@bensandee/tooling 0.28.1 → 0.30.0

package/README.md

@@ -62,7 +62,7 @@ The generated `ci:check` script defaults to `pnpm check --skip 'docker:*'` since
 
 | Command                          | Description                                                                                                                     |
 | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
-| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. Flag: `--dry-run`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `FORGEJO_TOKEN`. |
+| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. Flag: `--dry-run`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `RELEASE_TOKEN`. |
 | `tooling release:simple`         | Streamlined release using commit-and-tag-version.                                                                               |
 | `tooling release:trigger`        | Trigger a release workflow.                                                                                                     |
 | `tooling forgejo:create-release` | Create a Forgejo release from a tag.                                                                                            |

package/dist/bin.mjs

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
-import { l as createRealExecutor$1, t as runDockerCheck, u as isExecSyncError } from "./check-D41R218h.mjs";
+import { l as createRealExecutor$1, t as runDockerCheck, u as isExecSyncError } from "./check-DMDdHanG.mjs";
 import { defineCommand, runMain } from "citty";
 import * as clack from "@clack/prompts";
 import { isCancel, select } from "@clack/prompts";
 import path from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
+import { execSync } from "node:child_process";
 import JSON5 from "json5";
 import { parse } from "jsonc-parser";
 import { z } from "zod";
 import { FatalError, TransientError, UnexpectedError } from "@bensandee/common";
 import { isMap, isScalar, isSeq, parse as parse$1, parseDocument, stringify } from "yaml";
-import { execSync } from "node:child_process";
 import picomatch from "picomatch";
 import { tmpdir } from "node:os";
 //#region src/utils/log.ts
@@ -130,9 +130,43 @@ function detectProject(targetDir) {
 		hasChangesetsConfig: exists(".changeset/config.json"),
 		hasRepositoryField: !!rootPkg?.repository,
 		hasCommitAndTagVersion: !!rootPkg?.devDependencies?.["commit-and-tag-version"],
+		gitRemoteUrl: detectGitRemoteUrl(targetDir),
 		legacyConfigs: detectLegacyConfigs(targetDir)
 	};
 }
+/** Read git remote origin URL and normalize to HTTPS. */
+function detectGitRemoteUrl(targetDir) {
+	try {
+		return normalizeGitUrl(execSync("git remote get-url origin", {
+			cwd: targetDir,
+			stdio: [
+				"ignore",
+				"pipe",
+				"ignore"
+			],
+			timeout: 5e3
+		}).toString().trim());
+	} catch (_error) {
+		return null;
+	}
+}
+/**
+* Normalize a git remote URL to a clean HTTPS URL.
+* Handles SSH (git@host:owner/repo.git) and HTTPS variants.
+*/
+function normalizeGitUrl(raw) {
+	const sshMatch = raw.match(/^git@([^:]+):(.+?)(?:\.git)?$/);
+	if (sshMatch) return `https://${sshMatch[1]}/${sshMatch[2]}`;
+	try {
+		const url = new URL(raw);
+		url.pathname = url.pathname.replace(/\.git$/, "");
+		url.username = "";
+		url.password = "";
+		return url.toString().replace(/\/$/, "");
+	} catch (_error) {
+		return null;
+	}
+}
 /** Scan for legacy/conflicting tooling config files. */
 function detectLegacyConfigs(targetDir) {
 	let entries;
@@ -1327,16 +1361,121 @@ function matchesManagedScript(scriptValue, expectedFragment) {
 const DEPRECATED_SCRIPTS = ["tooling:init", "tooling:update"];
 /** DevDeps that belong in every project (single repo) or per-package (monorepo). */
 const PER_PACKAGE_DEV_DEPS = {
-	"@types/node": "25.3.2",
-	tsdown: "0.20.3",
-	typescript: "5.9.3",
-	vitest: "4.0.18"
+	"@types/node": {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["@types/node"],
+	tsdown: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["tsdown"],
+	typescript: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["typescript"],
+	vitest: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["vitest"]
 };
 /** DevDeps that belong at the root regardless of structure. */
 const ROOT_DEV_DEPS = {
-	knip: "5.85.0",
-	lefthook: "2.1.2",
-	oxlint: "1.50.0"
+	knip: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["knip"],
+	lefthook: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["lefthook"],
+	oxlint: {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["oxlint"]
 };
 /**
 * Check if a package name is available as a workspace dependency.
@@ -1364,12 +1503,74 @@ const UPDATE_EXCLUDE = new Set(["@types/node"]);
 function addReleaseDeps(deps, config) {
 	switch (config.releaseStrategy) {
 		case "release-it":
-			deps["release-it"] = "18.1.2";
-			if (config.structure === "monorepo") deps["@release-it/bumper"] = "7.0.2";
+			deps["release-it"] = {
+				"@changesets/cli": "2.30.0",
+				"@release-it/bumper": "7.0.5",
+				"commit-and-tag-version": "12.7.0",
+				"knip": "5.87.0",
+				"lefthook": "2.1.4",
+				"oxfmt": "0.41.0",
+				"oxlint": "1.56.0",
+				"prettier": "3.8.1",
+				"release-it": "19.2.4",
+				"@types/node": "24.12.0",
+				"tsdown": "0.21.4",
+				"typescript": "5.9.3",
+				"vitest": "4.1.0",
+				"pnpm": "10.32.1"
+			}["release-it"];
+			if (config.structure === "monorepo") deps["@release-it/bumper"] = {
+				"@changesets/cli": "2.30.0",
+				"@release-it/bumper": "7.0.5",
+				"commit-and-tag-version": "12.7.0",
+				"knip": "5.87.0",
+				"lefthook": "2.1.4",
+				"oxfmt": "0.41.0",
+				"oxlint": "1.56.0",
+				"prettier": "3.8.1",
+				"release-it": "19.2.4",
+				"@types/node": "24.12.0",
+				"tsdown": "0.21.4",
+				"typescript": "5.9.3",
+				"vitest": "4.1.0",
+				"pnpm": "10.32.1"
+			}["@release-it/bumper"];
+			break;
+		case "simple":
+			deps["commit-and-tag-version"] = {
+				"@changesets/cli": "2.30.0",
+				"@release-it/bumper": "7.0.5",
+				"commit-and-tag-version": "12.7.0",
+				"knip": "5.87.0",
+				"lefthook": "2.1.4",
+				"oxfmt": "0.41.0",
+				"oxlint": "1.56.0",
+				"prettier": "3.8.1",
+				"release-it": "19.2.4",
+				"@types/node": "24.12.0",
+				"tsdown": "0.21.4",
+				"typescript": "5.9.3",
+				"vitest": "4.1.0",
+				"pnpm": "10.32.1"
+			}["commit-and-tag-version"];
 			break;
-		case "simple": break;
 		case "changesets":
-			deps["@changesets/cli"] = "2.29.4";
+			deps["@changesets/cli"] = {
+				"@changesets/cli": "2.30.0",
+				"@release-it/bumper": "7.0.5",
+				"commit-and-tag-version": "12.7.0",
+				"knip": "5.87.0",
+				"lefthook": "2.1.4",
+				"oxfmt": "0.41.0",
+				"oxlint": "1.56.0",
+				"prettier": "3.8.1",
+				"release-it": "19.2.4",
+				"@types/node": "24.12.0",
+				"tsdown": "0.21.4",
+				"typescript": "5.9.3",
+				"vitest": "4.1.0",
+				"pnpm": "10.32.1"
+			}["@changesets/cli"];
 			break;
 	}
 }
@@ -1378,9 +1579,39 @@ function getAddedDevDepNames(config) {
 	const deps = { ...ROOT_DEV_DEPS };
 	if (config.structure !== "monorepo") Object.assign(deps, PER_PACKAGE_DEV_DEPS);
 	deps["@bensandee/config"] = "0.9.1";
-	deps["@bensandee/tooling"] = "0.28.1";
-	if (config.formatter === "oxfmt") deps["oxfmt"] = "0.35.0";
-	if (config.formatter === "prettier") deps["prettier"] = "3.8.1";
+	deps["@bensandee/tooling"] = "0.30.0";
+	if (config.formatter === "oxfmt") deps["oxfmt"] = {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["oxfmt"];
+	if (config.formatter === "prettier") deps["prettier"] = {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["prettier"];
 	addReleaseDeps(deps, config);
 	return Object.keys(deps).filter((name) => !UPDATE_EXCLUDE.has(name));
 }
@@ -1403,10 +1634,40 @@ async function generatePackageJson(ctx) {
 	const devDeps = { ...ROOT_DEV_DEPS };
 	if (!isMonorepo) Object.assign(devDeps, PER_PACKAGE_DEV_DEPS);
 	devDeps["@bensandee/config"] = isWorkspacePackage(ctx, "@bensandee/config") ? "workspace:*" : "0.9.1";
-	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.28.1";
+	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.30.0";
 	if (ctx.config.useEslintPlugin) devDeps["@bensandee/eslint-plugin"] = isWorkspacePackage(ctx, "@bensandee/eslint-plugin") ? "workspace:*" : "0.9.2";
-	if (ctx.config.formatter === "oxfmt") devDeps["oxfmt"] = "0.35.0";
-	if (ctx.config.formatter === "prettier") devDeps["prettier"] = "3.8.1";
+	if (ctx.config.formatter === "oxfmt") devDeps["oxfmt"] = {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["oxfmt"];
+	if (ctx.config.formatter === "prettier") devDeps["prettier"] = {
+		"@changesets/cli": "2.30.0",
+		"@release-it/bumper": "7.0.5",
+		"commit-and-tag-version": "12.7.0",
+		"knip": "5.87.0",
+		"lefthook": "2.1.4",
+		"oxfmt": "0.41.0",
+		"oxlint": "1.56.0",
+		"prettier": "3.8.1",
+		"release-it": "19.2.4",
+		"@types/node": "24.12.0",
+		"tsdown": "0.21.4",
+		"typescript": "5.9.3",
+		"vitest": "4.1.0",
+		"pnpm": "10.32.1"
+	}["prettier"];
 	addReleaseDeps(devDeps, ctx.config);
 	if (existing) {
 		const pkg = parsePackageJson(existing);
@@ -1446,6 +1707,13 @@ async function generatePackageJson(ctx) {
 			changes.push(`updated devDependency: ${key} to ${value}`);
 		}
 		pkg.devDependencies = existingDevDeps;
+		if (!pkg.repository) {
+			const repoUrl = detectGitRemoteUrl(ctx.targetDir);
+			if (repoUrl) {
+				pkg.repository = repoUrl;
+				changes.push("added repository from git remote");
+			}
+		}
 		if (!pkg["engines"]) {
 			pkg["engines"] = { node: ">=24.13.0" };
 			changes.push("set engines.node >= 24.13.0");
@@ -1462,15 +1730,32 @@ async function generatePackageJson(ctx) {
 			description: changes.join(", ")
 		};
 	}
+	const repoUrl = detectGitRemoteUrl(ctx.targetDir);
 	const pkg = {
 		name: ctx.config.name,
 		version: "0.1.0",
 		private: true,
+		...repoUrl && { repository: repoUrl },
 		type: "module",
 		scripts: allScripts,
 		devDependencies: devDeps,
 		engines: { node: ">=24.13.0" },
-		packageManager: "pnpm@10.29.3"
+		packageManager: `pnpm@${{
+			"@changesets/cli": "2.30.0",
+			"@release-it/bumper": "7.0.5",
+			"commit-and-tag-version": "12.7.0",
+			"knip": "5.87.0",
+			"lefthook": "2.1.4",
+			"oxfmt": "0.41.0",
+			"oxlint": "1.56.0",
+			"prettier": "3.8.1",
+			"release-it": "19.2.4",
+			"@types/node": "24.12.0",
+			"tsdown": "0.21.4",
+			"typescript": "5.9.3",
+			"vitest": "4.1.0",
+			"pnpm": "10.32.1"
+		}["pnpm"]}`
 	};
 	ctx.write(filePath, JSON.stringify(pkg, null, 2) + "\n");
 	return {
@@ -2494,7 +2779,7 @@ function releaseItWorkflow(ci, nodeVersionYaml, publishesNpm) {
 permissions:
   contents: write
 ` : "";
-	const tokenEnv = isGitHub ? `GITHUB_TOKEN: \${{ github.token }}` : `FORGEJO_TOKEN: \${{ secrets.FORGEJO_TOKEN }}`;
+	const tokenEnv = isGitHub ? `GITHUB_TOKEN: \${{ github.token }}` : `RELEASE_TOKEN: \${{ secrets.RELEASE_TOKEN }}`;
 	const npmEnv = publishesNpm ? `\n          NODE_AUTH_TOKEN: \${{ secrets.NPM_TOKEN }}` : "";
 	return `${workflowSchemaComment(ci)}name: Release
 on:
@@ -2530,7 +2815,7 @@ permissions:
         env:
           FORGEJO_SERVER_URL: \${{ github.server_url }}
           FORGEJO_REPOSITORY: \${{ github.repository }}
-          FORGEJO_TOKEN: \${{ secrets.FORGEJO_TOKEN }}
+          RELEASE_TOKEN: \${{ secrets.RELEASE_TOKEN }}
         run: pnpm exec bst release:simple`;
 	return `${workflowSchemaComment(ci)}name: Release
 on:
@@ -2568,7 +2853,7 @@ function changesetsReleaseStep(ci, publishesNpm) {
 			env: {
 				FORGEJO_SERVER_URL: actionsExpr("github.server_url"),
 				FORGEJO_REPOSITORY: actionsExpr("github.repository"),
-				FORGEJO_TOKEN: actionsExpr("secrets.FORGEJO_TOKEN"),
+				RELEASE_TOKEN: actionsExpr("secrets.RELEASE_TOKEN"),
 				...publishesNpm && { NODE_AUTH_TOKEN: actionsExpr("secrets.NPM_TOKEN") }
 			},
 			run: "pnpm exec bst release:changesets"
@@ -3034,7 +3319,7 @@ function generateMigratePrompt(results, config, detected) {
 	const timestamp = (/* @__PURE__ */ new Date()).toISOString();
 	sections.push("# Migration Prompt");
 	sections.push("");
-	sections.push(`_Generated by \`@bensandee/tooling@0.28.1 repo:sync\` on ${timestamp}_`);
+	sections.push(`_Generated by \`@bensandee/tooling@0.30.0 repo:sync\` on ${timestamp}_`);
 	sections.push("");
 	sections.push("The following prompt was generated by `@bensandee/tooling repo:sync`. Paste it into Claude Code or another AI assistant to finish migrating this repository.");
 	sections.push("");
@@ -3068,29 +3353,6 @@ function generateMigratePrompt(results, config, detected) {
 	}
 	sections.push("## Migration tasks");
 	sections.push("");
-	if (config.releaseStrategy === "simple" && !detected.hasCommitAndTagVersion) {
-		sections.push("### Add commit-and-tag-version to devDependencies");
-		sections.push("");
-		sections.push("The `simple` release strategy requires `commit-and-tag-version` as a root devDependency so that `pnpm exec commit-and-tag-version` resolves correctly.");
-		sections.push("");
-		sections.push("Run:");
-		sections.push("");
-		sections.push("```sh");
-		sections.push("pnpm add -D -w commit-and-tag-version");
-		sections.push("```");
-		sections.push("");
-	}
-	if (config.releaseStrategy !== "none" && !detected.hasRepositoryField) {
-		sections.push("### Add repository field to package.json");
-		sections.push("");
-		sections.push(`The release strategy \`${config.releaseStrategy}\` requires a \`repository\` field in \`package.json\` so that \`release:trigger\` can determine the correct hosting platform (Forgejo vs GitHub).`);
-		sections.push("");
-		sections.push("Add the appropriate repository URL to `package.json`:");
-		sections.push("");
-		sections.push("- For Forgejo: `\"repository\": \"https://your-forgejo-instance.com/owner/repo\"`");
-		sections.push("- For GitHub: `\"repository\": \"https://github.com/owner/repo\"`");
-		sections.push("");
-	}
 	const legacyToRemove = detected.legacyConfigs.filter((legacy) => !(legacy.tool === "prettier" && config.formatter === "prettier"));
 	if (legacyToRemove.length > 0) {
 		sections.push("### Remove legacy tooling");
@@ -3919,16 +4181,17 @@ const RepositorySchema = z.union([z.string(), z.object({ url: z.string() })]);
 * Resolve the hosting platform and connection details.
 *
 * Priority:
-* 1. Environment variables (FORGEJO_SERVER_URL, FORGEJO_REPOSITORY, FORGEJO_TOKEN)
+* 1. Environment variables (FORGEJO_SERVER_URL, FORGEJO_REPOSITORY, RELEASE_TOKEN)
 * 2. `repository` field in package.json (server URL and owner/repo parsed from the URL)
 *
-* For Forgejo, FORGEJO_TOKEN is always required (either from env or explicitly).
+* For Forgejo, a token is always required. Accepts RELEASE_TOKEN (preferred) or
+* FORGEJO_TOKEN (legacy, but conflicts with Forgejo Actions' internal auth).
 * If the repository URL hostname is `github.com`, returns `{ type: "github" }`.
 */
 function resolveConnection(cwd) {
 	const serverUrl = process.env["FORGEJO_SERVER_URL"];
 	const repository = process.env["FORGEJO_REPOSITORY"];
-	const token = process.env["FORGEJO_TOKEN"];
+	const token = process.env["RELEASE_TOKEN"] ?? process.env["FORGEJO_TOKEN"];
 	if (serverUrl && repository && token) return {
 		type: "forgejo",
 		conn: {
@@ -3941,13 +4204,13 @@ function resolveConnection(cwd) {
 	if (parsed === null) {
 		if (serverUrl) {
 			if (!repository) throw new FatalError("FORGEJO_REPOSITORY environment variable is required");
-			if (!token) throw new FatalError("FORGEJO_TOKEN environment variable is required");
+			if (!token) throw new FatalError("RELEASE_TOKEN environment variable is required");
 		}
 		return { type: "github" };
 	}
 	if (parsed.hostname === "github.com") return { type: "github" };
 	const resolvedToken = token;
-	if (!resolvedToken) throw new FatalError("FORGEJO_TOKEN environment variable is required (server URL and repository were resolved from package.json)");
+	if (!resolvedToken) throw new FatalError("RELEASE_TOKEN environment variable is required (server URL and repository were resolved from package.json)");
 	return {
 		type: "forgejo",
 		conn: {
@@ -3985,6 +4248,18 @@ function parseGitUrl(urlStr) {
 		return null;
 	}
 }
+/**
+* Configure the git remote origin to use a Forgejo token for push auth.
+*
+* This is necessary because `actions/checkout` configures git with the automatic
+* GITHUB_TOKEN, which may not have push permissions. Using RELEASE_TOKEN ensures
+* pushes use the explicitly provided token.
+*/
+function configureGitAuth(executor, conn, cwd) {
+	const host = conn.serverUrl.replace(/^https?:\/\//, "");
+	const authUrl = `https://x-access-token:${conn.token}@${host}/${conn.repository}`;
+	executor.exec(`git remote set-url origin ${authUrl}`, { cwd });
+}
 //#endregion
 //#region src/commands/release-changesets.ts
 const releaseForgejoCommand = defineCommand({
@@ -4035,6 +4310,7 @@ async function runRelease(config, executor) {
 	}
 	executor.exec("git config user.name \"forgejo-actions[bot]\"", { cwd: config.cwd });
 	executor.exec("git config user.email \"forgejo-actions[bot]@noreply.localhost\"", { cwd: config.cwd });
+	configureGitAuth(executor, config, config.cwd);
 	const changesetFiles = executor.listChangesetFiles(config.cwd);
 	debug(config, `Changeset files found: ${changesetFiles.length > 0 ? changesetFiles.join(", ") : "(none)"}`);
 	if (changesetFiles.length > 0) {
@@ -4208,6 +4484,10 @@ async function runSimpleRelease(executor, config) {
 	}
 	let pushed = false;
 	if (!config.noPush) {
+		if (config.platform?.type === "forgejo") {
+			configureGitAuth(executor, config.platform.conn, config.cwd);
+			debug(config, "Configured git remote with RELEASE_TOKEN auth");
+		}
 		const branch = executor.exec("git rev-parse --abbrev-ref HEAD", { cwd: config.cwd }).stdout.trim() || "main";
 		debug(config, `Pushing to origin/${branch}`);
 		const pushResult = executor.exec(`git push --follow-tags origin ${branch}`, { cwd: config.cwd });
@@ -4847,7 +5127,7 @@ const dockerCheckCommand = defineCommand({
 const main = defineCommand({
 	meta: {
 		name: "bst",
-		version: "0.28.1",
+		version: "0.30.0",
 		description: "Bootstrap and maintain standardized TypeScript project tooling"
 	},
 	subCommands: {
@@ -4863,7 +5143,7 @@ const main = defineCommand({
 		"docker:check": dockerCheckCommand
 	}
 });
-console.log(`@bensandee/tooling v0.28.1`);
+console.log(`@bensandee/tooling v0.30.0`);
 async function run() {
 	await runMain(main);
 	process.exit(process.exitCode ?? 0);

package/dist/docker-check/index.mjs

@@ -1,2 +1,2 @@
-import { a as composeDown, c as composeUp, i as composeCommand, l as createRealExecutor, n as checkHttpHealth, o as composeLogs, r as getContainerHealth, s as composePs, t as runDockerCheck } from "../check-D41R218h.mjs";
+import { a as composeDown, c as composeUp, i as composeCommand, l as createRealExecutor, n as checkHttpHealth, o as composeLogs, r as getContainerHealth, s as composePs, t as runDockerCheck } from "../check-DMDdHanG.mjs";
 export { checkHttpHealth, composeCommand, composeDown, composeLogs, composePs, composeUp, createRealExecutor, getContainerHealth, runDockerCheck };

package/dist/index.d.mts

@@ -101,6 +101,8 @@ interface DetectedProjectState {
   hasRepositoryField: boolean;
   /** Whether commit-and-tag-version is in root devDependencies (required for simple release strategy) */
   hasCommitAndTagVersion: boolean;
+  /** Git remote origin URL (for inferring repository field) */
+  gitRemoteUrl: string | null;
   /** Legacy tooling configs found */
   legacyConfigs: LegacyConfig[];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bensandee/tooling",
-  "version": "0.28.1",
+  "version": "0.30.0",
   "description": "CLI tool to bootstrap and maintain standardized TypeScript project tooling",
   "bin": {
     "bst": "./dist/bin.mjs"
@@ -42,14 +42,21 @@
   "devDependencies": {
     "@types/node": "24.12.0",
     "@types/picomatch": "4.0.2",
-    "tsdown": "0.21.2",
+    "tsdown": "0.21.4",
     "typescript": "5.9.3",
     "vitest": "4.1.0",
     "@bensandee/config": "0.9.1"
   },
   "optionalDependencies": {
-    "@changesets/cli": "^2.30.0",
-    "commit-and-tag-version": "^12.6.1"
+    "@changesets/cli": "2.30.0",
+    "@release-it/bumper": "7.0.5",
+    "commit-and-tag-version": "12.7.0",
+    "knip": "5.87.0",
+    "lefthook": "2.1.4",
+    "oxfmt": "0.41.0",
+    "oxlint": "1.56.0",
+    "prettier": "3.8.1",
+    "release-it": "19.2.4"
   },
   "scripts": {
     "build": "tsdown",

package/dist/{check-D41R218h.mjs → check-DMDdHanG.mjs}

@@ -1,5 +1,5 @@
-import { z } from "zod";
 import { execSync } from "node:child_process";
+import { z } from "zod";
 //#region src/utils/exec.ts
 /** Type guard for `execSync` errors that carry stdout/stderr/status. */
 function isExecSyncError(err) {