fix(ci): resume registry acceptance after publish

Author: rockyshi1993

.github/workflows/publish.yml

@@ -81,7 +81,28 @@ jobs:
           fi
           npm whoami --registry=https://registry.npmjs.org/
 
+      - name: Inspect existing registry state
+        id: registry-state
+        shell: bash
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          EXPECTED_GIT_HEAD=$(git rev-parse HEAD)
+          PUBLISHED_VERSION=$(npm view "monsqlize@${VERSION}" version --registry=https://registry.npmjs.org/ 2>/dev/null || true)
+          if [ "${PUBLISHED_VERSION}" != "${VERSION}" ]; then
+            echo "already_published=false" >> "${GITHUB_OUTPUT}"
+            exit 0
+          fi
+
+          REGISTRY_GIT_HEAD=$(npm view "monsqlize@${VERSION}" gitHead --registry=https://registry.npmjs.org/)
+          if [ "${REGISTRY_GIT_HEAD}" != "${EXPECTED_GIT_HEAD}" ]; then
+            echo "::error::monsqlize@${VERSION} already exists with gitHead=${REGISTRY_GIT_HEAD:-missing}; expected=${EXPECTED_GIT_HEAD}"
+            exit 1
+          fi
+          echo "monsqlize@${VERSION} already exists from this exact tag commit; publish will be skipped and registry acceptance will resume."
+          echo "already_published=true" >> "${GITHUB_OUTPUT}"
+
       - name: Publish to npm
+        if: steps.registry-state.outputs.already_published != 'true'
         run: npm publish --provenance --access public --ignore-scripts
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -113,7 +134,7 @@ jobs:
           mkdir -p "${CONSUMER_DIR}"
           cd "${CONSUMER_DIR}"
           npm init -y
-          npm install "monsqlize@${VERSION}" "[email protected]" --ignore-scripts --no-audit --no-fund --registry=https://registry.npmjs.org/
+          npm install "monsqlize@${VERSION}" "[email protected]" "@types/[email protected]" --ignore-scripts --no-audit --no-fund --registry=https://registry.npmjs.org/
           node -e "const p=require('monsqlize/package.json'); const M=require('monsqlize'); if(!M || p.version!==process.argv[1] || typeof M.dataTasks?.preview!=='function') process.exit(1)" "${VERSION}"
           node --input-type=module -e "import M,{dataTasks} from 'monsqlize'; if(!M || typeof dataTasks?.apply!=='function') process.exit(1)"
           node -e "require('node:fs').writeFileSync('consumer.ts', \"import MonSQLize, { dataTasks } from 'monsqlize';\\nvoid MonSQLize; void dataTasks.preview;\\n\")"

changelogs/unreleased.md

@@ -2,7 +2,7 @@
 
 ## Changes after v3.1.0
 
-No changes are currently recorded after v3.1.0.
+- Made the npm publish workflow recoverable after a successful publish followed by a registry-smoke failure: an existing version is accepted only when its registry `gitHead` matches the immutable tag commit, publish is then skipped, and acceptance resumes. The TypeScript registry consumer now installs the Node type declarations required by MongoDB's public declarations.
 
 ## v3.0.0 development inventory (released 2026-07-15)
 

test/smoke/release-contract.test.ts

@@ -77,11 +77,15 @@ test('release paths consume the complete single-source preflight gate', () => {
     assert.match(publishWorkflow, /npm run release:preflight/);
     assert.match(publishWorkflow, /dist\.integrity/);
     assert.match(publishWorkflow, /dist-tags\.latest/);
+    assert.match(publishWorkflow, /id: registry-state/);
+    assert.match(publishWorkflow, /REGISTRY_GIT_HEAD/);
+    assert.match(publishWorkflow, /if: steps\.registry-state\.outputs\.already_published != 'true'/);
     assert.match(publishWorkflow, /mkdir -p "\$\{CONSUMER_DIR\}"/);
     assert.match(publishWorkflow, /cd "\$\{CONSUMER_DIR\}"/);
     assert.match(publishWorkflow, /require\('monsqlize'\)/);
     assert.match(publishWorkflow, /from 'monsqlize'/);
     assert.match(publishWorkflow, /consumer\.ts/);
+    assert.match(publishWorkflow, /"@types\/node@25\.6\.2"/);
     assert.match(publishWorkflow, /\.\/node_modules\/\.bin\/monsqlize/);
     assert.doesNotMatch(publishWorkflow, /CONSUMER_DIR.*dist\/esm\/index\.mjs/);
     assert.match(publishWorkflow, /dataTasks/);