lumenflow:release
lumenflow:release
Section titled “lumenflow:release”Run release workflow; publishes through the private licence registry
Options:
| Flag | Description | Required |
|---|---|---|
--artifacts <dir> | Directory of pre-built artifacts to publish; required with —publish-only | No |
--publish-only | Publish pre-built artifacts from —artifacts <dir> to the private licence registry: no repository checkout, install or build | No |
--out <dir> | Output directory for built artifacts and their manifest; required with —build-only | No |
--owner-decision <text> | The owner’s words authorising a —release-now cut; recorded verbatim in the certification reuse ledger | No |
--release-now | Owner release-now mode (patch and hotfix versions only): cut immediately from the latest certified landed commit, no sweep; the throughput comparison is advisory. Requires —owner-decision | No |
--at <sha> | With —build-only: the commit to build (required). Otherwise: the certified commit to cut the release from; default is the newest certified ancestor of origin/main | No |
--build-only | Build release artifacts at a commit (—at <sha>) into an output directory (—out <dir>), then exit: no version bump, no tag, no publish credential read | No |
--verify-provenance | Generate and gate on release provenance per artifact: SBOM, dependency scan, checksum, signature reference, compatibility declaration. Fails closed on any missing/stale artifact | No |
--verify-consumer-install | After packing, run npm install against the tarballs in a scratch consumer directory to catch 404s and ERESOLVE errors | No |
--skip-tag | Skip creating and pushing the release tag: the owner creates it as a host step, because the relay refuses tag writes (L-TAG) | No |
--skip-build | Skip build step (use existing dist) | No |
--skip-publish | Bump, validate and tag only: zero licence registry package uploads and zero pack-registry uploads (parity stays a read-only plan) | No |
--dry-run | Verify the certification, then run the full release-time validation set in a disposable worktree, printing the release notes the pending changesets would produce; uploads nothing to the licence registry or the pack registry and reads no credential | No |
-v, --release-version <version> | Semver version to release (e.g., 1.3.0); required unless —build-only or —publish-only is set | No |