@minnovate/shadow-publisher 0.6.1 → 0.6.3

package/dist/claude/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "git-publisher",
   "displayName": "Git Publisher",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "Publish an app folder's Git history to the serverless Git publishing backend and keep it updated (\"publish my app\", \"update my app\", \"fetch the engineered version\").",
   "author": { "name": "git-publisher project" },
   "keywords": ["git", "publish", "deploy", "serverless"]

package/dist/claude/plugin/skills/publish-app/SKILL.md

@@ -46,9 +46,9 @@ publisher doctor --json
 | `"bind-endpoint"` | A token is set in the environment, but nothing said where it may go. | **Stop** and tell them publishing is blocked by a token set in this shell. `next.command` is `null` on purpose: never set `GIT_PUBLISHER_ENDPOINT` or pass `--endpoint` yourself — that is exactly the choice the check leaves to whoever set the token. |
 
 **Never ask the user for a token, an endpoint, a URL or a credential — in any words.** They are
-publishing an app; they do not know what those are, and you no longer need them: `login` discovers
+publishing an app; they do not know what those are, and you do not need them: `login` discovers
 where publishing lives and signs them in through their browser. `next.ask` is `null` whenever
-nothing needs asking, which is now every case except choosing between connections they already
+nothing needs asking, which is every case except choosing between connections they already
 have; when it is not null it is already phrased for them, so pass it on rather than rewriting it.
 
 If they name an environment ("publish to dev"), pass `--profile dev` on each command rather than

package/dist/publisher.cjs

@@ -4447,7 +4447,7 @@ async function resolveToken(endpoint, explicit, opts = {}) {
   if (given) return given;
   const url2 = normalize(endpoint);
   const entry = (await readCredentials()).endpoints[url2];
-  if (!entry) throw new PublisherError("UNAUTHORIZED", `no credentials for ${endpoint}; run "publisher login" or set GIT_PUBLISHER_TOKEN`);
+  if (!entry) throw new PublisherError("UNAUTHORIZED", `no credentials for ${endpoint}; run "publisher login" or set GIT_PUBLISHER_TOKEN`, { details: { signIn: "missing" } });
   const now = (opts.now ?? Date.now)();
   const lapsed = entry.expiresAt !== void 0 && Date.parse(entry.expiresAt) - REFRESH_EARLY_MS <= now;
   if (entry.refreshToken && entry.authEndpoint && lapsed) return refreshCredential(url2, entry, opts);
@@ -4483,7 +4483,7 @@ async function refreshCredential(url2, entry, opts) {
   if (current?.refreshToken && current.refreshToken !== entry.refreshToken) return current.token;
   if (rotated) throw new PublisherError("UNAVAILABLE", `another process is refreshing the sign-in for ${url2}; retry`, { retryable: true });
   await updateEntry(url2, ({ refreshToken: _dropped, ...rest }) => rest);
-  throw new PublisherError("UNAUTHORIZED", `the sign-in for ${url2} has ended; run "publisher login" again`);
+  throw new PublisherError("UNAUTHORIZED", `the sign-in for ${url2} has ended; run "publisher login" again`, { details: { signIn: "ended" } });
 }
 async function updateEntry(url2, change) {
   const file = await readCredentials();
@@ -4572,7 +4572,7 @@ var Transport = class {
       }
       if (res.ok) return { status: res.status, body: parsed, headers: res.headers };
       const err = parsed?.error;
-      const code = err && ERROR_CODES.includes(err.code) ? err.code : res.status >= 500 ? "UNAVAILABLE" : "INVALID_REQUEST";
+      const code = err && ERROR_CODES.includes(err.code) ? err.code : fallbackCode(res.status);
       throw new PublisherError(code, err?.message ?? `HTTP ${res.status}`, {
         retryable: err?.retryable ?? (res.status === 429 || res.status >= 500),
         httpStatus: res.status,
@@ -4584,6 +4584,12 @@ var Transport = class {
     }
   }
 };
+function fallbackCode(status) {
+  if (status === 401) return "UNAUTHORIZED";
+  if (status === 403) return "FORBIDDEN";
+  if (status === 429) return "UNAVAILABLE";
+  return status >= 500 ? "UNAVAILABLE" : "INVALID_REQUEST";
+}
 function sleep(ms, signal) {
   return new Promise((resolve3, reject) => {
     const t = setTimeout(resolve3, ms);
@@ -5044,6 +5050,23 @@ async function packFileUsable(p) {
   }
 }
 async function runPublication(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed) {
+  try {
+    return await sendAndWait(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed);
+  } catch (e) {
+    throw unconfirmed(e, pending.publicationId);
+  }
+}
+var UNCONFIRMED = /* @__PURE__ */ new Set(["UNAUTHORIZED", "FORBIDDEN", "NETWORK", "UNAVAILABLE", "INTERNAL"]);
+function unconfirmed(e, publicationId) {
+  if (!(e instanceof PublisherError) || !UNCONFIRMED.has(e.code)) return e;
+  if (e.code === "UNAUTHORIZED" && e.details?.["signIn"] !== void 0) return e;
+  return new PublisherError("OUTCOME_UNKNOWN", `publication ${publicationId} was not confirmed (${e.code}: ${e.message}); run status before publishing again`, {
+    retryable: true,
+    cause: e,
+    details: { publicationId, cause: e.code }
+  });
+}
+async function sendAndWait(ctx, repoId, remote, repoDir, store2, pending, opts, call, resumed) {
   const progress = call.onProgress ?? (() => void 0);
   const beginBody = {
     publicationId: pending.publicationId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnovate/shadow-publisher",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "publisher: publish an app's Git history to the serverless Git backend",
   "license": "Apache-2.0",
   "type": "module",