@jskit-ai/release 0.1.3 → 0.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/release",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Selective npm release preparation, publication and dependency pinning for package repositories.",
   "type": "module",
   "files": [

package/src/release.mjs

@@ -15,7 +15,7 @@ import { createPublicationInspection, planPublication, snapshotFiles } from "./n
 // and per package in its own `jskitRelease` field:
 //   pack             command printing a custom tarball path (see npm-publication.mjs)
 //   versionFiles     JSON files whose `version` must equal the package version
-const USAGE = "Usage: jskit-release <prepare|publish|pin> [--cwd <dir>] [--dry-run] [--registry <url>] [--from <repoDir>...]";
+const USAGE = "Usage: jskit-release <prepare|publish|pin> [--cwd <dir>] [--dry-run] [--registry <url>] [--from <repoDir>...] [--no-commit]";
 const DEPENDENCY_FIELDS = Object.freeze([
   "dependencies",
   "devDependencies",
@@ -35,6 +35,7 @@ function parseArgs(argv = []) {
     intent,
     cwd: process.cwd(),
     dryRun: false,
+    noCommit: false,
     registry: DEFAULT_REGISTRY,
     from: []
   };
@@ -45,6 +46,10 @@ function parseArgs(argv = []) {
       options.dryRun = true;
       continue;
     }
+    if (argument === "--no-commit" && intent === "pin") {
+      options.noCommit = true;
+      continue;
+    }
     const [name, inline] = argument.startsWith("--") && argument.includes("=")
       ? [argument.slice(0, argument.indexOf("=")), argument.slice(argument.indexOf("=") + 1)] : [argument, undefined];
     if (name === "--cwd" || (name === "--from" && intent === "pin")) {
@@ -708,6 +713,27 @@ async function publishCommand(options) {
   await publishRelease(records, options);
 }
 
+// npm cannot move exactly pinned packages that require each other in
+// lockstep (assistant-core and assistant-runtime, say): the locked old
+// versions still demand the old peers, and install stops with ERESOLVE.
+// Forgetting only the pinned packages' lock entries lets npm resolve them
+// afresh while every other locked dependency stays as it was.
+async function forgetPinnedLockEntries(repoRoot, names) {
+  const lockPath = path.join(repoRoot, "package-lock.json");
+  let lock;
+  try {
+    lock = JSON.parse(await readFile(lockPath, "utf8"));
+  } catch (error) {
+    if (error.code === "ENOENT") return;
+    throw error;
+  }
+  for (const key of Object.keys(lock.packages || {})) {
+    const name = key.split("node_modules/").at(-1);
+    if (key.includes("node_modules/") && names.has(name)) delete lock.packages[key];
+  }
+  await writeFile(lockPath, serializeJson(lock), "utf8");
+}
+
 // npm can take minutes to serve a just-published version everywhere.
 // Moved from Vibe64 Online's deploy orchestrator.
 async function installReleasedPins(repoRoot, { attempts = 20, delayMs = Number(process.env.JSKIT_RELEASE_RETRY_DELAY_MS || 30_000) } = {}) {
@@ -730,7 +756,9 @@ async function installReleasedPins(repoRoot, { attempts = 20, delayMs = Number(p
 // pin: make every dependency on a package published from the given
 // repositories follow that package's current version, keeping ^/~, then
 // install, commit and push. Moved from Vibe64 Online's deploy orchestrator.
-async function pinCommand({ cwd: repoRoot, from, dryRun }) {
+// --no-commit stops after the install, leaving the edits for the caller to
+// build from and discard (a deploy rehearsal).
+async function pinCommand({ cwd: repoRoot, from, dryRun, noCommit }) {
   const versions = new Map();
   for (const dir of from) {
     for (const record of await discoverReleasePackages(dir)) versions.set(record.name, record.packageJson.version);
@@ -753,7 +781,12 @@ async function pinCommand({ cwd: repoRoot, from, dryRun }) {
     process.stdout.write("Pin dry-run complete.\n");
     return;
   }
+  await forgetPinnedLockEntries(repoRoot, new Set(versions.keys()));
   await installReleasedPins(repoRoot);
+  if (noCommit) {
+    process.stdout.write(`${path.basename(repoRoot)}: pins installed; not committed\n`);
+    return;
+  }
   commitAndPush(repoRoot, "Consume released packages");
 }