package-registry-manager 0.22.9 → 0.22.11

package/README.md

@@ -33,7 +33,25 @@ package-registry-manager setup --org link-foundation --all --execute --browser-i
 Scans read matched manifests/workflows through gh-manager. Account setup shares
 one browser, groups npm approvals, and uses CI evidence to preserve healthy tokens
 or verify replacements before revocation. `--secret-name '{REGISTRY}_TOKEN_{REPO}'`
-selects custom credential names. Rust requires Node.js and npm for its pinned
-GitHub CLI dependency.
+selects custom credential names.
+
+Account scans print progress to stderr (`[37/169] owner/repository`) and stream
+text inspection results as each repository finishes. JSON inspection remains one
+report on stdout. Repository, manifest, registry lookup, and release-log failures are
+included in each repository's `error` and structured `errors` fields; valid
+packages and later repositories are retained. The command exits nonzero after
+printing all results, and `setup --org ORG --all` still plans the usable packages.
+Release health checks only the latest default-branch push or manual run of each
+detected publishing workflow; it downloads logs only when that run failed.
+Expired logs retain the failed run's URL and conclusion alongside the error.
+Account `plan` and `setup` JSON reports also include a `plans` array.
+
+Without `--repository`, online commands prefer the current repository's
+organization, then a sole organization membership, then the signed-in GitHub
+user. Multiple memberships fall back to the user; select an organization with
+`--org`. If GitHub account discovery is unavailable, the current directory is
+inspected. Explicit `--repository` (including `--repository .`), `--ref`, and
+local `--offline` commands keep local scope. Both CLIs' GitHub dependency needs
+Node.js 22.12 or newer and npm; JavaScript checks the runtime before loading it.
 
 See the [bootstrap, wrapper and credential guide](../docs/registry-setup.md) for branch/PR setup, dual npm names, registry policies and integration limits.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "package-registry-manager",
-  "version": "0.22.9",
+  "version": "0.22.11",
   "description": "Inspect repositories and guide secure package-registry setup",
   "type": "module",
   "bin": {
@@ -28,7 +28,7 @@
     "provenance": true
   },
   "scripts": {
-    "syntax": "node --check src/cli.mjs && node --check src/direct-execution.mjs && node --check src/index.mjs && node --check src/browser.mjs && node --check src/browser-options.mjs && node --check src/browser-catalogue.mjs && node --check src/automation.mjs && node --check src/webdriver-automation.mjs && node --check src/profile.mjs && node --check src/setup.mjs && node --check src/auth-urls.mjs && node --check src/containers.mjs && node --check src/flows.mjs && node --check src/prerequisites.mjs && node --check src/registry-state.mjs && node --check src/workflows.mjs && node --check src/publishers.mjs && node --check src/skips.mjs && node --check src/tokens.mjs && node --check src/approvals.mjs && node --check src/default-browser.mjs && node --check src/pages.mjs && node --check src/crates-api.mjs && node --check src/sign-in-import.mjs && node --check scripts/publish-to-npm.mjs && node --check scripts/setup-npm.mjs && node --check scripts/sanitize-npm-userconfig.mjs && node --check src/python.mjs && node --check src/setup-batch.mjs && node --check src/workflow-proposal.mjs && node --check src/repository-identity.mjs && node --check src/repository-repair.mjs && node --check src/manifest-proposal.mjs",
+    "syntax": "node --check src/cli.mjs && node --check src/cli-main.mjs && node --check src/node-version.mjs && node --check src/default-scope.mjs && node --check src/direct-execution.mjs && node --check src/index.mjs && node --check src/browser.mjs && node --check src/browser-options.mjs && node --check src/browser-catalogue.mjs && node --check src/automation.mjs && node --check src/webdriver-automation.mjs && node --check src/profile.mjs && node --check src/setup.mjs && node --check src/auth-urls.mjs && node --check src/containers.mjs && node --check src/flows.mjs && node --check src/prerequisites.mjs && node --check src/registry-state.mjs && node --check src/workflows.mjs && node --check src/publishers.mjs && node --check src/skips.mjs && node --check src/tokens.mjs && node --check src/approvals.mjs && node --check src/default-browser.mjs && node --check src/pages.mjs && node --check src/crates-api.mjs && node --check src/sign-in-import.mjs && node --check scripts/publish-to-npm.mjs && node --check scripts/setup-npm.mjs && node --check scripts/sanitize-npm-userconfig.mjs && node --check src/python.mjs && node --check src/setup-batch.mjs && node --check src/workflow-proposal.mjs && node --check src/repository-identity.mjs && node --check src/repository-repair.mjs && node --check src/manifest-proposal.mjs",
     "lint": "eslint src test scripts --max-warnings 0",
     "lint:fix": "eslint src test scripts --fix --max-warnings 0",
     "format": "prettier --write .",
@@ -41,8 +41,8 @@
   },
   "dependencies": {
     "@link-foundation/gh-manager": "https://codeload.github.com/link-foundation/gh-manager/tar.gz/29808e088ac8fd8374361920bbebab07a4d63ac6",
-    "browser-commander": "^0.30.1",
-    "command-stream": "^2.0.2",
+    "browser-commander": "^0.31.2",
+    "command-stream": "^2.4.0",
     "playwright": "^1.63.0",
     "selenium-webdriver": "^4.50.0"
   },

package/src/auth-urls.mjs

@@ -111,6 +111,7 @@ export function runInteractive(command, options) {
       shell: false,
     });
     let legacyLogin = false;
+    let openings = Promise.resolve();
     const stop = options.stopOnLegacyLogin
       ? () => {
           legacyLogin = true;
@@ -119,7 +120,11 @@ export function runInteractive(command, options) {
       : undefined;
     const scan =
       options.onUrl || stop
-        ? authUrlScanner(options.onUrl ?? (() => {}), stop)
+        ? authUrlScanner((url, kind) => {
+            openings = openings.then(() => options.onUrl?.(url, kind));
+            // Observe rejection until the command closes and propagates it.
+            openings.catch(() => {});
+          }, stop)
         : null;
     let stdout = "";
     child.stdout.setEncoding("utf8");
@@ -141,9 +146,20 @@ export function runInteractive(command, options) {
       });
     }
     child.on("error", reject);
-    child.on("close", (code) => {
+    child.on("close", async (code) => {
       scan?.("\n");
-      resolve({ code: code ?? 1, stdout, legacyLogin, approvalExpired });
+      try {
+        await openings;
+        resolve({
+          code: code ?? 1,
+          stdout,
+          stderr: errors,
+          legacyLogin,
+          approvalExpired,
+        });
+      } catch (error) {
+        reject(error);
+      }
     });
   });
 }

package/src/browser.mjs

@@ -74,7 +74,13 @@ export function npmPrefillScript(prefill, submit = false) {
   const config = ${JSON.stringify(prefill)};
   const shouldSubmit = ${JSON.stringify(submit)};
   const normalized = value => (value || '').replace(/\\s+/g, ' ').trim().toLowerCase();
-  const controls = Array.from(document.querySelectorAll('input, select, textarea'));
+  const provider = Array.from(document.querySelectorAll('button, label, [role="radio"]'))
+    .find(element => normalized(element.textContent) === 'github');
+  if (provider) provider.click();
+  const githubForm = document.querySelector('#pending-github-publisher-form, #github-publisher-form');
+  const controls = Array.from((githubForm || document).querySelectorAll('input, select, textarea'))
+    .filter(control => !control.disabled && control.type !== 'hidden'
+      && (githubForm || control.getClientRects().length > 0));
   const setValue = (control, value) => {
     const prototype = control instanceof HTMLSelectElement
       ? HTMLSelectElement.prototype
@@ -88,7 +94,7 @@ export function npmPrefillScript(prefill, submit = false) {
   };
   const textFor = control => {
     const explicit = control.id
-      ? document.querySelector(\`label[for="\${CSS.escape(control.id)}"]\`)?.textContent
+      ? (control.closest('form') || document).querySelector(\`label[for="\${CSS.escape(control.id)}"]\`)?.textContent
       : '';
     return normalized([explicit, control.getAttribute('aria-label'), control.name,
       control.placeholder, control.closest('label')?.textContent].filter(Boolean).join(' '));
@@ -103,19 +109,18 @@ export function npmPrefillScript(prefill, submit = false) {
   const filled = [];
   const used = new Set();
   for (const [labels, value] of values) {
-    if (!value) continue;
+    if (!value && labels[0] !== 'environment') continue;
     const control = controls.find(candidate => !used.has(candidate)
       && labels.some(label => textFor(candidate).includes(label)));
     if (control) { setValue(control, value); used.add(control); filled.push(labels[0]); }
   }
-  const provider = Array.from(document.querySelectorAll('button, label, [role="radio"]'))
-    .find(element => normalized(element.textContent).includes('github'));
-  if (provider && filled.length === 0) provider.click();
   let submitted = false;
-  if (shouldSubmit && filled.length >= 3) {
-    const button = Array.from(document.querySelectorAll('button, input[type="submit"]'))
+  const required = ['organization', 'repository', 'workflow', ...(githubForm?.id.startsWith('pending-') ? ['project'] : [])];
+  const form = githubForm || controls.find(control => /repository|repo/.test(textFor(control)))?.closest('form');
+  if (shouldSubmit && required.every(field => filled.includes(field))) {
+    const button = Array.from((form || document).querySelectorAll('button, input[type="submit"]'))
       .find(candidate => /add|save|configure|submit/.test(normalized(candidate.textContent || candidate.value))
-        && !candidate.disabled);
+        && !candidate.disabled && !candidate.classList.contains('button--disabled'));
     if (button) { button.click(); submitted = true; }
   }
   return { filled, providerSelected: Boolean(provider), submitted };