@bensandee/tooling 0.29.0 → 0.30.0

package/README.md

@@ -62,7 +62,7 @@ The generated `ci:check` script defaults to `pnpm check --skip 'docker:*'` since
 
 | Command                          | Description                                                                                                                     |
 | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
-| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. Flag: `--dry-run`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `FORGEJO_TOKEN`. |
+| `tooling release:changesets`     | Changesets version/publish for Forgejo CI. Flag: `--dry-run`. Env: `FORGEJO_SERVER_URL`, `FORGEJO_REPOSITORY`, `RELEASE_TOKEN`. |
 | `tooling release:simple`         | Streamlined release using commit-and-tag-version.                                                                               |
 | `tooling release:trigger`        | Trigger a release workflow.                                                                                                     |
 | `tooling forgejo:create-release` | Create a Forgejo release from a tag.                                                                                            |

package/dist/bin.mjs

@@ -1579,7 +1579,7 @@ function getAddedDevDepNames(config) {
 	const deps = { ...ROOT_DEV_DEPS };
 	if (config.structure !== "monorepo") Object.assign(deps, PER_PACKAGE_DEV_DEPS);
 	deps["@bensandee/config"] = "0.9.1";
-	deps["@bensandee/tooling"] = "0.29.0";
+	deps["@bensandee/tooling"] = "0.30.0";
 	if (config.formatter === "oxfmt") deps["oxfmt"] = {
 		"@changesets/cli": "2.30.0",
 		"@release-it/bumper": "7.0.5",
@@ -1634,7 +1634,7 @@ async function generatePackageJson(ctx) {
 	const devDeps = { ...ROOT_DEV_DEPS };
 	if (!isMonorepo) Object.assign(devDeps, PER_PACKAGE_DEV_DEPS);
 	devDeps["@bensandee/config"] = isWorkspacePackage(ctx, "@bensandee/config") ? "workspace:*" : "0.9.1";
-	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.29.0";
+	devDeps["@bensandee/tooling"] = isWorkspacePackage(ctx, "@bensandee/tooling") ? "workspace:*" : "0.30.0";
 	if (ctx.config.useEslintPlugin) devDeps["@bensandee/eslint-plugin"] = isWorkspacePackage(ctx, "@bensandee/eslint-plugin") ? "workspace:*" : "0.9.2";
 	if (ctx.config.formatter === "oxfmt") devDeps["oxfmt"] = {
 		"@changesets/cli": "2.30.0",
@@ -2779,7 +2779,7 @@ function releaseItWorkflow(ci, nodeVersionYaml, publishesNpm) {
 permissions:
   contents: write
 ` : "";
-	const tokenEnv = isGitHub ? `GITHUB_TOKEN: \${{ github.token }}` : `FORGEJO_TOKEN: \${{ secrets.FORGEJO_TOKEN }}`;
+	const tokenEnv = isGitHub ? `GITHUB_TOKEN: \${{ github.token }}` : `RELEASE_TOKEN: \${{ secrets.RELEASE_TOKEN }}`;
 	const npmEnv = publishesNpm ? `\n          NODE_AUTH_TOKEN: \${{ secrets.NPM_TOKEN }}` : "";
 	return `${workflowSchemaComment(ci)}name: Release
 on:
@@ -2815,7 +2815,7 @@ permissions:
         env:
           FORGEJO_SERVER_URL: \${{ github.server_url }}
           FORGEJO_REPOSITORY: \${{ github.repository }}
-          FORGEJO_TOKEN: \${{ secrets.FORGEJO_TOKEN }}
+          RELEASE_TOKEN: \${{ secrets.RELEASE_TOKEN }}
         run: pnpm exec bst release:simple`;
 	return `${workflowSchemaComment(ci)}name: Release
 on:
@@ -2853,7 +2853,7 @@ function changesetsReleaseStep(ci, publishesNpm) {
 			env: {
 				FORGEJO_SERVER_URL: actionsExpr("github.server_url"),
 				FORGEJO_REPOSITORY: actionsExpr("github.repository"),
-				FORGEJO_TOKEN: actionsExpr("secrets.FORGEJO_TOKEN"),
+				RELEASE_TOKEN: actionsExpr("secrets.RELEASE_TOKEN"),
 				...publishesNpm && { NODE_AUTH_TOKEN: actionsExpr("secrets.NPM_TOKEN") }
 			},
 			run: "pnpm exec bst release:changesets"
@@ -3319,7 +3319,7 @@ function generateMigratePrompt(results, config, detected) {
 	const timestamp = (/* @__PURE__ */ new Date()).toISOString();
 	sections.push("# Migration Prompt");
 	sections.push("");
-	sections.push(`_Generated by \`@bensandee/tooling@0.29.0 repo:sync\` on ${timestamp}_`);
+	sections.push(`_Generated by \`@bensandee/tooling@0.30.0 repo:sync\` on ${timestamp}_`);
 	sections.push("");
 	sections.push("The following prompt was generated by `@bensandee/tooling repo:sync`. Paste it into Claude Code or another AI assistant to finish migrating this repository.");
 	sections.push("");
@@ -4181,16 +4181,17 @@ const RepositorySchema = z.union([z.string(), z.object({ url: z.string() })]);
 * Resolve the hosting platform and connection details.
 *
 * Priority:
-* 1. Environment variables (FORGEJO_SERVER_URL, FORGEJO_REPOSITORY, FORGEJO_TOKEN)
+* 1. Environment variables (FORGEJO_SERVER_URL, FORGEJO_REPOSITORY, RELEASE_TOKEN)
 * 2. `repository` field in package.json (server URL and owner/repo parsed from the URL)
 *
-* For Forgejo, FORGEJO_TOKEN is always required (either from env or explicitly).
+* For Forgejo, a token is always required. Accepts RELEASE_TOKEN (preferred) or
+* FORGEJO_TOKEN (legacy, but conflicts with Forgejo Actions' internal auth).
 * If the repository URL hostname is `github.com`, returns `{ type: "github" }`.
 */
 function resolveConnection(cwd) {
 	const serverUrl = process.env["FORGEJO_SERVER_URL"];
 	const repository = process.env["FORGEJO_REPOSITORY"];
-	const token = process.env["FORGEJO_TOKEN"];
+	const token = process.env["RELEASE_TOKEN"] ?? process.env["FORGEJO_TOKEN"];
 	if (serverUrl && repository && token) return {
 		type: "forgejo",
 		conn: {
@@ -4203,13 +4204,13 @@ function resolveConnection(cwd) {
 	if (parsed === null) {
 		if (serverUrl) {
 			if (!repository) throw new FatalError("FORGEJO_REPOSITORY environment variable is required");
-			if (!token) throw new FatalError("FORGEJO_TOKEN environment variable is required");
+			if (!token) throw new FatalError("RELEASE_TOKEN environment variable is required");
 		}
 		return { type: "github" };
 	}
 	if (parsed.hostname === "github.com") return { type: "github" };
 	const resolvedToken = token;
-	if (!resolvedToken) throw new FatalError("FORGEJO_TOKEN environment variable is required (server URL and repository were resolved from package.json)");
+	if (!resolvedToken) throw new FatalError("RELEASE_TOKEN environment variable is required (server URL and repository were resolved from package.json)");
 	return {
 		type: "forgejo",
 		conn: {
@@ -4247,6 +4248,18 @@ function parseGitUrl(urlStr) {
 		return null;
 	}
 }
+/**
+* Configure the git remote origin to use a Forgejo token for push auth.
+*
+* This is necessary because `actions/checkout` configures git with the automatic
+* GITHUB_TOKEN, which may not have push permissions. Using RELEASE_TOKEN ensures
+* pushes use the explicitly provided token.
+*/
+function configureGitAuth(executor, conn, cwd) {
+	const host = conn.serverUrl.replace(/^https?:\/\//, "");
+	const authUrl = `https://x-access-token:${conn.token}@${host}/${conn.repository}`;
+	executor.exec(`git remote set-url origin ${authUrl}`, { cwd });
+}
 //#endregion
 //#region src/commands/release-changesets.ts
 const releaseForgejoCommand = defineCommand({
@@ -4297,6 +4310,7 @@ async function runRelease(config, executor) {
 	}
 	executor.exec("git config user.name \"forgejo-actions[bot]\"", { cwd: config.cwd });
 	executor.exec("git config user.email \"forgejo-actions[bot]@noreply.localhost\"", { cwd: config.cwd });
+	configureGitAuth(executor, config, config.cwd);
 	const changesetFiles = executor.listChangesetFiles(config.cwd);
 	debug(config, `Changeset files found: ${changesetFiles.length > 0 ? changesetFiles.join(", ") : "(none)"}`);
 	if (changesetFiles.length > 0) {
@@ -4470,6 +4484,10 @@ async function runSimpleRelease(executor, config) {
 	}
 	let pushed = false;
 	if (!config.noPush) {
+		if (config.platform?.type === "forgejo") {
+			configureGitAuth(executor, config.platform.conn, config.cwd);
+			debug(config, "Configured git remote with RELEASE_TOKEN auth");
+		}
 		const branch = executor.exec("git rev-parse --abbrev-ref HEAD", { cwd: config.cwd }).stdout.trim() || "main";
 		debug(config, `Pushing to origin/${branch}`);
 		const pushResult = executor.exec(`git push --follow-tags origin ${branch}`, { cwd: config.cwd });
@@ -5109,7 +5127,7 @@ const dockerCheckCommand = defineCommand({
 const main = defineCommand({
 	meta: {
 		name: "bst",
-		version: "0.29.0",
+		version: "0.30.0",
 		description: "Bootstrap and maintain standardized TypeScript project tooling"
 	},
 	subCommands: {
@@ -5125,7 +5143,7 @@ const main = defineCommand({
 		"docker:check": dockerCheckCommand
 	}
 });
-console.log(`@bensandee/tooling v0.29.0`);
+console.log(`@bensandee/tooling v0.30.0`);
 async function run() {
 	await runMain(main);
 	process.exit(process.exitCode ?? 0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bensandee/tooling",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "CLI tool to bootstrap and maintain standardized TypeScript project tooling",
   "bin": {
     "bst": "./dist/bin.mjs"