pubm 0.2.0 → 0.2.1

package/bin/cli.js

@@ -5652,6 +5652,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5732,6 +5734,20 @@ ${stderr}` : "Failed to run `cargo publish`";
       throw new CratesError(message, { cause: error });
     }
   }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", path9.join(manifestDir, "Cargo.toml"));
+      }
+      await exec3("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
   async isPublished() {
     try {
       const response = await fetch(
@@ -5818,11 +5834,6 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-import process12 from "node:process";
-import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
-import npmCli from "@npmcli/promise-spawn";
-
 // src/registry/jsr.ts
 import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
@@ -6022,6 +6033,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await exec4(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -6416,6 +6449,22 @@ var NpmRegistry = class extends Registry {
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -6452,7 +6501,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+import process12 from "node:process";
+import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
+import npmCli from "@npmcli/promise-spawn";
 var { open } = npmCli;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6685,7 +6798,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6748,6 +6860,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -7242,6 +7362,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,

package/dist/index.cjs

@@ -5217,6 +5217,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5297,6 +5299,20 @@ ${stderr}` : "Failed to run `cargo publish`";
       throw new CratesError(message, { cause: error });
     }
   }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", import_node_path4.default.join(manifestDir, "Cargo.toml"));
+      }
+      await (0, import_tinyexec2.exec)("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof import_tinyexec2.NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
   async isPublished() {
     try {
       const response = await fetch(
@@ -5383,11 +5399,6 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-var import_node_process6 = __toESM(require("process"), 1);
-var import_prompt_adapter_enquirer = require("@listr2/prompt-adapter-enquirer");
-var import_promise_spawn = __toESM(require("@npmcli/promise-spawn"), 1);
-
 // src/registry/jsr.ts
 var import_tinyexec3 = require("tinyexec");
 
@@ -5589,6 +5600,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await (0, import_tinyexec3.exec)(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof import_tinyexec3.NonZeroExitError ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -5983,6 +6016,22 @@ var NpmRegistry = class extends Registry {
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -6019,7 +6068,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+var import_node_process6 = __toESM(require("process"), 1);
+var import_prompt_adapter_enquirer = require("@listr2/prompt-adapter-enquirer");
+var import_promise_spawn = __toESM(require("@npmcli/promise-spawn"), 1);
 var { open } = import_promise_spawn.default;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6252,7 +6365,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6315,6 +6427,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -6810,6 +6930,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,

package/dist/index.js

@@ -5184,6 +5184,8 @@ var Registry = class {
     this.packageName = packageName;
     this.registry = registry;
   }
+  async dryRunPublish(_manifestDir) {
+  }
 };
 
 // src/registry/crates.ts
@@ -5264,6 +5266,20 @@ ${stderr}` : "Failed to run `cargo publish`";
       throw new CratesError(message, { cause: error });
     }
   }
+  async dryRunPublish(manifestDir) {
+    try {
+      const args = ["publish", "--dry-run"];
+      if (manifestDir) {
+        args.push("--manifest-path", path4.join(manifestDir, "Cargo.toml"));
+      }
+      await exec3("cargo", args, { throwOnError: true });
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError ? error.output?.stderr : void 0;
+      const message = stderr ? `Dry-run failed for \`cargo publish\`:
+${stderr}` : "Dry-run failed for `cargo publish`";
+      throw new CratesError(message, { cause: error });
+    }
+  }
   async isPublished() {
     try {
       const response = await fetch(
@@ -5350,11 +5366,6 @@ function createCratesPublishTask(packagePath) {
 var cratesAvailableCheckTasks = createCratesAvailableCheckTask();
 var cratesPublishTasks = createCratesPublishTask();
 
-// src/tasks/jsr.ts
-import process8 from "node:process";
-import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
-import npmCli from "@npmcli/promise-spawn";
-
 // src/registry/jsr.ts
 import { exec as exec4, NonZeroExitError as NonZeroExitError2 } from "tinyexec";
 
@@ -5554,6 +5565,28 @@ ${stderr}` : ""}`,
       );
     }
   }
+  async dryRunPublish() {
+    try {
+      await exec4(
+        "jsr",
+        [
+          "publish",
+          "--dry-run",
+          "--allow-dirty",
+          "--token",
+          `${JsrClient.token}`
+        ],
+        { throwOnError: true }
+      );
+    } catch (error) {
+      const stderr = error instanceof NonZeroExitError2 ? error.output?.stderr : void 0;
+      throw new JsrError(
+        `Dry-run failed for \`jsr publish\`${stderr ? `
+${stderr}` : ""}`,
+        { cause: error }
+      );
+    }
+  }
   async version() {
     return await this.jsr(["--version"]);
   }
@@ -5948,6 +5981,22 @@ var NpmRegistry = class extends Registry {
       throw this.classifyPublishError(error);
     }
   }
+  async dryRunPublish() {
+    try {
+      await this.npm(["publish", "--dry-run"]);
+    } catch (error) {
+      throw this.classifyPublishError(error);
+    }
+  }
+  async twoFactorAuthMode() {
+    try {
+      const output = await this.npm(["profile", "get", "--json"]);
+      const profile = JSON.parse(output);
+      return profile?.tfa?.mode ?? null;
+    } catch {
+      return null;
+    }
+  }
   async isPackageNameAvaliable() {
     return isValidPackageName(this.packageName);
   }
@@ -5984,7 +6033,71 @@ async function npmRegistry() {
   return new NpmRegistry(packageJson.name);
 }
 
+// src/tasks/dry-run-publish.ts
+var npmDryRunPublishTask = {
+  title: "Dry-run npm publish",
+  task: async (_, task) => {
+    const npm = await npmRegistry();
+    task.output = "Running npm publish --dry-run...";
+    await npm.dryRunPublish();
+  }
+};
+var jsrDryRunPublishTask = {
+  title: "Dry-run jsr publish",
+  skip: () => !JsrClient.token,
+  task: async (_, task) => {
+    const jsr = await jsrRegistry();
+    task.output = "Running jsr publish --dry-run...";
+    await jsr.dryRunPublish();
+  }
+};
+function createCratesDryRunPublishTask(packagePath) {
+  const label = packagePath ? ` (${packagePath})` : "";
+  return {
+    title: `Dry-run cargo publish${label}`,
+    task: async (_, task) => {
+      const eco = new RustEcosystem(packagePath ?? process.cwd());
+      const packageName = await eco.packageName();
+      const registry = new CratesRegistry(packageName);
+      task.output = "Running cargo publish --dry-run...";
+      await registry.dryRunPublish(packagePath);
+    }
+  };
+}
+var cratesDryRunPublishTask = createCratesDryRunPublishTask();
+function registryDryRunTask(registryKey) {
+  switch (registryKey) {
+    case "npm":
+      return npmDryRunPublishTask;
+    case "jsr":
+      return jsrDryRunPublishTask;
+    case "crates":
+      return cratesDryRunPublishTask;
+    default:
+      return npmDryRunPublishTask;
+  }
+}
+var dryRunPublishTask = {
+  title: "Validating publish (dry-run)",
+  task: (ctx, parentTask) => {
+    if (ctx.packages?.length) {
+      const tasks = ctx.packages.flatMap(
+        (pkg) => pkg.registries.map(
+          (registryKey) => registryKey === "crates" ? createCratesDryRunPublishTask(pkg.path) : registryDryRunTask(registryKey)
+        )
+      );
+      return parentTask.newListr(tasks, { concurrent: true });
+    }
+    return parentTask.newListr(collectRegistries(ctx).map(registryDryRunTask), {
+      concurrent: true
+    });
+  }
+};
+
 // src/tasks/jsr.ts
+import process8 from "node:process";
+import { ListrEnquirerPromptAdapter } from "@listr2/prompt-adapter-enquirer";
+import npmCli from "@npmcli/promise-spawn";
 var { open } = npmCli;
 var JsrAvailableError = class extends AbstractError {
   constructor(message, { cause } = {}) {
@@ -6217,7 +6330,6 @@ var NpmAvailableError = class extends AbstractError {
 };
 var npmAvailableCheckTasks = {
   title: "Checking npm avaliable for publising",
-  skip: (ctx) => !!ctx.preview,
   task: async (ctx, task) => {
     const npm = await npmRegistry();
     if (!await npm.isLoggedIn()) {
@@ -6280,6 +6392,14 @@ var npmAvailableCheckTasks = {
 More information: ${link2("npm naming rules", "https://github.com/npm/validate-npm-package-name?tab=readme-ov-file#naming-rules")}`
       );
     }
+    if (!ctx.promptEnabled) {
+      const tfaMode = await npm.twoFactorAuthMode();
+      if (tfaMode === "auth-and-writes") {
+        throw new NpmAvailableError(
+          `npm account has 2FA enabled for writes (auth-and-writes). CI publish will fail with EOTP. Use an automation token or configure granular access token at https://www.npmjs.com/package/${npm.packageName}/access`
+        );
+      }
+    }
   }
 };
 var npmPublishTasks = {
@@ -6774,6 +6894,10 @@ async function run(options) {
             }
           }
         },
+        {
+          ...dryRunPublishTask,
+          skip: (ctx2) => options.skipPublish || !!ctx2.preview
+        },
         {
           title: "Bumping version",
           skip: (ctx2) => !!ctx2.preview,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pubm",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "engines": {
     "node": ">=18",
     "git": ">=2.11.0"