</summary>
+
+- Updated: 2026-05-01T17:06:15.696Z
+- Branch: task/202605011626-HXH0R5/modular-release-distribution
+- Head: 47065cc2900a
+
+```text
+ .github/workflows/publish.yml                      |   8 ++
+ .../release/publish-workflow-contract.test.ts      |   9 +-
+ .../write-publish-result-manifest-script.test.ts   | 101 ++++++++++++++++++++-
+ scripts/manifest.mjs                               |  66 +++++++++++++-
+ 4 files changed, 181 insertions(+), 3 deletions(-)
+```
+
+</details>

.agentplane/tasks/202605011626-HXH0R5/pr/github-title.txt

@@ -0,0 +1 @@
+ci/release: Modularize publish workflow distribution stages (HXH0R5)

.agentplane/tasks/202605011626-HXH0R5/pr/meta.json

@@ -0,0 +1,14 @@
+{
+  "base": "main",
+  "branch": "task/202605011626-HXH0R5/modular-release-distribution",
+  "created_at": "2026-05-01T17:01:37.856Z",
+  "head_sha": "47065cc2900ad016a07fec0a87bc0103ba3929c3",
+  "last_verified_at": "2026-05-01T17:05:54.208Z",
+  "last_verified_sha": "206528a6ef4742afeb244a7db8b74ea012d062d8",
+  "schema_version": 1,
+  "task_id": "202605011626-HXH0R5",
+  "updated_at": "2026-05-01T17:06:15.696Z",
+  "verify": {
+    "status": "pass"
+  }
+}

.agentplane/tasks/202605011626-HXH0R5/pr/review.md

@@ -0,0 +1,62 @@
+# PR Review
+
+Created: 2026-05-01T17:01:37.856Z
+Branch: task/202605011626-HXH0R5/modular-release-distribution
+
+## Summary
+
+Modularize publish workflow distribution stages
+
+Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+
+## Scope
+
+- In scope: Refactor the release publishing workflow so npm, GitHub assets, package-manager publications, and evidence reporting are explicit distribution modules driven by the release distribution manifest.
+- Out of scope: unrelated refactors not required for "Modularize publish workflow distribution stages".
+
+## Verification
+
+### Plan
+
+1. Run `bun run workflows:command-check`. Expected: it succeeds and confirms the requested outcome for this task.
+2. Run `bun run release:distribution:check`. Expected: it succeeds and confirms the requested outcome for this task.
+3. Review the changed artifact or behavior for the `code` task. Expected: the requested outcome is visible and matches the approved scope.
+4. Compare the final result against the task summary and touched scope. Expected: remaining follow-up is either resolved or explicit in ## Findings.
+
+### Current Status
+
+- State: ok
+- Note: Modular publish workflow verified: workflows:command-check passed; release:distribution:check passed; focused publish-result and publish workflow contract tests passed; lint:core passed; targeted Prettier check passed.
+
+## Risks
+
+- Risk level: not recorded
+- Breaking change: no
+
+### Rollback
+
+- Revert task-related commit(s).
+- Re-run required checks to confirm rollback safety.
+
+## Handoff Notes
+
+- No handoff notes recorded yet. Use `agentplane pr note ...` to append one.
+
+<!-- BEGIN AUTO SUMMARY -->
+<details>
+<summary>Raw evidence</summary>
+
+- Updated: 2026-05-01T17:06:15.696Z
+- Branch: task/202605011626-HXH0R5/modular-release-distribution
+- Head: 47065cc2900a
+
+```text
+ .github/workflows/publish.yml                      |   8 ++
+ .../release/publish-workflow-contract.test.ts      |   9 +-
+ .../write-publish-result-manifest-script.test.ts   | 101 ++++++++++++++++++++-
+ scripts/manifest.mjs                               |  66 +++++++++++++-
+ 4 files changed, 181 insertions(+), 3 deletions(-)
+```
+
+</details>
+<!-- END AUTO SUMMARY -->

.github/workflows/publish.yml

@@ -340,6 +340,13 @@ jobs:
             .agentplane/.release/publish/distribution/install.ps1
             .agentplane/.release/publish/distribution/SHA256SUMS
             .agentplane/.release/publish/distribution/release-distribution.json
+      - name: Upload release-distribution artifact
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: release-distribution
+          path: .agentplane/.release/publish/distribution/
+          if-no-files-found: warn
       - name: Write publish-result manifest
         if: always()
         shell: bash
@@ -353,6 +360,7 @@ jobs:
             --version "${{ needs.detect.outputs.version }}" \
             --tag "${{ needs.detect.outputs.tag }}" \
             --release-ready-run-id "${{ needs.detect.outputs.release_ready_run_id }}" \
+            --distribution-manifest .agentplane/.release/publish/distribution/release-distribution.json \
             --job-status "${{ job.status }}" \
             --core-prepublished "${{ needs.detect.outputs.core_published }}" \
             --recipes-prepublished "${{ needs.detect.outputs.recipes_published }}" \

packages/agentplane/src/commands/release/publish-workflow-contract.test.ts

@@ -32,10 +32,17 @@ describe("publish workflow contract", () => {
     expect(workflow).toContain("path: .agentplane/.release/publish/publish-result.json");
     expect(workflow).toContain("Generate release distribution assets");
     expect(workflow).toContain("node scripts/generate-release-distribution.mjs");
-    expect(workflow).toContain(".agentplane/.release/publish/distribution/release-distribution.json");
+    expect(workflow).toContain(
+      ".agentplane/.release/publish/distribution/release-distribution.json",
+    );
     expect(workflow).toContain(".agentplane/.release/publish/distribution/install.sh");
     expect(workflow).toContain(".agentplane/.release/publish/distribution/install.ps1");
     expect(workflow).toContain(".agentplane/.release/publish/distribution/SHA256SUMS");
+    expect(workflow).toContain("name: Upload release-distribution artifact");
+    expect(workflow).toContain("name: release-distribution");
+    expect(workflow).toContain(
+      "--distribution-manifest .agentplane/.release/publish/distribution/release-distribution.json",
+    );
     expect(workflow).toContain("if: always()");
     expect(workflow).toContain("pull-requests: write");
     expect(workflow).toContain("Prepare release task evidence");