fix: complete crates.io publish chain, remove PyPI job

- Publish all 5 crates in dependency order:
  hm-util → hm-pipeline-ir → hm-plugin-protocol → hm-plugin-cloud → harmont-cli
- Make hm-plugin-cloud publishable (was publish=false)
- Move hm-plugin-cloud to workspace deps (was path-only)
- Remove PyPI publish job (DSLs are embedded in the binary)
- Remove id-token:write permission (was only needed for PyPI OIDC)

Author: markovejnovic

.github/workflows/release.yml

@@ -7,7 +7,6 @@ on:
 
 permissions:
   contents: write
-  id-token: write
 
 concurrency:
   group: release-${{ github.ref }}
@@ -34,13 +33,35 @@ jobs:
         run: |
           VERSION="${GITHUB_REF_NAME#v}"
           echo "VERSION=$VERSION" >> "$GITHUB_ENV"
+
+          # Bump crate versions
+          sed -i "0,/version = \"0.0.0-dev\"/s//version = \"$VERSION\"/" crates/hm-util/Cargo.toml
           sed -i "0,/version = \"0.0.0-dev\"/s//version = \"$VERSION\"/" crates/hm-pipeline-ir/Cargo.toml
           sed -i "0,/version = \"0.0.0-dev\"/s//version = \"$VERSION\"/" crates/hm-plugin-protocol/Cargo.toml
+          sed -i "0,/version = \"0.0.0-dev\"/s//version = \"$VERSION\"/" crates/hm-plugin-cloud/Cargo.toml
           sed -i "0,/version = \"0.0.0-dev\"/s//version = \"$VERSION\"/" crates/hm/Cargo.toml
+
+          # Rewrite workspace.dependencies pins so dependents resolve to the
+          # tagged version (cargo publish strips path deps; the version field
+          # is what consumers will receive).
+          sed -i "s|hm-util            = { path = \"crates/hm-util\",            version = \"0.0.0-dev\" }|hm-util            = { path = \"crates/hm-util\",            version = \"$VERSION\" }|" Cargo.toml
           sed -i "s|hm-pipeline-ir     = { path = \"crates/hm-pipeline-ir\",     version = \"0.0.0-dev\" }|hm-pipeline-ir     = { path = \"crates/hm-pipeline-ir\",     version = \"$VERSION\" }|" Cargo.toml
           sed -i "s|hm-plugin-protocol = { path = \"crates/hm-plugin-protocol\", version = \"0.0.0-dev\" }|hm-plugin-protocol = { path = \"crates/hm-plugin-protocol\", version = \"$VERSION\" }|" Cargo.toml
+          sed -i "s|hm-plugin-cloud    = { path = \"crates/hm-plugin-cloud\",    version = \"0.0.0-dev\" }|hm-plugin-cloud    = { path = \"crates/hm-plugin-cloud\",    version = \"$VERSION\" }|" Cargo.toml
+
           cargo check --workspace --exclude hm-fixtures
 
+      - name: Publish hm-util
+        run: |
+          if curl -sf -A "harmont-release-ci (github-actions)" "https://crates.io/api/v1/crates/hm-util/$VERSION" > /dev/null 2>&1; then
+            echo "hm-util@$VERSION already published, skipping"
+          else
+            cargo publish -p hm-util --token ${{ secrets.CRATES_IO_TOKEN }} --allow-dirty
+          fi
+
+      - name: Wait for crates.io index
+        run: sleep 30
+
       - name: Publish hm-pipeline-ir
         run: |
           if curl -sf -A "harmont-release-ci (github-actions)" "https://crates.io/api/v1/crates/hm-pipeline-ir/$VERSION" > /dev/null 2>&1; then
@@ -63,6 +84,17 @@ jobs:
       - name: Wait for crates.io index
         run: sleep 30
 
+      - name: Publish hm-plugin-cloud
+        run: |
+          if curl -sf -A "harmont-release-ci (github-actions)" "https://crates.io/api/v1/crates/hm-plugin-cloud/$VERSION" > /dev/null 2>&1; then
+            echo "hm-plugin-cloud@$VERSION already published, skipping"
+          else
+            cargo publish -p hm-plugin-cloud --token ${{ secrets.CRATES_IO_TOKEN }} --allow-dirty
+          fi
+
+      - name: Wait for crates.io index
+        run: sleep 30
+
       - name: Publish harmont-cli
         run: |
           if curl -sf -A "harmont-release-ci (github-actions)" "https://crates.io/api/v1/crates/harmont-cli/$VERSION" > /dev/null 2>&1; then
@@ -71,48 +103,6 @@ jobs:
             cargo publish -p harmont-cli --token ${{ secrets.CRATES_IO_TOKEN }} --allow-dirty
           fi
 
-  pypi-publish:
-    name: Publish to PyPI
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    environment:
-      name: release
-      url: https://pypi.org/project/harmont/
-    permissions:
-      id-token: write
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - name: Set version from tag
-        run: |
-          VERSION="${GITHUB_REF_NAME#v}"
-          echo "VERSION=$VERSION" >> "$GITHUB_ENV"
-          sed -i '0,/version = "0.0.0-dev"/s//version = "'"$VERSION"'"/' dsls/harmont-py/pyproject.toml
-          grep -n "^version" dsls/harmont-py/pyproject.toml
-
-      - name: Install build
-        run: python -m pip install --upgrade build
-
-      - name: Build sdist and wheel
-        working-directory: dsls/harmont-py
-        run: python -m build
-
-      - name: Inspect dist
-        working-directory: dsls/harmont-py
-        run: |
-          ls -la dist/
-          test -f dist/harmont-${VERSION}.tar.gz
-          test -f dist/harmont-${VERSION}-py3-none-any.whl
-
-      - name: Publish to PyPI via Trusted Publishing
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          packages-dir: dsls/harmont-py/dist/
-
   build-binary:
     name: Build ${{ matrix.target }}
     timeout-minutes: 30

Cargo.toml

@@ -24,6 +24,7 @@ repository = "https://github.com/harmont-dev/harmont-cli"
 
 [workspace.dependencies]
 hm-plugin-protocol = { path = "crates/hm-plugin-protocol", version = "0.0.0-dev" }
+hm-plugin-cloud    = { path = "crates/hm-plugin-cloud",    version = "0.0.0-dev" }
 hm-pipeline-ir     = { path = "crates/hm-pipeline-ir",     version = "0.0.0-dev" }
 hm-util            = { path = "crates/hm-util",            version = "0.0.0-dev" }
 hm-dsl-engine      = { path = "crates/hm-dsl-engine",     version = "0.0.0-dev" }

crates/hm-plugin-cloud/Cargo.toml

@@ -1,11 +1,12 @@
 [package]
 name = "hm-plugin-cloud"
-version = "0.1.0"
+version = "0.0.0-dev"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
 description = "Cloud client library for the hm CLI."
-publish = false
+keywords = ["ci", "harmont", "cloud"]
+categories = ["command-line-utilities"]
 
 [lib]
 path = "src/lib.rs"

crates/hm/Cargo.toml

@@ -64,7 +64,7 @@ which = "6"
 hm-pipeline-ir     = { workspace = true }
 hm-plugin-protocol = { workspace = true }
 hm-util = { workspace = true }
-hm-plugin-cloud = { path = "../hm-plugin-cloud" }
+hm-plugin-cloud = { workspace = true }
 hm-dsl-engine   = { workspace = true }
 daggy          = { workspace = true }
 schemars = { workspace = true }