clean-code-tools 1.0.1 → 1.0.4

package/docs/publishing.md

@@ -23,7 +23,7 @@ Before publishing:
 
 ```bash
 bun run check:packages
-npm publish --dry-run --provenance
+npm publish --dry-run
 ```
 
 The package must not set `private: true`; otherwise npm refuses publication. The
@@ -34,6 +34,8 @@ files:
 - `.github/workflows/publish-main.yml`
 
 The workflows use Node 24 so the bundled npm supports trusted publishing.
+npm provenance can be re-enabled with `--provenance` if this repository is
+public; npm rejects provenance for private GitHub repositories.
 
 ## Python / Pylint
 
@@ -113,7 +115,7 @@ Use SemVer for both registries:
 
 ## References
 
-- npm publishing and provenance:
+- npm publishing and trusted publishing:
   <https://docs.github.com/en/actions/tutorials/publish-packages/publish-nodejs-packages>
 - npm package versions are immutable after publish:
   <https://docs.npmjs.com/cli/v11/commands/npm-publish/>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clean-code-tools",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "description": "Clean-code pattern corpus and lint tooling.",
   "type": "module",
   "packageManager": "bun@1.3.13",

package/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "clean-code-tools-python"
-version = "1.0.1"
+version = "1.0.4"
 description = "Python clean-code lint plugin and recommended Ruff/Pylint config."
 readme = "README.md"
 requires-python = ">=3.12"

package/scripts/check_packages.py

@@ -25,9 +25,23 @@ def run(command: list[str], *, cwd: Path = ROOT, check: bool = True) -> subproce
     return completed
 
 
+def npm_pack_payload(output: str) -> list[dict[str, object]]:
+    try:
+        payload = json.loads(output)
+    except json.JSONDecodeError:
+        start = output.find("[")
+        end = output.rfind("]")
+        if start == -1 or end == -1 or end <= start:
+            raise SystemExit(f"Could not parse npm pack JSON output:\n{output}") from None
+        payload = json.loads(output[start : end + 1])
+    if not isinstance(payload, list) or not payload:
+        raise SystemExit(f"Expected npm pack JSON array, got:\n{output}")
+    return payload
+
+
 def check_npm_package() -> None:
     packed = run(["npm", "pack", "--dry-run", "--json"]).stdout
-    package_files = {item["path"] for item in json.loads(packed)[0]["files"]}
+    package_files = {item["path"] for item in npm_pack_payload(packed)[0]["files"]}
     required_files = {
         "src/js/eslint-plugin-clean-code.mjs",
         "configs/eslint.clean-code.recommended.mjs",

package/uv.lock

@@ -261,7 +261,7 @@ wheels = [
 
 [[package]]
 name = "clean-code-tools-python"
-version = "1.0.1"
+version = "1.0.4"
 source = { editable = "." }
 dependencies = [
     { name = "pylint" },