putitoutthere 0.2.29 → 0.2.31

package/dist/release-packages.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `release_packages` manual-release spec parser.
+ *
+ * The spec is the value of the reusable workflow's `release_packages`
+ * input. It lets a consumer trigger a release of explicitly named
+ * packages without any new code — the motivating case being a
+ * re-release after a putitoutthere bug fix, where the consumer's repo
+ * has no new commits but the packages still need to ship again.
+ *
+ * Grammar:
+ *   spec       = entry *( "," entry )
+ *   entry      = package-name [ "@" version-spec ]
+ *   version-spec = "patch" | "minor" | "major" | semver
+ *
+ * A bare package name defaults to a `patch` bump. `semver` is strict
+ * `X.Y.Z` (see `version.ts`). Whitespace around entries and the comma
+ * separator is tolerated.
+ */
+import type { Bump } from './types.js';
+export interface ReleasePackagesEntry {
+    name: string;
+    /** Set when the entry gave a bump keyword (or a bare name → patch). */
+    bump?: Bump;
+    /** Set when the entry gave an explicit semver. */
+    version?: string;
+}
+/**
+ * Parse a `release_packages` spec into a name→entry map. Returns `null`
+ * when the spec is absent or empty (the caller falls back to normal
+ * change-detected planning). Throws on any malformed entry.
+ */
+export declare function parseReleasePackages(spec: string | undefined): Map<string, ReleasePackagesEntry> | null;
+//# sourceMappingURL=release-packages.d.ts.map

package/dist/release-packages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-packages.d.ts","sourceRoot":"","sources":["../src/release-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,IAAI,CAiD1C"}

package/dist/release-packages.js

@@ -0,0 +1,74 @@
+/**
+ * `release_packages` manual-release spec parser.
+ *
+ * The spec is the value of the reusable workflow's `release_packages`
+ * input. It lets a consumer trigger a release of explicitly named
+ * packages without any new code — the motivating case being a
+ * re-release after a putitoutthere bug fix, where the consumer's repo
+ * has no new commits but the packages still need to ship again.
+ *
+ * Grammar:
+ *   spec       = entry *( "," entry )
+ *   entry      = package-name [ "@" version-spec ]
+ *   version-spec = "patch" | "minor" | "major" | semver
+ *
+ * A bare package name defaults to a `patch` bump. `semver` is strict
+ * `X.Y.Z` (see `version.ts`). Whitespace around entries and the comma
+ * separator is tolerated.
+ */
+import { parseSemver } from './version.js';
+// Same identifier shape the trailer parser and config loader accept.
+const PACKAGE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+const BUMPS = new Set(['patch', 'minor', 'major']);
+/**
+ * Parse a `release_packages` spec into a name→entry map. Returns `null`
+ * when the spec is absent or empty (the caller falls back to normal
+ * change-detected planning). Throws on any malformed entry.
+ */
+export function parseReleasePackages(spec) {
+    if (spec === undefined) {
+        return null;
+    }
+    const trimmed = spec.trim();
+    if (trimmed === '') {
+        return null;
+    }
+    const out = new Map();
+    for (const raw of trimmed.split(',')) {
+        const part = raw.trim();
+        if (part === '') {
+            throw new Error(`release-packages: empty entry in "${spec}" — remove the stray comma`);
+        }
+        const at = part.indexOf('@');
+        const name = at === -1 ? part : part.slice(0, at);
+        const versionSpec = at === -1 ? undefined : part.slice(at + 1).trim();
+        if (!PACKAGE_NAME.test(name)) {
+            throw new Error(`release-packages: invalid package name "${name}"`);
+        }
+        if (out.has(name)) {
+            throw new Error(`release-packages: duplicate package "${name}"`);
+        }
+        if (versionSpec === undefined) {
+            out.set(name, { name, bump: 'patch' });
+            continue;
+        }
+        if (versionSpec === '') {
+            throw new Error(`release-packages: "${name}@" has an empty version spec — ` +
+                `drop the @ for a default patch bump, or give patch|minor|major or X.Y.Z`);
+        }
+        if (BUMPS.has(versionSpec)) {
+            out.set(name, { name, bump: versionSpec });
+            continue;
+        }
+        try {
+            parseSemver(versionSpec);
+        }
+        catch {
+            throw new Error(`release-packages: "${name}@${versionSpec}" — version spec must be ` +
+                `patch, minor, major, or a strict semver (X.Y.Z)`);
+        }
+        out.set(name, { name, version: versionSpec });
+    }
+    return out;
+}
+//# sourceMappingURL=release-packages.js.map

package/dist/release-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-packages.js","sourceRoot":"","sources":["../src/release-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAW3C,qEAAqE;AACrE,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAwB;IAExB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAElC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,4BAA4B,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEtE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,iCAAiC;gBACzD,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAmB,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAmB,EAAE,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,WAAW,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,IAAI,WAAW,2BAA2B;gBAClE,iDAAiD,CACpD,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/resolve-tag-commit.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Pick the commit a backfilled tag should point at.
+ *
+ * piot reads "changed since last release" from a tag's commit, so the
+ * commit matters: tagging an old, already-published version at HEAD would
+ * hide every change made since it actually shipped. Prefer a sibling
+ * package already tagged at the same version — that tag marks the real
+ * release commit (the canonical incident: npm/py tagged `v0.0.1` at the
+ * merge the crate also published from). Fall back to HEAD only when no
+ * sibling tag exists, matching the publish-path auto-heal, which tags the
+ * run's HEAD.
+ *
+ * Issue #410, #403 slice 3.
+ */
+import type { Package } from './config.js';
+export declare function resolveTagCommit(version: string, siblings: readonly Package[], opts: {
+    cwd: string;
+}): {
+    commit: string;
+    source: 'sibling' | 'head';
+};
+//# sourceMappingURL=resolve-tag-commit.d.ts.map

package/dist/resolve-tag-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-tag-commit.d.ts","sourceRoot":"","sources":["../src/resolve-tag-commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAI3C,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAQhD"}

package/dist/resolve-tag-commit.js

@@ -0,0 +1,26 @@
+/**
+ * Pick the commit a backfilled tag should point at.
+ *
+ * piot reads "changed since last release" from a tag's commit, so the
+ * commit matters: tagging an old, already-published version at HEAD would
+ * hide every change made since it actually shipped. Prefer a sibling
+ * package already tagged at the same version — that tag marks the real
+ * release commit (the canonical incident: npm/py tagged `v0.0.1` at the
+ * merge the crate also published from). Fall back to HEAD only when no
+ * sibling tag exists, matching the publish-path auto-heal, which tags the
+ * run's HEAD.
+ *
+ * Issue #410, #403 slice 3.
+ */
+import { headCommit, tagCommit, tagList } from './git.js';
+import { formatTag } from './tag-template.js';
+export function resolveTagCommit(version, siblings, opts) {
+    for (const sib of siblings) {
+        const sibTag = formatTag(sib.tag_format, { name: sib.name, version });
+        if (tagList(sibTag, { cwd: opts.cwd }).length > 0) {
+            return { commit: tagCommit(sibTag, { cwd: opts.cwd }), source: 'sibling' };
+        }
+    }
+    return { commit: headCommit({ cwd: opts.cwd }), source: 'head' };
+}
+//# sourceMappingURL=resolve-tag-commit.js.map

package/dist/resolve-tag-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-tag-commit.js","sourceRoot":"","sources":["../src/resolve-tag-commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAA4B,EAC5B,IAAqB;IAErB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACnE,CAAC"}

package/dist/retry.js

@@ -48,28 +48,34 @@ export async function withRetry(fn, opts = {}) {
     throw lastErr;
 }
 function isRetryable(err) {
-    if (err instanceof AuthError)
+    if (err instanceof AuthError) {
         return false;
-    if (err instanceof TransientError)
+    }
+    if (err instanceof TransientError) {
         return true;
+    }
     // Network-ish error codes used by Node's net/http stack.
     const code = extractProp(err, 'code');
-    if (code === 'ECONNRESET' || code === 'ETIMEDOUT')
+    if (code === 'ECONNRESET' || code === 'ETIMEDOUT') {
         return true;
+    }
     // HTTP-status-tagged errors: retry 5xx and 429.
     const status = extractProp(err, 'status');
     if (typeof status === 'number') {
-        if (status === 429)
+        if (status === 429) {
             return true;
-        if (status >= 500 && status < 600)
+        }
+        if (status >= 500 && status < 600) {
             return true;
+        }
     }
     return false;
 }
 function retryAfterMs(err) {
     const ra = extractProp(err, 'retryAfter');
-    if (typeof ra === 'number' && ra > 0)
+    if (typeof ra === 'number' && ra > 0) {
         return ra * 1000;
+    }
     return 0;
 }
 function extractProp(err, key) {
@@ -80,8 +86,9 @@ function extractProp(err, key) {
 }
 function jitterOffset(baseDelay, fraction) {
     /* v8 ignore next -- default jitter is 0.25; the <=0 guard isn't exercised */
-    if (fraction <= 0)
+    if (fraction <= 0) {
         return 0;
+    }
     // ±fraction of the base delay.
     const amp = baseDelay * fraction;
     return (Math.random() * 2 - 1) * amp;

package/dist/retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AASvD,MAAM,QAAQ,GAA2B;IACvC,OAAO,EAAE,CAAC;IACV,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,OAAqB,EAAE;IAEvB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IAEjF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAgB,CAAC;IACrB,OAAO,OAAO,GAAG,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,GAAG,YAAY,cAAc;QAAE,OAAO,IAAI,CAAC;IAC/C,yDAAyD;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC/D,gDAAgD;IAChD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,GAAW;IAC5C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACjD,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAgB;IACvD,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,+BAA+B;IAC/B,MAAM,GAAG,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC"}
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AASvD,MAAM,QAAQ,GAA2B;IACvC,OAAO,EAAE,CAAC;IACV,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,OAAqB,EAAE;IAEvB,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IAEjF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAgB,CAAC;IACrB,OAAO,OAAO,GAAG,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,OAAO,EAAE,CAAC;YACV,IAAI,OAAO,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;IAC7C,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACjD,yDAAyD;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACjE,gDAAgD;IAChD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QAClC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAAA,OAAO,EAAE,GAAG,IAAI,CAAC;IAAA,CAAC;IACzD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,GAAW;IAC5C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACjD,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAgB;IACvD,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAAA,OAAO,CAAC,CAAC;IAAA,CAAC;IAC9B,+BAA+B;IAC/B,MAAM,GAAG,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/status-classify.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Classify one package's drift state from its {latest tag version,
+ * registry latest}. Pure — the registry/tag reads happen in
+ * `computeStatus`. `DRIFT_STATES` is the subset a `status --check` gate
+ * fails on.
+ *
+ * Issue #403.
+ */
+import type { StatusState } from './status-types.js';
+/** States a `status --check` gate treats as failing drift. */
+export declare const DRIFT_STATES: ReadonlySet<StatusState>;
+/**
+ * `registryUnreachable` short-circuits to a non-drift "unreachable"
+ * state so a registry blip never trips a `--check` gate.
+ */
+export declare function classify(tagVersion: string | null, registry: string | null, registryUnreachable: boolean): StatusState;
+//# sourceMappingURL=status-classify.d.ts.map

package/dist/status-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-classify.d.ts","sourceRoot":"","sources":["../src/status-classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,8DAA8D;AAC9D,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,WAAW,CAIhD,CAAC;AAEH;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,mBAAmB,EAAE,OAAO,GAC3B,WAAW,CAOb"}

package/dist/status-classify.js

@@ -0,0 +1,37 @@
+/**
+ * Classify one package's drift state from its {latest tag version,
+ * registry latest}. Pure — the registry/tag reads happen in
+ * `computeStatus`. `DRIFT_STATES` is the subset a `status --check` gate
+ * fails on.
+ *
+ * Issue #403.
+ */
+/** States a `status --check` gate treats as failing drift. */
+export const DRIFT_STATES = new Set([
+    'published, untagged',
+    'tagged, unpublished',
+    'version mismatch',
+]);
+/**
+ * `registryUnreachable` short-circuits to a non-drift "unreachable"
+ * state so a registry blip never trips a `--check` gate.
+ */
+export function classify(tagVersion, registry, registryUnreachable) {
+    if (registryUnreachable) {
+        return 'registry unreachable';
+    }
+    if (tagVersion === null && registry === null) {
+        return 'unreleased';
+    }
+    if (tagVersion === null) {
+        return 'published, untagged';
+    }
+    if (registry === null) {
+        return 'tagged, unpublished';
+    }
+    if (tagVersion === registry) {
+        return 'in sync';
+    }
+    return 'version mismatch';
+}
+//# sourceMappingURL=status-classify.js.map

package/dist/status-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-classify.js","sourceRoot":"","sources":["../src/status-classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAA6B,IAAI,GAAG,CAAc;IACzE,qBAAqB;IACrB,qBAAqB;IACrB,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,UAAyB,EACzB,QAAuB,EACvB,mBAA4B;IAE5B,IAAI,mBAAmB,EAAE,CAAC;QAAA,OAAO,sBAAsB,CAAC;IAAA,CAAC;IACzD,IAAI,UAAU,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,YAAY,CAAC;IAAA,CAAC;IACpE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,qBAAqB,CAAC;IAAA,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,qBAAqB,CAAC;IAAA,CAAC;IACtD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAAA,OAAO,SAAS,CAAC;IAAA,CAAC;IAChD,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/status-format.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Single-line, monospace-friendly render of one status row, used by the
+ * CLI's non-`--json` output.
+ *
+ * Issue #403.
+ */
+import type { StatusRow } from './status-types.js';
+export declare function formatStatusRow(row: StatusRow): string;
+//# sourceMappingURL=status-format.d.ts.map

package/dist/status-format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-format.d.ts","sourceRoot":"","sources":["../src/status-format.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAOtD"}

package/dist/status-format.js

@@ -0,0 +1,19 @@
+/**
+ * Single-line, monospace-friendly render of one status row, used by the
+ * CLI's non-`--json` output.
+ *
+ * Issue #403.
+ */
+export function formatStatusRow(row) {
+    const tagCol = row.tagVersion ?? '—';
+    const registryCol = row.registryUnreachable ? 'unreachable' : (row.registry ?? '—');
+    let mark = '✓';
+    if (row.registryUnreachable) {
+        mark = '?';
+    }
+    if (row.drift) {
+        mark = '⚠';
+    }
+    return `${row.package}  tag=${tagCol}  registry=${registryCol}  ${mark} ${row.state}`;
+}
+//# sourceMappingURL=status-format.js.map

package/dist/status-format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-format.js","sourceRoot":"","sources":["../src/status-format.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,eAAe,CAAC,GAAc;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;IACrC,MAAM,WAAW,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IACpF,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAAA,IAAI,GAAG,GAAG,CAAC;IAAA,CAAC;IAC1C,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAAA,IAAI,GAAG,GAAG,CAAC;IAAA,CAAC;IAC5B,OAAO,GAAG,GAAG,CAAC,OAAO,SAAS,MAAM,cAAc,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;AACxF,CAAC"}

package/dist/status-types.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `status` shared types: the drift-state vocabulary plus the row and
+ * options shapes the status command and its renderer pass around.
+ *
+ * Issue #403.
+ */
+import type { Handler, Kind } from './types.js';
+export type StatusState = 'in sync' | 'unreleased' | 'published, untagged' | 'tagged, unpublished' | 'version mismatch' | 'registry unreachable';
+export interface StatusRow {
+    package: string;
+    kind: Kind;
+    /** Highest-semver git tag for this package, or null when none exists. */
+    tag: string | null;
+    /** Version parsed out of `tag`, or null when there is no tag. */
+    tagVersion: string | null;
+    /** Registry's latest published version, or null when never published. */
+    registry: string | null;
+    /** True when the registry could not be reached (rendered, not gated). */
+    registryUnreachable: boolean;
+    state: StatusState;
+    /** Convenience: does `state` represent drift a `--check` gate fails on? */
+    drift: boolean;
+}
+export interface StatusOptions {
+    cwd: string;
+    /** Defaults to `${cwd}/putitoutthere.toml`. */
+    configPath?: string;
+    /** Override for tests. Defaults to the real per-kind dispatcher. */
+    handlerFor?: (kind: Kind) => Handler;
+}
+//# sourceMappingURL=status-types.d.ts.map

package/dist/status-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-types.d.ts","sourceRoot":"","sources":["../src/status-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,YAAY,GACZ,qBAAqB,GACrB,qBAAqB,GACrB,kBAAkB,GAClB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,IAAI,CAAC;IACX,yEAAyE;IACzE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,iEAAiE;IACjE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,2EAA2E;IAC3E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;CACtC"}

package/dist/status-types.js

@@ -0,0 +1,8 @@
+/**
+ * `status` shared types: the drift-state vocabulary plus the row and
+ * options shapes the status command and its renderer pass around.
+ *
+ * Issue #403.
+ */
+export {};
+//# sourceMappingURL=status-types.js.map

package/dist/status-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-types.js","sourceRoot":"","sources":["../src/status-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/status.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `putitoutthere status` — read-only registry-vs-tag drift report.
+ *
+ * The registry is the source of truth; git tags are a cache. For each
+ * configured package this reconciles the latest git tag (via the same
+ * `lastTag` resolver the planner and the publish path use) against the
+ * registry's latest published version (via the same per-kind handler the
+ * publish path dispatches through), and classifies any drift. No auth,
+ * no side effects — git + public registry metadata only.
+ *
+ * Shared engine, no parallel logic (design-commitments #7): a thin
+ * reader over `lastTag` + `handler.latestVersion` + `classify`. It
+ * carries no copy of the tag, version, or registry logic the release
+ * path owns, so `status` and a real release can never disagree.
+ *
+ * Issue #403, phase 1. v1 reports the drift-defining pair only — latest
+ * tag vs registry latest; the `manifest` and `publisher` columns from
+ * the issue mockup are later enrichments. The drift taxonomy lives in
+ * `status-classify.ts`; rendering in `status-format.ts`.
+ */
+import type { StatusOptions, StatusRow } from './status-types.js';
+/**
+ * Reconcile every configured package's latest tag against its registry
+ * latest. Read-only; makes one unauthenticated registry request per
+ * package and never mutates anything.
+ */
+export declare function computeStatus(opts: StatusOptions): Promise<StatusRow[]>;
+//# sourceMappingURL=status.d.ts.map

package/dist/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAElE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAwC7E"}

package/dist/status.js

@@ -0,0 +1,72 @@
+/**
+ * `putitoutthere status` — read-only registry-vs-tag drift report.
+ *
+ * The registry is the source of truth; git tags are a cache. For each
+ * configured package this reconciles the latest git tag (via the same
+ * `lastTag` resolver the planner and the publish path use) against the
+ * registry's latest published version (via the same per-kind handler the
+ * publish path dispatches through), and classifies any drift. No auth,
+ * no side effects — git + public registry metadata only.
+ *
+ * Shared engine, no parallel logic (design-commitments #7): a thin
+ * reader over `lastTag` + `handler.latestVersion` + `classify`. It
+ * carries no copy of the tag, version, or registry logic the release
+ * path owns, so `status` and a real release can never disagree.
+ *
+ * Issue #403, phase 1. v1 reports the drift-defining pair only — latest
+ * tag vs registry latest; the `manifest` and `publisher` columns from
+ * the issue mockup are later enrichments. The drift taxonomy lives in
+ * `status-classify.ts`; rendering in `status-format.ts`.
+ */
+import { join } from 'node:path';
+import { loadConfig } from './config.js';
+import { lastTag } from './git.js';
+import { handlerFor as defaultHandlerFor } from './handlers/index.js';
+import { createLogger } from './log.js';
+import { classify, DRIFT_STATES } from './status-classify.js';
+import { parseTagVersion } from './tag-template.js';
+/**
+ * Reconcile every configured package's latest tag against its registry
+ * latest. Read-only; makes one unauthenticated registry request per
+ * package and never mutates anything.
+ */
+export async function computeStatus(opts) {
+    const cwd = opts.cwd;
+    const cfgPath = opts.configPath ?? join(cwd, 'putitoutthere.toml');
+    const handlerFor = opts.handlerFor ?? defaultHandlerFor;
+    const config = loadConfig(cfgPath);
+    const ctx = {
+        cwd,
+        log: createLogger(),
+        env: process.env,
+        artifacts: { get: () => '', has: () => false },
+    };
+    const rows = [];
+    for (const pkg of config.packages) {
+        const tag = lastTag(pkg.name, pkg.tag_format, { cwd });
+        const tagVersion = tag === null ? null : parseTagVersion(pkg.tag_format, pkg.name, tag);
+        let registry = null;
+        let registryUnreachable = false;
+        try {
+            registry = await handlerFor(pkg.kind).latestVersion(pkg, ctx);
+        }
+        catch {
+            // 5xx / network / timeout / malformed response: a read-only report
+            // surfaces "unreachable" rather than aborting or claiming drift.
+            registryUnreachable = true;
+        }
+        const state = classify(tagVersion, registry, registryUnreachable);
+        rows.push({
+            package: pkg.name,
+            kind: pkg.kind,
+            tag,
+            tagVersion,
+            registry,
+            registryUnreachable,
+            state,
+            drift: DRIFT_STATES.has(state),
+        });
+    }
+    return rows;
+}
+//# sourceMappingURL=status.js.map

package/dist/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,GAAG,GAAQ;QACf,GAAG;QACH,GAAG,EAAE,YAAY,EAAE;QACnB,GAAG,EAAE,OAAO,CAAC,GAA6B;QAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE;KAC/C,CAAC;IAEF,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAExF,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,iEAAiE;YACjE,mBAAmB,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG;YACH,UAAU;YACV,QAAQ;YACR,mBAAmB;YACnB,KAAK;YACL,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tag-template.js

@@ -35,8 +35,9 @@ export function tagGlob(template, name) {
 export function parseTagVersion(template, name, tag) {
     const re = templateToRegex(template, name);
     const m = re.exec(tag);
-    if (!m)
+    if (!m) {
         return null;
+    }
     const versionPart = m[1];
     try {
         parseSemver(versionPart);

package/dist/tag-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"tag-template.js","sourceRoot":"","sources":["../src/tag-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAEtD,kDAAkD;AAClD,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAuC;IACjF,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB,EAAE,IAAY;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAY,EACZ,GAAW;IAEX,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1B,IAAI,CAAC;QACH,WAAW,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,oDAAoD;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,+CAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;SAC3C,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"tag-template.js","sourceRoot":"","sources":["../src/tag-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAEtD,kDAAkD;AAClD,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAuC;IACjF,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB,EAAE,IAAY;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAY,EACZ,GAAW;IAEX,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtB,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1B,IAAI,CAAC;QACH,WAAW,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,oDAAoD;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjE,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,+CAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;SAC3C,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/trailer.js

@@ -31,8 +31,9 @@ export function parseTrailer(commitBody) {
     for (let i = lines.length - 1; i >= 0; i--) {
         const line = lines[i];
         const match = TRAILER_LINE.exec(line);
-        if (!match)
+        if (!match) {
             continue;
+        }
         const payload = match[1];
         if (payload === undefined || payload === '') {
             // `release:` with no value — malformed.
@@ -54,8 +55,9 @@ function parsePayload(payload) {
     }
     const listText = payload.slice(bracketIdx);
     const packages = parsePackageList(listText);
-    if (packages === null)
+    if (packages === null) {
         return null;
+    }
     return { bump: valueText, packages };
 }
 function isValidValue(s) {
@@ -64,21 +66,26 @@ function isValidValue(s) {
 function parsePackageList(s) {
     // Must open with `[` and close with `]`; nothing after the close.
     /* v8 ignore next -- only called when bracketIdx is defined; defensive */
-    if (!s.startsWith('['))
+    if (!s.startsWith('[')) {
         return null;
+    }
     const closeIdx = s.indexOf(']');
-    if (closeIdx === -1)
+    if (closeIdx === -1) {
         return null;
+    }
     const tail = s.slice(closeIdx + 1).trim();
-    if (tail.length > 0)
-        return null; // stray text after list
+    if (tail.length > 0) {
+        return null;
+    } // stray text after list
     const inner = s.slice(1, closeIdx).trim();
-    if (inner === '')
-        return []; // `release: minor []` → no packages
+    if (inner === '') {
+        return [];
+    } // `release: minor []` → no packages
     const parts = inner.split(',').map((p) => p.trim());
     for (const name of parts) {
-        if (name === '' || !PACKAGE_NAME.test(name))
+        if (name === '' || !PACKAGE_NAME.test(name)) {
             return null;
+        }
     }
     return parts;
 }

package/dist/trailer.js.map

@@ -1 +1 @@
-{"version":3,"file":"trailer.js","sourceRoot":"","sources":["../src/trailer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzE,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,wEAAwE;AACxE,2DAA2D;AAC3D,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,gDAAgD;IAChD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC5C,wCAAwC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,yDAAyD;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtF,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,kEAAkE;IAClE,yEAAyE;IACzE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC,CAAC,oCAAoC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"trailer.js","sourceRoot":"","sources":["../src/trailer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzE,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,wEAAwE;AACxE,2DAA2D;AAC3D,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,gDAAgD;IAChD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC5C,wCAAwC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,yDAAyD;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtF,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACrC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,kEAAkE;IAClE,yEAAyE;IACzE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC,CAAC,wBAAwB;IAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAAA,OAAO,EAAE,CAAC;IAAA,CAAC,CAAC,oCAAoC;IACnE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/types.d.ts

@@ -98,6 +98,17 @@ export interface SmokeResult {
 export interface Handler {
     kind: Kind;
     isPublished(pkg: PackageConfig, version: string, ctx: Ctx): Promise<boolean>;
+    /**
+     * Latest version published to the registry for this package, or null
+     * when it has never been published (registry 404). Reads the registry's
+     * "newest version" endpoint — distinct from `isPublished`, which probes
+     * one specific version. Throws TransientError on a registry error so a
+     * read-only caller (`status`) can render "unreachable" rather than a
+     * bogus version. Shares each handler's registry-name resolution with
+     * `isPublished`, so diagnostics and the publish path can never disagree
+     * on which registry name a package maps to.
+     */
+    latestVersion(pkg: PackageConfig, ctx: Ctx): Promise<string | null>;
     writeVersion(pkg: PackageConfig, version: string, ctx: Ctx): Promise<string[]>;
     publish(pkg: PackageConfig, version: string, ctx: Ctx): Promise<PublishResult>;
     smokeTest?(pkg: PackageConfig, version: string, ctx: Ctx): Promise<SmokeResult>;