@doki-land/nifty 0.0.12 → 0.1.0

package/locales/en-US/cli.json

@@ -1,7 +1,7 @@
 {
   "cli.intro": "nifty — gitmoji-first release tooling for hybrid cargo + npm workspaces",
   "cli.cmd.update": "Update Cargo and npm/pnpm dependencies",
-  "cli.cmd.format": "Format Rust with cargo fmt and JS/TS/JSON with oxc_formatter",
+  "cli.cmd.format": "Format Rust with cargo fmt and JS/TS through Oak",
   "cli.cmd.lint": "Lint commit subjects and cargo workspace hygiene",
   "cli.cmd.check": "Lint commit subjects, cargo workspace hygiene, and fail on errors",
   "cli.cmd.upload": "Upload generic assets to GitHub Release or GitHub Pages",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@doki-land/nifty",
-  "version": "0.0.12",
+  "version": "0.1.0",
   "description": "Gitmoji-first commit conventions and release helpers (Node-API + TypeScript)",
   "type": "module",
   "license": "MPL-2.0",
@@ -24,11 +24,11 @@
     "jiti": "^2.4.2"
   },
   "optionalDependencies": {
-    "@doki-land/nifty-win32-x64": "0.0.12",
-    "@doki-land/nifty-linux-x64": "0.0.12",
-    "@doki-land/nifty-linux-arm64": "0.0.12",
-    "@doki-land/nifty-darwin-arm64": "0.0.12",
-    "@doki-land/nifty-darwin-x64": "0.0.12"
+    "@doki-land/nifty-win32-x64": "0.1.0",
+    "@doki-land/nifty-linux-x64": "0.1.0",
+    "@doki-land/nifty-linux-arm64": "0.1.0",
+    "@doki-land/nifty-darwin-arm64": "0.1.0",
+    "@doki-land/nifty-darwin-x64": "0.1.0"
   },
   "publishConfig": {
     "access": "public"

package/src/cli/commit-cmd.ts

@@ -64,7 +64,7 @@ export async function cmdCommitExport(options: ParsedOptions): Promise<number> {
             path,
             from: base,
             to: str(options, "ref") ?? "HEAD",
-            cwd: cwdFrom(options),
+            cwd: cwdFrom(options) ?? process.cwd(),
             json: flag(options, "json"),
             errorsOnly: flag(options, "errors-only"),
             reportTitle: "commit export lint",

package/src/cli/publish-cmd.ts

@@ -3,6 +3,7 @@ import type { Cli, ParsedOptions } from "@vmz/commander";
 import { loadNiftyNative } from "../native.js";
 import { authPayload } from "./authArgs.js";
 import { loadConfig } from "../config/loadConfig.js";
+import { trustPayloadFromConfig } from "../config/trustPayload.js";
 import { bootstrapFromOptions } from "./context.js";
 import { printPublishReport } from "./publish.js";
 import { authFromOptions, cwdFrom, flag, str, strList } from "./options.js";
@@ -41,6 +42,7 @@ export async function cmdPublish(options: ParsedOptions): Promise<number> {
               : fromConfig.length > 0
                 ? { packages: fromConfig }
                 : {}),
+        ...trustPayloadFromConfig(config),
         ...authPayload(authFromOptions(options)),
     });
     printPublishReport(report, flag(options, "dry-run"));

package/src/cli/trust-cmd.ts

@@ -3,6 +3,7 @@ import type { Cli, ParsedOptions } from "@vmz/commander";
 import { loadNiftyNative } from "../native.js";
 import { authPayload } from "./authArgs.js";
 import { loadConfig } from "../config/loadConfig.js";
+import { trustPayloadFromConfig } from "../config/trustPayload.js";
 import { bootstrapFromOptions } from "./context.js";
 import { printTrustReport } from "./trust.js";
 import { authFromOptions, cwdFrom, flag, str } from "./options.js";
@@ -22,12 +23,14 @@ export async function cmdTrust(options: ParsedOptions): Promise<number> {
     await bootstrapFromOptions(options);
     const { config } = await loadConfig({ cwd: cwdFrom(options), createIfMissing: false });
     const native = loadNiftyNative();
+    const fromConfig = config.publish?.packages ?? [];
     const report = native.publisher["trust-workspace"]({
         cwd: cwdFrom(options),
         dryRun: flag(options, "dry-run"),
         refresh: flag(options, "refresh"),
         only: str(options, "only"),
-        packages: config.publish?.packages,
+        ...(fromConfig.length > 0 ? { packages: fromConfig } : {}),
+        ...trustPayloadFromConfig(config),
         ...authPayload(authFromOptions(options)),
     });
     printTrustReport(report);

package/src/cli/trust.ts

@@ -68,8 +68,11 @@ export function printTrustReport(report: TrustReport): void {
 function printTrustHelp(): void {
     console.log(`nifty trust — configure npm Trusted Publisher for workspace packages
 
-Reads NPM_TOTP_SECRET / NPM_OTP / NPM_TOKEN from env or .env.placeholder.local.
+Reads trust.npm from nifty.config.ts (repo / file / environment).
+Auth: NPM_TOKEN from env or .env.placeholder.local, or npm login token in project .npmrc / ~/.npmrc.
+Optional NPM_TOTP_SECRET / NPM_OTP for 2FA accounts (npm-otp header).
 Trust list cache lives in .cache/npm-placeholder.json.
+Uses the npm registry API (/-/package/*/trust), not npm trust CLI.
 
 Usage:
   nifty trust

package/src/config/index.ts

@@ -21,6 +21,7 @@ export {
     type LoadedNiftyConfig,
 } from "./loadConfig.js";
 export { resolveFormatConfig, type ResolvedFormatOptions } from "./formatPresets.js";
+export { trustPayloadFromConfig } from "./trustPayload.js";
 export {
     CONFIG_FILE_NAMES,
     type NiftyAuthorEntry,
@@ -30,4 +31,6 @@ export {
     type NiftyFormatConfig,
     type NiftyFormatPreset,
     type NiftyFormatStyleConfig,
+    type NiftyTrustConfig,
+    type NiftyTrustNpmConfig,
 } from "./types.js";

package/src/config/trustPayload.ts

@@ -0,0 +1,14 @@
+import type { NiftyConfig } from "./types.js";
+
+/** Map `nifty.config` `trust.npm` into native publisher options. */
+export function trustPayloadFromConfig(config: NiftyConfig) {
+    const npm = config.trust?.npm;
+    if (!npm) {
+        return {};
+    }
+    return {
+        ...(npm.repo ? { trustRepo: npm.repo } : {}),
+        ...(npm.file ? { trustFile: npm.file } : {}),
+        ...(npm.environment ? { trustEnvironment: npm.environment } : {}),
+    };
+}

package/src/config/types.ts

@@ -7,7 +7,7 @@ export type NiftyAuthorEntry = {
 /** Built-in workspace format presets (`nifty.config` `format.preset`). */
 export type NiftyFormatPreset = "default" | "nifty" | "npm-tools" | "vmz";
 
-/** `oxc_formatter` style knobs (`nifty.config` `format.style`). */
+/** Oak formatter style knobs (`nifty.config` `format.style`). */
 export type NiftyFormatStyleConfig = {
     /** Indent with spaces or tabs (default: `space`). */
     indentStyle?: "space" | "tab";
@@ -19,6 +19,21 @@ export type NiftyFormatStyleConfig = {
     quoteStyle?: "single" | "double";
 };
 
+/** npm Trusted Publisher target for `nifty trust` (GitHub Actions OIDC). */
+export type NiftyTrustNpmConfig = {
+    /** GitHub `owner/repo` for the publishing workflow. */
+    repo?: string;
+    /** Workflow filename, e.g. `release-npm.yml`. */
+    file?: string;
+    /** GitHub Environment name, e.g. `NPM_PUBLISH`. */
+    environment?: string;
+};
+
+/** Trusted publisher wiring (`nifty trust`). Only `npm` is supported today. */
+export type NiftyTrustConfig = {
+    npm?: NiftyTrustNpmConfig;
+};
+
 /** Workspace format options (`nifty format` reads `nifty.config` `format`). */
 export type NiftyFormatConfig = {
     /** Select built-in include roots for Nifty hybrid monorepos. */
@@ -29,9 +44,9 @@ export type NiftyFormatConfig = {
     excludes?: string[];
     /** Run `cargo fmt` (default: true when a Cargo workspace is detected). */
     rust?: boolean;
-    /** Run `oxc_formatter` on JS/TS targets (default: true). */
+    /** Run Oak formatting on JS/TS targets (default: true). */
     javascript?: boolean;
-    /** Inline oxc formatter style (not an external config file path). */
+    /** Inline Oak formatter style (not an external config file path). */
     style?: NiftyFormatStyleConfig;
 };
 
@@ -49,9 +64,17 @@ export type NiftyConfig = {
     npmRoot?: string;
     /** npm publish / Trusted Publisher (CI uses publish-npm.yml). */
     publish?: {
-        /** Package names to trust (includes registry-only native sidecars). */
+        /**
+         * Optional narrow subset for `nifty publish` / `nifty trust`.
+         * Default: every workspace package that is not `private: true` (and not blocked by a private dep).
+         */
         packages?: string[];
     };
+    /**
+     * Trusted publisher wiring for `nifty trust`.
+     * Prefer `trust.npm` over `NIFTY_TRUST_*` env vars. `nifty trust` uses the npm registry API.
+     */
+    trust?: NiftyTrustConfig;
     /** Release reference changelog defaults (`nifty change-logs`). */
     changelog?: {
         /** GitHub `owner/repo` for contrib.rocks (default: parse `origin`). */

package/src/index.ts

@@ -37,6 +37,9 @@ export {
     type NiftyFormatConfig,
     type NiftyFormatPreset,
     type NiftyFormatStyleConfig,
+    type NiftyTrustConfig,
+    type NiftyTrustNpmConfig,
+    trustPayloadFromConfig,
     type ProjectKind,
     type ProjectLayout,
     type ResolvedFormatOptions,

package/src/native.ts

@@ -40,19 +40,13 @@ export type GitExports = {
         repoRoot: string,
         fromRef: string | undefined,
         toRef: string,
-    ) => Array<{
-        hash: string;
-        email: string;
-        author: string;
-        subject: string;
-        body: string;
-        gitmoji?: string;
-        section: string;
-    }>;
+    ) => NativeCommitRecord[];
     "detect-github-repo": (repoRoot: string) => string | undefined;
     "parse-github-remote": (url: string) => string | undefined;
 };
 
+type NativeCommitRecord = Omit<CommitRecord, "section"> & { section: string };
+
 export type PublishReport = {
     root: string;
     order: string[];
@@ -234,6 +228,9 @@ export type PublisherExports = {
         otp?: string;
         totpSecret?: string;
         token?: string;
+        trustRepo?: string;
+        trustFile?: string;
+        trustEnvironment?: string;
     }) => PublishReport;
     "trust-workspace": (options: {
         cwd?: string;
@@ -245,6 +242,9 @@ export type PublisherExports = {
         otp?: string;
         totpSecret?: string;
         token?: string;
+        trustRepo?: string;
+        trustFile?: string;
+        trustEnvironment?: string;
     }) => TrustReport;
 };
 
@@ -706,6 +706,11 @@ function wrapBinding(binding: NativeBinding): NiftyNative {
                     ...(options.otp !== undefined ? { otp: options.otp } : {}),
                     ...(options.totpSecret !== undefined ? { totpSecret: options.totpSecret } : {}),
                     ...(options.token !== undefined ? { token: options.token } : {}),
+                    ...(options.trustRepo !== undefined ? { trustRepo: options.trustRepo } : {}),
+                    ...(options.trustFile !== undefined ? { trustFile: options.trustFile } : {}),
+                    ...(options.trustEnvironment !== undefined
+                        ? { trustEnvironment: options.trustEnvironment }
+                        : {}),
                 }),
             "trust-workspace": (options) =>
                 binding.publisherTrustWorkspace({
@@ -718,6 +723,11 @@ function wrapBinding(binding: NativeBinding): NiftyNative {
                     ...(options.otp !== undefined ? { otp: options.otp } : {}),
                     ...(options.totpSecret !== undefined ? { totpSecret: options.totpSecret } : {}),
                     ...(options.token !== undefined ? { token: options.token } : {}),
+                    ...(options.trustRepo !== undefined ? { trustRepo: options.trustRepo } : {}),
+                    ...(options.trustFile !== undefined ? { trustFile: options.trustFile } : {}),
+                    ...(options.trustEnvironment !== undefined
+                        ? { trustEnvironment: options.trustEnvironment }
+                        : {}),
                 }),
         },
     };
@@ -753,7 +763,7 @@ export function mapRangeInfo(raw: { version: string; "from-ref"?: string; "to-re
     };
 }
 
-export function mapCommitRecord(raw: CommitRecord): CommitRecord {
+export function mapCommitRecord(raw: NativeCommitRecord): CommitRecord {
     return {
         hash: raw.hash,
         email: raw.email,