@jsdevtools/npm-publish 2.0.0 → 2.1.0

package/README.md

@@ -41,9 +41,9 @@ The v1 to v2 upgrade brought a few notable **breaking changes**. To migrate, mak
 
 - The `type` output is now an empty string instead of `none` when no release occurs
   ```diff
-  - - if: ${{ steps.publish.outputs.type != 'none' }}
-  + - if: ${{ steps.publish.outputs.type }}
-      run:  echo "Version changed!"
+    - run: echo "Version changed!"
+  -   if: ${{ steps.publish.outputs.type != 'none' }}
+  +   if: ${{ steps.publish.outputs.type }}
   ```
 - The `check-version` and `greater-version-only` options have been removed and replaced with `strategy`.
   - Use `strategy: all` (default) to publish all versions that do not yet exist in the registry.
@@ -73,7 +73,9 @@ See the [change log][] for more details and other changes in the v2 release.
 To use the GitHub Action, you'll need to add it as a step in your [workflow file][]. By default, the only thing you need to do is set the `token` parameter to your [npm authentication token][].
 
 ```yaml
-on: push
+on:
+  push:
+    branches: main
 
 jobs:
   publish:
@@ -82,7 +84,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
-          node-version: 18
+          node-version: "18"
       - run: npm ci
       - run: npm test
       - uses: JS-DevTools/npm-publish@v2
@@ -97,15 +99,18 @@ jobs:
 
 You can set any or all of the following input parameters using `with`:
 
-| Name       | Type                   | Default                       | Description                                                                   |
-| ---------- | ---------------------- | ----------------------------- | ----------------------------------------------------------------------------- |
-| `token`    | string                 | **required**                  | Authentication token to use with the configured registry.                     |
-| `registry` | string                 | `https://registry.npmjs.org/` | Registry URL to use.                                                          |
-| `package`  | string                 | Current working directory     | Path to a package directory, a `package.json`, or a packed `.tgz` to publish  |
-| `tag`      | string                 | `latest`                      | [Distribution tag][npm-tag] to publish to.                                    |
-| `access`   | `public`, `restricted` | [npm defaults][npm-access]    | Whether the package should be publicly visible or restricted.                 |
-| `strategy` | `all`, `upgrade`       | `all`                         | Use `all` to publish all unique versions, `upgrade` for only semver upgrades. |
-| `dry-run`  | boolean                | `false`                       | Run `npm publish` with the `--dry-run` flag to prevent publication.           |
+| Name         | Type                   | Default                          | Description                                                                   |
+| ------------ | ---------------------- | -------------------------------- | ----------------------------------------------------------------------------- |
+| `token`      | string                 | **required**                     | Authentication token to use with the configured registry.                     |
+| `registry`   | string                 | `https://registry.npmjs.org/` \* | Registry URL to use.                                                          |
+| `package`    | string                 | Current working directory        | Path to a package directory, a `package.json`, or a packed `.tgz` to publish  |
+| `tag`        | string                 | `latest` \*                      | [Distribution tag][npm-tag] to publish to.                                    |
+| `access`     | `public`, `restricted` | [npm defaults][npm-access] \*    | Whether the package should be publicly visible or restricted.                 |
+| `provenance` | boolean                | `false` \*                       | Run `npm publish` with the `--provenance` flag to add provenance statements.  |
+| `strategy`   | `all`, `upgrade`       | `all`                            | Use `all` to publish all unique versions, `upgrade` for only semver upgrades. |
+| `dry-run`    | boolean                | `false`                          | Run `npm publish` with the `--dry-run` flag to prevent publication.           |
+
+\* Default values for these options may be specified using `publishConfig` in `package.json`.
 
 [npm-tag]: https://docs.npmjs.com/cli/v9/commands/npm-publish#tag
 [npm-access]: https://docs.npmjs.com/cli/v9/commands/npm-publish#access
@@ -135,6 +140,7 @@ steps:
 | `old-version` | string  | Previously published version on `tag` or empty if no previous version on tag.                                 |
 | `tag`         | string  | [Distribution tag][npm-tag] the package was published to.                                                     |
 | `access`      | string  | [Access level][npm-access] the package was published with, or `default` if scoped-package defaults were used. |
+| `registry`    | string  | Registry the package was published to.                                                                        |
 | `dry-run`     | boolean | Whether `npm publish` was run in "dry run" mode.                                                              |
 
 [semver release type]: https://github.com/npm/node-semver#release_types
@@ -166,17 +172,20 @@ As shown in the example above, you should pass an options object to the `npmPubl
 import type { Options } from "@jsdevtools/npm-publish";
 ```
 
-| Name                 | Type                   | Default                       | Description                                                                   |
-| -------------------- | ---------------------- | ----------------------------- | ----------------------------------------------------------------------------- |
-| `token`              | string                 | **required**                  | Authentication token to use with the configured registry.                     |
-| `registry`           | string, `URL`          | `https://registry.npmjs.org/` | Registry URL to use.                                                          |
-| `package`            | string                 | Current working directory     | Path to a package directory, a `package.json`, or a packed `.tgz` to publish  |
-| `tag`                | string                 | `latest`                      | [Distribution tag][npm-tag] to publish to.                                    |
-| `access`             | `public`, `restricted` | [npm defaults][npm-access]    | Whether the package should be publicly visible or restricted.                 |
-| `strategy`           | `all`, `upgrade`       | `all`                         | Use `all` to publish all unique versions, `upgrade` for only semver upgrades. |
-| `dryRun`             | boolean                | `false`                       | Run `npm publish` with the `--dry-run` flag to prevent publication.           |
-| `logger`             | object                 | `undefined`                   | Logging interface with `debug`, `info`, and `error` log methods.              |
-| `temporaryDirectory` | string                 | `os.tmpdir()`                 | Temporary directory to hold a generated `.npmrc` file                         |
+| Name                 | Type                   | Default                          | Description                                                                   |
+| -------------------- | ---------------------- | -------------------------------- | ----------------------------------------------------------------------------- |
+| `token`              | string                 | **required**                     | Authentication token to use with the configured registry.                     |
+| `registry`           | string, `URL`          | `https://registry.npmjs.org/` \* | Registry URL to use.                                                          |
+| `package`            | string                 | Current working directory        | Path to a package directory, a `package.json`, or a packed `.tgz` to publish  |
+| `tag`                | string                 | `latest` \*                      | [Distribution tag][npm-tag] to publish to.                                    |
+| `access`             | `public`, `restricted` | [npm defaults][npm-access] \*    | Whether the package should be publicly visible or restricted.                 |
+| `provenance`         | boolean                | `false` \*                       | Run `npm publish` with the `--provenance` flag to add provenance statements.  |
+| `strategy`           | `all`, `upgrade`       | `all`                            | Use `all` to publish all unique versions, `upgrade` for only semver upgrades. |
+| `dryRun`             | boolean                | `false`                          | Run `npm publish` with the `--dry-run` flag to prevent publication.           |
+| `logger`             | object                 | `undefined`                      | Logging interface with `debug`, `info`, and `error` log methods.              |
+| `temporaryDirectory` | string                 | `os.tmpdir()`                    | Temporary directory to hold a generated `.npmrc` file                         |
+
+\* Default values for these options may be specified using `publishConfig` in `package.json`.
 
 ### Output
 
@@ -195,6 +204,7 @@ import type { Results } from "@jsdevtools/npm-publish";
 | `oldVersion` | Optional string | Previously published version on `tag` or `undefined` if no previous version.                                    |
 | `tag`        | string          | [Distribution tag][npm-tag] that the package was published to.                                                  |
 | `access`     | Optional string | [Access level][npm-access] the package was published with, or `undefined` if scoped-package defaults were used. |
+| `registry`   | `URL`           | Registry the package was published to.                                                                          |
 | `dryRun`     | boolean         | Whether `npm publish` was run in "dry run" mode.                                                                |
 
 ## Command Line Interface
@@ -243,7 +253,10 @@ Options:
                           Defaults to "latest".
 
   --access <access>       Package access, may be "public" or "restricted".
-                          See documentation for details.
+                          See npm documentation for details.
+
+  --provenance            Publish with provenance statements.
+                          See npm documentation for details.
 
   --strategy <strategy>   Publish strategy, may be "all" or "upgrade".
                           Defaults to "all", see documentation for details.

package/lib/action/main.js

@@ -34,6 +34,7 @@ async function run() {
         package: core.getInput("package"),
         tag: core.getInput("tag"),
         access: core.getInput("access"),
+        provenance: core.getBooleanInput("provenance"),
         strategy: core.getInput("strategy"),
         dryRun: core.getBooleanInput("dry-run"),
         logger: core.logger,

package/lib/action/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/action/main.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yBAAyB;AACzB,0CAAyC;AACzC,gDAAkC;AAElC,sBAAsB;AACtB,KAAK,UAAU,GAAG;IAChB,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/action/main.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yBAAyB;AACzB,0CAAyC;AACzC,gDAAkC;AAElC,sBAAsB;AACtB,KAAK,UAAU,GAAG;IAChB,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,EAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC;QAC9C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACnC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC"}

package/lib/cli/index.d.ts

@@ -1,4 +1,4 @@
-export declare const USAGE = "\nUsage:\n\n  npm-publish <options> [package]\n\nArguments:\n\n  package                 The path to the package to publish.\n                          May be a directory, package.json, or .tgz file.\n                          Defaults to the package in the current directory.\n\nOptions:\n\n  --token <token>         (Required) npm authentication token.\n\n  --registry <url>        Registry to read from and write to.\n                          Defaults to \"https://registry.npmjs.org/\".\n\n  --tag <tag>             The distribution tag to check against and publish to.\n                          Defaults to \"latest\".\n\n  --access <access>       Package access, may be \"public\" or \"restricted\".\n                          See documentation for details.\n\n  --strategy <strategy>   Publish strategy, may be \"all\" or \"upgrade\".\n                          Defaults to \"all\", see documentation for details.\n\n  --dry-run               Do not actually publish anything.\n  --quiet                 Only print errors.\n  --debug                 Print debug logs.\n\n  -v, --version           Print the version number.\n  -h, --help              Show usage text.\n\nExamples:\n\n  $ npm-publish --token abc123 ./my-package\n";
+export declare const USAGE = "\nUsage:\n\n  npm-publish <options> [package]\n\nArguments:\n\n  package                 The path to the package to publish.\n                          May be a directory, package.json, or .tgz file.\n                          Defaults to the package in the current directory.\n\nOptions:\n\n  --token <token>         (Required) npm authentication token.\n\n  --registry <url>        Registry to read from and write to.\n                          Defaults to \"https://registry.npmjs.org/\".\n\n  --tag <tag>             The distribution tag to check against and publish to.\n                          Defaults to \"latest\".\n\n  --access <access>       Package access, may be \"public\" or \"restricted\".\n                          See npm documentation for details.\n\n  --provenance            Publish with provenance statements.\n                          See npm documentation for details.\n\n  --strategy <strategy>   Publish strategy, may be \"all\" or \"upgrade\".\n                          Defaults to \"all\", see documentation for details.\n\n  --dry-run               Do not actually publish anything.\n  --quiet                 Only print errors.\n  --debug                 Print debug logs.\n\n  -v, --version           Print the version number.\n  -h, --help              Show usage text.\n\nExamples:\n\n  $ npm-publish --token abc123 ./my-package\n";
 /**
  * The main entry point of the CLI
  *

package/lib/cli/index.js

@@ -25,7 +25,10 @@ Options:
                           Defaults to "latest".
 
   --access <access>       Package access, may be "public" or "restricted".
-                          See documentation for details.
+                          See npm documentation for details.
+
+  --provenance            Publish with provenance statements.
+                          See npm documentation for details.
 
   --strategy <strategy>   Publish strategy, may be "all" or "upgrade".
                           Defaults to "all", see documentation for details.

package/lib/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;AAAA,0CAAsD;AACtD,qEAA6D;AAEhD,QAAA,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCpB,CAAC;AAEF;;;;;GAKG;AACI,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,OAAe;IACxD,MAAM,YAAY,GAAG,IAAA,0CAAiB,EAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,YAAY,CAAC,IAAI,EAAE;QACrB,OAAO,CAAC,IAAI,CAAC,aAAK,CAAC,CAAC;QACpB,OAAO;KACR;IAED,IAAI,YAAY,CAAC,OAAO,EAAE;QACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;KACR;IAED,MAAM,MAAM,GAAW;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,YAAY,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC7D,KAAK,EAAE,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;IAEF,MAAM,IAAA,qBAAU,EAAC,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AApBD,oBAoBC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;AAAA,0CAAsD;AACtD,qEAA6D;AAEhD,QAAA,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCpB,CAAC;AAEF;;;;;GAKG;AACI,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,OAAe;IACxD,MAAM,YAAY,GAAG,IAAA,0CAAiB,EAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,YAAY,CAAC,IAAI,EAAE;QACrB,OAAO,CAAC,IAAI,CAAC,aAAK,CAAC,CAAC;QACpB,OAAO;KACR;IAED,IAAI,YAAY,CAAC,OAAO,EAAE;QACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;KACR;IAED,MAAM,MAAM,GAAW;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,YAAY,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC7D,KAAK,EAAE,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;IAEF,MAAM,IAAA,qBAAU,EAAC,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AApBD,oBAoBC"}

package/lib/cli/parse-cli-arguments.js

@@ -12,6 +12,7 @@ const ARGUMENTS_OPTIONS = [
     { name: "registry", type: String },
     { name: "tag", type: String },
     { name: "access", type: String },
+    { name: "provenance", type: Boolean },
     { name: "strategy", type: String },
     { name: "dry-run", type: Boolean },
     { name: "quiet", type: Boolean },

package/lib/cli/parse-cli-arguments.js.map

@@ -1 +1 @@
-{"version":3,"file":"parse-cli-arguments.js","sourceRoot":"","sources":["../../src/cli/parse-cli-arguments.ts"],"names":[],"mappings":";AAAA,2CAA2C;;;;;;AAE3C,0EAAgD;AAGhD,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE;IACtD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;IAChC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;CAC5C,CAAC;AAWF;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,IAAc;IAC9C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,IAAA,2BAAe,EACjE,iBAAiB,EACjB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAC1B,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE,OAAkB;KAC5B,CAAC;AACJ,CAAC;AAbD,8CAaC"}
+{"version":3,"file":"parse-cli-arguments.js","sourceRoot":"","sources":["../../src/cli/parse-cli-arguments.ts"],"names":[],"mappings":";AAAA,2CAA2C;;;;;;AAE3C,0EAAgD;AAGhD,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE;IACtD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;IAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;IAChC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACrC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE;IAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;IAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;CAC5C,CAAC;AAWF;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,IAAc;IAC9C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,IAAA,2BAAe,EACjE,iBAAiB,EACjB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAC1B,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE,OAAkB;KAC5B,CAAC;AACJ,CAAC;AAbD,8CAaC"}

package/lib/compare-and-publish/compare-and-publish.d.ts

@@ -0,0 +1,21 @@
+import type { PackageManifest } from "../read-manifest.js";
+import type { NormalizedOptions } from "../normalize-options.js";
+import { type NpmCliEnvironment } from "../npm/index.js";
+import { type VersionComparison } from "./compare-versions.js";
+export interface PublishResult extends VersionComparison {
+    id: string | undefined;
+    files: PublishFile[];
+}
+export interface PublishFile {
+    path: string;
+    size: number;
+}
+/**
+ * Get the currently published versions of a package and publish if needed.
+ *
+ * @param manifest The package to potentially publish.
+ * @param options Configuration options.
+ * @param environment Environment variables for the npm cli.
+ * @returns Information about the publish, including if it occurred.
+ */
+export declare function compareAndPublish(manifest: PackageManifest, options: NormalizedOptions, environment: NpmCliEnvironment): Promise<PublishResult>;

package/lib/compare-and-publish/compare-and-publish.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareAndPublish = void 0;
+const index_js_1 = require("../npm/index.js");
+const compare_versions_js_1 = require("./compare-versions.js");
+const get_arguments_js_1 = require("./get-arguments.js");
+/**
+ * Get the currently published versions of a package and publish if needed.
+ *
+ * @param manifest The package to potentially publish.
+ * @param options Configuration options.
+ * @param environment Environment variables for the npm cli.
+ * @returns Information about the publish, including if it occurred.
+ */
+async function compareAndPublish(manifest, options, environment) {
+    const { name, version, packageSpec } = manifest;
+    const cliOptions = { environment, logger: options.logger };
+    const viewArguments = (0, get_arguments_js_1.getViewArguments)(name, options);
+    const publishArguments = (0, get_arguments_js_1.getPublishArguments)(packageSpec, options);
+    let viewCall = await (0, index_js_1.callNpmCli)(index_js_1.VIEW, viewArguments, cliOptions);
+    // `npm view` will succeed with no output the package exists in the registry
+    // with no `latest` tag. This is only possible with third-party registries.
+    // https://github.com/npm/cli/issues/6408
+    if (!viewCall.successData && !viewCall.error) {
+        // Retry the call to `npm view` with the configured publish tag,
+        // to at least try to get something.
+        const viewWithTagArguments = (0, get_arguments_js_1.getViewArguments)(name, options, true);
+        viewCall = await (0, index_js_1.callNpmCli)(index_js_1.VIEW, viewWithTagArguments, cliOptions);
+    }
+    if (viewCall.error && viewCall.errorCode !== index_js_1.E404) {
+        throw viewCall.error;
+    }
+    const comparison = (0, compare_versions_js_1.compareVersions)(version, viewCall.successData, options);
+    const publishCall = comparison.type
+        ? await (0, index_js_1.callNpmCli)(index_js_1.PUBLISH, publishArguments, cliOptions)
+        : { successData: undefined, errorCode: undefined, error: undefined };
+    if (publishCall.error && publishCall.errorCode !== index_js_1.EPUBLISHCONFLICT) {
+        throw publishCall.error;
+    }
+    const { successData: publishData } = publishCall;
+    return {
+        id: publishData?.id,
+        files: publishData?.files ?? [],
+        type: publishData ? comparison.type : undefined,
+        oldVersion: comparison.oldVersion,
+    };
+}
+exports.compareAndPublish = compareAndPublish;
+//# sourceMappingURL=compare-and-publish.js.map

package/lib/compare-and-publish/compare-and-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare-and-publish.js","sourceRoot":"","sources":["../../src/compare-and-publish/compare-and-publish.ts"],"names":[],"mappings":";;;AAEA,8CAOyB;AACzB,+DAAgF;AAChF,yDAA2E;AAY3E;;;;;;;GAOG;AACI,KAAK,UAAU,iBAAiB,CACrC,QAAyB,EACzB,OAA0B,EAC1B,WAA8B;IAE9B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;IAChD,MAAM,UAAU,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAE3D,MAAM,aAAa,GAAG,IAAA,mCAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,IAAA,sCAAmB,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,GAAG,MAAM,IAAA,qBAAU,EAAC,eAAI,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IAEjE,4EAA4E;IAC5E,2EAA2E;IAC3E,yCAAyC;IACzC,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE;QAC5C,gEAAgE;QAChE,oCAAoC;QACpC,MAAM,oBAAoB,GAAG,IAAA,mCAAgB,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACnE,QAAQ,GAAG,MAAM,IAAA,qBAAU,EAAC,eAAI,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC;KACrE;IAED,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,KAAK,eAAI,EAAE;QACjD,MAAM,QAAQ,CAAC,KAAK,CAAC;KACtB;IAED,MAAM,UAAU,GAAG,IAAA,qCAAe,EAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI;QACjC,CAAC,CAAC,MAAM,IAAA,qBAAU,EAAC,kBAAO,EAAE,gBAAgB,EAAE,UAAU,CAAC;QACzD,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAEvE,IAAI,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,SAAS,KAAK,2BAAgB,EAAE;QACnE,MAAM,WAAW,CAAC,KAAK,CAAC;KACzB;IAED,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IAEjD,OAAO;QACL,EAAE,EAAE,WAAW,EAAE,EAAE;QACnB,KAAK,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAC/B,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC/C,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC;AACJ,CAAC;AA3CD,8CA2CC"}

package/lib/compare-and-publish/compare-versions.d.ts

@@ -0,0 +1,16 @@
+import type { NormalizedOptions } from "../normalize-options.js";
+import type { ReleaseType } from "../results.js";
+import type { NpmViewData } from "../npm/index.js";
+export interface VersionComparison {
+    type: ReleaseType | undefined;
+    oldVersion: string | undefined;
+}
+/**
+ * Compare previously published versions with the package's current version.
+ *
+ * @param currentVersion The current package version.
+ * @param publishedVersions The versions that have already been published.
+ * @param options Configuration options
+ * @returns The release type and previous version.
+ */
+export declare function compareVersions(currentVersion: string, publishedVersions: NpmViewData | undefined, options: NormalizedOptions): VersionComparison;

package/lib/compare-and-publish/compare-versions.js

@@ -0,0 +1,41 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareVersions = void 0;
+const diff_js_1 = __importDefault(require("semver/functions/diff.js"));
+const gt_js_1 = __importDefault(require("semver/functions/gt.js"));
+const valid_js_1 = __importDefault(require("semver/functions/valid.js"));
+const options_js_1 = require("../options.js");
+const INITIAL = "initial";
+const DIFFERENT = "different";
+/**
+ * Compare previously published versions with the package's current version.
+ *
+ * @param currentVersion The current package version.
+ * @param publishedVersions The versions that have already been published.
+ * @param options Configuration options
+ * @returns The release type and previous version.
+ */
+function compareVersions(currentVersion, publishedVersions, options) {
+    const { versions, "dist-tags": tags } = publishedVersions ?? {};
+    const { strategy, tag: publishTag } = options;
+    const oldVersion = (0, valid_js_1.default)(tags?.[publishTag.value]) ?? undefined;
+    const isUnique = !versions?.includes(currentVersion);
+    let type;
+    if (isUnique) {
+        if (!oldVersion) {
+            type = INITIAL;
+        }
+        else if ((0, gt_js_1.default)(currentVersion, oldVersion)) {
+            type = (0, diff_js_1.default)(currentVersion, oldVersion) ?? DIFFERENT;
+        }
+        else if (strategy.value === options_js_1.STRATEGY_ALL) {
+            type = DIFFERENT;
+        }
+    }
+    return { type, oldVersion };
+}
+exports.compareVersions = compareVersions;
+//# sourceMappingURL=compare-versions.js.map

package/lib/compare-and-publish/compare-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare-versions.js","sourceRoot":"","sources":["../../src/compare-and-publish/compare-versions.ts"],"names":[],"mappings":";;;;;;AAAA,uEAAwD;AACxD,mEAAuD;AACvD,yEAAoD;AAEpD,8CAA6C;AAU7C,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B;;;;;;;GAOG;AACH,SAAgB,eAAe,CAC7B,cAAsB,EACtB,iBAA0C,EAC1C,OAA0B;IAE1B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,iBAAiB,IAAI,EAAE,CAAC;IAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAA,kBAAW,EAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;IACtE,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,IAAI,IAA6B,CAAC;IAElC,IAAI,QAAQ,EAAE;QACZ,IAAI,CAAC,UAAU,EAAE;YACf,IAAI,GAAG,OAAO,CAAC;SAChB;aAAM,IAAI,IAAA,eAAiB,EAAC,cAAc,EAAE,UAAU,CAAC,EAAE;YACxD,IAAI,GAAG,IAAA,iBAAgB,EAAC,cAAc,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC;SAClE;aAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,yBAAY,EAAE;YAC1C,IAAI,GAAG,SAAS,CAAC;SAClB;KACF;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAtBD,0CAsBC"}

package/lib/compare-and-publish/get-arguments.d.ts

@@ -0,0 +1,21 @@
+import type { NormalizedOptions } from "../normalize-options.js";
+/**
+ * Given a package name and publish configuration, get the NPM CLI view
+ * arguments.
+ *
+ * @param packageName Package name.
+ * @param options Publish configuration.
+ * @param retryWithTag Include a non-latest tag in the package spec for a rety
+ *   attempt.
+ * @returns Arguments to pass to the NPM CLI. If `retryWithTag` is true, but the
+ *   publish config is using the `latest` tag, will return `undefined`.
+ */
+export declare function getViewArguments(packageName: string, options: NormalizedOptions, retryWithTag?: boolean): string[];
+/**
+ * Given a publish configuration, get the NPM CLI publish arguments.
+ *
+ * @param packageSpec Package specification path.
+ * @param options Publish configuration.
+ * @returns Arguments to pass to the NPM CLI.
+ */
+export declare function getPublishArguments(packageSpec: string, options: NormalizedOptions): string[];

package/lib/compare-and-publish/get-arguments.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPublishArguments = exports.getViewArguments = void 0;
+/**
+ * Given a package name and publish configuration, get the NPM CLI view
+ * arguments.
+ *
+ * @param packageName Package name.
+ * @param options Publish configuration.
+ * @param retryWithTag Include a non-latest tag in the package spec for a rety
+ *   attempt.
+ * @returns Arguments to pass to the NPM CLI. If `retryWithTag` is true, but the
+ *   publish config is using the `latest` tag, will return `undefined`.
+ */
+function getViewArguments(packageName, options, retryWithTag = false) {
+    const packageSpec = retryWithTag
+        ? `${packageName}@${options.tag.value}`
+        : packageName;
+    return [packageSpec, "dist-tags", "versions"];
+}
+exports.getViewArguments = getViewArguments;
+/**
+ * Given a publish configuration, get the NPM CLI publish arguments.
+ *
+ * @param packageSpec Package specification path.
+ * @param options Publish configuration.
+ * @returns Arguments to pass to the NPM CLI.
+ */
+function getPublishArguments(packageSpec, options) {
+    const { tag, access, dryRun, provenance } = options;
+    const publishArguments = [];
+    if (packageSpec.length > 0) {
+        publishArguments.push(packageSpec);
+    }
+    if (!tag.isDefault) {
+        publishArguments.push("--tag", tag.value);
+    }
+    if (!access.isDefault && access.value) {
+        publishArguments.push("--access", access.value);
+    }
+    if (!provenance.isDefault && provenance.value) {
+        publishArguments.push("--provenance");
+    }
+    if (!dryRun.isDefault && dryRun.value) {
+        publishArguments.push("--dry-run");
+    }
+    return publishArguments;
+}
+exports.getPublishArguments = getPublishArguments;
+//# sourceMappingURL=get-arguments.js.map

package/lib/compare-and-publish/get-arguments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-arguments.js","sourceRoot":"","sources":["../../src/compare-and-publish/get-arguments.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAC9B,WAAmB,EACnB,OAA0B,EAC1B,YAAY,GAAG,KAAK;IAEpB,MAAM,WAAW,GAAG,YAAY;QAC9B,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;QACvC,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAVD,4CAUC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,WAAmB,EACnB,OAA0B;IAE1B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAE5B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;QAC1B,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;IAED,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE;QAClB,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;KAC3C;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,EAAE;QACrC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;KACjD;IAED,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,EAAE;QAC7C,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;KACvC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,EAAE;QACrC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AA5BD,kDA4BC"}

package/lib/compare-and-publish/index.d.ts

@@ -0,0 +1 @@
+export * from "./compare-and-publish.js";

package/lib/compare-and-publish/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./compare-and-publish.js"), exports);
+//# sourceMappingURL=index.js.map

package/lib/compare-and-publish/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compare-and-publish/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC"}

package/lib/errors.d.ts

@@ -25,6 +25,9 @@ export declare class InvalidRegistryUrlError extends TypeError {
 export declare class InvalidTokenError extends TypeError {
     constructor();
 }
+export declare class InvalidTagError extends TypeError {
+    constructor(value: unknown);
+}
 export declare class InvalidAccessError extends TypeError {
     constructor(value: unknown);
 }

package/lib/errors.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NpmCallError = exports.InvalidStrategyError = exports.InvalidAccessError = exports.InvalidTokenError = exports.InvalidRegistryUrlError = exports.InvalidPackagePublishConfigError = exports.InvalidPackageVersionError = exports.InvalidPackageNameError = exports.PackageJsonParseError = exports.PackageTarballReadError = exports.PackageJsonReadError = exports.InvalidPackageError = void 0;
+exports.NpmCallError = exports.InvalidStrategyError = exports.InvalidAccessError = exports.InvalidTagError = exports.InvalidTokenError = exports.InvalidRegistryUrlError = exports.InvalidPackagePublishConfigError = exports.InvalidPackageVersionError = exports.InvalidPackageNameError = exports.PackageJsonParseError = exports.PackageTarballReadError = exports.PackageJsonReadError = exports.InvalidPackageError = void 0;
 const node_os_1 = __importDefault(require("node:os"));
 const options_js_1 = require("./options.js");
 class InvalidPackageError extends TypeError {
@@ -87,6 +87,13 @@ class InvalidTokenError extends TypeError {
     }
 }
 exports.InvalidTokenError = InvalidTokenError;
+class InvalidTagError extends TypeError {
+    constructor(value) {
+        super(`Tag must be a non-empty string, got "${String(value)}".`);
+        this.name = "InvalidTagError";
+    }
+}
+exports.InvalidTagError = InvalidTagError;
 class InvalidAccessError extends TypeError {
     constructor(value) {
         super(`Access must be "${options_js_1.ACCESS_PUBLIC}" or "${options_js_1.ACCESS_RESTRICTED}", got "${String(value)}".`);

package/lib/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AAEzB,6CAKsB;AAEtB,MAAa,mBAAoB,SAAQ,SAAS;IAChD,YAAmB,KAAc;QAC/B,KAAK,CACH,iEAAiE,MAAM,CACrE,KAAK,CACN,GAAG,CACL,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,kDASC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAmB,YAAoB,EAAE,aAAsB;QAC7D,MAAM,OAAO,GAAG;YACd,kCAAkC,YAAY,EAAE;YAChD,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAZD,oDAYC;AAED,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAmB,WAAmB,EAAE,aAAsB;QAC5D,MAAM,OAAO,GAAG;YACd,oCAAoC,WAAW,EAAE;YACjD,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAZD,0DAYC;AAED,MAAa,qBAAsB,SAAQ,WAAW;IACpD,YAAmB,WAAmB,EAAE,aAAsB;QAC5D,MAAM,OAAO,GAAG;YACd,kDAAkD,WAAW,EAAE;YAC/D,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAZD,sDAYC;AAED,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAmB,KAAc;QAC/B,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAmB,KAAc;QAC/B,KAAK,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED,MAAa,gCAAiC,SAAQ,SAAS;IAC7D,YAAmB,KAAc;QAC/B,KAAK,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AALD,4EAKC;AAED,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAmB,KAAc;QAC/B,KAAK,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,iBAAkB,SAAQ,SAAS;IAC9C;QACE,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED,MAAa,kBAAmB,SAAQ,SAAS;IAC/C,YAAmB,KAAc;QAC/B,KAAK,CACH,mBAAmB,0BAAa,SAAS,8BAAiB,WAAW,MAAM,CACzE,KAAK,CACN,IAAI,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AATD,gDASC;AAED,MAAa,oBAAqB,SAAQ,SAAS;IACjD,YAAmB,KAAc;QAC/B,KAAK,CACH,qBAAqB,6BAAgB,SAAS,yBAAY,WAAW,MAAM,CACzE,KAAK,CACN,IAAI,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC;AAED,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAmB,OAAe,EAAE,QAAgB,EAAE,MAAc;QAClE,KAAK,CACH;YACE,gBAAgB,OAAO,oCAAoC,QAAQ,EAAE;YACrE,MAAM;SACP,CAAC,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CACf,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAVD,oCAUC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AAEzB,6CAKsB;AAEtB,MAAa,mBAAoB,SAAQ,SAAS;IAChD,YAAmB,KAAc;QAC/B,KAAK,CACH,iEAAiE,MAAM,CACrE,KAAK,CACN,GAAG,CACL,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,kDASC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAmB,YAAoB,EAAE,aAAsB;QAC7D,MAAM,OAAO,GAAG;YACd,kCAAkC,YAAY,EAAE;YAChD,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAZD,oDAYC;AAED,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAmB,WAAmB,EAAE,aAAsB;QAC5D,MAAM,OAAO,GAAG;YACd,oCAAoC,WAAW,EAAE;YACjD,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAZD,0DAYC;AAED,MAAa,qBAAsB,SAAQ,WAAW;IACpD,YAAmB,WAAmB,EAAE,aAAsB;QAC5D,MAAM,OAAO,GAAG;YACd,kDAAkD,WAAW,EAAE;YAC/D,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC5D;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;QAEhB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAZD,sDAYC;AAED,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAmB,KAAc;QAC/B,KAAK,CAAC,uCAAuC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAmB,KAAc;QAC/B,KAAK,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED,MAAa,gCAAiC,SAAQ,SAAS;IAC7D,YAAmB,KAAc;QAC/B,KAAK,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AALD,4EAKC;AAED,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAmB,KAAc;QAC/B,KAAK,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,iBAAkB,SAAQ,SAAS;IAC9C;QACE,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED,MAAa,eAAgB,SAAQ,SAAS;IAC5C,YAAmB,KAAc;QAC/B,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED,MAAa,kBAAmB,SAAQ,SAAS;IAC/C,YAAmB,KAAc;QAC/B,KAAK,CACH,mBAAmB,0BAAa,SAAS,8BAAiB,WAAW,MAAM,CACzE,KAAK,CACN,IAAI,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AATD,gDASC;AAED,MAAa,oBAAqB,SAAQ,SAAS;IACjD,YAAmB,KAAc;QAC/B,KAAK,CACH,qBAAqB,6BAAgB,SAAS,yBAAY,WAAW,MAAM,CACzE,KAAK,CACN,IAAI,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC;AAED,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAmB,OAAe,EAAE,QAAgB,EAAE,MAAc;QAClE,KAAK,CACH;YACE,gBAAgB,OAAO,oCAAoC,QAAQ,EAAE;YACrE,MAAM;SACP,CAAC,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CACf,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAVD,oCAUC"}

package/lib/format-publish-result.d.ts

@@ -1,4 +1,4 @@
-import type { PublishResult } from "./npm/index.js";
+import type { PublishResult } from "./compare-and-publish/index.js";
 import type { PackageManifest } from "./read-manifest.js";
 import type { NormalizedOptions } from "./normalize-options.js";
 /**
@@ -6,7 +6,7 @@ import type { NormalizedOptions } from "./normalize-options.js";
  *
  * @param manifest Package manifest
  * @param options Configuration options.
- * @param results Results from running npm publish.
+ * @param result Results from running npm publish.
  * @returns Formatted string.
  */
-export declare function formatPublishResult(manifest: PackageManifest, options: NormalizedOptions, results?: PublishResult): string;
+export declare function formatPublishResult(manifest: PackageManifest, options: NormalizedOptions, result: PublishResult): string;

package/lib/format-publish-result.js

@@ -10,17 +10,17 @@ const node_os_1 = __importDefault(require("node:os"));
  *
  * @param manifest Package manifest
  * @param options Configuration options.
- * @param results Results from running npm publish.
+ * @param result Results from running npm publish.
  * @returns Formatted string.
  */
-function formatPublishResult(manifest, options, results) {
-    if (results === undefined) {
+function formatPublishResult(manifest, options, result) {
+    if (result.id === undefined) {
         return `🙅‍♀️ ${manifest.name}@${manifest.version} publish skipped.`;
     }
     return [
-        `📦 ${results.id}${options.dryRun.value ? " (DRY RUN)" : ""}`,
+        `📦 ${result.id}${options.dryRun.value ? " (DRY RUN)" : ""}`,
         "=== Contents ===",
-        ...results.files.map(({ path, size }) => `${formatSize(size)}\t${path}`),
+        ...result.files.map(({ path, size }) => `${formatSize(size)}\t${path}`),
     ].join(node_os_1.default.EOL);
 }
 exports.formatPublishResult = formatPublishResult;

package/lib/format-publish-result.js.map

@@ -1 +1 @@
-{"version":3,"file":"format-publish-result.js","sourceRoot":"","sources":["../src/format-publish-result.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AAMzB;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CACjC,QAAyB,EACzB,OAA0B,EAC1B,OAAuB;IAEvB,IAAI,OAAO,KAAK,SAAS,EAAE;QACzB,OAAO,SAAS,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,mBAAmB,CAAC;KACtE;IAED,OAAO;QACL,MAAM,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7D,kBAAkB;QAClB,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;KACzE,CAAC,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAdD,kDAcC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;IAC1C,IAAI,IAAI,GAAG,IAAI,EAAE;QACf,OAAO,GAAG,IAAI,IAAI,CAAC;KACpB;IACD,IAAI,IAAI,GAAG,OAAS,EAAE;QACpB,OAAO,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;KACzC;IAED,OAAO,GAAG,CAAC,IAAI,GAAG,OAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC,CAAC"}
+{"version":3,"file":"format-publish-result.js","sourceRoot":"","sources":["../src/format-publish-result.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AAMzB;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CACjC,QAAyB,EACzB,OAA0B,EAC1B,MAAqB;IAErB,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE;QAC3B,OAAO,SAAS,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,mBAAmB,CAAC;KACtE;IAED,OAAO;QACL,MAAM,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5D,kBAAkB;QAClB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;KACxE,CAAC,IAAI,CAAC,iBAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAdD,kDAcC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;IAC1C,IAAI,IAAI,GAAG,IAAI,EAAE;QACf,OAAO,GAAG,IAAI,IAAI,CAAC;KACpB;IACD,IAAI,IAAI,GAAG,OAAS,EAAE;QACpB,OAAO,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;KACzC;IAED,OAAO,GAAG,CAAC,IAAI,GAAG,OAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC,CAAC"}

package/lib/normalize-options.d.ts

@@ -1,11 +1,13 @@
 import type { PackageManifest } from "./read-manifest.js";
 import { type Access, type Strategy, type Options, type Logger } from "./options.js";
+export declare const TAG_LATEST = "latest";
 /** Normalized and sanitized auth, publish, and runtime configurations. */
 export interface NormalizedOptions {
     registry: URL;
     token: string;
     tag: ConfigValue<string>;
     access: ConfigValue<Access | undefined>;
+    provenance: ConfigValue<boolean>;
     dryRun: ConfigValue<boolean>;
     strategy: ConfigValue<Strategy>;
     logger: Logger | undefined;
@@ -19,8 +21,8 @@ export interface ConfigValue<TValue> {
 /**
  * Normalizes and sanitizes options, and fills-in any default values.
  *
- * @param options User-input options.
  * @param manifest Package metadata from package.json.
+ * @param options User-input options.
  * @returns Validated auth and publish configuration.
  */
-export declare function normalizeOptions(options: Options, manifest: PackageManifest): NormalizedOptions;
+export declare function normalizeOptions(manifest: PackageManifest, options: Options): NormalizedOptions;