@ontrails/trails 1.0.0-beta.29 → 1.0.0-beta.30

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # trails
 
+## 1.0.0-beta.30
+
+### Patch Changes
+
+- 5510807: Treat npm `ETARGET` exact-version probes as unpublished target versions during registry readiness checks.
+- b0ff8b9: Teach the registry preflight to verify first-time package publishes when npm's package summary lags behind dist-tags and tarball availability.
+  - @ontrails/commander@1.0.0-beta.30
+  - @ontrails/adapter-kit@1.0.0-beta.30
+  - @ontrails/cli@1.0.0-beta.30
+  - @ontrails/config@1.0.0-beta.30
+  - @ontrails/core@1.0.0-beta.30
+  - @ontrails/http@1.0.0-beta.30
+  - @ontrails/mcp@1.0.0-beta.30
+  - @ontrails/observe@1.0.0-beta.30
+  - @ontrails/permits@1.0.0-beta.30
+  - @ontrails/regrade@1.0.0-beta.30
+  - @ontrails/topographer@1.0.0-beta.30
+  - @ontrails/tracing@1.0.0-beta.30
+  - @ontrails/warden@1.0.0-beta.30
+  - @ontrails/wayfinder@1.0.0-beta.30
+
 ## 1.0.0-beta.29
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ontrails/trails",
-  "version": "1.0.0-beta.29",
+  "version": "1.0.0-beta.30",
   "bin": {
     "trails": "./bin/trails.ts"
   },
@@ -27,25 +27,25 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.1.0",
-    "@ontrails/adapter-kit": "^1.0.0-beta.29",
-    "@ontrails/cli": "^1.0.0-beta.29",
-    "@ontrails/commander": "^1.0.0-beta.29",
-    "@ontrails/config": "^1.0.0-beta.29",
-    "@ontrails/core": "^1.0.0-beta.29",
-    "@ontrails/http": "^1.0.0-beta.29",
-    "@ontrails/mcp": "^1.0.0-beta.29",
-    "@ontrails/observe": "^1.0.0-beta.29",
-    "@ontrails/permits": "^1.0.0-beta.29",
-    "@ontrails/regrade": "^1.0.0-beta.29",
-    "@ontrails/topographer": "^1.0.0-beta.29",
-    "@ontrails/tracing": "^1.0.0-beta.29",
-    "@ontrails/warden": "^1.0.0-beta.29",
-    "@ontrails/wayfinder": "^1.0.0-beta.29",
+    "@ontrails/adapter-kit": "^1.0.0-beta.30",
+    "@ontrails/cli": "^1.0.0-beta.30",
+    "@ontrails/commander": "^1.0.0-beta.30",
+    "@ontrails/config": "^1.0.0-beta.30",
+    "@ontrails/core": "^1.0.0-beta.30",
+    "@ontrails/http": "^1.0.0-beta.30",
+    "@ontrails/mcp": "^1.0.0-beta.30",
+    "@ontrails/observe": "^1.0.0-beta.30",
+    "@ontrails/permits": "^1.0.0-beta.30",
+    "@ontrails/regrade": "^1.0.0-beta.30",
+    "@ontrails/topographer": "^1.0.0-beta.30",
+    "@ontrails/tracing": "^1.0.0-beta.30",
+    "@ontrails/warden": "^1.0.0-beta.30",
+    "@ontrails/wayfinder": "^1.0.0-beta.30",
     "commander": "^14.0.3",
     "typescript": "^5.9.3",
     "zod": "^4.3.5"
   },
   "devDependencies": {
-    "@ontrails/testing": "^1.0.0-beta.29"
+    "@ontrails/testing": "^1.0.0-beta.30"
   }
 }

package/src/release/native-bun-registry.ts

@@ -304,27 +304,143 @@ export const discoverRegistryWorkspaces = async (
 
 export type RegistryView = (name: string) => Promise<NpmView | null>;
 
-export const npmRegistryView: RegistryView = async (name) => {
-  const proc = Bun.spawn(
-    ['npm', 'view', name, 'name', 'version', 'dist-tags', '--json'],
-    { stderr: 'pipe', stdin: 'ignore', stdout: 'pipe' }
-  );
+export interface NpmCommandResult {
+  readonly exitCode: number;
+  readonly stderr: string;
+  readonly stdout: string;
+}
+
+export type NpmCommandRunner = (
+  args: readonly string[]
+) => Promise<NpmCommandResult>;
+
+const readSpawnResult = async (
+  proc: Bun.Subprocess<'ignore', 'pipe', 'pipe'>
+): Promise<NpmCommandResult> => {
   const [stdout, stderr, exitCode] = await Promise.all([
     new Response(proc.stdout).text(),
     new Response(proc.stderr).text(),
     proc.exited,
   ]);
+  return { exitCode, stderr, stdout };
+};
 
-  if (exitCode === 0) {
-    return JSON.parse(stdout) as NpmView;
-  }
+const runNpmCommand: NpmCommandRunner = async (args) =>
+  readSpawnResult(
+    Bun.spawn(['npm', ...args], {
+      stderr: 'pipe',
+      stdin: 'ignore',
+      stdout: 'pipe',
+    })
+  );
+
+const isNpmNotFoundOutput = (stdout: string, stderr: string): boolean => {
   const combined = `${stdout}\n${stderr}`;
-  if (combined.includes('E404') || combined.includes('404 Not Found')) {
+  return combined.includes('E404') || combined.includes('404 Not Found');
+};
+
+const isNpmExactVersionMissingOutput = (
+  stdout: string,
+  stderr: string
+): boolean => {
+  const combined = `${stdout}\n${stderr}`;
+  return (
+    combined.includes('ETARGET') ||
+    combined.includes('No matching version found')
+  );
+};
+
+export const parseNpmDistTagListOutput = (
+  stdout: string
+): Record<string, string> => {
+  const distTags: Record<string, string> = {};
+  for (const line of stdout.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.length === 0) {
+      continue;
+    }
+    const separator = trimmed.indexOf(':');
+    if (separator < 1) {
+      continue;
+    }
+    const tag = trimmed.slice(0, separator).trim();
+    const version = trimmed.slice(separator + 1).trim();
+    if (tag.length > 0 && version.length > 0) {
+      distTags[tag] = version;
+    }
+  }
+  return distTags;
+};
+
+export const parseNpmPackDryRunPublishedVersion = (
+  stdout: string,
+  name: string,
+  version: string
+): boolean => {
+  const parsed = JSON.parse(stdout.trim()) as unknown;
+  if (!Array.isArray(parsed)) {
+    return false;
+  }
+  return parsed.some((entry) => {
+    if (typeof entry !== 'object' || entry === null) {
+      return false;
+    }
+    const candidate = entry as {
+      readonly id?: unknown;
+      readonly name?: unknown;
+      readonly version?: unknown;
+    };
+    return (
+      candidate.id === `${name}@${version}` ||
+      (candidate.name === name && candidate.version === version)
+    );
+  });
+};
+
+const npmDistTagRegistryView = async (
+  name: string,
+  runNpm: NpmCommandRunner
+): Promise<NpmView | null> => {
+  const { exitCode, stderr, stdout } = await runNpm(['dist-tag', 'ls', name]);
+  if (exitCode !== 0) {
+    if (isNpmNotFoundOutput(stdout, stderr)) {
+      return null;
+    }
+    throw new Error(stderr.trim() || `npm dist-tag ls failed for ${name}`);
+  }
+
+  const distTags = parseNpmDistTagListOutput(stdout);
+  const version =
+    distTags['latest'] ?? distTags['beta'] ?? Object.values(distTags)[0];
+  if (version === undefined) {
     return null;
   }
-  throw new Error(stderr.trim() || `npm view failed for ${name}`);
+  return { 'dist-tags': distTags, name, version };
 };
 
+export const createNpmRegistryView =
+  (runNpm: NpmCommandRunner = runNpmCommand): RegistryView =>
+  async (name) => {
+    const { exitCode, stderr, stdout } = await runNpm([
+      'view',
+      name,
+      'name',
+      'version',
+      'dist-tags',
+      '--json',
+    ]);
+
+    if (exitCode === 0) {
+      return JSON.parse(stdout) as NpmView;
+    }
+    if (isNpmNotFoundOutput(stdout, stderr)) {
+      return npmDistTagRegistryView(name, runNpm);
+    }
+    throw new Error(stderr.trim() || `npm view failed for ${name}`);
+  };
+
+export const npmRegistryView: RegistryView = createNpmRegistryView();
+
 /** Probe whether an exact `name@version` is published. The missing fact that
  * a tag/version summary alone cannot answer. */
 export type RegistryVersionView = (
@@ -336,29 +452,54 @@ const UNKNOWN_REGISTRY_VERSION_STATE: { readonly published?: boolean } = {};
 const unknownRegistryVersionView: RegistryVersionView = async () =>
   UNKNOWN_REGISTRY_VERSION_STATE.published;
 
-export const npmRegistryVersionView: RegistryVersionView = async (
-  name,
-  version
-) => {
-  const proc = Bun.spawn(
-    ['npm', 'view', `${name}@${version}`, 'version', '--json'],
-    { stderr: 'pipe', stdin: 'ignore', stdout: 'pipe' }
-  );
-  const [stdout, stderr, exitCode] = await Promise.all([
-    new Response(proc.stdout).text(),
-    new Response(proc.stderr).text(),
-    proc.exited,
-  ]);
+export const createNpmRegistryVersionView =
+  (runNpm: NpmCommandRunner = runNpmCommand): RegistryVersionView =>
+  async (name, version) => {
+    const { exitCode, stderr, stdout } = await runNpm([
+      'view',
+      `${name}@${version}`,
+      'version',
+      '--json',
+    ]);
+
+    if (exitCode === 0) {
+      return JSON.parse(stdout.trim()) === version;
+    }
+    if (isNpmExactVersionMissingOutput(stdout, stderr)) {
+      return false;
+    }
+    if (!isNpmNotFoundOutput(stdout, stderr)) {
+      throw new Error(
+        stderr.trim() || `npm view failed for ${name}@${version}`
+      );
+    }
 
-  if (exitCode === 0) {
-    return JSON.parse(stdout.trim()) === version;
-  }
-  const combined = `${stdout}\n${stderr}`;
-  if (combined.includes('E404') || combined.includes('404 Not Found')) {
-    return false;
-  }
-  throw new Error(stderr.trim() || `npm view failed for ${name}@${version}`);
-};
+    const packResult = await runNpm([
+      'pack',
+      `${name}@${version}`,
+      '--dry-run',
+      '--json',
+    ]);
+    if (packResult.exitCode === 0) {
+      return parseNpmPackDryRunPublishedVersion(
+        packResult.stdout,
+        name,
+        version
+      );
+    }
+    if (isNpmExactVersionMissingOutput(packResult.stdout, packResult.stderr)) {
+      return false;
+    }
+    if (isNpmNotFoundOutput(packResult.stdout, packResult.stderr)) {
+      return false;
+    }
+    throw new Error(
+      packResult.stderr.trim() || `npm pack failed for ${name}@${version}`
+    );
+  };
+
+export const npmRegistryVersionView: RegistryVersionView =
+  createNpmRegistryVersionView();
 
 /** Run async tasks with a bounded number in flight, preserving input order. */
 const mapBounded = async <T, R>(