codebyplan 1.13.43 → 1.13.44

package/dist/cli.js

@@ -39,7 +39,7 @@ var VERSION, PACKAGE_NAME;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    VERSION = "1.13.43";
+    VERSION = "1.13.44";
     PACKAGE_NAME = "codebyplan";
   }
 });
@@ -29596,6 +29596,35 @@ function patchBump(version3) {
   const patch = parseInt(coreMatch[3], 10);
   return `${hasV ? "v" : ""}${major}.${minor}.${patch + 1}`;
 }
+function prereleaseBump(version3, id) {
+  const hasV = version3.startsWith("v");
+  const stripped = hasV ? version3.slice(1) : version3;
+  const coreMatch = stripped.match(/^(\d+)\.(\d+)\.(\d+)/);
+  if (!coreMatch) {
+    return version3;
+  }
+  const major = parseInt(coreMatch[1], 10);
+  const minor = parseInt(coreMatch[2], 10);
+  const patchSeg = coreMatch[3];
+  const prefix = hasV ? "v" : "";
+  const preMatch = stripped.match(/^\d+\.\d+\.\d+-(.+)$/);
+  if (preMatch) {
+    const preSuffix = preMatch[1];
+    const idDotPrefix = id + ".";
+    if (preSuffix.startsWith(idDotPrefix)) {
+      const nStr = preSuffix.slice(idDotPrefix.length);
+      const n = parseInt(nStr, 10);
+      if (!isNaN(n) && /^\d+$/.test(nStr)) {
+        return `${prefix}${coreMatch[1]}.${coreMatch[2]}.${patchSeg}-${id}.${n + 1}`;
+      }
+    }
+    if (preSuffix === id) {
+      return `${prefix}${coreMatch[1]}.${coreMatch[2]}.${patchSeg}-${id}.1`;
+    }
+    return `${prefix}${major}.${minor + 1}.0-${id}.1`;
+  }
+  return `${prefix}${major}.${minor + 1}.0-${id}.1`;
+}
 function compareSemver(a, b) {
   const parseCore = (v) => {
     const stripped = v.startsWith("v") ? v.slice(1) : v;
@@ -29676,6 +29705,7 @@ async function runBump(opts) {
   const cwd = resolve3(opts?.cwd ?? process.cwd());
   const dryRun = opts?.dryRun ?? false;
   const now = opts?.now ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const prereleaseId = opts?.prereleaseId;
   const baseBranch = await readBaseBranch(cwd);
   const baseRef = resolveBaseRef(cwd, baseBranch);
   const diffResult = spawnSync5(
@@ -29749,7 +29779,7 @@ async function runBump(opts) {
     }
     const pkgJsonRelPath = relative5(cwd, pkgJsonPath).replace(/\\/g, "/");
     const baseRaw = gitShowFile(cwd, baseRef, pkgJsonRelPath);
-    if (baseRaw !== null) {
+    if (baseRaw !== null && !prereleaseId) {
       const baseVersion = extractVersion(baseRaw, pkgJsonPath);
       if (baseVersion !== null && compareSemver(currentVersion, baseVersion) > 0) {
         entries.push({
@@ -29765,7 +29795,7 @@ async function runBump(opts) {
         continue;
       }
     }
-    const nextVersion = patchBump(currentVersion);
+    const nextVersion = prereleaseId ? prereleaseBump(currentVersion, prereleaseId) : patchBump(currentVersion);
     const updatedVersionFiles = [];
     const skippedVersionFiles = [];
     for (const { abs, rel } of versionFileCandidates) {
@@ -29842,7 +29872,7 @@ function parseFlagsFromArgs6(args) {
 }
 function printBumpHelp() {
   process.stdout.write(
-    "\n  codebyplan bump\n\n  Detect changed workspace packages and patch-bump their versions.\n  Does NOT commit or push \u2014 pure version-file + changelog edits.\n\n  Flags:\n    --dry-run   Preview planned bumps without writing any files\n    --json      Write structured JSON output to stdout\n\n"
+    "\n  codebyplan bump [--prerelease <id>]\n\n  Detect changed workspace packages and patch-bump their versions.\n  Does NOT commit or push \u2014 pure version-file + changelog edits.\n\n  Flags:\n    --dry-run          Preview planned bumps without writing any files\n    --json             Write structured JSON output to stdout\n    --prerelease <id>  Cut/iterate a prerelease (X.Y.Z \u2192 X.(Y+1).0-id.1; id.N \u2192 id.N+1). Default id: beta\n\n"
   );
 }
 function printHumanResult(result) {
@@ -29883,12 +29913,18 @@ async function runBumpCommand(args) {
     printBumpHelp();
     process.exit(0);
   }
-  const { booleans } = parseFlagsFromArgs6(args);
+  const { flags, booleans } = parseFlagsFromArgs6(args);
   const dryRun = booleans.has("dry-run");
   const jsonOutput = booleans.has("json");
+  let prereleaseId;
+  if (flags["prerelease"] !== void 0) {
+    prereleaseId = flags["prerelease"] || "beta";
+  } else if (booleans.has("prerelease")) {
+    prereleaseId = "beta";
+  }
   let result;
   try {
-    result = await runBump({ dryRun });
+    result = await runBump({ dryRun, prereleaseId });
   } catch (err) {
     process.stderr.write(
       `bump: ${err instanceof Error ? err.message : String(err)}
@@ -35518,7 +35554,7 @@ void (async () => {
     codebyplan watch status           Show daemon status (--json for machine-readable)
     codebyplan watch run              Run daemon in foreground (used internally by start)
     codebyplan round sync-approvals   Sync git diff and approvals with round/task state
-    codebyplan bump                   Detect changed packages and patch-bump versions
+    codebyplan bump [--prerelease <id>]  Detect changed packages and patch-bump versions
     codebyplan ship                  Ship current feat branch to production via PR
     codebyplan upload-e2e-images     Upload new/changed committed e2e PNGs for a checkpoint
     codebyplan scaffold-publish-workflow   Write the publish-on-main GitHub workflow into ./.github/workflows/

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebyplan",
-  "version": "1.13.43",
+  "version": "1.13.44",
   "description": "CLI for CodeByPlan — AI-powered development planning and tracking",
   "type": "module",
   "bin": {

package/templates/github-workflows/publish.yml

@@ -2,14 +2,16 @@
 #
 # This workflow publishes the codebyplan npm package on every merge to main
 # where the committed package.json version exceeds the version currently on npm.
-# No release PR, no conventional-commit parsing — the version committed in the
-# feat branch is the version that ships.
+# It also auto-publishes prerelease versions (e.g. 1.14.0-beta.1) from feat/**
+# branches to a scoped dist-tag (e.g. --tag beta) — see the beta channel docs
+# for the full workflow. No release PR, no conventional-commit parsing — the
+# version committed in the feat branch is the version that ships.
 #
 # Two values a consuming repo must adjust:
 #   1. paths: — set to the package directory whose package.json drives versioning
 #              (current value: 'packages/codebyplan-package/**')
 #   2. npm view <package-name> — replace `codebyplan` with the actual package name
-#              in the "Check version vs published" step
+#              in the "Check version vs published" and exact-version check steps
 #
 # Everything else (OIDC auth, pnpm 10.12.4, Node 20, build:npm → publish) is
 # intentionally generic and works as-is for any single-package npm publish.
@@ -20,6 +22,7 @@ on:
   push:
     branches:
       - main
+      - "feat/**"
     paths:
       - "packages/codebyplan-package/**"
   workflow_dispatch:
@@ -40,6 +43,7 @@ jobs:
     outputs:
       should_publish: ${{ steps.check.outputs.should_publish }}
       version: ${{ steps.check.outputs.version }}
+      dist_tag: ${{ steps.check.outputs.dist_tag }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -54,27 +58,80 @@ jobs:
           fi
           echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
 
-          # Pre-release versions (e.g. 1.2.3-beta.1) must never auto-publish to the
-          # 'latest' dist-tag — sort -V is not semver-aware for pre-release suffixes,
-          # and this workflow always publishes to latest. Publish pre-releases
-          # manually with `npm publish --tag <pre-id>`. The version core (X.Y.Z) has
-          # no hyphen, so any '-' marks a pre-release.
+          # Compute dist-tag from version:
+          #   prerelease (contains hyphen) → extract id between '-' and first '.'
+          #   e.g.  1.14.0-beta.1 → "beta";  1.14.0-rc.1 → "rc"
+          #   stable → "latest"
           case "$VERSION" in
             *-*)
-              echo "VERSION=${VERSION} is a pre-release — skipping auto-publish."
-              echo "should_publish=false" >> "$GITHUB_OUTPUT"
-              exit 0
+              PRE_ID="${VERSION#*-}"
+              DIST_TAG="${PRE_ID%%.*}"
+              ;;
+            *)
+              DIST_TAG="latest"
               ;;
           esac
+          echo "dist_tag=${DIST_TAG}" >> "$GITHUB_OUTPUT"
 
-          # Manual dispatch: always publish (recovery / forced re-publish path).
+          # ── workflow_dispatch ──────────────────────────────────────────────
+          # Manual trigger: always publish (recovery / forced re-publish path).
+          # Uses the computed dist_tag so manual prerelease publishes are tagged
+          # correctly.
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            echo "Manual dispatch — skipping gt check, will publish."
+            echo "Manual dispatch — will publish (dist-tag: ${DIST_TAG})."
             echo "should_publish=true" >> "$GITHUB_OUTPUT"
             exit 0
           fi
 
-          # Push path: compare committed version against the npm registry.
+          # ── feat/** push ───────────────────────────────────────────────────
+          # C4 guard: three conditions must hold before publishing from feat/**:
+          #   (1) prerelease-required: stable versions on feat/** are skipped.
+          #   (2) exact-version check: if this exact version is already on npm, skip.
+          #   (3) path filter: already enforced by on.push.paths above.
+          case "${{ github.ref }}" in
+            refs/heads/feat/*)
+              case "$VERSION" in
+                *-*)
+                  # Prerelease — check if this exact version already exists on npm.
+                  EXACT_OUT=$(npm view "codebyplan@${VERSION}" version 2>&1)
+                  EXACT_EXIT=$?
+                  if [ "$EXACT_EXIT" -eq 0 ]; then
+                    echo "VERSION=${VERSION} already published — skipping (exact-version guard)."
+                    echo "should_publish=false" >> "$GITHUB_OUTPUT"
+                    exit 0
+                  fi
+                  if echo "$EXACT_OUT" | grep -q "E404"; then
+                    echo "VERSION=${VERSION} not yet published — will publish (dist-tag: ${DIST_TAG})."
+                    echo "should_publish=true" >> "$GITHUB_OUTPUT"
+                    exit 0
+                  fi
+                  # Non-E404 failure: transient registry error — abort to avoid
+                  # a duplicate publish in a degraded state.
+                  echo "ERROR: npm view codebyplan@${VERSION} failed (exit ${EXACT_EXIT}): ${EXACT_OUT}"
+                  exit 1
+                  ;;
+                *)
+                  # C4 prerelease-required gate: stable versions on feat/** skip.
+                  echo "VERSION=${VERSION} is not a prerelease — feat/** branches require a prerelease version (e.g. run 'codebyplan bump --prerelease beta'). Skipping."
+                  echo "should_publish=false" >> "$GITHUB_OUTPUT"
+                  exit 0
+                  ;;
+              esac
+              ;;
+          esac
+
+          # ── main push ──────────────────────────────────────────────────────
+          # Prerelease versions must never auto-publish to latest from main.
+          # The version core (X.Y.Z) has no hyphen, so any '-' marks a prerelease.
+          case "$VERSION" in
+            *-*)
+              echo "VERSION=${VERSION} is a pre-release — skipping auto-publish on main (use a feat/** branch or workflow_dispatch)."
+              echo "should_publish=false" >> "$GITHUB_OUTPUT"
+              exit 0
+              ;;
+          esac
+
+          # Stable on main: compare committed version against the npm registry.
           # Distinguish "never published" (E404 → first publish) from a transient
           # registry/network error (abort rather than blindly publish).
           NPM_OUT=$(npm view codebyplan version 2>&1)
@@ -88,7 +145,9 @@ jobs:
             echo "ERROR: npm view failed (exit ${NPM_EXIT}): ${NPM_OUT}"
             exit 1
           fi
-          PUBLISHED="$NPM_OUT"
+          # Extract the first semver-looking line so a registry deprecation/advisory
+          # notice in NPM_OUT cannot corrupt the sort -V comparison below.
+          PUBLISHED=$(printf '%s\n' "$NPM_OUT" | grep -E '^[0-9]+\.[0-9]+\.[0-9]+' | head -n1)
 
           # sort -V: version-aware sort. If VERSION sorts AFTER PUBLISHED, it is greater.
           GREATER=$(printf '%s\n%s\n' "$PUBLISHED" "$VERSION" | sort -V | tail -n1)
@@ -147,7 +206,7 @@ jobs:
         working-directory: packages/codebyplan-package
         run: |
           echo "dry_run=true — skipping actual publish."
-          echo "Would publish: codebyplan@${{ needs.check-version.outputs.version }}"
+          echo "Would publish: codebyplan@${{ needs.check-version.outputs.version }} (dist-tag: ${{ needs.check-version.outputs.dist_tag }})"
 
       # No NODE_AUTH_TOKEN: npm >= 11.5.1 exchanges the GitHub OIDC token for a
       # short-lived publish token. Requires a Trusted Publisher configured for
@@ -158,10 +217,14 @@ jobs:
       # source repository visibility: private" otherwise). This works for both
       # public and private repos. If your source repo is PUBLIC and you want
       # supply-chain attestation, add `--provenance` to the command below.
+      #
+      # --tag: routes stable publishes to "latest" and prerelease publishes to
+      # the prerelease id (e.g. "beta", "rc"). C1 guarantee: betas never land on
+      # "latest" because dist_tag is computed from the version string.
       - name: Publish to npm
         if: ${{ github.event_name != 'workflow_dispatch' || inputs.dry_run != true }}
         working-directory: packages/codebyplan-package
-        run: npm publish --access public
+        run: npm publish --access public --tag ${{ needs.check-version.outputs.dist_tag }}
 
   tag-and-release:
     name: Tag + GitHub release
@@ -199,9 +262,18 @@ jobs:
           if gh release view "${TAG}" > /dev/null 2>&1; then
             echo "GitHub release ${TAG} already exists — skipping."
           else
-            gh release create "${TAG}" \
-              --title "codebyplan v${VERSION}" \
-              --notes "codebyplan v${VERSION} — published to npm: https://www.npmjs.com/package/codebyplan/v/${VERSION} (install: npm install -g codebyplan@${VERSION})" \
-              --latest
+            # C1 guard: prerelease versions get --prerelease (NOT --latest);
+            # stable versions get --latest (existing behaviour preserved).
+            if echo "${VERSION}" | grep -q "-"; then
+              gh release create "${TAG}" \
+                --title "codebyplan v${VERSION}" \
+                --notes "codebyplan v${VERSION} — published to npm: https://www.npmjs.com/package/codebyplan/v/${VERSION} (install: npm install -g codebyplan@${VERSION})" \
+                --prerelease
+            else
+              gh release create "${TAG}" \
+                --title "codebyplan v${VERSION}" \
+                --notes "codebyplan v${VERSION} — published to npm: https://www.npmjs.com/package/codebyplan/v/${VERSION} (install: npm install -g codebyplan@${VERSION})" \
+                --latest
+            fi
             echo "Created GitHub release ${TAG}."
           fi