zx-bulk-release 3.1.1 → 3.1.3

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [3.1.3](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.2...v3.1.3) (2026-04-13)
+
+### Fixes & improvements
+* fix: ensure temp tar dirs ([ffc0b25](https://github.com/semrel-extra/zx-bulk-release/commit/ffc0b2512c16540a4d260ffc6e02488a96b68194))
+
+## [3.1.2](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.1...v3.1.2) (2026-04-13)
+
+### Fixes & improvements
+* perf: append pkg scope to internal zx logs ([08471b9](https://github.com/semrel-extra/zx-bulk-release/commit/08471b9c87d9ef2bf24b30a99977c308cee1feaf))
+* perf: update default zx ctx file name ([9857dcd](https://github.com/semrel-extra/zx-bulk-release/commit/9857dcdcf9d1e5221eb3fc62f4919a8af2b885fc))
+* refactor: enhance cli ([8909ab2](https://github.com/semrel-extra/zx-bulk-release/commit/8909ab2496402102b33fa134275ac415b6d8297a))
+
 ## [3.1.1](https://github.com/semrel-extra/zx-bulk-release/compare/v3.1.0...v3.1.1) (2026-04-12)
 
 ### Fixes & improvements

package/README.md

@@ -44,10 +44,10 @@ GH_TOKEN=ghtoken GH_USER=username NPM_TOKEN=npmtoken npx zx-bulk-release [opts]
 ```
 | Flag                         | Description                                                                                       | Default          |
 |------------------------------|---------------------------------------------------------------------------------------------------|------------------|
-| `--receive`                  | Consume rebuild signal, analyze, preflight. Writes `.zbr-context.json`. Run before deps install.  |                  |
+| `--receive`                  | Consume rebuild signal, analyze, preflight. Writes `zbr-context.json`. Run before deps install.  |                  |
 | `--pack [dir]`               | Pack only: build, test, and write delivery tars to `dir`. No credentials needed.                  | `parcels`        |
 | `--verify [dir]`             | Verify untrusted parcels against context, copy valid ones to `parcels/`. Use `--context` for path. | `parcels`       |
-| `--context <path>`           | Path to trusted `.zbr-context.json` (used with `--verify`).                                       | `.zbr-context.json` |
+| `--context <path>`           | Path to trusted `zbr-context.json` (used with `--verify`).                                       | `zbr-context.json` |
 | `--deliver [dir]`            | Deliver only: read tars from `dir` and run delivery channels. No source code needed.              | `parcels`        |
 | `--ignore`                   | Packages to ignore: `a, b`                                                                        |                  |
 | `--include-private`          | Include `private` packages                                                                        | `false`          |
@@ -152,7 +152,7 @@ jobs:
       - uses: actions/upload-artifact@v4
         with:
           name: context-${{ github.run_id }}
-          path: .zbr-context.json
+          path: zbr-context.json
 
       # pack — deps installed, hostile code may run, zero credentials
       - if: steps.receive.outputs.status == 'proceed'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "zx-bulk-release",
   "alias": "bulk-release",
-  "version": "3.1.1",
+  "version": "3.1.3",
   "description": "zx-based alternative for multi-semantic-release",
   "type": "module",
   "exports": {

package/src/main/js/cli.js

@@ -1,7 +1,51 @@
 #!/usr/bin/env node
 
 import {argv} from 'zx-extra'
-import {run} from './index.js'
+import {run, version} from './index.js'
 import {normalizeFlags} from './config.js'
 
-run({flags: normalizeFlags(argv)})
+const flags = normalizeFlags(argv)
+
+if (flags.h || flags.help) {
+  console.log(`zx-bulk-release v${version}
+
+Usage: npx zx-bulk-release [options]
+
+Modes:
+  (no flags)              All-in-one: analyze, build, test, pack, deliver
+  --receive               Analyze & preflight, write zbr-context.json. Run BEFORE deps install
+  --pack [dir]            Build, test, pack tars to dir                           [default: parcels]
+  --verify [input-dir]    Validate parcels against context, copy valid to parcels/ [default: parcels]
+  --deliver [dir]         Deliver parcels through channels                        [default: parcels]
+
+Options:
+  --context <path>        Trusted context path (with --verify)           [default: zbr-context.json]
+  --dry-run, --no-publish Disable publish and any remote-mutating operations
+  --no-build              Skip buildCmd
+  --no-test               Skip testCmd
+  --snapshot              Publish snapshot versions to npm only
+  --ignore <a,b>          Packages to ignore
+  --include-private       Include private packages
+  --concurrency <n>       Build/publish thread limit                      [default: os.cpus().length]
+  --only-workspace-deps   Recognize only workspace: deps as graph edges
+  --no-npm-fetch          Disable npm artifact fetching
+  --report <path>         Persist release state to file
+  --debug                 Enable verbose mode
+  -v, --version           Print version
+  -h, --help              Show this help`)
+  process.exit(0)
+}
+
+if (flags.v || flags.version) {
+  console.log(version)
+  process.exit(0)
+}
+
+try {
+  await run({flags})
+  process.exit(0)
+} catch (e) {
+  if (e?.exitCode !== undefined) process.exit(e.exitCode)
+  console.error(e)
+  process.exit(1)
+}

package/src/main/js/index.js

@@ -1 +1 @@
-export {run} from './post/release.js'
+export {run, version} from './post/release.js'

package/src/main/js/post/depot/context.js

@@ -1,6 +1,6 @@
 import {fs, path} from 'zx-extra'
 
-export const CONTEXT_FILE = '.zbr-context.json'
+export const CONTEXT_FILE = 'zbr-context.json'
 
 export const writeContext = async (cwd, context) => {
   const filePath = path.resolve(cwd, CONTEXT_FILE)

package/src/main/js/post/depot/generators/meta.js

@@ -1,7 +1,7 @@
 // Meta generator: builds pkg.meta payload and resolves latest-release meta from git tags / gh assets / meta branch.
 
 import {semver, $, fs, path} from 'zx-extra'
-import {fetchRepo, getTags as getGitTags, getRepo} from '../../api/git.js'
+import {fetchRepo, getTags as getGitTags, getRepo, getSha} from '../../api/git.js'
 import {fetchManifest} from '../../api/npm.js'
 import {ghGetAsset} from '../../api/gh.js'
 import {parseTag} from './tag.js'
@@ -16,7 +16,7 @@ export const prepareMeta = async (pkg) => {
   if (type === null) return
 
   const {absPath: cwd} = pkg
-  const hash = (await $.o({cwd})`git rev-parse HEAD`).toString().trim()
+  const hash = await getSha(cwd)
   pkg.meta = {
     META_VERSION: '1',
     hash,

package/src/main/js/post/depot/steps/contextify.js

@@ -42,9 +42,9 @@ export const contextify = async (pkg, ctx) => {
   pkg.ctx = {
     ...ctx,
     git: {
-      sha: await getSha(pkg.absPath),
-      root: await getRoot(pkg.absPath),
-      timestamp: await getCommitTimestamp(pkg.absPath),
+      sha: await getSha(ctx.cwd),
+      root: await getRoot(ctx.cwd),
+      timestamp: await getCommitTimestamp(ctx.cwd),
     },
   }
 }

package/src/main/js/post/depot/steps/pack.js

@@ -1,3 +1,4 @@
+import crypto from 'node:crypto'
 import {$, tempy, fs, path} from 'zx-extra'
 import {memoizeBy, asTuple} from '../../../util.js'
 import {prepare, getActiveChannels} from '../../courier/index.js'
@@ -41,7 +42,7 @@ export const pack = memoizeBy(async (pkg, ctx = pkg.ctx) => {
   const tars = []
   for (const {channel, manifest, files} of parcels) {
     // Two-pass: pack to temp, hash, rename to final name.
-    const tmpPath = path.join(stageDir, `_tmp.${channel}.tar`)
+    const tmpPath = path.join(stageDir, `_tmp.${crypto.randomUUID()}.tar`)
     await packTar(tmpPath, manifest, files)
     const hash = await hashFile(tmpPath)
     const sha7 = ctx.git.sha.slice(0, 7)

package/src/main/js/post/release.js

@@ -14,46 +14,21 @@ import {runPack} from './modes/pack.js'
 
 const ZBR_VERSION = createRequire(import.meta.url)('../../../../package.json').version
 
-const HELP = `
-zx-bulk-release v${ZBR_VERSION}
-
-Usage: npx zx-bulk-release [options]
-
-Modes:
-  (no flags)              All-in-one: analyze, build, test, pack, deliver
-  --receive               Analyze & preflight. Writes .zbr-context.json. Run BEFORE deps install.
-  --pack [dir]            Build, test, pack tars to dir.                          [default: parcels]
-  --verify [dir]          Validate parcels against context, copy to parcels/.     [default: parcels]
-  --deliver [dir]         Deliver parcels through channels.                       [default: parcels]
-
-Options:
-  --context <path>        Path to .zbr-context.json (with --verify).     [default: .zbr-context.json]
-  --dry-run, --no-publish Disable any publish / remote-mutating logic.
-  --no-build              Skip buildCmd.
-  --no-test               Skip testCmd.
-  --snapshot              Publish snapshot versions to npm only.
-  --ignore <a,b>          Packages to ignore.
-  --include-private       Include private packages.
-  --concurrency <n>       Build/publish thread limit.                        [default: os.cpus().length]
-  --only-workspace-deps   Recognize only workspace: deps as graph edges.
-  --no-npm-fetch          Disable npm artifact fetching.
-  --report <path>         Persist release state to file.
-  --debug                 Enable verbose mode.
-  -v, --version           Print version.
-  -h, --help              Show this help.
-`.trim()
+export {ZBR_VERSION as version}
 
 export const run = async ({cwd = process.cwd(), env: _env, flags = {}} = {}) => within(async () => {
-  if (flags.h || flags.help)
-    return console.log(HELP)
-
-  if (flags.v || flags.version)
-    return console.log(ZBR_VERSION)
-
   const env = {...process.env, ..._env}
   log.secret(env.GH_TOKEN, env.GITHUB_TOKEN, env.NPM_TOKEN)
   log.info(`zx-bulk-release@${ZBR_VERSION}`)
 
+  const _log = $.log
+  $.log = (entry) => {
+    if (entry.kind === 'cmd' && $.scope) {
+      entry = {...entry, cmd: `[${$.scope}] ${entry.cmd}`}
+    }
+    _log(entry)
+  }
+
   if (flags.verify)  return runVerify({cwd, flags})
   if (flags.deliver) return runDeliver({env, flags})
 

package/src/main/js/post/tar.js

@@ -5,6 +5,7 @@ import {pipeline} from 'node:stream/promises'
 import {createWriteStream, createReadStream} from 'node:fs'
 
 export const packTar = async (tarPath, manifest, files = []) => {
+  await fs.ensureDir(path.dirname(tarPath))
   const pack = tar.pack()
   const json = JSON.stringify(manifest, null, 2)
   pack.entry({name: 'manifest.json', size: Buffer.byteLength(json)}, json)