@pareto4/pp-core 1.13.0 → 1.18.0

package/pp-core/bin/lib/vault-coordinates.cjs

@@ -11,7 +11,7 @@
  * This module is the single place every vault coordinate decision in pp-core
  * routes through — the host, repo and ref for the client tier, and the host,
  * repo and ref for the shared tier — for both the read path (`src/vault.cts`)
- * and the write path (`src/vault-write-back.cts`). Before this module
+ * and the write path (`src/vault-standards-promote.cts`). Before this module
  * existed, `DEFAULT_FALLBACK_REPO` was a `const` in `src/vault.cts` and four
  * separate `'gitlab.com'` fallback chains were hand-written across the two
  * files, two of which read `platform.host` from `.platform-bindings.json`
@@ -22,9 +22,9 @@
  * coordinates.
  *
  * It imports ONLY node builtins plus `./git-provider.cjs` and
- * `./org-profile.cjs` — no `vault.cjs`, no `vault-write-back.cjs`, no
+ * `./org-profile.cjs` — no `vault.cjs`, no `vault-standards-promote.cjs`, no
  * `io.cjs`, no `shell-command-projection.cjs` — so that both `src/vault.cts`
- * and `src/vault-write-back.cts` can import it without forming a require
+ * and `src/vault-standards-promote.cts` can import it without forming a require
  * cycle in the CommonJS graph `require()` loads. `git-provider.cjs` and
  * `org-profile.cjs` are both safe to import here: neither imports this
  * module back at their own top level (org-profile.cjs's only reference back
@@ -70,9 +70,10 @@ const org_profile_cjs_1 = require("./org-profile.cjs");
 exports.DEFAULT_HOST_FOR_PROVIDER = Object.freeze({
     gitlab: 'gitlab.com',
     azure: 'dev.azure.com',
+    github: 'github.com',
 });
 /** The values moving out of `src/vault.cts`'s `DEFAULT_FALLBACK_REPO`/`DEFAULT_FALLBACK_REF`. */
-exports.DEFAULT_SHARED_REPO = 'pareto4/pareto-vault';
+exports.DEFAULT_SHARED_REPO = 'pareto000/Pareto-Vault';
 exports.DEFAULT_SHARED_REF = 'main';
 /** Dotted `.planning/config.json` keys, named so no consumer hand-writes a key string. */
 exports.SHARED_REPO_CONFIG_KEY = 'vault.fallback_repo';
@@ -449,13 +450,21 @@ function resolveSharedCoordinates(cwd, provider, opts) {
         // is the real consultation that supersedes the frozen stub call.
         const repoProfile = (0, org_profile_cjs_1.readProfileValue)(cwd, exports.SHARED_REPO_CONFIG_KEY);
         pushDeduped(warnings, repoProfile.warnings);
-        if (repoProfile.value !== undefined) {
+        if (repoProfile.value === '') {
+            // PBI 74316: a profile may record the same explicit opt-out a project
+            // records with an empty string — no shared tier, and no warning.
+            repo = null;
+            suppressed = true;
+            suppressedKind = 'explicit-opt-out';
+            suppressedReason = exports.SHARED_OPT_OUT_REASON;
+        }
+        else if (repoProfile.value !== undefined) {
             repo = repoProfile.value;
             // suppressed/suppressedKind/suppressedReason stay at their
             // false/null/null defaults: applyBuiltInDefault withholds only the
             // BUILT-IN default, never a configured profile value.
         }
-        else if (provider === 'gitlab') {
+        else if (provider === 'github') {
             // Nothing was suppressed either way: with the flag true the built-in
             // default applied, and with it false the caller asked for no default
             // and got none. This MUST stay false under both flag values — making
@@ -477,7 +486,7 @@ function resolveSharedCoordinates(cwd, provider, opts) {
             suppressedKind = 'provider-default-unavailable';
             suppressedReason = `no shared vault configured for provider "${provider}"`;
             if (applyBuiltInDefault) {
-                warnings.push(`The built-in shared vault default applies only to the gitlab provider — set ${exports.SHARED_REPO_CONFIG_KEY} explicitly to use a shared vault on this provider.`.slice(0, 200));
+                warnings.push(`The built-in shared vault default applies only to the github provider — set ${exports.SHARED_REPO_CONFIG_KEY} explicitly to use a shared vault on this provider.`.slice(0, 200));
             }
         }
     }