pubm 0.2.7 → 0.2.8

package/bin/cli.js

@@ -5468,12 +5468,6 @@ import SemVer from "semver";
 import { isCI as isCI2 } from "std-env";
 import { exec as exec9 } from "tinyexec";
 
-// src/utils/cli.ts
-var warningBadge = color.bgYellow(" Warning ");
-function link2(text, url) {
-  return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
-}
-
 // src/ecosystem/rust.ts
 import { readFile, stat as stat2, writeFile } from "node:fs/promises";
 import path8 from "node:path";
@@ -5593,6 +5587,12 @@ var RustEcosystem = class extends Ecosystem {
   }
 };
 
+// src/utils/cli.ts
+var warningBadge = color.bgYellow(" Warning ");
+function link2(text, url) {
+  return `\x1B]8;;${url}\x07${text}\x1B]8;;\x07`;
+}
+
 // src/utils/crate-graph.ts
 async function sortCratesByDependencyOrder(cratePaths) {
   if (cratePaths.length <= 1) return cratePaths;
@@ -6044,7 +6044,7 @@ ${stderr}` : "Failed to run `cargo publish`";
   }
   async dryRunPublish(manifestDir) {
     try {
-      const args = ["publish", "--dry-run", "--no-verify"];
+      const args = ["publish", "--dry-run"];
       if (manifestDir) {
         args.push("--manifest-path", path10.join(manifestDir, "Cargo.toml"));
       }
@@ -6056,6 +6056,20 @@ ${stderr}` : "Failed to run `cargo publish --dry-run`";
       throw new CratesError(message, { cause: error });
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const response = await fetch(
+        `${this.registry}/api/v1/crates/${this.packageName}/${version2}`,
+        { headers: this.headers }
+      );
+      return response.ok;
+    } catch (error) {
+      throw new CratesError(
+        `Failed to check version ${version2} for '${this.packageName}' on crates.io`,
+        { cause: error }
+      );
+    }
+  }
   async isPublished() {
     try {
       const response = await fetch(
@@ -6132,10 +6146,24 @@ function createCratesPublishTask(packagePath) {
   const label = packagePath ? ` (${packagePath})` : "";
   return {
     title: `Publishing to crates.io${label}`,
-    task: async () => {
+    task: async (ctx, task) => {
       const packageName = await getCrateName(packagePath);
       const registry = new CratesRegistry(packageName);
-      await registry.publish(packagePath);
+      if (await registry.isVersionPublished(ctx.version)) {
+        task.title = `[SKIPPED] crates.io${label}: v${ctx.version} already published`;
+        task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+        return task.skip();
+      }
+      try {
+        await registry.publish(packagePath);
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("is already uploaded")) {
+          task.title = `[SKIPPED] crates.io${label}: v${ctx.version} already published`;
+          task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+          return task.skip();
+        }
+        throw error;
+      }
     }
   };
 }
@@ -6306,6 +6334,20 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const [scope, name] = getScopeAndName(this.packageName);
+      const response = await fetch(
+        `${this.registry}/@${scope}/${name}/${version2}`
+      );
+      return response.status === 200;
+    } catch (error) {
+      throw new JsrError(
+        `Failed to fetch \`${this.registry}/${this.packageName}/${version2}\``,
+        { cause: error }
+      );
+    }
+  }
   async hasPermission() {
     return this.client.scopePermission(`${getScope(this.packageName)}`) !== null;
   }
@@ -6580,6 +6622,19 @@ var NpmRegistry = class extends Registry {
       );
     }
   }
+  async isVersionPublished(version2) {
+    try {
+      const response = await fetch(
+        `${this.registry}/${this.packageName}/${version2}`
+      );
+      return response.status === 200;
+    } catch (error) {
+      throw new NpmError(
+        `Failed to fetch \`${this.registry}/${this.packageName}/${version2}\``,
+        { cause: error }
+      );
+    }
+  }
   async userName() {
     try {
       return (await this.npm(["whoami"])).trim();
@@ -6785,20 +6840,30 @@ async function withTokenRetry(registryKey, task, action) {
 }
 var npmDryRunPublishTask = {
   title: "Dry-run npm publish",
-  task: async (_, task) => {
+  task: async (ctx, task) => {
+    const npm = await npmRegistry();
+    if (await npm.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] Dry-run npm publish: v${ctx.version} already published`;
+      task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+      return task.skip();
+    }
     task.output = "Running npm publish --dry-run...";
     await withTokenRetry("npm", task, async () => {
-      const npm = await npmRegistry();
       await npm.dryRunPublish();
     });
   }
 };
 var jsrDryRunPublishTask = {
   title: "Dry-run jsr publish",
-  task: async (_, task) => {
+  task: async (ctx, task) => {
+    const jsr = await jsrRegistry();
+    if (await jsr.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] Dry-run jsr publish: v${ctx.version} already published`;
+      task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+      return task.skip();
+    }
     task.output = "Running jsr publish --dry-run...";
     await withTokenRetry("jsr", task, async () => {
-      const jsr = await jsrRegistry();
       await jsr.dryRunPublish();
     });
   }
@@ -6807,17 +6872,58 @@ async function getCrateName2(packagePath) {
   const eco = new RustEcosystem(packagePath ?? process.cwd());
   return await eco.packageName();
 }
-function createCratesDryRunPublishTask(packagePath) {
+var MISSING_CRATE_PATTERN = /no matching package named `([^`]+)` found/;
+async function findUnpublishedSiblingDeps(packagePath, siblingCrateNames) {
+  const eco = new RustEcosystem(packagePath ?? process.cwd());
+  const deps = await eco.dependencies();
+  const siblingDeps = deps.filter((d2) => siblingCrateNames.includes(d2));
+  const results = await Promise.all(
+    siblingDeps.map(async (name) => {
+      const registry = new CratesRegistry(name);
+      const published = await registry.isPublished();
+      return published ? null : name;
+    })
+  );
+  return results.filter((name) => name !== null);
+}
+function createCratesDryRunPublishTask(packagePath, siblingCrateNames) {
   const label = packagePath ? ` (${packagePath})` : "";
   return {
     title: `Dry-run crates.io publish${label}`,
-    task: async (_, task) => {
+    task: async (ctx, task) => {
+      const packageName = await getCrateName2(packagePath);
+      const registry = new CratesRegistry(packageName);
+      if (await registry.isVersionPublished(ctx.version)) {
+        task.title = `[SKIPPED] Dry-run crates.io publish${label}: v${ctx.version} already published`;
+        task.output = `\u26A0 ${packageName}@${ctx.version} is already published on crates.io`;
+        return task.skip();
+      }
+      if (siblingCrateNames?.length) {
+        const unpublished = await findUnpublishedSiblingDeps(
+          packagePath,
+          siblingCrateNames
+        );
+        if (unpublished.length > 0) {
+          task.title = `Dry-run crates.io publish${label} [skipped: sibling crate \`${unpublished.join("`, `")}\` not yet published]`;
+          return;
+        }
+      }
       task.output = "Running cargo publish --dry-run...";
-      await withTokenRetry("crates", task, async () => {
-        const packageName = await getCrateName2(packagePath);
-        const registry = new CratesRegistry(packageName);
-        await registry.dryRunPublish(packagePath);
-      });
+      try {
+        await withTokenRetry("crates", task, async () => {
+          const packageName2 = await getCrateName2(packagePath);
+          const registry2 = new CratesRegistry(packageName2);
+          await registry2.dryRunPublish(packagePath);
+        });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const match = message.match(MISSING_CRATE_PATTERN);
+        if (match && siblingCrateNames?.includes(match[1])) {
+          task.title = `Dry-run crates.io publish${label} [skipped: sibling crate \`${match[1]}\` not yet published]`;
+          return;
+        }
+        throw error;
+      }
     }
   };
 }
@@ -6998,48 +7104,62 @@ var jsrPublishTasks = {
   title: "Running jsr publish",
   task: async (ctx, task) => {
     const jsr = await jsrRegistry();
+    if (await jsr.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] jsr: v${ctx.version} already published`;
+      task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+      return task.skip();
+    }
     task.output = "Publishing on jsr...";
-    if (!JsrClient.token && !ctx.promptEnabled) {
-      const jsrTokenEnv = process12.env.JSR_TOKEN;
-      if (!jsrTokenEnv) {
-        throw new JsrAvailableError(
-          "JSR_TOKEN not found in the environment variables. Please set the token and try again."
-        );
+    try {
+      if (!JsrClient.token && !ctx.promptEnabled) {
+        const jsrTokenEnv = process12.env.JSR_TOKEN;
+        if (!jsrTokenEnv) {
+          throw new JsrAvailableError(
+            "JSR_TOKEN not found in the environment variables. Please set the token and try again."
+          );
+        }
+        JsrClient.token = jsrTokenEnv;
       }
-      JsrClient.token = jsrTokenEnv;
-    }
-    let result = await jsr.publish();
-    if (!result && jsr.packageCreationUrls) {
-      if (ctx.promptEnabled) {
-        task.title = "Running jsr publish (package creation needed)";
-        const urls = jsr.packageCreationUrls;
-        const maxAttempts = 3;
-        task.output = `Package doesn't exist on jsr. Create it at:
+      let result = await jsr.publish();
+      if (!result && jsr.packageCreationUrls) {
+        if (ctx.promptEnabled) {
+          task.title = "Running jsr publish (package creation needed)";
+          const urls = jsr.packageCreationUrls;
+          const maxAttempts = 3;
+          task.output = `Package doesn't exist on jsr. Create it at:
 ${urls.map((url) => `  ${color.cyan(url)}`).join("\n")}`;
-        open(urls[0]);
-        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-          await task.prompt(ListrEnquirerPromptAdapter3).run({
-            type: "input",
-            message: `Press ${color.bold("enter")} after creating the package on jsr.io${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
-          });
-          result = await jsr.publish();
-          if (result) break;
-          if (attempt < maxAttempts) {
-            task.output = "Package still doesn't exist. Please create it and try again.";
+          open(urls[0]);
+          for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+            await task.prompt(ListrEnquirerPromptAdapter3).run({
+              type: "input",
+              message: `Press ${color.bold("enter")} after creating the package on jsr.io${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
+            });
+            result = await jsr.publish();
+            if (result) break;
+            if (attempt < maxAttempts) {
+              task.output = "Package still doesn't exist. Please create it and try again.";
+            }
           }
-        }
-        if (!result) {
+          if (!result) {
+            throw new JsrAvailableError(
+              "Package creation not completed after 3 attempts."
+            );
+          }
+          task.title = "Running jsr publish (package created)";
+        } else {
           throw new JsrAvailableError(
-            "Package creation not completed after 3 attempts."
+            `Package doesn't exist on jsr. Create it at:
+${jsr.packageCreationUrls.join("\n")}`
           );
         }
-        task.title = "Running jsr publish (package created)";
-      } else {
-        throw new JsrAvailableError(
-          `Package doesn't exist on jsr. Create it at:
-${jsr.packageCreationUrls.join("\n")}`
-        );
       }
+    } catch (error) {
+      if (error instanceof Error && error.message.includes("already published")) {
+        task.title = `[SKIPPED] jsr: v${ctx.version} already published`;
+        task.output = `\u26A0 ${jsr.packageName}@${ctx.version} is already published on jsr`;
+        return task.skip();
+      }
+      throw error;
     }
   }
 };
@@ -7136,44 +7256,62 @@ var npmPublishTasks = {
   skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
+    if (await npm.isVersionPublished(ctx.version)) {
+      task.title = `[SKIPPED] npm: v${ctx.version} already published`;
+      task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+      return task.skip();
+    }
     task.output = "Publishing on npm...";
-    if (ctx.promptEnabled) {
-      let result = await npm.publish();
-      if (!result) {
-        task.title = "Running npm publish (OTP code needed)";
-        const maxAttempts = 3;
-        for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-          result = await npm.publish(
-            await task.prompt(ListrEnquirerPromptAdapter4).run({
-              type: "password",
-              message: `npm OTP code${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
-            })
-          );
-          if (result) break;
-          if (attempt < maxAttempts) {
-            task.output = "2FA failed. Please try again.";
+    try {
+      if (ctx.promptEnabled) {
+        let result = await npm.publish();
+        if (!result) {
+          task.title = "Running npm publish (OTP code needed)";
+          const maxAttempts = 3;
+          for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+            result = await npm.publish(
+              await task.prompt(ListrEnquirerPromptAdapter4).run({
+                type: "password",
+                message: `npm OTP code${attempt > 1 ? ` (attempt ${attempt}/${maxAttempts})` : ""}`
+              })
+            );
+            if (result) break;
+            if (attempt < maxAttempts) {
+              task.output = "2FA failed. Please try again.";
+            }
+          }
+          if (!result) {
+            throw new NpmAvailableError(
+              "OTP verification failed after 3 attempts."
+            );
           }
+          task.title = "Running npm publish (2FA passed)";
+        }
+      } else {
+        const npmTokenEnv = process13.env.NODE_AUTH_TOKEN;
+        if (!npmTokenEnv) {
+          throw new NpmAvailableError(
+            "NODE_AUTH_TOKEN not found in environment variables. Set it in your CI configuration:\n  GitHub Actions: Add NODE_AUTH_TOKEN as a repository secret\n  Other CI: Export NODE_AUTH_TOKEN with your npm access token"
+          );
         }
+        const result = await npm.publishProvenance();
         if (!result) {
           throw new NpmAvailableError(
-            "OTP verification failed after 3 attempts."
+            `In CI environment, publishing with 2FA is not allowed. Please disable 2FA when accessing with a token from https://www.npmjs.com/package/${npm.packageName}/access `
           );
         }
-        task.title = "Running npm publish (2FA passed)";
-      }
-    } else {
-      const npmTokenEnv = process13.env.NODE_AUTH_TOKEN;
-      if (!npmTokenEnv) {
-        throw new NpmAvailableError(
-          "NODE_AUTH_TOKEN not found in environment variables. Set it in your CI configuration:\n  GitHub Actions: Add NODE_AUTH_TOKEN as a repository secret\n  Other CI: Export NODE_AUTH_TOKEN with your npm access token"
-        );
       }
-      const result = await npm.publishProvenance();
-      if (!result) {
-        throw new NpmAvailableError(
-          `In CI environment, publishing with 2FA is not allowed. Please disable 2FA when accessing with a token from https://www.npmjs.com/package/${npm.packageName}/access `
-        );
+    } catch (error) {
+      if (error instanceof Error && (error.message.includes(
+        "cannot publish over the previously published"
+      ) || error.message.includes(
+        "You cannot publish over the previously published"
+      ))) {
+        task.title = `[SKIPPED] npm: v${ctx.version} already published`;
+        task.output = `\u26A0 ${npm.packageName}@${ctx.version} is already published on npm`;
+        return task.skip();
       }
+      throw error;
     }
   }
 };
@@ -7589,10 +7727,15 @@ async function collectDryRunPublishTasks(ctx) {
       return nonCratesTasks;
     }
     const sortedPaths = await sortCratesByDependencyOrder(cratesPaths);
+    const siblingCrateNames = await Promise.all(
+      cratesPaths.map((p) => new RustEcosystem(p).packageName())
+    );
     const sequentialCratesTask = {
       title: "Dry-run crates.io publish (sequential)",
       task: (_ctx, task) => task.newListr(
-        sortedPaths.map((p) => createCratesDryRunPublishTask(p)),
+        sortedPaths.map(
+          (p) => createCratesDryRunPublishTask(p, siblingCrateNames)
+        ),
         { concurrent: false }
       )
     };