[neilime]

Add manual and scheduled releases for one public npm package, with separate version preparation, CI validation and publication. CI builds, packs and tests the tarball; release publishes the validated artifact without rebuilding, repacking or running consumer commands.

• prepare-package-release.yml uses HoverKraft Conventional Commit planning, updates the manifest and lockfile, creates a signed version commit, pushes the commit/tag atomically, and dispatches the caller at that tag. Optional GitHub App credentials are explicit inputs/secrets.
• The existing CI workflow supports opt-in package: true and optional package-tests. Its package job has read-only repository permissions and runs consumer checks plus an npm publication dry run. Other projects keep packaging disabled.
• release.yml accepts package-tarball-artifact-id from any successful validation job in the same run and prepared commit. It verifies artifact source and expected package identity, publishes through npm trusted publishing, then finalizes the GitHub release.
• Use ci-github-publish for planning, release notes and optional provider-independent summaries. There is no required AI provider or source CHANGELOG.md.
• Retries preserve existing npm versions, recover their original tarballs and verify GitHub asset integrity. Each action owns its implementation and colocated tests.
• Keep the existing pull-request CI entry point unchanged. Release usage lives in .github/workflows/release.md, with one consolidated ADR.

General action/tooling changes were merged in #564. This PR targets main; #563 adds workspaces and fixed/independent Lerna support on top of it.

Validation:

• All 30 common release/recovery unit tests passed.
• Executed the actual packing, package-test and publication scripts locally: fresh consumer installation, automatic package identity, failing/mutating smoke commands, unexpected release identity rejection and a publication dry run all passed. The tarball bytes remained unchanged.
• The actual Reactionable CLI package passed its moved CI checks for help, exact version and compiled templates, plus a publication dry run.
• Workflow/action contracts, inline scripts, documentation links, generated references and repository lint passed. GitHub CI exercises optional packaging and consumption from another job.
• No release tags, live npm publication, AI generation or release dispatch were performed.

Scope: stable releases of one public npm package with its own npm lockfile on GitHub.com and npmjs.org. The optional shared CI packaging job supports the default non-container Ubuntu artifact layout; custom validation jobs can supply a finished tarball.

[github-actions]

Super-linter summary

Language	Validation result
BASH	Pass ✅
BASH_EXEC	Pass ✅
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_COMMITLINT	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
MARKDOWN	Pass ✅
MARKDOWN_PRETTIER	Pass ✅
NATURAL_LANGUAGE	Pass ✅
PRE_COMMIT	Pass ✅
SHELL_SHFMT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

[github-actions]

Code Coverage Report

Coverage Results

Coverage

Metric	Covered	Total	Percentage
Lines	2	2	100.00%
Functions	1	1	100.00%

Overall: 100.00% 🟢
🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (0cc60c3) to head (8082c28).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #562   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            3         3           
=========================================
  Hits             3         3           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.