pubm 0.0.1 → 0.0.2-12

package/bin/cli.js

@@ -713,7 +713,7 @@ var init_mjs = __esm({
   "node_modules/.pnpm/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/index.js"() {
     "use strict";
     init_signals();
-    processOk = (process9) => !!process9 && typeof process9 === "object" && typeof process9.removeListener === "function" && typeof process9.emit === "function" && typeof process9.reallyExit === "function" && typeof process9.listeners === "function" && typeof process9.kill === "function" && typeof process9.pid === "number" && typeof process9.on === "function";
+    processOk = (process11) => !!process11 && typeof process11 === "object" && typeof process11.removeListener === "function" && typeof process11.emit === "function" && typeof process11.reallyExit === "function" && typeof process11.listeners === "function" && typeof process11.kill === "function" && typeof process11.pid === "number" && typeof process11.on === "function";
     kExitEmitter = Symbol.for("signal-exit emitter");
     global = globalThis;
     ObjectDefineProperty = Object.defineProperty.bind(Object);
@@ -795,7 +795,7 @@ var init_mjs = __esm({
       }
     };
     SignalExit = class extends SignalExitBase {
-      constructor(process9) {
+      constructor(process11) {
         super();
         __privateAdd(this, _SignalExit_instances);
         // "SIGHUP" throws an `ENOSYS` error on Windows,
@@ -809,13 +809,13 @@ var init_mjs = __esm({
         __privateAdd(this, _originalProcessReallyExit);
         __privateAdd(this, _sigListeners, {});
         __privateAdd(this, _loaded, false);
-        __privateSet(this, _process, process9);
+        __privateSet(this, _process, process11);
         __privateSet(this, _sigListeners, {});
         for (const sig of signals) {
           __privateGet(this, _sigListeners)[sig] = () => {
             const listeners = __privateGet(this, _process).listeners(sig);
             let { count } = __privateGet(this, _emitter);
-            const p = process9;
+            const p = process11;
             if (typeof p.__signal_exit_emitter__ === "object" && typeof p.__signal_exit_emitter__.count === "number") {
               count += p.__signal_exit_emitter__.count;
             }
@@ -824,12 +824,12 @@ var init_mjs = __esm({
               const ret = __privateGet(this, _emitter).emit("exit", null, sig);
               const s = sig === "SIGHUP" ? __privateGet(this, _hupSig) : sig;
               if (!ret)
-                process9.kill(process9.pid, s);
+                process11.kill(process11.pid, s);
             }
           };
         }
-        __privateSet(this, _originalProcessReallyExit, process9.reallyExit);
-        __privateSet(this, _originalProcessEmit, process9.emit);
+        __privateSet(this, _originalProcessReallyExit, process11.reallyExit);
+        __privateSet(this, _originalProcessEmit, process11.emit);
       }
       onExit(cb, opts) {
         if (!processOk(__privateGet(this, _process))) {
@@ -4411,9 +4411,10 @@ function resolveOptions(options2) {
 }
 
 // src/tasks/runner.ts
-import process8 from "node:process";
+import process10 from "node:process";
 import npmCli from "@npmcli/promise-spawn";
 import SemVer from "semver";
+import { isCI as isCI2 } from "std-env";
 import { exec as exec6 } from "tinyexec";
 
 // src/git.ts
@@ -4904,6 +4905,7 @@ async function getPackageManager() {
 }
 
 // src/tasks/jsr.ts
+import process8 from "node:process";
 import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
 
 // src/registry/jsr.ts
@@ -5360,13 +5362,32 @@ var NpmRegistry = class extends Registry {
       throw new NpmError("Failed to run `npm ping`", { cause: error });
     }
   }
+  async publishProvenance() {
+    try {
+      try {
+        await this.npm(["publish", "--provenance", "--access", "public"]);
+      } catch (error) {
+        if (`${error}`.includes("EOTP")) {
+          return false;
+        }
+      }
+      return true;
+    } catch (error) {
+      throw new NpmError(
+        "Failed to run `npm publish --provenance --access public`",
+        {
+          cause: error
+        }
+      );
+    }
+  }
   async publish(otp) {
     const args = otp ? ["publish", "--otp", otp] : ["publish"];
     try {
       try {
         await this.npm(args);
       } catch (error) {
-        if (`${error}`.includes("OTP")) {
+        if (`${error}`.includes("EOTP")) {
           return false;
         }
       }
@@ -5410,18 +5431,27 @@ var jsrAvailableCheckTasks = {
     }, ctx);
     if (!JsrClient.token) {
       task.output = "Retrieving jsr API token";
-      while (true) {
-        JsrClient.token = await task.prompt(ListrEnquirerPromptAdapter).run({
-          type: "password",
-          message: `Please enter the jsr ${color.bold("API token")}`,
-          footer: `
+      if (ctx.promptEnabled) {
+        while (true) {
+          JsrClient.token = await task.prompt(ListrEnquirerPromptAdapter).run({
+            type: "password",
+            message: `Please enter the jsr ${color.bold("API token")}`,
+            footer: `
 Generate a token from ${color.bold(link2("jsr.io", "https://jsr.io/account/tokens/create/"))}. ${color.red("You should select")} ${color.bold("'Interact with the JSR API'")}.`
-        });
-        try {
-          if (await jsr.client.user()) break;
-          task.output = "The jsr API token is invalid. Please re-enter a valid token.";
-        } catch {
+          });
+          try {
+            if (await jsr.client.user()) break;
+            task.output = "The jsr API token is invalid. Please re-enter a valid token.";
+          } catch {
+          }
         }
+      } else {
+        const jsrTokenEnv = process8.env.JSR_TOKEN;
+        if (!jsrTokenEnv)
+          throw new JsrAvailableError(
+            "JSR_TOKEN not found in the environment variables. Please set the token and try again."
+          );
+        JsrClient.token = jsrTokenEnv;
       }
       if (ctx.saveToken) new Db().set("jsr-token", JsrClient.token);
     }
@@ -5529,14 +5559,24 @@ More information: ${link2("npm naming rules", "https://github.com/npm/validate-n
 };
 var jsrPublishTasks = {
   title: "Running jsr publish",
-  task: async (_, task) => {
+  task: async (ctx, task) => {
     const jsr = await jsrRegistry();
     task.output = "Publishing on jsr...";
+    if (!JsrClient.token && !ctx.promptEnabled) {
+      const jsrTokenEnv = process8.env.JSR_TOKEN;
+      if (!jsrTokenEnv) {
+        throw new JsrAvailableError(
+          "JSR_TOKEN not found in the environment variables. Please set the token and try again."
+        );
+      }
+      JsrClient.token = jsrTokenEnv;
+    }
     await jsr.publish();
   }
 };
 
 // src/tasks/npm.ts
+import process9 from "node:process";
 import { ListrEnquirerPromptAdapter as ListrEnquirerPromptAdapter2 } from "@listr2/prompt-adapter-enquirer";
 var NpmAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -5569,24 +5609,39 @@ More information: ${link2("npm naming rules", "https://github.com/npm/validate-n
 var npmPublishTasks = {
   title: "Running npm publish",
   skip: (ctx) => !!ctx.preview,
-  task: async (_, task) => {
+  task: async (ctx, task) => {
     const npm = await npmRegistry();
     task.output = "Publishing on npm...";
-    let result = await npm.publish();
-    if (!result) {
-      task.title = "Running npm publish (OTP code needed)";
-      while (!result) {
-        result = await npm.publish(
-          await task.prompt(ListrEnquirerPromptAdapter2).run({
-            type: "password",
-            message: "npm OTP code"
-          })
-        );
-        if (!result) {
-          task.output = "2FA failed";
+    if (ctx.promptEnabled) {
+      let result = await npm.publish();
+      if (!result) {
+        task.title = "Running npm publish (OTP code needed)";
+        while (!result) {
+          result = await npm.publish(
+            await task.prompt(ListrEnquirerPromptAdapter2).run({
+              type: "password",
+              message: "npm OTP code"
+            })
+          );
+          if (!result) {
+            task.output = "2FA failed";
+          }
         }
+        task.title = "Running npm publish (2FA passed)";
+      }
+    } else {
+      const npmTokenEnv = process9.env.NODE_AUTH_TOKEN;
+      if (!npmTokenEnv) {
+        throw new NpmAvailableError(
+          "NODE_AUTH_TOKEN not found in the environment variables. Please set the token and try again."
+        );
+      }
+      const result = await npm.publishProvenance();
+      if (!result) {
+        throw new NpmAvailableError(
+          `In CI environment, publishing with 2FA is not allowed. Please disable 2FA when accessing with a token from ${link2("npm", `https://www.npmjs.com/package/${npm.packageName}/access`)}.`
+        );
       }
-      task.title = "Running npm publish (2FA passed)";
     }
   }
 };
@@ -5914,88 +5969,23 @@ async function run(options2) {
   const git = new Git();
   const ctx = {
     ...options2,
+    promptEnabled: !isCI2 && process10.stdin.isTTY,
     npmOnly: options2.registries.every((registry) => registry !== "jsr"),
     jsrOnly: options2.registries.every((registry) => registry === "jsr"),
     lastRev: await git.latestTag() || await git.firstCommit()
   };
   try {
-    if (options2.contents) process8.chdir(options2.contents);
-    await prerequisitesCheckTask({ skip: options2.skipPrerequisitesCheck }).run(
-      ctx
-    );
-    await requiredConditionsCheckTask({
-      skip: options2.skipConditionsCheck
-    }).run(ctx);
-    await createListr([
-      {
-        skip: options2.skipTests,
-        title: "Running tests",
-        task: async (ctx2) => {
-          const packageManager = await getPackageManager();
-          const { stderr } = await exec6(packageManager, [
-            "run",
-            ctx2.testScript
-          ]);
-          if (stderr) {
-            throw new AbstractError(
-              `Failed to run \`${packageManager} run ${ctx2.testScript}\``,
-              { cause: stderr }
-            );
-          }
-        }
-      },
-      {
-        skip: options2.skipBuild,
-        title: "Building the project",
-        task: async (ctx2) => {
-          const packageManager = await getPackageManager();
-          try {
-            await exec6(packageManager, ["run", ctx2.buildScript], {
-              throwOnError: true
-            });
-          } catch (error) {
-            throw new AbstractError(
-              `Failed to run \`${packageManager} run ${ctx2.buildScript}\``,
-              { cause: error }
-            );
-          }
-        }
-      },
-      {
-        title: "Bumping version",
-        skip: (ctx2) => !!ctx2.preview,
-        task: async (ctx2, task) => {
-          const git2 = new Git();
-          let tagCreated = false;
-          let commited = false;
-          addRollback(async () => {
-            if (tagCreated) {
-              console.log("Deleting tag...");
-              await git2.deleteTag(`${await git2.latestTag()}`);
-            }
-            if (commited) {
-              console.log("Reset commits...");
-              await git2.reset();
-              await git2.stash();
-              await git2.reset("HEAD^", "--hard");
-              await git2.popStash();
-            }
-          }, ctx2);
-          await git2.reset();
-          const replaced = await replaceVersion(ctx2.version);
-          for (const replacedFile of replaced) {
-            await git2.stage(replacedFile);
-          }
-          const nextVersion = `v${ctx2.version}`;
-          const commit = await git2.commit(nextVersion);
-          commited = true;
-          task.output = "Creating tag...";
-          await git2.createTag(nextVersion, commit);
-          tagCreated = true;
-        }
-      },
-      {
-        skip: (ctx2) => options2.skipPublish || !!ctx2.preview,
+    if (options2.contents) process10.chdir(options2.contents);
+    if (!options2.publishOnly) {
+      await prerequisitesCheckTask({
+        skip: options2.skipPrerequisitesCheck
+      }).run(ctx);
+      await requiredConditionsCheckTask({
+        skip: options2.skipConditionsCheck
+      }).run(ctx);
+    }
+    await createListr(
+      options2.publishOnly ? {
         title: "Publishing",
         task: (ctx2, parentTask) => parentTask.newListr(
           ctx2.registries.map((registry) => {
@@ -6010,46 +6000,133 @@ async function run(options2) {
           }),
           { concurrent: true }
         )
-      },
-      {
-        title: "Pushing tags to GitHub",
-        skip: (ctx2) => !!ctx2.preview,
-        task: async (_, task) => {
-          const git2 = new Git();
-          const result = await git2.push("--follow-tags");
-          if (!result) {
-            task.title += " (Only tags were pushed because the release branch is protected. Please push the branch manually.)";
-            await git2.push("--tags");
+      } : [
+        {
+          skip: options2.skipTests,
+          title: "Running tests",
+          task: async (ctx2) => {
+            const packageManager = await getPackageManager();
+            const { stderr } = await exec6(packageManager, [
+              "run",
+              ctx2.testScript
+            ]);
+            if (stderr) {
+              throw new AbstractError(
+                `Failed to run \`${packageManager} run ${ctx2.testScript}\``,
+                { cause: stderr }
+              );
+            }
           }
-        }
-      },
-      {
-        skip: (ctx2) => options2.skipReleaseDraft || !!ctx2.preview,
-        title: "Creating release draft on GitHub",
-        task: async (ctx2, task) => {
-          const git2 = new Git();
-          const repositoryUrl = await git2.repository();
-          const commits = (await git2.commits(ctx2.lastRev, `${await git2.latestTag()}`)).slice(1);
-          const latestTag = await git2.latestTag();
-          let body = commits.map(
-            ({ id, message }) => `- ${message.replace("#", `${repositoryUrl}/issues/`)} ${repositoryUrl}/commit/${id}`
-          ).join("\n");
-          body += `
+        },
+        {
+          skip: options2.skipBuild,
+          title: "Building the project",
+          task: async (ctx2) => {
+            const packageManager = await getPackageManager();
+            try {
+              await exec6(packageManager, ["run", ctx2.buildScript], {
+                throwOnError: true
+              });
+            } catch (error) {
+              throw new AbstractError(
+                `Failed to run \`${packageManager} run ${ctx2.buildScript}\``,
+                { cause: error }
+              );
+            }
+          }
+        },
+        {
+          title: "Bumping version",
+          skip: (ctx2) => !!ctx2.preview,
+          task: async (ctx2, task) => {
+            const git2 = new Git();
+            let tagCreated = false;
+            let commited = false;
+            addRollback(async () => {
+              if (tagCreated) {
+                console.log("Deleting tag...");
+                await git2.deleteTag(`${await git2.latestTag()}`);
+              }
+              if (commited) {
+                console.log("Reset commits...");
+                await git2.reset();
+                await git2.stash();
+                await git2.reset("HEAD^", "--hard");
+                await git2.popStash();
+              }
+            }, ctx2);
+            await git2.reset();
+            const replaced = await replaceVersion(ctx2.version);
+            for (const replacedFile of replaced) {
+              await git2.stage(replacedFile);
+            }
+            const nextVersion = `v${ctx2.version}`;
+            const commit = await git2.commit(nextVersion);
+            commited = true;
+            task.output = "Creating tag...";
+            await git2.createTag(nextVersion, commit);
+            tagCreated = true;
+          }
+        },
+        {
+          skip: (ctx2) => options2.skipPublish || !!ctx2.preview,
+          title: "Publishing",
+          task: (ctx2, parentTask) => parentTask.newListr(
+            ctx2.registries.map((registry) => {
+              switch (registry) {
+                case "npm":
+                  return npmPublishTasks;
+                case "jsr":
+                  return jsrPublishTasks;
+                default:
+                  return npmPublishTasks;
+              }
+            }),
+            { concurrent: true }
+          )
+        },
+        {
+          title: "Pushing tags to GitHub",
+          skip: (ctx2) => !!ctx2.preview,
+          task: async (_, task) => {
+            const git2 = new Git();
+            const result = await git2.push("--follow-tags");
+            if (!result) {
+              task.title += " (Only tags were pushed because the release branch is protected. Please push the branch manually.)";
+              await git2.push("--tags");
+            }
+          }
+        },
+        {
+          skip: (ctx2) => options2.skipReleaseDraft || !!ctx2.preview,
+          title: "Creating release draft on GitHub",
+          task: async (ctx2, task) => {
+            const git2 = new Git();
+            const repositoryUrl = await git2.repository();
+            const commits = (await git2.commits(ctx2.lastRev, `${await git2.latestTag()}`)).slice(1);
+            const latestTag = await git2.latestTag();
+            let body = commits.map(
+              ({ id, message }) => `- ${message.replace("#", `${repositoryUrl}/issues/`)} ${repositoryUrl}/commit/${id}`
+            ).join("\n");
+            body += `
 
 ${repositoryUrl}/compare/${ctx2.lastRev}...${latestTag}`;
-          const releaseDraftUrl = new URL(`${repositoryUrl}/releases/new`);
-          releaseDraftUrl.searchParams.set("tag", `${latestTag}`);
-          releaseDraftUrl.searchParams.set("body", body);
-          releaseDraftUrl.searchParams.set(
-            "prerelease",
-            `${!!prerelease(ctx2.version)}`
-          );
-          const linkUrl = link2("Link", releaseDraftUrl.toString());
-          task.title += ` ${linkUrl}`;
-          await open(releaseDraftUrl.toString());
+            const releaseDraftUrl = new URL(
+              `${repositoryUrl}/releases/new`
+            );
+            releaseDraftUrl.searchParams.set("tag", `${latestTag}`);
+            releaseDraftUrl.searchParams.set("body", body);
+            releaseDraftUrl.searchParams.set(
+              "prerelease",
+              `${!!prerelease(ctx2.version)}`
+            );
+            const linkUrl = link2("Link", releaseDraftUrl.toString());
+            task.title += ` ${linkUrl}`;
+            await open(releaseDraftUrl.toString());
+          }
         }
-      }
-    ]).run(ctx);
+      ]
+    ).run(ctx);
     const npmPackageName = (await getPackageJson()).name;
     const jsrPackageName = (await getJsrJson()).name;
     console.log(
@@ -6061,7 +6138,7 @@ ${repositoryUrl}/compare/${ctx2.lastRev}...${latestTag}`;
   } catch (e2) {
     consoleError(e2);
     await rollback();
-    process8.exit(1);
+    process10.exit(1);
   }
 }
 
@@ -6202,7 +6279,8 @@ Update available! \`${name}\` ${color.red(currentVersion)} \u2192 ${color.green(
 }
 
 // src/cli.ts
-var { RELEASE_TYPES: RELEASE_TYPES2 } = semver2;
+import { isCI as isCI3 } from "std-env";
+var { RELEASE_TYPES: RELEASE_TYPES2, valid } = semver2;
 var options = [
   {
     rawName: "--test-script <script>",
@@ -6259,6 +6337,11 @@ var options = [
     description: "Skip creating a GitHub release draft",
     options: { type: Boolean }
   },
+  {
+    rawName: "--publish-only",
+    description: "Run only publish task for latest tag",
+    options: { type: Boolean }
+  },
   {
     rawName: "-t, --tag <name>",
     description: "Publish under a specific dist-tag",
@@ -6298,13 +6381,37 @@ function resolveCliOptions(options2) {
 }
 cli.command("[version]").action(async (nextVersion, options2) => {
   console.clear();
-  await notifyNewVersion();
+  if (!isCI3) {
+    await notifyNewVersion();
+  }
   const context = {
     version: nextVersion,
     tag: options2.tag
   };
   try {
-    await requiredMissingInformationTasks().run(context);
+    if (isCI3) {
+      if (options2.publishOnly) {
+        const git = new Git();
+        const latestVersion = (await git.latestTag())?.slice(1);
+        if (!latestVersion) {
+          throw new Error(
+            "Cannot find the latest tag. Please ensure tags exist in the repository."
+          );
+        }
+        if (!valid(latestVersion)) {
+          throw new Error(
+            "Cannot parse the latest tag to a valid SemVer version. Please check the tag format."
+          );
+        }
+        context.version = latestVersion;
+      } else {
+        throw new Error(
+          "Version must be set in the CI environment. Please define the version before proceeding."
+        );
+      }
+    } else {
+      await requiredMissingInformationTasks().run(context);
+    }
     await pubm(
       resolveCliOptions({
         ...options2,