delimit_deploy_npm
Publishes an npm package: bumps version, packs, and pushes to registry. Requires prior security audit, smoke test, changelog, and deploy plan approval before production deployment.
Instructions
Publish an npm package: version bump, pack, and push to registry (Pro).
When to use: to ship a new version of an npm-published package
(delimit-cli, a venture SDK, etc.). This is a PRODUCTION DEPLOY
— every successful publish reaches real users, so it must be
preceded by the deploy gate chain (delimit_security_audit ->
delimit_test_smoke -> delimit_changelog -> delimit_deploy_plan)
and explicit founder approval per the customer-protection rule.
When NOT to use: to deploy a site (use delimit_deploy_site), to
push container images (delimit_deploy_publish), to dry-run
locally (npm pack --dry-run is faster), or to test the chain
without publishing — for that, pass dry_run=True here.
Sibling contrast: delimit_deploy_site ships UI / static; this
ships npm tarballs to the registry. Compared to running npm publish by hand, this wraps the chain with a bump,
governance gate, and is the auditable surface that other tools
can chain against.
Side effects: gated by require_premium — unlicensed callers
receive a license payload and no publish runs. On a licensed
call, invokes backends.tools_infra.deploy_npm which runs the
npm publish chain: (1) bumps the version in package.json
(LOCAL write to the source tree), (2) runs the project's
prepublishOnly hook if present (which may build or sync
artifacts — note the 2026-05-08 v4.5.12 prepublish regression),
(3) runs npm pack and (4) npm publish to the configured
registry — a NETWORK write that is publicly visible and
NOT undoable except by an unpublish (heavily restricted by
npm). dry_run=True suppresses step (4) only — the version
bump and pack still happen so the chain can be exercised.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project_path | No | Path to the npm project root. Default "." (cwd). | . |
| bump | No | Semver bump — "patch" (default), "minor", or "major". | patch |
| tag | No | npm dist-tag for the publish. Default "latest". | latest |
| dry_run | No | If True, run the chain without publishing. Default False. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||