From 8aba24caac5208cf40e0fe402bde51a5aca8242e Mon Sep 17 00:00:00 2001
From: Adarsh Prashar <adarsh.prashar32@gmail.com>
Date: Sun, 14 Jun 2026 22:10:58 +0530
Subject: [PATCH] fix(ci): bump TypeScript SDK to 0.7.0 and allow manual
 re-publish
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The v0.7.0 tag's TypeScript SDK publish failed because package.json was still at
0.6.0 — the version guard correctly refused to publish a mismatched version.
Bump package.json (and the package-lock version fields) to 0.7.0 so the package
matches the release.

Also add a workflow_dispatch trigger to the publish workflow and skip the
tag-match guard on a manual run, so an SDK that shipped before its version was
bumped can be re-published from a branch without re-tagging the whole release.
Publishing stays idempotent (it skips a version already on npm).
---
 .github/workflows/typescript-publish.yml | 7 +++++++
 sdks/typescript/package-lock.json        | 4 ++--
 sdks/typescript/package.json             | 2 +-
 3 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/typescript-publish.yml b/.github/workflows/typescript-publish.yml
index 3ec16d1..ba93891 100644
--- a/.github/workflows/typescript-publish.yml
+++ b/.github/workflows/typescript-publish.yml
@@ -24,6 +24,10 @@ name: Publish TypeScript SDK
 on:
   push:
     tags: ["v*"]
+  # Manual re-publish: if a tag shipped before package.json was bumped, fix the
+  # version on a branch and run this workflow from that ref. Publishing is
+  # idempotent (it skips a version already on npm), so a manual run is safe.
+  workflow_dispatch:
 
 permissions:
   contents: read
@@ -53,7 +57,10 @@ jobs:
         run: npm ci
 
       # Don't publish a version that doesn't match the tag that triggered this.
+      # Only meaningful for a tag push; a manual dispatch publishes whatever
+      # package.json declares (still guarded by the idempotent publish below).
       - name: Verify package version matches the tag
+        if: github.event_name == 'push'
         run: |
           tag="${GITHUB_REF_NAME#v}"
           pkg="$(node -p "require('./package.json').version")"
diff --git a/sdks/typescript/package-lock.json b/sdks/typescript/package-lock.json
index 06b69c5..44c759e 100644
--- a/sdks/typescript/package-lock.json
+++ b/sdks/typescript/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@riskkernel/sdk",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@riskkernel/sdk",
-      "version": "0.6.0",
+      "version": "0.7.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@ai-sdk/provider": "^2.0.3",
diff --git a/sdks/typescript/package.json b/sdks/typescript/package.json
index 41b5f00..4887e1f 100644
--- a/sdks/typescript/package.json
+++ b/sdks/typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@riskkernel/sdk",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Thin TypeScript client for the RiskKernel reliability runtime (Surface 2).",
   "license": "Apache-2.0",
   "author": "Adarsh Prashar",