@pubm/core 0.4.4 → 0.4.6

package/dist/index.js

@@ -20111,6 +20111,10 @@ async function openUrl(url) {
 var init_open_url = () => {};
 
 // src/plugin/runner.ts
+function isDefined(value) {
+  return value !== undefined;
+}
+
 class PluginRunner {
   plugins;
   constructor(plugins) {
@@ -20148,7 +20152,7 @@ class PluginRunner {
   }
   collectAssetHooks() {
     const collected = {};
-    const resolveChain = this.plugins.map((p) => p.hooks?.resolveAssets).filter(Boolean);
+    const resolveChain = this.plugins.map((p) => p.hooks?.resolveAssets).filter(isDefined);
     if (resolveChain.length > 0) {
       collected.resolveAssets = async (assets, ctx) => {
         let result = assets;
@@ -20158,7 +20162,7 @@ class PluginRunner {
         return result;
       };
     }
-    const transformChain = this.plugins.map((p) => p.hooks?.transformAsset).filter(Boolean);
+    const transformChain = this.plugins.map((p) => p.hooks?.transformAsset).filter(isDefined);
     if (transformChain.length > 0) {
       collected.transformAsset = async (asset, ctx) => {
         let items = [asset];
@@ -20173,17 +20177,18 @@ class PluginRunner {
         return items.length === 1 ? items[0] : items;
       };
     }
-    const compressChain = this.plugins.map((p) => p.hooks?.compressAsset).filter(Boolean);
+    const compressChain = this.plugins.map((p) => p.hooks?.compressAsset).filter(isDefined);
     if (compressChain.length > 0) {
       collected.compressAsset = async (asset, ctx) => {
-        let result = asset;
-        for (const hook of compressChain) {
+        const [firstHook, ...restHooks] = compressChain;
+        let result = await firstHook(asset, ctx);
+        for (const hook of restHooks) {
           result = await hook(result, ctx);
         }
         return result;
       };
     }
-    const nameChain = this.plugins.map((p) => p.hooks?.nameAsset).filter(Boolean);
+    const nameChain = this.plugins.map((p) => p.hooks?.nameAsset).filter(isDefined);
     if (nameChain.length > 0) {
       collected.nameAsset = (asset, ctx) => {
         let result = "";
@@ -20193,7 +20198,7 @@ class PluginRunner {
         return result;
       };
     }
-    const checksumChain = this.plugins.map((p) => p.hooks?.generateChecksums).filter(Boolean);
+    const checksumChain = this.plugins.map((p) => p.hooks?.generateChecksums).filter(isDefined);
     if (checksumChain.length > 0) {
       collected.generateChecksums = async (assets, ctx) => {
         let result = assets;
@@ -20203,7 +20208,7 @@ class PluginRunner {
         return result;
       };
     }
-    const uploadHooks = this.plugins.map((p) => p.hooks?.uploadAssets).filter(Boolean);
+    const uploadHooks = this.plugins.map((p) => p.hooks?.uploadAssets).filter(isDefined);
     if (uploadHooks.length > 0) {
       collected.uploadAssets = async (assets, ctx) => {
         const allResults = [];
@@ -20219,7 +20224,7 @@ class PluginRunner {
 }
 
 // src/tasks/runner.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync8, rmSync as rmSync2 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync2, readFileSync as readFileSync9, rmSync as rmSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
 import path10, { join as join9 } from "node:path";
 import process17 from "node:process";
@@ -22860,7 +22865,8 @@ function createKeyResolver(packages) {
 }
 
 // src/ecosystem/js.ts
-import { readFile as readFile3, writeFile } from "node:fs/promises";
+import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { readFile as readFile3, stat as stat3, writeFile } from "node:fs/promises";
 import path5 from "node:path";
 
 // src/registry/jsr.ts
@@ -22964,7 +22970,7 @@ function isValidPackageName(packageName) {
 // package.json
 var package_default = {
   name: "@pubm/core",
-  version: "0.4.4",
+  version: "0.4.6",
   type: "module",
   description: "Core SDK for pubm - publish manager for multiple registries",
   types: "./dist/index.d.ts",
@@ -23038,7 +23044,7 @@ var coreEngines = package_default.engines ?? {};
 function resolveDefine(injected, fallback) {
   return typeof injected === "string" ? injected : fallback;
 }
-var PUBM_VERSION = resolveDefine("0.4.4", package_default.version);
+var PUBM_VERSION = resolveDefine("0.4.6", package_default.version);
 var PUBM_ENGINES = {
   node: resolveDefine(">=24", coreEngines.node ?? ">=18"),
   git: resolveDefine(">=2.11.0", coreEngines.git ?? ">=2.11.0"),
@@ -23997,6 +24003,9 @@ async function npmPackageRegistry(packagePath) {
   return new NpmPackageRegistry(manifest.name, packagePath);
 }
 
+// src/ecosystem/js.ts
+init_exec();
+
 // src/utils/package.ts
 import { stat as stat2 } from "node:fs/promises";
 import path4 from "node:path";
@@ -24020,16 +24029,28 @@ async function findOutFile(file, { cwd = process12.cwd() } = {}) {
 }
 
 // src/utils/package-manager.ts
-var lockFile = {
+var lockFiles = {
   bun: ["bun.lock", "bun.lockb"],
   npm: ["package-lock.json", "npm-shrinkwrap.json"],
   pnpm: ["pnpm-lock.yaml"],
   yarn: ["yarn.lock"]
 };
+function getInstallCommand(pm, isYarnBerry) {
+  switch (pm) {
+    case "bun":
+      return ["bun", "install", "--lockfile-only"];
+    case "npm":
+      return ["npm", "install", "--package-lock-only"];
+    case "pnpm":
+      return ["pnpm", "install", "--lockfile-only"];
+    case "yarn":
+      return isYarnBerry ? ["yarn", "install", "--mode", "update-lockfile"] : ["yarn", "install"];
+  }
+}
 async function getPackageManager() {
-  for (const [packageManager, lockFiles] of Object.entries(lockFile)) {
-    for (const lockFile2 of lockFiles) {
-      if (await findOutFile(lockFile2))
+  for (const [packageManager, files] of Object.entries(lockFiles)) {
+    for (const file of files) {
+      if (await findOutFile(file))
         return packageManager;
     }
   }
@@ -24038,6 +24059,8 @@ async function getPackageManager() {
 }
 
 // src/ecosystem/ecosystem.ts
+import { writeFileSync as writeFileSync3 } from "node:fs";
+
 class Ecosystem {
   packagePath;
   constructor(packagePath) {
@@ -24078,9 +24101,17 @@ class Ecosystem {
   async updateSiblingDependencyVersions(_siblingVersions) {
     return false;
   }
-  async syncLockfile() {
+  async syncLockfile(_mode = "optional") {
     return;
   }
+  async resolvePublishDependencies(_workspaceVersions) {
+    return new Map;
+  }
+  restorePublishDependencies(backups) {
+    for (const [filePath, content] of backups) {
+      writeFileSync3(filePath, content, "utf-8");
+    }
+  }
 }
 
 // src/ecosystem/descriptor.ts
@@ -24151,6 +24182,97 @@ class JsEcosystem extends Ecosystem {
   supportedRegistries() {
     return ["npm", "jsr"];
   }
+  async syncLockfile(mode = "optional") {
+    if (mode === "skip")
+      return;
+    const found = await this.findLockfile();
+    if (!found)
+      return;
+    const { lockfilePath, packageManager } = found;
+    const lockfileDir = path5.dirname(lockfilePath);
+    try {
+      let isYarnBerry;
+      if (packageManager === "yarn") {
+        const yarnrcPath = path5.join(lockfileDir, ".yarnrc.yml");
+        try {
+          isYarnBerry = (await stat3(yarnrcPath)).isFile();
+        } catch {
+          isYarnBerry = false;
+        }
+      }
+      const [cmd, ...args] = getInstallCommand(packageManager, isYarnBerry);
+      await exec3(cmd, args, { nodeOptions: { cwd: lockfileDir } });
+      return lockfilePath;
+    } catch (error2) {
+      if (mode === "required")
+        throw error2;
+      console.warn(`Warning: Failed to sync lockfile at ${lockfilePath}: ${error2 instanceof Error ? error2.message : error2}`);
+      return;
+    }
+  }
+  async findLockfile() {
+    let dir = this.packagePath;
+    const { root } = path5.parse(dir);
+    while (dir !== root) {
+      for (const [pm, files] of Object.entries(lockFiles)) {
+        for (const file of files) {
+          const candidate = path5.join(dir, file);
+          try {
+            if ((await stat3(candidate)).isFile()) {
+              return {
+                lockfilePath: candidate,
+                packageManager: pm
+              };
+            }
+          } catch {}
+        }
+      }
+      dir = path5.dirname(dir);
+    }
+    return;
+  }
+  async resolvePublishDependencies(workspaceVersions) {
+    const backups = new Map;
+    const manifestPath = path5.join(this.packagePath, "package.json");
+    if (!existsSync3(manifestPath))
+      return backups;
+    const original = readFileSync4(manifestPath, "utf-8");
+    const pkg = JSON.parse(original);
+    let modified = false;
+    const WORKSPACE_PREFIX = "workspace:";
+    const DEPENDENCY_FIELDS = [
+      "dependencies",
+      "devDependencies",
+      "optionalDependencies",
+      "peerDependencies"
+    ];
+    for (const field of DEPENDENCY_FIELDS) {
+      const deps = pkg[field];
+      if (!deps)
+        continue;
+      for (const [depName, spec] of Object.entries(deps)) {
+        if (!spec.startsWith(WORKSPACE_PREFIX))
+          continue;
+        const range = spec.slice(WORKSPACE_PREFIX.length);
+        if (range === "*" || range === "^" || range === "~") {
+          const version = workspaceVersions.get(depName);
+          if (!version) {
+            throw new Error(`Cannot resolve "${spec}" for dependency "${depName}": package not found in workspace`);
+          }
+          deps[depName] = range === "*" ? version : range === "^" ? `^${version}` : `~${version}`;
+        } else {
+          deps[depName] = range;
+        }
+        modified = true;
+      }
+    }
+    if (modified) {
+      backups.set(manifestPath, original);
+      writeFileSync4(manifestPath, `${JSON.stringify(pkg, null, 2)}
+`, "utf-8");
+    }
+    return backups;
+  }
   async createDescriptor() {
     const npmReader = NpmPackageRegistry.reader;
     const jsrReader = JsrPackageRegistry.reader;
@@ -24161,7 +24283,7 @@ class JsEcosystem extends Ecosystem {
 }
 
 // src/ecosystem/rust.ts
-import { readFile as readFile4, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
+import { readFile as readFile4, stat as stat4, writeFile as writeFile2 } from "node:fs/promises";
 import path7 from "node:path";
 
 // ../../node_modules/.bun/smol-toml@1.6.0/node_modules/smol-toml/dist/error.js
@@ -25486,15 +25608,24 @@ class RustEcosystem extends Ecosystem {
     }
     return modified;
   }
-  async syncLockfile() {
+  async syncLockfile(mode = "optional") {
+    if (mode === "skip")
+      return;
     const lockfilePath = await this.findLockfile();
     if (!lockfilePath)
       return;
-    const name = await this.packageName();
-    await exec3("cargo", ["update", "--package", name], {
-      nodeOptions: { cwd: path7.dirname(lockfilePath) }
-    });
-    return lockfilePath;
+    try {
+      const name = await this.packageName();
+      await exec3("cargo", ["update", "--package", name], {
+        nodeOptions: { cwd: path7.dirname(lockfilePath) }
+      });
+      return lockfilePath;
+    } catch (error2) {
+      if (mode === "required")
+        throw error2;
+      console.warn(`Warning: Failed to sync lockfile at ${lockfilePath}: ${error2 instanceof Error ? error2.message : error2}`);
+      return;
+    }
   }
   async findLockfile() {
     let dir = this.packagePath;
@@ -25502,7 +25633,7 @@ class RustEcosystem extends Ecosystem {
     while (dir !== root) {
       const candidate = path7.join(dir, "Cargo.lock");
       try {
-        if ((await stat3(candidate)).isFile())
+        if ((await stat4(candidate)).isFile())
           return candidate;
       } catch {}
       dir = path7.dirname(dir);
@@ -25570,7 +25701,7 @@ init_error();
 init_git();
 
 // src/manifest/write-versions.ts
-async function writeVersionsForEcosystem(ecosystems, versions) {
+async function writeVersionsForEcosystem(ecosystems, versions, lockfileSync) {
   const modifiedFiles = [];
   for (const { eco, pkg } of ecosystems) {
     const version = versions.get(pkg.path);
@@ -25591,25 +25722,28 @@ async function writeVersionsForEcosystem(ecosystems, versions) {
     }
     await Promise.all(ecosystems.map(({ eco }) => eco.updateSiblingDependencyVersions(nameKeyedVersions)));
   }
+  const syncedLockfiles = new Set;
   for (const { eco } of ecosystems) {
-    const lockfilePath = await eco.syncLockfile();
-    if (lockfilePath)
+    const lockfilePath = await eco.syncLockfile(lockfileSync);
+    if (lockfilePath && !syncedLockfiles.has(lockfilePath)) {
+      syncedLockfiles.add(lockfilePath);
       modifiedFiles.push(lockfilePath);
+    }
   }
   return modifiedFiles;
 }
 
 // src/monorepo/resolve-workspace.ts
-import { existsSync as existsSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join7 } from "node:path";
 
 // src/monorepo/discover.ts
 var import_micromatch2 = __toESM(require_micromatch(), 1);
-import { readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import { lstatSync, readdirSync as readdirSync3 } from "node:fs";
 import path8 from "node:path";
 
 // src/ecosystem/infer.ts
-import { readFile as readFile5, stat as stat4 } from "node:fs/promises";
+import { readFile as readFile5, stat as stat5 } from "node:fs/promises";
 import { join as join5 } from "node:path";
 
 // src/utils/crate-graph.ts
@@ -25681,6 +25815,9 @@ function normalizeRegistryUrl(url) {
 init_exec();
 class CustomPackageRegistry extends NpmPackageRegistry {
   async npm(args, cwd) {
+    if (!this.registry) {
+      throw new Error("Custom registry URL is required for npm operations.");
+    }
     const { stdout } = await exec3("npm", args.concat("--registry", this.registry), {
       throwOnError: true,
       nodeOptions: cwd ? { cwd } : undefined
@@ -25785,7 +25922,7 @@ registryCatalog.register({
     return token.trim().length >= 32;
   },
   resolveDisplayName: async (ctx) => {
-    return ctx.packages?.filter((pkg) => pkg.registries?.includes("crates")).map((pkg) => pkg.path) ?? ["crate"];
+    return ctx.packages?.filter((pkg) => pkg.registries?.includes("crates")).map((pkg) => pkg.name) ?? ["crate"];
   },
   concurrentPublish: false,
   orderPackages: (paths) => sortCratesByDependencyOrder(paths),
@@ -25823,7 +25960,7 @@ function registerPrivateRegistry(config, ecosystemKey, catalog = registryCatalog
 var NPM_OFFICIAL = "registry.npmjs.org";
 async function fileExists(path8) {
   try {
-    const s2 = await stat4(path8);
+    const s2 = await stat5(path8);
     return s2.isFile();
   } catch {
     return false;
@@ -25837,6 +25974,12 @@ async function readJsonSafe(path8) {
     return null;
   }
 }
+function asRecord(value) {
+  return value !== null && typeof value === "object" ? value : null;
+}
+function readString(value) {
+  return typeof value === "string" ? value : undefined;
+}
 async function readFileSafe(path8) {
   try {
     return await readFile5(path8, "utf-8");
@@ -25886,8 +26029,8 @@ async function inferJsRegistries(packagePath, rootPath) {
     return [];
   }
   const packageJson = await readJsonSafe(join5(packagePath, "package.json"));
-  const packageName = packageJson?.name;
-  const publishConfigRegistry = packageJson?.publishConfig?.registry;
+  const packageName = readString(packageJson?.name);
+  const publishConfigRegistry = readString(asRecord(packageJson?.publishConfig)?.registry);
   let npmRegistryUrl = null;
   if (publishConfigRegistry) {
     npmRegistryUrl = publishConfigRegistry;
@@ -25928,7 +26071,7 @@ async function inferRegistries(packagePath, ecosystemKey, rootPath) {
 }
 
 // src/monorepo/workspace.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";
 import { join as join6 } from "node:path";
 
 // ../../node_modules/.bun/jsonc-parser@3.3.1/node_modules/jsonc-parser/lib/esm/impl/scanner.js
@@ -26740,15 +26883,15 @@ function detectWorkspace(cwd) {
   const root = cwd ?? process.cwd();
   const workspaces = [];
   const pnpmWorkspacePath = join6(root, "pnpm-workspace.yaml");
-  if (existsSync3(pnpmWorkspacePath)) {
-    const content = readFileSync4(pnpmWorkspacePath, "utf-8");
+  if (existsSync4(pnpmWorkspacePath)) {
+    const content = readFileSync5(pnpmWorkspacePath, "utf-8");
     const parsed = $parse(content);
     const packages = parsed?.packages ?? [];
     workspaces.push({ type: "pnpm", patterns: packages });
   }
   const cargoTomlPath = join6(root, "Cargo.toml");
-  if (existsSync3(cargoTomlPath)) {
-    const content = readFileSync4(cargoTomlPath, "utf-8");
+  if (existsSync4(cargoTomlPath)) {
+    const content = readFileSync5(cargoTomlPath, "utf-8");
     try {
       const parsed = parse(content);
       const workspace = parsed.workspace;
@@ -26763,8 +26906,8 @@ function detectWorkspace(cwd) {
   }
   for (const denoFile of ["deno.json", "deno.jsonc"]) {
     const denoPath = join6(root, denoFile);
-    if (existsSync3(denoPath)) {
-      const content = readFileSync4(denoPath, "utf-8");
+    if (existsSync4(denoPath)) {
+      const content = readFileSync5(denoPath, "utf-8");
       try {
         const parsed = denoFile.endsWith(".jsonc") ? parse3(content) : JSON.parse(content);
         if (Array.isArray(parsed?.workspace)) {
@@ -26777,12 +26920,12 @@ function detectWorkspace(cwd) {
   }
   if (!workspaces.some((w2) => w2.type === "pnpm")) {
     const packageJsonPath = join6(root, "package.json");
-    if (existsSync3(packageJsonPath)) {
-      const content = readFileSync4(packageJsonPath, "utf-8");
+    if (existsSync4(packageJsonPath)) {
+      const content = readFileSync5(packageJsonPath, "utf-8");
       const pkg = JSON.parse(content);
       if (pkg.workspaces) {
         const bunfigPath = join6(root, "bunfig.toml");
-        const isBun2 = existsSync3(bunfigPath);
+        const isBun2 = existsSync4(bunfigPath);
         if (Array.isArray(pkg.workspaces)) {
           workspaces.push({
             type: isBun2 ? "bun" : "npm",
@@ -26814,16 +26957,32 @@ function matchesIgnore(pkgPath, ignorePatterns) {
     return regex3.test(normalized);
   });
 }
-function resolvePatterns(cwd, patterns) {
-  const entries = readdirSync3(cwd, { recursive: true, encoding: "utf-8" });
-  const dirs = entries.filter((entry) => {
-    const fullPath = path8.join(cwd, entry);
+function readdirRecursiveNoSymlinks(dir, root) {
+  const results = [];
+  let entries;
+  try {
+    entries = readdirSync3(dir, { encoding: "utf-8" });
+  } catch {
+    return results;
+  }
+  for (const entry of entries) {
+    if (entry === "node_modules" || entry === ".git")
+      continue;
+    const fullPath = path8.join(dir, entry);
     try {
-      return statSync2(fullPath).isDirectory();
-    } catch {
-      return false;
-    }
-  });
+      const stat6 = lstatSync(fullPath);
+      if (stat6.isSymbolicLink())
+        continue;
+      if (stat6.isDirectory()) {
+        results.push(path8.relative(root, fullPath));
+        results.push(...readdirRecursiveNoSymlinks(fullPath, root));
+      }
+    } catch {}
+  }
+  return results;
+}
+function resolvePatterns(cwd, patterns) {
+  const dirs = readdirRecursiveNoSymlinks(cwd, cwd);
   const normalizedDirs = dirs.map((d3) => d3.replace(/\\/g, "/"));
   const matched = import_micromatch2.default(normalizedDirs, patterns);
   return matched.map((d3) => path8.resolve(cwd, d3));
@@ -26920,31 +27079,6 @@ async function discoverPackages(options) {
 }
 
 // src/monorepo/resolve-workspace.ts
-var WORKSPACE_PREFIX = "workspace:";
-var DEPENDENCY_FIELDS = [
-  "dependencies",
-  "devDependencies",
-  "optionalDependencies",
-  "peerDependencies"
-];
-function resolveWorkspaceProtocol(spec, version) {
-  if (!spec.startsWith(WORKSPACE_PREFIX))
-    return spec;
-  const range = spec.slice(WORKSPACE_PREFIX.length);
-  switch (range) {
-    case "*":
-      return version;
-    case "^":
-      return `^${version}`;
-    case "~":
-      return `~${version}`;
-    default:
-      return range;
-  }
-}
-function isDynamicWorkspaceSpec(range) {
-  return range === "*" || range === "^" || range === "~";
-}
 function collectWorkspaceVersions(cwd) {
   const versions = new Map;
   const workspaces = detectWorkspace(cwd);
@@ -26956,10 +27090,10 @@ function collectWorkspaceVersions(cwd) {
     const dirs = resolvePatterns(cwd, workspace.patterns);
     for (const dir of dirs) {
       const pkgJsonPath = join7(dir, "package.json");
-      if (!existsSync4(pkgJsonPath))
+      if (!existsSync5(pkgJsonPath))
         continue;
       try {
-        const content = readFileSync5(pkgJsonPath, "utf-8");
+        const content = readFileSync6(pkgJsonPath, "utf-8");
         const pkg = JSON.parse(content);
         if (typeof pkg.name === "string" && pkg.name && typeof pkg.version === "string" && pkg.version) {
           versions.set(pkg.name, pkg.version);
@@ -26969,44 +27103,9 @@ function collectWorkspaceVersions(cwd) {
   }
   return versions;
 }
-function resolveWorkspaceProtocolsInManifests(packagePaths, workspaceVersions) {
-  const backups = new Map;
-  for (const pkgPath of packagePaths) {
-    const manifestPath = join7(pkgPath, "package.json");
-    const original = readFileSync5(manifestPath, "utf-8");
-    const pkg = JSON.parse(original);
-    let modified = false;
-    for (const field of DEPENDENCY_FIELDS) {
-      const deps = pkg[field];
-      if (!deps)
-        continue;
-      for (const [depName, spec] of Object.entries(deps)) {
-        if (!spec.startsWith(WORKSPACE_PREFIX))
-          continue;
-        const range = spec.slice(WORKSPACE_PREFIX.length);
-        if (isDynamicWorkspaceSpec(range)) {
-          const version = workspaceVersions.get(depName);
-          if (!version) {
-            throw new Error(`Cannot resolve "${spec}" for dependency "${depName}": package not found in workspace`);
-          }
-          deps[depName] = resolveWorkspaceProtocol(spec, version);
-        } else {
-          deps[depName] = range;
-        }
-        modified = true;
-      }
-    }
-    if (modified) {
-      backups.set(manifestPath, original);
-      writeFileSync3(manifestPath, `${JSON.stringify(pkg, null, 2)}
-`, "utf-8");
-    }
-  }
-  return backups;
-}
 function restoreManifests(backups) {
   for (const [filePath, content] of backups) {
-    writeFileSync3(filePath, content, "utf-8");
+    writeFileSync5(filePath, content, "utf-8");
   }
 }
 
@@ -27310,7 +27409,8 @@ function createContext(config, options, cwd) {
     tag: options.tag ?? "latest",
     promptEnabled: false,
     cleanWorkingTree: false,
-    pluginRunner: new PluginRunner([])
+    pluginRunner: new PluginRunner([]),
+    tokenRetryPromises: {}
   };
   const ctx = Object.defineProperties(Object.create(null), {
     config: {
@@ -27397,9 +27497,10 @@ async function withTokenRetry(registryKey, ctx, task, action) {
     if (!descriptor)
       throw error2;
     const config = descriptor.tokenConfig;
-    const retryKey = `_tokenRetry_${registryKey}`;
-    if (!ctx.runtime[retryKey]) {
-      ctx.runtime[retryKey] = (async () => {
+    const retryPromises = ctx.runtime.tokenRetryPromises ?? {};
+    ctx.runtime.tokenRetryPromises = retryPromises;
+    if (!retryPromises[registryKey]) {
+      retryPromises[registryKey] = (async () => {
         task.output = `Auth failed. Re-enter ${config.promptLabel}`;
         const newToken = await task.prompt(ListrEnquirerPromptAdapter).run({
           type: "password",
@@ -27410,7 +27511,7 @@ async function withTokenRetry(registryKey, ctx, task, action) {
         return newToken;
       })();
     }
-    await ctx.runtime[retryKey];
+    await retryPromises[registryKey];
     await action();
   }
 }
@@ -27467,7 +27568,11 @@ async function findUnpublishedSiblingDeps(packagePath, siblingPaths) {
   }));
   const siblingDeps = deps.filter((d3) => siblingNameToPath.has(d3));
   const results = await Promise.all(siblingDeps.map(async (name) => {
-    const registry = await cratesPackageRegistry(siblingNameToPath.get(name));
+    const siblingPath = siblingNameToPath.get(name);
+    if (!siblingPath) {
+      throw new Error(`Missing sibling crate path for dependency: ${name}`);
+    }
+    const registry = await cratesPackageRegistry(siblingPath);
     const published = await registry.isPublished();
     return published ? null : name;
   }));
@@ -27518,7 +27623,7 @@ function createCratesDryRunPublishTask(packagePath, siblingPaths) {
 init_error();
 init_git();
 var import_semver2 = __toESM(require_semver2(), 1);
-import { readFileSync as readFileSync6 } from "node:fs";
+import { readFileSync as readFileSync7 } from "node:fs";
 var { prerelease } = import_semver2.default;
 
 class GitHubReleaseError extends AbstractError {
@@ -27587,7 +27692,7 @@ async function createGitHubRelease(_ctx, options) {
   const uploadUrl = release.upload_url.replace(/\{[^}]*\}/, "");
   const releaseAssets = [];
   for (const asset of options.assets) {
-    const archiveContent = readFileSync6(asset.filePath);
+    const archiveContent = readFileSync7(asset.filePath);
     const uploadResponse = await fetch(`${uploadUrl}?name=${encodeURIComponent(asset.name)}`, {
       method: "POST",
       headers: {
@@ -27836,7 +27941,7 @@ init_error();
 init_exec();
 
 // src/utils/gh-secrets-sync-state.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
 import path9 from "node:path";
 var SYNC_HASH_FILENAME = "gh-secrets-sync-hash";
 function syncHashFilePath() {
@@ -27844,14 +27949,14 @@ function syncHashFilePath() {
 }
 function readGhSecretsSyncHash() {
   try {
-    const value = readFileSync7(syncHashFilePath(), "utf8").trim();
+    const value = readFileSync8(syncHashFilePath(), "utf8").trim();
     return value || null;
   } catch {
     return null;
   }
 }
 function writeGhSecretsSyncHash(hash) {
-  writeFileSync4(syncHashFilePath(), `${hash}
+  writeFileSync6(syncHashFilePath(), `${hash}
 `, "utf8");
 }
 
@@ -28239,16 +28344,30 @@ function isReleaseExcluded(config, pkgPath) {
 function getPackageName(ctx, packagePath) {
   return ctx.config.packages.find((p2) => p2.path === packagePath)?.name ?? packagePath;
 }
+function requirePackageEcosystem(pkg) {
+  if (!pkg.ecosystem) {
+    throw new Error(`Package ${pkg.path} is missing an ecosystem.`);
+  }
+  return pkg.ecosystem;
+}
+function requireVersionPlan(ctx) {
+  const { versionPlan } = ctx.runtime;
+  if (!versionPlan) {
+    throw new Error("Version plan is required before running release tasks.");
+  }
+  return versionPlan;
+}
 async function writeVersions(ctx, versions) {
   const ecosystems = ctx.config.packages.map((pkg) => {
     const absPath = path10.resolve(ctx.cwd ?? process17.cwd(), pkg.path);
-    const descriptor = ecosystemCatalog.get(pkg.ecosystem);
+    const ecosystem = requirePackageEcosystem(pkg);
+    const descriptor = ecosystemCatalog.get(ecosystem);
     if (!descriptor)
-      throw new Error(`Unknown ecosystem: ${pkg.ecosystem}`);
+      throw new Error(`Unknown ecosystem: ${ecosystem}`);
     const eco = new descriptor.ecosystemClass(absPath);
     return { eco, pkg };
   });
-  const lockfileChanges = await writeVersionsForEcosystem(ecosystems, versions);
+  const lockfileChanges = await writeVersionsForEcosystem(ecosystems, versions, ctx.config.lockfileSync);
   const manifestFiles = ecosystems.flatMap(({ eco }) => eco.manifestFiles().map((f2) => path10.resolve(eco.packagePath, f2)));
   return [...manifestFiles, ...lockfileChanges];
 }
@@ -28263,17 +28382,38 @@ function createPublishTaskForPath(registryKey, packagePath) {
     return { title: `Publish to ${registryKey}`, task: async () => {} };
   return factory(packagePath);
 }
-function resolveWorkspaceProtocols(ctx) {
+async function resolveWorkspaceProtocols(ctx) {
   if (!ctx.cwd)
     return;
   const workspaceVersions = collectWorkspaceVersions(ctx.cwd);
   if (workspaceVersions.size === 0)
     return;
-  const packagePaths = ctx.config.packages.map((pkg) => path10.resolve(ctx.cwd, pkg.path));
-  const backups = resolveWorkspaceProtocolsInManifests(packagePaths, workspaceVersions);
-  if (backups.size > 0) {
-    ctx.runtime.workspaceBackups = backups;
-    addRollback(async () => restoreManifests(backups), ctx);
+  const allBackups = new Map;
+  for (const pkg of ctx.config.packages) {
+    const absPath = path10.resolve(ctx.cwd, pkg.path);
+    const ecosystem = requirePackageEcosystem(pkg);
+    const descriptor = ecosystemCatalog.get(ecosystem);
+    if (!descriptor)
+      continue;
+    const eco = new descriptor.ecosystemClass(absPath);
+    const backups = await eco.resolvePublishDependencies(workspaceVersions);
+    for (const [k3, v2] of backups) {
+      allBackups.set(k3, v2);
+    }
+  }
+  if (allBackups.size > 0) {
+    ctx.runtime.workspaceBackups = allBackups;
+    addRollback(async () => {
+      for (const pkg of ctx.config.packages) {
+        const absPath = path10.resolve(ctx.cwd, pkg.path);
+        const ecosystem = requirePackageEcosystem(pkg);
+        const descriptor = ecosystemCatalog.get(ecosystem);
+        if (!descriptor)
+          continue;
+        const eco = new descriptor.ecosystemClass(absPath);
+        eco.restorePublishDependencies(allBackups);
+      }
+    }, ctx);
   }
 }
 async function applyVersionsForDryRun(ctx) {
@@ -28393,8 +28533,8 @@ ${[...plan.packages].map(([pkgPath, ver]) => `  ${getPackageName(ctx, pkgPath)}:
   }
   return "";
 }
-function shouldRenderLiveCommandOutput(ctx) {
-  return ctx.options.mode !== "ci" && !m && Boolean(process17.stdout.isTTY);
+function shouldRenderLiveCommandOutput(_ctx) {
+  return !m && Boolean(process17.stdout.isTTY);
 }
 function normalizeLiveCommandOutputLine(line) {
   const normalized = stripVTControlCharacters2(line).trimEnd();
@@ -28475,7 +28615,7 @@ async function run(ctx) {
       await requiredConditionsCheckTask({
         skip: ctx.options.skipConditionsCheck
       }).run(ctx);
-      const pipelineListrOptions2 = mode === "ci" || m ? createCiListrOptions() : undefined;
+      const pipelineListrOptions2 = m ? createCiListrOptions() : undefined;
       await createListr([
         {
           skip: ctx.options.skipTests,
@@ -28557,7 +28697,7 @@ async function run(ctx) {
           skip: () => dryRun,
           task: async (ctx2, task) => {
             const git = new Git;
-            const snapshotPlan = ctx2.runtime.versionPlan;
+            const snapshotPlan = requireVersionPlan(ctx2);
             const tagName = `v${snapshotPlan.mode !== "independent" ? snapshotPlan.version : ""}`;
             task.output = `Creating tag ${tagName}...`;
             const headCommit = await git.latestCommit();
@@ -28624,7 +28764,7 @@ async function run(ctx) {
         skip: ctx.options.skipConditionsCheck
       }).run(ctx);
     }
-    const pipelineListrOptions = mode === "ci" || m ? createCiListrOptions() : undefined;
+    const pipelineListrOptions = m ? createCiListrOptions() : undefined;
     await createListr([
       {
         skip: !hasPrepare || ctx.options.skipTests,
@@ -28690,7 +28830,7 @@ async function run(ctx) {
           const git = new Git;
           let tagCreated = false;
           let commited = false;
-          const plan = ctx2.runtime.versionPlan;
+          const plan = requireVersionPlan(ctx2);
           task.output = formatVersionPlan(ctx2);
           addRollback(async () => {
             if (tagCreated) {
@@ -28914,7 +29054,7 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         task: async (ctx2, parentTask) => {
           parentTask.output = "Running plugin beforePublish hooks...";
           await ctx2.runtime.pluginRunner.runHook("beforePublish", ctx2);
-          resolveWorkspaceProtocols(ctx2);
+          await resolveWorkspaceProtocols(ctx2);
           const publishTasks = await collectPublishTasks(ctx2);
           parentTask.title = `Publishing (${countPublishTargets(ctx2)} targets)`;
           parentTask.output = formatRegistryGroupSummary("Concurrent publish tasks", ctx2, true);
@@ -28927,7 +29067,11 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         skip: (ctx2) => !hasPublish || !!ctx2.options.skipPublish || dryRun || !ctx2.runtime.workspaceBackups?.size,
         title: "Restoring workspace protocols",
         task: (ctx2) => {
-          restoreManifests(ctx2.runtime.workspaceBackups);
+          const backups = ctx2.runtime.workspaceBackups;
+          if (!backups) {
+            throw new Error("Workspace backups are required for restore.");
+          }
+          restoreManifests(backups);
           ctx2.runtime.workspaceBackups = undefined;
         }
       },
@@ -28944,7 +29088,7 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         skip: !dryRun && !(mode === "ci" && hasPrepare),
         title: "Validating publish (dry-run)",
         task: async (ctx2, parentTask) => {
-          resolveWorkspaceProtocols(ctx2);
+          await resolveWorkspaceProtocols(ctx2);
           await applyVersionsForDryRun(ctx2);
           const dryRunTasks = await collectDryRunPublishTasks(ctx2);
           parentTask.title = `Validating publish (${countRegistryTargets(collectEcosystemRegistryGroups(ctx2.config))} targets)`;
@@ -28958,7 +29102,11 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         skip: (ctx2) => !dryRun && !(mode === "ci" && hasPrepare) || !ctx2.runtime.workspaceBackups?.size,
         title: "Restoring workspace protocols",
         task: (ctx2) => {
-          restoreManifests(ctx2.runtime.workspaceBackups);
+          const backups = ctx2.runtime.workspaceBackups;
+          if (!backups) {
+            throw new Error("Workspace backups are required for restore.");
+          }
+          restoreManifests(backups);
           ctx2.runtime.workspaceBackups = undefined;
         }
       },
@@ -28966,7 +29114,11 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         skip: (ctx2) => !dryRun || !ctx2.runtime.dryRunVersionBackup?.size,
         title: "Restoring original versions (dry-run)",
         task: async (ctx2) => {
-          await writeVersions(ctx2, ctx2.runtime.dryRunVersionBackup);
+          const backupVersions = ctx2.runtime.dryRunVersionBackup;
+          if (!backupVersions) {
+            throw new Error("Dry-run version backup is required for restore.");
+          }
+          await writeVersions(ctx2, backupVersions);
           ctx2.runtime.dryRunVersionBackup = undefined;
         }
       },
@@ -28993,7 +29145,7 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
         skip: (ctx2) => !hasPublish || !!ctx2.options.skipReleaseDraft || dryRun,
         title: "Creating GitHub Release",
         task: async (ctx2, task) => {
-          const plan = ctx2.runtime.versionPlan;
+          const plan = requireVersionPlan(ctx2);
           const tokenResult = resolveGitHubToken();
           let hasToken = !!tokenResult;
           if (tokenResult) {
@@ -29039,8 +29191,8 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
                 const pkgConfig = ctx2.config.packages.find((p2) => p2.path === pkgPath);
                 if (pkgConfig) {
                   const changelogPath = join9(process17.cwd(), pkgConfig.path, "CHANGELOG.md");
-                  if (existsSync5(changelogPath)) {
-                    const section = parseChangelogSection(readFileSync8(changelogPath, "utf-8"), pkgVersion);
+                  if (existsSync6(changelogPath)) {
+                    const section = parseChangelogSection(readFileSync9(changelogPath, "utf-8"), pkgVersion);
                     if (section)
                       changelogBody = section;
                   }
@@ -29086,8 +29238,8 @@ ${[...plan.packages].map(([pkgPath, ver]) => `- ${getPackageName(ctx2, pkgPath)}
                   if (!pkgConfig)
                     continue;
                   const changelogPath = join9(process17.cwd(), pkgConfig.path, "CHANGELOG.md");
-                  if (existsSync5(changelogPath)) {
-                    const section = parseChangelogSection(readFileSync8(changelogPath, "utf-8"), pkgVersion);
+                  if (existsSync6(changelogPath)) {
+                    const section = parseChangelogSection(readFileSync9(changelogPath, "utf-8"), pkgVersion);
                     if (section) {
                       sections.push(`## ${pkgName} v${pkgVersion}
 
@@ -29104,8 +29256,8 @@ ${section}`);
                 }
               } else {
                 const changelogPath = join9(process17.cwd(), "CHANGELOG.md");
-                if (existsSync5(changelogPath)) {
-                  const section = parseChangelogSection(readFileSync8(changelogPath, "utf-8"), version);
+                if (existsSync6(changelogPath)) {
+                  const section = parseChangelogSection(readFileSync9(changelogPath, "utf-8"), version);
                   if (section)
                     changelogBody = section;
                 }
@@ -29245,13 +29397,13 @@ function maxBump(a3, b2) {
   return BUMP_ORDER[a3] >= BUMP_ORDER[b2] ? a3 : b2;
 }
 // src/changeset/migrate.ts
-import { copyFileSync, existsSync as existsSync6, mkdirSync as mkdirSync3, readdirSync as readdirSync4 } from "node:fs";
+import { copyFileSync, existsSync as existsSync7, mkdirSync as mkdirSync3, readdirSync as readdirSync4 } from "node:fs";
 import path11 from "node:path";
 import process18 from "node:process";
 var SKIPPED_FILES = new Set(["config.json", "README.md"]);
 function migrateFromChangesets(cwd = process18.cwd()) {
   const changesetDir = path11.join(cwd, ".changeset");
-  if (!existsSync6(changesetDir)) {
+  if (!existsSync7(changesetDir)) {
     return {
       success: false,
       error: ".changeset/ directory not found",
@@ -29352,7 +29504,7 @@ function calculateVersionBumps(currentVersions, cwd = process20.cwd(), resolveKe
   return result;
 }
 // src/changeset/writer.ts
-import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync7 } from "node:fs";
 import path12 from "node:path";
 import process21 from "node:process";
 var adjectives = [
@@ -29455,7 +29607,7 @@ function writeChangeset(releases, summary, cwd = process21.cwd()) {
   const fileName = `${id}.md`;
   const filePath = path12.join(changesetsDir, fileName);
   const content = generateChangesetContent(releases, summary);
-  writeFileSync5(filePath, content, "utf-8");
+  writeFileSync7(filePath, content, "utf-8");
   return filePath;
 }
 // src/config/defaults.ts
@@ -29481,7 +29633,8 @@ var defaultConfig = {
   saveToken: true,
   releaseDraft: true,
   releaseNotes: true,
-  rollbackStrategy: "individual"
+  rollbackStrategy: "individual",
+  lockfileSync: "optional"
 };
 async function resolveConfig(config, cwd) {
   const resolvedCwd = cwd ?? process.cwd();
@@ -29545,7 +29698,7 @@ import {
   mkdtemp,
   readFile as readFile7,
   rm,
-  stat as stat5,
+  stat as stat6,
   writeFile as writeFile3
 } from "node:fs/promises";
 import { createRequire as createRequire2 } from "node:module";
@@ -29605,7 +29758,7 @@ async function findConfigFile(cwd) {
   for (const file of CONFIG_FILES) {
     const filePath = path13.join(cwd, file);
     try {
-      if ((await stat5(filePath)).isFile()) {
+      if ((await stat6(filePath)).isFile()) {
         return filePath;
       }
     } catch {}
@@ -29628,7 +29781,7 @@ async function findClosestPackageManifest(filePath) {
   while (true) {
     const manifestPath = path13.join(current, "package.json");
     try {
-      if ((await stat5(manifestPath)).isFile()) {
+      if ((await stat6(manifestPath)).isFile()) {
         return manifestPath;
       }
     } catch {}
@@ -29736,7 +29889,7 @@ async function findInstalledPackagePath(startDir, dependency) {
   while (true) {
     const packageDir = path13.join(current, "node_modules", dependency);
     try {
-      if ((await stat5(packageDir)).isDirectory()) {
+      if ((await stat6(packageDir)).isDirectory()) {
         return packageDir;
       }
     } catch {}
@@ -30217,17 +30370,32 @@ function formatStageError(stage, error2) {
   const message = error2 instanceof Error ? error2.stack ?? error2.message : String(error2);
   return `[${stage}] ${message}`;
 }
-async function loadConfig(cwd = process.cwd()) {
-  const configPath = await findConfigFile(cwd);
-  if (!configPath)
+async function loadConfig(cwd = process.cwd(), configPath) {
+  let resolvedConfigPath;
+  if (configPath) {
+    resolvedConfigPath = path13.resolve(cwd, configPath);
+    try {
+      if (!(await stat6(resolvedConfigPath)).isFile()) {
+        throw new Error(`Config path is not a file: ${resolvedConfigPath}`);
+      }
+    } catch (e3) {
+      if (e3.code === "ENOENT") {
+        throw new Error(`Config file not found: ${resolvedConfigPath}`);
+      }
+      throw e3;
+    }
+  } else {
+    resolvedConfigPath = await findConfigFile(cwd);
+  }
+  if (!resolvedConfigPath)
     return null;
   const errors2 = [];
   try {
-    return await importConfigModule(configPath);
+    return await importConfigModule(resolvedConfigPath);
   } catch (error2) {
     errors2.push(formatStageError("native import", error2));
   }
-  const output = await buildConfig(configPath);
+  const output = await buildConfig(resolvedConfigPath);
   if (!output.success) {
     errors2.push(formatStageError("bundled build", output.logs.map((log) => log.message).join(`
 `)));
@@ -30246,11 +30414,11 @@ ${errors2.join(`
   }
   const bundledSource = await entrypoint.text();
   try {
-    return await importBundledConfig(bundledSource, configPath, output.optionalDependencies);
+    return await importBundledConfig(bundledSource, resolvedConfigPath, output.optionalDependencies);
   } catch (error2) {
     errors2.push(formatStageError("bundled import", error2));
   }
-  const vmOutput = await buildConfigWithFormat(configPath, "cjs");
+  const vmOutput = await buildConfigWithFormat(resolvedConfigPath, "cjs");
   if (!vmOutput.success) {
     errors2.push(formatStageError("bundled vm build", vmOutput.logs.map((log) => log.message).join(`
 `)));
@@ -30268,7 +30436,7 @@ ${errors2.join(`
 `)}`);
   }
   try {
-    return await executeBundledConfigInVm(await vmEntrypoint.text(), configPath);
+    return await executeBundledConfigInVm(await vmEntrypoint.text(), resolvedConfigPath);
   } catch (error2) {
     errors2.push(formatStageError("bundled vm", error2));
     throw new Error(`Failed to load config:
@@ -30688,6 +30856,9 @@ async function handleMultiPackage(ctx, task, packageInfos) {
       if (result === "accepted")
         return;
       if (result === "add_packages") {
+        if (!bumps) {
+          throw new Error("Changeset bumps are required for add_packages.");
+        }
         await handleAddPackages(ctx, task, sortedPackageInfos, currentVersions, graph, bumps);
         return;
       }
@@ -30711,6 +30882,7 @@ async function handleRemainingPackages(ctx, task, remainingPackages, packageInfo
   const versions = new Map([...bumps].map(([p2, b2]) => [p2, b2.newVersion]));
   const publishPaths = new Set(bumps.keys());
   const reverseDeps = buildReverseDeps(graph);
+  let lastBumpType;
   for (const pkg of remainingPackages) {
     const currentVersion = currentVersions.get(pkg.path) ?? pkg.version;
     const deps = graph.get(pkg.path) ?? [];
@@ -30723,8 +30895,9 @@ async function handleRemainingPackages(ctx, task, remainingPackages, packageInfo
     if (pkgNotes.length > 0) {
       task.output = renderPackageVersionSummary(remainingPackages, currentVersions, versions, { activePackage: pkg.path, notes: new Map([[pkg.path, pkgNotes]]) });
     }
-    const result = await promptVersion(task, currentVersion, pkg.name);
+    const result = await promptVersion(task, currentVersion, pkg.name, undefined, lastBumpType);
     versions.set(pkg.path, result.version);
+    lastBumpType = result.bumpType;
     if (result.version !== currentVersion) {
       bumpedPackages.add(pkg.path);
       publishPaths.add(pkg.path);
@@ -31031,7 +31204,7 @@ import { homedir as homedir2 } from "os";
 import { join as join10 } from "path";
 import os2 from "os";
 import path32 from "path";
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { readFile as readFile22 } from "fs/promises";
 import { dirname, join as join22, resolve as resolve2, sep } from "path";
 import { fileURLToPath } from "url";
@@ -32611,7 +32784,7 @@ function findPackageJsonSync(startDir) {
   for (;; ) {
     const candidate = join22(current, "package.json");
     try {
-      const content = readFileSync9(candidate, "utf-8");
+      const content = readFileSync10(candidate, "utf-8");
       const result = parsePackageJson(content, candidate);
       if (result)
         return result;
@@ -33014,11 +33187,11 @@ function isBun2() {
 init_ui();
 
 // src/validate/entry-points.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import path15 from "node:path";
 var SIMPLE_FIELDS = ["main", "module", "types", "typings"];
 function checkPath(filePath, cwd) {
-  return existsSync7(path15.resolve(cwd, filePath));
+  return existsSync8(path15.resolve(cwd, filePath));
 }
 function validateExports(exports, cwd, prefix = "exports") {
   const errors2 = [];