Description
On the refactor branch, the npm package's files allowlist includes all of dist. Packing a workspace after compiling native binaries therefore includes dist/bin and any other stale build output in the npm tarball.
Reproduction
bun install --frozen-lockfile
bun run build
bun run compile:linux-x64
bun pm pack --ignore-scripts
tar -tzf aws-agentcore-*.tgz
No publishing is needed to reproduce this.
Actual Behavior
The tarball includes dist/bin/agentcore-linux-x64. In a local reproduction, adding just this binary increased the compressed package from 1.44 MB to 40.37 MB. Other files left under dist, such as source maps, logs, and old build directories, are also included.
The automated release currently packs before compilation, which avoids the binaries on a fresh runner, but the package metadata does not enforce that separation for manual packaging or a reused build directory.
Expected Behavior
Publish only the Node launcher, Node bundle, runtime assets, and standard package metadata to npm. Keep standalone native binaries as separate GitHub release assets, regardless of build/pack order.
Environment
- Branch:
refactor
- Base commit:
4fe2c108
- Bun: 1.4.0
- Platform: Linux x64
Description
On the
refactorbranch, the npm package'sfilesallowlist includes all ofdist. Packing a workspace after compiling native binaries therefore includesdist/binand any other stale build output in the npm tarball.Reproduction
bun install --frozen-lockfile bun run build bun run compile:linux-x64 bun pm pack --ignore-scripts tar -tzf aws-agentcore-*.tgzNo publishing is needed to reproduce this.
Actual Behavior
The tarball includes
dist/bin/agentcore-linux-x64. In a local reproduction, adding just this binary increased the compressed package from 1.44 MB to 40.37 MB. Other files left underdist, such as source maps, logs, and old build directories, are also included.The automated release currently packs before compilation, which avoids the binaries on a fresh runner, but the package metadata does not enforce that separation for manual packaging or a reused build directory.
Expected Behavior
Publish only the Node launcher, Node bundle, runtime assets, and standard package metadata to npm. Keep standalone native binaries as separate GitHub release assets, regardless of build/pack order.
Environment
refactor4fe2c108