wyvrnpm 2.10.0 → 2.10.2

package/README.md

@@ -431,6 +431,10 @@ wyvrnpm publish --path ./dist
 
 # Overwrite an existing build (same version + profile hash)
 wyvrnpm publish --force
+
+# Dry-run — show the upload plan without touching the registry
+wyvrnpm publish --dry-run
+wyvrnpm publish --dry-run --format json | jq '.wouldOverwrite, .plan'
 ```
 
 **Options**
@@ -445,6 +449,7 @@ wyvrnpm publish --force
 | `--path` | `.` | Directory to zip and publish. |
 | `--manifest` | `./wyvrn.json` | Path to the manifest file. |
 | `--force` / `-f` | `false` | Overwrite an existing published version (same version + profile hash). |
+| `--dry-run` | `false` | Run every step (profile, options, zip, SHA256, `v2Exists` check) and print the upload plan, but skip the provider write. An existing published version is reported as a warning (not an error) so the full plan still prints. Pair with `--format json` to gate CI on `wouldOverwrite`. |
 
 During publish the tool also:
 - reads `wyvrn.lock` to pin locked dependency versions into the uploaded manifest

package/bin/wyvrn.js

@@ -529,6 +529,17 @@ yargs
           description: 'Overwrite an existing published version',
           default: false,
         })
+        .option('dry-run', {
+          type: 'boolean',
+          default: false,
+          description:
+            'Mirror of `npm publish --dry-run` — run every step (profile, ' +
+            'options, zip, SHA256, v2Exists check) and print the upload plan, ' +
+            'but skip the provider write. An existing published version is ' +
+            'reported as a warning instead of failing. Pair with --format json ' +
+            'to script bulk publish validation (plan + wouldOverwrite flag ' +
+            'land in stdout).',
+        })
         .option('option', {
           alias: 'o',
           type: 'string',
@@ -554,7 +565,12 @@ yargs
         })
         ;
     },
-    (argv) => publish({ ...argv, awsProfile: argv['aws-profile'], tokenEnv: argv['token-env'] }),
+    (argv) => publish({
+      ...argv,
+      awsProfile: argv['aws-profile'],
+      tokenEnv:   argv['token-env'],
+      dryRun:     argv['dry-run'],
+    }),
   )
 
   // ── configure ─────────────────────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wyvrnpm",
-  "version": "2.10.0",
+  "version": "2.10.2",
   "description": "A simple, static-hosting-compatible C++ package manager",
   "keywords": [
     "c++",

package/src/commands/publish.js

@@ -22,6 +22,59 @@ const { loadIgnorePatterns, isIgnored }                    = require('../ignore'
 const { hasBuildRecipe, normalizeRecipe }                  = require('../build/recipe');
 const log                                                  = require('../logger');
 
+/**
+ * Human-friendly byte formatter for the dry-run summary.
+ *
+ * @param {number} n
+ * @returns {string}
+ */
+function formatBytes(n) {
+  if (!Number.isFinite(n) || n < 0) return `${n}`;
+  if (n < 1024)             return `${n} B`;
+  if (n < 1024 * 1024)      return `${(n / 1024).toFixed(1)} KB`;
+  if (n < 1024 * 1024 * 1024) return `${(n / 1024 / 1024).toFixed(2)} MB`;
+  return `${(n / 1024 / 1024 / 1024).toFixed(2)} GB`;
+}
+
+/**
+ * Compute the registry URLs/paths that `v2Publish` would write to. Pure —
+ * no network, no filesystem. Mirrors the keys produced by S3/HTTP/File
+ * providers (§4.5 of CLAUDE.md), so dry-run can surface the exact shape
+ * of the upload without actually performing it.
+ *
+ * @param {{
+ *   source:       string,
+ *   name:         string,
+ *   version:      string,
+ *   profileHash:  string,
+ *   gitSha?:      string | null,
+ *   gitRepo?:     string | null,
+ *   updateLatest?: boolean,
+ * }} opts
+ * @returns {Array<{ path: string, kind: 'wyvrn.zip'|'wyvrn.json'|'source.json'|'versions.json'|'latest.json' }>}
+ */
+function planPublishUrls({
+  source, name, version, profileHash,
+  gitSha = null, gitRepo = null, updateLatest = true,
+}) {
+  const base = source.replace(/\/$/, '');
+  const v2root    = `${base}/v2/${name}`;
+  const buildRoot = `${v2root}/${version}/${profileHash}`;
+
+  const plan = [
+    { path: `${buildRoot}/wyvrn.zip`,   kind: 'wyvrn.zip' },
+    { path: `${buildRoot}/wyvrn.json`,  kind: 'wyvrn.json' },
+  ];
+  if (gitSha || gitRepo) {
+    plan.push({ path: `${v2root}/${version}/source.json`, kind: 'source.json' });
+  }
+  plan.push({ path: `${v2root}/versions.json`, kind: 'versions.json' });
+  if (updateLatest) {
+    plan.push({ path: `${v2root}/latest.json`, kind: 'latest.json' });
+  }
+  return plan;
+}
+
 /**
  * Walk `dir` recursively and add every file to `zip`, skipping anything that
  * matches `.wyvrnignore` patterns OR whose zip-relative path is already in
@@ -146,7 +199,11 @@ async function publish(argv) {
 
   const { source, awsProfile, token } = resolveSource(argv, ctx);
   const { path: publishPath, force } = argv;
+  const dryRun  = Boolean(argv.dryRun);
   const jsonOut = ctx.flags.format === 'json';
+  if (dryRun) {
+    log.info('DRY RUN — no upload will occur. Previewing publish plan only.');
+  }
 
   // ── Load manifest ─────────────────────────────────────────────────────────
   // ctx.manifest is a lazy getter — throws on first access if the file is
@@ -221,10 +278,18 @@ async function publish(argv) {
   );
 
   // ── Check v2 existence ────────────────────────────────────────────────────
+  // Dry-run softens the overwrite-without-force error to a warning so the
+  // full plan still prints — CI callers should parse `--format json` and
+  // gate on `wouldOverwrite` rather than on the exit code.
   const v2AlreadyExists = await provider.v2Exists({ source, name, version, profileHash, awsProfile, token });
   if (v2AlreadyExists) {
     if (force) {
       log.warn(`${name}@${version} [${profileHash}] already exists — overwriting (--force)`);
+    } else if (dryRun) {
+      log.warn(
+        `${name}@${version} [${profileHash}] already exists on the registry. ` +
+        `A real publish would refuse without --force.`,
+      );
     } else {
       log.error(
         `${name}@${version} [${profileHash}] already exists.\n` +
@@ -380,7 +445,60 @@ async function publish(argv) {
     zip.writeZip(tmpZipPath);
 
     const contentSha256 = sha256Of(tmpZipPath);
+    const zipBytes      = fs.statSync(tmpZipPath).size;
+    const manifestBytes = fs.statSync(tmpManifestPath).size;
     log.info(`Content SHA256 : ${contentSha256}`);
+    log.info(`Zip size       : ${formatBytes(zipBytes)} (${zipBytes} bytes)`);
+
+    // ── Dry run: print the plan, skip the actual upload ──────────────────
+    // Mirrors `npm publish --dry-run` — every step above (profile, options,
+    // zip, hash, v2Exists) runs; only the provider write is skipped.
+    if (dryRun) {
+      const plan = planPublishUrls({
+        source, name, version, profileHash, gitSha, gitRepo, updateLatest: true,
+      });
+
+      if (!jsonOut) {
+        console.log();
+        console.log(`Would publish ${name}@${version} [${profileHash}] to ${source}`);
+        console.log(`  contentSha256 : ${contentSha256}`);
+        console.log(`  zip size      : ${formatBytes(zipBytes)}`);
+        console.log(`  manifest size : ${formatBytes(manifestBytes)}`);
+        if (v2AlreadyExists) {
+          console.log(`  overwrite     : YES — ${force ? '--force set, would proceed' : 'NOT SET, real publish would refuse'}`);
+        }
+        console.log();
+        console.log('Registry writes:');
+        for (const { path: p, kind } of plan) {
+          console.log(`  → ${p}    (${kind})`);
+        }
+        console.log();
+        log.success('Dry run OK — nothing uploaded.');
+      } else {
+        const payload = {
+          command:        'publish',
+          dryRun:         true,
+          wyvrnpmVersion: require('../../package.json').version,
+          name,
+          version,
+          profileHash,
+          source,
+          contentSha256,
+          zipBytes,
+          manifestBytes,
+          options:         effectiveOptions ?? null,
+          gitSha:          gitSha  ?? null,
+          gitRepo:         gitRepo ?? null,
+          wouldOverwrite:  Boolean(v2AlreadyExists),
+          forceSet:        Boolean(force),
+          publishedLock,
+          publishedConf:   Object.keys(publishedConf).length > 0 ? unflattenConf(publishedConf) : null,
+          plan,
+        };
+        process.stdout.write(JSON.stringify(payload, null, 2) + '\n');
+      }
+      return;
+    }
 
     // ── v2 publish ────────────────────────────────────────────────────────
     log.info('Publishing (v2) ...');
@@ -433,3 +551,5 @@ module.exports = publish;
 module.exports.addFolderFiltered       = addFolderFiltered;
 module.exports.addInstallTree          = addInstallTree;
 module.exports.collectInstallTreeFiles = collectInstallTreeFiles;
+module.exports.planPublishUrls         = planPublishUrls;
+module.exports.formatBytes             = formatBytes;