pubm 0.1.2 → 0.1.4

package/bin/cli.js

@@ -2416,15 +2416,15 @@ var isCompatibleTerminal = tty && tty.isatty && tty.isatty(1) && env.TERM && !is
 var isCI = "CI" in env && ("GITHUB_ACTIONS" in env || "GITLAB_CI" in env || "CIRCLECI" in env);
 var isColorSupported = !isDisabled && (isForced || isWindows && !isDumbTerminal || isCompatibleTerminal || isCI);
 var replaceClose = (index, string, close, replace, head = string.substring(0, index) + replace, tail = string.substring(index + close.length), next = tail.indexOf(close)) => head + (next < 0 ? tail : replaceClose(next, tail, close, replace));
-var clearBleed = (index, string, open2, close, replace) => index < 0 ? open2 + string + close : open2 + replaceClose(index, string, close, replace) + close;
-var filterEmpty = (open2, close, replace = open2, at = open2.length + 1) => (string) => string || !(string === "" || string === void 0) ? clearBleed(
+var clearBleed = (index, string, open3, close, replace) => index < 0 ? open3 + string + close : open3 + replaceClose(index, string, close, replace) + close;
+var filterEmpty = (open3, close, replace = open3, at = open3.length + 1) => (string) => string || !(string === "" || string === void 0) ? clearBleed(
   ("" + string).indexOf(close, at),
   string,
-  open2,
+  open3,
   close,
   replace
 ) : "";
-var init = (open2, close, replace) => filterEmpty(`\x1B[${open2}m`, `\x1B[${close}m`, replace);
+var init = (open3, close, replace) => filterEmpty(`\x1B[${open3}m`, `\x1B[${close}m`, replace);
 var colors = {
   reset: init(0, 0),
   bold: init(1, 22, "\x1B[22m\x1B[1m"),
@@ -4899,7 +4899,7 @@ var Git = class {
     try {
       return (await this.git(["tag", "-l"])).trim().split("\n").sort(semver.compareIdentifiers);
     } catch (error) {
-      throw new GitError("Failed to run `git config --get user.name`", {
+      throw new GitError("Failed to run `git tag -l`", {
         cause: error
       });
     }
@@ -5160,7 +5160,7 @@ function resolveOptions(options) {
 
 // src/tasks/runner.ts
 import process14 from "node:process";
-import npmCli from "@npmcli/promise-spawn";
+import npmCli2 from "@npmcli/promise-spawn";
 import SemVer from "semver";
 import { isCI as isCI2 } from "std-env";
 import { exec as exec7 } from "tinyexec";
@@ -5182,8 +5182,24 @@ async function rollback() {
   called = true;
   if (rollbacks.length <= 0) return void 0;
   console.log("Rollback...");
-  await Promise.all(rollbacks.map(({ fn, ctx }) => fn(ctx)));
-  console.log("Rollback completed");
+  const results = await Promise.allSettled(
+    rollbacks.map(({ fn, ctx }) => fn(ctx))
+  );
+  const failures = results.filter(
+    (r) => r.status === "rejected"
+  );
+  if (failures.length > 0) {
+    for (const failure of failures) {
+      console.error(
+        `Rollback operation failed: ${failure.reason instanceof Error ? failure.reason.message : failure.reason}`
+      );
+    }
+    console.log(
+      "Rollback completed with errors. Some operations may require manual recovery."
+    );
+  } else {
+    console.log("Rollback completed");
+  }
 }
 
 // src/utils/listr.ts
@@ -5350,20 +5366,34 @@ async function replaceVersion(version2) {
       const packageJsonPath = await findOutFile("package.json");
       if (!packageJsonPath) return void 0;
       const packageJson = (await readFile(packageJsonPath)).toString();
-      await writeFile(
-        packageJsonPath,
-        packageJson.replace(versionRegex, `$1${version2}$2`)
-      );
+      try {
+        await writeFile(
+          packageJsonPath,
+          packageJson.replace(versionRegex, `$1${version2}$2`)
+        );
+      } catch (error) {
+        throw new AbstractError(
+          `Failed to write version to package.json: ${error instanceof Error ? error.message : error}`,
+          { cause: error }
+        );
+      }
       return "package.json";
     })(),
     (async () => {
       const jsrJsonPath = await findOutFile("jsr.json");
       if (!jsrJsonPath) return void 0;
       const jsrJson = (await readFile(jsrJsonPath)).toString();
-      await writeFile(
-        jsrJsonPath,
-        jsrJson.replace(versionRegex, `$1${version2}$2`)
-      );
+      try {
+        await writeFile(
+          jsrJsonPath,
+          jsrJson.replace(versionRegex, `$1${version2}$2`)
+        );
+      } catch (error) {
+        throw new AbstractError(
+          `Failed to write version to jsr.json: ${error instanceof Error ? error.message : error}`,
+          { cause: error }
+        );
+      }
       return "jsr.json";
     })()
   ]);
@@ -5382,6 +5412,7 @@ async function getPackageManager() {
       if (await findOutFile(lockFile2)) return packageManager;
     }
   }
+  console.warn("No lock file found, defaulting to npm.");
   return "npm";
 }
 
@@ -5500,13 +5531,21 @@ var CratesRegistry = class extends Registry {
         { headers: this.headers }
       );
       if (!response.ok) {
-        throw new Error(`Crate '${this.packageName}' not found`);
+        if (response.status === 404) {
+          throw new CratesError(
+            `Crate '${this.packageName}' not found on crates.io`
+          );
+        }
+        throw new CratesError(
+          `crates.io API error (HTTP ${response.status}) for crate '${this.packageName}'`
+        );
       }
       const data = await response.json();
       return data.crate.max_version;
     } catch (error) {
+      if (error instanceof CratesError) throw error;
       throw new CratesError(
-        `Failed to fetch version for crate '${this.packageName}'`,
+        `Cannot reach crates.io to fetch version for '${this.packageName}'`,
         { cause: error }
       );
     }
@@ -5536,6 +5575,12 @@ var CratesRegistry = class extends Registry {
     if (process.env.CARGO_REGISTRY_TOKEN) return true;
     return this.isInstalled();
   }
+  getRequirements() {
+    return {
+      needsPackageScripts: false,
+      requiredManifest: "Cargo.toml"
+    };
+  }
   async isPackageNameAvaliable() {
     try {
       const response = await fetch(
@@ -5543,8 +5588,11 @@ var CratesRegistry = class extends Registry {
         { headers: this.headers }
       );
       return !response.ok;
-    } catch {
-      return true;
+    } catch (error) {
+      throw new CratesError(
+        `Failed to check package name availability on crates.io`,
+        { cause: error }
+      );
     }
   }
 };
@@ -5595,7 +5643,7 @@ import process12 from "node:process";
 import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/jsr.ts
-import { NonZeroExitError, exec as exec4 } from "tinyexec";
+import { exec as exec4, NonZeroExitError } from "tinyexec";
 
 // src/utils/db.ts
 import { createCipheriv, createDecipheriv, createHash } from "node:crypto";
@@ -5621,32 +5669,50 @@ var Db = class {
         mkdirSync5(this.path);
       }
     } catch {
-      mkdirSync5(this.path);
+      try {
+        mkdirSync5(this.path);
+      } catch (error) {
+        throw new Error(
+          `Failed to create token storage directory at '${this.path}': ${error instanceof Error ? error.message : error}`
+        );
+      }
     }
   }
   set(field, value) {
-    writeFileSync4(
-      path8.resolve(this.path, Buffer.from(e(field, field)).toString("base64")),
-      Buffer.from(e(`${value}`, field)),
-      { encoding: "binary" }
-    );
+    try {
+      writeFileSync4(
+        path8.resolve(
+          this.path,
+          Buffer.from(e(field, field)).toString("base64")
+        ),
+        Buffer.from(e(`${value}`, field)),
+        { encoding: "binary" }
+      );
+    } catch (error) {
+      throw new Error(
+        `Failed to save token for '${field}': ${error instanceof Error ? error.message : error}`
+      );
+    }
   }
   get(field) {
+    const filePath = path8.resolve(
+      this.path,
+      Buffer.from(e(field, field)).toString("base64")
+    );
+    let raw;
     try {
-      return d(
-        Buffer.from(
-          readFileSync3(
-            path8.resolve(
-              this.path,
-              Buffer.from(e(field, field)).toString("base64")
-            )
-          )
-        ).toString(),
-        field
-      );
+      raw = readFileSync3(filePath);
     } catch {
       return null;
     }
+    try {
+      return d(Buffer.from(raw).toString(), field);
+    } catch {
+      console.warn(
+        `Stored token for '${field}' appears corrupted. It will be re-requested.`
+      );
+      return null;
+    }
   }
 };
 
@@ -5660,9 +5726,12 @@ function getScope(packageName) {
 }
 function getScopeAndName(packageName) {
   const matches = packageName.match(/^@([a-zA-Z0-9]+)\/([a-zA-Z0-9]+)$/);
-  const scope = matches?.[1];
-  const name = matches?.[2];
-  return [`${scope}`, `${name}`];
+  if (!matches) {
+    throw new Error(
+      `Invalid scoped package name: '${packageName}'. Expected format: @scope/name`
+    );
+  }
+  return [matches[1], matches[2]];
 }
 var scopedPackagePattern = /^(?:@([^/]+?)[/])?([^/]+?)$/;
 var blacklist = ["node_modules", "favicon.ico"];
@@ -5781,6 +5850,12 @@ ${stderr}` : ""}`,
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
+  getRequirements() {
+    return {
+      needsPackageScripts: false,
+      requiredManifest: "jsr.json"
+    };
+  }
 };
 var _JsrClient = class _JsrClient {
   constructor(apiEndpoint) {
@@ -5801,6 +5876,9 @@ var _JsrClient = class _JsrClient {
     try {
       const response = await this.fetch("/user");
       if (response.status === 401) return null;
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
       return await response.json();
     } catch (error) {
       throw new JsrError(`Failed to fetch \`${this.apiEndpoint}/user\``, {
@@ -5812,6 +5890,9 @@ var _JsrClient = class _JsrClient {
     try {
       const response = await this.fetch(`/user/member/${scope}`);
       if (response.status === 401) return null;
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
       return await response.json();
     } catch (error) {
       throw new JsrError(
@@ -5826,9 +5907,14 @@ var _JsrClient = class _JsrClient {
     try {
       const response = await this.fetch("/user/scopes");
       if (response.status === 401) return [];
-      return (await response.json()).map(
-        ({ scope }) => scope
-      );
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
+      const body = await response.json();
+      if (!Array.isArray(body)) {
+        throw new Error(`Expected array response but got ${typeof body}`);
+      }
+      return body.map(({ scope }) => scope);
     } catch (error) {
       throw new JsrError(
         `Failed to fetch \`${this.apiEndpoint}/user/scopes\``,
@@ -5842,10 +5928,17 @@ var _JsrClient = class _JsrClient {
     const [scope, name] = getScopeAndName(packageName);
     try {
       const response = await this.fetch(`/scopes/${scope}/packages/${name}`);
+      if (response.status === 404) return null;
+      if (!response.ok) {
+        throw new JsrError(
+          `JSR API error (HTTP ${response.status}) for package '${packageName}'`
+        );
+      }
       return await response.json();
     } catch (error) {
+      if (error instanceof JsrError) throw error;
       throw new JsrError(
-        `Failed to fetch \`${this.apiEndpoint}/user/scopes\``,
+        `Failed to fetch \`${this.apiEndpoint}/scopes/${scope}/packages/${name}\``,
         {
           cause: error
         }
@@ -5858,8 +5951,18 @@ var _JsrClient = class _JsrClient {
         method: "POST",
         body: JSON.stringify({ scope })
       });
-      return response.status === 200 || response.status === 201;
+      if (response.status === 200 || response.status === 201) return true;
+      let detail = "";
+      try {
+        const body = await response.json();
+        detail = body.message || body.error || JSON.stringify(body);
+      } catch {
+      }
+      throw new JsrError(
+        `Failed to create scope '${scope}': HTTP ${response.status}${detail ? ` \u2014 ${detail}` : ""}`
+      );
     } catch (error) {
+      if (error instanceof JsrError) throw error;
       throw new JsrError(`Failed to fetch \`${this.apiEndpoint}/scopes\``, {
         cause: error
       });
@@ -5870,8 +5973,18 @@ var _JsrClient = class _JsrClient {
       const response = await this.fetch(`/scopes/${scope}`, {
         method: "DELETE"
       });
-      return response.status === 200 || response.status === 204;
+      if (response.status === 200 || response.status === 204) return true;
+      let detail = "";
+      try {
+        const body = await response.json();
+        detail = body.message || body.error || JSON.stringify(body);
+      } catch {
+      }
+      throw new JsrError(
+        `Failed to delete scope '${scope}': HTTP ${response.status}${detail ? ` \u2014 ${detail}` : ""}`
+      );
     } catch (error) {
+      if (error instanceof JsrError) throw error;
       throw new JsrError(
         `Failed to fetch \`${this.apiEndpoint}/scopes/${scope}\``,
         {
@@ -5887,8 +6000,18 @@ var _JsrClient = class _JsrClient {
         method: "POST",
         body: JSON.stringify({ package: name })
       });
-      return response.status === 200 || response.status === 201;
+      if (response.status === 200 || response.status === 201) return true;
+      let detail = "";
+      try {
+        const body = await response.json();
+        detail = body.message || body.error || JSON.stringify(body);
+      } catch {
+      }
+      throw new JsrError(
+        `Failed to create package '${packageName}': HTTP ${response.status}${detail ? ` \u2014 ${detail}` : ""}`
+      );
     } catch (error) {
+      if (error instanceof JsrError) throw error;
       throw new JsrError(
         `Failed to fetch \`${this.apiEndpoint}/scopes/${scope}/packages\``,
         {
@@ -5903,8 +6026,18 @@ var _JsrClient = class _JsrClient {
       const response = await this.fetch(`/scopes/${scope}/packages/${name}`, {
         method: "DELETE"
       });
-      return response.status === 200 || response.status === 204;
+      if (response.status === 200 || response.status === 204) return true;
+      let detail = "";
+      try {
+        const body = await response.json();
+        detail = body.message || body.error || JSON.stringify(body);
+      } catch {
+      }
+      throw new JsrError(
+        `Failed to delete package '${packageName}': HTTP ${response.status}${detail ? ` \u2014 ${detail}` : ""}`
+      );
     } catch (error) {
+      if (error instanceof JsrError) throw error;
       throw new JsrError(
         `Failed to fetch \`${this.apiEndpoint}/scopes/${scope}/packages/${name}\``,
         {
@@ -5916,6 +6049,9 @@ var _JsrClient = class _JsrClient {
   async searchPackage(query) {
     try {
       const response = await this.fetch(`/packages?query=${query}`);
+      if (!response.ok) {
+        throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+      }
       return await response.json();
     } catch (error) {
       throw new JsrError(
@@ -5935,7 +6071,7 @@ async function jsrRegistry() {
 }
 
 // src/registry/npm.ts
-import { NonZeroExitError as NonZeroExitError2, exec as exec5 } from "tinyexec";
+import { exec as exec5, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 var NpmError = class extends AbstractError {
   constructor() {
     super(...arguments);
@@ -5992,7 +6128,7 @@ var NpmRegistry = class extends Registry {
       await this.npm(["whoami"]);
       return true;
     } catch (error) {
-      if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("ENEEDAUTH")) {
+      if (error instanceof NonZeroExitError2) {
         return false;
       }
       throw new NpmError("Failed to run `npm whoami`", { cause: error });
@@ -6000,16 +6136,22 @@ var NpmRegistry = class extends Registry {
   }
   async collaborators() {
     try {
-      return JSON.parse(
-        await this.npm([
-          "access",
-          "list",
-          "collaborators",
-          this.packageName,
-          "--json"
-        ])
-      );
+      const output = await this.npm([
+        "access",
+        "list",
+        "collaborators",
+        this.packageName,
+        "--json"
+      ]);
+      try {
+        return JSON.parse(output);
+      } catch {
+        throw new NpmError(
+          `Unexpected response from npm registry for collaborators of '${this.packageName}'`
+        );
+      }
     } catch (error) {
+      if (error instanceof NpmError) throw error;
       throw new NpmError(
         `Failed to run \`npm access list collaborators ${this.packageName} --json\``,
         { cause: error }
@@ -6023,12 +6165,21 @@ var NpmRegistry = class extends Registry {
   }
   async distTags() {
     try {
-      return Object.keys(
-        JSON.parse(
-          await this.npm(["view", this.packageName, "dist-tags", "--json"])
-        )
-      );
+      const output = await this.npm([
+        "view",
+        this.packageName,
+        "dist-tags",
+        "--json"
+      ]);
+      try {
+        return Object.keys(JSON.parse(output));
+      } catch {
+        throw new NpmError(
+          `Unexpected response from npm registry for dist-tags of '${this.packageName}'`
+        );
+      }
     } catch (error) {
+      if (error instanceof NpmError) throw error;
       throw new NpmError(
         `Failed to run \`npm view ${this.packageName} dist-tags --json\``,
         { cause: error }
@@ -6058,12 +6209,7 @@ var NpmRegistry = class extends Registry {
       if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
-      throw new NpmError(
-        "Failed to run `npm publish --provenance --access public`",
-        {
-          cause: error
-        }
-      );
+      throw this.classifyPublishError(error);
     }
   }
   async publish(otp) {
@@ -6075,14 +6221,39 @@ var NpmRegistry = class extends Registry {
       if (error instanceof NonZeroExitError2 && error.output?.stderr.includes("EOTP")) {
         return false;
       }
-      throw new NpmError(`Failed to run \`npm ${args.join(" ")}\``, {
-        cause: error
-      });
+      throw this.classifyPublishError(error);
     }
   }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
+  getRequirements() {
+    return {
+      needsPackageScripts: true,
+      requiredManifest: "package.json"
+    };
+  }
+  classifyPublishError(error) {
+    if (error instanceof NonZeroExitError2) {
+      const stderr = error.output?.stderr ?? "";
+      if (stderr.includes("EOTP")) {
+        return new NpmError("OTP required for publishing", { cause: error });
+      }
+      if (stderr.includes("403") || stderr.includes("Forbidden")) {
+        return new NpmError(
+          "Permission denied (403 Forbidden). Check your npm access token permissions.",
+          { cause: error }
+        );
+      }
+      if (stderr.includes("429") || stderr.includes("Too Many Requests")) {
+        return new NpmError(
+          "Rate limited by npm registry. Please wait and try again.",
+          { cause: error }
+        );
+      }
+    }
+    return new NpmError("Failed to publish to npm", { cause: error });
+  }
 };
 async function npmRegistry() {
   const packageJson = await getPackageJson();
@@ -6114,17 +6285,34 @@ var jsrAvailableCheckTasks = {
     if (!JsrClient.token) {
       task.output = "Retrieving jsr API token";
       if (ctx.promptEnabled) {
-        while (true) {
+        const maxAttempts = 3;
+        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
           JsrClient.token = await task.prompt(ListrEnquirerPromptAdapter).run({
             type: "password",
-            message: `Please enter the jsr ${color.bold("API token")}`,
+            message: `Please enter the jsr ${color.bold("API token")}${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`,
             footer: `
 Generate a token from ${color.bold(link2("jsr.io", "https://jsr.io/account/tokens/create/"))}. ${color.red("You should select")} ${color.bold("'Interact with the JSR API'")}.`
           });
           try {
             if (await jsr.client.user()) break;
-            task.output = "The jsr API token is invalid. Please re-enter a valid token.";
-          } catch {
+            if (attempt < maxAttempts) {
+              task.output = "The jsr API token is invalid. Please re-enter a valid token.";
+            }
+          } catch (error) {
+            if (error instanceof Error && (error.message.includes("fetch") || error.message.includes("network") || error.message.includes("ENOTFOUND"))) {
+              throw new JsrAvailableError(
+                "JSR API is unreachable. Check your network connection.",
+                { cause: error }
+              );
+            }
+            if (attempt < maxAttempts) {
+              task.output = "The jsr API token is invalid. Please re-enter a valid token.";
+            }
+          }
+          if (attempt === maxAttempts) {
+            throw new JsrAvailableError(
+              "JSR token verification failed after 3 attempts."
+            );
           }
         }
       } else {
@@ -6147,7 +6335,7 @@ Generate a token from ${color.bold(link2("jsr.io", "https://jsr.io/account/token
           scopes.map(
             (scope2) => jsr.client.package(`@${scope2}/${jsr.packageName}`)
           )
-        )).filter((v) => v);
+        )).filter((v) => v !== null);
         if (searchResults.length > 0) {
           jsrName = await task.prompt(ListrEnquirerPromptAdapter).run({
             type: "select",
@@ -6258,8 +6446,11 @@ var jsrPublishTasks = {
 };
 
 // src/tasks/npm.ts
+import { spawn } from "node:child_process";
 import process13 from "node:process";
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter2 } from "@listr2/prompt-adapter-enquirer";
+import npmCli from "@npmcli/promise-spawn";
+var { open } = npmCli;
 var NpmAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
     super(message, { cause });
@@ -6270,12 +6461,55 @@ var NpmAvailableError = class extends AbstractError {
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
   skip: (ctx) => !!ctx.preview,
-  task: async () => {
+  task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
-      throw new NpmAvailableError(
-        "You are not logged in. Please log in first using `npm login`."
-      );
+      if (ctx.promptEnabled) {
+        try {
+          task.output = "Launching npm login...";
+          await new Promise((resolve, reject) => {
+            const child = spawn("npm", ["login"], {
+              stdio: ["pipe", "pipe", "pipe"]
+            });
+            let opened = false;
+            const onData = (data) => {
+              const text = data.toString();
+              const urlMatch = text.match(
+                /https:\/\/www\.npmjs\.com\/login[^\s]*/
+              );
+              if (urlMatch && !opened) {
+                opened = true;
+                task.output = `Login at: ${color.cyan(urlMatch[0])}`;
+                open(urlMatch[0]);
+                child.stdin?.write("\n");
+              }
+            };
+            child.stdout?.on("data", onData);
+            child.stderr?.on("data", onData);
+            child.on(
+              "close",
+              (code) => code === 0 ? resolve() : reject(
+                new Error(`npm login exited with code ${code}`)
+              )
+            );
+            child.on("error", reject);
+          });
+        } catch (error) {
+          throw new NpmAvailableError(
+            "npm login failed. Please run `npm login` manually and try again.",
+            { cause: error }
+          );
+        }
+        if (!await npm.isLoggedIn()) {
+          throw new NpmAvailableError(
+            "Still not logged in after npm login. Please verify your credentials."
+          );
+        }
+      } else {
+        throw new NpmAvailableError(
+          "Not logged in to npm. Set NODE_AUTH_TOKEN in your CI environment. For GitHub Actions, add it as a repository secret."
+        );
+      }
     }
     if (await npm.isPublished()) {
       if (!await npm.hasPermission()) {
@@ -6303,24 +6537,31 @@ var npmPublishTasks = {
       let result = await npm.publish();
       if (!result) {
         task.title = "Running npm publish (OTP code needed)";
-        while (!result) {
+        const maxAttempts = 3;
+        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
           result = await npm.publish(
             await task.prompt(ListrEnquirerPromptAdapter2).run({
               type: "password",
-              message: "npm OTP code"
+              message: `npm OTP code${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
             })
           );
-          if (!result) {
-            task.output = "2FA failed";
+          if (result) break;
+          if (attempt < maxAttempts) {
+            task.output = "2FA failed. Please try again.";
           }
         }
+        if (!result) {
+          throw new NpmAvailableError(
+            "OTP verification failed after 3 attempts."
+          );
+        }
         task.title = "Running npm publish (2FA passed)";
       }
     } else {
       const npmTokenEnv = process13.env.NODE_AUTH_TOKEN;
       if (!npmTokenEnv) {
         throw new NpmAvailableError(
-          "NODE_AUTH_TOKEN not found in the environment variables. Please set the token and try again."
+          "NODE_AUTH_TOKEN not found in environment variables. Set it in your CI configuration:\n  GitHub Actions: Add NODE_AUTH_TOKEN as a repository secret\n  Other CI: Export NODE_AUTH_TOKEN with your npm access token"
         );
       }
       const result = await npm.publishProvenance();
@@ -6426,6 +6667,7 @@ var prerequisitesCheckTask = (options) => {
               );
             }
             ctx.cleanWorkingTree = false;
+            return;
           }
           ctx.cleanWorkingTree = true;
         }
@@ -6526,6 +6768,16 @@ async function validateEngineVersion(engine, version2) {
 }
 
 // src/tasks/required-conditions-check.ts
+var registryRequirementsMap = {
+  npm: { needsPackageScripts: true },
+  jsr: { needsPackageScripts: false },
+  crates: { needsPackageScripts: false }
+};
+function needsPackageScripts(registries) {
+  return registries.some(
+    (r) => registryRequirementsMap[r]?.needsPackageScripts ?? true
+  );
+}
 var RequiredConditionCheckError = class extends AbstractError {
   constructor(message, { cause } = {}) {
     super(message, { cause });
@@ -6601,7 +6853,7 @@ var requiredConditionsCheckTask = (options) => createListr({
       },
       {
         title: "Checking if test and build scripts exist",
-        skip: (ctx) => ctx.jsrOnly,
+        skip: (ctx) => !needsPackageScripts(ctx.registries),
         task: async (ctx) => {
           const { scripts } = await getPackageJson();
           const errors = [];
@@ -6655,14 +6907,12 @@ var requiredConditionsCheckTask = (options) => createListr({
 });
 
 // src/tasks/runner.ts
-var { open } = npmCli;
+var { open: open2 } = npmCli2;
 var { prerelease } = SemVer;
 async function run(options) {
   const ctx = {
     ...options,
-    promptEnabled: !isCI2 && process14.stdin.isTTY,
-    npmOnly: options.registries.every((registry) => registry !== "jsr"),
-    jsrOnly: options.registries.every((registry) => registry === "jsr")
+    promptEnabled: !isCI2 && process14.stdin.isTTY
   };
   try {
     if (options.contents) process14.chdir(options.contents);
@@ -6698,9 +6948,16 @@ async function run(options) {
           title: "Running tests",
           task: async (ctx2) => {
             const packageManager = await getPackageManager();
-            await exec7(packageManager, ["run", ctx2.testScript], {
-              throwOnError: true
-            });
+            try {
+              await exec7(packageManager, ["run", ctx2.testScript], {
+                throwOnError: true
+              });
+            } catch (error) {
+              throw new AbstractError(
+                `Test script '${ctx2.testScript}' failed. Run \`${packageManager} run ${ctx2.testScript}\` locally to see full output.`,
+                { cause: error }
+              );
+            }
           }
         },
         {
@@ -6714,7 +6971,7 @@ async function run(options) {
               });
             } catch (error) {
               throw new AbstractError(
-                `Failed to run \`${packageManager} run ${ctx2.buildScript}\``,
+                `Build script '${ctx2.buildScript}' failed. Run \`${packageManager} run ${ctx2.buildScript}\` locally to see full output.`,
                 { cause: error }
               );
             }
@@ -6729,15 +6986,27 @@ async function run(options) {
             let commited = false;
             addRollback(async () => {
               if (tagCreated) {
-                console.log("Deleting tag...");
-                await git.deleteTag(`${await git.latestTag()}`);
+                try {
+                  console.log("Deleting tag...");
+                  await git.deleteTag(`${await git.latestTag()}`);
+                } catch (error) {
+                  console.error(
+                    `Failed to delete tag: ${error instanceof Error ? error.message : error}`
+                  );
+                }
               }
               if (commited) {
-                console.log("Reset commits...");
-                await git.reset();
-                await git.stash();
-                await git.reset("HEAD^", "--hard");
-                await git.popStash();
+                try {
+                  console.log("Reset commits...");
+                  await git.reset();
+                  await git.stash();
+                  await git.reset("HEAD^", "--hard");
+                  await git.popStash();
+                } catch (error) {
+                  console.error(
+                    `Failed to reset commits: ${error instanceof Error ? error.message : error}`
+                  );
+                }
               }
             }, ctx2);
             await git.reset();
@@ -6810,7 +7079,7 @@ ${repositoryUrl}/compare/${lastRev}...${latestTag}`;
             );
             const linkUrl = link2("Link", releaseDraftUrl.toString());
             task.title += ` ${linkUrl}`;
-            await open(releaseDraftUrl.toString());
+            await open2(releaseDraftUrl.toString());
           }
         }
       ]
@@ -6838,7 +7107,9 @@ import { inc } from "semver";
 import { stat as stat3 } from "node:fs/promises";
 import path9 from "node:path";
 
-// src/monorepo/groups.ts
+// src/monorepo/discover.ts
+import { existsSync as existsSync6, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import path10 from "node:path";
 import micromatch from "micromatch";
 
 // src/monorepo/workspace.ts
@@ -6846,12 +7117,15 @@ import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:f
 import { join } from "node:path";
 import { parse as parse2 } from "yaml";
 
+// src/monorepo/groups.ts
+import micromatch2 from "micromatch";
+
 // src/validate/entry-points.ts
-import { existsSync as existsSync6 } from "node:fs";
-import path10 from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import path11 from "node:path";
 
 // src/validate/extraneous-files.ts
-import micromatch2 from "micromatch";
+import micromatch3 from "micromatch";
 
 // src/index.ts
 async function pubm(options) {
@@ -7096,6 +7370,7 @@ defaultCmd.action(
       );
     } catch (e2) {
       consoleError(e2);
+      process.exitCode = 1;
     }
   }
 );