@varlock/bumpy 1.9.0 → 1.10.0

package/dist/{publish-pipeline-BGyQsVyw.mjs → publish-pipeline-BRnqVylg.mjs}

@@ -1,9 +1,9 @@
 import { n as log, t as colorize } from "./logger-BgksGFuf.mjs";
 import { a as readJson, u as updateJsonNestedField } from "./fs-CBXKZhoU.mjs";
 import { r as resolveCatalogDep } from "./package-manager-BQPwXwu5.mjs";
-import { i as stripProtocol } from "./release-plan-Ck_DlgcK.mjs";
+import { i as stripProtocol } from "./release-plan-mK7iGeGq.mjs";
 import { i as runAsync, o as sq, r as runArgsAsync, s as tryRunArgs } from "./shell-C8KgKnMQ.mjs";
-import { t as createTag, u as tagExists } from "./git-CpJqzpp-.mjs";
+import { l as tagExists, t as createTag } from "./git-JGLQtk-M.mjs";
 import { resolve } from "node:path";
 import { unlink } from "node:fs/promises";
 import { appendFileSync, existsSync, readFileSync, writeFileSync } from "node:fs";
@@ -28,6 +28,26 @@ const OIDC_NPM_UPGRADE_HINTS = {
 	gitlab: "Use a Node.js image with npm >= 11.5.1 or run `npm install -g npm@latest`",
 	circleci: "Use a Node.js image with npm >= 11.5.1 or run `sudo npm install -g npm@latest`"
 };
+/** Compare semver triples: returns true if version >= minimum */
+function npmVersionAtLeast(version, minimum) {
+	const [major, minor, patch] = version.split(".").map(Number);
+	const [minMajor, minMinor, minPatch] = minimum;
+	if (major > minMajor) return true;
+	if (major < minMajor) return false;
+	if (minor > minMinor) return true;
+	if (minor < minMinor) return false;
+	return patch >= minPatch;
+}
+const MIN_NPM_OIDC = [
+	11,
+	5,
+	1
+];
+const MIN_NPM_STAGED = [
+	11,
+	15,
+	0
+];
 /**
 * Set up npm authentication for publishing.
 *
@@ -50,13 +70,10 @@ function setupNpmAuth(rootDir, publishManager) {
 	const oidcProvider = detectOidcProvider();
 	if (oidcProvider) {
 		const npmVersion = tryRunArgs(["npm", "--version"]);
-		if (npmVersion) {
-			const [major, minor, patch] = npmVersion.split(".").map(Number);
-			if (!(major > 11 || major === 11 && (minor > 5 || minor === 5 && patch >= 1))) {
-				log.warn(`  npm ${npmVersion} detected — trusted publishing (OIDC) requires npm >= 11.5.1`);
-				log.warn(`  ${OIDC_NPM_UPGRADE_HINTS[oidcProvider]}`);
-			} else log.dim(`  OIDC detected (${oidcProvider}) — npm ${npmVersion} will authenticate via trusted publishing`);
-		}
+		if (npmVersion) if (!npmVersionAtLeast(npmVersion, MIN_NPM_OIDC)) {
+			log.warn(`  npm ${npmVersion} detected — trusted publishing (OIDC) requires npm >= ${MIN_NPM_OIDC.join(".")}`);
+			log.warn(`  ${OIDC_NPM_UPGRADE_HINTS[oidcProvider]}`);
+		} else log.dim(`  OIDC detected (${oidcProvider}) — npm ${npmVersion} will authenticate via trusted publishing`);
 		return;
 	}
 	const token = process.env.NODE_AUTH_TOKEN || process.env.NPM_TOKEN;
@@ -88,14 +105,13 @@ async function publishPackages(releasePlan, packages, depGraph, config, rootDir,
 	};
 	const publishConfig = config.publish;
 	setupNpmAuth(rootDir, publishConfig.publishManager);
-	if (publishConfig.npmStaged) if (publishConfig.publishManager !== "npm") log.warn("Staged publishing is only supported with publishManager \"npm\" — ignoring staged option");
-	else {
+	if (publishConfig.provenance && publishConfig.publishManager !== "npm") throw new Error("provenance requires publishManager \"npm\" — provenance attestation is an npm-specific feature");
+	if (publishConfig.npmStaged) {
+		if (publishConfig.publishManager !== "npm") throw new Error("npmStaged requires publishManager \"npm\" — staged publishing is an npm-specific feature");
 		const npmVersion = tryRunArgs(["npm", "--version"]);
-		if (npmVersion) {
-			const [major, minor, patch] = npmVersion.split(".").map(Number);
-			if (!(major > 11 || major === 11 && (minor > 5 || minor === 5 && patch >= 1))) log.warn(`Staged publishing requires npm >= 11.5.1 (found ${npmVersion})`);
-			else log.dim(`Staged publishing enabled — packages will require 2FA approval on npmjs.com`);
-		}
+		if (!npmVersion) throw new Error(`npmStaged is enabled but npm was not found — install npm >= ${MIN_NPM_STAGED.join(".")}`);
+		if (!npmVersionAtLeast(npmVersion, MIN_NPM_STAGED)) throw new Error(`npmStaged requires npm >= ${MIN_NPM_STAGED.join(".")} (found ${npmVersion})\n  Upgrade npm: npm install -g npm@latest`);
+		log.dim(`Staged publishing enabled — packages will require 2FA approval on npmjs.com`);
 	}
 	const packManager = publishConfig.packManager === "auto" ? detectedPm : publishConfig.packManager;
 	const topoOrder = depGraph.topologicalSort(packages);
@@ -217,6 +233,7 @@ function buildPublishArgs(pkg, pkgConfig, config, opts, tarball) {
 	args.push("--access", access);
 	if (pkgConfig?.registry) args.push("--registry", pkgConfig.registry);
 	if (opts.tag) args.push("--tag", opts.tag);
+	if (config.publish.provenance && publishManager === "npm") args.push("--provenance");
 	if (config.publish.publishArgs.length > 0) args.push(...config.publish.publishArgs);
 	return args;
 }

package/dist/{release-plan-Ck_DlgcK.mjs → release-plan-mK7iGeGq.mjs}

@@ -1,6 +1,6 @@
 import { i as __commonJSMin, s as __toESM } from "./logger-BgksGFuf.mjs";
-import { c as maxBump, l as normalizeCascadeConfig, n as DEFAULT_BUMP_RULES, o as bumpLevel, s as hasCascade } from "./types-CL2pqN9N.mjs";
-import { s as matchGlob } from "./config-CDC1Y_ye.mjs";
+import { c as maxBump, l as normalizeCascadeConfig, n as DEFAULT_BUMP_RULES, o as bumpLevel, s as hasCascade } from "./types-Bkh-igOJ.mjs";
+import { s as matchGlob } from "./config-D_4GYDJi.mjs";
 //#region src/core/dep-graph.ts
 var DependencyGraph = class {
 	/** Map from package name → packages that depend on it */

package/dist/{status-CV8wBBiI.mjs → status-DeMcLxiM.mjs}

@@ -1,8 +1,8 @@
 import { n as log, t as colorize } from "./logger-BgksGFuf.mjs";
-import { a as loadConfig } from "./config-CDC1Y_ye.mjs";
-import { o as discoverPackages, r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-BOqrdkYP.mjs";
-import { a as DependencyGraph, t as assembleReleasePlan } from "./release-plan-Ck_DlgcK.mjs";
-import { i as getCurrentBranch, r as getChangedFiles } from "./git-CpJqzpp-.mjs";
+import { a as loadConfig } from "./config-D_4GYDJi.mjs";
+import { o as discoverPackages, r as readBumpFiles, t as filterBranchBumpFiles } from "./bump-file-B9DpXK5X.mjs";
+import { a as DependencyGraph, t as assembleReleasePlan } from "./release-plan-mK7iGeGq.mjs";
+import { i as getCurrentBranch, r as getChangedFiles } from "./git-JGLQtk-M.mjs";
 //#region src/commands/status.ts
 async function statusCommand(rootDir, opts) {
 	const config = await loadConfig(rootDir);
@@ -29,7 +29,7 @@ async function statusCommand(rootDir, opts) {
 		releases = releases.filter((r) => types.includes(r.type));
 	}
 	if (opts.filter) {
-		const { matchGlob } = await import("./config-CDC1Y_ye.mjs").then((n) => n.t);
+		const { matchGlob } = await import("./config-D_4GYDJi.mjs").then((n) => n.t);
 		const patterns = opts.filter.split(",").map((p) => p.trim());
 		releases = releases.filter((r) => patterns.some((p) => matchGlob(r.name, p)));
 	}

package/dist/{types-CL2pqN9N.mjs → types-Bkh-igOJ.mjs}

@@ -49,6 +49,7 @@ const DEFAULT_PUBLISH_CONFIG = {
 	packManager: "auto",
 	publishManager: "npm",
 	publishArgs: [],
+	provenance: false,
 	npmStaged: false,
 	protocolResolution: "pack"
 };
@@ -71,7 +72,6 @@ const DEFAULT_CONFIG = {
 	allowCustomCommands: false,
 	packages: {},
 	publish: { ...DEFAULT_PUBLISH_CONFIG },
-	aggregateRelease: false,
 	gitUser: {
 		name: "bumpy-bot",
 		email: "276066384+bumpy-bot@users.noreply.github.com"

package/dist/{version-fTSOVlym.mjs → version-88KuPbWa.mjs}

@@ -1,10 +1,10 @@
 import { n as log, t as colorize } from "./logger-BgksGFuf.mjs";
-import { a as loadConfig } from "./config-CDC1Y_ye.mjs";
+import { a as loadConfig } from "./config-D_4GYDJi.mjs";
 import { n as detectWorkspaces } from "./package-manager-BQPwXwu5.mjs";
-import { o as discoverPackages, r as readBumpFiles } from "./bump-file-BOqrdkYP.mjs";
-import { a as DependencyGraph, t as assembleReleasePlan } from "./release-plan-Ck_DlgcK.mjs";
+import { o as discoverPackages, r as readBumpFiles } from "./bump-file-B9DpXK5X.mjs";
+import { a as DependencyGraph, t as assembleReleasePlan } from "./release-plan-mK7iGeGq.mjs";
 import { n as runArgs, s as tryRunArgs } from "./shell-C8KgKnMQ.mjs";
-import { t as applyReleasePlan } from "./apply-release-plan-CCoCcpdv.mjs";
+import { t as applyReleasePlan } from "./apply-release-plan-CmjqYo0t.mjs";
 import { t as resolveCommitMessage } from "./commit-message-CSWVKPJ-.mjs";
 //#region src/commands/version.ts
 async function versionCommand(rootDir, opts = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varlock/bumpy",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Modern monorepo versioning and changelog tool",
   "keywords": [
     "bump",

package/dist/publish-BplMRp4-.mjs

@@ -1,371 +0,0 @@
-import { n as log, o as __require, t as colorize } from "./logger-BgksGFuf.mjs";
-import { a as loadConfig } from "./config-CDC1Y_ye.mjs";
-import { n as detectWorkspaces } from "./package-manager-BQPwXwu5.mjs";
-import { s as discoverWorkspace } from "./bump-file-BOqrdkYP.mjs";
-import { a as DependencyGraph } from "./release-plan-Ck_DlgcK.mjs";
-import { r as runArgsAsync, s as tryRunArgs } from "./shell-C8KgKnMQ.mjs";
-import { i as loadFormatter, n as generateChangelogEntry } from "./changelog-DrAf-rL6.mjs";
-import { c as listTags, l as pushWithTags, s as hasUncommittedChanges } from "./git-CpJqzpp-.mjs";
-import { t as publishPackages } from "./publish-pipeline-BGyQsVyw.mjs";
-import { CI_PLAN_CACHE_PATH } from "./ci-9tmC3oNF.mjs";
-//#region src/core/github-release.ts
-/** Get the current HEAD commit SHA */
-function getHeadSha(rootDir) {
-	return tryRunArgs([
-		"git",
-		"rev-parse",
-		"HEAD"
-	], { cwd: rootDir });
-}
-/** Create individual GitHub releases for each published package */
-async function createIndividualReleases(releases, bumpFiles, rootDir, opts = {}) {
-	if (!isGhAvailable()) {
-		log.dim("  gh CLI not found — skipping GitHub releases");
-		return;
-	}
-	const headSha = getHeadSha(rootDir);
-	for (const release of releases) {
-		const tag = `${release.name}@${release.newVersion}`;
-		const body = opts.formatter ? await generateReleaseBody(release, bumpFiles, opts.formatter) : buildReleaseBody(release, bumpFiles);
-		const title = `${release.name} v${release.newVersion}`;
-		if (opts.dryRun) {
-			log.dim(`  Would create GitHub release: ${title}`);
-			continue;
-		}
-		try {
-			const args = [
-				"gh",
-				"release",
-				"create",
-				tag,
-				"--title",
-				title,
-				"--notes",
-				body
-			];
-			if (headSha) args.push("--target", headSha);
-			await runArgsAsync(args, { cwd: rootDir });
-			log.dim(`  Created GitHub release: ${title}`);
-		} catch (err) {
-			log.warn(`  Failed to create GitHub release for ${tag}: ${err instanceof Error ? err.message : err}`);
-		}
-	}
-}
-/** Create a single aggregated GitHub release for all published packages */
-async function createAggregateRelease(releases, bumpFiles, rootDir, opts = {}) {
-	if (!isGhAvailable()) {
-		log.dim("  gh CLI not found — skipping GitHub release");
-		return;
-	}
-	if (releases.length === 0) return;
-	const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-	const { tag, title } = resolveAggregateTagAndTitle(date, listTags(`release-${date}*`, { cwd: rootDir }), opts.title);
-	const body = opts.formatter ? await generateAggregateBody(releases, bumpFiles, opts.formatter) : buildAggregateBody(releases, bumpFiles);
-	if (opts.dryRun) {
-		log.dim(`  Would create aggregate GitHub release: ${title}`);
-		log.dim(`  Tag: ${tag}`);
-		return;
-	}
-	try {
-		tryRunArgs([
-			"git",
-			"tag",
-			tag
-		], { cwd: rootDir });
-		const headSha = getHeadSha(rootDir);
-		const args = [
-			"gh",
-			"release",
-			"create",
-			tag,
-			"--title",
-			title,
-			"--notes",
-			body
-		];
-		if (headSha) args.push("--target", headSha);
-		await runArgsAsync(args, { cwd: rootDir });
-		log.success(`Created aggregate GitHub release: ${title}`);
-	} catch (err) {
-		log.warn(`Failed to create aggregate GitHub release: ${err instanceof Error ? err.message : err}`);
-	}
-}
-/** Generate a release body for a single package using the changelog formatter */
-async function generateReleaseBody(release, bumpFiles, formatter) {
-	return stripVersionHeading(await generateChangelogEntry(release, bumpFiles, formatter, void 0, "github-release")).trim() || "No changelog entries.";
-}
-/** Generate an aggregate release body using the changelog formatter */
-async function generateAggregateBody(releases, bumpFiles, formatter) {
-	const lines = [];
-	const groups = [
-		["Major Changes", releases.filter((r) => r.type === "major")],
-		["Minor Changes", releases.filter((r) => r.type === "minor")],
-		["Patch Changes", releases.filter((r) => r.type === "patch")]
-	];
-	for (const [heading, group] of groups) {
-		if (group.length === 0) continue;
-		lines.push(`## ${heading}\n`);
-		for (const release of group) {
-			lines.push(`### ${release.name} v${release.newVersion}\n`);
-			const body = stripVersionHeading(await generateChangelogEntry(release, bumpFiles, formatter, void 0, "github-release")).trim();
-			if (body) lines.push(body);
-			else if (release.isDependencyBump) {
-				const sourceList = release.bumpSources.map((s) => `\`${s.name}\` v${s.newVersion}`).join(", ");
-				lines.push(sourceList ? `- Updated dependency ${sourceList}` : "- Updated dependencies");
-			} else if (release.isGroupBump) {
-				const sourceList = release.bumpSources.map((s) => `\`${s.name}\` v${s.newVersion}`).join(", ");
-				lines.push(sourceList ? `- Version bump from group with ${sourceList}` : "- Version bump from group");
-			} else if (release.isCascadeBump) {
-				const sourceList = release.bumpSources.map((s) => `\`${s.name}\` v${s.newVersion}`).join(", ");
-				lines.push(sourceList ? `- Version bump from ${sourceList}` : "- Version bump via cascade rule");
-			}
-			lines.push("");
-		}
-	}
-	return lines.join("\n").trim() || "No changelog entries.";
-}
-/** Strip the leading ## version heading and date sub-heading from a changelog entry */
-function stripVersionHeading(entry) {
-	return entry.replace(/^## .+\n/, "").replace(/^<sub>.+<\/sub>\n/, "").replace(/^_.+_\n/, "");
-}
-function buildReleaseBody(release, bumpFiles) {
-	const lines = [];
-	const relevant = bumpFiles.filter((bf) => release.bumpFiles.includes(bf.id));
-	if (relevant.length > 0) {
-		for (const bf of relevant) if (bf.summary) lines.push(`- ${bf.summary.split("\n")[0]}`);
-	}
-	if (relevant.length === 0) {
-		const sourceList = release.bumpSources.map((s) => `\`${s.name}\` v${s.newVersion}`).join(", ");
-		if (release.isDependencyBump) lines.push(sourceList ? `- Updated dependency ${sourceList}` : "- Updated dependencies");
-		else if (release.isGroupBump) lines.push(sourceList ? `- Version bump from group with ${sourceList}` : "- Version bump from group");
-		else if (release.isCascadeBump) lines.push(sourceList ? `- Version bump from ${sourceList}` : "- Version bump via cascade rule");
-	}
-	return lines.join("\n") || "No changelog entries.";
-}
-function buildAggregateBody(releases, bumpFiles) {
-	const lines = [];
-	const groups = [
-		["Major Changes", releases.filter((r) => r.type === "major")],
-		["Minor Changes", releases.filter((r) => r.type === "minor")],
-		["Patch Changes", releases.filter((r) => r.type === "patch")]
-	];
-	for (const [heading, group] of groups) {
-		if (group.length === 0) continue;
-		lines.push(`## ${heading}\n`);
-		for (const release of group) {
-			lines.push(`### ${release.name} v${release.newVersion}\n`);
-			const relevant = bumpFiles.filter((bf) => release.bumpFiles.includes(bf.id));
-			if (relevant.length > 0) {
-				for (const bf of relevant) if (bf.summary) lines.push(`- ${bf.summary.split("\n")[0]}`);
-			} else {
-				const sourceList = release.bumpSources.map((s) => `\`${s.name}\` v${s.newVersion}`).join(", ");
-				if (release.isDependencyBump) lines.push(sourceList ? `- Updated dependency ${sourceList}` : "- Updated dependencies");
-				else if (release.isGroupBump) lines.push(sourceList ? `- Version bump from group with ${sourceList}` : "- Version bump from group");
-				else if (release.isCascadeBump) lines.push(sourceList ? `- Version bump from ${sourceList}` : "- Version bump via cascade rule");
-			}
-			lines.push("");
-		}
-	}
-	return lines.join("\n").trim() || "No changelog entries.";
-}
-/** Compute the aggregate release tag and title, appending -n suffix if a tag for the same date already exists */
-function resolveAggregateTagAndTitle(date, existingTags, titleTemplate) {
-	const baseTag = `release-${date}`;
-	const suffix = existingTags.length === 0 ? "" : `-${existingTags.length + 1}`;
-	return {
-		tag: `${baseTag}${suffix}`,
-		title: (titleTemplate || "Release {{date}}").replace("{{date}}", `${date}${suffix}`)
-	};
-}
-function isGhAvailable() {
-	return tryRunArgs(["gh", "--version"]) !== null;
-}
-//#endregion
-//#region src/commands/publish.ts
-/**
-* Publish packages that have been versioned but not yet published.
-* Detects unpublished versions by comparing package.json versions against npm registry.
-*/
-async function publishCommand(rootDir, opts) {
-	const config = await loadConfig(rootDir);
-	const { packages, catalogs } = await discoverWorkspace(rootDir, config);
-	const { packageManager: detectedPm } = await detectWorkspaces(rootDir);
-	const depGraph = new DependencyGraph(packages);
-	if (!opts.dryRun && hasUncommittedChanges({ cwd: rootDir })) {
-		log.warn("You have uncommitted changes. Commit or stash them before publishing.");
-		process.exit(1);
-	}
-	let toPublish = await findUnpublishedWithCache(rootDir, packages, config);
-	if (opts.filter) {
-		const { matchGlob } = await import("./config-CDC1Y_ye.mjs").then((n) => n.t);
-		const patterns = opts.filter.split(",").map((p) => p.trim());
-		toPublish = toPublish.filter((r) => patterns.some((p) => matchGlob(r.name, p)));
-	}
-	if (toPublish.length === 0) {
-		log.info("No unpublished packages found.");
-		return;
-	}
-	const recoveredBumpFiles = opts.recoveredBumpFiles || [];
-	if (recoveredBumpFiles.length > 0) for (const release of toPublish) release.bumpFiles = recoveredBumpFiles.filter((bf) => bf.releases.some((r) => r.name === release.name)).map((bf) => bf.id);
-	const releasePlan = {
-		bumpFiles: recoveredBumpFiles,
-		releases: toPublish,
-		warnings: []
-	};
-	if (opts.dryRun) log.bold("Dry run — would publish:");
-	else log.bold("Publishing:");
-	for (const r of toPublish) console.log(`  ${r.name}@${colorize(r.newVersion, "cyan")}`);
-	console.log();
-	const result = await publishPackages(releasePlan, packages, depGraph, config, rootDir, {
-		dryRun: opts.dryRun,
-		tag: opts.tag
-	}, catalogs, detectedPm);
-	if (result.published.length > 0) log.success(`🐸 Published ${result.published.length} package(s)`);
-	if (result.skipped.length > 0) log.dim(`Skipped ${result.skipped.length}: ${result.skipped.map((s) => s.name).join(", ")}`);
-	if (result.failed.length > 0) {
-		log.error(`Failed ${result.failed.length}: ${result.failed.map((f) => `${f.name} (${f.error})`).join(", ")}`);
-		process.exit(1);
-	}
-	if (!opts.dryRun && !opts.noPush && result.published.length > 0) try {
-		log.step("Pushing tags...");
-		pushWithTags({ cwd: rootDir });
-		log.success("Pushed tags to remote");
-	} catch (err) {
-		log.warn(`Failed to push tags: ${err instanceof Error ? err.message : err}`);
-	}
-	if (result.published.length > 0) {
-		const publishedReleases = releasePlan.releases.filter((r) => result.published.some((p) => p.name === r.name));
-		const aggConfig = config.aggregateRelease;
-		const isAggregate = aggConfig === true || typeof aggConfig === "object" && aggConfig.enabled;
-		const aggTitle = typeof aggConfig === "object" ? aggConfig.title : void 0;
-		const formatter = config.changelog !== false ? await loadFormatter(config.changelog, rootDir) : void 0;
-		if (isAggregate) await createAggregateRelease(publishedReleases, releasePlan.bumpFiles, rootDir, {
-			dryRun: opts.dryRun,
-			title: aggTitle,
-			formatter
-		});
-		else await createIndividualReleases(publishedReleases, releasePlan.bumpFiles, rootDir, {
-			dryRun: opts.dryRun,
-			formatter
-		});
-	}
-}
-/**
-* Try to load cached plan from `ci plan`. Returns the unpublished package names
-* if the cache is valid, or null to fall back to registry lookups.
-*
-* Validates that every cached package exists in the workspace with the same version,
-* so the cache can only filter — never fabricate — the set of packages.
-*/
-function loadCachedPlan(rootDir, packages) {
-	const cachePath = `${rootDir}/${CI_PLAN_CACHE_PATH}`;
-	let raw;
-	try {
-		raw = __require("node:fs").readFileSync(cachePath, "utf-8");
-		__require("node:fs").unlinkSync(cachePath);
-	} catch {
-		return null;
-	}
-	try {
-		const cached = JSON.parse(raw);
-		if (cached?.mode !== "publish" || !Array.isArray(cached.releases)) return null;
-		const names = /* @__PURE__ */ new Set();
-		for (const r of cached.releases) {
-			if (typeof r.name !== "string" || typeof r.newVersion !== "string") return null;
-			const pkg = packages.get(r.name);
-			if (!pkg || pkg.version !== r.newVersion) {
-				log.dim("  ci plan cache is stale — falling back to registry lookups");
-				return null;
-			}
-			names.add(r.name);
-		}
-		log.dim("  Using cached plan from ci plan");
-		return names;
-	} catch {
-		return null;
-	}
-}
-/**
-* Find unpublished packages, using the ci plan cache if available.
-* Falls back to registry lookups if no cache or cache is invalid.
-*/
-async function findUnpublishedWithCache(rootDir, packages, config) {
-	const cachedNames = loadCachedPlan(rootDir, packages);
-	if (cachedNames) {
-		const unpublished = [];
-		for (const name of cachedNames) {
-			const pkg = packages.get(name);
-			unpublished.push({
-				name,
-				type: "patch",
-				oldVersion: pkg.version,
-				newVersion: pkg.version,
-				bumpFiles: [],
-				isDependencyBump: false,
-				isCascadeBump: false,
-				isGroupBump: false,
-				bumpSources: []
-			});
-		}
-		return unpublished;
-	}
-	return findUnpublishedPackages(packages, config);
-}
-/**
-* Find packages whose current version is not yet published.
-*
-* Detection strategy (per package):
-* 1. Custom `checkPublished` command → run it, compare output to current version
-* 2. `skipNpmPublish` or custom `publishCommand` → check git tags
-* 3. Default → check npm registry via `npm info`
-*/
-async function findUnpublishedPackages(packages, _config) {
-	const unpublished = [];
-	for (const [name, pkg] of packages) {
-		if (pkg.private && !pkg.bumpy?.publishCommand) continue;
-		if (pkg.version === "0.0.0") continue;
-		if (!await checkIfPublished(name, pkg.version, pkg.bumpy)) unpublished.push({
-			name,
-			type: "patch",
-			oldVersion: pkg.version,
-			newVersion: pkg.version,
-			bumpFiles: [],
-			isDependencyBump: false,
-			isCascadeBump: false,
-			isGroupBump: false,
-			bumpSources: []
-		});
-	}
-	return unpublished;
-}
-async function checkIfPublished(name, version, pkgConfig) {
-	const { runAsync, runArgsAsync, tryRunArgs } = await import("./shell-C8KgKnMQ.mjs").then((n) => n.a);
-	if (pkgConfig?.checkPublished) try {
-		return (await runAsync(pkgConfig.checkPublished)).trim() === version;
-	} catch {
-		return false;
-	}
-	if (pkgConfig?.skipNpmPublish || pkgConfig?.publishCommand) {
-		const tag = `${name}@${version}`;
-		return tryRunArgs([
-			"git",
-			"tag",
-			"-l",
-			tag
-		]) === tag;
-	}
-	try {
-		const args = [
-			"npm",
-			"info",
-			`${name}@${version}`,
-			"version"
-		];
-		if (pkgConfig?.registry) args.push("--registry", pkgConfig.registry);
-		return await runArgsAsync(args) === version;
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { findUnpublishedPackages, publishCommand };