@detergent-software/atk 8.9.0-dev.2 → 8.9.0-dev.3

package/build/lib/publish-flow.js

@@ -0,0 +1,802 @@
+import { writeFile } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { loadAllAdapters, resolveInstalledPaths } from './adapter.js';
+import { isApiError } from './api-client.js';
+import { getCredential } from './auth.js';
+import { hashFile } from './checksum.js';
+import { errorGuidance, errorMessage } from './errors.js';
+import { detectCompatibleTools, getSignedInUserName } from './init.js';
+import { addAssetToLockfile, findInstalledAsset, readLockfile, withLockfileLock, writeLockfile } from './lockfile.js';
+import { diffManifests, fetchExistingManifest } from './manifest-diff.js';
+import { parseOrgFromName } from './org.js';
+import { findProjectRoot } from './paths.js';
+import { buildPublishPlan, buildStagingArea, checkRegistryVersion, detectAssetFromPath, detectPublishType, executePublish, findSiblingDependencies, loadPublishBatch, loadPublishEntries, mapPublishError, missingDependencies, resolvePlanDependencies, unknownToolsError, updateManifestField, updateManifestVersion, validatePublishTarget, } from './publisher.js';
+import { clearCache, fetchAssetManifest, fetchRegistry, findAsset, findBundle } from './registry.js';
+import { parseReviewersInput, validateGithubUsername } from './reviewers.js';
+import { stageInstalledFiles } from './staging.js';
+import { resolveTools } from './tool-resolver.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+export function createInitialState(flags) {
+    // Non-interactive when --yes, --dry-run, --json, or stdin is not a TTY (raw mode
+    // unsupported). Defaults isTTY to true when the flag is omitted (call site responsible
+    // for threading useStdin().isRawModeSupported in). --dry-run and --json force
+    // non-interactive regardless of TTY — JSON output cannot interleave with prompts.
+    const isTTY = flags.isTTY ?? true;
+    const nonInteractive = Boolean(flags.yes) || flags.dryRun || Boolean(flags.json) || !isTTY;
+    const flagError = batchFlagError(flags);
+    return {
+        authorValue: '',
+        bumpSelection: '',
+        confirmValue: '',
+        descriptionValue: '',
+        entries: [],
+        errorMessage: flagError ?? '',
+        flags,
+        isRawPublish: false,
+        isUpdate: false,
+        manifestDiff: undefined,
+        metadataSubPhase: 'description',
+        missingDependencies: [],
+        nonInteractive,
+        orgValue: '',
+        phase: flagError
+            ? 'error'
+            : flags.update
+                ? 'resolving-update'
+                : flags.fromInstalled
+                    ? 'resolving-installed'
+                    : 'detecting',
+        plan: undefined,
+        progressMessage: '',
+        promptTagsValue: '',
+        publishConfirmValue: '',
+        publishResult: undefined,
+        rawDetection: null,
+        resolvedPath: flags.update ? '' : flags.fromInstalled ? '' : resolve(flags.rawPath),
+        resolvedVersion: '',
+        reviewerValue: '',
+        selectedPromptTools: [],
+        suggestedEntries: [],
+        tagsValue: '',
+        target: undefined,
+        token: undefined,
+        toolAdapters: [],
+        toolCursorIndex: 0,
+        toolsDetected: [],
+        validation: undefined,
+        versionCheck: undefined,
+        withConfirmValue: '',
+    };
+}
+/** Several folders published together (`atk publish a b c`) in one pull request; one folder named twice is one. */
+export function isBatch(flags) {
+    return new Set(flags.paths?.map((path) => resolve(path))).size > 1;
+}
+/**
+ * Run the step for the state's phase, if it has one: the work the phase waits on,
+ * reported through `ctx.dispatch`, which reaches the runner only until the run is
+ * cancelled. An error the step throws is dispatched too, so this never rejects.
+ * Prompt and terminal phases have no step.
+ */
+export async function runPublishStep(state, ctx) {
+    const step = stepFor(state);
+    if (!step)
+        return;
+    const guarded = {
+        ...ctx,
+        dispatch: (action) => {
+            if (!ctx.cancelled())
+                ctx.dispatch(action);
+        },
+    };
+    try {
+        await step.run(state, guarded);
+    }
+    catch (err) {
+        if (ctx.cancelled())
+            return;
+        const action = step.fail
+            ? await step.fail(err, state, guarded).catch(() => toErrorAction(err))
+            : toErrorAction(err);
+        if (action)
+            guarded.dispatch(action);
+    }
+}
+/** The comma-separated values in a flag or prompt answer, trimmed, without empty ones. */
+export function splitList(value) {
+    return (value ?? '')
+        .split(',')
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+/** Why the flags can't publish a batch: one installed asset, or one asset's metadata. Undefined otherwise. */
+function batchFlagError(flags) {
+    if (!isBatch(flags))
+        return undefined;
+    if (flags.update || flags.fromInstalled) {
+        return `${flags.update ? '--update' : '--from-installed'} publishes one installed asset; leave it out to publish several folders.`;
+    }
+    const perAsset = [
+        ['--description', flags.descriptionFlag],
+        ['--tags', flags.tagsFlag],
+        ['--tools', flags.toolsFlag],
+    ].flatMap(([flag, value]) => (value === undefined ? [] : [flag]));
+    if (perAsset.length > 0) {
+        return `${perAsset.join(', ')} ${perAsset.length === 1 ? 'sets' : 'set'} one asset's metadata; put it in each folder's manifest.json to publish several folders.`;
+    }
+    return undefined;
+}
+/** In a batch, what the API calls `Root asset`, as the folder the user named. */
+function batchRootLabel(state) {
+    return isBatch(state.flags) ? state.flags.rawPath : undefined;
+}
+/** What the API calls `dependencies[i]`, as the folder the user named. */
+function entryLabels(state) {
+    return state.entries.map((entry) => entry.label);
+}
+/** The installed asset `--from-installed` or `--update` names, with the tool's adapter; an error when it isn't installed. */
+async function findInstalledSource(state, ctx) {
+    const assetName = state.flags.rawPath;
+    const { name, org } = parseOrgFromName(assetName);
+    const projectRoot = findProjectRoot(state.flags.projectRoot);
+    const tools = await resolveTools(state.flags.tool);
+    const adapter = tools[0].adapter;
+    const lockfile = await readLockfile(projectRoot);
+    const installed = findInstalledAsset(lockfile, name, undefined, org);
+    if (!installed) {
+        ctx.dispatch({ message: `Asset '${assetName}' is not installed.`, type: 'ERROR' });
+        return undefined;
+    }
+    return { adapter, installed, org, projectRoot };
+}
+/** Run the writes in order until one throws: its index and error, or undefined when all succeed. */
+async function firstFailure(edits) {
+    for (const [index, edit] of edits.entries()) {
+        try {
+            await edit.write();
+        }
+        catch (error) {
+            return { error, index };
+        }
+    }
+    return undefined;
+}
+function stepFor(state) {
+    switch (state.phase) {
+        case 'building-plan':
+            return buildingPlan;
+        case 'checking-entries':
+            return checkingEntries;
+        case 'checking-registry':
+            return checkingRegistry;
+        case 'detecting':
+            return detecting;
+        case 'gathering-metadata':
+            return state.metadataSubPhase === 'building-staging' ? buildingStaging : undefined;
+        case 'installing':
+            return installing;
+        case 'loading-tools':
+            return loadingTools;
+        case 'publishing':
+            return publishing;
+        case 'resolving-installed':
+            return resolvingInstalled;
+        case 'resolving-update':
+            return resolvingUpdate;
+        case 'validating':
+            return validating;
+        default:
+            return undefined;
+    }
+}
+/**
+ * Folders next to the root asset that could fix the plan's error: an interactive
+ * run, a `422` naming root dependencies that aren't in the registry (or have no
+ * matching version), and a sibling folder whose manifest has the same type and
+ * name that isn't an entry yet. Undefined when there is nothing to offer.
+ * `--update` and `--from-installed` roots live in a temp folder, so they never get offers.
+ */
+async function suggestSiblingEntries(state, err) {
+    const { target } = state;
+    if (state.nonInteractive ||
+        state.flags.fromInstalled ||
+        state.flags.update ||
+        target?.type !== 'asset' ||
+        !(isApiError(err, 'dependency_not_found') || isApiError(err, 'dependency_version_unsatisfied'))) {
+        return undefined;
+    }
+    const included = (d) => state.entries.some((e) => e.target.assetType === d.type && e.target.data.name === d.name);
+    const missing = missingDependencies(target.data, err.issues).filter((d) => !included(d));
+    if (missing.length === 0)
+        return undefined;
+    const rootDir = state.rawDetection?.sourceDir ?? target.sourceDir;
+    const suggested = await findSiblingDependencies(rootDir, missing, state.entries.map((e) => e.target.sourceDir), target.data.org);
+    return suggested.length > 0 ? { missing, suggested } : undefined;
+}
+/**
+ * Build an ERROR dispatch action from a caught value, carrying the `code`,
+ * `hint` and `command` typed errors have so commands can render actionable
+ * recovery guidance.
+ */
+function toErrorAction(err, override) {
+    return {
+        ...errorGuidance(err),
+        message: override ?? errorMessage(err),
+        type: 'ERROR',
+    };
+}
+/**
+ * Write what the run changed in memory to the manifests on disk: the root's bump and each
+ * entry's, and the tags and tools the prompts asked for. Only once the publish has opened its
+ * PR, so a cancelled or failed one leaves every manifest as it was. A file whose write fails
+ * takes none of its later edits and comes back as one warning naming the fields it lacks; the
+ * other files are still written.
+ */
+async function writeManifestEdits(state) {
+    const target = state.target;
+    if (!target)
+        return [];
+    const files = new Map();
+    const edit = (dir, file, field, value, write) => {
+        const path = join(dir, file);
+        files.set(path, [...(files.get(path) ?? []), { field, value, write }]);
+    };
+    const version = (dir, file, value) => edit(dir, file, 'version', value, () => updateManifestVersion(dir, file, value));
+    const field = (name, value) => edit(target.sourceDir, 'manifest.json', name, value, () => updateManifestField(target.sourceDir, 'manifest.json', name, value));
+    if (state.versionCheck?.status === 'needs-bump' && state.resolvedVersion) {
+        version(target.sourceDir, target.type === 'asset' ? 'manifest.json' : 'bundle.json', state.resolvedVersion);
+    }
+    // Only an asset's manifest.json takes the prompted tags and tools, as the target (and so the plan) has them.
+    if (target.type === 'asset') {
+        const { tags, tools } = target.data;
+        if (state.promptTagsValue && tags && tags.length > 0) {
+            field('tags', tags);
+        }
+        if (state.selectedPromptTools.length > 0) {
+            field('tools', tools);
+        }
+    }
+    for (const entry of state.entries) {
+        if (entry.versionCheck?.status === 'needs-bump' && entry.resolvedVersion) {
+            version(entry.target.sourceDir, 'manifest.json', entry.resolvedVersion);
+        }
+    }
+    const unwritten = [];
+    for (const [path, edits] of files) {
+        const failed = await firstFailure(edits);
+        if (!failed)
+            continue;
+        const missing = edits.slice(failed.index);
+        // Only the version matters to the next publish: it asks for missing tags and tools again.
+        const again = missing.some((e) => e.field === 'version') ? ' before you publish it again' : '';
+        unwritten.push(`The PR is open, but ${path} wasn't updated (${errorMessage(failed.error)}): set ${missing.map((e) => `"${e.field}" to ${JSON.stringify(e.value)}`).join(', ')}${again}.`);
+    }
+    return unwritten;
+}
+// ---------------------------------------------------------------------------
+// Steps, one per phase that waits on work
+// ---------------------------------------------------------------------------
+const resolvingInstalled = {
+    async run(state, ctx) {
+        const source = await findInstalledSource(state, ctx);
+        if (!source)
+            return;
+        const { adapter, installed, projectRoot } = source;
+        // Copy the installed files into a temp directory, preserving their source paths
+        const tempDir = await stageInstalledFiles(installed, adapter, projectRoot);
+        ctx.stage(tempDir);
+        if (ctx.cancelled())
+            return;
+        // Generate manifest.json in the temp dir
+        const manifest = {
+            author: 'unknown',
+            description: `Published from installed asset ${installed.name}`,
+            entrypoint: installed.files[0]?.sourcePath ?? 'index.md',
+            name: installed.name,
+            ...(installed.org ? { org: installed.org } : {}),
+            type: installed.type,
+            version: installed.version,
+        };
+        await writeFile(join(tempDir, 'manifest.json'), JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
+        ctx.dispatch({ resolvedPath: tempDir, type: 'RESOLVED_INSTALLED' });
+    },
+};
+const resolvingUpdate = {
+    async run(state, ctx) {
+        const source = await findInstalledSource(state, ctx);
+        if (!source)
+            return;
+        const { adapter, installed, org, projectRoot } = source;
+        const assetName = state.flags.rawPath;
+        // Fetch the registry to find the latest version
+        const registry = await fetchRegistry({ force: state.flags.refresh });
+        if (ctx.cancelled())
+            return;
+        // Look up the asset in the registry: try findAsset first, then findBundle
+        const resolvedAsset = findAsset(registry, installed.name, installed.type, undefined, installed.org ?? org);
+        const resolvedBundle = resolvedAsset ? undefined : findBundle(registry, installed.name, installed.org ?? org);
+        if (!resolvedAsset && !resolvedBundle) {
+            ctx.dispatch({ message: `Asset '${assetName}' not found in the registry.`, type: 'ERROR' });
+            return;
+        }
+        const latestVersion = resolvedAsset ? resolvedAsset.version : resolvedBundle.version;
+        const assetType = resolvedAsset ? resolvedAsset.asset.type : 'bundle';
+        // Fetch the authoritative manifest (and optional README) from the registry
+        const fetched = await fetchAssetManifest({ name: installed.name, org: installed.org ?? org, type: assetType }, latestVersion);
+        if (ctx.cancelled())
+            return;
+        // Copy the user's locally modified files into a temp staging directory
+        const tempDir = await stageInstalledFiles(installed, adapter, projectRoot);
+        ctx.stage(tempDir);
+        if (ctx.cancelled())
+            return;
+        // Write the fetched manifest into the staging directory. It is the manifest as this
+        // CLI's schema parsed it: a field the schema does not know (from a newer publisher)
+        // is dropped here and so is missing from the re-published version.
+        await writeFile(join(tempDir, fetched.manifestFileName), fetched.manifestContent, 'utf-8');
+        // Write README if present
+        if (fetched.readmeContent) {
+            await writeFile(join(tempDir, 'README.md'), fetched.readmeContent, 'utf-8');
+        }
+        ctx.dispatch({ resolvedPath: tempDir, type: 'RESOLVED_UPDATE' });
+    },
+};
+const detecting = {
+    async run(state, ctx) {
+        // A batch reads every folder now; any that is missing, a bundle or not an asset folder
+        // fails here, all of them together, before any prompt.
+        if (isBatch(state.flags)) {
+            const { entries, root } = await loadPublishBatch(state.flags.paths ?? [], state.flags.withPaths);
+            if (ctx.cancelled())
+                return;
+            ctx.dispatch({ entries, type: 'ENTRIES_LOADED' });
+            ctx.dispatch({ target: root.target, type: 'DETECT_DONE' });
+            return;
+        }
+        // A --with folder that is missing, a bundle, the root or a repeat fails here, before any
+        // prompt; its validation and version check come in checking-entries.
+        if (state.flags.withPaths?.length) {
+            const entries = await loadPublishEntries(state.flags.withPaths, state.resolvedPath);
+            if (ctx.cancelled())
+                return;
+            ctx.dispatch({ entries, type: 'ENTRIES_LOADED' });
+        }
+        // First, try manifest-based detection (existing flow)
+        try {
+            const detected = await detectPublishType(state.resolvedPath);
+            if (ctx.cancelled())
+                return;
+            ctx.dispatch({ target: detected, type: 'DETECT_DONE' });
+            return;
+        }
+        catch (manifestError) {
+            // Only attempt raw detection if the error is specifically about missing manifest/bundle
+            const manifestMsg = errorMessage(manifestError);
+            if (!manifestMsg.includes('No manifest.json or bundle.json found')) {
+                // This is a different error (e.g., invalid JSON in manifest) — surface it directly
+                ctx.dispatch({ message: manifestMsg, type: 'ERROR' });
+                return;
+            }
+        }
+        // Manifest not found — attempt raw asset detection
+        const resolvedTools = await resolveTools(state.flags.tool);
+        const adapter = resolvedTools[0].adapter;
+        if (ctx.cancelled())
+            return;
+        const projectRoot = findProjectRoot(state.flags.projectRoot);
+        const detection = await detectAssetFromPath(state.resolvedPath, adapter, projectRoot);
+        if (ctx.cancelled())
+            return;
+        // Pre-fill metadata
+        const author = (await getSignedInUserName()) ?? '';
+        if (ctx.cancelled())
+            return;
+        const lockfile = await readLockfile(projectRoot);
+        if (ctx.cancelled())
+            return;
+        const tools = await detectCompatibleTools(detection.assetType);
+        if (ctx.cancelled())
+            return;
+        // Non-interactive mode (raw publish — no manifest exists yet, so the only
+        // sources for description are --description flag or exit-1; tags come from
+        // --tags or default to empty). Tool detection runs for both modes above.
+        if (!state.nonInteractive) {
+            // Interactive mode — gather metadata from the user
+            ctx.dispatch({
+                authorValue: author,
+                orgValue: lockfile.org ?? '',
+                rawDetection: detection,
+                toolsDetected: tools,
+                type: 'RAW_DETECT_DONE',
+            });
+            return;
+        }
+        if (!state.flags.descriptionFlag) {
+            ctx.dispatch({
+                message: 'description required: provide --description or include in manifest.json',
+                type: 'ERROR',
+            });
+            return;
+        }
+        // Tools resolution: --tools flag -> detected (already populated above)
+        let toolsList;
+        if (state.flags.toolsFlag) {
+            toolsList = splitList(state.flags.toolsFlag);
+        }
+        else if (tools.length > 0) {
+            toolsList = tools;
+        }
+        else {
+            ctx.dispatch({
+                message: `--tools <comma-separated> required: no tools detected for type ${detection.assetType}`,
+                type: 'ERROR',
+            });
+            return;
+        }
+        const stagingDir = await buildStagingArea(detection, {
+            author,
+            description: state.flags.descriptionFlag,
+            ...(lockfile.org ? { org: lockfile.org } : {}),
+            tags: splitList(state.flags.tagsFlag),
+            tools: toolsList,
+        });
+        ctx.stage(stagingDir);
+        if (ctx.cancelled())
+            return;
+        const detected = await detectPublishType(stagingDir);
+        if (ctx.cancelled())
+            return;
+        ctx.dispatch({ rawDetection: detection, target: detected, type: 'RAW_DETECT_DONE_NON_INTERACTIVE' });
+    },
+};
+/** The `building-staging` sub-phase of `gathering-metadata`: the manifest from the prompts' answers. */
+const buildingStaging = {
+    async run(state, ctx) {
+        const stagingDir = await buildStagingArea(state.rawDetection, {
+            author: state.authorValue,
+            description: state.descriptionValue,
+            org: state.orgValue || undefined,
+            tags: splitList(state.tagsValue),
+            tools: state.toolsDetected,
+        });
+        ctx.stage(stagingDir);
+        if (ctx.cancelled())
+            return;
+        // Re-detect using the staging area (now has manifest.json)
+        const detectedTarget = await detectPublishType(stagingDir);
+        if (ctx.cancelled())
+            return;
+        ctx.dispatch({ target: detectedTarget, type: 'STAGING_DONE' });
+    },
+};
+const validating = {
+    async run(state, ctx) {
+        const target = state.target;
+        if (!target)
+            return;
+        let lockfileOrg;
+        let lockfileOrgReviewers;
+        try {
+            const projectRoot = findProjectRoot(state.flags.projectRoot);
+            const lockfile = await readLockfile(projectRoot);
+            lockfileOrg = lockfile.org;
+            lockfileOrgReviewers = lockfile.orgReviewers;
+        }
+        catch {
+            // No project root / lockfile — treat as no lockfile org / reviewers
+        }
+        if (ctx.cancelled())
+            return;
+        // Bundles need the registry so their asset refs can be resolved during
+        // validation — an unresolvable ref must fail here, not at install time.
+        let registry;
+        if (target.type === 'bundle') {
+            registry = await fetchRegistry({ force: state.flags.refresh });
+            if (ctx.cancelled())
+                return;
+        }
+        const result = await validatePublishTarget(target, {
+            force: state.flags.force,
+            lockfileOrg,
+            registry,
+        });
+        if (ctx.cancelled())
+            return;
+        // A batch checks every asset before stopping, so one run lists every folder's problems.
+        if (isBatch(state.flags)) {
+            const entries = [];
+            for (const entry of state.entries) {
+                const validation = await validatePublishTarget(entry.target, { force: state.flags.force, lockfileOrg });
+                if (ctx.cancelled())
+                    return;
+                entries.push({ ...entry, validation });
+            }
+            const failed = [{ label: state.flags.rawPath, validation: result }, ...entries].filter((f) => f.validation && !f.validation.valid);
+            if (failed.length > 0) {
+                const lines = failed.flatMap((f) => [
+                    `  ${f.label}:`,
+                    ...(f.validation?.errors ?? []).map((e) => `    - ${e}`),
+                ]);
+                ctx.dispatch({ message: `Validation failed:\n${lines.join('\n')}`, type: 'ERROR' });
+                return;
+            }
+            // checking-entries keeps these instead of validating each entry again.
+            ctx.dispatch({ entries, type: 'ENTRIES_LOADED' });
+        }
+        ctx.dispatch({ lockfileOrgReviewers, type: 'VALIDATE_DONE', validation: result });
+    },
+};
+/**
+ * In interactive mode, loads adapters for the multi-select prompt. In non-interactive
+ * mode, resolves tools via manifest -> --tools flag -> detectCompatibleTools(assetType)
+ * -> exit 1, then dispatches RESOLVE_TOOLS_NONINTERACTIVE to advance directly to
+ * checking-registry.
+ */
+const loadingTools = {
+    async run(state, ctx) {
+        if (!state.nonInteractive) {
+            const adapters = await loadAllAdapters();
+            if (ctx.cancelled())
+                return;
+            ctx.dispatch({ adapters, type: 'TOOLS_LOADED' });
+            return;
+        }
+        // Manifest tools win when present (VALIDATE_DONE only routes here when
+        // manifest tools are missing for assets — bundles short-circuit hasTools).
+        if (state.target?.type !== 'asset') {
+            // Bundles don't carry tools — just advance.
+            ctx.dispatch({ tools: [], type: 'RESOLVE_TOOLS_NONINTERACTIVE' });
+            return;
+        }
+        // Try --tools flag
+        let resolvedToolList = splitList(state.flags.toolsFlag);
+        if (state.flags.toolsFlag) {
+            // Validation ran before these tools were filled in, so check them here.
+            const toolsError = await unknownToolsError(resolvedToolList);
+            if (ctx.cancelled())
+                return;
+            if (toolsError) {
+                ctx.dispatch({ message: `--tools: ${toolsError}`, type: 'ERROR' });
+                return;
+            }
+        }
+        // Fall back to detectCompatibleTools
+        if (resolvedToolList.length === 0) {
+            const assetType = state.target.assetType;
+            if (!assetType) {
+                ctx.dispatch({
+                    message: '--tools <comma-separated> required: no tools detected for type unknown',
+                    type: 'ERROR',
+                });
+                return;
+            }
+            const detected = await detectCompatibleTools(assetType);
+            if (ctx.cancelled())
+                return;
+            if (detected.length === 0) {
+                ctx.dispatch({
+                    message: `--tools <comma-separated> required: no tools detected for type ${assetType}`,
+                    type: 'ERROR',
+                });
+                return;
+            }
+            resolvedToolList = detected;
+        }
+        ctx.dispatch({ tools: resolvedToolList, type: 'RESOLVE_TOOLS_NONINTERACTIVE' });
+    },
+};
+const checkingRegistry = {
+    async fail(err) {
+        return toErrorAction(err, mapPublishError(err));
+    },
+    async run(state, ctx) {
+        const target = state.target;
+        if (!target)
+            return;
+        const authToken = (await getCredential()).token;
+        if (ctx.cancelled())
+            return;
+        const reg = await fetchRegistry({ force: state.flags.refresh });
+        if (ctx.cancelled())
+            return;
+        const versionResult = checkRegistryVersion(target, reg);
+        // A version the registry doesn't have yet is published as it is; needs-bump settles it later.
+        const isUpdate = versionResult.status !== 'new-asset';
+        const resolvedVersion = versionResult.status === 'needs-bump' ? '' : target.data.version;
+        ctx.dispatch({
+            isUpdate,
+            resolvedVersion,
+            token: authToken,
+            type: 'REGISTRY_CHECK_DONE',
+            versionCheck: versionResult,
+        });
+    },
+};
+/**
+ * Validate each entry not yet checked the same way as the root asset, and check its
+ * version against the registry; advanceToPlan then settles any bump it needs.
+ */
+const checkingEntries = {
+    async fail(err) {
+        return toErrorAction(err, mapPublishError(err));
+    },
+    async run(state, ctx) {
+        let lockfileOrg;
+        try {
+            lockfileOrg = (await readLockfile(findProjectRoot(state.flags.projectRoot))).org;
+        }
+        catch {
+            // No project root / lockfile — treat as no lockfile org
+        }
+        const registry = await fetchRegistry({ force: state.flags.refresh });
+        if (ctx.cancelled())
+            return;
+        const entries = [];
+        for (const entry of state.entries) {
+            if (entry.versionCheck) {
+                entries.push(entry);
+                continue;
+            }
+            const validation = entry.validation ?? (await validatePublishTarget(entry.target, { force: state.flags.force, lockfileOrg }));
+            if (ctx.cancelled())
+                return;
+            if (!validation.valid) {
+                ctx.dispatch({
+                    message: `Validation failed for ${entry.label}:\n${validation.errors.map((e) => `  - ${e}`).join('\n')}`,
+                    type: 'ERROR',
+                });
+                return;
+            }
+            const versionCheck = checkRegistryVersion(entry.target, registry);
+            entries.push({
+                ...entry,
+                ...(versionCheck.status === 'needs-bump' ? {} : { resolvedVersion: entry.target.data.version }),
+                validation,
+                versionCheck,
+            });
+        }
+        ctx.dispatch({ entries, type: 'ENTRIES_CHECKED' });
+    },
+};
+/**
+ * Plans from the targets in memory, which carry every bump and prompted tag or tool:
+ * nothing is written to a manifest until the publish succeeds (writeManifestEdits).
+ */
+const buildingPlan = {
+    async fail(err, state, ctx) {
+        // Worded like the publishing phase: resolvePlanDependencies calls the same API.
+        const error = toErrorAction(err, mapPublishError(err, entryLabels(state), batchRootLabel(state)));
+        const suggestion = await suggestSiblingEntries(state, err).catch(() => undefined);
+        if (ctx.cancelled())
+            return undefined;
+        return suggestion ? { error, ...suggestion, type: 'SUGGEST_ENTRIES' } : error;
+    },
+    async run(state, ctx) {
+        const currentTarget = state.target;
+        if (!currentTarget)
+            return;
+        const currentVersion = state.resolvedVersion;
+        // Reject invalid reviewer usernames here, before any branch/commit/push work happens
+        const reviewers = parseReviewersInput(state.reviewerValue);
+        for (const reviewer of reviewers) {
+            const check = validateGithubUsername(reviewer);
+            if (!check.valid) {
+                throw new Error(check.error);
+            }
+        }
+        const entries = state.entries.map((entry) => ({ label: entry.label, target: entry.target }));
+        const localPlan = await buildPublishPlan(currentTarget, currentVersion, state.isUpdate, state.flags.message, reviewers, entries, ...(isBatch(state.flags) ? [state.flags.rawPath] : []));
+        if (ctx.cancelled())
+            return;
+        // Resolve declared dependencies against the registry now, so the preview and
+        // --dry-run show them and an unresolvable one stops before the confirm prompt.
+        const publishPlan = await resolvePlanDependencies(localPlan);
+        if (ctx.cancelled())
+            return;
+        let manifestDiff;
+        if (state.isUpdate && state.versionCheck && state.versionCheck.status !== 'new-asset' && state.token) {
+            const existing = await fetchExistingManifest(currentTarget, state.versionCheck.latestVersion);
+            if (ctx.cancelled())
+                return;
+            if (existing) {
+                manifestDiff = diffManifests(existing, currentTarget.data);
+            }
+        }
+        ctx.dispatch({ manifestDiff, plan: publishPlan, type: 'PLAN_DONE' });
+    },
+};
+const publishing = {
+    async fail(err, state) {
+        return toErrorAction(err, mapPublishError(err, entryLabels(state), batchRootLabel(state)));
+    },
+    async run(state, ctx) {
+        const plan = state.plan;
+        if (!plan || !state.token)
+            return;
+        const published = await executePublish(plan, (message) => ctx.dispatch({ message, type: 'PUBLISH_PROGRESS' }));
+        // The PR is open, so the folders take its versions, tags and tools even if the run was cancelled meanwhile.
+        const unwritten = await writeManifestEdits(state);
+        if (ctx.cancelled())
+            return;
+        const result = unwritten.length > 0 ? { ...published, warnings: [...(published.warnings ?? []), ...unwritten] } : published;
+        // Clear registry cache so subsequent commands see the new version
+        try {
+            await clearCache();
+        }
+        catch {
+            // Best-effort — don't fail publish over cache
+        }
+        // Update lockfile in-place when publishing from an installed asset
+        if (state.flags.fromInstalled || state.flags.update) {
+            try {
+                const projectRoot = findProjectRoot(state.flags.projectRoot);
+                const pubTools = await resolveTools(state.flags.tool);
+                const pubAdapter = pubTools[0].adapter;
+                await withLockfileLock(projectRoot, async () => {
+                    const lockfile = await readLockfile(projectRoot);
+                    const { name, org } = parseOrgFromName(state.flags.rawPath);
+                    const installed = findInstalledAsset(lockfile, name, undefined, org);
+                    if (installed) {
+                        const resolved = resolveInstalledPaths(installed, pubAdapter, projectRoot);
+                        const updatedFiles = await Promise.all(resolved.files.map(async (file) => ({
+                            checksum: await hashFile(join(projectRoot, file.installedPath)),
+                            sourcePath: file.sourcePath,
+                        })));
+                        const updatedLockfile = addAssetToLockfile(lockfile, {
+                            ...installed,
+                            files: updatedFiles,
+                            version: state.resolvedVersion,
+                        });
+                        await writeLockfile(projectRoot, updatedLockfile);
+                    }
+                });
+            }
+            catch {
+                // Best-effort — don't fail publish over lockfile update
+            }
+        }
+        if (ctx.cancelled())
+            return;
+        ctx.dispatch({ result, type: 'PUBLISH_DONE' });
+    },
+};
+/** A raw publish records the asset it published in the lockfile, as installed from the project's own files. */
+const installing = {
+    async run(state, ctx) {
+        try {
+            const projectRoot = findProjectRoot(state.flags.projectRoot);
+            await withLockfileLock(projectRoot, async () => {
+                // Read current lockfile
+                const lockfile = await readLockfile(projectRoot);
+                // Compute checksums from actual project files (not staging copies)
+                const files = [];
+                for (const file of state.rawDetection.files) {
+                    const checksum = await hashFile(file.absolutePath);
+                    files.push({
+                        checksum,
+                        sourcePath: file.relativePath,
+                    });
+                }
+                // Build InstalledAsset entry
+                const installedAsset = {
+                    files,
+                    installReason: 'direct',
+                    name: state.rawDetection.name,
+                    org: state.orgValue || undefined,
+                    type: state.rawDetection.assetType,
+                    version: state.resolvedVersion || state.target?.data.version || '1.0.0',
+                };
+                // Add to lockfile and write
+                const updatedLockfile = addAssetToLockfile(lockfile, installedAsset);
+                await writeLockfile(projectRoot, updatedLockfile);
+            });
+        }
+        catch {
+            // Publish already succeeded, so just warn and move to done
+        }
+        ctx.dispatch({ type: 'INSTALL_DONE' });
+    },
+};
+//# sourceMappingURL=publish-flow.js.map