@ozyman42/ozy-cli 0.4.8-linux-x64.0 → 0.4.8

package/dist/commands/npm/setup/index.js

@@ -0,0 +1,168 @@
+import { $ } from 'bun';
+import { existsSync } from 'node:fs';
+import { Effect, Option } from 'effect';
+import { makeCommand } from '@/common/command';
+import { log } from '@/common/log';
+import { acquireToken } from './npm-auth';
+import { fetchPackageInfo } from './package-registry';
+import { addTrustedPublisher, setPackageAccessPolicy } from './trusted-publishing';
+import { checkGitHubAccess } from './git-remote';
+import { workflowExists, createWorkflow } from './workflow';
+import { validatePackageJson } from './package-json-validate';
+var SetupError;
+(function (SetupError) {
+    SetupError["NoGitRepo"] = "NoGitRepo";
+    SetupError["NoPackageJson"] = "NoPackageJson";
+    SetupError["InvalidPackageJson"] = "InvalidPackageJson";
+    SetupError["NpmNotFound"] = "NpmNotFound";
+    SetupError["GhNotFound"] = "GhNotFound";
+    SetupError["NotLoggedIn"] = "NotLoggedIn";
+    SetupError["NoGitRemote"] = "NoGitRemote";
+    SetupError["RepoNotFound"] = "RepoNotFound";
+    SetupError["NoWriteAccess"] = "NoWriteAccess";
+    SetupError["BuildFailed"] = "BuildFailed";
+    SetupError["PublishFailed"] = "PublishFailed";
+    SetupError["TrustedPublishingFailed"] = "TrustedPublishingFailed";
+    SetupError["AccessPolicyFailed"] = "AccessPolicyFailed";
+})(SetupError || (SetupError = {}));
+export const setup = makeCommand('setup', 'configure a new npm package for publishing', () => Effect.gen(function* () {
+    const cwd = process.cwd();
+    // 1. npm
+    log('checking npm...');
+    const npmCheck = yield* Effect.promise(() => $ `which npm`.quiet().nothrow());
+    if (npmCheck.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.NpmNotFound}: "npm" not found in PATH — install Node.js from nodejs.org`);
+    const npmVersion = (yield* Effect.promise(() => $ `npm --version`.quiet().nothrow())).stdout.toString().trim();
+    const [major, minor] = npmVersion.split('.').map(Number);
+    if (major < 11 || (major === 11 && minor < 10))
+        yield* Effect.fail(`${SetupError.NpmNotFound}: npm ${npmVersion} is too old — "npm trust" requires 11.10.0+ (run "npm install -g npm")`);
+    const { token: npmToken, user: npmUser } = yield* acquireToken().pipe(Effect.mapError(e => `${SetupError.NotLoggedIn}: npm authentication failed: ${e}`));
+    log(`  ✓ logged into npm as ${npmUser}`);
+    // 2. GitHub CLI
+    log('checking GitHub...');
+    const ghCheck = yield* Effect.promise(() => $ `which gh`.quiet().nothrow());
+    if (ghCheck.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.GhNotFound}: "gh" not found in PATH — install GitHub CLI from cli.github.com`);
+    let ghUser = yield* Effect.promise(() => $ `gh api user --jq .login`.quiet().nothrow());
+    if (ghUser.exitCode !== 0) {
+        log('  not logged in — opening gh auth login...');
+        yield* Effect.promise(() => $ `gh auth login`.nothrow());
+        ghUser = yield* Effect.promise(() => $ `gh api user --jq .login`.quiet().nothrow());
+    }
+    if (ghUser.exitCode !== 0)
+        yield* Effect.fail(`${SetupError.NotLoggedIn}: not logged into GitHub — run "gh auth login"`);
+    log(`  ✓ logged into github as ${ghUser.stdout.toString().trim()}`);
+    // 3. git repo root
+    if (!existsSync(`${cwd}/.git`))
+        yield* Effect.fail(`${SetupError.NoGitRepo}: current directory is not a git repository — run "git init" first`);
+    // 4. package.json — read and fatal-check
+    log('checking package.json...');
+    const pkgFile = Bun.file(`${cwd}/package.json`);
+    if (!(yield* Effect.promise(() => pkgFile.exists())))
+        yield* Effect.fail(`${SetupError.NoPackageJson}: no package.json found — run this command from a package directory`);
+    let pkg = yield* Effect.tryPromise({
+        try: () => pkgFile.json(),
+        catch: () => `${SetupError.InvalidPackageJson}: package.json contains invalid JSON — fix it and retry`,
+    });
+    const { name } = pkg;
+    if (!name)
+        yield* Effect.fail(`${SetupError.InvalidPackageJson}: package.json is missing a "name" field`);
+    log(`  name: ${name}`);
+    const fatal = validatePackageJson(pkg).find(i => i.fatal);
+    if (fatal)
+        yield* Effect.fail(`${SetupError.InvalidPackageJson}: ${fatal.field}: ${fatal.issue}`);
+    // 5. git remote
+    log('checking git remote...');
+    const remoteOption = yield* Effect.promise(() => getRemoteUrl(cwd));
+    if (Option.isNone(remoteOption))
+        yield* Effect.fail(`${SetupError.NoGitRemote}: no git remote configured — run "git remote add origin <url>" first`);
+    const remote = remoteOption.value;
+    log(`  remote: ${remote}`);
+    const accessOption = yield* Effect.promise(() => checkGitHubAccess(remote));
+    if (Option.isNone(accessOption))
+        yield* Effect.fail(`${SetupError.RepoNotFound}: could not reach GitHub repo at ${remote} — check "gh auth status"`);
+    const access = accessOption.value;
+    if (!access.canPush)
+        yield* Effect.fail(`${SetupError.NoWriteAccess}: no push access to ${access.owner}/${access.repo} — you need write permissions`);
+    const repoHttpsUrl = `https://github.com/${access.owner}/${access.repo}`;
+    log(`  ✓ ${access.owner}/${access.repo} (write access confirmed)`);
+    // 6. Sync package.json repository URL from git remote; report other non-fatal issues
+    const expectedRepoUrl = `git+${repoHttpsUrl}.git`;
+    const currentRepoUrl = typeof pkg.repository === 'object' ? pkg.repository?.url : pkg.repository;
+    if (currentRepoUrl !== expectedRepoUrl) {
+        log('syncing package.json repository URL...');
+        log(`  was: ${currentRepoUrl ?? '(missing)'}`);
+        pkg = { ...pkg, repository: { type: 'git', url: expectedRepoUrl } };
+        yield* Effect.promise(() => Bun.write(`${cwd}/package.json`, JSON.stringify(pkg, null, 2) + '\n'));
+        log(`  ✓ set to ${expectedRepoUrl}`);
+    }
+    const nonFatal = validatePackageJson(pkg).filter(i => !i.fatal);
+    if (nonFatal.length > 0) {
+        log('package.json issues (fix manually):');
+        for (const { field, issue } of nonFatal)
+            log(`  ${field}: ${issue}`);
+    }
+    // 7. Publish workflow
+    log('checking publish workflow...');
+    if (!(yield* Effect.promise(() => workflowExists(cwd)))) {
+        yield* Effect.promise(() => createWorkflow(cwd));
+        log('  ✓ created .github/workflows/publish.yml');
+    }
+    else {
+        log('  ✓ already exists');
+    }
+    // 8. npm package — initial publish if not yet on registry
+    log('checking npm registry...');
+    const infoOption = yield* fetchPackageInfo(name).pipe(Effect.mapError(e => `${SetupError.NpmNotFound}: npm registry lookup failed: ${e}`));
+    if (Option.isNone(infoOption)) {
+        log('  package not yet published — building and creating initial release...');
+        const buildResult = yield* Effect.promise(() => $ `bun run build`.nothrow());
+        if (buildResult.exitCode !== 0)
+            yield* Effect.fail(`${SetupError.BuildFailed}: build failed: ${buildResult.stderr.toString().trim()}`);
+        const distPkgFile = Bun.file(`${cwd}/dist/package.json`);
+        if (!(yield* Effect.promise(() => distPkgFile.exists())))
+            yield* Effect.fail(`${SetupError.BuildFailed}: build succeeded but dist/package.json is missing — build script must produce it`);
+        yield* Effect.tryPromise({
+            try: () => distPkgFile.json(),
+            catch: () => `${SetupError.BuildFailed}: dist/package.json exists but contains invalid JSON — check your build script`,
+        });
+        yield* npmPublish(npmToken).pipe(Effect.mapError(e => `${SetupError.PublishFailed}: ${e}`));
+        log(`  ✓ published ${name}`);
+    }
+    else {
+        const version = infoOption.value.latestVersion ?? '(unknown)';
+        log(`  ✓ exists (latest v${version})`);
+    }
+    // 9. Trusted publishing
+    log('checking trusted publishing...');
+    const ownerRepo = `${access.owner}/${access.repo}`;
+    const trust = yield* addTrustedPublisher(name, ownerRepo, npmToken).pipe(Effect.mapError(e => `${SetupError.TrustedPublishingFailed}: ${e}`));
+    log(trust.alreadyConfigured ? '  ✓ already configured' : '  ✓ configured');
+    // 10. Package access policy — require 2FA, disallow automation tokens
+    log('setting package access policy...');
+    yield* setPackageAccessPolicy(name, npmToken, trust.otp).pipe(Effect.mapError(e => `${SetupError.AccessPolicyFailed}: ${e}`));
+    log('  ✓ configured');
+}));
+async function getRemoteUrl(cwd) {
+    const result = await $ `git -C ${cwd} remote get-url origin`.quiet().nothrow();
+    if (result.exitCode !== 0)
+        return Option.none();
+    return Option.some(result.stdout.toString().trim());
+}
+function npmPublish(token) {
+    return Effect.tryPromise({
+        try: async () => {
+            const proc = Bun.spawn(['npm', 'publish', 'dist/', '--access', 'public', '--no-provenance'], {
+                stdin: 'inherit',
+                stdout: 'inherit',
+                stderr: 'inherit',
+                env: { ...process.env, NODE_AUTH_TOKEN: token },
+            });
+            const exitCode = await proc.exited;
+            if (exitCode !== 0)
+                throw new Error('npm publish failed — see output above');
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/npm/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,IAAK,UAcJ;AAdD,WAAK,UAAU;IACb,qCAAuB,CAAA;IACvB,6CAA+B,CAAA;IAC/B,uDAAyC,CAAA;IACzC,yCAA2B,CAAA;IAC3B,uCAAyB,CAAA;IACzB,yCAA2B,CAAA;IAC3B,yCAA2B,CAAA;IAC3B,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,yCAA2B,CAAA;IAC3B,6CAA+B,CAAA;IAC/B,iEAAmD,CAAA;IACnD,uDAAyC,CAAA;AAC3C,CAAC,EAdI,UAAU,KAAV,UAAU,QAcd;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,4CAA4C,EAAE,GAAG,EAAE,CAC3F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,SAAS;IACT,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;QACzB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,6DAA6D,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9G,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;QAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,SAAS,UAAU,wEAAwE,CAAC,CAAC;IAC3I,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,IAAI,CACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,gCAAgC,CAAC,EAAE,CAAC,CACnF,CAAC;IACF,GAAG,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IAEzC,gBAAgB;IAChB,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;QACxB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,UAAU,mEAAmE,CAAC,CAAC;IAClH,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,yBAAyB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,yBAAyB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,gDAAgD,CAAC,CAAC;IAChG,GAAG,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAEpE,mBAAmB;IACnB,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC;QAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,oEAAoE,CAAC,CAAC;IAElH,yCAAyC;IACzC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,aAAa,qEAAqE,CAAC,CAAC;IACvH,IAAI,GAAG,GAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACtC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,kBAAkB,yDAAyD;KACvG,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACrB,IAAI,CAAC,IAAI;QACP,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,kBAAkB,0CAA0C,CAAC,CAAC;IACjG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAEvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK;QACP,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,kBAAkB,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzF,gBAAgB;IAChB,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,sEAAsE,CAAC,CAAC;IACtH,MAAM,MAAM,GAAI,YAAoC,CAAC,KAAK,CAAC;IAC3D,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,YAAY,oCAAoC,MAAM,2BAA2B,CAAC,CAAC;IACtH,MAAM,MAAM,GAAI,YAA+E,CAAC,KAAK,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,aAAa,uBAAuB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;IACnI,MAAM,YAAY,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACzE,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAEnE,qFAAqF;IACrF,MAAM,eAAe,GAAG,OAAO,YAAY,MAAM,CAAC;IAClD,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACjG,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QACvC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC9C,GAAG,CAAC,UAAU,cAAc,IAAI,WAAW,EAAE,CAAC,CAAC;QAC/C,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,CAAC;QACpE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,cAAc,eAAe,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAC3C,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,QAAQ;YAAE,GAAG,CAAC,KAAK,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sBAAsB;IACtB,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5B,CAAC;IAED,0DAA0D;IAC1D,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,iCAAiC,CAAC,EAAE,CAAC,CACpF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,wEAAwE,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC;YAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,mBAAmB,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzG,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,mFAAmF,CAAC,CAAC;QACnI,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACvB,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;YAC7B,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,gFAAgF;SACvH,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,CAC1D,CAAC;QACF,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,IAAI,WAAW,CAAC;QAC9D,GAAG,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,wBAAwB;IACxB,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,uBAAuB,KAAK,CAAC,EAAE,CAAC,CACpE,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE3E,sEAAsE;IACtE,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACxC,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,kBAAkB,KAAK,CAAC,EAAE,CAAC,CAC/D,CAAC;IACF,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACxB,CAAC,CAAC,CACH,CAAC;AAEF,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE;gBAC3F,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE;aAChD,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/npm-auth.js

@@ -0,0 +1,62 @@
+import { $ } from 'bun';
+import { readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { Effect, Option } from 'effect';
+import { log } from '@/common/log';
+const npmrcPath = `${homedir()}/.npmrc`;
+const TOKEN_RE = /^\/\/registry\.npmjs\.org\/:_authToken=(\S+)$/m;
+function readNpmrc() {
+    try {
+        return readFileSync(npmrcPath, 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+function stripTokenFromDisk() {
+    const content = readNpmrc();
+    const stripped = content.replace(TOKEN_RE, '').replace(/\n{3,}/g, '\n\n').trim();
+    if (!stripped) {
+        try {
+            unlinkSync(npmrcPath);
+        }
+        catch { }
+    }
+    else {
+        writeFileSync(npmrcPath, stripped + '\n');
+    }
+}
+async function whoamiWithToken(token) {
+    const result = await $ `npm whoami`
+        .env({ ...process.env, NODE_AUTH_TOKEN: token })
+        .quiet().nothrow();
+    if (result.exitCode !== 0)
+        return Option.none();
+    return Option.some(result.stdout.toString().trim());
+}
+export function acquireToken() {
+    return Effect.tryPromise({
+        try: async () => {
+            const existing = readNpmrc().match(TOKEN_RE)?.[1];
+            if (existing) {
+                const userOption = await whoamiWithToken(existing);
+                if (Option.isSome(userOption)) {
+                    stripTokenFromDisk();
+                    return { token: existing, user: userOption.value };
+                }
+            }
+            log('  not logged in — opening npm login...');
+            await $ `npm login`.nothrow();
+            const token = readNpmrc().match(TOKEN_RE)?.[1];
+            if (!token)
+                throw new Error('npm login did not produce a token — try running "npm login" manually');
+            const userOption = await whoamiWithToken(token);
+            if (Option.isNone(userOption))
+                throw new Error('npm login succeeded but token verification failed');
+            stripTokenFromDisk();
+            return { token, user: userOption.value };
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+//# sourceMappingURL=npm-auth.js.map

package/dist/commands/npm/setup/npm-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-auth.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/npm-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,MAAM,SAAS,GAAG,GAAG,OAAO,EAAE,SAAS,CAAC;AACxC,MAAM,QAAQ,GAAG,gDAAgD,CAAC;AAElE,SAAS,SAAS;IAChB,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAA,YAAY;SAC/B,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;SAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,kBAAkB,EAAE,CAAC;oBACrB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,GAAG,CAAC,wCAAwC,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAA,WAAW,CAAC,OAAO,EAAE,CAAC;YAE7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAEpG,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAEpG,kBAAkB,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/package-json-validate.js

@@ -0,0 +1,47 @@
+const GITHUB_URL_RE = /^git\+https:\/\/github\.com\/[^/]+\/[^/]+\.git$/;
+function isValidGitHubUrl(url) {
+    return GITHUB_URL_RE.test(url);
+}
+function normalizeRepoUrl(url) {
+    if (!url.startsWith('git+'))
+        url = `git+${url}`;
+    if (!url.endsWith('.git'))
+        url = `${url}.git`;
+    return url;
+}
+export function validatePackageJson(pkg) {
+    const issues = [];
+    const repoUrl = typeof pkg.repository === 'object' ? pkg.repository?.url : pkg.repository;
+    if (!repoUrl) {
+        issues.push({ field: 'repository', issue: 'missing — required for provenance' });
+    }
+    else if (!isValidGitHubUrl(repoUrl)) {
+        issues.push({ field: 'repository.url', issue: `not a valid GitHub URL (got "${repoUrl}")` });
+    }
+    if (pkg.publishConfig?.access !== 'public') {
+        issues.push({ field: 'publishConfig.access', issue: 'should be "public"' });
+    }
+    if (pkg.publishConfig?.provenance !== true) {
+        issues.push({ field: 'publishConfig.provenance', issue: 'should be true' });
+    }
+    if (!pkg.version) {
+        issues.push({ field: 'version', issue: 'missing — add a "version" field (e.g. "0.0.1")', fatal: true });
+    }
+    if (!pkg.scripts?.['build']) {
+        issues.push({ field: 'scripts.build', issue: 'missing — add a "build" script before running setup', fatal: true });
+    }
+    if (!pkg.files?.includes('dist')) {
+        issues.push({ field: 'files', issue: '"dist" not included — built output won\'t be published' });
+    }
+    return issues;
+}
+export function buildFixedPackageJson(pkg, repoUrl) {
+    const url = normalizeRepoUrl(repoUrl);
+    return {
+        ...pkg,
+        repository: { type: 'git', url },
+        publishConfig: { access: 'public', provenance: true },
+        files: pkg.files?.includes('dist') ? pkg.files : [...(pkg.files ?? []), 'dist'],
+    };
+}
+//# sourceMappingURL=package-json-validate.js.map

package/dist/commands/npm/setup/package-json-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json-validate.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/package-json-validate.ts"],"names":[],"mappings":"AAeA,MAAM,aAAa,GAAG,iDAAiD,CAAC;AAExE,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,GAAG,GAAG,OAAO,GAAG,EAAE,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAQ;IAC1C,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,gDAAgD,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,qDAAqD,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAQ,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,GAAG;QACN,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE;QAChC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;QACrD,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC;KAChF,CAAC;AACJ,CAAC"}

package/dist/commands/npm/setup/package-registry.js

@@ -0,0 +1,20 @@
+import { Effect, Option } from 'effect';
+export function fetchPackageInfo(name) {
+    return Effect.tryPromise({
+        try: async () => {
+            const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(name)}`);
+            if (res.status === 404)
+                return Option.none();
+            if (!res.ok)
+                throw new Error(`registry error ${res.status} for ${name}`);
+            const data = await res.json();
+            return Option.some({
+                name: data.name,
+                latestVersion: data['dist-tags']?.latest,
+                distTags: data['dist-tags'] ?? {},
+            });
+        },
+        catch: (e) => e instanceof Error ? e.message : String(e),
+    });
+}
+//# sourceMappingURL=package-registry.js.map

package/dist/commands/npm/setup/package-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-registry.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/package-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAQxC,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAuB,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM;gBACxC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/setup.test.js

@@ -0,0 +1,95 @@
+import { describe, test, expect, beforeEach, afterEach } from 'bun:test';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { validatePackageJson } from './package-json-validate';
+import { parseGithubOwnerRepo } from './git-remote';
+import { workflowExists, createWorkflow } from './workflow';
+import { Option } from "effect";
+// ── validatePackageJson ──────────────────────────────────────────────────────
+describe('validatePackageJson', () => {
+    const base = {
+        name: '@scope/pkg',
+        version: '1.0.0',
+        repository: { type: 'git', url: 'git+https://github.com/owner/repo.git' },
+        publishConfig: { access: 'public', provenance: true },
+        scripts: { build: 'bun run build' },
+        files: ['dist'],
+    };
+    test('returns no issues for a valid package', () => {
+        expect(validatePackageJson(base)).toEqual([]);
+    });
+    test('fatal: missing version', () => {
+        const issues = validatePackageJson({ ...base, version: '' });
+        expect(issues.some(i => i.field === 'version' && i.fatal)).toBe(true);
+    });
+    test('fatal: missing build script', () => {
+        const issues = validatePackageJson({ ...base, scripts: {} });
+        expect(issues.some(i => i.field === 'scripts.build' && i.fatal)).toBe(true);
+    });
+    test('non-fatal: missing repository', () => {
+        const issues = validatePackageJson({ ...base, repository: undefined });
+        expect(issues.some(i => i.field === 'repository' && !i.fatal)).toBe(true);
+    });
+    test('non-fatal: invalid repository url', () => {
+        const issues = validatePackageJson({ ...base, repository: { type: 'git', url: 'git+.git' } });
+        expect(issues.some(i => i.field === 'repository.url' && !i.fatal)).toBe(true);
+    });
+    test('non-fatal: publishConfig.access not public', () => {
+        const issues = validatePackageJson({ ...base, publishConfig: { access: 'restricted', provenance: true } });
+        expect(issues.some(i => i.field === 'publishConfig.access')).toBe(true);
+    });
+    test('non-fatal: publishConfig.provenance not true', () => {
+        const issues = validatePackageJson({ ...base, publishConfig: { access: 'public', provenance: false } });
+        expect(issues.some(i => i.field === 'publishConfig.provenance')).toBe(true);
+    });
+    test('non-fatal: dist not in files', () => {
+        const issues = validatePackageJson({ ...base, files: ['src'] });
+        expect(issues.some(i => i.field === 'files')).toBe(true);
+    });
+});
+// ── parseGithubOwnerRepo ─────────────────────────────────────────────────────
+describe('parseGithubOwnerRepo', () => {
+    test('parses https url', () => {
+        expect(parseGithubOwnerRepo('https://github.com/owner/repo.git')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
+    });
+    test('parses https url without .git', () => {
+        expect(parseGithubOwnerRepo('https://github.com/owner/repo')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
+    });
+    test('parses standard ssh url', () => {
+        expect(parseGithubOwnerRepo('git@github.com:owner/repo.git')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
+    });
+    test('parses ssh alias url', () => {
+        expect(parseGithubOwnerRepo('git@github-ozyman42:ozyman42/test.git')).toEqual(Option.some({ owner: 'ozyman42', repo: 'test' }));
+    });
+    test('returns null for unrecognised url', () => {
+        expect(parseGithubOwnerRepo('not-a-url')).toBeNull();
+    });
+});
+// ── workflow helpers ─────────────────────────────────────────────────────────
+describe('workflow', () => {
+    let tmpDir;
+    beforeEach(async () => {
+        tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'ozy-test-'));
+    });
+    afterEach(async () => {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+    });
+    test('workflowExists returns false when missing', async () => {
+        expect(await workflowExists(tmpDir)).toBe(false);
+    });
+    test('createWorkflow creates a valid yaml file', async () => {
+        await createWorkflow(tmpDir);
+        expect(await workflowExists(tmpDir)).toBe(true);
+        const content = await fs.readFile(path.join(tmpDir, '.github/workflows/publish.yml'), 'utf8');
+        expect(content).toContain('npm publish dist/');
+        expect(content).toContain('id-token: write');
+        expect(content).toContain('bun run build');
+    });
+    test('createWorkflow is idempotent', async () => {
+        await createWorkflow(tmpDir);
+        await createWorkflow(tmpDir);
+        expect(await workflowExists(tmpDir)).toBe(true);
+    });
+});
+//# sourceMappingURL=setup.test.js.map

package/dist/commands/npm/setup/setup.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.test.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/setup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,gFAAgF;AAEhF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,uCAAuC,EAAE;QACzE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,UAAU,EAAE,IAAI,EAAE;QAC9D,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACnC,KAAK,EAAE,CAAC,MAAM,CAAC;KAChB,CAAC;IAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,SAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3G,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,oBAAoB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/npm/setup/trusted-publishing.js

@@ -0,0 +1,84 @@
+import { $ } from 'bun';
+import { createInterface } from 'node:readline';
+import { Effect } from 'effect';
+import { log } from '@/common/log';
+function encodePackageName(name) {
+    if (!name.startsWith('@'))
+        return encodeURIComponent(name);
+    const slash = name.indexOf('/');
+    return `@${name.slice(1, slash)}%2F${name.slice(slash + 1)}`;
+}
+function promptPasscode() {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise(resolve => {
+        rl.question('  enter the passcode from the browser: ', answer => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+async function registryPost(url, body, authToken, { existingOtp, alreadyExistsStatus } = {}) {
+    const headers = {
+        Authorization: `Bearer ${authToken}`,
+        'Content-Type': 'application/json',
+    };
+    const post = (otp) => fetch(url, {
+        method: 'POST',
+        headers: otp ? { ...headers, 'npm-otp': otp } : headers,
+        body,
+    });
+    const check = (res) => {
+        if (res.ok)
+            return true;
+        if (alreadyExistsStatus && res.status === alreadyExistsStatus)
+            return true;
+        return false;
+    };
+    if (existingOtp) {
+        const res = await post(existingOtp);
+        if (check(res))
+            return { otp: existingOtp, alreadyExists: !res.ok };
+    }
+    let res = await post();
+    if (check(res))
+        return { otp: undefined, alreadyExists: !res.ok };
+    if (res.status === 401) {
+        const notice = res.headers.get('npm-notice') ?? '';
+        const loginUrl = notice.match(/https:\/\/www\.npmjs\.com\/login\/[a-f0-9-]+/)?.[0];
+        if (!loginUrl)
+            throw new Error('2FA required but could not parse login URL');
+        await $ `open ${loginUrl}`.quiet().nothrow();
+        const otp = await promptPasscode();
+        res = await post(otp);
+        if (check(res))
+            return { otp, alreadyExists: !res.ok };
+    }
+    throw new Error(`${res.status} ${await res.text()}`);
+}
+export function addTrustedPublisher(name, ownerRepo, token) {
+    const encoded = encodePackageName(name);
+    log('  setting up (may require 2FA)...');
+    const body = JSON.stringify([{
+            type: 'github',
+            claims: { repository: ownerRepo, workflow_ref: { file: 'pipeline.yml' } },
+            permissions: ['createPackage'],
+        }]);
+    return Effect.tryPromise({
+        try: async () => {
+            const { otp, alreadyExists } = await registryPost(`https://registry.npmjs.org/-/package/${encoded}/trust`, body, token, { alreadyExistsStatus: 409 });
+            return { alreadyConfigured: alreadyExists, otp };
+        },
+        catch: (e) => `trust setup failed: ${e instanceof Error ? e.message : String(e)}`,
+    });
+}
+export function setPackageAccessPolicy(name, token, existingOtp) {
+    const encoded = encodePackageName(name);
+    const body = JSON.stringify({ publish_requires_tfa: true, automation_token_overrides_tfa: false });
+    return Effect.tryPromise({
+        try: async () => {
+            await registryPost(`https://registry.npmjs.org/-/package/${encoded}/access`, body, token, { existingOtp });
+        },
+        catch: (e) => `access policy setup failed: ${e instanceof Error ? e.message : String(e)}`,
+    });
+}
+//# sourceMappingURL=trusted-publishing.js.map

package/dist/commands/npm/setup/trusted-publishing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-publishing.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/trusted-publishing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,EAAE,CAAC,QAAQ,CAAC,yCAAyC,EAAE,MAAM,CAAC,EAAE;YAC9D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,IAAY,EACZ,SAAiB,EACjB,EAAE,WAAW,EAAE,mBAAmB,KAA6D,EAAE;IAEjG,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,SAAS,EAAE;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO;QACvD,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,GAAa,EAAE,EAAE;QAC9B,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACvB,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAElE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7E,MAAM,CAAC,CAAA,QAAQ,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;QACnC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACzE,WAAW,EAAE,CAAC,eAAe,CAAC;SAC/B,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAC/C,wCAAwC,OAAO,QAAQ,EAAE,IAAI,EAAE,KAAK,EACpE,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAC7B,CAAC;YACF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACnD,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KAClF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,KAAa,EACb,WAAoB;IAEpB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,YAAY,CAChB,wCAAwC,OAAO,SAAS,EAAE,IAAI,EAAE,KAAK,EACrE,EAAE,WAAW,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KAC1F,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/npm/setup/workflow.js

@@ -0,0 +1,19 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import WORKFLOW_TEMPLATE from './publish-workflow.yml' with { type: 'text' };
+const WORKFLOW_PATH = '.github/workflows/publish.yml';
+export async function workflowExists(repoRoot) {
+    try {
+        await fs.access(path.join(repoRoot, WORKFLOW_PATH));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function createWorkflow(repoRoot) {
+    const fullPath = path.join(repoRoot, WORKFLOW_PATH);
+    await fs.mkdir(path.dirname(fullPath), { recursive: true });
+    await fs.writeFile(fullPath, WORKFLOW_TEMPLATE, 'utf8');
+}
+//# sourceMappingURL=workflow.js.map

package/dist/commands/npm/setup/workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,iBAAiB,MAAM,wBAAwB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE7E,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}