feat(release): encrypt release snapshots

.github/workflows/ci.yml

@@ -1,31 +1,31 @@
-name: CI
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-jobs:
-  lint-and-test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
-      - name: Install dependencies
-        run: npm install
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Format check
-        run: npm run format:check
-
-      - name: Test
-        run: npm test
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Format check
+        run: npm run format:check
+
+      - name: Test
+        run: npm test

.github/workflows/release.yml

@@ -1,82 +1,82 @@
-name: Release (bump version, tag, publish)
-
-on:
-  workflow_dispatch:
-    inputs:
-      bump:
-        description: Version bump (patch/minor/major)
-        required: true
-        default: patch
-        type: choice
-        options:
-          - patch
-          - minor
-          - major
-
-jobs:
-  release:
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write
-      packages: write
-      id-token: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Set up Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: 24
-          registry-url: https://npm.pkg.github.com
-
-      - name: Install dependencies
-        run: npm install
-
-      - name: Run tests
-        run: npm test
-
-      - name: Configure git identity
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-
-      - name: Bump version and create tag
-        run: |
-          npm version "${{ inputs.bump }}" -m "chore(release): %s"
-
-      - name: Read new tag
-        id: tag
-        run: |
-          VERSION=$(node -p "require('./package.json').version")
-          echo "name=v$VERSION" >> "$GITHUB_OUTPUT"
-
-      - name: Push commit and tags
-        run: git push --follow-tags
-
-      - name: Build CLI (create dist/)
-        run: npm run build
-        env:
-          ENSEMBLE_FIREBASE_API_KEY: ${{ secrets.ENSEMBLE_FIREBASE_API_KEY }}
-
-      - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ steps.tag.outputs.name }}
-          generate_release_notes: true
-
-      - name: Publish to GitHub Packages
-        run: npm publish --registry=https://npm.pkg.github.com
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN != '' && secrets.GH_PACKAGES_TOKEN || github.token }}
-
-      - name: Publish to npm (trusted publishing / OIDC)
-        run: |
-          node --version
-          npm --version
-          npm config set @ensembleui:registry https://registry.npmjs.org
-          npm publish --registry=https://registry.npmjs.org --provenance
+name: Release (bump version, tag, publish)
+
+on:
+  workflow_dispatch:
+    inputs:
+      bump:
+        description: Version bump (patch/minor/major)
+        required: true
+        default: patch
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          registry-url: https://npm.pkg.github.com
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Run tests
+        run: npm test
+
+      - name: Configure git identity
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Bump version and create tag
+        run: |
+          npm version "${{ inputs.bump }}" -m "chore(release): %s"
+
+      - name: Read new tag
+        id: tag
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          echo "name=v$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Push commit and tags
+        run: git push --follow-tags
+
+      - name: Build CLI (create dist/)
+        run: npm run build
+        env:
+          ENSEMBLE_FIREBASE_API_KEY: ${{ secrets.ENSEMBLE_FIREBASE_API_KEY }}
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.tag.outputs.name }}
+          generate_release_notes: true
+
+      - name: Publish to GitHub Packages
+        run: npm publish --registry=https://npm.pkg.github.com
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN != '' && secrets.GH_PACKAGES_TOKEN || github.token }}
+
+      - name: Publish to npm (trusted publishing / OIDC)
+        run: |
+          node --version
+          npm --version
+          npm config set @ensembleui:registry https://registry.npmjs.org
+          npm publish --registry=https://registry.npmjs.org --provenance

.gitignore

@@ -1,13 +1,16 @@
-node_modules/
-dist/
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-.DS_Store
+node_modules/
+dist/
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.DS_Store
+.idea/
+.eslintcache
+package-lock.json
+
 .env
+
 .env.local
-.idea/
+
 .vscode/
-.eslintcache
-package-lock.json