@nodii/dev 0.6.1 → 0.6.3

package/README.md

@@ -24,9 +24,15 @@ live `devops.*` key except `devops.releases.promote`, which is never granted.
 Login uses the RFC 8628 device flow and opens the verification page on an
 interactive terminal unless `--no-browser` is passed. Refresh tokens are
 stored only in macOS Keychain or Linux Secret Service (`secret-tool`); the CLI
-refuses plaintext fallback. Access tokens stay in memory. Every API call goes
-to the edge's `/devops` prefix with the OAuth bearer and the registered
-`x-agent-id`. `logout` revokes the refresh chain before erasing local
+refuses plaintext fallback. The current access token is kept there too, so
+every nodii-dev process on the machine shares it instead of refreshing on each
+run; refreshes take turns under a per-user lock. A refresh clears the saved
+sign-in only when nodii-auth answers `invalid_grant` (expired, revoked or
+replayed). A 429, 5xx, timeout, network error or proxy error page keeps it and
+fails with `OAUTH_REFRESH_UNAVAILABLE` (exit 1) after a few retries. Every API
+call goes to the edge's `/devops` prefix with the OAuth bearer and the
+registered `x-agent-id`; signing in again as the same person keeps that
+registration. `logout` revokes the refresh chain before erasing local
 credentials. `--auth-url`, `--edge-url`, and `--tenant-hint` select another real
 deployment.
 
@@ -98,7 +104,34 @@ nodii-dev heartbeat audit [SERVICE]
 nodii-dev design entries [--kind KIND] [--group GROUP] [--q TEXT]
 nodii-dev design entry KEY
 nodii-dev design guide PAGE_TYPE
+```
+
+### Design-system guidelines
+
+Edit an entry's guideline through Dev, not with signed scripts. A proposal is
+a guideline change set; a person approves or rejects it in Dev (nobody decides
+their own), and the approved edit becomes a design-system PR.
+
+```bash
+nodii-dev design guideline list [--drafted] [--kind KIND] [--q TEXT] [--all]
+nodii-dev design guideline show ENTRY > ENTRY.md     # the editable Markdown form
+nodii-dev design guideline propose ENTRY --file ENTRY.md [--summary TEXT] [--dry-run]
+nodii-dev design changeset list [--entry KEY] [--state in_review] [--limit N]
+nodii-dev design changeset show GCS-001
+```
 
+The file has one `## <list>` section per statement list (`whenToUse`,
+`whenNotToUse`, `dos`, `donts`, and for an active guideline `anatomy`,
+`states.states`, `states.loading`, `states.empty`, `states.error`, `copy`,
+`composition`, `data.notes`), one `- ` bullet per item, and `(drafted)` after
+the list name when the text still awaits a real source. A line that is an
+HTML comment is ignored (`<!--` inside an item stays in its text), and a line
+break inside an item reads back as a space. The `#` title, as `show` prints it,
+names the entry: `propose` refuses a file titled for another one. `propose` sends
+only the lists that differ from Dev's current guideline, and `--dry-run`
+prints them without creating anything.
+
+```bash
 nodii-dev figma lock FILE_KEY --title TEXT
 nodii-dev figma check FILE_KEY
 nodii-dev figma log-write CHANGE_SET --tool TOOL --nodes NODE[,NODE]

package/dist/api.js

@@ -100,7 +100,7 @@ export const GROUPS = {
   decisions: "Decisions", drift: "Drift", requests: "Requests", pipelines: "Pipelines", slices: "Slices", "sql-lookups": "SqlLookups",
   runners: "Runners", routing: "Routing", usage: "Usage", audit: "AuditLog", reconciliation: "Reconciliation", cron: "Cron", health: "Health",
   composite: "Composite", "service-edges": "ServiceEdges", lanes: "Lanes",
-  swaps: "Swaps", ideas: "Ideas", terminology: "Terminology",
+  swaps: "Swaps", ideas: "Ideas", terminology: "Terminology", credentials: "Credentials",
   rulebook: "ad-documents", "ad-decisions": "ad-decisions", domains: "ad-domains", standardizations: "standardizations",
   archive: "archive", harness: "harness",
 };
@@ -154,11 +154,19 @@ export const ALIASES = {
   "terminology:list": "listTerminology", "terminology:show": "getTerminologyTerm", "terminology:create": "createTerminologyTerm", "terminology:update": "updateTerminologyTerm",
 };
 
+// Decisions a person makes in Dev (operator authority): nodii-dev never sends them.
+export const PERSON_ONLY = new Set(["approveDesignGuidelineChangeSet", "rejectDesignGuidelineChangeSet", "mergeDesignRelease"]);
+export function refusePersonOnly(operationId) {
+  if (PERSON_ONLY.has(operationId))
+    throw new CliError("PERSON_ONLY", `${operationId} is a person's decision in Dev; nodii-dev does not send it.`, 2);
+}
+
 export function findFirstClass(operations, group, action) {
   const aliased = ALIASES[`${group}:${action}`];
   if (aliased) return operations.find(x => x.operationId === aliased);
   const tags = Array.isArray(GROUPS[group]) ? GROUPS[group] : [GROUPS[group]];
-  const candidates = operations.filter(x => x.tags.some(t => tags.includes(t)));
+  // A person-only operation is never picked by name, so a guessed verb cannot reach it.
+  const candidates = operations.filter(x => !PERSON_ONLY.has(x.operationId) && x.tags.some(t => tags.includes(t)));
   const normalized = action?.replace(/-([a-z])/g, (_, c) => c.toUpperCase()).toLowerCase();
   return candidates.find(x => x.operationId.toLowerCase() === normalized || x.operationId.toLowerCase().endsWith(normalized));
 }

package/dist/cli.js

@@ -26,6 +26,7 @@ import { heartbeatCurrentLane, postHook, preHook, settingsSnippet, workflowSugge
 import { setupCommand } from "./setup.js";
 import { harnessCommand } from "./harness.js";
 import { docsCommand, rulebookCommand } from "./upload.js";
+import { changeSetCommand, guidelineCommand } from "./guidelines.js";
 import {
   ALIASES,
   GROUPS,
@@ -33,6 +34,7 @@ import {
   callOperation,
   findFirstClass,
   flagsToOperation,
+  refusePersonOnly,
   loadOpenApi,
   operationsFrom,
   parseParams,
@@ -58,6 +60,9 @@ Usage: nodii-dev <command> [options] [--json]
   drift file | request file
   decisions list|get|search
   design entries|entry|guide
+  design guideline list [--drafted] [--all] | show ENTRY
+  design guideline propose ENTRY --file FILE.md [--summary TEXT] [--dry-run]
+  design changeset list [--entry KEY] [--state STATE] | show ID
   figma lock|check|log-write|submit|apply|published|abandon|release
   hook claude-figma-pre|claude-figma-post|print-settings
   setup [--yes|--check]                 # dry-run by default
@@ -140,9 +145,12 @@ async function login(flags, json) {
     noBrowser: Boolean(flags["no-browser"]),
     scope: flags.scope,
     output: json ? console.error : console.log,
+    previous,
   });
-  return emit({ loggedIn: true, provider: "oauth", credentialStorage: result.storage }, json,
-    `OAuth login complete; refresh credential stored in ${result.storage}. Run \`nodii-dev agent register --name NAME\` next.`);
+  return emit({ loggedIn: true, provider: "oauth", credentialStorage: result.storage, agentId: result.agentId }, json,
+    result.agentId
+      ? `OAuth login complete; refresh credential stored in ${result.storage}. Kept agent registration ${result.agentId}.`
+      : `OAuth login complete; refresh credential stored in ${result.storage}. Run \`nodii-dev agent register --name NAME\` next.`);
 }
 
 async function issues(action, args, f, json) {
@@ -237,6 +245,7 @@ export async function main(argv = process.argv.slice(2)) {
     if (!action) throw new CliError("USAGE", "api needs an operationId or list", 2);
     const entry = operations.find((x) => x.operationId === action);
     if (!entry) throw new CliError("UNKNOWN_OPERATION", `No OpenAPI operationId: ${action}`, 2);
+    refusePersonOnly(entry.operationId);
     const parsed = await readBody(f.body);
     const request = buildOperationRequest(entry, parseParams(f.param), parsed?.value);
     return emit(await devRawRequest(request.method, request.path, parsed?.text), json);
@@ -270,6 +279,9 @@ export async function main(argv = process.argv.slice(2)) {
   }
   if (command === "docs") return emitCommand(await docsCommand(action, rest, f));
   if (command === "rulebook" && ["list", "show", "diff"].includes(action)) return emitCommand(await rulebookCommand(action, rest, f));
+  // Guideline change sets: approving or rejecting one is a person's action in Dev.
+  if (command === "design" && action === "guideline") return emitCommand(await guidelineCommand(rest[0], rest.slice(1), f));
+  if (command === "design" && action === "changeset") return emitCommand(await changeSetCommand(rest[0], rest.slice(1), f));
   if (command === "lane") return emitCommand(await laneCommand(action, rest, f));
   if (command === "next") return emitCommand(await nextCommand(action, f));
   if (command === "built") return emitCommand(await builtCommand(action, rest, f));

package/dist/core.js

@@ -4,7 +4,7 @@ import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { dirname, join } from "node:path";
 
-export const VERSION = "0.6.1";
+export const VERSION = "0.6.3";
 export const configPath = () =>
   process.env.NODII_DEV_CONFIG_PATH ??
   join(homedir(), ".config/nodii-dev/config.json");
@@ -162,7 +162,7 @@ export async function checkLogin() {
 export const encode = (value) => encodeURIComponent(value);
 // Switches never take the next token as their value, so
 // `docs upload --wait rulebook/` keeps rulebook/ as a path.
-const SWITCHES = new Set(["json", "wait", "dry-run", "check", "all", "fleet", "help", "yes", "mine", "no-browser", "include-drafts"]);
+const SWITCHES = new Set(["json", "wait", "dry-run", "check", "all", "fleet", "help", "yes", "mine", "no-browser", "include-drafts", "drafted"]);
 export function parseArgs(argv) {
   const flags = {};
   const args = [];