[aledbf]

Problem. PushArtifact only warned when a tag's manifest PUT failed and went on with the remaining tags. So features publish / templates publish printed the tags that made it, pushed the collection metadata and exited 0. Only "every tag failed" was an error.

Reference (v0.90.0).

• putManifestWithTags (containerCollectionsOCIPush.ts) stops at the first PUT that isn't 201 and logs Failed to PUT manifest for tag <tag>.
• doPublishCommand logs (!) ERR: Failed to publish <type>: '<resource>'.
• featuresCLI/publish.ts / templatesCLI/publish.ts log (!) ERR: Failed to publish '<resource>' and process.exit(1) inside the item loop, so there's no metadata push and no stdout.

Fix. PushArtifact returns an error at the first failed tag; tags pushed before it stay pushed, as in TS. publishOne already logged both (!) ERR lines and exited 1 on an error.

Tests (fail on main)

• TestPushArtifact_BearerAuthAndStopsAtFirstFailedTag replaces …PartialTagFailure. With 1.0 rejected, the PUTs are exactly [1 1.0], only 1 lands, the error names the tag and the resource, and the log has Failed to PUT manifest for tag 1.0.
• TestPublishCollection_FailedTagPushExits (feature, template): exit 1, empty stdout, both (!) ERR lines, no metadata PUT. It uses a small in-memory registry, pushRegistry, with the real OCI client.
• TestPublishParity/tag_failure (feature, template): runs the TS reference and Go against that registry and requires the same stdout, exit code, error lines, tag PUTs and metadata PUTs. Against main, Go printed a result, exited 0, PUT [1 1.0 1.0.0 latest] and pushed metadata.

Still different from TS (unchanged): the line after Failed to PUT manifest is oras's error text rather than the registry's JSON body; the success line reads Published tag: X where TS writes Tagged: X -> <location>.

Validation (local)

• task lint: pass.
• task parity:publish: pass (tag_failure, features, templates).
• task test:race with TMPDIR outside /tmp: pass.
• task parity:contract: only the 2 known read-configuration.features-configuration-local-feature-* cases fail locally (/tmp/.git, same on main).

🤖 Generated with Claude Code