@tahminator/pipeline 1.0.11 → 1.0.13

package/dist/internal/upload-npm/index.js

@@ -1,6 +1,7 @@
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
 import { NPMClient } from "../../npm";
+import { Utils } from "../../utils";
 const { dryRun } = await yargs(hideBin(process.argv))
     .option("dryRun", {
     type: "boolean",
@@ -9,9 +10,20 @@ const { dryRun } = await yargs(hideBin(process.argv))
     .strict()
     .parse();
 async function main() {
-    await using npmClient = await NPMClient.create();
+    const { npmToken } = parseCiEnv(await Utils.getEnvVariables(["ci"]));
+    await using npmClient = await NPMClient.create(npmToken);
     await npmClient.publish(dryRun);
 }
+function parseCiEnv(ciEnv) {
+    const npmToken = (() => {
+        const v = ciEnv["NPM_TOKEN"];
+        if (!v) {
+            throw new Error("Missing NPM_TOKEN from .env.ci");
+        }
+        return v;
+    })();
+    return { npmToken };
+}
 main()
     .then(() => {
     process.exit(0);

package/dist/npm/client.d.ts

@@ -1,7 +1,10 @@
 export declare class NPMClient {
+    private readonly npmToken?;
     private constructor();
     /**
-     * __You must use [Trusted Publishing](https://docs.npmjs.com/trusted-publishers) now.__ Using tokens
+     * Create NPMClient using an `npmToken` if passed in or OIDC / [Trusted Publishing](https://docs.npmjs.com/trusted-publishers).
+     *
+     * __It is recommended that you use [Trusted Publishing](https://docs.npmjs.com/trusted-publishers) now.__ Using tokens
      * now are extremely flaky and should be avoided.
      *
      * __NOTE: Base yaml must have this property__
@@ -12,7 +15,7 @@ export declare class NPMClient {
      *    id-token: write  # Required for OIDC
      * ```
      */
-    static create(): Promise<NPMClient>;
+    static create(npmToken?: string): Promise<NPMClient>;
     /**
      * @note You must ensure that the current root directory `package.json`
      * is filled out with the name of the package and the version you would like to

package/dist/npm/client.js

@@ -1,9 +1,14 @@
 import { $ } from "bun";
 import { Utils } from "../utils";
 export class NPMClient {
-    constructor() { }
+    npmToken;
+    constructor(npmToken) {
+        this.npmToken = npmToken;
+    }
     /**
-     * __You must use [Trusted Publishing](https://docs.npmjs.com/trusted-publishers) now.__ Using tokens
+     * Create NPMClient using an `npmToken` if passed in or OIDC / [Trusted Publishing](https://docs.npmjs.com/trusted-publishers).
+     *
+     * __It is recommended that you use [Trusted Publishing](https://docs.npmjs.com/trusted-publishers) now.__ Using tokens
      * now are extremely flaky and should be avoided.
      *
      * __NOTE: Base yaml must have this property__
@@ -14,9 +19,11 @@ export class NPMClient {
      *    id-token: write  # Required for OIDC
      * ```
      */
-    static async create() {
-        // await $`npm config set //registry.npmjs.org/:_authToken=${npmToken}`;
-        return new this();
+    static async create(npmToken) {
+        if (npmToken) {
+            await $ `npm config set //registry.npmjs.org/:_authToken=${npmToken}`;
+        }
+        return new this(npmToken);
     }
     /**
      * @note You must ensure that the current root directory `package.json`
@@ -31,13 +38,16 @@ export class NPMClient {
             console.log(await $ `pwd`.text());
             console.log(await $ `cat ./package.json`.text());
         }
-        await $ `npm publish --access public --provenance ${dryRunFlag} ./`;
+        const provenanceFlag = this.npmToken ? [] : ["--provenance"];
+        await $ `npm publish --access public ${provenanceFlag} ${dryRunFlag} ./`;
         console.log("Package has been successfully published");
     }
     async [Symbol.asyncDispose]() {
         await this.cleanup();
     }
     async cleanup() {
-        // await $`npm logout`;
+        if (this.npmToken) {
+            await $ `npm logout`;
+        }
     }
 }

package/package.json

@@ -3,7 +3,7 @@
   "type": "module",
   "author": "Tahmid Ahmed",
   "description": "A collection of Bun shell scripts that can be re-used in various CICD pipelines.",
-  "version": "1.0.11",
+  "version": "1.0.13",
   "repository": {
     "url": "https://github.com/tahminator/pipeline"
   },