@minnovate/shadow-publisher 0.6.0 → 0.6.2

package/dist/claude/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "git-publisher",
   "displayName": "Git Publisher",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Publish an app folder's Git history to the serverless Git publishing backend and keep it updated (\"publish my app\", \"update my app\", \"fetch the engineered version\").",
   "author": { "name": "git-publisher project" },
   "keywords": ["git", "publish", "deploy", "serverless"]

package/dist/claude/plugin/skills/publish-app/SKILL.md

@@ -46,9 +46,9 @@ publisher doctor --json
 | `"bind-endpoint"` | A token is set in the environment, but nothing said where it may go. | **Stop** and tell them publishing is blocked by a token set in this shell. `next.command` is `null` on purpose: never set `GIT_PUBLISHER_ENDPOINT` or pass `--endpoint` yourself — that is exactly the choice the check leaves to whoever set the token. |
 
 **Never ask the user for a token, an endpoint, a URL or a credential — in any words.** They are
-publishing an app; they do not know what those are, and you no longer need them: `login` discovers
+publishing an app; they do not know what those are, and you do not need them: `login` discovers
 where publishing lives and signs them in through their browser. `next.ask` is `null` whenever
-nothing needs asking, which is now every case except choosing between connections they already
+nothing needs asking, which is every case except choosing between connections they already
 have; when it is not null it is already phrased for them, so pass it on rather than rewriting it.
 
 If they name an environment ("publish to dev"), pass `--profile dev` on each command rather than

package/dist/publisher.cjs

@@ -4447,7 +4447,7 @@ async function resolveToken(endpoint, explicit, opts = {}) {
   if (given) return given;
   const url2 = normalize(endpoint);
   const entry = (await readCredentials()).endpoints[url2];
-  if (!entry) throw new PublisherError("UNAUTHORIZED", `no credentials for ${endpoint}; run "publisher login" or set GIT_PUBLISHER_TOKEN`);
+  if (!entry) throw new PublisherError("UNAUTHORIZED", `no credentials for ${endpoint}; run "publisher login" or set GIT_PUBLISHER_TOKEN`, { details: { signIn: "missing" } });
   const now = (opts.now ?? Date.now)();
   const lapsed = entry.expiresAt !== void 0 && Date.parse(entry.expiresAt) - REFRESH_EARLY_MS <= now;
   if (entry.refreshToken && entry.authEndpoint && lapsed) return refreshCredential(url2, entry, opts);
@@ -4483,7 +4483,7 @@ async function refreshCredential(url2, entry, opts) {
   if (current?.refreshToken && current.refreshToken !== entry.refreshToken) return current.token;
   if (rotated) throw new PublisherError("UNAVAILABLE", `another process is refreshing the sign-in for ${url2}; retry`, { retryable: true });
   await updateEntry(url2, ({ refreshToken: _dropped, ...rest }) => rest);
-  throw new PublisherError("UNAUTHORIZED", `the sign-in for ${url2} has ended; run "publisher login" again`);
+  throw new PublisherError("UNAUTHORIZED", `the sign-in for ${url2} has ended; run "publisher login" again`, { details: { signIn: "ended" } });
 }
 async function updateEntry(url2, change) {
   const file = await readCredentials();
@@ -4572,7 +4572,7 @@ var Transport = class {
       }
       if (res.ok) return { status: res.status, body: parsed, headers: res.headers };
       const err = parsed?.error;
-      const code = err && ERROR_CODES.includes(err.code) ? err.code : res.status >= 500 ? "UNAVAILABLE" : "INVALID_REQUEST";
+      const code = err && ERROR_CODES.includes(err.code) ? err.code : fallbackCode(res.status);
       throw new PublisherError(code, err?.message ?? `HTTP ${res.status}`, {
         retryable: err?.retryable ?? (res.status === 429 || res.status >= 500),
         httpStatus: res.status,
@@ -4584,6 +4584,12 @@ var Transport = class {
     }
   }
 };
+function fallbackCode(status) {
+  if (status === 401) return "UNAUTHORIZED";
+  if (status === 403) return "FORBIDDEN";
+  if (status === 429) return "UNAVAILABLE";
+  return status >= 500 ? "UNAVAILABLE" : "INVALID_REQUEST";
+}
 function sleep(ms, signal) {
   return new Promise((resolve3, reject) => {
     const t = setTimeout(resolve3, ms);
@@ -4646,8 +4652,8 @@ async function followRun(input, opts) {
       refreshed = true;
       if (await opts.refresh()) continue;
     }
-    if (answer.status === 401 && isRecord(answer.body) && typeof answer.body["error"] === "string") return { kind: "unauthorized" };
-    if (answer.status === 404 || answer.status === 401) return { kind: "unavailable", reason: "no-route" };
+    if (answer.status === 401) return { kind: "unauthorized" };
+    if (answer.status === 404) return { kind: "unavailable", reason: "no-route" };
     if (answer.status === 403) return { kind: "forbidden" };
     if (answer.status === 200) {
       const run = soleRun(answer.body);
@@ -4704,16 +4710,19 @@ function portalForEndpoint(endpoint) {
   if (url2.protocol !== "https:" || url2.pathname.replace(/\/+$/, "") !== "/publish") return null;
   return url2.origin;
 }
+var RUN_PROGRESS = "run-progress";
 async function confirmPortal(portal, endpoint, fetchImpl = fetch) {
   try {
     const res = await fetchImpl(`${portal}/api/v1/config`, { signal: AbortSignal.timeout(1e4) });
-    if (!res.ok) return false;
+    if (!res.ok) return null;
     const body = await res.json();
     const named = body?.publishingEndpoint;
     const bare = (u) => u.replace(/\/+$/, "");
-    return typeof named === "string" && bare(named) === bare(endpoint);
+    if (typeof named !== "string" || bare(named) !== bare(endpoint)) return null;
+    const terminal = body?.terminal;
+    return { terminal: Array.isArray(terminal) && terminal.every((name) => typeof name === "string") ? terminal : [] };
   } catch {
-    return false;
+    return null;
   }
 }
 function isRecord(value) {
@@ -5041,6 +5050,23 @@ async function packFileUsable(p) {
   }
 }
 async function runPublication(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed) {
+  try {
+    return await sendAndWait(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed);
+  } catch (e) {
+    throw unconfirmed(e, pending.publicationId);
+  }
+}
+var UNCONFIRMED = /* @__PURE__ */ new Set(["UNAUTHORIZED", "FORBIDDEN", "NETWORK", "UNAVAILABLE", "INTERNAL"]);
+function unconfirmed(e, publicationId) {
+  if (!(e instanceof PublisherError) || !UNCONFIRMED.has(e.code)) return e;
+  if (e.code === "UNAUTHORIZED" && e.details?.["signIn"] !== void 0) return e;
+  return new PublisherError("OUTCOME_UNKNOWN", `publication ${publicationId} was not confirmed (${e.code}: ${e.message}); run status before publishing again`, {
+    retryable: true,
+    cause: e,
+    details: { publicationId, cause: e.code }
+  });
+}
+async function sendAndWait(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed) {
   const progress = call.onProgress ?? (() => void 0);
   const beginBody = {
     publicationId: pending.publicationId,
@@ -5832,9 +5858,14 @@ async function installSkills({ log }) {
 // src/follow.ts
 async function followPublication(p, endpoint, o, opts) {
   const derived = portalForEndpoint(endpoint);
-  const portal = derived !== null && await confirmPortal(derived, endpoint, opts.fetch) ? derived : null;
+  const confirmed = derived === null ? null : await confirmPortal(derived, endpoint, opts.fetch);
+  const portal = confirmed === null ? null : derived;
   const elsewhere = (reason) => ({ kind: "unavailable", reason, portal, hint: inPortal(portal, "Published.", "Follow it") });
-  if (portal === null) return elsewhere("no-portal");
+  if (portal === null || confirmed === null) return elsewhere("no-portal");
+  if (!confirmed.terminal.includes(RUN_PROGRESS)) {
+    const noRoute = { kind: "unavailable", reason: "no-route" };
+    return { ...noRoute, portal, hint: progressHint(noRoute, portal) };
+  }
   const refs = Object.entries(o.refs ?? {});
   if (refs.length !== 1) return elsewhere("several-refs");
   const [ref, commit] = refs[0];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnovate/shadow-publisher",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "publisher: publish an app's Git history to the serverless Git backend",
   "license": "Apache-2.0",
   "type": "module",