@dbx-tools/projen 0.9.151 → 0.9.153

package/tasks/pypi-trusted-publisher-instructions.ts

@@ -0,0 +1,54 @@
+/** Parse and print generated PyPI trusted-publisher setup instructions. */
+import { z } from "zod";
+import { taskCommand, taskOptions } from "./cli.ts";
+
+export const PypiTrustedPublisherInstructionsOptionsSchema = z
+  .object({
+    secretFile: z
+      .string()
+      .trim()
+      .min(1)
+      .optional()
+      .describe("Credential file used only when browser authentication is required")
+      .meta({ env: [], helpDefault: false, short: false }),
+  })
+  .describe("Options for rendering PyPI trusted-publisher setup instructions");
+
+/** Project-specific instruction sections wrapped around browser authentication guidance. */
+export interface PypiTrustedPublisherInstructions {
+  readonly afterAuthentication: readonly string[];
+  readonly beforeAuthentication: readonly string[];
+}
+
+/** Parse task options and write the complete trusted-publisher instructions. */
+export async function printPypiTrustedPublisherInstructions(
+  instructions: PypiTrustedPublisherInstructions,
+  argv: readonly string[] = process.argv.slice(2),
+): Promise<void> {
+  const { secretFile } = await taskOptions(
+    taskCommand(
+      import.meta.url,
+      "Print system-browser instructions for PyPI trusted publishers",
+      PypiTrustedPublisherInstructionsOptionsSchema,
+    ),
+    PypiTrustedPublisherInstructionsOptionsSchema,
+    argv,
+  );
+  const authentication = secretFile
+    ? [
+        `- If browser authentication is required, read credentials from ${secretFile} directly into the browser without printing, logging, or exposing secret values.`,
+        `- If ${secretFile} is absent, invalid, or insufficient for authentication, pause and ask the user to complete authentication.`,
+      ]
+    : [
+        "- If browser authentication is required, pause and ask the user to complete authentication.",
+      ];
+  process.stdout.write(
+    `${[
+      ...instructions.beforeAuthentication,
+      ...authentication,
+      ...instructions.afterAuthentication,
+    ]
+      .join("\n")
+      .trimEnd()}\n`,
+  );
+}

package/tasks/python-node-bindings.ts

@@ -13,7 +13,7 @@ import ts from "typescript";
 import { z } from "zod";
 import { runTaskMain, taskCommand, taskOptions } from "./cli.ts";
 import { TaskCheckOptionSchema, TaskForceOptionSchema, TaskRootOptionSchema } from "./options.ts";
-import { header, makeReadonly, makeWritable } from "../src/generated.ts";
+import { header, headerLines, makeReadonly, makeWritable } from "../src/generated.ts";
 import { publicFunctionExports } from "../src/module-exports.ts";
 import { resolveRepoRoot } from "../src/packages.ts";
 import {
@@ -434,9 +434,11 @@ export async function main(args: string[] = process.argv.slice(2)): Promise<void
       section.includes("Callable["),
     );
     return [
-      "# GENERATED by projen/tasks/python-node-bindings.ts - DO NOT EDIT.",
-      `# Regenerated from ${source}.`,
-      "# Hand edits are overwritten; this file is read-only.",
+      ...headerLines({
+        comment: "#",
+        tool: "projen/tasks/python-node-bindings.ts",
+        source,
+      }),
       "",
       "from __future__ import annotations",
       "",
@@ -1162,9 +1164,11 @@ function removeEmptyDirectories(directory: string): void {
 
 function pythonRuntimeLoader(source: string): string {
   return [
-    "# GENERATED by projen/tasks/python-node-bindings.ts - DO NOT EDIT.",
-    `# Regenerated from ${source}.`,
-    "# Hand edits are overwritten; this file is read-only.",
+    ...headerLines({
+      comment: "#",
+      tool: "projen/tasks/python-node-bindings.ts",
+      source,
+    }),
     "",
     "from __future__ import annotations",
     "",

package/tasks/test-workspace.ts

@@ -167,6 +167,8 @@ function selectedTests(
 ): string[] {
   const all = [
     ...graph.packages.flatMap((pkg) => testFiles(join(root, pkg.path, "test"))),
+    ...testFiles(join(root, "test")),
+    ...testFiles(join(root, "scripts")),
     ...testFiles(join(root, "docs/scripts")),
   ];
   if (mode === "unit") return all.filter((path) => !integrationTest(path));