@higherdev/cli 0.8.0 → 0.9.0

package/README.md

@@ -36,7 +36,7 @@ workspace-map config shapes are migrated automatically when they are read.
 | `hd epic list` | List epics and ticket progress |
 | `hd plan [--repo DIR]` | Hand the terminal to Codex to author an epic spec |
 | `hd workspace ls` | List every workspace available to the configured key |
-| `hd workspace new --name NAME --repo OWNER/NAME [options]` | Create a paused workspace |
+| `hd workspace new --name NAME --repo OWNER/NAME [options]` | Preflight GitHub, wire the runner, and create a paused workspace |
 | `hd agents` | List agents |
 | `hd agents set ROLE --provider P --model M [--effort E]` | Update an agent |
 | `hd logs KEY [-f]` | Show or follow run events |
@@ -48,6 +48,10 @@ workspace-map config shapes are migrated automatically when they are read.
 | `hd init [options]` | Configure this host and runner service |
 | `hd upgrade [options]` | Refresh this host configuration |
 
+`hd workspace new` uses the operator's authenticated `gh`, defaults to the repository's real default
+branch, bootstraps an empty repository unless `--no-bootstrap` is set, and invites `mel-ilotus` unless
+`--runner-user USER` overrides it.
+
 Inside the TUI, use `/board`, `/inbox`, `/ticket`, `/queue`, `/epic new`,
 `/epics`, `/plan`, `/decide`, `/agents`, `/settings`, `/workspace`, `/feed`,
 `/orchestrator`, `/refresh`, `/help`, or `/exit`. The display refreshes from

package/dist/index.js

@@ -7,6 +7,7 @@ import { loadConfig, writeHdConfig } from "./config.js";
 import { epicProgressRows, readEpicSpec } from "./epics.js";
 import { banner, c, statusChip, table, truncate, usage } from "./out.js";
 import { launchArchitect } from "./plan.js";
+import { HDX_RUNNER_GH_USER, preflightWorkspace } from "./workspace-preflight.js";
 function fail(message) {
     console.error(message);
     process.exit(1);
@@ -218,7 +219,7 @@ async function cmdDecide(argv) {
     await answerDecision(id, opts.answer);
     console.log("answered");
 }
-async function cmdWorkspace(argv) {
+async function cmdWorkspace(argv, deps = {}) {
     const [action, ...rest] = argv;
     if (action === "ls") {
         const current = loadConfig().slug;
@@ -232,14 +233,20 @@ async function cmdWorkspace(argv) {
         ])));
         return;
     }
+    const workspaceUsage = "usage: hd workspace ls | new --name NAME --repo OWNER/NAME [--slug S] [--branch B] [--host box] [--runner-user USER] [--no-bootstrap]";
     if (action !== "new")
-        fail("usage: hd workspace ls | new --name NAME --repo OWNER/NAME [--slug S] [--branch main] [--host box]");
-    const { opts } = flags(rest);
+        fail(workspaceUsage);
+    const { opts, bools } = flags(rest);
     if (!opts.name || !opts.repo) {
-        fail("usage: hd workspace new --name NAME --repo OWNER/NAME [--slug S] [--branch main] [--host box]");
+        fail(workspaceUsage);
     }
+    const preflight = await (deps.preflightWorkspace ?? preflightWorkspace)({ name: opts.name, repo: opts.repo,
+        branch: opts.branch, noBootstrap: bools.has("no-bootstrap"),
+        runnerUser: opts["runner-user"] ?? HDX_RUNNER_GH_USER });
+    if (preflight.invitationPending)
+        console.log(`invitation pending for ${opts["runner-user"] ?? HDX_RUNNER_GH_USER}`);
     const result = await createWorkspace({ name: opts.name, repo: opts.repo, slug: opts.slug,
-        default_branch: opts.branch ?? "main", default_host: opts.host ?? "box" });
+        default_branch: preflight.branch, default_host: opts.host ?? "box" });
     console.log(`workspace: ${result.workspace.slug}`);
     writeHdConfig({ url: result.url, api_key: result.api_key, slug: result.workspace.slug });
     console.log("saved and switched; configure another machine with:");
@@ -279,7 +286,7 @@ async function cmdAgents(argv) {
     });
     console.log(`${agent.role}  ${agent.provider}  ${agent.model}  ${agent.effort}`);
 }
-export async function main(argv = process.argv.slice(2)) {
+export async function main(argv = process.argv.slice(2), deps = {}) {
     const [cmd, ...rest] = argv;
     try {
         if (!cmd) {
@@ -329,7 +336,7 @@ export async function main(argv = process.argv.slice(2)) {
             return;
         }
         if (cmd === "workspace") {
-            await cmdWorkspace(rest);
+            await cmdWorkspace(rest, deps);
             return;
         }
         if (cmd === "agents") {

package/dist/workspace-preflight.js

@@ -0,0 +1,77 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execFile);
+export const HDX_RUNNER_GH_USER = "mel-ilotus";
+export function preflightDecision(input) {
+    if (!input.found)
+        return { ok: false, error: "Repository was not found or is inaccessible." };
+    if (input.viewerPermission.toUpperCase() !== "ADMIN") {
+        return { ok: false, error: `Repository admin permission is required; viewer has ${input.viewerPermission || "none"}.` };
+    }
+    if (input.empty && input.noBootstrap) {
+        return { ok: false, error: "Repository is empty and --no-bootstrap was set." };
+    }
+    return { ok: true, bootstrap: input.empty };
+}
+function errorMessage(error) {
+    if (!error || typeof error !== "object")
+        return String(error);
+    const value = error;
+    return value.stderr?.trim() || value.message || String(error);
+}
+async function defaultGh(args) {
+    try {
+        return (await exec("gh", args, { encoding: "utf8", maxBuffer: 1024 * 1024 })).stdout;
+    }
+    catch (error) {
+        throw new Error(errorMessage(error));
+    }
+}
+async function repoView(repo, gh) {
+    return JSON.parse(await gh(["repo", "view", repo, "--json", "defaultBranchRef,isEmpty,viewerPermission"]));
+}
+function canPush(permission) {
+    return ["admin", "maintain", "write", "push"].includes(permission.toLowerCase());
+}
+export async function preflightWorkspace(input, gh = defaultGh) {
+    try {
+        await gh(["--version"]);
+    }
+    catch {
+        throw new Error("GitHub CLI is unavailable. Install it if needed, then run `gh auth login`.");
+    }
+    let view;
+    try {
+        view = await repoView(input.repo, gh);
+    }
+    catch (error) {
+        throw new Error(`GitHub repository ${input.repo} was not found or is inaccessible: ${errorMessage(error)}`);
+    }
+    const decision = preflightDecision({ found: true, empty: view.isEmpty,
+        viewerPermission: view.viewerPermission, noBootstrap: input.noBootstrap });
+    if (!decision.ok)
+        throw new Error(decision.error);
+    if (decision.bootstrap) {
+        await gh(["api", "-X", "PUT", `repos/${input.repo}/contents/README.md`,
+            "-f", "message=Initial commit", "-f", `content=${Buffer.from(`# ${input.name}`).toString("base64")}`]);
+        view = await repoView(input.repo, gh);
+    }
+    const branch = input.branch || view.defaultBranchRef?.name;
+    if (!branch)
+        throw new Error(`GitHub repository ${input.repo} has no default branch.`);
+    const runnerUser = input.runnerUser || HDX_RUNNER_GH_USER;
+    let permission = "none";
+    try {
+        const result = JSON.parse(await gh(["api", `repos/${input.repo}/collaborators/${runnerUser}/permission`]));
+        permission = result.permission ?? "none";
+    }
+    catch (error) {
+        if (!/404|not found/i.test(errorMessage(error)))
+            throw error;
+    }
+    const invitationPending = !canPush(permission);
+    if (invitationPending) {
+        await gh(["api", "-X", "PUT", `repos/${input.repo}/collaborators/${runnerUser}`, "-f", "permission=push"]);
+    }
+    return { branch, invitationPending };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@higherdev/cli",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "bin": {
     "hd": "dist/index.js"