@aipm-registry/cli 0.3.2 → 0.3.4

package/dist/bin.cjs

@@ -8106,6 +8106,22 @@ function privateInstallHint(name, status, token) {
   }
   return `Package not found: ${name} (${status}). If @org/pkg is private, run aipm login, or set AIPM_TOKEN for CI.`;
 }
+function publishTokenHint(name, error) {
+  if (error === "Publish token required") {
+    return [
+      `Publish token required for ${name}.`,
+      `Generate a fresh 5-minute publish token for ${name} from the package dashboard, then retry with AIPM_TOKEN=<token> aipm publish push --yes.`
+    ].join(" ");
+  }
+  if (error === "Invalid publish token") {
+    return [
+      `Publish token was rejected for ${name}.`,
+      `Generate a fresh 5-minute token for this exact package name, make sure aipm.manifest.json still says "${name}", and confirm your account can publish to that reserved package.`,
+      "If you recently renamed the package or generated the token from another package page, create a new token from the matching package dashboard."
+    ].join(" ");
+  }
+  return error;
+}
 async function assertRegistryReachable(registry) {
   const base = registry.replace(/\/$/, "");
   const res = await registryFetch(`${base}/health`, base);
@@ -8122,7 +8138,7 @@ async function publishPackage(registry, name, tarball, token) {
   const res = await registryFetch(url, base, { method: "POST", body: form, headers });
   if (!res.ok) {
     const err = await res.json().catch(() => ({}));
-    throw new Error(err.error ?? `Publish failed: ${res.status}`);
+    throw new Error(err.error ? publishTokenHint(name, err.error) : `Publish failed: ${res.status}`);
   }
   return res.json();
 }
@@ -9648,17 +9664,21 @@ publish.command("validate").description("Validate staged files before publish").
   );
 });
 publish.command("preview").description("Preview exactly what will be uploaded").option("--json", "Print machine-readable JSON").action((opts) => printPublishPreview((0, import_node_process5.cwd)(), opts.json));
-publish.command("push").description("Publish staged files").option("--registry <url>", "Registry base URL").option("--token <token>", "Publish token").option("--yes", "Confirm upload without an extra reminder").action(async (opts) => {
+publish.command("push").description("Publish staged files").option("--registry <url>", "Registry base URL").option("--token <token>", "Publish token").option("--yes", "Confirm upload without an extra reminder").option("--verbose", "Print extra diagnostic output").action(async (opts) => {
   const root = (0, import_node_process5.cwd)();
   const { manifest } = await validatePublishState(root);
   const registry = registryFromEnvOrDefault(opts.registry);
   const tarball = await packStagedFiles(root);
   const staged = await statusPublishState(root);
+  const verbose = Boolean(opts.verbose || program2.opts().verbose);
   if (!opts.yes) {
     console.log("Reminder: this publishes an immutable public package version.");
     console.log("Use --yes to skip this reminder in automation.");
   }
   console.log(`Uploading ${staged.length} file${staged.length === 1 ? "" : "s"} to ${registry}.`);
+  if (verbose) {
+    console.log(`Verbose: package ${manifest.name}@${manifest.version}; tarball ${tarball.length} bytes.`);
+  }
   for (const entry of staged) console.log(`  ${entry.path}`);
   const result = await publishPackage(registry, manifest.name, tarball, opts.token ?? import_node_process5.env.AIPM_TOKEN);
   console.log(`Published ${manifest.name}@${result.version}`);