Publishing

aube implements the npm registry publish flow for package tarballs, dist-tags, deprecations, and unpublishing.

Pack

aube pack
aube pack --dry-run
aube pack --json
aube pack --pack-destination dist

pack applies npm-style file selection: files field first, otherwise standard ignore rules, with package.json, README, LICENSE, and the main entry always included.

Publish

aube publish
aube publish --tag next
aube publish --access public
aube publish --dry-run --json

Workspace fanout uses the global workspace selectors:

aube -r publish
aube -F '@acme/*' publish

Provenance

aube publish --provenance

Provenance requires an OIDC-capable CI environment such as GitHub Actions with id-token: write. aube signs a SLSA in-toto statement via Sigstore and attaches the bundle to the publish body.

Dist-tags

aube dist-tag add [email protected] stable
aube dist-tag ls react
aube dist-tag rm react stable

Deprecate and unpublish

aube deprecate pkg@'<2' "Use pkg 2 or newer"
aube undeprecate pkg@'<2'
aube unpublish [email protected] --dry-run
aube unpublish pkg --force

Whole-package unpublish requires --force.