fix: restore + fix flow

Author: lgalabru

.github/workflows/publish-canary-releases.yml

@@ -0,0 +1,60 @@
+name: Publish Canary Releases
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+  id-token: write  # npm provenance (OIDC)
+
+env:
+  DO_NOT_TRACK: '1'
+
+jobs:
+  typescript-build:
+    uses: ./.github/workflows/typescript-build.yml
+
+  typescript-test:
+    uses: ./.github/workflows/typescript-test.yml
+
+  canary:
+    name: Publish Canary
+    runs-on: ubuntu-latest
+    needs: [typescript-build, typescript-test]
+    env:
+      NPM_CONFIG_PROVENANCE: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Dependencies
+        uses: ./.github/workflows/actions/install-dependencies
+
+      - name: Build
+        run: pnpm build
+
+      - name: Version as canary snapshot
+        run: pnpm changeset version --snapshot canary
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Rebuild with canary version
+        run: pnpm build
+
+      - name: Pack tarball
+        run: |
+          mkdir -p .npm-pack
+          pnpm pack --pack-destination .npm-pack
+          echo "Packed tarball:"
+          ls -la .npm-pack/
+
+      - name: Publish canary to npm
+        run: |
+          TARBALL=$(ls .npm-pack/*.tgz | head -1)
+          echo "Publishing ${TARBALL} with tag 'canary'..."
+          npm publish "$TARBALL" --access public --tag canary
+          echo "Published successfully"
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/publish-packages.yml

@@ -0,0 +1,29 @@
+name: Version Packages
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  version:
+    name: Create Version PR
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Dependencies
+        uses: ./.github/workflows/actions/install-dependencies
+
+      - name: Create Changesets Pull Request
+        uses: changesets/action@v1
+        with:
+          title: 'chore: version packages'
+          commit: 'chore: version packages'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/typescript-publish.yml

@@ -15,8 +15,9 @@ on:
         type: boolean
 
 permissions:
-  contents: write  # Push tags, create releases
-  id-token: write  # npm provenance (OIDC)
+  contents: write       # Push tags, create releases
+  id-token: write       # npm provenance (OIDC)
+  pull-requests: write  # Comment on PRs
 
 # Prevent concurrent publishes
 concurrency: