relizy 1.5.0-beta.1 → 1.5.0-beta.3

package/dist/cli.mjs

@@ -5,7 +5,7 @@ import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 import { printBanner, logger } from '@maz-ui/node';
 import { Command } from 'commander';
-import { aD as isInCI, aE as getCIName, b as bump, c as changelog, g as publish, e as providerRelease, h as social, p as prComment, r as release } from './shared/relizy.wrrRuBuo.mjs';
+import { as as isInCI, S as getCIName, f as bump, h as changelog, aJ as publish, aH as providerRelease, a$ as social, aG as prComment, aS as release } from './shared/relizy.CdiXgxMk.mjs';
 import 'node:child_process';
 import '@maz-ui/utils/helpers/formatJson';
 import 'c12';
@@ -21,10 +21,10 @@ import 'convert-gitmoji';
 import 'node-fetch-native';
 
 const hasSilentFlag = process.argv.includes("--log-level") && process.argv.includes("silent");
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
+const __filename$1 = fileURLToPath(import.meta.url);
+const __dirname$1 = dirname(__filename$1);
 const packageJson = JSON.parse(
-  readFileSync(join(__dirname, "../package.json"), "utf-8")
+  readFileSync(join(__dirname$1, "../package.json"), "utf-8")
 );
 const version = packageJson.version;
 if (!hasSilentFlag) {
@@ -109,7 +109,7 @@ program.command("changelog").description("Generate changelogs for all packages")
     process.exit(1);
   }
 });
-program.command("publish").description("Publish packages to registry").option("--registry <url>", "Custom registry URL").option("--tag <tag>", "Publish with specific tag (default: latest for stable, next for prerelease)").option("--access <type>", "Package access level (public or restricted)").option("--otp <code>", "One-time password for 2FA").option("--build-cmd <cmd>", 'Command to build packages before publish (e.g. "pnpm build")').option("--publish-token <token>", 'NPM token (e.g. "123456") - only supported for pnpm and npm').action(async (options) => {
+program.command("publish").description("Publish packages to registry").option("--registry <url>", "Custom registry URL").option("--tag <tag>", "Publish with specific tag (default: latest for stable, next for prerelease)").option("--access <type>", "Package access level (public or restricted)").option("--otp <code>", "One-time password for 2FA").option("--build-cmd <cmd>", 'Command to build packages before publish (e.g. "pnpm build")').option("--publish-token <token>", 'NPM token (e.g. "123456") - only supported for pnpm and npm').option("--skip-existing-versions", "Skip packages whose version already exists on the registry instead of failing").action(async (options) => {
   try {
     await publish({
       registry: options.registry,
@@ -118,6 +118,7 @@ program.command("publish").description("Publish packages to registry").option("-
       otp: options.otp,
       buildCmd: options.buildCmd,
       token: options.publishToken,
+      skipExistingVersions: options.skipExistingVersions,
       dryRun: program.opts().dryRun,
       logLevel: program.opts().logLevel,
       configName: program.opts().config
@@ -173,7 +174,7 @@ program.command("pr-comment").description("Post or re-post a PR comment with rel
     process.exit(1);
   }
 });
-program.command("release").description("Complete release workflow (bump + changelog + commit + tag + push to remote + publish release)").option("--major", "Bump major version").option("--minor", "Bump minor version").option("--patch", "Bump patch version").option("--prerelease", "Bump prerelease version").option("--premajor", "Bump premajor version").option("--preminor", "Bump preminor version").option("--prepatch", "Bump prepatch version").option("--preid <id>", "Prerelease identifier (alpha, beta, rc, etc.)").option("--suffix <suffix>", "Custom suffix for prerelease versions - replace the last .X with .suffix (e.g. 1.0.0-beta.0 -> 1.0.0-beta.suffix)").option("--from <ref>", "Start commit reference").option("--to <ref>", "End commit reference").option("--no-push", "Skip push changes and tags to remote").option("--no-provider-release", "Skip release creation (GitHub/GitLab)").option("--no-publish", "Skip npm publish").option("--registry <url>", "Custom npm registry URL").option("--tag <tag>", "Publish with specific tag (default: latest for stable, next for prerelease)").option("--access <type>", "Package access level (public or restricted)").option("--otp <code>", "One-time password for 2FA").option("--no-verify", "Skip git hooks during commit").option("--format-cmd <cmd>", 'Command to format CHANGELOG files after generation (e.g. "pnpm lint")').option("--build-cmd <cmd>", 'Command to build packages before publish (e.g. "pnpm build")').option("--no-root-changelog", "Skip generation of root changelog file").option("--token <token>", "Git token (github or gitlab)").option("--force", "Bump even if there are no commits").option("--no-clean", "Skip check if the working directory is clean").option("--no-commit", "Skip commit and tag").option("--no-git-tag", "Skip tag creation").option("--no-changelog", "Skip changelog generation files").option("--provider <provider>", "Git provider (github or gitlab)").option("--no-social", "Skip social media posting").option("--no-pr-comment", "Skip PR comment posting").option("--yes", "Skip confirmation prompt about bumping packages").option("--publish-token <token>", 'NPM token (e.g. "123456") - only supported for pnpm and npm').option("--canary", "Publish a canary release from the current commit").option("--include-private", "Include private packages in bump and changelog phases").option("--ai", "Force-enable AI for release notes and social posts").option("--no-ai", "Force-disable AI for release notes and social posts").action(async (options) => {
+program.command("release").description("Complete release workflow (bump + changelog + commit + tag + push to remote + publish release)").option("--major", "Bump major version").option("--minor", "Bump minor version").option("--patch", "Bump patch version").option("--prerelease", "Bump prerelease version").option("--premajor", "Bump premajor version").option("--preminor", "Bump preminor version").option("--prepatch", "Bump prepatch version").option("--preid <id>", "Prerelease identifier (alpha, beta, rc, etc.)").option("--suffix <suffix>", "Custom suffix for prerelease versions - replace the last .X with .suffix (e.g. 1.0.0-beta.0 -> 1.0.0-beta.suffix)").option("--from <ref>", "Start commit reference").option("--to <ref>", "End commit reference").option("--no-push", "Skip push changes and tags to remote").option("--no-provider-release", "Skip release creation (GitHub/GitLab)").option("--no-publish", "Skip npm publish").option("--registry <url>", "Custom npm registry URL").option("--tag <tag>", "Publish with specific tag (default: latest for stable, next for prerelease)").option("--access <type>", "Package access level (public or restricted)").option("--otp <code>", "One-time password for 2FA").option("--no-verify", "Skip git hooks during commit").option("--format-cmd <cmd>", 'Command to format CHANGELOG files after generation (e.g. "pnpm lint")').option("--build-cmd <cmd>", 'Command to build packages before publish (e.g. "pnpm build")').option("--no-root-changelog", "Skip generation of root changelog file").option("--token <token>", "Git token (github or gitlab)").option("--force", "Bump even if there are no commits").option("--no-clean", "Skip check if the working directory is clean").option("--no-commit", "Skip commit and tag").option("--no-git-tag", "Skip tag creation").option("--no-changelog", "Skip changelog generation files").option("--provider <provider>", "Git provider (github or gitlab)").option("--no-social", "Skip social media posting").option("--no-pr-comment", "Skip PR comment posting").option("--yes", "Skip confirmation prompt about bumping packages").option("--publish-token <token>", 'NPM token (e.g. "123456") - only supported for pnpm and npm').option("--skip-existing-versions", "Skip packages whose version already exists on the registry instead of failing").option("--canary", "Publish a canary release from the current commit").option("--include-private", "Include private packages in bump and changelog phases").option("--ai", "Force-enable AI for release notes and social posts").option("--no-ai", "Force-disable AI for release notes and social posts").action(async (options) => {
   try {
     await release({
       type: getReleaseType(options),
@@ -201,6 +202,7 @@ program.command("release").description("Complete release workflow (bump + change
       rootChangelog: hasCliFlag("--no-root-changelog") ? false : void 0,
       token: options.token,
       publishToken: options.publishToken,
+      skipExistingVersions: options.skipExistingVersions,
       logLevel: program.opts().logLevel,
       force: options.force,
       yes: options.yes,

package/dist/index.d.mts

@@ -29,6 +29,7 @@ declare function getDefaultConfig(): {
         token: string | undefined;
         safetyCheck: true;
         safetyCheckTimeout: number;
+        skipExistingVersions: boolean;
         packageManager: PackageManager;
     };
     tokens: {
@@ -380,6 +381,66 @@ declare function resolveRegistryTargetsForPackage(pkg: PackageBase, config: Reso
  * scoped to packages that are not part of this release does not block it.
  */
 declare function resolveRegistryTargetsForPackages(packages: PackageBase[], config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Run `fn` with the registry target's auth token and scope registry
+ * temporarily written to the project `.npmrc` (at `config.cwd`), then restore
+ * the original file - or remove it if it did not exist - ALWAYS, even on
+ * failure.
+ *
+ * This is the version-proof replacement for passing rc-options as CLI flags:
+ * the `.npmrc` contract is stable across npm/pnpm/bun and every version, so we
+ * never depend on the CLI argument parser (which pnpm changed in v10+). Only
+ * the keys relizy manages are overridden; every other line already in the
+ * user's `.npmrc` is preserved untouched. When there is nothing to inject (no
+ * token/scope, or a package manager that does not read `.npmrc` such as yarn),
+ * the `.npmrc` is left as-is and `fn` runs against the user's own config.
+ */
+declare function withRegistryNpmrc<T>({ config, registryTarget, packageName, packageManager, fn, }: {
+    config: ResolvedRelizyConfig;
+    registryTarget: RegistryTarget;
+    packageName?: string;
+    packageManager: PackageManager;
+    fn: () => Promise<T>;
+}): Promise<T>;
+/**
+ * Detect whether a failed publish is caused by the version already existing on
+ * the registry (the registry refusing to overwrite an immutable asset), as
+ * opposed to any other publish failure. This is what makes a retry safe: the
+ * artifact is already there, so the failure is really a "nothing to do".
+ *
+ * Registries phrase this differently, so we match the known variants:
+ * - npm public registry / verdaccio: `EPUBLISHCONFLICT`, `cannot publish over
+ *   the previously published versions`, `you cannot publish over ...`;
+ * - Nexus: `Repository does not allow updating assets` (HTTP 400);
+ * - Artifactory/JFrog and others: `already exists` / `version already exists`;
+ * - a bare HTTP 409 Conflict from a registry that returns no message body.
+ */
+declare function isVersionAlreadyPublishedError(error: unknown): boolean;
+/**
+ * Ask the registry whether `pkg@version` already exists. This is the primary,
+ * robust idempotency check: it relies on the standard registry metadata
+ * endpoint that every npm-compatible registry (npm, Nexus, JFrog, Verdaccio,
+ * GitHub/GitLab Packages) implements to serve `install`, rather than on the
+ * wording of a publish error - which varies per registry.
+ *
+ * Strategy: for npm/pnpm, use the `view` command first (it inherits the full
+ * `.npmrc` environment - proxy, CA, scoped auth). If that is inconclusive, or
+ * for yarn/bun (no usable `view`), fall back to a direct HTTP request to the
+ * packument endpoint so every package manager is covered.
+ *
+ * Returns:
+ * - `true`  - the version is already published;
+ * - `false` - the package, or that specific version, is not on the registry;
+ * - `null`  - the check was inconclusive (auth/network/registry error), so the
+ *   caller should fall back to attempting the publish rather than skipping.
+ */
+declare function isVersionPublished({ pkg, version, config, packageManager, registryTarget, }: {
+    pkg: PackageBase;
+    version: string;
+    config: ResolvedRelizyConfig;
+    packageManager: PackageManager;
+    registryTarget: RegistryTarget;
+}): Promise<boolean | null>;
 declare function getAuthCommand({ packageManager, config, otp, registryTarget, }: {
     packageManager: PackageManager;
     config: ResolvedRelizyConfig;
@@ -1260,7 +1321,8 @@ interface RegistryTarget {
      */
     registry: string;
     /**
-     * Registry token - only supported for pnpm and npm
+     * Registry token - supported for npm, pnpm and bun (injected via `.npmrc`).
+     * Yarn is not supported (it uses `.yarnrc.yml`); configure its auth yourself.
      */
     token?: string;
     /**
@@ -1321,7 +1383,8 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      */
     buildCmd?: string;
     /**
-     * NPM token (e.g. `123456`) - only supported for pnpm and npm
+     * NPM token (e.g. `123456`) - supported for npm, pnpm and bun (injected via
+     * `.npmrc`). Yarn is not supported (it uses `.yarnrc.yml`).
      */
     token?: string;
     /**
@@ -1344,6 +1407,17 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * single-registry behavior.
      */
     registries?: RegistryTarget[];
+    /**
+     * Skip a package (per registry) instead of failing when its version already
+     * exists on the registry. Makes re-running a release idempotent: a retried
+     * job whose version is already published (e.g. a canary rerun on the same
+     * commit, or a partially completed publish) succeeds and only publishes what
+     * is missing, rather than crashing on the registry's "cannot overwrite"
+     * error. When disabled (the default), that situation still fails, but with a
+     * clear error message instead of the raw registry error.
+     * @default false
+     */
+    skipExistingVersions?: boolean;
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -2081,6 +2155,19 @@ interface CommentBodyParams {
 }
 declare function buildCommentBody(params: CommentBodyParams): string;
 declare function prComment(options?: PrCommentOptions): Promise<boolean>;
+/**
+ * Best-effort wrapper around {@link prComment} for the release flow: honours the
+ * `--no-pr-comment` gate and swallows errors so a failed PR comment never aborts
+ * an otherwise successful release.
+ */
+declare function tryPostPrComment({ config, releaseContext, prNumber, dryRun, logLevel, configName, }: {
+    config: ResolvedRelizyConfig;
+    releaseContext: ReleaseContext;
+    prNumber?: number;
+    dryRun: boolean;
+    logLevel?: string;
+    configName?: string;
+}): Promise<boolean>;
 
 declare function providerReleaseSafetyCheck({ config, provider }: {
     config: ResolvedRelizyConfig;
@@ -2096,6 +2183,22 @@ declare function publish(options?: Partial<PublishOptions>): Promise<{
     publishedPackages: PackageBase[];
 } | undefined>;
 
+/**
+ * Build the final "Release workflow completed!" summary box from the outcome of
+ * each release step. Pure formatting - no side effects - so it stays easy to read
+ * and to test in isolation, and keeps the `release()` orchestration lean.
+ */
+declare function buildReleaseSummary({ config, bumpResult, publishResponse, createdTags, provider, postedReleases, providerError, socialResults, prCommentPosted, }: {
+    config: ResolvedRelizyConfig;
+    bumpResult: BumpResultTruthy;
+    publishResponse?: PublishResponse;
+    createdTags: string[];
+    provider?: GitProvider;
+    postedReleases: PostedRelease[];
+    providerError?: string;
+    socialResults?: SocialResult;
+    prCommentPosted: boolean;
+}): string;
 declare function release(options?: Partial<ReleaseOptions>): Promise<void>;
 
 declare function socialSafetyCheck({ config }: {
@@ -2103,5 +2206,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, buildReleaseSummary, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, isVersionAlreadyPublishedError, isVersionPublished, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, tryPostPrComment, updateLernaVersion, withRegistryNpmrc, writeChangelogToFile, writeVersion };
 export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, RegistryTarget, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.d.ts

@@ -29,6 +29,7 @@ declare function getDefaultConfig(): {
         token: string | undefined;
         safetyCheck: true;
         safetyCheckTimeout: number;
+        skipExistingVersions: boolean;
         packageManager: PackageManager;
     };
     tokens: {
@@ -380,6 +381,66 @@ declare function resolveRegistryTargetsForPackage(pkg: PackageBase, config: Reso
  * scoped to packages that are not part of this release does not block it.
  */
 declare function resolveRegistryTargetsForPackages(packages: PackageBase[], config: ResolvedRelizyConfig): RegistryTarget[];
+/**
+ * Run `fn` with the registry target's auth token and scope registry
+ * temporarily written to the project `.npmrc` (at `config.cwd`), then restore
+ * the original file - or remove it if it did not exist - ALWAYS, even on
+ * failure.
+ *
+ * This is the version-proof replacement for passing rc-options as CLI flags:
+ * the `.npmrc` contract is stable across npm/pnpm/bun and every version, so we
+ * never depend on the CLI argument parser (which pnpm changed in v10+). Only
+ * the keys relizy manages are overridden; every other line already in the
+ * user's `.npmrc` is preserved untouched. When there is nothing to inject (no
+ * token/scope, or a package manager that does not read `.npmrc` such as yarn),
+ * the `.npmrc` is left as-is and `fn` runs against the user's own config.
+ */
+declare function withRegistryNpmrc<T>({ config, registryTarget, packageName, packageManager, fn, }: {
+    config: ResolvedRelizyConfig;
+    registryTarget: RegistryTarget;
+    packageName?: string;
+    packageManager: PackageManager;
+    fn: () => Promise<T>;
+}): Promise<T>;
+/**
+ * Detect whether a failed publish is caused by the version already existing on
+ * the registry (the registry refusing to overwrite an immutable asset), as
+ * opposed to any other publish failure. This is what makes a retry safe: the
+ * artifact is already there, so the failure is really a "nothing to do".
+ *
+ * Registries phrase this differently, so we match the known variants:
+ * - npm public registry / verdaccio: `EPUBLISHCONFLICT`, `cannot publish over
+ *   the previously published versions`, `you cannot publish over ...`;
+ * - Nexus: `Repository does not allow updating assets` (HTTP 400);
+ * - Artifactory/JFrog and others: `already exists` / `version already exists`;
+ * - a bare HTTP 409 Conflict from a registry that returns no message body.
+ */
+declare function isVersionAlreadyPublishedError(error: unknown): boolean;
+/**
+ * Ask the registry whether `pkg@version` already exists. This is the primary,
+ * robust idempotency check: it relies on the standard registry metadata
+ * endpoint that every npm-compatible registry (npm, Nexus, JFrog, Verdaccio,
+ * GitHub/GitLab Packages) implements to serve `install`, rather than on the
+ * wording of a publish error - which varies per registry.
+ *
+ * Strategy: for npm/pnpm, use the `view` command first (it inherits the full
+ * `.npmrc` environment - proxy, CA, scoped auth). If that is inconclusive, or
+ * for yarn/bun (no usable `view`), fall back to a direct HTTP request to the
+ * packument endpoint so every package manager is covered.
+ *
+ * Returns:
+ * - `true`  - the version is already published;
+ * - `false` - the package, or that specific version, is not on the registry;
+ * - `null`  - the check was inconclusive (auth/network/registry error), so the
+ *   caller should fall back to attempting the publish rather than skipping.
+ */
+declare function isVersionPublished({ pkg, version, config, packageManager, registryTarget, }: {
+    pkg: PackageBase;
+    version: string;
+    config: ResolvedRelizyConfig;
+    packageManager: PackageManager;
+    registryTarget: RegistryTarget;
+}): Promise<boolean | null>;
 declare function getAuthCommand({ packageManager, config, otp, registryTarget, }: {
     packageManager: PackageManager;
     config: ResolvedRelizyConfig;
@@ -1260,7 +1321,8 @@ interface RegistryTarget {
      */
     registry: string;
     /**
-     * Registry token - only supported for pnpm and npm
+     * Registry token - supported for npm, pnpm and bun (injected via `.npmrc`).
+     * Yarn is not supported (it uses `.yarnrc.yml`); configure its auth yourself.
      */
     token?: string;
     /**
@@ -1321,7 +1383,8 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      */
     buildCmd?: string;
     /**
-     * NPM token (e.g. `123456`) - only supported for pnpm and npm
+     * NPM token (e.g. `123456`) - supported for npm, pnpm and bun (injected via
+     * `.npmrc`). Yarn is not supported (it uses `.yarnrc.yml`).
      */
     token?: string;
     /**
@@ -1344,6 +1407,17 @@ type PublishConfig = ChangelogConfig$1['publish'] & {
      * single-registry behavior.
      */
     registries?: RegistryTarget[];
+    /**
+     * Skip a package (per registry) instead of failing when its version already
+     * exists on the registry. Makes re-running a release idempotent: a retried
+     * job whose version is already published (e.g. a canary rerun on the same
+     * commit, or a partially completed publish) succeeds and only publishes what
+     * is missing, rather than crashing on the registry's "cannot overwrite"
+     * error. When disabled (the default), that situation still fails, but with a
+     * clear error message instead of the raw registry error.
+     * @default false
+     */
+    skipExistingVersions?: boolean;
 };
 interface PublishOptions extends PublishConfig {
     /**
@@ -2081,6 +2155,19 @@ interface CommentBodyParams {
 }
 declare function buildCommentBody(params: CommentBodyParams): string;
 declare function prComment(options?: PrCommentOptions): Promise<boolean>;
+/**
+ * Best-effort wrapper around {@link prComment} for the release flow: honours the
+ * `--no-pr-comment` gate and swallows errors so a failed PR comment never aborts
+ * an otherwise successful release.
+ */
+declare function tryPostPrComment({ config, releaseContext, prNumber, dryRun, logLevel, configName, }: {
+    config: ResolvedRelizyConfig;
+    releaseContext: ReleaseContext;
+    prNumber?: number;
+    dryRun: boolean;
+    logLevel?: string;
+    configName?: string;
+}): Promise<boolean>;
 
 declare function providerReleaseSafetyCheck({ config, provider }: {
     config: ResolvedRelizyConfig;
@@ -2096,6 +2183,22 @@ declare function publish(options?: Partial<PublishOptions>): Promise<{
     publishedPackages: PackageBase[];
 } | undefined>;
 
+/**
+ * Build the final "Release workflow completed!" summary box from the outcome of
+ * each release step. Pure formatting - no side effects - so it stays easy to read
+ * and to test in isolation, and keeps the `release()` orchestration lean.
+ */
+declare function buildReleaseSummary({ config, bumpResult, publishResponse, createdTags, provider, postedReleases, providerError, socialResults, prCommentPosted, }: {
+    config: ResolvedRelizyConfig;
+    bumpResult: BumpResultTruthy;
+    publishResponse?: PublishResponse;
+    createdTags: string[];
+    provider?: GitProvider;
+    postedReleases: PostedRelease[];
+    providerError?: string;
+    socialResults?: SocialResult;
+    prCommentPosted: boolean;
+}): string;
 declare function release(options?: Partial<ReleaseOptions>): Promise<void>;
 
 declare function socialSafetyCheck({ config }: {
@@ -2103,5 +2206,5 @@ declare function socialSafetyCheck({ config }: {
 }): Promise<void>;
 declare function social(options?: Partial<SocialOptions>): Promise<SocialResult>;
 
-export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, updateLernaVersion, writeChangelogToFile, writeVersion };
+export { NEW_PACKAGE_MARKER, PR_COMMENT_MARKER, buildChangelogBody, buildCommentBody, buildCompareLink, buildContributors, buildReleaseSummary, bump, capReleaseTypeForZeroMajor, changelog, checkGitStatusIfDirty, collectContributorNames, collectPackageBumps, confirmBump, createCommitAndTags, createGitlabRelease, defineConfig, detectGitProvider, detectPackageManager, detectPullRequest, determinePublishTag, determineReleaseType, determineSemverChange, executeBuildCmd, executeFormatCmd, executeHook, expandPackagesToBumpWithDependents, extractChangelogSummary, extractVersionFromPackageTag, extractVersionFromTag, fetchGitTags, filterOutPrivatePackages, findGitHubPR, findGitLabMR, findReachableCommitBySubject, formatChangelogForSlack, formatPackagesForSlack, formatSlackMessage, formatTweetMessage, generateChangelog, generateMarkDown, getAuthCommand, getBumpedIndependentPackages, getBumpedPackageIndependently, getCIName, getCanaryVersion, getCommitSubject, getCurrentGitBranch, getCurrentGitRef, getDefaultConfig, getDependentsOf, getFirstCommit, getGitStatus, getIndependentTag, getLastPackageTag, getLastRepoTag, getLastStableTag, getLastTag, getModifiedReleaseFilePatterns, getNpmRegistry, getPackageCommits, getPackageDependencies, getPackageNewVersion, getPackages, getPackagesOrBumpedPackages, getPackagesToPublishInIndependentMode, getPackagesToPublishInSelectiveMode, getPreid, getReleaseUrl, getRootPackage, getShortCommitSha, getSlackToken, getSlackWebhookUrl, getTwitterCredentials, github, gitlab, hasLernaJson, isAncestor, isBumpedPackage, isChangedPreid, isGraduating, isGraduatingToStableBetweenVersion, isInCI, isPrerelease, isPrereleaseReleaseType, isStableReleaseType, isTagVersionCompatibleWithCurrent, isVersionAlreadyPublishedError, isVersionPublished, loadRelizyConfig, mergeTypes, parseChangelogMarkdown, parseGitRemoteUrl, postPrComment, postReleaseToSlack, postReleaseToTwitter, prComment, providerRelease, providerReleaseSafetyCheck, publish, publishPackage, publishSafetyCheck, pushCommitAndTags, pushTagForce, readPackageJson, readPackages, reconcileFromTag, redactSecrets, release, resetRewrittenTagCache, resolveAllConfiguredRegistryTargets, resolveRegistryTargetsForPackage, resolveRegistryTargetsForPackages, resolveTags, retagAnnotatedLocal, rollbackModifiedFiles, shouldFilterPrereleaseTags, social, socialSafetyCheck, tagExists, topologicalSort, tryPostPrComment, updateLernaVersion, withRegistryNpmrc, writeChangelogToFile, writeVersion };
 export type { AIConfig, AIPromptTarget, AIProviderName, AISocialConfig, AISystemPromptOverrides, AITargetConfig, BumpConfig, BumpOptions, BumpResult, BumpResultFalsy, BumpResultTruthy, ChangelogConfig, ChangelogInclude, ChangelogOptions, ClaudeCodeProviderOptions, ConfigType, GitProvider, GitlabRelease, GitlabReleaseResponse, HookConfig, HookStep, HookType, MonorepoConfig, OnRewrittenTag, PackageBase, PackageBumpEntry, PackageManager, PostedRelease, PrCommentConfig, PrCommentMode, PrCommentOptions, PrCommentStatus, ProviderReleaseOptions, ProviderReleaseResult, PublishConfig, PublishOptions, PublishResponse, PullRequestInfo, ReadPackage, Reference, RegistryTarget, ReleaseConfig, ReleaseContext, ReleaseOptions, RelizyConfig, RepoConfig, ResolvedConfig, ResolvedRelizyConfig, ResolvedTags, ResolvedTwitterCredentials, RootPackage, SlackCredentials, SlackOptions, SlackPackageEntry, SlackSocialConfig, SocialConfig, SocialNetworkResult, SocialOptions, SocialResult, Step, TemplatesConfig, TokensConfig, TwitterCredentials, TwitterOptions, TwitterSocialConfig, VersionMode };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { ax as NEW_PACKAGE_MARKER, a9 as PR_COMMENT_MARKER, S as buildChangelogBody, a as buildCommentBody, R as buildCompareLink, U as buildContributors, b as bump, aL as capReleaseTypeForZeroMajor, c as changelog, v as checkGitStatusIfDirty, T as collectContributorNames, a5 as collectPackageBumps, aZ as confirmBump, B as createCommitAndTags, P as createGitlabRelease, k as defineConfig, y as detectGitProvider, Y as detectPackageManager, a8 as detectPullRequest, Z as determinePublishTag, aN as determineReleaseType, aM as determineSemverChange, aG as executeBuildCmd, aF as executeFormatCmd, aC as executeHook, q as expandPackagesToBumpWithDependents, aq as extractChangelogSummary, aR as extractVersionFromPackageTag, b0 as extractVersionFromTag, x as fetchGitTags, aI as filterOutPrivatePackages, a6 as findGitHubPR, a7 as findGitLabMR, K as findReachableCommitBySubject, am as formatChangelogForSlack, an as formatPackagesForSlack, ao as formatSlackMessage, aA as formatTweetMessage, i as generateChangelog, V as generateMarkDown, a3 as getAuthCommand, a_ as getBumpedIndependentPackages, aY as getBumpedPackageIndependently, aE as getCIName, b1 as getCanaryVersion, J as getCommitSubject, F as getCurrentGitBranch, G as getCurrentGitRef, j as getDefaultConfig, o as getDependentsOf, E as getFirstCommit, u as getGitStatus, as as getIndependentTag, aw as getLastPackageTag, av as getLastRepoTag, at as getLastStableTag, au as getLastTag, A as getModifiedReleaseFilePatterns, X as getNpmRegistry, ag as getPackageCommits, n as getPackageDependencies, aP as getPackageNewVersion, af as getPackages, aJ as getPackagesOrBumpedPackages, $ as getPackagesToPublishInIndependentMode, _ as getPackagesToPublishInSelectiveMode, aW as getPreid, ar as getReleaseUrl, ad as getRootPackage, H as getShortCommitSha, ak as getSlackToken, al as getSlackWebhookUrl, az as getTwitterCredentials, O as github, Q as gitlab, ah as hasLernaJson, I as isAncestor, aH as isBumpedPackage, aX as isChangedPreid, aV as isGraduating, aK as isGraduatingToStableBetweenVersion, aD as isInCI, aS as isPrerelease, aU as isPrereleaseReleaseType, aT as isStableReleaseType, b2 as isTagVersionCompatibleWithCurrent, l as loadRelizyConfig, m as mergeTypes, W as parseChangelogMarkdown, z as parseGitRemoteUrl, aa as postPrComment, ap as postReleaseToSlack, aB as postReleaseToTwitter, p as prComment, e as providerRelease, d as providerReleaseSafetyCheck, g as publish, a4 as publishPackage, f as publishSafetyCheck, C as pushCommitAndTags, N as pushTagForce, ac as readPackageJson, ae as readPackages, aj as reconcileFromTag, ab as redactSecrets, r as release, ai as resetRewrittenTagCache, a0 as resolveAllConfiguredRegistryTargets, a1 as resolveRegistryTargetsForPackage, a2 as resolveRegistryTargetsForPackages, ay as resolveTags, M as retagAnnotatedLocal, D as rollbackModifiedFiles, a$ as shouldFilterPrereleaseTags, h as social, s as socialSafetyCheck, L as tagExists, t as topologicalSort, aQ as updateLernaVersion, w as writeChangelogToFile, aO as writeVersion } from './shared/relizy.wrrRuBuo.mjs';
+export { N as NEW_PACKAGE_MARKER, P as PR_COMMENT_MARKER, b as buildChangelogBody, a as buildCommentBody, c as buildCompareLink, d as buildContributors, e as buildReleaseSummary, f as bump, g as capReleaseTypeForZeroMajor, h as changelog, i as checkGitStatusIfDirty, j as collectContributorNames, k as collectPackageBumps, l as confirmBump, m as createCommitAndTags, n as createGitlabRelease, o as defineConfig, p as detectGitProvider, q as detectPackageManager, r as detectPullRequest, s as determinePublishTag, t as determineReleaseType, u as determineSemverChange, v as executeBuildCmd, w as executeFormatCmd, x as executeHook, y as expandPackagesToBumpWithDependents, z as extractChangelogSummary, A as extractVersionFromPackageTag, B as extractVersionFromTag, C as fetchGitTags, D as filterOutPrivatePackages, E as findGitHubPR, F as findGitLabMR, G as findReachableCommitBySubject, H as formatChangelogForSlack, I as formatPackagesForSlack, J as formatSlackMessage, K as formatTweetMessage, L as generateChangelog, M as generateMarkDown, O as getAuthCommand, Q as getBumpedIndependentPackages, R as getBumpedPackageIndependently, S as getCIName, T as getCanaryVersion, U as getCommitSubject, V as getCurrentGitBranch, W as getCurrentGitRef, X as getDefaultConfig, Y as getDependentsOf, Z as getFirstCommit, _ as getGitStatus, $ as getIndependentTag, a0 as getLastPackageTag, a1 as getLastRepoTag, a2 as getLastStableTag, a3 as getLastTag, a4 as getModifiedReleaseFilePatterns, a5 as getNpmRegistry, a6 as getPackageCommits, a7 as getPackageDependencies, a8 as getPackageNewVersion, a9 as getPackages, aa as getPackagesOrBumpedPackages, ab as getPackagesToPublishInIndependentMode, ac as getPackagesToPublishInSelectiveMode, ad as getPreid, ae as getReleaseUrl, af as getRootPackage, ag as getShortCommitSha, ah as getSlackToken, ai as getSlackWebhookUrl, aj as getTwitterCredentials, ak as github, al as gitlab, am as hasLernaJson, an as isAncestor, ao as isBumpedPackage, ap as isChangedPreid, aq as isGraduating, ar as isGraduatingToStableBetweenVersion, as as isInCI, at as isPrerelease, au as isPrereleaseReleaseType, av as isStableReleaseType, aw as isTagVersionCompatibleWithCurrent, ax as isVersionAlreadyPublishedError, ay as isVersionPublished, az as loadRelizyConfig, aA as mergeTypes, aB as parseChangelogMarkdown, aC as parseGitRemoteUrl, aD as postPrComment, aE as postReleaseToSlack, aF as postReleaseToTwitter, aG as prComment, aH as providerRelease, aI as providerReleaseSafetyCheck, aJ as publish, aK as publishPackage, aL as publishSafetyCheck, aM as pushCommitAndTags, aN as pushTagForce, aO as readPackageJson, aP as readPackages, aQ as reconcileFromTag, aR as redactSecrets, aS as release, aT as resetRewrittenTagCache, aU as resolveAllConfiguredRegistryTargets, aV as resolveRegistryTargetsForPackage, aW as resolveRegistryTargetsForPackages, aX as resolveTags, aY as retagAnnotatedLocal, aZ as rollbackModifiedFiles, a_ as shouldFilterPrereleaseTags, a$ as social, b0 as socialSafetyCheck, b1 as tagExists, b2 as topologicalSort, b3 as tryPostPrComment, b4 as updateLernaVersion, b5 as withRegistryNpmrc, b6 as writeChangelogToFile, b7 as writeVersion } from './shared/relizy.CdiXgxMk.mjs';
 import '@maz-ui/node';
 import 'node:child_process';
 import 'node:process';

package/dist/shared/{relizy.wrrRuBuo.mjs → relizy.CdiXgxMk.mjs}

@@ -5,7 +5,7 @@ import { formatJson } from '@maz-ui/utils/helpers/formatJson';
 import { setupDotenv, loadConfig } from 'c12';
 import { getGitDiff, parseCommits, resolveRepoConfig, getRepoConfig, formatCompareChanges, formatReference, createGithubRelease } from 'changelogen';
 import { defu } from 'defu';
-import { existsSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync, statSync, writeFileSync, rmSync } from 'node:fs';
 import path, { join, relative, sep } from 'node:path';
 import { select, confirm, input } from '@inquirer/prompts';
 import micromatch from 'micromatch';
@@ -1960,6 +1960,71 @@ function resolveRegistryTargetsForPackages(packages, config) {
   const allTargets = packages.flatMap((pkg) => resolveRegistryTargetsForPackage(pkg, config));
   return dedupRegistryTargets(allTargets);
 }
+function readsNpmrc(packageManager) {
+  return packageManager === "npm" || packageManager === "pnpm" || packageManager === "bun";
+}
+function getPackageScope(packageName) {
+  if (!packageName?.startsWith("@") || !packageName.includes("/")) {
+    return void 0;
+  }
+  return packageName.slice(0, packageName.indexOf("/"));
+}
+function buildNpmrcEntries({
+  registryTarget,
+  scope,
+  packageManager
+}) {
+  const { registry, token } = registryTarget;
+  const entries = [];
+  if (registry && scope) {
+    entries.push({ key: `${scope}:registry`, line: `${scope}:registry=${registry}` });
+  }
+  if (token) {
+    if (!registry) {
+      logger.warn("Publish token provided but no registry specified");
+    } else if (!readsNpmrc(packageManager)) {
+      logger.warn("Publish token only supported for npm, pnpm and bun");
+    } else {
+      const url = new URL(registry);
+      const authKey = `//${url.host}${url.pathname}:_authToken`;
+      entries.push({ key: authKey, line: `${authKey}=${token}` });
+    }
+  }
+  return entries;
+}
+async function withRegistryNpmrc({
+  config,
+  registryTarget,
+  packageName,
+  packageManager,
+  fn
+}) {
+  const scope = getPackageScope(packageName);
+  const entries = buildNpmrcEntries({ registryTarget, scope, packageManager });
+  if (entries.length === 0) {
+    return fn();
+  }
+  const npmrcPath = join(config.cwd, ".npmrc");
+  const existed = existsSync(npmrcPath);
+  const original = existed ? readFileSync(npmrcPath, "utf8") : "";
+  const managedKeys = new Set(entries.map((entry) => entry.key));
+  const preservedLines = original.split("\n").filter((line) => {
+    const key = line.split("=")[0]?.trim();
+    return !key || !managedKeys.has(key);
+  });
+  const nextContent = `${[...preservedLines, ...entries.map((entry) => entry.line)].filter(Boolean).join("\n")}
+`;
+  try {
+    writeFileSync(npmrcPath, nextContent);
+    return await fn();
+  } finally {
+    if (existed) {
+      writeFileSync(npmrcPath, original);
+    } else {
+      rmSync(npmrcPath, { force: true });
+    }
+  }
+}
 function getCommandArgs({
   packageManager,
   tag,
@@ -1973,19 +2038,6 @@ function getCommandArgs({
   if (registry) {
     args.push("--registry", registry);
   }
-  const isPnpmOrNpm = packageManager === "pnpm" || packageManager === "npm";
-  const publishToken = registryTarget.token;
-  if (publishToken) {
-    if (!registry) {
-      logger.warn("Publish token provided but no registry specified");
-    } else if (!isPnpmOrNpm) {
-      logger.warn("Publish token only supported for pnpm and npm");
-    } else {
-      const registryUrl = new URL(registry);
-      const authTokenKey = `--//${registryUrl.host}${registryUrl.pathname}:_authToken=${publishToken}`;
-      args.push(authTokenKey);
-    }
-  }
   const finalOtp = otp ?? sessionOtpByRegistry.get(normalizeRegistryKey(registry)) ?? registryTarget.otp;
   if (finalOtp) {
     args.push("--otp", finalOtp);
@@ -2027,6 +2079,127 @@ function isOtpError(error) {
   ];
   return otpPatterns.some((pattern) => searchText.includes(pattern));
 }
+function isVersionAlreadyPublishedError(error) {
+  if (typeof error !== "object" || error === null) {
+    return false;
+  }
+  const errorMessage = "message" in error && typeof error.message === "string" ? error.message.toLowerCase() : "";
+  const searchText = `${errorMessage} ${String(error).toLowerCase()}`;
+  const patterns = [
+    "epublishconflict",
+    "cannot publish over",
+    "does not allow updating assets",
+    "version already exists",
+    "already exists in the repository",
+    "status 409",
+    "409 conflict"
+  ];
+  return patterns.some((pattern) => searchText.includes(pattern));
+}
+function canQueryVersionViaView(packageManager) {
+  return packageManager === "npm" || packageManager === "pnpm";
+}
+function isPackageNotFoundError(error) {
+  if (typeof error !== "object" || error === null) {
+    return false;
+  }
+  const errorMessage = "message" in error && typeof error.message === "string" ? error.message.toLowerCase() : "";
+  const searchText = `${errorMessage} ${String(error).toLowerCase()}`;
+  return searchText.includes("e404") || searchText.includes("404 not found") || searchText.includes("is not in this registry") || searchText.includes("no match found");
+}
+async function queryVersionViaView({
+  pkg,
+  version,
+  config,
+  packageManager,
+  registryTarget
+}) {
+  const args = ["view", `${pkg.name}@${version}`, "version", "--json"];
+  if (registryTarget.registry) {
+    args.push("--registry", registryTarget.registry);
+  }
+  const command = `${packageManager} ${args.join(" ")}`;
+  try {
+    const { stdout } = await withRegistryNpmrc({
+      config,
+      registryTarget,
+      packageName: pkg.name,
+      packageManager,
+      fn: () => execPromise(command, {
+        cwd: pkg.path,
+        noStdout: true,
+        noStderr: true,
+        noSuccess: true,
+        noError: true,
+        logLevel: config.logLevel
+      })
+    });
+    const output = (stdout || "").trim();
+    return output.length > 0 && output !== "undefined" && output !== "[]";
+  } catch (error) {
+    if (isPackageNotFoundError(error)) {
+      return false;
+    }
+    logger.debug(`\`view\` check was inconclusive for ${pkg.name}@${version}: ${error instanceof Error ? error.message : String(error)}`);
+    return null;
+  }
+}
+function buildPackumentUrl(registry, packageName) {
+  const base = registry.endsWith("/") ? registry : `${registry}/`;
+  const encodedName = packageName.replace("/", "%2F");
+  return `${base}${encodedName}`;
+}
+async function queryVersionViaHttp({
+  pkg,
+  version,
+  config,
+  registryTarget
+}) {
+  const registry = registryTarget.registry || getNpmRegistry(config.cwd);
+  if (!registry) {
+    return null;
+  }
+  const token = registryTarget.token || config.publish.token || config.tokens.registry;
+  const headers = { accept: "application/json" };
+  if (token) {
+    headers.authorization = `Bearer ${token}`;
+  }
+  const timeoutMs = config.publish.safetyCheckTimeout ?? 15e3;
+  try {
+    const response = await fetch(buildPackumentUrl(registry, pkg.name), {
+      headers,
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    if (response.status === 404) {
+      return false;
+    }
+    if (!response.ok) {
+      logger.debug(`Packument request for ${pkg.name} returned HTTP ${response.status} - treating as inconclusive`);
+      return null;
+    }
+    const packument = await response.json();
+    return Boolean(packument.versions && Object.hasOwn(packument.versions, version));
+  } catch (error) {
+    logger.debug(`Packument request for ${pkg.name} failed: ${error instanceof Error ? error.message : String(error)}`);
+    return null;
+  }
+}
+async function isVersionPublished({
+  pkg,
+  version,
+  config,
+  packageManager,
+  registryTarget
+}) {
+  if (canQueryVersionViaView(packageManager)) {
+    const viaView = await queryVersionViaView({ pkg, version, config, packageManager, registryTarget });
+    if (viaView !== null) {
+      return viaView;
+    }
+    logger.debug(`Falling back to a direct registry request for ${pkg.name}@${version}`);
+  }
+  return queryVersionViaHttp({ pkg, version, config, registryTarget });
+}
 function promptOtpWithTimeout(timeout = 9e4) {
   return new Promise((resolve, reject) => {
     const timer = setTimeout(() => {
@@ -2125,7 +2298,15 @@ async function publishToRegistryTarget({
   packageNameAndVersion,
   registryLabel
 }) {
-  const tag = determinePublishTag(pkg.newVersion || pkg.version, registryTarget.tag);
+  const tag = determinePublishTag(pkg.newVersion || pkg.version, registryTarget.tag ?? config.publish.tag);
+  if (config.publish.skipExistingVersions && !dryRun) {
+    const version = pkg.newVersion || pkg.version;
+    const alreadyPublished = await isVersionPublished({ pkg, version, config, packageManager, registryTarget });
+    if (alreadyPublished) {
+      logger.warn(`Skipping ${packageNameAndVersion}${registryLabel}: version already exists on the registry (publish.skipExistingVersions enabled)`);
+      return;
+    }
+  }
   let dynamicOtp;
   const maxAttempts = 2;
   for (let attempt = 0; attempt < maxAttempts; attempt++) {
@@ -2138,15 +2319,21 @@ async function publishToRegistryTarget({
         dryRun
       });
       process.chdir(pkg.path);
-      await executePublishCommand({
-        command,
-        packageNameAndVersion,
-        packageManager,
-        pkg,
+      await withRegistryNpmrc({
         config,
-        dryRun,
-        tag,
-        registryLabel
+        registryTarget,
+        packageName: pkg.name,
+        packageManager,
+        fn: () => executePublishCommand({
+          command,
+          packageNameAndVersion,
+          packageManager,
+          pkg,
+          config,
+          dryRun,
+          tag,
+          registryLabel
+        })
       });
       const registryKey = normalizeRegistryKey(registryTarget.registry);
       if (dynamicOtp && !sessionOtpByRegistry.has(registryKey)) {
@@ -2157,6 +2344,15 @@ async function publishToRegistryTarget({
     } catch (error) {
       if (isOtpError(error) && attempt < maxAttempts - 1) {
         dynamicOtp = await handleOtpError();
+      } else if (isVersionAlreadyPublishedError(error)) {
+        if (config.publish.skipExistingVersions) {
+          logger.warn(`Skipping ${packageNameAndVersion}${registryLabel}: version already exists on the registry (publish.skipExistingVersions enabled)`);
+          return;
+        }
+        throw new Error(
+          `Version ${packageNameAndVersion} already exists on the registry${registryLabel} and cannot be overwritten. This usually happens when re-running a release on the same commit (e.g. a canary rerun). Enable publish.skipExistingVersions (or pass --skip-existing-versions) to skip already-published versions instead of failing.`,
+          { cause: error }
+        );
       } else {
         logger.error(`Failed to publish ${packageNameAndVersion}:`, error);
         throw error;
@@ -2314,6 +2510,9 @@ function getDefaultConfig() {
       // (e.g. a corporate proxy) is honored instead of forcing the public one.
       safetyCheck: true,
       safetyCheckTimeout: 15e3,
+      // Annotated as `boolean` (not the inferred `false` literal) so the resolved
+      // config type stays assignable to true when overridden by config/CLI.
+      skipExistingVersions: false,
       packageManager: detectPackageManager(process$1.cwd())
     },
     tokens: {
@@ -3852,10 +4051,11 @@ function collectPackageBumps({
 }) {
   if (bumpedPackages && bumpedPackages.length > 0) {
     return bumpedPackages.map((pkg) => {
-      const hasTransition = Boolean(pkg.newVersion && pkg.oldVersion !== pkg.newVersion);
+      const displayOldVersion = extractVersionFromTag(pkg.fromTag, pkg.name) || pkg.oldVersion;
+      const hasTransition = Boolean(pkg.newVersion && displayOldVersion !== pkg.newVersion);
       return {
         name: pkg.name,
-        oldVersion: pkg.oldVersion,
+        oldVersion: displayOldVersion,
         newVersion: pkg.newVersion,
         version: pkg.newVersion || pkg.version,
         hasTransition
@@ -5442,9 +5642,10 @@ function buildSuccessComment({
   const distTag = config.publish?.tag;
   const installCmd = getInstallCommand(config.publish?.packageManager);
   const lines = [PR_COMMENT_MARKER, "", "## \u{1F680} Release published", ""];
+  const previousVersion = extractVersionFromTag(bumpResult?.fromTag ?? "") || bumpResult?.oldVersion;
   lines.push(...buildMetadataLines({
     version,
-    oldVersion: bumpResult?.oldVersion,
+    oldVersion: previousVersion,
     tags,
     distTag,
     date,
@@ -5559,6 +5760,32 @@ ${body}`
   }
   return await postPrComment({ config, pr, body });
 }
+async function tryPostPrComment({
+  config,
+  releaseContext,
+  prNumber,
+  dryRun,
+  logLevel,
+  configName
+}) {
+  if (!config.release.prComment) {
+    logger.info("Skipping PR comment (--no-pr-comment)");
+    return false;
+  }
+  try {
+    return await prComment({
+      prNumber,
+      dryRun,
+      logLevel,
+      configName,
+      config,
+      releaseContext
+    });
+  } catch (error) {
+    logger.warn("PR comment posting failed:", error);
+    return false;
+  }
+}
 
 async function providerReleaseSafetyCheck({ config, provider }) {
   if (!config.safetyCheck || !config.release.providerRelease) {
@@ -5686,14 +5913,19 @@ async function checkRegistryAuth({
   }, patienceDelay);
   try {
     logger.info(`Authenticating to package registry${registryLabel}...`);
-    await execPromise(authCommand, {
-      cwd: config.cwd,
-      timeout: timeoutMs,
-      noStdout: true,
-      noStderr: true,
-      noSuccess: true,
-      noError: true,
-      logLevel: config.logLevel
+    await withRegistryNpmrc({
+      config,
+      registryTarget,
+      packageManager: config.publish.packageManager,
+      fn: () => execPromise(authCommand, {
+        cwd: config.cwd,
+        timeout: timeoutMs,
+        noStdout: true,
+        noStderr: true,
+        noSuccess: true,
+        noError: true,
+        logLevel: config.logLevel
+      })
     });
     logger.info(`Successfully authenticated to package registry${registryLabel}`);
   } catch (error) {
@@ -5738,7 +5970,8 @@ async function publish(options = {}) {
         registries: options.registries,
         tag: options.tag,
         buildCmd: options.buildCmd,
-        token: options.token
+        token: options.token,
+        skipExistingVersions: options.skipExistingVersions
       },
       logLevel: options.logLevel,
       safetyCheck: options.safetyCheck
@@ -6325,7 +6558,8 @@ function getReleaseConfig(options = {}) {
         registries: options.registries,
         tag: options.tag,
         buildCmd: options.buildCmd,
-        token: options.publishToken
+        token: options.publishToken,
+        skipExistingVersions: options.skipExistingVersions
       },
       release: {
         commit: options.commit,
@@ -6365,31 +6599,51 @@ async function releaseSafetyCheck({
     throw error;
   }
 }
-async function tryPostPrComment({
+function buildReleaseSummary({
   config,
-  releaseContext,
-  prNumber,
-  dryRun,
-  logLevel,
-  configName
+  bumpResult,
+  publishResponse,
+  createdTags,
+  provider,
+  postedReleases,
+  providerError,
+  socialResults,
+  prCommentPosted
 }) {
-  if (!config.release.prComment) {
-    logger.info("Skipping PR comment (--no-pr-comment)");
-    return false;
+  const publishedPackageCount = publishResponse?.publishedPackages.length ?? 0;
+  const versionDisplay = config.monorepo?.versionMode === "independent" ? `${bumpResult.bumpedPackages.length} packages bumped independently` : bumpResult.newVersion || readPackageJson(config.cwd)?.version;
+  let providerDisplay = "Disabled";
+  if (config.release.providerRelease) {
+    if (providerError) {
+      providerDisplay = `Failed: ${providerError}`;
+    } else {
+      providerDisplay = `${postedReleases.length} release${postedReleases.length !== 1 ? "s" : ""}`;
+    }
   }
-  try {
-    return await prComment({
-      prNumber,
-      dryRun,
-      logLevel,
-      configName,
-      config,
-      releaseContext
-    });
-  } catch (error) {
-    logger.warn("PR comment posting failed:", error);
-    return false;
+  let socialDisplay = "Disabled";
+  if (config.release.social && socialResults) {
+    if (socialResults.hasErrors) {
+      const failed = socialResults.results.filter((r) => !r.success).map((r) => r.platform);
+      const succeeded = socialResults.results.filter((r) => r.success).map((r) => r.platform);
+      socialDisplay = `${succeeded.length} succeeded, ${failed.length} failed (${failed.join(", ")})`;
+    } else {
+      socialDisplay = `${socialResults.results.length} succeeded`;
+    }
+  }
+  let prCommentDisplay = "Disabled";
+  if (config.release.prComment) {
+    prCommentDisplay = prCommentPosted ? "Posted" : "Failed";
   }
+  return `Release workflow completed!
+
+Version: ${versionDisplay ?? "Unknown"}
+Tag(s): ${createdTags?.length ? createdTags.join(", ") : "None"}
+Pushed: ${config.release.push ? "Yes" : "Disabled"}
+Published packages: ${config.release.publish ? publishedPackageCount : "Disabled"}
+Provider release: ${providerDisplay}
+Social media: ${socialDisplay}
+PR comment: ${prCommentDisplay}
+Git provider: ${provider}`;
 }
 async function release(options = {}) {
   const isCanary = options.canary ?? false;
@@ -6578,40 +6832,17 @@ async function release(options = {}) {
       logLevel: config.logLevel,
       configName: options.configName
     });
-    const publishedPackageCount = publishResponse?.publishedPackages.length ?? 0;
-    const versionDisplay = config.monorepo?.versionMode === "independent" ? `${bumpResult.bumpedPackages.length} packages bumped independently` : bumpResult.newVersion || readPackageJson(config.cwd)?.version;
-    let providerDisplay = "Disabled";
-    if (config.release.providerRelease) {
-      if (providerError) {
-        providerDisplay = `Failed: ${providerError}`;
-      } else {
-        providerDisplay = `${postedReleases.length} release${postedReleases.length !== 1 ? "s" : ""}`;
-      }
-    }
-    let socialDisplay = "Disabled";
-    if (config.release.social && socialResults) {
-      if (socialResults.hasErrors) {
-        const failed = socialResults.results.filter((r) => !r.success).map((r) => r.platform);
-        const succeeded = socialResults.results.filter((r) => r.success).map((r) => r.platform);
-        socialDisplay = `${succeeded.length} succeeded, ${failed.length} failed (${failed.join(", ")})`;
-      } else {
-        socialDisplay = `${socialResults.results.length} succeeded`;
-      }
-    }
-    let prCommentDisplay = "Disabled";
-    if (config.release.prComment) {
-      prCommentDisplay = prCommentPosted ? "Posted" : "Failed";
-    }
-    logger.box(`Release workflow completed!
-
-Version: ${versionDisplay ?? "Unknown"}
-Tag(s): ${createdTags?.length ? createdTags.join(", ") : "None"}
-Pushed: ${config.release.push ? "Yes" : "Disabled"}
-Published packages: ${config.release.publish ? publishedPackageCount : "Disabled"}
-Provider release: ${providerDisplay}
-Social media: ${socialDisplay}
-PR comment: ${prCommentDisplay}
-Git provider: ${provider}`);
+    logger.box(buildReleaseSummary({
+      config,
+      bumpResult,
+      publishResponse,
+      createdTags,
+      provider,
+      postedReleases,
+      providerError,
+      socialResults,
+      prCommentPosted
+    }));
     await executeHook("success:release", config, dryRun);
   } catch (error) {
     logger.error("Error during release workflow!\n\n", error);
@@ -6632,4 +6863,4 @@ Git provider: ${provider}`);
   }
 }
 
-export { getPackagesToPublishInIndependentMode as $, getModifiedReleaseFilePatterns as A, createCommitAndTags as B, pushCommitAndTags as C, rollbackModifiedFiles as D, getFirstCommit as E, getCurrentGitBranch as F, getCurrentGitRef as G, getShortCommitSha as H, isAncestor as I, getCommitSubject as J, findReachableCommitBySubject as K, tagExists as L, retagAnnotatedLocal as M, pushTagForce as N, github as O, createGitlabRelease as P, gitlab as Q, buildCompareLink as R, buildChangelogBody as S, collectContributorNames as T, buildContributors as U, generateMarkDown as V, parseChangelogMarkdown as W, getNpmRegistry as X, detectPackageManager as Y, determinePublishTag as Z, getPackagesToPublishInSelectiveMode as _, buildCommentBody as a, shouldFilterPrereleaseTags as a$, resolveAllConfiguredRegistryTargets as a0, resolveRegistryTargetsForPackage as a1, resolveRegistryTargetsForPackages as a2, getAuthCommand as a3, publishPackage as a4, collectPackageBumps as a5, findGitHubPR as a6, findGitLabMR as a7, detectPullRequest as a8, PR_COMMENT_MARKER as a9, formatTweetMessage as aA, postReleaseToTwitter as aB, executeHook as aC, isInCI as aD, getCIName as aE, executeFormatCmd as aF, executeBuildCmd as aG, isBumpedPackage as aH, filterOutPrivatePackages as aI, getPackagesOrBumpedPackages as aJ, isGraduatingToStableBetweenVersion as aK, capReleaseTypeForZeroMajor as aL, determineSemverChange as aM, determineReleaseType as aN, writeVersion as aO, getPackageNewVersion as aP, updateLernaVersion as aQ, extractVersionFromPackageTag as aR, isPrerelease as aS, isStableReleaseType as aT, isPrereleaseReleaseType as aU, isGraduating as aV, getPreid as aW, isChangedPreid as aX, getBumpedPackageIndependently as aY, confirmBump as aZ, getBumpedIndependentPackages as a_, postPrComment as aa, redactSecrets as ab, readPackageJson as ac, getRootPackage as ad, readPackages as ae, getPackages as af, getPackageCommits as ag, hasLernaJson as ah, resetRewrittenTagCache as ai, reconcileFromTag as aj, getSlackToken as ak, getSlackWebhookUrl as al, formatChangelogForSlack as am, formatPackagesForSlack as an, formatSlackMessage as ao, postReleaseToSlack as ap, extractChangelogSummary as aq, getReleaseUrl as ar, getIndependentTag as as, getLastStableTag as at, getLastTag as au, getLastRepoTag as av, getLastPackageTag as aw, NEW_PACKAGE_MARKER as ax, resolveTags as ay, getTwitterCredentials as az, bump as b, extractVersionFromTag as b0, getCanaryVersion as b1, isTagVersionCompatibleWithCurrent as b2, changelog as c, providerReleaseSafetyCheck as d, providerRelease as e, publishSafetyCheck as f, publish as g, social as h, generateChangelog as i, getDefaultConfig as j, defineConfig as k, loadRelizyConfig as l, mergeTypes as m, getPackageDependencies as n, getDependentsOf as o, prComment as p, expandPackagesToBumpWithDependents as q, release as r, socialSafetyCheck as s, topologicalSort as t, getGitStatus as u, checkGitStatusIfDirty as v, writeChangelogToFile as w, fetchGitTags as x, detectGitProvider as y, parseGitRemoteUrl as z };
+export { getIndependentTag as $, extractVersionFromPackageTag as A, extractVersionFromTag as B, fetchGitTags as C, filterOutPrivatePackages as D, findGitHubPR as E, findGitLabMR as F, findReachableCommitBySubject as G, formatChangelogForSlack as H, formatPackagesForSlack as I, formatSlackMessage as J, formatTweetMessage as K, generateChangelog as L, generateMarkDown as M, NEW_PACKAGE_MARKER as N, getAuthCommand as O, PR_COMMENT_MARKER as P, getBumpedIndependentPackages as Q, getBumpedPackageIndependently as R, getCIName as S, getCanaryVersion as T, getCommitSubject as U, getCurrentGitBranch as V, getCurrentGitRef as W, getDefaultConfig as X, getDependentsOf as Y, getFirstCommit as Z, getGitStatus as _, buildCommentBody as a, social as a$, getLastPackageTag as a0, getLastRepoTag as a1, getLastStableTag as a2, getLastTag as a3, getModifiedReleaseFilePatterns as a4, getNpmRegistry as a5, getPackageCommits as a6, getPackageDependencies as a7, getPackageNewVersion as a8, getPackages as a9, mergeTypes as aA, parseChangelogMarkdown as aB, parseGitRemoteUrl as aC, postPrComment as aD, postReleaseToSlack as aE, postReleaseToTwitter as aF, prComment as aG, providerRelease as aH, providerReleaseSafetyCheck as aI, publish as aJ, publishPackage as aK, publishSafetyCheck as aL, pushCommitAndTags as aM, pushTagForce as aN, readPackageJson as aO, readPackages as aP, reconcileFromTag as aQ, redactSecrets as aR, release as aS, resetRewrittenTagCache as aT, resolveAllConfiguredRegistryTargets as aU, resolveRegistryTargetsForPackage as aV, resolveRegistryTargetsForPackages as aW, resolveTags as aX, retagAnnotatedLocal as aY, rollbackModifiedFiles as aZ, shouldFilterPrereleaseTags as a_, getPackagesOrBumpedPackages as aa, getPackagesToPublishInIndependentMode as ab, getPackagesToPublishInSelectiveMode as ac, getPreid as ad, getReleaseUrl as ae, getRootPackage as af, getShortCommitSha as ag, getSlackToken as ah, getSlackWebhookUrl as ai, getTwitterCredentials as aj, github as ak, gitlab as al, hasLernaJson as am, isAncestor as an, isBumpedPackage as ao, isChangedPreid as ap, isGraduating as aq, isGraduatingToStableBetweenVersion as ar, isInCI as as, isPrerelease as at, isPrereleaseReleaseType as au, isStableReleaseType as av, isTagVersionCompatibleWithCurrent as aw, isVersionAlreadyPublishedError as ax, isVersionPublished as ay, loadRelizyConfig as az, buildChangelogBody as b, socialSafetyCheck as b0, tagExists as b1, topologicalSort as b2, tryPostPrComment as b3, updateLernaVersion as b4, withRegistryNpmrc as b5, writeChangelogToFile as b6, writeVersion as b7, buildCompareLink as c, buildContributors as d, buildReleaseSummary as e, bump as f, capReleaseTypeForZeroMajor as g, changelog as h, checkGitStatusIfDirty as i, collectContributorNames as j, collectPackageBumps as k, confirmBump as l, createCommitAndTags as m, createGitlabRelease as n, defineConfig as o, detectGitProvider as p, detectPackageManager as q, detectPullRequest as r, determinePublishTag as s, determineReleaseType as t, determineSemverChange as u, executeBuildCmd as v, executeFormatCmd as w, executeHook as x, expandPackagesToBumpWithDependents as y, extractChangelogSummary as z };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "relizy",
   "type": "module",
-  "version": "1.5.0-beta.1",
+  "version": "1.5.0-beta.3",
   "description": "Changelogen adapter for monorepo management with unified and independent versioning",
   "author": "Louis Mazel <me@loicmazuel.com>",
   "license": "MIT",
@@ -55,7 +55,7 @@
     "node": ">=20.0.0"
   },
   "peerDependencies": {
-    "@slack/web-api": "^7.0.0",
+    "@slack/web-api": "^7.0.0 || ^8.0.0",
     "@yoloship/claude-sdk": "^0.2.0-beta.6",
     "twitter-api-v2": "^1.20.0"
   },
@@ -73,7 +73,7 @@
   "dependencies": {
     "@inquirer/prompts": "^8.7.2",
     "@maz-ui/node": "5.0.0-beta.26",
-    "@maz-ui/utils": "5.0.0-beta.25",
+    "@maz-ui/utils": "5.0.0-beta.39",
     "c12": "^3.3.3",
     "changelogen": "^0.6.2",
     "commander": "^15.0.0",
@@ -85,28 +85,28 @@
     "semver": "^7.8.5"
   },
   "devDependencies": {
-    "@commitlint/cli": "^21.2.2",
-    "@commitlint/config-conventional": "21.2.2",
-    "@commitlint/cz-commitlint": "^21.2.2",
-    "@commitlint/types": "^21.2.0",
-    "@maz-ui/eslint-config": "5.0.0-beta.25",
-    "@slack/web-api": "7.16.0",
+    "@commitlint/cli": "^21.2.3",
+    "@commitlint/config-conventional": "21.2.3",
+    "@commitlint/cz-commitlint": "^21.2.3",
+    "@commitlint/types": "^21.2.3",
+    "@maz-ui/eslint-config": "5.0.0-beta.43",
+    "@slack/web-api": "8.1.1",
     "@types/micromatch": "^4.0.10",
-    "@types/node": "^25.9.2",
+    "@types/node": "^26.6.2",
     "@types/semver": "^7.8.0",
-    "@vitest/coverage-v8": "^5.0.0",
+    "@vitest/coverage-v8": "^5.0.1",
     "@yoloship/claude-sdk": "0.2.0-beta.6",
     "cross-env": "10.1.0",
-    "eslint": "^10.10.0",
+    "eslint": "^10.11.0",
     "husky": "9.1.7",
     "jiti": "2.7.0",
     "lint-staged": "^17.5.1",
-    "memfs": "^4.78.0",
-    "tsx": "^4.23.13",
+    "memfs": "^4.78.1",
+    "tsx": "^4.23.15",
     "twitter-api-v2": "^1.29.1",
-    "typescript": "^6.0.3",
+    "typescript": "^6.0.0",
     "unbuild": "^3.6.1",
-    "vitest": "^5.0.0"
+    "vitest": "^5.0.1"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,mjs,mts,cjs,md,yml,json}": [