Promote ha-ui and npm prerelease automation to master

.github/workflows/ci_check.yml

@@ -0,0 +1,81 @@
+name: CI Check
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review, converted_to_draft]
+  push:
+    branches: [develop, master]
+  merge_group:
+    types: [checks_requested]
+env:
+  STORYBOOK_DISABLE_TELEMETRY: "1"
+permissions:
+  contents: read
+jobs:
+  quality:
+    name: CI Check
+    runs-on: ubuntu-latest
+    # The catalog has its own phase deadlines; this job also installs browsers and verifies packages.
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
+        with:
+          node-version-file: .node-version
+          package-manager-cache: false
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+        with:
+          run_install: false
+          cache: false
+      - run: pnpm install --frozen-lockfile --ignore-scripts
+      - run: pnpm check
+      - run: pnpm exec playwright install --with-deps chromium --only-shell
+      - run: pnpm exec playwright install --with-deps firefox webkit
+      - run: pnpm test
+      - run: pnpm build
+      - run: pnpm test:package
+      - run: pnpm test:ssr
+      - run: pnpm storybook:build
+      - run: pnpm test:storybook
+      - run: pnpm test:engines
+      # Read the original catalog SDK at the reviewed revision; never rewrite it.
+      - name: Read the original specification SDK
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: vypdev/copilot
+          ref: 3e7ceea08e6131360e026937d1c0cc1b120472e0
+          path: .validation/copilot-sdk
+          persist-credentials: false
+          sparse-checkout-cone-mode: false
+          sparse-checkout: |
+            src/infrastructure/specification_catalog_validator.cjs
+            src/infrastructure/specification_catalog_publication.cjs
+            src/domain/specification_catalog_path_policy.cjs
+      - name: Validate the actual specification catalog
+        run: >-
+          node -e "require('./.validation/copilot-sdk/src/infrastructure/specification_catalog_validator.cjs').main([], process.cwd())"
+      - name: Retain source coverage and compiled package evidence
+        if: ${{ always() }}
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: shared-ui-validation-${{ github.sha }}
+          path: |
+            build/storybook/
+            coverage/
+            packages/*/dist/
+            test-results/
+            .vitest/attachments/
+          if-no-files-found: error
+          include-hidden-files: true
+          retention-days: 7
+      - name: Retain the verified npm candidate for the production SHA
+        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: npm-candidate-${{ github.sha }}
+          path: |
+            test-results/packed-cohort.json
+            test-results/packages/*.tgz
+          if-no-files-found: error
+          retention-days: 30

.github/workflows/npm_release.yml

@@ -0,0 +1,90 @@
+name: Publish ha-ui npm prerelease
+
+on:
+  push:
+    tags: ['v*-next.*']
+
+concurrency:
+  group: ha-ui-npm-release
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  candidate:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      actions: read
+      contents: read
+    outputs:
+      run-id: ${{ steps.ci.outputs.run-id }}
+    steps:
+      - name: Find the successful CI run for this production commit
+        id: ci
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          [[ "$GITHUB_REF_NAME" =~ ^v(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)-next\.(0|[1-9][0-9]*)$ ]]
+          run_id=$(gh api "repos/$GITHUB_REPOSITORY/actions/workflows/ci_check.yml/runs?event=push&branch=master&head_sha=$GITHUB_SHA&status=success&per_page=10" \
+            --jq '.workflow_runs[0].id // empty')
+          [[ "$run_id" =~ ^[1-9][0-9]*$ ]]
+          echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
+
+  publish:
+    needs: candidate
+    runs-on: ubuntu-latest
+    environment: npm
+    timeout-minutes: 10
+    permissions:
+      actions: read
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+          ref: ${{ github.sha }}
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.0.1
+        with:
+          node-version-file: .node-version
+          registry-url: https://registry.npmjs.org
+          package-manager-cache: false
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
+        with:
+          name: npm-candidate-${{ github.sha }}
+          path: ${{ runner.temp }}/ha-ui-npm-candidate
+          github-token: ${{ github.token }}
+          run-id: ${{ needs.candidate.outputs.run-id }}
+      - name: Publish the verified archives through npm Trusted Publishing
+        env:
+          NPM_CANDIDATE_DIR: ${{ runner.temp }}/ha-ui-npm-candidate
+        run: |
+          node --input-type=module <<'NODE'
+          import {execFileSync} from 'node:child_process';
+          import {appendFileSync,readFileSync} from 'node:fs';
+          import {join} from 'node:path';
+          import {packageCoordinates,sha256} from './tooling/packaging.mjs';
+          import {observeNpmVersion,publishNpmPrerelease} from './tooling/npm-prerelease.mjs';
+
+          const directory=process.env.NPM_CANDIDATE_DIR;
+          const {candidate}=JSON.parse(readFileSync(join(directory,'packed-cohort.json'),'utf8'));
+          const tag=process.env.GITHUB_REF_NAME;
+          const version=tag.slice(1);
+          const paths=new Map(packageCoordinates.map(name=>[
+            name,join(directory,'packages',name.slice(1).replace('/','-')+'-'+version+'.tgz'),
+          ]));
+          const archives=new Map([...paths].map(([name,path])=>[name,readFileSync(path)]));
+          const result=await publishNpmPrerelease({
+            record:candidate,sourceRevision:process.env.GITHUB_SHA,lockSha256:sha256(readFileSync('pnpm-lock.yaml')),tag,
+            oidc:Boolean(process.env.ACTIONS_ID_TOKEN_REQUEST_URL&&process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN),
+            archives,observe:observeNpmVersion,
+            publish:async entry=>execFileSync('npm',[
+              'publish',paths.get(entry.coordinate),'--access','public','--tag','next','--ignore-scripts',
+            ],{stdio:'inherit',timeout:120_000}),
+            append:async entry=>appendFileSync(process.env.GITHUB_STEP_SUMMARY,
+              '- '+entry.coordinate+'@'+entry.version+' `'+entry.sha256+'`\n'),
+          });
+          if(result.state!=='published')throw new Error(result.state+': '+result.reason);
+          NODE

.github/workflows/storybook_pages.yml

@@ -0,0 +1,56 @@
+name: Storybook Pages
+on:
+  push:
+    branches: [master]
+  workflow_dispatch:
+permissions:
+  contents: read
+env:
+  STORYBOOK_DISABLE_TELEMETRY: "1"
+concurrency:
+  group: storybook-pages
+  cancel-in-progress: false
+jobs:
+  build:
+    if: github.ref == 'refs/heads/master'
+    runs-on: ubuntu-latest
+    # The published catalog runs the same browser gates as CI.
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
+        with:
+          node-version-file: .node-version
+          package-manager-cache: false
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
+        with:
+          run_install: false
+          cache: false
+      - run: pnpm install --frozen-lockfile --ignore-scripts
+      - run: pnpm check
+      - run: pnpm exec playwright install --with-deps chromium --only-shell
+      - run: pnpm exec playwright install --with-deps firefox webkit
+      - run: pnpm test
+      - run: pnpm test:package
+      - run: pnpm test:ssr
+      - run: pnpm storybook:build
+      - run: pnpm test:storybook
+      - run: pnpm test:engines
+      - uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
+        with:
+          path: build/storybook
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Publish the verified static catalog
+        id: deployment
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

.gitignore

@@ -0,0 +1,14 @@
+node_modules/
+coverage/
+.validation/
+work/
+**/dist/
+**/test-results/
+**/.vite/
+
+.vitest/
+
+**/.svelte-kit/
+
+build/
+.storybook-cache/

.node-version

@@ -0,0 +1 @@
+24.20.0

.npmrc

@@ -0,0 +1,3 @@
+engine-strict=true
+strict-peer-dependencies=true
+auto-install-peers=false

.storybook/main.ts

@@ -0,0 +1,9 @@
+import type {StorybookConfig} from '@storybook/web-components-vite';
+const config:StorybookConfig={
+  framework:'@storybook/web-components-vite',stories:['../stories/**/*.stories.ts'],
+  staticDirs:[{from:'../LICENSES',to:'/licenses'}],
+  addons:['@storybook/addon-docs','@storybook/addon-a11y','@storybook/addon-vitest'],
+  core:{disableTelemetry:true,enableCrashReports:false},
+  viteFinal:async config=>({...config,base:'./'}),
+};
+export default config;

.storybook/preview.ts

@@ -0,0 +1,25 @@
+import {addons} from 'storybook/preview-api';
+import {observeCatalogCompletion} from '../stories/catalog-completion.js';
+import type {Preview} from '@storybook/web-components-vite';
+import {registerTabs} from '@vypdev/ha-ui/tabs';
+import {registerButton} from '@vypdev/ha-ui/button';
+import {registerCheckbox} from '@vypdev/ha-ui/checkbox';
+import {registerSelect} from '@vypdev/ha-ui/select';
+import {registerField} from '@vypdev/ha-ui/field';
+import {registerDialog} from '@vypdev/ha-ui/dialog';
+import {registerCard} from '@vypdev/ha-ui/card';
+import {registerGrid,registerRow} from '@vypdev/ha-ui/layout';
+import {registerFeedback} from '@vypdev/ha-ui/feedback';
+import {catalogFrame} from '../stories/catalog-frame.js';
+const preview:Preview={
+  beforeAll:()=>{registerTabs();registerField();registerButton();registerSelect();registerCheckbox();registerDialog();registerCard();registerGrid();registerRow();registerFeedback();return observeCatalogCompletion(addons.getChannel(),document.documentElement);},decorators:[catalogFrame],
+  initialGlobals:{theme:'light',locale:'en',width:'wide',motion:'system'},
+  globalTypes:{
+    theme:{description:'HA-compatible theme',toolbar:{title:'Theme',icon:'circlehollow',items:[{value:'light',title:'Light'},{value:'dark',title:'Dark'}],dynamicTitle:true}},
+    locale:{description:'Example language; English fallback',toolbar:{title:'Language',icon:'globe',items:[{value:'en',title:'English'},{value:'es',title:'Español'}],dynamicTitle:true}},
+    width:{description:'Example width',toolbar:{title:'Width',icon:'mobile',items:[{value:'wide',title:'Wide'},{value:'narrow',title:'Narrow'}],dynamicTitle:true}},
+    motion:{description:'System preference or stronger reduced motion',toolbar:{title:'Motion',icon:'lightning',items:[{value:'system',title:'System'},{value:'reduced',title:'Reduced'}],dynamicTitle:true}},
+  },
+  parameters:{layout:'fullscreen',a11y:{test:'error'},docs:{codePanel:true},controls:{expanded:true}},
+};
+export default preview;

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vypdev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.