@elalfner/relevo 0.9.1 → 0.9.2

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "relevo",
   "displayName": "Relevo",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "An automatic issue-to-merge workflow where an agent builds and people verify.",
   "author": {
     "name": "Elias Alfaro"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elalfner/relevo",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Relevo: an automatic issue-to-merge workflow where an agent builds and people verify.",
   "type": "module",
   "license": "MIT",

package/scripts/lib/doctor.mjs

@@ -670,7 +670,7 @@ export function runChecks(f) {
   if (f.protectionError) {
     r.push(warn('repo.protection', `could not read the branch rules (${f.protectionError}), so they were not checked`, 'run doctor again; if it keeps failing, check your access to the repository'));
   } else if (f.protectionUnavailable) {
-    r.push(warn('repo.protection', `branch protection is not available on this repository (${f.protectionUnavailable})`, 'make the repository public or upgrade the plan; until then approval and merge are only enforced by the written confirmation in `ship`'));
+    r.push(note('repo.protection', `no branch protection is available on this plan (${f.protectionUnavailable}): approval and merge are only enforced by the written confirmation in \`ship\`; making the repository public or upgrading the plan would add it`));
   } else {
     [['base', f.config?.branches?.base ?? 'base'], ['release', f.config?.branches?.release ?? 'release']].forEach(([key, name]) => {
       const p = f.protection?.[key];

package/scripts/lib/ship-github.mjs

@@ -35,7 +35,17 @@ export function loadPr(gh, repo, branch) {
   return open ? JSON.parse(gh(['pr', 'view', String(open.number), '--repo', repo, '--json', PR_FIELDS])) : null;
 }
 
-const notFound = (err) => /404|Not Found/i.test(String(err?.stderr ?? err?.message ?? err));
+const errorText = (err) => `${err?.stderr ?? ''}\n${err?.message ?? err}`;
+const notFound = (err) => /404|Not Found/i.test(errorText(err));
+
+/**
+ * True when GitHub refuses a branch-rules call because of the plan or the visibility of the repository (a private
+ * repository on the free plan has no rulesets and no protection), not because of the token or a fault of its own.
+ */
+export function planRefusal(err) {
+  const text = errorText(err);
+  return /HTTP 403/.test(text) && /Upgrade to GitHub|make this repository public/i.test(text);
+}
 
 /** True when every file that changed from `baseline` to `head` is under `openspec/`, and something changed. */
 export function changedOnlySpecs(gh, repo, baseline, head) {
@@ -62,16 +72,22 @@ export function baselineChecks(gh, repo, baseline, head) {
 
 /**
  * Whether merging into `branch` requires status checks, by a ruleset or by classic branch protection.
- * Returns { required: boolean, contexts: [names] }. A branch without protection requires none.
+ * Returns { required: boolean, contexts: [names] }. A branch without protection requires none, and neither does one
+ * whose rules the plan of the repository does not offer. Any other failure to read them is thrown: checks that exist
+ * must not be skipped because they could not be read.
  */
 export function requiredChecks(gh, repo, branch) {
   const contexts = new Set();
   let required = false;
-  const rules = JSON.parse(gh(['api', `repos/${repo}/rules/branches/${encodeURIComponent(branch)}`]));
-  (Array.isArray(rules) ? rules : []).filter((r) => r.type === 'required_status_checks').forEach((r) => {
-    required = true;
-    (r.parameters?.required_status_checks ?? []).forEach((c) => contexts.add(c.context));
-  });
+  try {
+    const rules = JSON.parse(gh(['api', `repos/${repo}/rules/branches/${encodeURIComponent(branch)}`]));
+    (Array.isArray(rules) ? rules : []).filter((r) => r.type === 'required_status_checks').forEach((r) => {
+      required = true;
+      (r.parameters?.required_status_checks ?? []).forEach((c) => contexts.add(c.context));
+    });
+  } catch (err) {
+    if (!planRefusal(err)) throw err;
+  }
   try {
     const protection = JSON.parse(gh(['api', `repos/${repo}/branches/${encodeURIComponent(branch)}/protection`]));
     const classic = protection.required_status_checks;
@@ -81,7 +97,7 @@ export function requiredChecks(gh, repo, branch) {
       (classic.checks ?? []).forEach((c) => contexts.add(c.context));
     }
   } catch (err) {
-    if (!notFound(err)) throw err;
+    if (!notFound(err) && !planRefusal(err)) throw err;
   }
   return { required, contexts: [...contexts] };
 }

package/scripts/lib/ship-unattended.mjs

@@ -262,8 +262,9 @@ export async function runUnattendedShip(ctx) {
       }
     }
     return { outcome: 'merged', pr: pr.number, commit };
-  } catch (err) {
-    if (!(err instanceof Stop)) throw err;
+  } catch (caught) {
+    // An error the run did not foresee (a refusal of GitHub, for example) stops it like any other reason, with its message.
+    const err = caught instanceof Stop ? caught : new Stop('ship_stopped', { reasons: `unexpected error: ${firstLines(caught?.stderr || caught?.message || caught)}` });
     removeShipLabel();
     gh(['issue', 'comment', n, '--repo', repo, '--body', renderMessage(err.kind, { actor, issue: n, ...err.data }, config.language)]);
     return { outcome: 'stopped', kind: err.kind, ...err.data };

package/templates/workflows/relevo-digest.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: posts one digest per working day, as a comment on the issue named by digest.issue in relevo.yml.
 # It lists who is waiting on what and the alerts, and posts nothing when nothing is waiting.
 # Subscribe your chat tool to that issue to receive it. Copy to .github/workflows/relevo-digest.yml.
@@ -14,7 +14,7 @@ name: relevo-digest
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
 
 on:
   schedule:

package/templates/workflows/relevo-go.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: builds an issue when someone with write access labels it `relevo:ready`.
 # Copy to .github/workflows/relevo-go.yml. If you renamed the ready label in relevo.yml, change it below too.
 #
@@ -20,7 +20,7 @@ name: relevo-go
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
   # The version of OpenSpec that the job installs for itself.
   OPENSPEC_VERSION: '1.14.3'
 

package/templates/workflows/relevo-queue.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: re-evaluates the queue and starts the issues that are now eligible.
 # Copy to .github/workflows/relevo-queue.yml next to relevo-go.yml (it starts builds through that workflow).
 #
@@ -15,7 +15,7 @@ name: relevo-queue
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
 
 on:
   issues:

package/templates/workflows/relevo-review.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: keeps the issue label in step with its pull request.
 # A review that requests changes sets `relevo:changes-requested` and mentions the author; a new push returns the
 # issue to `relevo:pr-open`; an approval mentions the person who will run /relevo:ship.
@@ -15,7 +15,7 @@ name: relevo-review
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
 
 on:
   pull_request_review:

package/templates/workflows/relevo-ship.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: ships an issue when a person applies the `relevo:ship` label to it.
 # Copy to .github/workflows/relevo-ship.yml. If you renamed the ship label in relevo.yml, change it below too.
 #
@@ -27,7 +27,7 @@ name: relevo-ship
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
   # The version of OpenSpec that the job installs for itself.
   OPENSPEC_VERSION: '1.14.3'
 
@@ -44,6 +44,10 @@ permissions:
   contents: write
   issues: write
   pull-requests: write
+  # To read the checks of the approved head (the status check rollup of a commit); without them the run stops on
+  # "Resource not accessible by integration".
+  checks: read
+  statuses: read
   # To start the queue (relevo-queue.yml) after the close, which the workflow token's close does not start by itself.
   actions: write
 

package/templates/workflows/relevo-sla.yml

@@ -1,4 +1,4 @@
-# relevo-template: 0.9.1
+# relevo-template: 0.9.2
 # Relevo: reminds the reviewer when a pull request waits longer than limits.review_sla_hours, and escalates
 # to the spec writer (adding the needs-reviewer label) after the same time again.
 # Copy to .github/workflows/relevo-sla.yml. Needs a relevo.yml at the repository root.
@@ -13,7 +13,7 @@ name: relevo-sla
 # The version of @elalfner/relevo whose scripts this workflow runs. The plugin's templates carry the version they
 # were released with, and `/relevo:init` reports this file as different when it is older; change it by hand to update.
 env:
-  RELEVO_VERSION: '0.9.1'
+  RELEVO_VERSION: '0.9.2'
 
 on:
   schedule: