@vodmal/vdx-cli 0.13.0 → 0.13.1

package/README.md

@@ -50,6 +50,9 @@ vdx doctor [--format=ansi|markdown|json]
 # Start your agent in a project per your profile (~/.vdx-environment.yaml or $VDX_ENVIRONMENT)
 vdx ai [project-path] [--new] [--restart] [--detach] [--dry-run]   # default: cwd
 
+# Print the installed version
+vdx --version
+
 # MCP stdio server consumed by the Claude Code plugin
 vdx-mcp   --project <path>
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vodmal/vdx-cli",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "vdx — unified lifecycle interface (up/down/build/test/check/fix) + versioned maturity audit with drift detection. Pairs with the vdx Claude Code plugin.",
   "keywords": [
     "vdx",

package/src/doctor.ts

@@ -162,7 +162,7 @@ function checkNpmAuth(): CheckResult {
       id: 'npm-auth',
       label: 'npm auth',
       status: 'warning',
-      message: 'not logged in — `vdx publish` will fail with E404',
+      message: 'not logged in — `vdx publish` refuses at pre-flight (npm-auth)',
       remedy: 'npm login',
     };
   }

package/src/index.ts

@@ -19,7 +19,7 @@ import {
   reportDoctorJson,
   reportDoctorAnsi,
 } from './report.ts';
-import { runDoctor, looksLikeProject } from './doctor.ts';
+import { runDoctor, looksLikeProject, readCliVersion } from './doctor.ts';
 import { planInit, writeInit, renderPlanSummary } from './init.ts';
 import {
   planPublish,
@@ -42,6 +42,7 @@ function usage(): never {
   vdx publish <patch|minor|major> [--dry-run] [--force]
   vdx doctor  [--format=ansi|markdown|json] [--json]
   vdx ai      [project_path]  [--new] [--restart] [--detach] [--dry-run]                                    (default: cwd)
+  vdx --version
 `,
   );
   process.exit(1);
@@ -283,7 +284,8 @@ function cmdAi(opts: ParsedArgs): void {
 }
 
 const parsed = parseArgs(process.argv);
-if (parsed.cmd === 'audit') cmdAudit(parsed);
+if (parsed.cmd === '--version') process.stdout.write(readCliVersion() + '\n');
+else if (parsed.cmd === 'audit') cmdAudit(parsed);
 else if (parsed.cmd === 'init') cmdInit(parsed);
 else if (parsed.cmd === 'publish') cmdPublish(parsed);
 else if (parsed.cmd === 'doctor') cmdDoctor(parsed);

package/src/publish.ts

@@ -79,12 +79,21 @@ function isGitWorkingTreeClean(projectRoot: string): { ok: boolean; detail: stri
   }
 }
 
-function fetchPublishedVersion(packageName: string): string | null {
+/** Runs npm with these args and returns stdout; throws with `stderr` on a non-zero exit. */
+export type NpmRunner = (args: string[]) => string;
+
+// A caller's `npm run -s` passes `npm_config_loglevel=silent` down, and npm then
+// fails with an empty stderr — no E401 or E404 left to tell the cases apart.
+const runNpm: NpmRunner = (args) =>
+  execFileSync('npm', args, {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+    env: { ...process.env, npm_config_loglevel: 'error' },
+  });
+
+function fetchPublishedVersion(packageName: string, npm: NpmRunner): string | null {
   try {
-    const out = execFileSync('npm', ['view', packageName, 'version'], {
-      encoding: 'utf8',
-      stdio: ['ignore', 'pipe', 'pipe'],
-    });
+    const out = npm(['view', packageName, 'version']);
     return out.trim() || null;
   } catch (e: any) {
     const stderr = String(e?.stderr ?? e?.message ?? '');
@@ -93,6 +102,54 @@ function fetchPublishedVersion(packageName: string): string | null {
   }
 }
 
+/**
+ * The registry `npm publish` sends this package to, when it is not npm's
+ * default: `publishConfig.registry`, else the scope's registry from npm config.
+ */
+export function publishRegistry(
+  pkg: { name?: string; publishConfig?: { registry?: string } },
+  npm: NpmRunner,
+): string | null {
+  if (pkg.publishConfig?.registry) return pkg.publishConfig.registry;
+  const scope = pkg.name?.match(/^(@[^/]+)\//)?.[1];
+  if (!scope) return null;
+  try {
+    const value = npm(['config', 'get', `${scope}:registry`]).trim();
+    return value && value !== 'undefined' ? value : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Logged in where the package goes? Without it `npm publish` fails only after
+ * the bump and the pack, and with E404 on a scoped package, not E401 — an
+ * expired npm session reads as a missing package.
+ */
+export function checkNpmAuth(registry: string | null, npm: NpmRunner): PreflightCheck {
+  const where = registry ?? 'npm';
+  const login = registry ? `npm login --registry ${registry}` : 'npm login';
+  try {
+    const who = npm(registry ? ['whoami', '--registry', registry] : ['whoami']).trim();
+    if (who) return { name: 'npm-auth', ok: true, message: `OK (logged in to ${where} as ${who})` };
+    return { name: 'npm-auth', ok: false, message: `npm whoami answered nothing for ${where}. Run: ${login}` };
+  } catch (e: any) {
+    const stderr = String(e?.stderr ?? e?.message ?? '');
+    if (/E401|ENEEDAUTH/.test(stderr)) {
+      return {
+        name: 'npm-auth',
+        ok: false,
+        message: `not logged in to ${where} (the npm session may have expired). Run: ${login}`,
+      };
+    }
+    return {
+      name: 'npm-auth',
+      ok: false,
+      message: `npm whoami failed for ${where}: ${stderr.split('\n').find((l) => l.trim()) ?? stderr}`,
+    };
+  }
+}
+
 function checkMiseOverride(projectRoot: string): boolean {
   const miseToml = path.join(projectRoot, 'mise.toml');
   if (!fs.existsSync(miseToml)) return false;
@@ -116,6 +173,7 @@ export function planPublish(
   opts: PublishOptions,
   audit: AuditResult,
   ctx: Ctx,
+  npm: NpmRunner = runNpm,
 ): PublishPlan {
   if (checkMiseOverride(opts.projectRoot)) {
     return {
@@ -197,10 +255,12 @@ export function planPublish(
         : `release-artifact at ${raLevel}, need >= L3. Add files[], main/exports, license in package.json.`,
   });
 
+  preflight.push(checkNpmAuth(publishRegistry(pkg, npm), npm));
+
   let published: string | null = null;
   let registryError: string | null = null;
   try {
-    published = fetchPublishedVersion(packageName);
+    published = fetchPublishedVersion(packageName, npm);
   } catch (e: any) {
     registryError = e?.message ?? String(e);
   }