@oss-autopilot/core 3.13.2 → 3.13.3

package/dist/cli.js

@@ -81,6 +81,20 @@ program.hook('preAction', async (thisCommand, actionCommand) => {
         const { ensureGistPersistence } = await import('./core/index.js');
         await ensureGistPersistence(token);
     }
+    else {
+        // #1431: localOnly skips the AUTH GATE, not gist persistence. Mutating
+        // localOnly commands (shelve/move/dismiss/override/...) already call
+        // maybeCheckpoint, which silently no-ops when the singleton never
+        // bootstrapped — so a gist-configured user's CLI mutations were written
+        // local-only with no warning and never reached the Gist. Best-effort
+        // bootstrap; the warning semantics live (and are unit-tested) in
+        // bootstrapGistBestEffort.
+        const { bootstrapGistBestEffort } = await import('./core/index.js');
+        const localOnlyWarning = await bootstrapGistBestEffort(getGitHubTokenAsync);
+        if (localOnlyWarning) {
+            console.error(`Warning: ${localOnlyWarning}`);
+        }
+    }
 });
 // First-run detection: if no subcommand was provided and no state file exists,
 // show a quick-start guide and exit before Commander displays generic help.

package/dist/commands/daily.js

@@ -546,6 +546,15 @@ async function executeDailyCheckInternal(token) {
     // One collector shared by every phase — threaded through explicitly so the
     // callgraph documents which phases can produce non-fatal warnings. See #1042.
     const warnings = [];
+    // Surface gist-mode degradation in the machine-readable envelope (#1431):
+    // a process whose config says `persistence: gist` but whose manager is
+    // local-only (transient init fallback, or a localOnly entry point that
+    // never bootstrapped) writes mutations that will not sync. Previously the
+    // only signal was a stderr warn, invisible to --json consumers.
+    const smForGistCheck = getStateManager();
+    if (smForGistCheck.getState().config.persistence === 'gist' && !smForGistCheck.isGistMode()) {
+        recordWarning(warnings, 'gist-init', 'Gist persistence degraded', new Error('configured for Gist but running local-only in this process; mutations will not sync until Gist init succeeds'));
+    }
     // Surface Gist staleness up-front so consumers see it even if Phase 1 fails (#1193).
     const staleness = getStateManager().getStateStaleness();
     if (staleness) {

package/dist/core/index.d.ts

@@ -2,7 +2,7 @@
  * Core module exports
  * Re-exports all core functionality for convenient imports
  */
-export { StateManager, getStateManager, getStateManagerAsync, ensureGistPersistence, type GistPersistenceStatus, maybeCheckpoint, resetStateManager, type Stats, } from './state.js';
+export { StateManager, getStateManager, getStateManagerAsync, ensureGistPersistence, bootstrapGistBestEffort, type GistPersistenceStatus, maybeCheckpoint, resetStateManager, type Stats, } from './state.js';
 export { GistStateStore } from './gist-state-store.js';
 export { guidelinesFilename, repoFromGuidelinesFilename, GUIDELINES_FILE_PREFIX, GUIDELINES_MAX_BYTES, GuidelinesNotAvailableError, GuidelinesTooLargeError, } from './guidelines-store.js';
 export { PRMonitor, type PRCheckFailure, type FetchPRsResult, computeDisplayLabel, classifyCICheck, classifyFailingChecks, } from './pr-monitor.js';

package/dist/core/index.js

@@ -2,7 +2,7 @@
  * Core module exports
  * Re-exports all core functionality for convenient imports
  */
-export { StateManager, getStateManager, getStateManagerAsync, ensureGistPersistence, maybeCheckpoint, resetStateManager, } from './state.js';
+export { StateManager, getStateManager, getStateManagerAsync, ensureGistPersistence, bootstrapGistBestEffort, maybeCheckpoint, resetStateManager, } from './state.js';
 export { GistStateStore } from './gist-state-store.js';
 export { guidelinesFilename, repoFromGuidelinesFilename, GUIDELINES_FILE_PREFIX, GUIDELINES_MAX_BYTES, GuidelinesNotAvailableError, GuidelinesTooLargeError, } from './guidelines-store.js';
 export { PRMonitor, computeDisplayLabel, classifyCICheck, classifyFailingChecks, } from './pr-monitor.js';

package/dist/core/state.d.ts

@@ -456,6 +456,25 @@ export type GistPersistenceStatus =
  * to local-only (transient network failure). A later call may recover. */
  | 'degraded';
 export declare function ensureGistPersistence(token: string | null): Promise<GistPersistenceStatus>;
+/**
+ * Best-effort gist bootstrap for entry points WITHOUT the auth gate (#1431):
+ * the CLI's localOnly commands (shelve/move/dismiss/override/config/setup/...)
+ * skip token enforcement, but a gist-configured user's mutations must still
+ * reach the Gist — their maybeCheckpoint calls silently no-op when the
+ * singleton never bootstrapped.
+ *
+ * Returns a human-readable LOCAL-ONLY warning when the process will write
+ * local-only despite a gist config, or null when no warning is needed
+ * (local mode, or gist mode successfully activated).
+ *
+ * Ordering: peek first with no token (zero spawn cost for genuinely-local
+ * users), fetch a token only when the config asks for gist. Hard
+ * ConfigurationErrors are converted to a warning instead of thrown — the
+ * localOnly set includes config/setup, the very commands needed to REPAIR a
+ * broken gist setup, so they must not be bricked by it. (The auth-gated
+ * path keeps throwing per #1202.)
+ */
+export declare function bootstrapGistBestEffort(fetchToken: () => Promise<string | null>): Promise<string | null>;
 /**
  * Reset the singleton StateManager instance to null. Intended for test isolation.
  */

package/dist/core/state.js

@@ -1000,6 +1000,49 @@ export async function ensureGistPersistence(token) {
     const mgr = await getStateManagerAsync(token);
     return mgr.isGistMode() ? 'gist' : 'degraded';
 }
+/**
+ * Best-effort gist bootstrap for entry points WITHOUT the auth gate (#1431):
+ * the CLI's localOnly commands (shelve/move/dismiss/override/config/setup/...)
+ * skip token enforcement, but a gist-configured user's mutations must still
+ * reach the Gist — their maybeCheckpoint calls silently no-op when the
+ * singleton never bootstrapped.
+ *
+ * Returns a human-readable LOCAL-ONLY warning when the process will write
+ * local-only despite a gist config, or null when no warning is needed
+ * (local mode, or gist mode successfully activated).
+ *
+ * Ordering: peek first with no token (zero spawn cost for genuinely-local
+ * users), fetch a token only when the config asks for gist. Hard
+ * ConfigurationErrors are converted to a warning instead of thrown — the
+ * localOnly set includes config/setup, the very commands needed to REPAIR a
+ * broken gist setup, so they must not be bricked by it. (The auth-gated
+ * path keeps throwing per #1202.)
+ */
+export async function bootstrapGistBestEffort(fetchToken) {
+    let reason = null;
+    try {
+        let status = await ensureGistPersistence(null);
+        if (status === 'no-token') {
+            status = await ensureGistPersistence(await fetchToken());
+        }
+        if (status === 'no-token')
+            reason = 'no GitHub token is available';
+        else if (status === 'state-unreadable')
+            reason = 'the state file could not be read';
+        else if (status === 'degraded')
+            reason = 'Gist initialization hit a transient network failure';
+    }
+    catch (err) {
+        reason =
+            err instanceof ConfigurationError
+                ? `Gist initialization failed (${errorMessage(err)}) — fix the Gist setup (check the token's gist scope, or run state-show / setup) before relying on sync`
+                : `Gist initialization failed: ${errorMessage(err)}`;
+    }
+    if (reason === null)
+        return null;
+    return (`Gist persistence is configured but ${reason} — changes made by this command are ` +
+        'LOCAL-ONLY and may be overwritten by the next successful Gist sync.');
+}
 /**
  * Reset the singleton StateManager instance to null. Intended for test isolation.
  */

package/dist/formatters/json.d.ts

@@ -51,7 +51,7 @@ export interface CompactRepoGroup {
  * See `DailyWarning` and issue #1042 for the rationale — keeping this a
  * fixed union so downstream consumers can switch on it without drift.
  */
-export type DailyWarningPhase = 'fetch' | 'repo-scores' | 'analytics' | 'scout-sync' | 'partition' | 'dismiss-filter' | 'gist-checkpoint' | 'gist-staleness' | 'state-load';
+export type DailyWarningPhase = 'fetch' | 'repo-scores' | 'analytics' | 'scout-sync' | 'partition' | 'dismiss-filter' | 'gist-init' | 'gist-checkpoint' | 'gist-staleness' | 'state-load';
 /**
  * A single non-fatal failure surfaced from the `daily` pipeline. Unlike
  * `PRCheckFailure` (which is scoped to per-PR fetch errors), this covers
@@ -179,6 +179,7 @@ export declare const StatusOutputSchema: z.ZodObject<{
             "scout-sync": "scout-sync";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
+            "gist-init": "gist-init";
             "gist-checkpoint": "gist-checkpoint";
             "gist-staleness": "gist-staleness";
             "state-load": "state-load";
@@ -394,6 +395,7 @@ export declare const DailyOutputSchema: z.ZodObject<{
             "scout-sync": "scout-sync";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
+            "gist-init": "gist-init";
             "gist-checkpoint": "gist-checkpoint";
             "gist-staleness": "gist-staleness";
             "state-load": "state-load";
@@ -541,6 +543,7 @@ export declare const CompactDailyOutputSchema: z.ZodObject<{
             "scout-sync": "scout-sync";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
+            "gist-init": "gist-init";
             "gist-checkpoint": "gist-checkpoint";
             "gist-staleness": "gist-staleness";
             "state-load": "state-load";

package/dist/formatters/json.js

@@ -90,6 +90,7 @@ const DailyWarningPhaseSchema = z.enum([
     'scout-sync',
     'partition',
     'dismiss-filter',
+    'gist-init',
     'gist-checkpoint',
     'gist-staleness',
     'state-load',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-autopilot/core",
-  "version": "3.13.2",
+  "version": "3.13.3",
   "description": "CLI and core library for managing open source contributions",
   "type": "module",
   "bin": {