feat: add --filter support to apiops publish

[Chris Dayne (cdayne)]

Summary

Adds --filter <path> and --no-transitive flags to apiops publish, reusing the filter YAML format, matching rules, and transitive-dependency resolution already supported by apiops extract. The change also extends transitive extraction to workspace-scoped resources, strengthens filtering and target-existence safeguards during publishing, and documents publish filtering.

Fixes #215

What's included

Filtered publishing

• Adds --filter <path> to publish a selected subset of resources using the same case-insensitive names, wildcards, ! exclusions, and nested API/workspace sub-filters as extraction.
• Enables transitive dependency resolution by default for referenced named values, backends and backend pool members, policy fragments, and API version sets.
• Adds --no-transitive to publish only direct filter matches.
• Supports filtered publishing with --commit-id and --dry-run, including republishing eligible child resources and associations when their parent changes.
• Rejects incompatible combinations of --delete-unmatched with --filter or --commit-id using clear validation errors.

Safer resource selection and publishing

• Applies exclusions consistently to APIs, products, workspaces, subscriptions, API tags, and related child resources and associations.
• Verifies association and subscription targets exist in the artifact set before creating them, skipping unavailable targets with a warning instead of failing at the APIM request.
• Expands resource-path handling and publisher filtering so full, incremental, and dry-run modes use consistent selection semantics.

Transitive extraction

• Introduces a shared transitive extraction service for named values, backends, backend pool members, and policy fragments.
• Uses the shared flow for top-level and workspace-scoped extraction while respecting configured exclusions.
• Extends transitive resolution and cycle-safe dependency handling used by extraction and publishing.

Documentation

• Documents publish filtering, transitive behavior, and option compatibility in README.md and docs/commands/publish.md.
• Updates docs/guides/filtering-resources.md only where needed to cover publishing with the shared filter configuration.
• Updates the architecture diagram for publish filtering and transitive resolution.

Test plan

• npm run lint
• npx tsc --noEmit
• npm test — 1196/1196 passing
• Manual smoke test against a real APIM instance

[Chris Dayne (cdayne)]

@microsoft-github-policy-service agree

[Copilot]

Pull request overview

Adds filter-aware publishing using extraction-compatible filters, transitive dependency resolution, and workspace support.

Changes:

• Adds --filter and --no-transitive publish options.
• Expands dependency and association handling across publish and extraction.
• Adds tests and documentation for filtering behavior.

Reviewed changes

Copilot reviewed 25 out of 25 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/cli/publish-command.ts	Adds publish filter options and validation.
src/models/config.ts	Extends publish configuration.
src/lib/resource-path.ts	Adds descriptor identity helpers.
src/services/filter-service.ts	Shares workspace filter resolution.
src/services/transitive-resolver.ts	Scans artifact and structural dependencies.
src/services/transitive-extractor.ts	Adds shared fixed-point extraction.
src/services/extract-service.ts	Uses shared transitive extraction.
src/services/workspace-extractor.ts	Adds workspace transitive extraction.
src/services/publish-service.ts	Filters and expands publish targets.
src/services/api-publisher.ts	Applies filtering to API children.
src/services/product-publisher.ts	Filters product associations and policies.
src/services/resource-publisher.ts	Validates association and subscription targets.
tests/unit/cli/publish-command.test.ts	Tests new CLI options.
tests/unit/lib/resource-path.test.ts	Tests descriptor identity.
tests/unit/services/api-publisher.test.ts	Tests filtered API publishing.
tests/unit/services/extract-service.test.ts	Tests expanded extraction dependencies.
tests/unit/services/product-publisher.test.ts	Tests product association filtering.
tests/unit/services/publish-service.test.ts	Tests filtered and transitive publishing.
tests/unit/services/resource-publisher.test.ts	Tests target safeguards.
tests/unit/services/transitive-resolver.test.ts	Tests artifact reference scanning.
tests/unit/services/workspace-extractor.test.ts	Tests workspace filtering and dependencies.
README.md	Documents publish filtering.
docs/commands/publish.md	Documents options and behavior.
docs/guides/filtering-resources.md	Extends filtering guidance to publishing.
docs/architecture.md	Adds publish-to-filter service flow.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

Transitive publishing and extraction currently override explicit filter exclusions.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

• Files reviewed: 38/38 changed files
• Comments generated: 2
• Review effort level: Balanced