Every package under packages/, apps/, and vendor/ drops "private": true and declares publishConfig.access "restricted": the repository now states which packages it publishes instead of deciding it at publish time. Each one also declares its repository and directory, which is how a consumer of a private package reaches its source. The Landlock packages move to restricted with them. They have never been published, so nothing anonymous depends on them today, and the whole @deepseek-ai scope stays private. The workspace constraint that required every package to be private now applies to non-members only, and asserts the publishable trio on each release member.
boot/ — shared app-bin boot glue
English | 中文
The channel-neutral boot library the app bins share: apps/cli, the scaffold/ launcher, and the examples/ demo bins all consume it.
| Package | Role | ctx key |
|---|---|---|
app-boot/ |
Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, the settle-the-tree boot sequence |
(library for the bins) |
cmdline/ |
Launcher-to-app command-line handoff and app-owned startup parsing | cmdlineArgs, appExit |
The boot sequence and personal-config contract are documented in app-boot/README.md; app-owned command lines are documented in cmdline/README.md.