@teambit/snapping 1.0.1155 → 1.0.1156

package/dist/published-versions.d.ts

@@ -0,0 +1,74 @@
+import type { Registries, Registry } from '@teambit/pkg.entities.registry';
+/**
+ * npm publish runs as the last task of the tag build pipeline, which is *before* the export (see
+ * `bit ci merge`). when an export fails after the packages were already published, the registry is
+ * left ahead of both the remote scope and .bitmap. the next run then computes the exact same
+ * version again, and npm rejects it with "You cannot publish over the previously published
+ * versions" (E403), so the release stays stuck until someone bumps the CI config by hand with
+ * `--increment-by`.
+ *
+ * skipping the versions the registry already has lets that retry pick the next free version on its
+ * own. it's done per-component, so unlike `--increment-by` it only bumps the components that
+ * actually collide.
+ */
+export type IsVersionPublished = (packageName: string, version: string, registryUrl?: string) => Promise<boolean>;
+/**
+ * a collision means a previous run published this component and then failed, so the number of
+ * versions to skip is the number of such runs. anything beyond this is not a stuck release but a
+ * broken setup (e.g. the wrong package name), and hammering the registry won't fix it.
+ */
+export declare const MAX_PUBLISHED_VERSIONS_TO_SKIP = 20;
+export type VersionCandidate = {
+    /** component id, used to report back which versions changed */
+    id: string;
+    packageName: string;
+    version: string;
+    /**
+     * the registry `npm publish` will target for this component, when it is not the one configured
+     * for the package's scope. asking any other registry would say "free" about a taken version.
+     */
+    registryUrl?: string;
+};
+export type SkippedVersion = VersionCandidate & {
+    versionToTag: string;
+};
+/**
+ * the version right after `version`, keeping its pre-release identifier when it has one.
+ * e.g. "1.2.3" => "1.2.4", "1.2.3-dev.1" => "1.2.3-dev.2".
+ */
+export declare function getNextVersion(version: string): string;
+/**
+ * return the candidate's version, or - when it was already published to the registry - the next
+ * version that wasn't.
+ */
+export declare function findVersionNotPublished(candidate: VersionCandidate, isPublished: IsVersionPublished): Promise<string>;
+/**
+ * resolve the version to tag for each candidate.
+ *
+ * every candidate is checked, rather than a sample of them: a publish that failed midway (npm rate
+ * limiting is the usual reason) leaves only *some* of the components published, so there is no
+ * component whose answer can be taken to hold for the rest. it is cheap enough to be thorough -
+ * measured against registry.npmjs.org, 400 checks take ~11s, against a merge job that runs for
+ * close to an hour.
+ *
+ * @returns the candidates whose version changed.
+ */
+export declare function skipPublishedVersions(candidates: VersionCandidate[], isPublished: IsVersionPublished): Promise<SkippedVersion[]>;
+/**
+ * ask the registry for one specific version rather than for the package document. the packument of
+ * a component that publishes on every snap is tens of megabytes (over 20MB for some of bit's own
+ * components), while this endpoint answers the same question in a few kilobytes - or 29 bytes for
+ * the "not published" answer, which is the common one.
+ *
+ * the request goes through the same agent bit uses elsewhere, so a configured proxy, CA, client
+ * certificate and strict-ssl setting all apply. without them the request would fail, and a failure
+ * reads here as "not published" - it would quietly defeat the check rather than report anything.
+ */
+export declare function createIsVersionPublished(registries: Registries, logger: {
+    debug: (message: string) => void;
+}): IsVersionPublished;
+/**
+ * `registryUrl` is where the publish is actually going for this component, so it wins over the
+ * registry configured for the package's scope.
+ */
+export declare function getRegistryForPackage(registries: Registries, packageName: string, registryUrl?: string): Pick<Registry, 'uri' | 'authHeaderValue'>;

package/dist/published-versions.js

@@ -0,0 +1,236 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.MAX_PUBLISHED_VERSIONS_TO_SKIP = void 0;
+exports.createIsVersionPublished = createIsVersionPublished;
+exports.findVersionNotPublished = findVersionNotPublished;
+exports.getNextVersion = getNextVersion;
+exports.getRegistryForPackage = getRegistryForPackage;
+exports.skipPublishedVersions = skipPublishedVersions;
+function _semver() {
+  const data = require("semver");
+  _semver = function () {
+    return data;
+  };
+  return data;
+}
+function _lodash() {
+  const data = require("lodash");
+  _lodash = function () {
+    return data;
+  };
+  return data;
+}
+function _scope() {
+  const data = require("@teambit/scope.network");
+  _scope = function () {
+    return data;
+  };
+  return data;
+}
+function _bitError() {
+  const data = require("@teambit/bit-error");
+  _bitError = function () {
+    return data;
+  };
+  return data;
+}
+function _toolboxPromise() {
+  const data = require("@teambit/toolbox.promise.map-pool");
+  _toolboxPromise = function () {
+    return data;
+  };
+  return data;
+}
+function _harmonyModules() {
+  const data = require("@teambit/harmony.modules.concurrency");
+  _harmonyModules = function () {
+    return data;
+  };
+  return data;
+}
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == typeof i ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+/**
+ * npm publish runs as the last task of the tag build pipeline, which is *before* the export (see
+ * `bit ci merge`). when an export fails after the packages were already published, the registry is
+ * left ahead of both the remote scope and .bitmap. the next run then computes the exact same
+ * version again, and npm rejects it with "You cannot publish over the previously published
+ * versions" (E403), so the release stays stuck until someone bumps the CI config by hand with
+ * `--increment-by`.
+ *
+ * skipping the versions the registry already has lets that retry pick the next free version on its
+ * own. it's done per-component, so unlike `--increment-by` it only bumps the components that
+ * actually collide.
+ */
+
+/**
+ * a collision means a previous run published this component and then failed, so the number of
+ * versions to skip is the number of such runs. anything beyond this is not a stuck release but a
+ * broken setup (e.g. the wrong package name), and hammering the registry won't fix it.
+ */
+const MAX_PUBLISHED_VERSIONS_TO_SKIP = exports.MAX_PUBLISHED_VERSIONS_TO_SKIP = 20;
+const REGISTRY_REQUEST_TIMEOUT = 10000;
+/**
+ * the version right after `version`, keeping its pre-release identifier when it has one.
+ * e.g. "1.2.3" => "1.2.4", "1.2.3-dev.1" => "1.2.3-dev.2".
+ */
+function getNextVersion(version) {
+  const semver = new (_semver().SemVer)(version);
+  const preReleaseId = typeof semver.prerelease[0] === 'string' ? semver.prerelease[0] : undefined;
+  const releaseType = semver.prerelease.length ? 'prerelease' : 'patch';
+  return semver.inc(releaseType, preReleaseId).version;
+}
+
+/**
+ * return the candidate's version, or - when it was already published to the registry - the next
+ * version that wasn't.
+ */
+async function findVersionNotPublished(candidate, isPublished) {
+  const {
+    packageName,
+    version,
+    registryUrl
+  } = candidate;
+  let versionToTag = version;
+  for (let skipped = 0; skipped <= MAX_PUBLISHED_VERSIONS_TO_SKIP; skipped += 1) {
+    if (!(await isPublished(packageName, versionToTag, registryUrl))) return versionToTag;
+    versionToTag = getNextVersion(versionToTag);
+  }
+  throw new (_bitError().BitError)(`unable to find an unpublished version for ${packageName}, the ${MAX_PUBLISHED_VERSIONS_TO_SKIP} versions following ${version} are all in the registry.
+this is unlikely to be a stuck release. make sure the package name is correct and that the registry is not returning stale data`);
+}
+
+/**
+ * resolve the version to tag for each candidate.
+ *
+ * every candidate is checked, rather than a sample of them: a publish that failed midway (npm rate
+ * limiting is the usual reason) leaves only *some* of the components published, so there is no
+ * component whose answer can be taken to hold for the rest. it is cheap enough to be thorough -
+ * measured against registry.npmjs.org, 400 checks take ~11s, against a merge job that runs for
+ * close to an hour.
+ *
+ * @returns the candidates whose version changed.
+ */
+async function skipPublishedVersions(candidates, isPublished) {
+  const resolved = await (0, _toolboxPromise().pMapPool)(candidates, async candidate => _objectSpread(_objectSpread({}, candidate), {}, {
+    versionToTag: await findVersionNotPublished(candidate, isPublished)
+  }), {
+    concurrency: (0, _harmonyModules().concurrentFetchLimit)()
+  });
+  return resolved.filter(candidate => candidate.versionToTag !== candidate.version);
+}
+
+/**
+ * ask the registry for one specific version rather than for the package document. the packument of
+ * a component that publishes on every snap is tens of megabytes (over 20MB for some of bit's own
+ * components), while this endpoint answers the same question in a few kilobytes - or 29 bytes for
+ * the "not published" answer, which is the common one.
+ *
+ * the request goes through the same agent bit uses elsewhere, so a configured proxy, CA, client
+ * certificate and strict-ssl setting all apply. without them the request would fail, and a failure
+ * reads here as "not published" - it would quietly defeat the check rather than report anything.
+ */
+function createIsVersionPublished(registries, logger) {
+  // one fetcher per registry: building it reads bit's global config, no need to redo that per request
+  const getFetcher = (0, _lodash().memoize)(_scope().getFetcherWithAgent);
+  return async (packageName, version, registryUrl) => {
+    const registry = getRegistryForPackage(registries, packageName, registryUrl);
+    const url = `${registry.uri.replace(/\/+$/, '')}/${packageName.replace('/', '%2f')}/${encodeURIComponent(version)}`;
+    try {
+      const fetcher = await getFetcher(registry.uri);
+      const response = await fetcher(url, {
+        headers: registry.authHeaderValue ? {
+          authorization: registry.authHeaderValue
+        } : {},
+        signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT)
+      });
+      await response.text().catch(() => undefined); // release the connection, the body is not needed
+      if (response.ok) return true;
+      if (response.status !== 404) {
+        // an unreachable or unauthenticated registry can't tell us the version is taken. treated as
+        // "not published" on purpose: only a positive answer is allowed to move a version forward.
+        logger.debug(`got ${response.status} when asking ${url} whether ${version} is published`);
+      }
+      return false;
+    } catch (err) {
+      logger.debug(`failed asking ${url} whether ${version} is published: ${err.message}`);
+      return false;
+    }
+  };
+}
+
+/**
+ * `registryUrl` is where the publish is actually going for this component, so it wins over the
+ * registry configured for the package's scope.
+ */
+function getRegistryForPackage(registries, packageName, registryUrl) {
+  const scope = packageName.startsWith('@') ? packageName.slice(1).split('/')[0] : undefined;
+  const byScope = scope && registries.scopes[scope] || registries.defaultRegistry;
+  if (!registryUrl || isSameRegistry(registryUrl, byScope.uri)) return byScope;
+  return {
+    uri: registryUrl,
+    authHeaderValue: findAuthHeaderForUrl(registries, registryUrl)
+  };
+}
+
+/**
+ * npmrc keys its credentials by url prefix (`//host/path/:_authToken`), and bit's registry model
+ * carries them on the entries it knows about. so the credential for an explicit publish registry is
+ * the one from the entry that covers its url: the very same url, or the closest one above it.
+ *
+ * a url no entry covers is probed without authorization. a private version then reads as free,
+ * which leaves the publish to fail exactly as it does without this check - never a wrong version.
+ */
+function findAuthHeaderForUrl(registries, registryUrl) {
+  const target = toUrl(registryUrl);
+  if (!target) return undefined;
+  const covering = [registries.defaultRegistry, ...Object.values(registries.scopes)].flatMap(registry => {
+    const uri = registry.authHeaderValue ? toUrl(registry.uri) : undefined;
+    return uri && covers(uri, target) ? [{
+      registry,
+      uri
+    }] : [];
+  })
+  // the most specific path wins, the way npm resolves the nearest matching npmrc key
+  .sort((a, b) => b.uri.pathname.length - a.uri.pathname.length);
+  return covering[0]?.registry.authHeaderValue;
+}
+
+/**
+ * the same origin, so a credential never crosses to another host or protocol, and the target path
+ * is the registry's path or nested under it: `/npm/` covers `/npm/internal/` but not `/npm-private/`.
+ */
+function covers(registry, target) {
+  if (registry.origin !== target.origin) return false;
+  return withTrailingSlash(target.pathname).startsWith(withTrailingSlash(registry.pathname));
+}
+function withTrailingSlash(path) {
+  return path.endsWith('/') ? path : `${path}/`;
+}
+function toUrl(uri) {
+  try {
+    return new URL(uri);
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * the case of the scheme and host and a trailing slash don't make a different registry. the path
+ * does, in its exact case, like in any url.
+ */
+function isSameRegistry(a, b) {
+  const normalize = uri => {
+    const url = toUrl(uri);
+    return (url ? `${url.origin}${url.pathname}` : uri).replace(/\/+$/, '');
+  };
+  return normalize(a) === normalize(b);
+}
+
+//# sourceMappingURL=published-versions.js.map

package/dist/published-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_semver","data","require","_lodash","_scope","_bitError","_toolboxPromise","_harmonyModules","ownKeys","e","r","t","Object","keys","getOwnPropertySymbols","o","filter","getOwnPropertyDescriptor","enumerable","push","apply","_objectSpread","arguments","length","forEach","_defineProperty","getOwnPropertyDescriptors","defineProperties","defineProperty","_toPropertyKey","value","configurable","writable","i","_toPrimitive","Symbol","toPrimitive","call","TypeError","String","Number","MAX_PUBLISHED_VERSIONS_TO_SKIP","exports","REGISTRY_REQUEST_TIMEOUT","getNextVersion","version","semver","SemVer","preReleaseId","prerelease","undefined","releaseType","inc","findVersionNotPublished","candidate","isPublished","packageName","registryUrl","versionToTag","skipped","BitError","skipPublishedVersions","candidates","resolved","pMapPool","concurrency","concurrentFetchLimit","createIsVersionPublished","registries","logger","getFetcher","memoize","getFetcherWithAgent","registry","getRegistryForPackage","url","uri","replace","encodeURIComponent","fetcher","response","headers","authHeaderValue","authorization","signal","AbortSignal","timeout","text","catch","ok","status","debug","err","message","scope","startsWith","slice","split","byScope","scopes","defaultRegistry","isSameRegistry","findAuthHeaderForUrl","target","toUrl","covering","values","flatMap","covers","sort","a","b","pathname","origin","withTrailingSlash","path","endsWith","URL","normalize"],"sources":["published-versions.ts"],"sourcesContent":["import { SemVer } from 'semver';\nimport { memoize } from 'lodash';\nimport { getFetcherWithAgent } from '@teambit/scope.network';\nimport { BitError } from '@teambit/bit-error';\nimport { pMapPool } from '@teambit/toolbox.promise.map-pool';\nimport { concurrentFetchLimit } from '@teambit/harmony.modules.concurrency';\nimport type { Registries, Registry } from '@teambit/pkg.entities.registry';\n\n/**\n * npm publish runs as the last task of the tag build pipeline, which is *before* the export (see\n * `bit ci merge`). when an export fails after the packages were already published, the registry is\n * left ahead of both the remote scope and .bitmap. the next run then computes the exact same\n * version again, and npm rejects it with \"You cannot publish over the previously published\n * versions\" (E403), so the release stays stuck until someone bumps the CI config by hand with\n * `--increment-by`.\n *\n * skipping the versions the registry already has lets that retry pick the next free version on its\n * own. it's done per-component, so unlike `--increment-by` it only bumps the components that\n * actually collide.\n */\n\nexport type IsVersionPublished = (packageName: string, version: string, registryUrl?: string) => Promise<boolean>;\n\n/**\n * a collision means a previous run published this component and then failed, so the number of\n * versions to skip is the number of such runs. anything beyond this is not a stuck release but a\n * broken setup (e.g. the wrong package name), and hammering the registry won't fix it.\n */\nexport const MAX_PUBLISHED_VERSIONS_TO_SKIP = 20;\n\nconst REGISTRY_REQUEST_TIMEOUT = 10000;\n\nexport type VersionCandidate = {\n  /** component id, used to report back which versions changed */\n  id: string;\n  packageName: string;\n  version: string;\n  /**\n   * the registry `npm publish` will target for this component, when it is not the one configured\n   * for the package's scope. asking any other registry would say \"free\" about a taken version.\n   */\n  registryUrl?: string;\n};\n\nexport type SkippedVersion = VersionCandidate & { versionToTag: string };\n\n/**\n * the version right after `version`, keeping its pre-release identifier when it has one.\n * e.g. \"1.2.3\" => \"1.2.4\", \"1.2.3-dev.1\" => \"1.2.3-dev.2\".\n */\nexport function getNextVersion(version: string): string {\n  const semver = new SemVer(version);\n  const preReleaseId = typeof semver.prerelease[0] === 'string' ? semver.prerelease[0] : undefined;\n  const releaseType = semver.prerelease.length ? 'prerelease' : 'patch';\n  return semver.inc(releaseType, preReleaseId).version;\n}\n\n/**\n * return the candidate's version, or - when it was already published to the registry - the next\n * version that wasn't.\n */\nexport async function findVersionNotPublished(\n  candidate: VersionCandidate,\n  isPublished: IsVersionPublished\n): Promise<string> {\n  const { packageName, version, registryUrl } = candidate;\n  let versionToTag = version;\n  for (let skipped = 0; skipped <= MAX_PUBLISHED_VERSIONS_TO_SKIP; skipped += 1) {\n    if (!(await isPublished(packageName, versionToTag, registryUrl))) return versionToTag;\n    versionToTag = getNextVersion(versionToTag);\n  }\n  throw new BitError(\n    `unable to find an unpublished version for ${packageName}, the ${MAX_PUBLISHED_VERSIONS_TO_SKIP} versions following ${version} are all in the registry.\nthis is unlikely to be a stuck release. make sure the package name is correct and that the registry is not returning stale data`\n  );\n}\n\n/**\n * resolve the version to tag for each candidate.\n *\n * every candidate is checked, rather than a sample of them: a publish that failed midway (npm rate\n * limiting is the usual reason) leaves only *some* of the components published, so there is no\n * component whose answer can be taken to hold for the rest. it is cheap enough to be thorough -\n * measured against registry.npmjs.org, 400 checks take ~11s, against a merge job that runs for\n * close to an hour.\n *\n * @returns the candidates whose version changed.\n */\nexport async function skipPublishedVersions(\n  candidates: VersionCandidate[],\n  isPublished: IsVersionPublished\n): Promise<SkippedVersion[]> {\n  const resolved = await pMapPool(\n    candidates,\n    async (candidate: VersionCandidate): Promise<SkippedVersion> => ({\n      ...candidate,\n      versionToTag: await findVersionNotPublished(candidate, isPublished),\n    }),\n    { concurrency: concurrentFetchLimit() }\n  );\n  return resolved.filter((candidate) => candidate.versionToTag !== candidate.version);\n}\n\n/**\n * ask the registry for one specific version rather than for the package document. the packument of\n * a component that publishes on every snap is tens of megabytes (over 20MB for some of bit's own\n * components), while this endpoint answers the same question in a few kilobytes - or 29 bytes for\n * the \"not published\" answer, which is the common one.\n *\n * the request goes through the same agent bit uses elsewhere, so a configured proxy, CA, client\n * certificate and strict-ssl setting all apply. without them the request would fail, and a failure\n * reads here as \"not published\" - it would quietly defeat the check rather than report anything.\n */\nexport function createIsVersionPublished(\n  registries: Registries,\n  logger: { debug: (message: string) => void }\n): IsVersionPublished {\n  // one fetcher per registry: building it reads bit's global config, no need to redo that per request\n  const getFetcher = memoize(getFetcherWithAgent);\n\n  return async (packageName: string, version: string, registryUrl?: string) => {\n    const registry = getRegistryForPackage(registries, packageName, registryUrl);\n    const url = `${registry.uri.replace(/\\/+$/, '')}/${packageName.replace('/', '%2f')}/${encodeURIComponent(version)}`;\n    try {\n      const fetcher = await getFetcher(registry.uri);\n      const response = await fetcher(url, {\n        headers: registry.authHeaderValue ? { authorization: registry.authHeaderValue } : {},\n        signal: AbortSignal.timeout(REGISTRY_REQUEST_TIMEOUT),\n      });\n      await response.text().catch(() => undefined); // release the connection, the body is not needed\n      if (response.ok) return true;\n      if (response.status !== 404) {\n        // an unreachable or unauthenticated registry can't tell us the version is taken. treated as\n        // \"not published\" on purpose: only a positive answer is allowed to move a version forward.\n        logger.debug(`got ${response.status} when asking ${url} whether ${version} is published`);\n      }\n      return false;\n    } catch (err: any) {\n      logger.debug(`failed asking ${url} whether ${version} is published: ${err.message}`);\n      return false;\n    }\n  };\n}\n\n/**\n * `registryUrl` is where the publish is actually going for this component, so it wins over the\n * registry configured for the package's scope.\n */\nexport function getRegistryForPackage(\n  registries: Registries,\n  packageName: string,\n  registryUrl?: string\n): Pick<Registry, 'uri' | 'authHeaderValue'> {\n  const scope = packageName.startsWith('@') ? packageName.slice(1).split('/')[0] : undefined;\n  const byScope = (scope && registries.scopes[scope]) || registries.defaultRegistry;\n  if (!registryUrl || isSameRegistry(registryUrl, byScope.uri)) return byScope;\n  return { uri: registryUrl, authHeaderValue: findAuthHeaderForUrl(registries, registryUrl) };\n}\n\n/**\n * npmrc keys its credentials by url prefix (`//host/path/:_authToken`), and bit's registry model\n * carries them on the entries it knows about. so the credential for an explicit publish registry is\n * the one from the entry that covers its url: the very same url, or the closest one above it.\n *\n * a url no entry covers is probed without authorization. a private version then reads as free,\n * which leaves the publish to fail exactly as it does without this check - never a wrong version.\n */\nfunction findAuthHeaderForUrl(registries: Registries, registryUrl: string): string | undefined {\n  const target = toUrl(registryUrl);\n  if (!target) return undefined;\n  const covering = [registries.defaultRegistry, ...Object.values(registries.scopes)]\n    .flatMap((registry) => {\n      const uri = registry.authHeaderValue ? toUrl(registry.uri) : undefined;\n      return uri && covers(uri, target) ? [{ registry, uri }] : [];\n    })\n    // the most specific path wins, the way npm resolves the nearest matching npmrc key\n    .sort((a, b) => b.uri.pathname.length - a.uri.pathname.length);\n  return covering[0]?.registry.authHeaderValue;\n}\n\n/**\n * the same origin, so a credential never crosses to another host or protocol, and the target path\n * is the registry's path or nested under it: `/npm/` covers `/npm/internal/` but not `/npm-private/`.\n */\nfunction covers(registry: URL, target: URL): boolean {\n  if (registry.origin !== target.origin) return false;\n  return withTrailingSlash(target.pathname).startsWith(withTrailingSlash(registry.pathname));\n}\n\nfunction withTrailingSlash(path: string): string {\n  return path.endsWith('/') ? path : `${path}/`;\n}\n\nfunction toUrl(uri: string): URL | undefined {\n  try {\n    return new URL(uri);\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * the case of the scheme and host and a trailing slash don't make a different registry. the path\n * does, in its exact case, like in any url.\n */\nfunction isSameRegistry(a: string, b: string): boolean {\n  const normalize = (uri: string) => {\n    const url = toUrl(uri);\n    return (url ? `${url.origin}${url.pathname}` : uri).replace(/\\/+$/, '');\n  };\n  return normalize(a) === normalize(b);\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAAA,QAAA;EAAA,MAAAC,IAAA,GAAAC,OAAA;EAAAF,OAAA,YAAAA,CAAA;IAAA,OAAAC,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAE,QAAA;EAAA,MAAAF,IAAA,GAAAC,OAAA;EAAAC,OAAA,YAAAA,CAAA;IAAA,OAAAF,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAG,OAAA;EAAA,MAAAH,IAAA,GAAAC,OAAA;EAAAE,MAAA,YAAAA,CAAA;IAAA,OAAAH,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAI,UAAA;EAAA,MAAAJ,IAAA,GAAAC,OAAA;EAAAG,SAAA,YAAAA,CAAA;IAAA,OAAAJ,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAK,gBAAA;EAAA,MAAAL,IAAA,GAAAC,OAAA;EAAAI,eAAA,YAAAA,CAAA;IAAA,OAAAL,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAM,gBAAA;EAAA,MAAAN,IAAA,GAAAC,OAAA;EAAAK,eAAA,YAAAA,CAAA;IAAA,OAAAN,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAA4E,SAAAO,QAAAC,CAAA,EAAAC,CAAA,QAAAC,CAAA,GAAAC,MAAA,CAAAC,IAAA,CAAAJ,CAAA,OAAAG,MAAA,CAAAE,qBAAA,QAAAC,CAAA,GAAAH,MAAA,CAAAE,qBAAA,CAAAL,CAAA,GAAAC,CAAA,KAAAK,CAAA,GAAAA,CAAA,CAAAC,MAAA,WAAAN,CAAA,WAAAE,MAAA,CAAAK,wBAAA,CAAAR,CAAA,EAAAC,CAAA,EAAAQ,UAAA,OAAAP,CAAA,CAAAQ,IAAA,CAAAC,KAAA,CAAAT,CAAA,EAAAI,CAAA,YAAAJ,CAAA;AAAA,SAAAU,cAAAZ,CAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAY,SAAA,CAAAC,MAAA,EAAAb,CAAA,UAAAC,CAAA,WAAAW,SAAA,CAAAZ,CAAA,IAAAY,SAAA,CAAAZ,CAAA,QAAAA,CAAA,OAAAF,OAAA,CAAAI,MAAA,CAAAD,CAAA,OAAAa,OAAA,WAAAd,CAAA,IAAAe,eAAA,CAAAhB,CAAA,EAAAC,CAAA,EAAAC,CAAA,CAAAD,CAAA,SAAAE,MAAA,CAAAc,yBAAA,GAAAd,MAAA,CAAAe,gBAAA,CAAAlB,CAAA,EAAAG,MAAA,CAAAc,yBAAA,CAAAf,CAAA,KAAAH,OAAA,CAAAI,MAAA,CAAAD,CAAA,GAAAa,OAAA,WAAAd,CAAA,IAAAE,MAAA,CAAAgB,cAAA,CAAAnB,CAAA,EAAAC,CAAA,EAAAE,MAAA,CAAAK,wBAAA,CAAAN,CAAA,EAAAD,CAAA,iBAAAD,CAAA;AAAA,SAAAgB,gBAAAhB,CAAA,EAAAC,CAAA,EAAAC,CAAA,YAAAD,CAAA,GAAAmB,cAAA,CAAAnB,CAAA,MAAAD,CAAA,GAAAG,MAAA,CAAAgB,cAAA,CAAAnB,CAAA,EAAAC,CAAA,IAAAoB,KAAA,EAAAnB,CAAA,EAAAO,UAAA,MAAAa,YAAA,MAAAC,QAAA,UAAAvB,CAAA,CAAAC,CAAA,IAAAC,CAAA,EAAAF,CAAA;AAAA,SAAAoB,eAAAlB,CAAA,QAAAsB,CAAA,GAAAC,YAAA,CAAAvB,CAAA,uCAAAsB,CAAA,GAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAC,aAAAvB,CAAA,EAAAD,CAAA,2BAAAC,CAAA,KAAAA,CAAA,SAAAA,CAAA,MAAAF,CAAA,GAAAE,CAAA,CAAAwB,MAAA,CAAAC,WAAA,kBAAA3B,CAAA,QAAAwB,CAAA,GAAAxB,CAAA,CAAA4B,IAAA,CAAA1B,CAAA,EAAAD,CAAA,uCAAAuB,CAAA,SAAAA,CAAA,YAAAK,SAAA,yEAAA5B,CAAA,GAAA6B,MAAA,GAAAC,MAAA,EAAA7B,CAAA;AAG5E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACO,MAAM8B,8BAA8B,GAAAC,OAAA,CAAAD,8BAAA,GAAG,EAAE;AAEhD,MAAME,wBAAwB,GAAG,KAAK;AAgBtC;AACA;AACA;AACA;AACO,SAASC,cAAcA,CAACC,OAAe,EAAU;EACtD,MAAMC,MAAM,GAAG,KAAIC,gBAAM,EAACF,OAAO,CAAC;EAClC,MAAMG,YAAY,GAAG,OAAOF,MAAM,CAACG,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAGH,MAAM,CAACG,UAAU,CAAC,CAAC,CAAC,GAAGC,SAAS;EAChG,MAAMC,WAAW,GAAGL,MAAM,CAACG,UAAU,CAAC1B,MAAM,GAAG,YAAY,GAAG,OAAO;EACrE,OAAOuB,MAAM,CAACM,GAAG,CAACD,WAAW,EAAEH,YAAY,CAAC,CAACH,OAAO;AACtD;;AAEA;AACA;AACA;AACA;AACO,eAAeQ,uBAAuBA,CAC3CC,SAA2B,EAC3BC,WAA+B,EACd;EACjB,MAAM;IAAEC,WAAW;IAAEX,OAAO;IAAEY;EAAY,CAAC,GAAGH,SAAS;EACvD,IAAII,YAAY,GAAGb,OAAO;EAC1B,KAAK,IAAIc,OAAO,GAAG,CAAC,EAAEA,OAAO,IAAIlB,8BAA8B,EAAEkB,OAAO,IAAI,CAAC,EAAE;IAC7E,IAAI,EAAE,MAAMJ,WAAW,CAACC,WAAW,EAAEE,YAAY,EAAED,WAAW,CAAC,CAAC,EAAE,OAAOC,YAAY;IACrFA,YAAY,GAAGd,cAAc,CAACc,YAAY,CAAC;EAC7C;EACA,MAAM,KAAIE,oBAAQ,EAChB,6CAA6CJ,WAAW,SAASf,8BAA8B,uBAAuBI,OAAO;AACjI,gIACE,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAegB,qBAAqBA,CACzCC,UAA8B,EAC9BP,WAA+B,EACJ;EAC3B,MAAMQ,QAAQ,GAAG,MAAM,IAAAC,0BAAQ,EAC7BF,UAAU,EACV,MAAOR,SAA2B,IAAAjC,aAAA,CAAAA,aAAA,KAC7BiC,SAAS;IACZI,YAAY,EAAE,MAAML,uBAAuB,CAACC,SAAS,EAAEC,WAAW;EAAC,EACnE,EACF;IAAEU,WAAW,EAAE,IAAAC,sCAAoB,EAAC;EAAE,CACxC,CAAC;EACD,OAAOH,QAAQ,CAAC/C,MAAM,CAAEsC,SAAS,IAAKA,SAAS,CAACI,YAAY,KAAKJ,SAAS,CAACT,OAAO,CAAC;AACrF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASsB,wBAAwBA,CACtCC,UAAsB,EACtBC,MAA4C,EACxB;EACpB;EACA,MAAMC,UAAU,GAAG,IAAAC,iBAAO,EAACC,4BAAmB,CAAC;EAE/C,OAAO,OAAOhB,WAAmB,EAAEX,OAAe,EAAEY,WAAoB,KAAK;IAC3E,MAAMgB,QAAQ,GAAGC,qBAAqB,CAACN,UAAU,EAAEZ,WAAW,EAAEC,WAAW,CAAC;IAC5E,MAAMkB,GAAG,GAAG,GAAGF,QAAQ,CAACG,GAAG,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAIrB,WAAW,CAACqB,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAIC,kBAAkB,CAACjC,OAAO,CAAC,EAAE;IACnH,IAAI;MACF,MAAMkC,OAAO,GAAG,MAAMT,UAAU,CAACG,QAAQ,CAACG,GAAG,CAAC;MAC9C,MAAMI,QAAQ,GAAG,MAAMD,OAAO,CAACJ,GAAG,EAAE;QAClCM,OAAO,EAAER,QAAQ,CAACS,eAAe,GAAG;UAAEC,aAAa,EAAEV,QAAQ,CAACS;QAAgB,CAAC,GAAG,CAAC,CAAC;QACpFE,MAAM,EAAEC,WAAW,CAACC,OAAO,CAAC3C,wBAAwB;MACtD,CAAC,CAAC;MACF,MAAMqC,QAAQ,CAACO,IAAI,CAAC,CAAC,CAACC,KAAK,CAAC,MAAMtC,SAAS,CAAC,CAAC,CAAC;MAC9C,IAAI8B,QAAQ,CAACS,EAAE,EAAE,OAAO,IAAI;MAC5B,IAAIT,QAAQ,CAACU,MAAM,KAAK,GAAG,EAAE;QAC3B;QACA;QACArB,MAAM,CAACsB,KAAK,CAAC,OAAOX,QAAQ,CAACU,MAAM,gBAAgBf,GAAG,YAAY9B,OAAO,eAAe,CAAC;MAC3F;MACA,OAAO,KAAK;IACd,CAAC,CAAC,OAAO+C,GAAQ,EAAE;MACjBvB,MAAM,CAACsB,KAAK,CAAC,iBAAiBhB,GAAG,YAAY9B,OAAO,kBAAkB+C,GAAG,CAACC,OAAO,EAAE,CAAC;MACpF,OAAO,KAAK;IACd;EACF,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACO,SAASnB,qBAAqBA,CACnCN,UAAsB,EACtBZ,WAAmB,EACnBC,WAAoB,EACuB;EAC3C,MAAMqC,KAAK,GAAGtC,WAAW,CAACuC,UAAU,CAAC,GAAG,CAAC,GAAGvC,WAAW,CAACwC,KAAK,CAAC,CAAC,CAAC,CAACC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG/C,SAAS;EAC1F,MAAMgD,OAAO,GAAIJ,KAAK,IAAI1B,UAAU,CAAC+B,MAAM,CAACL,KAAK,CAAC,IAAK1B,UAAU,CAACgC,eAAe;EACjF,IAAI,CAAC3C,WAAW,IAAI4C,cAAc,CAAC5C,WAAW,EAAEyC,OAAO,CAACtB,GAAG,CAAC,EAAE,OAAOsB,OAAO;EAC5E,OAAO;IAAEtB,GAAG,EAAEnB,WAAW;IAAEyB,eAAe,EAAEoB,oBAAoB,CAAClC,UAAU,EAAEX,WAAW;EAAE,CAAC;AAC7F;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS6C,oBAAoBA,CAAClC,UAAsB,EAAEX,WAAmB,EAAsB;EAC7F,MAAM8C,MAAM,GAAGC,KAAK,CAAC/C,WAAW,CAAC;EACjC,IAAI,CAAC8C,MAAM,EAAE,OAAOrD,SAAS;EAC7B,MAAMuD,QAAQ,GAAG,CAACrC,UAAU,CAACgC,eAAe,EAAE,GAAGxF,MAAM,CAAC8F,MAAM,CAACtC,UAAU,CAAC+B,MAAM,CAAC,CAAC,CAC/EQ,OAAO,CAAElC,QAAQ,IAAK;IACrB,MAAMG,GAAG,GAAGH,QAAQ,CAACS,eAAe,GAAGsB,KAAK,CAAC/B,QAAQ,CAACG,GAAG,CAAC,GAAG1B,SAAS;IACtE,OAAO0B,GAAG,IAAIgC,MAAM,CAAChC,GAAG,EAAE2B,MAAM,CAAC,GAAG,CAAC;MAAE9B,QAAQ;MAAEG;IAAI,CAAC,CAAC,GAAG,EAAE;EAC9D,CAAC;EACD;EAAA,CACCiC,IAAI,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKA,CAAC,CAACnC,GAAG,CAACoC,QAAQ,CAACzF,MAAM,GAAGuF,CAAC,CAAClC,GAAG,CAACoC,QAAQ,CAACzF,MAAM,CAAC;EAChE,OAAOkF,QAAQ,CAAC,CAAC,CAAC,EAAEhC,QAAQ,CAACS,eAAe;AAC9C;;AAEA;AACA;AACA;AACA;AACA,SAAS0B,MAAMA,CAACnC,QAAa,EAAE8B,MAAW,EAAW;EACnD,IAAI9B,QAAQ,CAACwC,MAAM,KAAKV,MAAM,CAACU,MAAM,EAAE,OAAO,KAAK;EACnD,OAAOC,iBAAiB,CAACX,MAAM,CAACS,QAAQ,CAAC,CAACjB,UAAU,CAACmB,iBAAiB,CAACzC,QAAQ,CAACuC,QAAQ,CAAC,CAAC;AAC5F;AAEA,SAASE,iBAAiBA,CAACC,IAAY,EAAU;EAC/C,OAAOA,IAAI,CAACC,QAAQ,CAAC,GAAG,CAAC,GAAGD,IAAI,GAAG,GAAGA,IAAI,GAAG;AAC/C;AAEA,SAASX,KAAKA,CAAC5B,GAAW,EAAmB;EAC3C,IAAI;IACF,OAAO,IAAIyC,GAAG,CAACzC,GAAG,CAAC;EACrB,CAAC,CAAC,MAAM;IACN,OAAO1B,SAAS;EAClB;AACF;;AAEA;AACA;AACA;AACA;AACA,SAASmD,cAAcA,CAACS,CAAS,EAAEC,CAAS,EAAW;EACrD,MAAMO,SAAS,GAAI1C,GAAW,IAAK;IACjC,MAAMD,GAAG,GAAG6B,KAAK,CAAC5B,GAAG,CAAC;IACtB,OAAO,CAACD,GAAG,GAAG,GAAGA,GAAG,CAACsC,MAAM,GAAGtC,GAAG,CAACqC,QAAQ,EAAE,GAAGpC,GAAG,EAAEC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;EACzE,CAAC;EACD,OAAOyC,SAAS,CAACR,CAAC,CAAC,KAAKQ,SAAS,CAACP,CAAC,CAAC;AACtC","ignoreList":[]}

package/dist/published-versions.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/published-versions.spec.js

@@ -0,0 +1,172 @@
+"use strict";
+
+function _chai() {
+  const data = require("chai");
+  _chai = function () {
+    return data;
+  };
+  return data;
+}
+function _pkgEntities() {
+  const data = require("@teambit/pkg.entities.registry");
+  _pkgEntities = function () {
+    return data;
+  };
+  return data;
+}
+function _publishedVersions() {
+  const data = require("./published-versions");
+  _publishedVersions = function () {
+    return data;
+  };
+  return data;
+}
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == typeof i ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != typeof t || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != typeof i) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function candidate(id) {
+  return {
+    id,
+    packageName: `@teambit/${id}`,
+    version: '1.0.0'
+  };
+}
+const candidatesOf = count => Array.from({
+  length: count
+}, (_, index) => candidate(`comp${index}`));
+describe('published-versions', () => {
+  describe('getNextVersion', () => {
+    it('should bump the patch of a release version', () => {
+      (0, _chai().expect)((0, _publishedVersions().getNextVersion)('1.2.3')).to.equal('1.2.4');
+    });
+    it('should keep the pre-release identifier of a pre-release version', () => {
+      (0, _chai().expect)((0, _publishedVersions().getNextVersion)('1.2.3-dev.1')).to.equal('1.2.3-dev.2');
+    });
+    it('should bump a numeric pre-release', () => {
+      (0, _chai().expect)((0, _publishedVersions().getNextVersion)('1.2.3-0')).to.equal('1.2.3-1');
+    });
+  });
+  describe('findVersionNotPublished', () => {
+    const findVersion = (version, published) => (0, _publishedVersions().findVersionNotPublished)(_objectSpread(_objectSpread({}, candidate('some-comp')), {}, {
+      version
+    }), async (_pkgName, ver) => published.includes(ver));
+    it('should return the version as is when it is not in the registry', async () => {
+      (0, _chai().expect)(await findVersion('1.2.3', ['1.2.2'])).to.equal('1.2.3');
+    });
+    it('should skip a version that is in the registry, querying each candidate once', async () => {
+      const queried = [];
+      const result = await (0, _publishedVersions().findVersionNotPublished)(_objectSpread(_objectSpread({}, candidate('some-comp')), {}, {
+        version: '1.2.3'
+      }), async (_, ver) => {
+        queried.push(ver);
+        return ver === '1.2.3';
+      });
+      (0, _chai().expect)(result).to.equal('1.2.4');
+      (0, _chai().expect)(queried).to.deep.equal(['1.2.3', '1.2.4']);
+    });
+    it('should skip multiple consecutive versions that are in the registry', async () => {
+      (0, _chai().expect)(await findVersion('1.2.3', ['1.2.3', '1.2.4', '1.2.5'])).to.equal('1.2.6');
+    });
+    it('should keep the pre-release identifier when skipping', async () => {
+      (0, _chai().expect)(await findVersion('1.2.3-dev.1', ['1.2.3-dev.1'])).to.equal('1.2.3-dev.2');
+    });
+    it('should throw when too many consecutive versions are in the registry', async () => {
+      const published = Array.from({
+        length: _publishedVersions().MAX_PUBLISHED_VERSIONS_TO_SKIP + 1
+      }, (_, index) => `1.2.${3 + index}`);
+      let error;
+      try {
+        await findVersion('1.2.3', published);
+      } catch (err) {
+        error = err;
+      }
+      (0, _chai().expect)(error?.message).to.have.string('unable to find an unpublished version');
+    });
+  });
+  describe('skipPublishedVersions', () => {
+    it('should query every candidate, so a partial publish is not missed', async () => {
+      const queried = new Set();
+      // npm rate-limited the previous run halfway through, so only one component got published
+      const skipped = await (0, _publishedVersions().skipPublishedVersions)(candidatesOf(50), async (packageName, version) => {
+        queried.add(packageName);
+        return packageName === '@teambit/comp49' && version === '1.0.0';
+      });
+      (0, _chai().expect)(queried.size).to.equal(50);
+      (0, _chai().expect)(skipped.map(({
+        id,
+        versionToTag
+      }) => [id, versionToTag])).to.deep.equal([['comp49', '1.0.1']]);
+    });
+    it('should skip every component when the whole run collided', async () => {
+      const skipped = await (0, _publishedVersions().skipPublishedVersions)(candidatesOf(50), async (_packageName, version) => version === '1.0.0');
+      (0, _chai().expect)(skipped.length).to.equal(50);
+      (0, _chai().expect)(skipped[0]).to.include({
+        id: 'comp0',
+        versionToTag: '1.0.1'
+      });
+    });
+    it('should report nothing when no version is in the registry', async () => {
+      const skipped = await (0, _publishedVersions().skipPublishedVersions)(candidatesOf(10), async () => false);
+      (0, _chai().expect)(skipped).to.deep.equal([]);
+    });
+    it('should ask the registry the component publishes to, not the scope default', async () => {
+      const asked = [];
+      const candidates = [_objectSpread(_objectSpread({}, candidate('comp0')), {}, {
+        registryUrl: 'https://my-registry.example.com'
+      }), candidate('comp1')];
+      await (0, _publishedVersions().skipPublishedVersions)(candidates, async (_packageName, _version, registryUrl) => {
+        asked.push(registryUrl);
+        return false;
+      });
+      (0, _chai().expect)(asked).to.have.members(['https://my-registry.example.com', undefined]);
+    });
+  });
+  describe('getRegistryForPackage', () => {
+    const registries = new (_pkgEntities().Registries)(new (_pkgEntities().Registry)('https://registry.npmjs.org/', true, 'Bearer default-token'), {
+      teambit: new (_pkgEntities().Registry)('https://node.bit.cloud/', true, 'Bearer bit-token'),
+      acme: new (_pkgEntities().Registry)('https://private.example.com/npm/', true, 'Bearer acme-token')
+    });
+    it('should use the registry of the package scope', () => {
+      (0, _chai().expect)((0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/some-comp').authHeaderValue).to.equal('Bearer bit-token');
+    });
+    it('should fall back to the default registry for an unmapped scope', () => {
+      (0, _chai().expect)((0, _publishedVersions().getRegistryForPackage)(registries, '@other/some-comp').authHeaderValue).to.equal('Bearer default-token');
+    });
+    it('should fall back to the default registry for an unscoped package', () => {
+      (0, _chai().expect)((0, _publishedVersions().getRegistryForPackage)(registries, 'some-comp').uri).to.equal('https://registry.npmjs.org/');
+    });
+    it('should prefer an explicit publish registry over the scope one', () => {
+      const registry = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/some-comp', 'https://private.example.com/npm/');
+      (0, _chai().expect)(registry.uri).to.equal('https://private.example.com/npm/');
+      (0, _chai().expect)(registry.authHeaderValue).to.equal('Bearer acme-token');
+    });
+    it('should reuse the credentials of a configured registry that covers the url', () => {
+      // npmrc keys credentials by url prefix, so the /npm/ entry covers /npm/internal/ too
+      const registry = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'https://private.example.com/npm/internal/');
+      (0, _chai().expect)(registry.authHeaderValue).to.equal('Bearer acme-token');
+    });
+    it('should not borrow credentials from a different host', () => {
+      const registry = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'https://elsewhere.example.com/npm/');
+      (0, _chai().expect)(registry.uri).to.equal('https://elsewhere.example.com/npm/');
+      (0, _chai().expect)(registry.authHeaderValue).to.equal(undefined);
+    });
+    it('should not borrow credentials from a sibling path that only shares a prefix', () => {
+      const registry = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'https://private.example.com/npm-private/');
+      (0, _chai().expect)(registry.authHeaderValue).to.equal(undefined);
+    });
+    it('should not send credentials over another protocol', () => {
+      const registry = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'http://private.example.com/npm/');
+      (0, _chai().expect)(registry.authHeaderValue).to.equal(undefined);
+    });
+    it('should treat a registry path as case-sensitive, unlike the host', () => {
+      (0, _chai().expect)((0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'https://PRIVATE.example.com/npm').authHeaderValue).to.equal('Bearer acme-token');
+      const otherPath = (0, _publishedVersions().getRegistryForPackage)(registries, '@teambit/x', 'https://private.example.com/NPM/');
+      (0, _chai().expect)(otherPath.uri).to.equal('https://private.example.com/NPM/');
+      (0, _chai().expect)(otherPath.authHeaderValue).to.equal(undefined);
+    });
+  });
+});
+
+//# sourceMappingURL=published-versions.spec.js.map

package/dist/published-versions.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_chai","data","require","_pkgEntities","_publishedVersions","ownKeys","e","r","t","Object","keys","getOwnPropertySymbols","o","filter","getOwnPropertyDescriptor","enumerable","push","apply","_objectSpread","arguments","length","forEach","_defineProperty","getOwnPropertyDescriptors","defineProperties","defineProperty","_toPropertyKey","value","configurable","writable","i","_toPrimitive","Symbol","toPrimitive","call","TypeError","String","Number","candidate","id","packageName","version","candidatesOf","count","Array","from","_","index","describe","it","expect","getNextVersion","to","equal","findVersion","published","findVersionNotPublished","_pkgName","ver","includes","queried","result","deep","MAX_PUBLISHED_VERSIONS_TO_SKIP","error","err","message","have","string","Set","skipped","skipPublishedVersions","add","size","map","versionToTag","_packageName","include","asked","candidates","registryUrl","_version","members","undefined","registries","Registries","Registry","teambit","acme","getRegistryForPackage","authHeaderValue","uri","registry","otherPath"],"sources":["published-versions.spec.ts"],"sourcesContent":["import { expect } from 'chai';\nimport { Registries, Registry } from '@teambit/pkg.entities.registry';\nimport type { VersionCandidate } from './published-versions';\nimport {\n  MAX_PUBLISHED_VERSIONS_TO_SKIP,\n  findVersionNotPublished,\n  getNextVersion,\n  getRegistryForPackage,\n  skipPublishedVersions,\n} from './published-versions';\n\nfunction candidate(id: string): VersionCandidate {\n  return { id, packageName: `@teambit/${id}`, version: '1.0.0' };\n}\n\nconst candidatesOf = (count: number): VersionCandidate[] =>\n  Array.from({ length: count }, (_, index) => candidate(`comp${index}`));\n\ndescribe('published-versions', () => {\n  describe('getNextVersion', () => {\n    it('should bump the patch of a release version', () => {\n      expect(getNextVersion('1.2.3')).to.equal('1.2.4');\n    });\n    it('should keep the pre-release identifier of a pre-release version', () => {\n      expect(getNextVersion('1.2.3-dev.1')).to.equal('1.2.3-dev.2');\n    });\n    it('should bump a numeric pre-release', () => {\n      expect(getNextVersion('1.2.3-0')).to.equal('1.2.3-1');\n    });\n  });\n\n  describe('findVersionNotPublished', () => {\n    const findVersion = (version: string, published: string[]) =>\n      findVersionNotPublished({ ...candidate('some-comp'), version }, async (_pkgName, ver) => published.includes(ver));\n\n    it('should return the version as is when it is not in the registry', async () => {\n      expect(await findVersion('1.2.3', ['1.2.2'])).to.equal('1.2.3');\n    });\n    it('should skip a version that is in the registry, querying each candidate once', async () => {\n      const queried: string[] = [];\n      const result = await findVersionNotPublished({ ...candidate('some-comp'), version: '1.2.3' }, async (_, ver) => {\n        queried.push(ver);\n        return ver === '1.2.3';\n      });\n      expect(result).to.equal('1.2.4');\n      expect(queried).to.deep.equal(['1.2.3', '1.2.4']);\n    });\n    it('should skip multiple consecutive versions that are in the registry', async () => {\n      expect(await findVersion('1.2.3', ['1.2.3', '1.2.4', '1.2.5'])).to.equal('1.2.6');\n    });\n    it('should keep the pre-release identifier when skipping', async () => {\n      expect(await findVersion('1.2.3-dev.1', ['1.2.3-dev.1'])).to.equal('1.2.3-dev.2');\n    });\n    it('should throw when too many consecutive versions are in the registry', async () => {\n      const published = Array.from({ length: MAX_PUBLISHED_VERSIONS_TO_SKIP + 1 }, (_, index) => `1.2.${3 + index}`);\n      let error: Error | undefined;\n      try {\n        await findVersion('1.2.3', published);\n      } catch (err: any) {\n        error = err;\n      }\n      expect(error?.message).to.have.string('unable to find an unpublished version');\n    });\n  });\n\n  describe('skipPublishedVersions', () => {\n    it('should query every candidate, so a partial publish is not missed', async () => {\n      const queried = new Set<string>();\n      // npm rate-limited the previous run halfway through, so only one component got published\n      const skipped = await skipPublishedVersions(candidatesOf(50), async (packageName, version) => {\n        queried.add(packageName);\n        return packageName === '@teambit/comp49' && version === '1.0.0';\n      });\n      expect(queried.size).to.equal(50);\n      expect(skipped.map(({ id, versionToTag }) => [id, versionToTag])).to.deep.equal([['comp49', '1.0.1']]);\n    });\n\n    it('should skip every component when the whole run collided', async () => {\n      const skipped = await skipPublishedVersions(\n        candidatesOf(50),\n        async (_packageName, version) => version === '1.0.0'\n      );\n      expect(skipped.length).to.equal(50);\n      expect(skipped[0]).to.include({ id: 'comp0', versionToTag: '1.0.1' });\n    });\n\n    it('should report nothing when no version is in the registry', async () => {\n      const skipped = await skipPublishedVersions(candidatesOf(10), async () => false);\n      expect(skipped).to.deep.equal([]);\n    });\n\n    it('should ask the registry the component publishes to, not the scope default', async () => {\n      const asked: (string | undefined)[] = [];\n      const candidates = [\n        { ...candidate('comp0'), registryUrl: 'https://my-registry.example.com' },\n        candidate('comp1'),\n      ];\n      await skipPublishedVersions(candidates, async (_packageName, _version, registryUrl) => {\n        asked.push(registryUrl);\n        return false;\n      });\n      expect(asked).to.have.members(['https://my-registry.example.com', undefined]);\n    });\n  });\n\n  describe('getRegistryForPackage', () => {\n    const registries = new Registries(new Registry('https://registry.npmjs.org/', true, 'Bearer default-token'), {\n      teambit: new Registry('https://node.bit.cloud/', true, 'Bearer bit-token'),\n      acme: new Registry('https://private.example.com/npm/', true, 'Bearer acme-token'),\n    });\n\n    it('should use the registry of the package scope', () => {\n      expect(getRegistryForPackage(registries, '@teambit/some-comp').authHeaderValue).to.equal('Bearer bit-token');\n    });\n    it('should fall back to the default registry for an unmapped scope', () => {\n      expect(getRegistryForPackage(registries, '@other/some-comp').authHeaderValue).to.equal('Bearer default-token');\n    });\n    it('should fall back to the default registry for an unscoped package', () => {\n      expect(getRegistryForPackage(registries, 'some-comp').uri).to.equal('https://registry.npmjs.org/');\n    });\n    it('should prefer an explicit publish registry over the scope one', () => {\n      const registry = getRegistryForPackage(registries, '@teambit/some-comp', 'https://private.example.com/npm/');\n      expect(registry.uri).to.equal('https://private.example.com/npm/');\n      expect(registry.authHeaderValue).to.equal('Bearer acme-token');\n    });\n    it('should reuse the credentials of a configured registry that covers the url', () => {\n      // npmrc keys credentials by url prefix, so the /npm/ entry covers /npm/internal/ too\n      const registry = getRegistryForPackage(registries, '@teambit/x', 'https://private.example.com/npm/internal/');\n      expect(registry.authHeaderValue).to.equal('Bearer acme-token');\n    });\n    it('should not borrow credentials from a different host', () => {\n      const registry = getRegistryForPackage(registries, '@teambit/x', 'https://elsewhere.example.com/npm/');\n      expect(registry.uri).to.equal('https://elsewhere.example.com/npm/');\n      expect(registry.authHeaderValue).to.equal(undefined);\n    });\n    it('should not borrow credentials from a sibling path that only shares a prefix', () => {\n      const registry = getRegistryForPackage(registries, '@teambit/x', 'https://private.example.com/npm-private/');\n      expect(registry.authHeaderValue).to.equal(undefined);\n    });\n    it('should not send credentials over another protocol', () => {\n      const registry = getRegistryForPackage(registries, '@teambit/x', 'http://private.example.com/npm/');\n      expect(registry.authHeaderValue).to.equal(undefined);\n    });\n    it('should treat a registry path as case-sensitive, unlike the host', () => {\n      expect(\n        getRegistryForPackage(registries, '@teambit/x', 'https://PRIVATE.example.com/npm').authHeaderValue\n      ).to.equal('Bearer acme-token');\n      const otherPath = getRegistryForPackage(registries, '@teambit/x', 'https://private.example.com/NPM/');\n      expect(otherPath.uri).to.equal('https://private.example.com/NPM/');\n      expect(otherPath.authHeaderValue).to.equal(undefined);\n    });\n  });\n});\n"],"mappings":";;AAAA,SAAAA,MAAA;EAAA,MAAAC,IAAA,GAAAC,OAAA;EAAAF,KAAA,YAAAA,CAAA;IAAA,OAAAC,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AACA,SAAAE,aAAA;EAAA,MAAAF,IAAA,GAAAC,OAAA;EAAAC,YAAA,YAAAA,CAAA;IAAA,OAAAF,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAEA,SAAAG,mBAAA;EAAA,MAAAH,IAAA,GAAAC,OAAA;EAAAE,kBAAA,YAAAA,CAAA;IAAA,OAAAH,IAAA;EAAA;EAAA,OAAAA,IAAA;AAAA;AAM8B,SAAAI,QAAAC,CAAA,EAAAC,CAAA,QAAAC,CAAA,GAAAC,MAAA,CAAAC,IAAA,CAAAJ,CAAA,OAAAG,MAAA,CAAAE,qBAAA,QAAAC,CAAA,GAAAH,MAAA,CAAAE,qBAAA,CAAAL,CAAA,GAAAC,CAAA,KAAAK,CAAA,GAAAA,CAAA,CAAAC,MAAA,WAAAN,CAAA,WAAAE,MAAA,CAAAK,wBAAA,CAAAR,CAAA,EAAAC,CAAA,EAAAQ,UAAA,OAAAP,CAAA,CAAAQ,IAAA,CAAAC,KAAA,CAAAT,CAAA,EAAAI,CAAA,YAAAJ,CAAA;AAAA,SAAAU,cAAAZ,CAAA,aAAAC,CAAA,MAAAA,CAAA,GAAAY,SAAA,CAAAC,MAAA,EAAAb,CAAA,UAAAC,CAAA,WAAAW,SAAA,CAAAZ,CAAA,IAAAY,SAAA,CAAAZ,CAAA,QAAAA,CAAA,OAAAF,OAAA,CAAAI,MAAA,CAAAD,CAAA,OAAAa,OAAA,WAAAd,CAAA,IAAAe,eAAA,CAAAhB,CAAA,EAAAC,CAAA,EAAAC,CAAA,CAAAD,CAAA,SAAAE,MAAA,CAAAc,yBAAA,GAAAd,MAAA,CAAAe,gBAAA,CAAAlB,CAAA,EAAAG,MAAA,CAAAc,yBAAA,CAAAf,CAAA,KAAAH,OAAA,CAAAI,MAAA,CAAAD,CAAA,GAAAa,OAAA,WAAAd,CAAA,IAAAE,MAAA,CAAAgB,cAAA,CAAAnB,CAAA,EAAAC,CAAA,EAAAE,MAAA,CAAAK,wBAAA,CAAAN,CAAA,EAAAD,CAAA,iBAAAD,CAAA;AAAA,SAAAgB,gBAAAhB,CAAA,EAAAC,CAAA,EAAAC,CAAA,YAAAD,CAAA,GAAAmB,cAAA,CAAAnB,CAAA,MAAAD,CAAA,GAAAG,MAAA,CAAAgB,cAAA,CAAAnB,CAAA,EAAAC,CAAA,IAAAoB,KAAA,EAAAnB,CAAA,EAAAO,UAAA,MAAAa,YAAA,MAAAC,QAAA,UAAAvB,CAAA,CAAAC,CAAA,IAAAC,CAAA,EAAAF,CAAA;AAAA,SAAAoB,eAAAlB,CAAA,QAAAsB,CAAA,GAAAC,YAAA,CAAAvB,CAAA,uCAAAsB,CAAA,GAAAA,CAAA,GAAAA,CAAA;AAAA,SAAAC,aAAAvB,CAAA,EAAAD,CAAA,2BAAAC,CAAA,KAAAA,CAAA,SAAAA,CAAA,MAAAF,CAAA,GAAAE,CAAA,CAAAwB,MAAA,CAAAC,WAAA,kBAAA3B,CAAA,QAAAwB,CAAA,GAAAxB,CAAA,CAAA4B,IAAA,CAAA1B,CAAA,EAAAD,CAAA,uCAAAuB,CAAA,SAAAA,CAAA,YAAAK,SAAA,yEAAA5B,CAAA,GAAA6B,MAAA,GAAAC,MAAA,EAAA7B,CAAA;AAE9B,SAAS8B,SAASA,CAACC,EAAU,EAAoB;EAC/C,OAAO;IAAEA,EAAE;IAAEC,WAAW,EAAE,YAAYD,EAAE,EAAE;IAAEE,OAAO,EAAE;EAAQ,CAAC;AAChE;AAEA,MAAMC,YAAY,GAAIC,KAAa,IACjCC,KAAK,CAACC,IAAI,CAAC;EAAEzB,MAAM,EAAEuB;AAAM,CAAC,EAAE,CAACG,CAAC,EAAEC,KAAK,KAAKT,SAAS,CAAC,OAAOS,KAAK,EAAE,CAAC,CAAC;AAExEC,QAAQ,CAAC,oBAAoB,EAAE,MAAM;EACnCA,QAAQ,CAAC,gBAAgB,EAAE,MAAM;IAC/BC,EAAE,CAAC,4CAA4C,EAAE,MAAM;MACrD,IAAAC,cAAM,EAAC,IAAAC,mCAAc,EAAC,OAAO,CAAC,CAAC,CAACC,EAAE,CAACC,KAAK,CAAC,OAAO,CAAC;IACnD,CAAC,CAAC;IACFJ,EAAE,CAAC,iEAAiE,EAAE,MAAM;MAC1E,IAAAC,cAAM,EAAC,IAAAC,mCAAc,EAAC,aAAa,CAAC,CAAC,CAACC,EAAE,CAACC,KAAK,CAAC,aAAa,CAAC;IAC/D,CAAC,CAAC;IACFJ,EAAE,CAAC,mCAAmC,EAAE,MAAM;MAC5C,IAAAC,cAAM,EAAC,IAAAC,mCAAc,EAAC,SAAS,CAAC,CAAC,CAACC,EAAE,CAACC,KAAK,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFL,QAAQ,CAAC,yBAAyB,EAAE,MAAM;IACxC,MAAMM,WAAW,GAAGA,CAACb,OAAe,EAAEc,SAAmB,KACvD,IAAAC,4CAAuB,EAAAtC,aAAA,CAAAA,aAAA,KAAMoB,SAAS,CAAC,WAAW,CAAC;MAAEG;IAAO,IAAI,OAAOgB,QAAQ,EAAEC,GAAG,KAAKH,SAAS,CAACI,QAAQ,CAACD,GAAG,CAAC,CAAC;IAEnHT,EAAE,CAAC,gEAAgE,EAAE,YAAY;MAC/E,IAAAC,cAAM,EAAC,MAAMI,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAACF,EAAE,CAACC,KAAK,CAAC,OAAO,CAAC;IACjE,CAAC,CAAC;IACFJ,EAAE,CAAC,6EAA6E,EAAE,YAAY;MAC5F,MAAMW,OAAiB,GAAG,EAAE;MAC5B,MAAMC,MAAM,GAAG,MAAM,IAAAL,4CAAuB,EAAAtC,aAAA,CAAAA,aAAA,KAAMoB,SAAS,CAAC,WAAW,CAAC;QAAEG,OAAO,EAAE;MAAO,IAAI,OAAOK,CAAC,EAAEY,GAAG,KAAK;QAC9GE,OAAO,CAAC5C,IAAI,CAAC0C,GAAG,CAAC;QACjB,OAAOA,GAAG,KAAK,OAAO;MACxB,CAAC,CAAC;MACF,IAAAR,cAAM,EAACW,MAAM,CAAC,CAACT,EAAE,CAACC,KAAK,CAAC,OAAO,CAAC;MAChC,IAAAH,cAAM,EAACU,OAAO,CAAC,CAACR,EAAE,CAACU,IAAI,CAACT,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC;IACFJ,EAAE,CAAC,oEAAoE,EAAE,YAAY;MACnF,IAAAC,cAAM,EAAC,MAAMI,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAACF,EAAE,CAACC,KAAK,CAAC,OAAO,CAAC;IACnF,CAAC,CAAC;IACFJ,EAAE,CAAC,sDAAsD,EAAE,YAAY;MACrE,IAAAC,cAAM,EAAC,MAAMI,WAAW,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAACF,EAAE,CAACC,KAAK,CAAC,aAAa,CAAC;IACnF,CAAC,CAAC;IACFJ,EAAE,CAAC,qEAAqE,EAAE,YAAY;MACpF,MAAMM,SAAS,GAAGX,KAAK,CAACC,IAAI,CAAC;QAAEzB,MAAM,EAAE2C,mDAA8B,GAAG;MAAE,CAAC,EAAE,CAACjB,CAAC,EAAEC,KAAK,KAAK,OAAO,CAAC,GAAGA,KAAK,EAAE,CAAC;MAC9G,IAAIiB,KAAwB;MAC5B,IAAI;QACF,MAAMV,WAAW,CAAC,OAAO,EAAEC,SAAS,CAAC;MACvC,CAAC,CAAC,OAAOU,GAAQ,EAAE;QACjBD,KAAK,GAAGC,GAAG;MACb;MACA,IAAAf,cAAM,EAACc,KAAK,EAAEE,OAAO,CAAC,CAACd,EAAE,CAACe,IAAI,CAACC,MAAM,CAAC,uCAAuC,CAAC;IAChF,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFpB,QAAQ,CAAC,uBAAuB,EAAE,MAAM;IACtCC,EAAE,CAAC,kEAAkE,EAAE,YAAY;MACjF,MAAMW,OAAO,GAAG,IAAIS,GAAG,CAAS,CAAC;MACjC;MACA,MAAMC,OAAO,GAAG,MAAM,IAAAC,0CAAqB,EAAC7B,YAAY,CAAC,EAAE,CAAC,EAAE,OAAOF,WAAW,EAAEC,OAAO,KAAK;QAC5FmB,OAAO,CAACY,GAAG,CAAChC,WAAW,CAAC;QACxB,OAAOA,WAAW,KAAK,iBAAiB,IAAIC,OAAO,KAAK,OAAO;MACjE,CAAC,CAAC;MACF,IAAAS,cAAM,EAACU,OAAO,CAACa,IAAI,CAAC,CAACrB,EAAE,CAACC,KAAK,CAAC,EAAE,CAAC;MACjC,IAAAH,cAAM,EAACoB,OAAO,CAACI,GAAG,CAAC,CAAC;QAAEnC,EAAE;QAAEoC;MAAa,CAAC,KAAK,CAACpC,EAAE,EAAEoC,YAAY,CAAC,CAAC,CAAC,CAACvB,EAAE,CAACU,IAAI,CAACT,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC;IAEFJ,EAAE,CAAC,yDAAyD,EAAE,YAAY;MACxE,MAAMqB,OAAO,GAAG,MAAM,IAAAC,0CAAqB,EACzC7B,YAAY,CAAC,EAAE,CAAC,EAChB,OAAOkC,YAAY,EAAEnC,OAAO,KAAKA,OAAO,KAAK,OAC/C,CAAC;MACD,IAAAS,cAAM,EAACoB,OAAO,CAAClD,MAAM,CAAC,CAACgC,EAAE,CAACC,KAAK,CAAC,EAAE,CAAC;MACnC,IAAAH,cAAM,EAACoB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAClB,EAAE,CAACyB,OAAO,CAAC;QAAEtC,EAAE,EAAE,OAAO;QAAEoC,YAAY,EAAE;MAAQ,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF1B,EAAE,CAAC,0DAA0D,EAAE,YAAY;MACzE,MAAMqB,OAAO,GAAG,MAAM,IAAAC,0CAAqB,EAAC7B,YAAY,CAAC,EAAE,CAAC,EAAE,YAAY,KAAK,CAAC;MAChF,IAAAQ,cAAM,EAACoB,OAAO,CAAC,CAAClB,EAAE,CAACU,IAAI,CAACT,KAAK,CAAC,EAAE,CAAC;IACnC,CAAC,CAAC;IAEFJ,EAAE,CAAC,2EAA2E,EAAE,YAAY;MAC1F,MAAM6B,KAA6B,GAAG,EAAE;MACxC,MAAMC,UAAU,GAAG,CAAA7D,aAAA,CAAAA,aAAA,KACZoB,SAAS,CAAC,OAAO,CAAC;QAAE0C,WAAW,EAAE;MAAiC,IACvE1C,SAAS,CAAC,OAAO,CAAC,CACnB;MACD,MAAM,IAAAiC,0CAAqB,EAACQ,UAAU,EAAE,OAAOH,YAAY,EAAEK,QAAQ,EAAED,WAAW,KAAK;QACrFF,KAAK,CAAC9D,IAAI,CAACgE,WAAW,CAAC;QACvB,OAAO,KAAK;MACd,CAAC,CAAC;MACF,IAAA9B,cAAM,EAAC4B,KAAK,CAAC,CAAC1B,EAAE,CAACe,IAAI,CAACe,OAAO,CAAC,CAAC,iCAAiC,EAAEC,SAAS,CAAC,CAAC;IAC/E,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFnC,QAAQ,CAAC,uBAAuB,EAAE,MAAM;IACtC,MAAMoC,UAAU,GAAG,KAAIC,yBAAU,EAAC,KAAIC,uBAAQ,EAAC,6BAA6B,EAAE,IAAI,EAAE,sBAAsB,CAAC,EAAE;MAC3GC,OAAO,EAAE,KAAID,uBAAQ,EAAC,yBAAyB,EAAE,IAAI,EAAE,kBAAkB,CAAC;MAC1EE,IAAI,EAAE,KAAIF,uBAAQ,EAAC,kCAAkC,EAAE,IAAI,EAAE,mBAAmB;IAClF,CAAC,CAAC;IAEFrC,EAAE,CAAC,8CAA8C,EAAE,MAAM;MACvD,IAAAC,cAAM,EAAC,IAAAuC,0CAAqB,EAACL,UAAU,EAAE,oBAAoB,CAAC,CAACM,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC,kBAAkB,CAAC;IAC9G,CAAC,CAAC;IACFJ,EAAE,CAAC,gEAAgE,EAAE,MAAM;MACzE,IAAAC,cAAM,EAAC,IAAAuC,0CAAqB,EAACL,UAAU,EAAE,kBAAkB,CAAC,CAACM,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC,sBAAsB,CAAC;IAChH,CAAC,CAAC;IACFJ,EAAE,CAAC,kEAAkE,EAAE,MAAM;MAC3E,IAAAC,cAAM,EAAC,IAAAuC,0CAAqB,EAACL,UAAU,EAAE,WAAW,CAAC,CAACO,GAAG,CAAC,CAACvC,EAAE,CAACC,KAAK,CAAC,6BAA6B,CAAC;IACpG,CAAC,CAAC;IACFJ,EAAE,CAAC,+DAA+D,EAAE,MAAM;MACxE,MAAM2C,QAAQ,GAAG,IAAAH,0CAAqB,EAACL,UAAU,EAAE,oBAAoB,EAAE,kCAAkC,CAAC;MAC5G,IAAAlC,cAAM,EAAC0C,QAAQ,CAACD,GAAG,CAAC,CAACvC,EAAE,CAACC,KAAK,CAAC,kCAAkC,CAAC;MACjE,IAAAH,cAAM,EAAC0C,QAAQ,CAACF,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC,mBAAmB,CAAC;IAChE,CAAC,CAAC;IACFJ,EAAE,CAAC,2EAA2E,EAAE,MAAM;MACpF;MACA,MAAM2C,QAAQ,GAAG,IAAAH,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,2CAA2C,CAAC;MAC7G,IAAAlC,cAAM,EAAC0C,QAAQ,CAACF,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC,mBAAmB,CAAC;IAChE,CAAC,CAAC;IACFJ,EAAE,CAAC,qDAAqD,EAAE,MAAM;MAC9D,MAAM2C,QAAQ,GAAG,IAAAH,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,oCAAoC,CAAC;MACtG,IAAAlC,cAAM,EAAC0C,QAAQ,CAACD,GAAG,CAAC,CAACvC,EAAE,CAACC,KAAK,CAAC,oCAAoC,CAAC;MACnE,IAAAH,cAAM,EAAC0C,QAAQ,CAACF,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC8B,SAAS,CAAC;IACtD,CAAC,CAAC;IACFlC,EAAE,CAAC,6EAA6E,EAAE,MAAM;MACtF,MAAM2C,QAAQ,GAAG,IAAAH,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,0CAA0C,CAAC;MAC5G,IAAAlC,cAAM,EAAC0C,QAAQ,CAACF,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC8B,SAAS,CAAC;IACtD,CAAC,CAAC;IACFlC,EAAE,CAAC,mDAAmD,EAAE,MAAM;MAC5D,MAAM2C,QAAQ,GAAG,IAAAH,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,iCAAiC,CAAC;MACnG,IAAAlC,cAAM,EAAC0C,QAAQ,CAACF,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC8B,SAAS,CAAC;IACtD,CAAC,CAAC;IACFlC,EAAE,CAAC,iEAAiE,EAAE,MAAM;MAC1E,IAAAC,cAAM,EACJ,IAAAuC,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,iCAAiC,CAAC,CAACM,eACrF,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC,mBAAmB,CAAC;MAC/B,MAAMwC,SAAS,GAAG,IAAAJ,0CAAqB,EAACL,UAAU,EAAE,YAAY,EAAE,kCAAkC,CAAC;MACrG,IAAAlC,cAAM,EAAC2C,SAAS,CAACF,GAAG,CAAC,CAACvC,EAAE,CAACC,KAAK,CAAC,kCAAkC,CAAC;MAClE,IAAAH,cAAM,EAAC2C,SAAS,CAACH,eAAe,CAAC,CAACtC,EAAE,CAACC,KAAK,CAAC8B,SAAS,CAAC;IACvD,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/dist/snapping.main.runtime.d.ts

@@ -113,7 +113,7 @@ export declare class SnappingMain {
      * with a valid semver to that version.
      * tag can be done only on main, not on a lane.
      */
-    tag({ ids, message, version, editor, versionsFile, snapped, unmerged, releaseType, autoTagReleaseType, preReleaseId, ignoreIssues, ignoreNewestVersion, skipTests, skipTasks, skipAutoTag, build, unmodified, soft, persist, ignoreBuildErrors, rebuildDepsGraph, noLockDeps, incrementBy, disableTagAndSnapPipelines, failFast, detachHead, overrideHead, loose, }: {
+    tag({ ids, message, version, editor, versionsFile, snapped, unmerged, releaseType, autoTagReleaseType, preReleaseId, ignoreIssues, ignoreNewestVersion, skipTests, skipTasks, skipAutoTag, build, unmodified, soft, persist, ignoreBuildErrors, rebuildDepsGraph, noLockDeps, incrementBy, skipPublishedVersions, disableTagAndSnapPipelines, failFast, detachHead, overrideHead, loose, }: {
         ids?: string[];
         all?: boolean | string;
         snapped?: boolean;

package/dist/snapping.main.runtime.js

@@ -376,6 +376,7 @@ class SnappingMain {
     rebuildDepsGraph,
     noLockDeps = false,
     incrementBy = 1,
+    skipPublishedVersions = false,
     disableTagAndSnapPipelines = false,
     failFast = false,
     detachHead,
@@ -426,6 +427,7 @@ class SnappingMain {
       rebuildDepsGraph,
       noLockDeps,
       incrementBy,
+      skipPublishedVersions,
       packageManagerConfigRootDir: this.workspace.path,
       exitOnFirstFailedTask: failFast,
       detachHead,