@nanocollective/roster 0.1.0-alpha.55 → 0.1.0-alpha.56

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@nanocollective/roster",
3
- "version": "0.1.0-alpha.55",
3
+ "version": "0.1.0-alpha.56",
4
4
  "description": "An agent-run org, powered by GitHub. Scaffold AI staff members whose brain is a repo.",
5
5
  "type": "module",
6
6
  "bin": {
@@ -16,6 +16,23 @@
16
16
  "engines": {
17
17
  "node": ">=20"
18
18
  },
19
+ "scripts": {
20
+ "build": "tsup src/cli.ts --format esm --target node20 --clean",
21
+ "dev": "tsx src/cli.ts",
22
+ "test": "tsx --test test/*.test.ts",
23
+ "test:all": "pnpm test:format && pnpm test:lint && pnpm test:types && pnpm test:knip && pnpm test",
24
+ "test:ava:coverage": "c8 --reporter=text --reporter=json-summary tsx --test test/*.test.ts",
25
+ "test:format": "biome check --no-errors-on-unmatched .",
26
+ "test:lint": "biome lint .",
27
+ "test:lint:fix": "biome check --write .",
28
+ "test:types": "tsc --noEmit",
29
+ "test:knip": "knip",
30
+ "test:audit": "pnpm audit --audit-level=high",
31
+ "test:security": "semgrep scan --config auto --error",
32
+ "typecheck": "tsc --noEmit",
33
+ "format": "biome check --write .",
34
+ "prepublishOnly": "pnpm test:all && pnpm build"
35
+ },
19
36
  "devDependencies": {
20
37
  "@biomejs/biome": "^2.5.12",
21
38
  "@types/node": "^22.10.2",
@@ -35,24 +52,9 @@
35
52
  "url": "https://github.com/Nano-Collective/roster/issues"
36
53
  },
37
54
  "author": "Nano Collective",
55
+ "packageManager": "pnpm@11.0.9",
38
56
  "publishConfig": {
39
57
  "access": "public",
40
58
  "tag": "latest"
41
- },
42
- "scripts": {
43
- "build": "tsup src/cli.ts --format esm --target node20 --clean",
44
- "dev": "tsx src/cli.ts",
45
- "test": "tsx --test test/*.test.ts",
46
- "test:all": "pnpm test:format && pnpm test:lint && pnpm test:types && pnpm test:knip && pnpm test",
47
- "test:ava:coverage": "c8 --reporter=text --reporter=json-summary tsx --test test/*.test.ts",
48
- "test:format": "biome check --no-errors-on-unmatched .",
49
- "test:lint": "biome lint .",
50
- "test:lint:fix": "biome check --write .",
51
- "test:types": "tsc --noEmit",
52
- "test:knip": "knip",
53
- "test:audit": "pnpm audit --audit-level=high",
54
- "test:security": "semgrep scan --config auto --error",
55
- "typecheck": "tsc --noEmit",
56
- "format": "biome check --write ."
57
59
  }
58
- }
60
+ }
@@ -360,8 +360,10 @@ jobs:
360
360
  # The action refuses to run for a bot unless it is named here. A peer's ask is opened
361
361
  # by that peer's App, so on a peer run, and only then, the one bot that opened it is
362
362
  # allowed. The caller has already checked it is an App, not this staff member's own,
363
- # and that the issue carries a from- label. Every other run allows no bots.
364
- allowed_bots: ${{ inputs.trigger == 'peer' && github.actor || '' }}
363
+ # and that the issue carries a from- label. A follow-on run is dispatched by the job token
364
+ # of the run before it, so its actor is github-actions[bot], and only that bot is allowed.
365
+ # Every other run allows no bots.
366
+ allowed_bots: ${{ inputs.trigger == 'peer' && github.actor || inputs.trigger == 'follow-on' && 'github-actions[bot]' || '' }}
365
367
  # These repos are private and single-user, so the usual reason to hide a run's output does
366
368
  # not apply, and hiding it turns any failure into "is_error: true" with no message.
367
369
  # Registered secrets are still masked by the runner.