@ozyman42/ozy-cli 0.4.5-windows-x64.0 → 0.4.5

package/dist/commands/git/hosts.js

@@ -0,0 +1,18 @@
+import { Effect } from "effect";
+import { makeCommand } from "@/common/command";
+import { log } from "@/common/log";
+import { commonModules } from "@/modules/common";
+import { SSHConfigImpl } from "@/modules/common/ssh-config/impl";
+export const hosts = makeCommand('hosts', 'show all configured github.com SSH hosts', () => Effect.gen(function* () {
+    const sshConfig = yield* commonModules.SSHConfig;
+    const config = yield* sshConfig.getSSHConfig();
+    const gitHosts = [];
+    for (const host in config) {
+        if (config[host].HostName === 'github.com') {
+            gitHosts.push(host);
+        }
+    }
+    log('Available hosts:');
+    gitHosts.forEach(host => { log(` - ${host}`); });
+}).pipe(Effect.provide(SSHConfigImpl.Layer)));
+//# sourceMappingURL=hosts.js.map

package/dist/commands/git/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../../../../../src/commands/git/hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEjE,MAAM,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,0CAA0C,EAAE,GAAG,EAAE,CACzF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,CAAE,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAC7C,CAAC"}

package/dist/commands/git/index.js

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+import { setup } from './setup';
+import { hosts } from './hosts';
+export const git = new Command('git')
+    .summary('setup git in repo for verified commits');
+[setup, hosts]
+    .forEach(cmd => { git.addCommand(cmd); });
+//# sourceMappingURL=index.js.map

package/dist/commands/git/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/commands/git/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAClC,OAAO,CAAC,wCAAwC,CAAC,CAAC;AAErD,CAAC,KAAK,EAAE,KAAK,CAAC;KACX,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/git/setup.js

@@ -0,0 +1,145 @@
+import { Command } from 'commander';
+import { Effect, Layer, Option, pipe } from 'effect';
+import { log } from '@/common/log';
+import { cliModules } from '@/modules/cli';
+import { commonModules, CommonModules } from '@/modules/common';
+import { effunct } from 'effective-modules';
+import { GitImpl } from '@/modules/cli/git/impl';
+import { GitHubImpl } from '@/modules/cli/github/impl';
+import { AgentClientImpl } from '@/modules/cli/agent-client/impl';
+import { OSPlatformImpl } from '@/modules/common/os-platform/impl';
+import { SSHConfigImpl } from '@/modules/common/ssh-config/impl';
+import { AGENT_SOCK_FILE_PATH, FUTURE_TOOL_NAME, STANDARD_REMOTE_PREFIX } from '../../common/constants';
+import { CredentialId } from '@/modules/common/crypto/impl';
+import { BunFileSystem } from "@effect/platform-bun";
+const GITHUB_CLIENT_ID = 'Ov23liKYxk1Ag7SsNhbP';
+const GITHUB_CLIENT_SECRET = 'e2901fbe93c591e7a53a903e70490ff87e998159';
+const OAUTH_SCOPES = 'read:user user:email write:ssh_signing_key write:public_key';
+const KEY_PREFIX = `${FUTURE_TOOL_NAME}-`;
+function parseCredentialIdFromTitle(title) {
+    const match = title.match(/\(([^)]+)\)$/);
+    if (!match)
+        return Option.none();
+    return Option.some(match[1]);
+}
+function baseKey(pubkey) {
+    return pubkey.split(' ').slice(0, 2).join(' ');
+}
+export var GitSetupError;
+(function (GitSetupError) {
+    GitSetupError["NotInGitRepositoryError"] = "NotInGitRepositoryError";
+    GitSetupError["NoRemoteOriginError"] = "NoRemoteOriginError";
+    GitSetupError["OAuthFailedError"] = "OAuthFailedError";
+    GitSetupError["GitHubUserFetchFailedError"] = "GitHubUserFetchFailedError";
+    GitSetupError["RepoAccessDeniedError"] = "RepoAccessDeniedError";
+    GitSetupError["MultipleJiveSigningKeysError"] = "MultipleJiveSigningKeysError";
+    GitSetupError["MultipleJiveAuthnKeysError"] = "MultipleJiveAuthnKeysError";
+    GitSetupError["MissingCredentialIdError"] = "MissingCredentialIdError";
+    GitSetupError["SigningAuthnKeyMismatchError"] = "SigningAuthnKeyMismatchError";
+    GitSetupError["AgentStartFailedError"] = "AgentStartFailedError";
+    GitSetupError["AgentProcedureFailedError"] = "AgentProcedureFailedError";
+    GitSetupError["GitCloneFailedError"] = "GitCloneFailedError";
+    GitSetupError["GitConfigFailedError"] = "GitConfigFailedError";
+})(GitSetupError || (GitSetupError = {}));
+function* gitSetup(ownerRepoArg) {
+    const git = yield* cliModules.Git;
+    const github = yield* cliModules.GitHub;
+    const agentClient = yield* cliModules.AgentClient;
+    const sshConfig = yield* commonModules.SSHConfig;
+    const isCloneMode = ownerRepoArg !== undefined;
+    // 1. Parse owner/repo
+    const { owner, repo } = yield* git.resolveOwnerAndRepo(Option.fromNullishOr(ownerRepoArg));
+    log(`Setting up ${owner}/${repo}`);
+    // 2. GitHub OAuth
+    const token = yield* github.authorize(GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET, OAUTH_SCOPES);
+    log('✓ Authorized with GitHub');
+    // 3. Fetch user info
+    const { login, email } = yield* github.getUser(token);
+    const gitUser = { name: login, email: email };
+    log(`  Logged in as: ${gitUser.name} <${gitUser.email}>`);
+    // 4. Check GitHub signing keys for <tool name>: prefix
+    const signingKeys = yield* github.getSigningKeys(token);
+    const toolKeys = signingKeys.filter(k => k.title.startsWith(KEY_PREFIX));
+    if (toolKeys.length > 1)
+        return yield* Effect.fail(`${GitSetupError.MultipleJiveSigningKeysError}: Found ${toolKeys.length} signing keys with "${KEY_PREFIX}" prefix — expected at most 1`);
+    let maybeKey = Option.none();
+    if (toolKeys[0]) {
+        const credentialId = parseCredentialIdFromTitle(toolKeys[0].title);
+        if (Option.isNone(credentialId))
+            return yield* Effect.fail(`${GitSetupError.MissingCredentialIdError}: signing key title "${toolKeys[0].title}" has no credentialId`);
+        maybeKey = Option.some({ credentialId: credentialId.value, pubkey: baseKey(toolKeys[0].key) });
+    }
+    // 5. Check authn keys too — must match signing key if both present.
+    const authnKeys = yield* github.getAuthnKeys(token);
+    const toolAuthnKeys = authnKeys.filter(k => k.title.startsWith(KEY_PREFIX));
+    if (toolAuthnKeys.length > 1)
+        return yield* Effect.fail(`${GitSetupError.MultipleJiveAuthnKeysError}: Found ${toolAuthnKeys.length} authn keys with "${KEY_PREFIX}" prefix — expected at most 1`);
+    let maybeAuthnKey = Option.none();
+    if (toolAuthnKeys[0]) {
+        const credentialId = parseCredentialIdFromTitle(toolAuthnKeys[0].title);
+        if (Option.isNone(credentialId))
+            return yield* Effect.fail(`${GitSetupError.MissingCredentialIdError}: authn key title "${toolAuthnKeys[0].title}" has no credentialId`);
+        maybeAuthnKey = Option.some({ credentialId: credentialId.value, pubkey: baseKey(toolAuthnKeys[0].key) });
+    }
+    if (Option.isSome(maybeKey) && Option.isSome(maybeAuthnKey) && maybeKey.value.pubkey !== maybeAuthnKey.value.pubkey)
+        return yield* Effect.fail(`${GitSetupError.SigningAuthnKeyMismatchError}: signing key and authn key pubkeys don't match — GitHub account is in an inconsistent state`);
+    // 6. Call agent to get/create/verify key (starts agent if not running)
+    const { credentialId, pubkey } = yield* pipe(Effect.gen(() => agentClient.usingClient(function* (client) {
+        return yield* pipe(client.Setup({
+            pubkey: Option.map(maybeKey, k => k.pubkey),
+            credentialId: Option.map(maybeKey, k => k.credentialId),
+            username: login,
+        }), Effect.mapError(e => `${GitSetupError.AgentProcedureFailedError}: ${String(e)}`));
+    })), Effect.catchTag("AgentClientError", err => Effect.fail(err.reason)), Effect.catchTag("AgentClientUsageError", err => Effect.fail(err.cause)));
+    const credentialFriendlyName = new CredentialId(credentialId).humanReadableName;
+    const keyTitle = `${credentialFriendlyName} (${credentialId})`;
+    // 8. Register signing key on GitHub if not already present
+    if (Option.isNone(maybeKey)) {
+        yield* github.addSigningKey(token, keyTitle, pubkey);
+        log(`✓ Registered GitHub signing key: ${keyTitle}`);
+    }
+    // 9. Register key as authn key on GitHub account if not already present
+    if (Option.isNone(maybeAuthnKey)) {
+        yield* github.addAuthnKey(token, keyTitle, pubkey);
+        log(`✓ Registered authn key on GitHub account`);
+    }
+    // 10. Write ssh config (pubkey file written by agent via KeyMapStore.addKey)
+    const pubkeyPath = sshConfig.getPubkeyPath(credentialFriendlyName);
+    yield* sshConfig.writeHost({
+        section: {
+            HostName: "github.com",
+            User: "git",
+            IdentityFile: pubkeyPath,
+            IdentitiesOnly: "yes",
+            IdentityAgent: AGENT_SOCK_FILE_PATH,
+        },
+    });
+    // 11. Clone if in clone mode
+    if (isCloneMode) {
+        yield* git.clone(owner, repo);
+        log(`✓ Cloned into ${repo}/`);
+    }
+    // 12. Set repo config plus any submodules' config
+    log('\nSetting git config:');
+    yield* git.setupRepo({
+        dir: process.cwd(),
+        remoteURL: `${STANDARD_REMOTE_PREFIX}${owner}/${repo}.git`,
+        user: gitUser,
+        pubkeyPath,
+    });
+    log(`\n✓ Setup complete for ${owner}/${repo}`);
+}
+const layerLive = pipe(GitImpl.Layer, Layer.provideMerge(GitHubImpl.Layer), Layer.provideMerge(AgentClientImpl.Layer), Layer.provideMerge(OSPlatformImpl.Layer), Layer.provideMerge(SSHConfigImpl.Layer), Layer.provideMerge(BunFileSystem.layer));
+export const setup = new Command('setup')
+    .description('setup verified git commits for current repo')
+    .argument('[owner/repo]', 'GitHub repo to clone and set up (omit if already in a repo with a remote)')
+    .action(async (ownerRepo) => {
+    function* program() {
+        yield* pipe(effunct(gitSetup)(ownerRepo), Effect.provide(layerLive), Effect.catch(err => Effect.gen(function* () {
+            log(`✗ ${err}`);
+        })));
+    }
+    await Effect.runPromise(Effect.gen(program));
+    process.exit();
+});
+//# sourceMappingURL=setup.js.map

package/dist/commands/git/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../../../../src/commands/git/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAkB,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAKrD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAChD,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,YAAY,GAAG,6DAA6D,CAAC;AACnF,MAAM,UAAU,GAAG,GAAG,gBAAgB,GAAG,CAAC;AAE1C,SAAS,0BAA0B,CAAC,KAAa;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAN,IAAY,aAcX;AAdD,WAAY,aAAa;IACvB,oEAAmD,CAAA;IACnD,4DAA2C,CAAA;IAC3C,sDAAqC,CAAA;IACrC,0EAAyD,CAAA;IACzD,gEAA+C,CAAA;IAC/C,8EAA6D,CAAA;IAC7D,0EAAyD,CAAA;IACzD,sEAAqD,CAAA;IACrD,8EAA6D,CAAA;IAC7D,gEAA+C,CAAA;IAC/C,wEAAuD,CAAA;IACvD,4DAA2C,CAAA;IAC3C,8DAA6C,CAAA;AAC/C,CAAC,EAdW,aAAa,KAAb,aAAa,QAcxB;AAED,QAAQ,CAAC,CAAC,QAAQ,CAAC,YAAqB;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IACxC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC;IACjD,MAAM,WAAW,GAAG,YAAY,KAAK,SAAS,CAAC;IAE/C,sBAAsB;IACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3F,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAEnC,kBAAkB;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;IAC5F,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAEhC,qBAAqB;IACrB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,OAAO,GAAY,EAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAC,CAAC;IACrD,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAE1D,uDAAuD;IACvD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QACrB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,4BAA4B,WAAW,QAAQ,CAAC,MAAM,uBAAuB,UAAU,+BAA+B,CAAC,CAAC;IACrK,IAAI,QAAQ,GAA4D,MAAM,CAAC,IAAI,EAAE,CAAC;IACtF,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,wBAAwB,wBAAwB,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,uBAAuB,CAAC,CAAC;QACvI,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,0BAA0B,WAAW,aAAa,CAAC,MAAM,qBAAqB,UAAU,+BAA+B,CAAC,CAAC;IACtK,IAAI,aAAa,GAA4D,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3F,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,0BAA0B,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,wBAAwB,sBAAsB,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,uBAAuB,CAAC,CAAC;QAC1I,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,CAAC,MAAM;QACjH,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,4BAA4B,8FAA8F,CAAC,CAAC;IAEzK,uEAAuE;IACvE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM;QACxD,OAAO,KAAK,CAAC,CAAC,IAAI,CAChB,MAAM,CAAC,KAAK,CAAC;YACX,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACvD,QAAQ,EAAE,KAAK;SAChB,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,yBAAyB,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC,EACH,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EACnE,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,sBAAsB,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,iBAAiB,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,sBAAsB,KAAK,YAAY,GAAG,CAAC;IAE/D,2DAA2D;IAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,wEAAwE;IACxE,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAClD,CAAC;IAED,6EAA6E;IAC7E,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACnE,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE;YACP,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,KAAK;YACX,YAAY,EAAE,UAAU;YACxB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,oBAAoB;SACpC;KACF,CAAC,CAAC;IAEH,6BAA6B;IAC7B,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,kDAAkD;IAClD,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QACnB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,SAAS,EAAE,GAAG,sBAAsB,GAAG,KAAK,IAAI,IAAI,MAAM;QAC1D,IAAI,EAAE,OAAO;QACb,UAAU;KACX,CAAC,CAAC;IAEH,GAAG,CAAC,0BAA0B,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,CAAC,KAAK,EACb,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EACpC,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,EACzC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,EACxC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EACvC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CACxC,CAAA;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KACtC,WAAW,CAAC,6CAA6C,CAAC;KAC1D,QAAQ,CAAC,cAAc,EAAE,2EAA2E,CAAC;KACrG,MAAM,CAAC,KAAK,EAAE,SAAkB,EAAE,EAAE;IACnC,QAAQ,CAAC,CAAC,OAAO;QACf,KAAK,CAAC,CAAC,IAAI,CACT,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,EAC5B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACtC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,EAAE,CAAC;AACjB,CAAC,CAAC,CAAC"}

package/dist/commands/index.js

@@ -0,0 +1,13 @@
+import { program } from 'commander';
+import { git } from './git';
+import { npm } from './npm';
+import { upgrade } from './upgrade';
+import { ssh } from "./ssh";
+import { CLI_CMD_NAME, CURRENT_VERSION } from '@/common/constants';
+program.name(CLI_CMD_NAME).version(CURRENT_VERSION);
+[git, npm, ssh, upgrade]
+    .forEach(cmd => { program.addCommand(cmd); });
+program.parse();
+if (process.argv.length <= 2)
+    program.help();
+//# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAEpD,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;KACrB,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC;AAE/C,OAAO,CAAC,KAAK,EAAE,CAAC;AAEhB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC;IAAE,OAAO,CAAC,IAAI,EAAE,CAAC"}

package/dist/commands/npm/index.js

@@ -0,0 +1,7 @@
+import { Command } from 'commander';
+import { setup } from './setup';
+export const npm = new Command('npm')
+    .summary('npm package management utilities');
+[setup]
+    .forEach(cmd => { npm.addCommand(cmd); });
+//# sourceMappingURL=index.js.map

package/dist/commands/npm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/commands/npm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEhC,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAClC,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAE/C,CAAC,KAAK,CAAC;KACJ,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/npm/setup/git-remote.js

@@ -0,0 +1,66 @@
+import { $ } from 'bun';
+import { Effect, Option } from 'effect';
+// Handles https://github.com/owner/repo.git, git@github.com:owner/repo.git,
+// and SSH aliases like github-ozyman42:owner/repo.git
+export function parseGithubOwnerRepo(url) {
+    const https = url.match(/github\.com[/:]([^/]+)\/([^/]+?)(?:\.git)?$/);
+    if (https)
+        return Option.some({ owner: https[1], repo: https[2] });
+    const alias = url.match(/^[^:]+:([^/]+)\/([^/]+?)(?:\.git)?$/);
+    if (alias)
+        return Option.some({ owner: alias[1], repo: alias[2] });
+    return Option.none();
+}
+async function viewRepo(nameWithOwner) {
+    const view = await $ `gh repo view ${nameWithOwner} --json name,owner,url,sshUrl`.quiet().nothrow();
+    if (view.exitCode !== 0)
+        return Option.none();
+    try {
+        const data = JSON.parse(view.stdout.toString());
+        return Option.some({ owner: data.owner.login, repo: data.name, url: data.url, sshUrl: data.sshUrl });
+    }
+    catch {
+        return Option.none();
+    }
+}
+export function ensureGitHubRepo(name, isPrivate = false) {
+    return Effect.tryPromise({
+        try: async () => {
+            const whoami = await $ `gh api user --jq .login`.quiet().nothrow();
+            const owner = whoami.exitCode === 0 ? whoami.stdout.toString().trim() : null;
+            if (owner) {
+                const existingOption = await viewRepo(`${owner}/${name}`);
+                if (Option.isSome(existingOption))
+                    return { repo: existingOption.value, created: false };
+            }
+            const visibility = isPrivate ? '--private' : '--public';
+            const create = await $ `gh repo create ${name} ${visibility}`.quiet().nothrow();
+            if (create.exitCode !== 0) {
+                throw new Error(`gh repo create failed: ${create.stderr.toString().trim()}`);
+            }
+            const createdOption = await viewRepo(name);
+            if (Option.isNone(createdOption))
+                throw new Error(`repo created but could not retrieve details for "${name}"`);
+            return { repo: createdOption.value, created: true };
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+export async function checkGitHubAccess(remoteUrl) {
+    const parsedOption = parseGithubOwnerRepo(remoteUrl);
+    if (Option.isNone(parsedOption))
+        return Option.none();
+    const { owner, repo } = parsedOption.value;
+    const result = await $ `gh api repos/${owner}/${repo}`.quiet().nothrow();
+    if (result.exitCode !== 0)
+        return Option.none();
+    let data;
+    try {
+        data = JSON.parse(result.stdout.toString());
+    }
+    catch {
+        return Option.none();
+    }
+    return Option.some({ owner, repo, canPush: data?.permissions?.push === true });
+}
+//# sourceMappingURL=git-remote.js.map

package/dist/commands/npm/setup/git-remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-remote.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/git-remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAexC,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvE,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,aAAqB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAA,gBAAgB,aAAa,+BAA+B,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IACnG,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;IAC9D,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,yBAAyB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAE7E,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3F,CAAC;YAED,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,kBAAkB,IAAI,IAAI,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;YAC/E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,GAAG,CAAC,CAAC;YAC/G,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,MAAM,YAAY,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,gBAAgB,KAAK,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAEhD,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/commands/npm/setup/index.js

@@ -0,0 +1,168 @@
+import { $ } from 'bun';
+import { existsSync } from 'node:fs';
+import { Effect, Option } from 'effect';
+import { makeCommand } from '@/common/command';
+import { log } from '@/common/log';
+import { acquireToken } from './npm-auth';
+import { fetchPackageInfo } from './package-registry';
+import { addTrustedPublisher, setPackageAccessPolicy } from './trusted-publishing';
+import { checkGitHubAccess } from './git-remote';
+import { workflowExists, createWorkflow } from './workflow';
+import { validatePackageJson } from './package-json-validate';
+var SetupError;
+(function (SetupError) {
+    SetupError["NoGitRepo"] = "NoGitRepo";
+    SetupError["NoPackageJson"] = "NoPackageJson";
+    SetupError["InvalidPackageJson"] = "InvalidPackageJson";
+    SetupError["NpmNotFound"] = "NpmNotFound";
+    SetupError["GhNotFound"] = "GhNotFound";
+    SetupError["NotLoggedIn"] = "NotLoggedIn";
+    SetupError["NoGitRemote"] = "NoGitRemote";
+    SetupError["RepoNotFound"] = "RepoNotFound";
+    SetupError["NoWriteAccess"] = "NoWriteAccess";
+    SetupError["BuildFailed"] = "BuildFailed";
+    SetupError["PublishFailed"] = "PublishFailed";
+    SetupError["TrustedPublishingFailed"] = "TrustedPublishingFailed";
+    SetupError["AccessPolicyFailed"] = "AccessPolicyFailed";
+})(SetupError || (SetupError = {}));
+export const setup = makeCommand('setup', 'configure a new npm package for publishing', () => Effect.gen(function* () {
+    const cwd = process.cwd();
+    // 1. npm
+    log('checking npm...');
+    const npmCheck = yield* Effect.promise(() => $ `which npm`.quiet().nothrow());
+    if (npmCheck.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.NpmNotFound}: "npm" not found in PATH — install Node.js from nodejs.org`);
+    const npmVersion = (yield* Effect.promise(() => $ `npm --version`.quiet().nothrow())).stdout.toString().trim();
+    const [major, minor] = npmVersion.split('.').map(Number);
+    if (major < 11 || (major === 11 && minor < 10))
+        yield* Effect.fail(`${SetupError.NpmNotFound}: npm ${npmVersion} is too old — "npm trust" requires 11.10.0+ (run "npm install -g npm")`);
+    const { token: npmToken, user: npmUser } = yield* acquireToken().pipe(Effect.mapError(e => `${SetupError.NotLoggedIn}: npm authentication failed: ${e}`));
+    log(`  ✓ logged into npm as ${npmUser}`);
+    // 2. GitHub CLI
+    log('checking GitHub...');
+    const ghCheck = yield* Effect.promise(() => $ `which gh`.quiet().nothrow());
+    if (ghCheck.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.GhNotFound}: "gh" not found in PATH — install GitHub CLI from cli.github.com`);
+    let ghUser = yield* Effect.promise(() => $ `gh api user --jq .login`.quiet().nothrow());
+    if (ghUser.exitCode !== 0) {
+        log('  not logged in — opening gh auth login...');
+        yield* Effect.promise(() => $ `gh auth login`.nothrow());
+        ghUser = yield* Effect.promise(() => $ `gh api user --jq .login`.quiet().nothrow());
+    }
+    if (ghUser.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.NotLoggedIn}: not logged into GitHub — run "gh auth login"`);
+    log(`  ✓ logged into github as ${ghUser.stdout.toString().trim()}`);
+    // 3. git repo root
+    if (!existsSync(`${cwd}/.git`))
+        yield* Effect.fail(`${SetupError.NoGitRepo}: current directory is not a git repository — run "git init" first`);
+    // 4. package.json — read and fatal-check
+    log('checking package.json...');
+    const pkgFile = Bun.file(`${cwd}/package.json`);
+    if (!(yield* Effect.promise(() => pkgFile.exists())))
+        yield* Effect.fail(`${SetupError.NoPackageJson}: no package.json found — run this command from a package directory`);
+    let pkg = yield* Effect.tryPromise({
+        try: () => pkgFile.json(),
+        catch: () => `${SetupError.InvalidPackageJson}: package.json contains invalid JSON — fix it and retry`,
+    });
+    const { name } = pkg;
+    if (!name)
+        yield* Effect.fail(`${SetupError.InvalidPackageJson}: package.json is missing a "name" field`);
+    log(`  name: ${name}`);
+    const fatal = validatePackageJson(pkg).find(i => i.fatal);
+    if (fatal)
+        yield* Effect.fail(`${SetupError.InvalidPackageJson}: ${fatal.field}: ${fatal.issue}`);
+    // 5. git remote
+    log('checking git remote...');
+    const remoteOption = yield* Effect.promise(() => getRemoteUrl(cwd));
+    if (Option.isNone(remoteOption))
+        yield* Effect.fail(`${SetupError.NoGitRemote}: no git remote configured — run "git remote add origin <url>" first`);
+    const remote = remoteOption.value;
+    log(`  remote: ${remote}`);
+    const accessOption = yield* Effect.promise(() => checkGitHubAccess(remote));
+    if (Option.isNone(accessOption))
+        yield* Effect.fail(`${SetupError.RepoNotFound}: could not reach GitHub repo at ${remote} — check "gh auth status"`);
+    const access = accessOption.value;
+    if (!access.canPush)
+        yield* Effect.fail(`${SetupError.NoWriteAccess}: no push access to ${access.owner}/${access.repo} — you need write permissions`);
+    const repoHttpsUrl = `https://github.com/${access.owner}/${access.repo}`;
+    log(`  ✓ ${access.owner}/${access.repo} (write access confirmed)`);
+    // 6. Sync package.json repository URL from git remote; report other non-fatal issues
+    const expectedRepoUrl = `git+${repoHttpsUrl}.git`;
+    const currentRepoUrl = typeof pkg.repository === 'object' ? pkg.repository?.url : pkg.repository;
+    if (currentRepoUrl !== expectedRepoUrl) {
+        log('syncing package.json repository URL...');
+        log(`  was: ${currentRepoUrl ?? '(missing)'}`);
+        pkg = { ...pkg, repository: { type: 'git', url: expectedRepoUrl } };
+        yield* Effect.promise(() => Bun.write(`${cwd}/package.json`, JSON.stringify(pkg, null, 2) + '\n'));
+        log(`  ✓ set to ${expectedRepoUrl}`);
+    }
+    const nonFatal = validatePackageJson(pkg).filter(i => !i.fatal);
+    if (nonFatal.length > 0) {
+        log('package.json issues (fix manually):');
+        for (const { field, issue } of nonFatal)
+            log(`  ${field}: ${issue}`);
+    }
+    // 7. Publish workflow
+    log('checking publish workflow...');
+    if (!(yield* Effect.promise(() => workflowExists(cwd)))) {
+        yield* Effect.promise(() => createWorkflow(cwd));
+        log('  ✓ created .github/workflows/publish.yml');
+    }
+    else {
+        log('  ✓ already exists');
+    }
+    // 8. npm package — initial publish if not yet on registry
+    log('checking npm registry...');
+    const infoOption = yield* fetchPackageInfo(name).pipe(Effect.mapError(e => `${SetupError.NpmNotFound}: npm registry lookup failed: ${e}`));
+    if (Option.isNone(infoOption)) {
+        log('  package not yet published — building and creating initial release...');
+        const buildResult = yield* Effect.promise(() => $ `bun run build`.nothrow());
+        if (buildResult.exitCode !== 0)
+            yield* Effect.fail(`${SetupError.BuildFailed}: build failed: ${buildResult.stderr.toString().trim()}`);
+        const distPkgFile = Bun.file(`${cwd}/dist/package.json`);
+        if (!(yield* Effect.promise(() => distPkgFile.exists())))
+            yield* Effect.fail(`${SetupError.BuildFailed}: build succeeded but dist/package.json is missing — build script must produce it`);
+        yield* Effect.tryPromise({
+            try: () => distPkgFile.json(),
+            catch: () => `${SetupError.BuildFailed}: dist/package.json exists but contains invalid JSON — check your build script`,
+        });
+        yield* npmPublish(npmToken).pipe(Effect.mapError(e => `${SetupError.PublishFailed}: ${e}`));
+        log(`  ✓ published ${name}`);
+    }
+    else {
+        const version = infoOption.value.latestVersion ?? '(unknown)';
+        log(`  ✓ exists (latest v${version})`);
+    }
+    // 9. Trusted publishing
+    log('checking trusted publishing...');
+    const ownerRepo = `${access.owner}/${access.repo}`;
+    const trust = yield* addTrustedPublisher(name, ownerRepo, npmToken).pipe(Effect.mapError(e => `${SetupError.TrustedPublishingFailed}: ${e}`));
+    log(trust.alreadyConfigured ? '  ✓ already configured' : '  ✓ configured');
+    // 10. Package access policy — require 2FA, disallow automation tokens
+    log('setting package access policy...');
+    yield* setPackageAccessPolicy(name, npmToken, trust.otp).pipe(Effect.mapError(e => `${SetupError.AccessPolicyFailed}: ${e}`));
+    log('  ✓ configured');
+}));
+async function getRemoteUrl(cwd) {
+    const result = await $ `git -C ${cwd} remote get-url origin`.quiet().nothrow();
+    if (result.exitCode !== 0)
+        return Option.none();
+    return Option.some(result.stdout.toString().trim());
+}
+function npmPublish(token) {
+    return Effect.tryPromise({
+        try: async () => {
+            const proc = Bun.spawn(['npm', 'publish', 'dist/', '--access', 'public', '--no-provenance'], {
+                stdin: 'inherit',
+                stdout: 'inherit',
+                stderr: 'inherit',
+                env: { ...process.env, NODE_AUTH_TOKEN: token },
+            });
+            const exitCode = await proc.exited;
+            if (exitCode !== 0)
+                throw new Error('npm publish failed — see output above');
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/npm/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,IAAK,UAcJ;AAdD,WAAK,UAAU;IACb,qCAAuB,CAAA;IACvB,6CAA+B,CAAA;IAC/B,uDAAyC,CAAA;IACzC,yCAA2B,CAAA;IAC3B,uCAAyB,CAAA;IACzB,yCAA2B,CAAA;IAC3B,yCAA2B,CAAA;IAC3B,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,yCAA2B,CAAA;IAC3B,6CAA+B,CAAA;IAC/B,iEAAmD,CAAA;IACnD,uDAAyC,CAAA;AAC3C,CAAC,EAdI,UAAU,KAAV,UAAU,QAcd;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,4CAA4C,EAAE,GAAG,EAAE,CAC3F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,SAAS;IACT,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;QACzB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,6DAA6D,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9G,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;QAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,SAAS,UAAU,wEAAwE,CAAC,CAAC;IAC3I,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,IAAI,CACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,gCAAgC,CAAC,EAAE,CAAC,CACnF,CAAC;IACF,GAAG,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IAEzC,gBAAgB;IAChB,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;QACxB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,mEAAmE,CAAC,CAAC;IAClH,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,yBAAyB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,yBAAyB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,gDAAgD,CAAC,CAAC;IAChG,GAAG,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAEpE,mBAAmB;IACnB,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;QAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,oEAAoE,CAAC,CAAC;IAElH,yCAAyC;IACzC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,aAAa,qEAAqE,CAAC,CAAC;IACvH,IAAI,GAAG,GAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACtC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,kBAAkB,yDAAyD;KACvG,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACrB,IAAI,CAAC,IAAI;QACP,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,kBAAkB,0CAA0C,CAAC,CAAC;IACjG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK;QACP,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,kBAAkB,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzF,gBAAgB;IAChB,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,sEAAsE,CAAC,CAAC;IACtH,MAAM,MAAM,GAAI,YAAoC,CAAC,KAAK,CAAC;IAC3D,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,oCAAoC,MAAM,2BAA2B,CAAC,CAAC;IACtH,MAAM,MAAM,GAAI,YAA+E,CAAC,KAAK,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,aAAa,uBAAuB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACnI,MAAM,YAAY,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACzE,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAEnE,qFAAqF;IACrF,MAAM,eAAe,GAAG,OAAO,YAAY,MAAM,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACjG,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QACvC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC9C,GAAG,CAAC,UAAU,cAAc,IAAI,WAAW,EAAE,CAAC,CAAC;QAC/C,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,CAAC;QACpE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,cAAc,eAAe,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAC3C,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,QAAQ;YAAE,GAAG,CAAC,KAAK,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sBAAsB;IACtB,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5B,CAAC;IAED,0DAA0D;IAC1D,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,iCAAiC,CAAC,EAAE,CAAC,CACpF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,wEAAwE,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC;YAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,mBAAmB,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzG,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,mFAAmF,CAAC,CAAC;QACnI,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;YAC7B,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,gFAAgF;SACvH,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,CAC1D,CAAC;QACF,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,IAAI,WAAW,CAAC;QAC9D,GAAG,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,wBAAwB;IACxB,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,uBAAuB,KAAK,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE3E,sEAAsE;IACtE,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACxC,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,kBAAkB,KAAK,CAAC,EAAE,CAAC,CAC/D,CAAC;IACF,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACxB,CAAC,CAAC,CACH,CAAC;AAEF,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE;gBAC3F,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE;aAChD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/npm-auth.js

@@ -0,0 +1,62 @@
+import { $ } from 'bun';
+import { readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { Effect, Option } from 'effect';
+import { log } from '@/common/log';
+const npmrcPath = `${homedir()}/.npmrc`;
+const TOKEN_RE = /^\/\/registry\.npmjs\.org\/:_authToken=(\S+)$/m;
+function readNpmrc() {
+    try {
+        return readFileSync(npmrcPath, 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+function stripTokenFromDisk() {
+    const content = readNpmrc();
+    const stripped = content.replace(TOKEN_RE, '').replace(/\n{3,}/g, '\n\n').trim();
+    if (!stripped) {
+        try {
+            unlinkSync(npmrcPath);
+        }
+        catch { }
+    }
+    else {
+        writeFileSync(npmrcPath, stripped + '\n');
+    }
+}
+async function whoamiWithToken(token) {
+    const result = await $ `npm whoami`
+        .env({ ...process.env, NODE_AUTH_TOKEN: token })
+        .quiet().nothrow();
+    if (result.exitCode !== 0)
+        return Option.none();
+    return Option.some(result.stdout.toString().trim());
+}
+export function acquireToken() {
+    return Effect.tryPromise({
+        try: async () => {
+            const existing = readNpmrc().match(TOKEN_RE)?.[1];
+            if (existing) {
+                const userOption = await whoamiWithToken(existing);
+                if (Option.isSome(userOption)) {
+                    stripTokenFromDisk();
+                    return { token: existing, user: userOption.value };
+                }
+            }
+            log('  not logged in — opening npm login...');
+            await $ `npm login`.nothrow();
+            const token = readNpmrc().match(TOKEN_RE)?.[1];
+            if (!token)
+                throw new Error('npm login did not produce a token — try running "npm login" manually');
+            const userOption = await whoamiWithToken(token);
+            if (Option.isNone(userOption))
+                throw new Error('npm login succeeded but token verification failed');
+            stripTokenFromDisk();
+            return { token, user: userOption.value };
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+//# sourceMappingURL=npm-auth.js.map

package/dist/commands/npm/setup/npm-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-auth.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/npm-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,MAAM,SAAS,GAAG,GAAG,OAAO,EAAE,SAAS,CAAC;AACxC,MAAM,QAAQ,GAAG,gDAAgD,CAAC;AAElE,SAAS,SAAS;IAChB,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,YAAY;SAC/B,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,kBAAkB,EAAE,CAAC;oBACrB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,GAAG,CAAC,wCAAwC,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAA,WAAW,CAAC,OAAO,EAAE,CAAC;YAE7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAEpG,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAEpG,kBAAkB,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/package-json-validate.js

@@ -0,0 +1,47 @@
+const GITHUB_URL_RE = /^git\+https:\/\/github\.com\/[^/]+\/[^/]+\.git$/;
+function isValidGitHubUrl(url) {
+    return GITHUB_URL_RE.test(url);
+}
+function normalizeRepoUrl(url) {
+    if (!url.startsWith('git+'))
+        url = `git+${url}`;
+    if (!url.endsWith('.git'))
+        url = `${url}.git`;
+    return url;
+}
+export function validatePackageJson(pkg) {
+    const issues = [];
+    const repoUrl = typeof pkg.repository === 'object' ? pkg.repository?.url : pkg.repository;
+    if (!repoUrl) {
+        issues.push({ field: 'repository', issue: 'missing — required for provenance' });
+    }
+    else if (!isValidGitHubUrl(repoUrl)) {
+        issues.push({ field: 'repository.url', issue: `not a valid GitHub URL (got "${repoUrl}")` });
+    }
+    if (pkg.publishConfig?.access !== 'public') {
+        issues.push({ field: 'publishConfig.access', issue: 'should be "public"' });
+    }
+    if (pkg.publishConfig?.provenance !== true) {
+        issues.push({ field: 'publishConfig.provenance', issue: 'should be true' });
+    }
+    if (!pkg.version) {
+        issues.push({ field: 'version', issue: 'missing — add a "version" field (e.g. "0.0.1")', fatal: true });
+    }
+    if (!pkg.scripts?.['build']) {
+        issues.push({ field: 'scripts.build', issue: 'missing — add a "build" script before running setup', fatal: true });
+    }
+    if (!pkg.files?.includes('dist')) {
+        issues.push({ field: 'files', issue: '"dist" not included — built output won\'t be published' });
+    }
+    return issues;
+}
+export function buildFixedPackageJson(pkg, repoUrl) {
+    const url = normalizeRepoUrl(repoUrl);
+    return {
+        ...pkg,
+        repository: { type: 'git', url },
+        publishConfig: { access: 'public', provenance: true },
+        files: pkg.files?.includes('dist') ? pkg.files : [...(pkg.files ?? []), 'dist'],
+    };
+}
+//# sourceMappingURL=package-json-validate.js.map

package/dist/commands/npm/setup/package-json-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json-validate.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/package-json-validate.ts"],"names":[],"mappings":"AAeA,MAAM,aAAa,GAAG,iDAAiD,CAAC;AAExE,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,GAAG,GAAG,OAAO,GAAG,EAAE,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gDAAgD,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,qDAAqD,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAQ,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE;QAChC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;QACrD,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC;KAChF,CAAC;AACJ,CAAC"}