refactor: carve TranscriptStore into lease, metadata, segment and sta… #14
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Platform-strict release flow for agent-runtime. | |
| # | |
| # The App token is MANDATORY — release-please must author the release tag with | |
| # the App token so the resulting v*.*.* tag push triggers publish.yml. Tags | |
| # created with the default GITHUB_TOKEN do not trigger downstream workflows. | |
| # There is intentionally NO GITHUB_TOKEN fallback. | |
| # | |
| # Image publishing and deploy-artifact publishing now live in publish.yml | |
| # (triggered by the v*.*.* tag). This file runs release-please only. | |
| name: Release | |
| on: | |
| push: | |
| branches: [main] | |
| workflow_dispatch: {} | |
| permissions: {} | |
| jobs: | |
| release-please: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| outputs: | |
| release_created: ${{ steps.release.outputs.release_created }} | |
| tag_name: ${{ steps.release.outputs.tag_name }} | |
| steps: | |
| - name: mint-app-token | |
| id: app-token | |
| uses: actions/create-github-app-token@v3 | |
| with: | |
| app-id: ${{ secrets.RELEASE_APP_ID }} | |
| private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} | |
| - name: assert-token-minted | |
| env: | |
| APP_TOKEN: ${{ steps.app-token.outputs.token }} | |
| run: | | |
| if [ -z "$APP_TOKEN" ]; then | |
| echo "E_APP_TOKEN_MISSING: Release App token was not minted." >&2 | |
| echo "Secrets RELEASE_APP_ID and RELEASE_APP_PRIVATE_KEY must be configured." >&2 | |
| echo "GITHUB_TOKEN fallback is intentionally forbidden." >&2 | |
| exit 1 | |
| fi | |
| echo "App token minted successfully (token prefix: ${APP_TOKEN:0:4}...)" | |
| - uses: googleapis/release-please-action@v5 | |
| id: release | |
| with: | |
| token: ${{ steps.app-token.outputs.token }} | |
| config-file: release-please-config.json | |
| manifest-file: .release-please-manifest.json |