vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-03 16:40:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: require npm auth for dist-tag mirror

Browse Source
This commit is contained in:
Peter Steinberger
2026-03-31 23:13:35 +01:00
parent 4f83409345
commit d7e9d341cc
7 changed files with 152 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
scripts/plugin-npm-publish.sh
View File

@@ -20,21 +20,30 @@ package_version="$(node -e 'const pkg = require(require("node:path").resolve(pro
current_beta_version="$(npm view "${package_name}" dist-tags.beta 2>/dev/null || true)"
mapfile -t publish_plan < <(
PACKAGE_VERSION="${package_version}" CURRENT_BETA_VERSION="${current_beta_version}" node --input-type=module <<'EOF'
import { resolveNpmPublishPlan } from "./scripts/lib/npm-publish-plan.mjs";
import {
resolveNpmDistTagMirrorAuth,
resolveNpmPublishPlan,
} from "./scripts/lib/npm-publish-plan.mjs";
const plan = resolveNpmPublishPlan(
process.env.PACKAGE_VERSION ?? "",
process.env.CURRENT_BETA_VERSION,
);
const auth = resolveNpmDistTagMirrorAuth({
nodeAuthToken: process.env.NODE_AUTH_TOKEN,
npmToken: process.env.NPM_TOKEN,
});
console.log(plan.channel);
console.log(plan.publishTag);
console.log(plan.mirrorDistTags.join(","));
console.log(auth.source);
EOF
)
release_channel="${publish_plan[0]}"
publish_tag="${publish_plan[1]}"
mirror_dist_tags_csv="${publish_plan[2]:-}"
mirror_auth_source="${publish_plan[3]:-none}"
publish_cmd=(npm publish --access public --tag "${publish_tag}" --provenance)
echo "Resolved package dir: ${package_dir}"
@@ -45,6 +54,23 @@ echo "Resolved release channel: ${release_channel}"
echo "Resolved publish tag: ${publish_tag}"
echo "Resolved mirror dist-tags: ${mirror_dist_tags_csv:-<none>}"
echo "Publish auth: GitHub OIDC trusted publishing"
echo "Mirror dist-tag auth source: ${mirror_auth_source}"
mirror_auth_token=""
case "${mirror_auth_source}" in
node-auth-token)
mirror_auth_token="${NODE_AUTH_TOKEN:-}"
;;
npm-token)
mirror_auth_token="${NPM_TOKEN:-}"
;;
esac
if [[ -n "${mirror_dist_tags_csv}" && -z "${mirror_auth_token}" ]]; then
echo "npm dist-tag mirroring requires explicit npm auth via NODE_AUTH_TOKEN or NPM_TOKEN." >&2
echo "Refusing publish before npm latest/beta promotion can diverge." >&2
exit 1
fi
printf 'Publish command:'
printf ' %q' "${publish_cmd[@]}"
@@ -59,11 +85,17 @@ fi
"${publish_cmd[@]}"
if [[ -n "${mirror_dist_tags_csv}" ]]; then
mirror_userconfig="$(mktemp)"
trap 'rm -f "${mirror_userconfig}"' EXIT
chmod 0600 "${mirror_userconfig}"
printf '%s\n' "//registry.npmjs.org/:_authToken=${mirror_auth_token}" > "${mirror_userconfig}"
IFS=',' read -r -a mirror_dist_tags <<< "${mirror_dist_tags_csv}"
for dist_tag in "${mirror_dist_tags[@]}"; do
[[ -n "${dist_tag}" ]] || continue
echo "Mirroring ${package_name}@${package_version} onto dist-tag ${dist_tag}"
npm dist-tag add "${package_name}@${package_version}" "${dist_tag}"
NPM_CONFIG_USERCONFIG="${mirror_userconfig}" \
npm dist-tag add "${package_name}@${package_version}" "${dist_tag}"
done
fi
)