@tablation/crew 0.67.1 → 0.68.0

package/dist/cli.js

@@ -2662,6 +2662,14 @@ function resolveApiKey(r) {
     `route "${r.route}": no API key (looked for, in order: apiKey; ${r.apiKeyVar ?? "VAR"} in ${r.apiKeyFile ?? "<unset>"}; CREW_API_KEY in the environment)`
   );
 }
+function credentialSource(r) {
+  if (r.apiKey) return KEYCHAIN_ELIGIBLE_ROUTES.has(r) ? "keychain" : "inline";
+  if (r.apiKeyFile && r.apiKeyVar && existsSync7(r.apiKeyFile)) {
+    const re = new RegExp(`^${r.apiKeyVar}=`);
+    if (readFileSync6(r.apiKeyFile, "utf8").split("\n").some((l) => re.test(l))) return "apiKeyFile";
+  }
+  return process.env.CREW_API_KEY?.trim() ? "CREW_API_KEY" : "none";
+}
 var KEYCHAIN_ELIGIBLE_ROUTES = /* @__PURE__ */ new WeakSet();
 async function hydrateApiKeys(routes, getStore = getSessionStore) {
   let store;
@@ -10364,6 +10372,11 @@ ${section}`;
   return [...lines.slice(0, anchor), section, ...lines.slice(anchor)].join("\n");
 }
 var RELEASE_COMMIT_SUBJECT = /^Release \S+$/;
+function subjectsSince(cwd, sha) {
+  if (!isAncestor(cwd, sha, "HEAD")) return null;
+  return (gitOk(cwd, ["log", "--format=%h %s", `${sha}..HEAD`]) ?? "").split("\n").filter(Boolean);
+}
+var isReleaseCommitLine = (line) => RELEASE_COMMIT_SUBJECT.test(line.replace(/^\S+ /, ""));
 function decideRelease(cwd, tickets, contract, opts = {}) {
   const pattern = opts.tagPattern ?? "v*";
   const base = opts.base ?? "main";
@@ -11109,11 +11122,18 @@ async function runReleaseCycle(o, movedPast2) {
   }
   o.state?.clearBlocked();
   const failedAt = o.state?.deployFailedSha();
-  if (!o.force && failedAt && failedAt === decision.head) {
-    o.emit.warn(
-      `a deploy already failed on ${failedAt.slice(0, 8)} \u2014 not retrying until a new commit lands (force it with \`crew deploy\`)`
-    );
-    return { merged: [], deployed: false, stopped: "previous deploy failed on this commit", decision };
+  if (!o.force && failedAt) {
+    const since2 = failedAt === decision.head ? [] : subjectsSince(o.cwd, failedAt);
+    const real = since2?.filter((l) => !isReleaseCommitLine(l)) ?? null;
+    if (real && real.length === 0) {
+      o.emit.warn(
+        `a deploy already failed on ${failedAt.slice(0, 8)} \u2014 not retrying until a new commit lands ` + (since2.length > 0 ? `(${since2.length} release commit(s) from elsewhere since do not count: ${since2.join("; ")}) ` : "") + "(force it with `crew deploy`)"
+      );
+      return { merged: [], deployed: false, stopped: "previous deploy failed on this commit", decision };
+    }
+    if (real) {
+      o.emit.emit(`deploy guard lifted by ${real.length} new commit(s) since ${failedAt.slice(0, 8)}: ${real.join("; ")}`);
+    }
   }
   if (o.repo.release.mode === "external") {
     o.emit.emit("release.mode is external \u2014 the crew hands work off and does not release");
@@ -11662,6 +11682,61 @@ function formatProjectsReport(report) {
 `;
 }
 
+// src/whoami.ts
+async function buildWhoami(routes, deps = {}) {
+  const doFetch = deps.fetch ?? fetch;
+  return Promise.all(routes.map(async (route) => {
+    const credential = credentialSource(route);
+    try {
+      const key = resolveApiKey(route);
+      const q = route.resolved ? `?workspaceId=${encodeURIComponent(route.resolved.workspaceId)}` : "";
+      const res = await doFetch(`${route.baseUrl.replace(/\/+$/, "")}/api/auth/me${q}`, {
+        headers: { Authorization: `Bearer ${key}`, "User-Agent": deps.userAgent ?? "Mozilla/5.0 TablationCrewAgent/1.0" }
+      });
+      if (res.status === 401 || res.status === 403) {
+        return { route: route.route, ok: false, credential, error: `key rejected by ${route.baseUrl} (HTTP ${res.status}): expired or revoked, re-run crew connect` };
+      }
+      if (!res.ok) return { route: route.route, ok: false, credential, error: `/auth/me answered HTTP ${res.status}` };
+      const me = await res.json();
+      const operatorId = route.resolved?.operator ?? null;
+      let operatorName = null;
+      if (operatorId && deps.operatorName) {
+        try {
+          operatorName = await deps.operatorName(route, operatorId) ?? null;
+        } catch {
+        }
+      }
+      return {
+        route: route.route,
+        ok: true,
+        credential,
+        identity: { id: me.id ?? null, email: me.email ?? null, name: me.name ?? null },
+        role: typeof me.role === "string" ? me.role : null,
+        operator: { id: operatorId, name: operatorName }
+      };
+    } catch (e) {
+      return { route: route.route, ok: false, credential, error: e.message };
+    }
+  }));
+}
+function formatWhoami(report) {
+  const lines = [];
+  for (const r of report) {
+    lines.push(`route ${r.route}`);
+    if (!r.ok) {
+      lines.push(`  error: ${r.error}`, `  credential: ${r.credential}`);
+      continue;
+    }
+    const who2 = [r.identity.name, r.identity.email ? `<${r.identity.email}>` : null].filter(Boolean).join(" ");
+    lines.push(`  signed in as: ${who2 || r.identity.id || "(unknown)"}${r.identity.id ? ` (${r.identity.id})` : ""}`);
+    lines.push(`  role: ${r.role ?? "(unknown)"}`);
+    lines.push(`  operator: ${r.operator.id ? `${r.operator.name ?? "(unnamed)"} (${r.operator.id})` : "(not linked)"}`);
+    lines.push(`  credential: ${r.credential}`);
+  }
+  return `${lines.join("\n")}
+`;
+}
+
 // src/cli.ts
 import { StaleWriteError as StaleWriteError9 } from "@tablation/client";
 
@@ -15465,6 +15540,7 @@ function usage() {
   crew watch [route]             live view of what the crew is doing
   crew status [route] [--json]   paused/running state; --json for a machine reader
   crew projects [--route R] [--json]   the Projects rows each route can read (id, name, prefix, work mode)
+  crew whoami [route] [--json]   the signed-in identity, key role, operator Crew row and credential source per route
   crew reload                    make the running daemon re-read crew.yaml (--now: restart it immediately)
   crew doctor [route] [--fix] [--offline] [--json]   preflight; --fix enables clean routes and offers crew install;
                                  --offline skips push probes; --json prints push-auth and tool checks only
@@ -15686,7 +15762,7 @@ if (command === "passenger-sync-daemon") {
   const DAEMON_SUBCOMMANDS = /* @__PURE__ */ new Set(["start", "stop", "status", "restart"]);
   const worktreeArgs = command === "worktree" ? splitWorktreeArgs(positional, cfg.routes.map((r) => r.route)) : void 0;
   const named = worktreeArgs ? worktreeArgs.route : command === "daemon" && DAEMON_SUBCOMMANDS.has(positional[1] ?? "") ? positional[2] : positional[1];
-  const fleetWide = command === "inbox" || command === "connect" || command === "disconnect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || command === "projects" || releaseFleetWide || command === "pause" || command === "resume" || command === "reload" || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1 || worktreeArgs !== void 0 && !named && cfg.routes.length > 1;
+  const fleetWide = command === "inbox" || command === "connect" || command === "disconnect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || command === "projects" || command === "whoami" || releaseFleetWide || command === "pause" || command === "resume" || command === "reload" || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1 || worktreeArgs !== void 0 && !named && cfg.routes.length > 1;
   let route;
   try {
     route = fleetWide ? cfg.routes[0] : findRoute(cfg, named);
@@ -18890,6 +18966,23 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
       if (results.some((r) => !r.ok)) process.exitCode = 1;
       break;
     }
+    case "whoami": {
+      const only = value("route") ?? positional[1];
+      const wanted = only ? cfg.routes.filter((r) => r.route === only) : cfg.routes;
+      if (only && wanted.length === 0) {
+        process.stderr.write(`crew whoami: no route "${only}" (have: ${cfg.routes.map((r) => r.route).join(", ")})
+`);
+        process.exit(2);
+      }
+      const report = await buildWhoami(wanted, {
+        userAgent: cfg.ship.userAgent,
+        operatorName: async (r, id) => (await new Tracker(r, cfg.ship).crewRows()).find((c) => c.id === id)?.name
+      });
+      process.stdout.write(flag("json") ? `${JSON.stringify(report.length === 1 && only ? report[0] : report, null, 2)}
+` : formatWhoami(report));
+      if (report.some((r) => !r.ok)) process.exitCode = 1;
+      break;
+    }
     case "projects": {
       const only = value("route") ?? positional[1];
       const wanted = only ? cfg.routes.filter((r) => r.route === only) : cfg.routes;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tablation/crew",
-  "version": "0.67.1",
+  "version": "0.68.0",
   "description": "A standing team of headless agents that picks work off a Tablation board, does it on a machine you control, and reports back.",
   "type": "module",
   "license": "MIT",