@voxgig/sdkgen-infrapack 0.0.16 → 0.0.18

package/.sdk/src/cmp/seneca-provider/Extras_seneca-provider.ts

@@ -2,6 +2,7 @@ import {
   cmp, each,
   File, Content, Folder,
   jsKey, jsProp,
+  npmTrustScript,
   pointSegments,
 } from '@voxgig/sdkgen'
 
@@ -1399,9 +1400,38 @@ async function run() {
 
 
 
+const PUBLISH_WORKFLOW = 'publish.yml'
+
+
 const Workflow = cmp(function Workflow(props: any) {
   const { provider } = props
 
+  // The script runs from the provider's own .sdk, which only a standalone
+  // builder has, and npm trusts GitHub Actions only on github.com.
+  const repository = 'github.com' === String(provider.repoHost).toLowerCase() ?
+    provider.repoPath : null
+  const trusted = provider.standalone && null != repository
+  const trustNote = !trusted ? '' :
+    '#\n' +
+    '# .sdk/admin/setup-npm-trust.sh registers exactly this, and with --check\n' +
+    '# reports any drift from it:\n' +
+    '#\n' +
+    `#   npm trust github ${provider.pkgName} \\\n` +
+    `#     --repository ${provider.repoPath} \\\n` +
+    `#     --file ${PUBLISH_WORKFLOW} \\\n` +
+    '#     --allow-publish\n'
+
+  if (provider.standalone) {
+    Folder({ name: '.sdk' }, () => {
+      Folder({ name: 'admin' }, () => {
+        File({ name: 'setup-npm-trust.sh', mode: 0o755 }, () => {
+          Content(npmTrustScript(repository,
+            [{ pkg: provider.pkgName, file: PUBLISH_WORKFLOW }]))
+        })
+      })
+    })
+  }
+
   Folder({ name: '.github' }, () => {
     Folder({ name: 'workflows' }, () => {
       File({ name: 'build.yml' }, () => {
@@ -1504,7 +1534,7 @@ ${!provider.liveApp ? '' : `
 `)
       })
 
-      File({ name: 'publish.yml' }, () => {
+      File({ name: PUBLISH_WORKFLOW }, () => {
         Content(`# Generated by @voxgig/sdkgen. Do not edit.
 #
 # Publishes ${provider.pkgName} to npm on a \`v*\` tag push, via GitHub OIDC
@@ -1529,9 +1559,9 @@ ${!provider.liveApp ? '' : `
 # is what makes the isolation real rather than nominal.
 #
 # The trusted publisher must be registered on npmjs.com for this package
-# against THIS filename (publish.yml); renaming this file breaks publishing
+# against THIS filename (${PUBLISH_WORKFLOW}); renaming this file breaks publishing
 # until the npm-side config is updated to match.
-#
+${trustNote}#
 # npm cannot configure a trusted publisher for a package that does not exist
 # yet — the settings page appears once a version is on the registry. So the
 # FIRST version of a new package is published by hand, once, with an

package/.sdk/src/cmp/seneca-provider/Main_seneca-provider.ts

@@ -319,13 +319,13 @@ function parentEntityOf(key: string, names: string[]): string {
 
 
 function providerRepo(model: any, lower: string, tname: string):
-  { url: string, path: string } {
+  { url: string, path: string, host: string } {
   const host = model?.main?.[KIT]?.repo?.host || 'github.com'
   const declared = model?.main?.[KIT]?.target?.[tname]?.output?.repo
   const path = null != declared && '' !== declared ?
     String(declared) : `senecajs/seneca-${lower}-provider`
 
-  return { url: `https://${host}/${path}`, path }
+  return { url: `https://${host}/${path}`, path, host }
 }
 
 
@@ -544,6 +544,8 @@ const Main = cmp(function Main(props: any) {
     sdkInstallFlag: sdkDep.startsWith('github:') ? ' --allow-git=all' :
       (sdkDep.startsWith('http') ? ' --allow-remote=all' : ''),
     repoUrl: repo.url,
+    repoPath: repo.path,
+    repoHost: repo.host,
     sdkRepoUrl,
     sdkTag,
     sdkRepoDir,
@@ -721,7 +723,7 @@ const PackageJson = cmp(function PackageJson(props: any) {
         'npm run build && npm run test && npm run repo-tag && ' +
         'npm publish --access public --registry https://registry.npmjs.org',
     },
-    files: ['dist', 'doc', 'src/**/*.ts', 'LICENSE'],
+    files: ['dist', 'doc', 'src/**/*.ts', 'LICENSE', 'README.md'],
     engines: { node: '>=24' },
     dependencies: {
       // The SDK this plugin wraps. Published-and-pinned by default; a git

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voxgig/sdkgen-infrapack",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "description": "Infrastructure-provider targets for the Voxgig SDK Generator: Seneca provider.",
   "type": "commonjs",
   "license": "MIT",
@@ -19,7 +19,8 @@
   },
   "files": [
     ".sdk",
-    "sdkgen-package.json"
+    "sdkgen-package.json",
+    "README.md"
   ],
   "scripts": {
     "test": "node tools/comment-gate.cjs && node tools/dep-gate.cjs && node --test tools/dep-gate.test.cjs && node --enable-source-maps --test test/*.test.js",
@@ -105,11 +106,11 @@
   ],
   "peerDependencies": {
     "@voxgig/apidef": ">=8.17.0",
-    "@voxgig/sdkgen": ">=4.25.0"
+    "@voxgig/sdkgen": ">=4.30.0"
   },
   "devDependencies": {
     "@voxgig/apidef": ">=8.17.0",
-    "@voxgig/sdkgen": ">=4.25.0",
+    "@voxgig/sdkgen": ">=4.30.0",
     "aontu": ">=0.75.0",
     "memfs": "4.68.1",
     "typescript": "7.0.2",

package/sdkgen-package.json

@@ -3,9 +3,9 @@
     "package": 1
   },
   "name": "@voxgig/sdkgen-infrapack",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "engines": {
-    "sdkgen": ">=4.25.0"
+    "sdkgen": ">=4.30.0"
   },
   "provides": {
     "target": [