Merge pull request #8 from nestm-dev/codex/better-auth-alpha-publish

fix: preserve prerelease npm tag

Author: kauandotnet

.github/workflows/release.yml

@@ -50,7 +50,8 @@ jobs:
           # With pending changesets: opens/updates the "Version Packages" PR.
           # When that PR is merged (no pending changesets left): publishes to
           # npm via pnpm's OIDC trusted publishing (provenance enforced via
-          # pnpm-workspace.yaml `provenance: true`) and creates the GitHub
+          # pnpm-workspace.yaml `provenance: true`). The release wrapper keeps
+          # prereleases on their Changesets dist tag and creates the GitHub
           # Release from the changelog.
           publish: pnpm run release
           version: pnpm changeset version

package.json

@@ -62,7 +62,7 @@
 		"verify:pack": "pnpm run build && publint --strict",
 		"prepack": "pnpm run build",
 		"changeset": "changeset",
-		"release": "changeset publish"
+		"release": "node scripts/publish.mjs"
 	},
 	"peerDependencies": {
 		"@nestjs/common": "^12.0.0-alpha.5",

scripts/publish-state.mjs

@@ -0,0 +1,33 @@
+const semverPrereleasePattern = /^[0-9]+\.[0-9]+\.[0-9]+-([0-9A-Za-z-]+)(?:[.+]|$)/;
+
+export function resolvePrereleaseTag(version, preState) {
+	if (typeof version !== "string") {
+		throw new TypeError("package.json requires a string version");
+	}
+
+	const prereleaseIdentifier = semverPrereleasePattern.exec(version)?.[1];
+
+	if (preState?.mode === "pre") {
+		if (typeof preState.tag !== "string" || preState.tag.length === 0) {
+			throw new Error("Changesets prerelease mode requires a non-empty tag");
+		}
+
+		if (prereleaseIdentifier === undefined) {
+			throw new Error(`Stable version ${version} cannot publish in Changesets pre mode`);
+		}
+
+		if (prereleaseIdentifier !== preState.tag) {
+			throw new Error(
+				`Version prerelease ${prereleaseIdentifier} does not match Changesets tag ${preState.tag}`,
+			);
+		}
+
+		return preState.tag;
+	}
+
+	if (prereleaseIdentifier !== undefined) {
+		throw new Error(`Prerelease version ${version} requires Changesets pre mode`);
+	}
+
+	return undefined;
+}

scripts/publish-state.spec.mjs

@@ -0,0 +1,54 @@
+import { describe, expect, it } from "vitest";
+
+import { resolvePrereleaseTag } from "./publish-state.mjs";
+
+describe("resolvePrereleaseTag", () => {
+	it("returns the matching Changesets pre-mode tag", () => {
+		expect(
+			resolvePrereleaseTag("0.1.0-alpha.2", {
+				mode: "pre",
+				tag: "alpha",
+			}),
+		).toBe("alpha");
+		expect(
+			resolvePrereleaseTag("0.1.0-alpha+build.1", {
+				mode: "pre",
+				tag: "alpha",
+			}),
+		).toBe("alpha");
+	});
+
+	it("allows a stable version outside pre mode", () => {
+		expect(resolvePrereleaseTag("1.0.0", undefined)).toBeUndefined();
+		expect(
+			resolvePrereleaseTag("1.0.0", {
+				mode: "exit",
+				tag: "alpha",
+			}),
+		).toBeUndefined();
+	});
+
+	it("rejects a prerelease without Changesets pre mode", () => {
+		expect(() => resolvePrereleaseTag("0.1.0-alpha.2", undefined)).toThrow(
+			"requires Changesets pre mode",
+		);
+	});
+
+	it("rejects a prerelease identifier that differs from the tag", () => {
+		expect(() =>
+			resolvePrereleaseTag("0.1.0-beta.1", {
+				mode: "pre",
+				tag: "alpha",
+			}),
+		).toThrow("does not match Changesets tag");
+	});
+
+	it("rejects a stable version while pre mode is active", () => {
+		expect(() =>
+			resolvePrereleaseTag("1.0.0", {
+				mode: "pre",
+				tag: "alpha",
+			}),
+		).toThrow("cannot publish in Changesets pre mode");
+	});
+});

scripts/publish.mjs

@@ -0,0 +1,98 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync, renameSync } from "node:fs";
+import { createRequire } from "node:module";
+
+import { resolvePrereleaseTag } from "./publish-state.mjs";
+
+const expectedRef = "refs/heads/main";
+
+if (
+	process.env.GITHUB_ACTIONS !== "true" ||
+	process.env.GITHUB_REF !== expectedRef ||
+	typeof process.env.GITHUB_SHA !== "string"
+) {
+	throw new Error(`Publishing is restricted to GitHub Actions on ${expectedRef}`);
+}
+
+const gitStatus = spawnSync("git", ["status", "--porcelain"], {
+	encoding: "utf8",
+});
+
+if (gitStatus.error) {
+	throw new Error("Could not inspect the git worktree", {
+		cause: gitStatus.error,
+	});
+}
+
+if (gitStatus.status !== 0) {
+	throw new Error(`git status exited with status ${gitStatus.status ?? "unknown"}`);
+}
+
+if (gitStatus.stdout.trim().length !== 0) {
+	throw new Error("Refusing to publish from a dirty git worktree");
+}
+
+const headResult = spawnSync("git", ["rev-parse", "HEAD"], {
+	encoding: "utf8",
+});
+
+if (headResult.error) {
+	throw new Error("Could not resolve the git commit", {
+		cause: headResult.error,
+	});
+}
+
+if (headResult.status !== 0) {
+	throw new Error(`git rev-parse exited with status ${headResult.status ?? "unknown"}`);
+}
+
+if (headResult.stdout.trim() !== process.env.GITHUB_SHA) {
+	throw new Error("Git HEAD does not match the GitHub Actions commit");
+}
+
+const packageJson = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+const preStateUrl = new URL("../.changeset/pre.json", import.meta.url);
+const hiddenPreStateUrl = new URL("../.changeset/pre.json.publish", import.meta.url);
+const preState = existsSync(preStateUrl)
+	? JSON.parse(readFileSync(preStateUrl, "utf8"))
+	: undefined;
+const prereleaseTag = resolvePrereleaseTag(packageJson.version, preState);
+const require = createRequire(import.meta.url);
+const changesetsBin = require.resolve("@changesets/cli/bin.js");
+const publishArguments = [changesetsBin, "publish"];
+
+if (prereleaseTag !== undefined) {
+	if (existsSync(hiddenPreStateUrl)) {
+		throw new Error("Refusing to overwrite a hidden Changesets pre-state file");
+	}
+
+	publishArguments.push("--tag", prereleaseTag);
+	renameSync(preStateUrl, hiddenPreStateUrl);
+}
+
+let publishResult;
+
+try {
+	// Changesets forces `latest` while a package has only prerelease history and
+	// rejects an explicit tag in pre mode. The validated pre-state is hidden only
+	// for this command so Changesets can publish to that same configured tag.
+	publishResult = spawnSync(process.execPath, publishArguments, {
+		stdio: "inherit",
+	});
+} finally {
+	if (prereleaseTag !== undefined && existsSync(hiddenPreStateUrl)) {
+		renameSync(hiddenPreStateUrl, preStateUrl);
+	}
+}
+
+if (publishResult.error) {
+	throw new Error("Could not start Changesets publish", {
+		cause: publishResult.error,
+	});
+}
+
+if (publishResult.signal !== null) {
+	throw new Error(`Changesets publish terminated with ${publishResult.signal}`);
+}
+
+process.exitCode = publishResult.status ?? 1;

vitest.config.ts

@@ -2,7 +2,7 @@ import { defineConfig } from "vitest/config";
 
 export default defineConfig({
 	test: {
-		include: ["tests/**/*.test.ts"],
+		include: ["tests/**/*.test.ts", "scripts/**/*.spec.mjs"],
 		setupFiles: ["tests/setup.ts"],
 		testTimeout: 20_000,
 		hookTimeout: 20_000,