@theholocron/cli 2.0.0-alpha.21 → 2.0.0-alpha.23

package/README.md

@@ -1,3 +1,5 @@
+<!-- editorconfig-checker-disable-file -->
+
 # `@theholocron/cli`
 
 The Holocron CLI — a pluggable, capability-based orchestrator for
@@ -16,29 +18,31 @@ Holocron reads `holocron.config.{json,js,ts}` from the project root
 (priority: json → js → ts).
 
 **JSON** (simplest):
+
 ```jsonc
 // holocron.config.json
 {
 	"project": { "name": "my-app" },
 	"providers": {
 		"vault": ["1password", { "vault": "my-app" }],
-		"source": "github"
-	}
+		"source": "github",
+	},
 }
 ```
 
 **JS/TS** — use `defineConfig` for autocomplete and type-checking:
+
 ```ts
 // holocron.config.ts
-import { defineConfig } from '@theholocron/cli'
+import { defineConfig } from "@theholocron/cli";
 
 export default defineConfig({
-	project: { name: 'my-app' },
+	project: { name: "my-app" },
 	providers: {
-		vault: ['1password', { vault: 'my-app' }],
-		source: 'github',
+		vault: ["1password", { vault: "my-app" }],
+		source: "github",
 	},
-})
+});
 ```
 
 ### Shareable configs
@@ -56,12 +60,13 @@ providers: {
 ```
 
 A capability config package exports a `CapabilityConfigPackage` default:
+
 ```ts
-import type { CapabilityConfigPackage } from '@theholocron/cli'
+import type { CapabilityConfigPackage } from "@theholocron/cli";
 export default {
-	provider: '1password',
-	options: { vault: 'acme-app' },
-} satisfies CapabilityConfigPackage
+	provider: "1password",
+	options: { vault: "acme-app" },
+} satisfies CapabilityConfigPackage;
 ```
 
 **Level 2 — whole-config presets.** Because the config file can be
@@ -69,23 +74,23 @@ JS/TS, a shared base is just an import:
 
 ```ts
 // holocron.config.ts
-import { acmeConfig } from '@acme/holocron-config'
-export default acmeConfig
+import { acmeConfig } from "@acme/holocron-config";
+export default acmeConfig;
 ```
 
 ## What's in here
 
 - `src/capabilities/` — the 14 capability interfaces that providers
-	implement
+  implement
 - `src/config.ts` — config schema, `defineConfig`, `resolveConfig`,
-	`CapabilityConfigPackage`
+  `CapabilityConfigPackage`
 - `src/load-config.ts` — `loadConfig` — reads JSON/JS/TS config files
 - `src/define-config.ts` — `defineConfig` typed pass-through
 - `src/loader.ts` — `PluginLoader` — dynamic-imports plugins, resolves
-	capability config packages, builds the capability registry
+  capability config packages, builds the capability registry
 - `src/cli.ts` — yargs entry, dispatches subcommands
 - `src/commands/` — `setup`, `doctor`, `deploy`, `secret set`,
-	`secrets sync`, `npm publish-initial`
+  `secrets sync`, `npm publish-initial`
 
 ## Status
 

package/dist/cli.mjs

@@ -1167,6 +1167,7 @@ jobs:
         name: Run Super Linter
         env:
           GITHUB_TOKEN: \${{ github.token }}
+          DEFAULT_BRANCH: \${{ github.event.pull_request.base.ref || github.event.repository.default_branch }}
           ANNOTATE_ONLY: true
           DISABLE_COMMENTS: false
           IGNORE_GITIGNORED_FILES: true
@@ -1937,6 +1938,19 @@ jobs:
 };
 const KNOWN_WORKFLOWS = new Set(Object.keys(WORKFLOW_TEMPLATES));
 /**
+* GitHub check context name each CI workflow produces on a PR.
+*
+* The format is "{caller-workflow-name} / {reusable-job-name}". The caller
+* job's own `name:` field does NOT appear in the external check name — only
+* the calling workflow's top-level `name:` and the inner reusable-workflow
+* job name matter. Only workflows that gate merges are listed here.
+*/
+const WORKFLOW_CHECK_CONTEXTS = {
+	lint: "Lint / Lint entire codebase",
+	test: "Test / Run tests and collect coverage",
+	typecheck: "Typecheck / tsc --noEmit"
+};
+/**
 * Generate the thin caller content for a workflow, optionally injecting
 * `with:` inputs before `secrets: inherit` in the jobs block.
 */
@@ -3565,6 +3579,15 @@ function vaultProviderName(loader) {
 }
 //#endregion
 //#region src/commands/setup.ts
+const ALEX_CONFIG = JSON.stringify({ allow: [
+	"dead",
+	"failure",
+	"failures",
+	"hook",
+	"hooks",
+	"husky",
+	"period"
+] }, null, 2) + "\n";
 const DEPENDABOT_CONFIG = `\
 # AUTO-GENERATED by holocron — run \`holocron setup\` to regenerate.
 version: 2
@@ -3753,7 +3776,15 @@ async function runSetup(input) {
 				await source.updateRepoSettings(BALANCED_REPO_SETTINGS);
 			}));
 			print(formatStep(steps[steps.length - 1]));
-			const requiredChecks = preset === "strict" ? policy.requiredChecks ?? [] : [];
+			const configuredWorkflowNames = (config.project.workflows ?? []).map((entry) => typeof entry === "string" ? entry : entry.name);
+			const requiredChecks = preset === "strict" ? [
+				"DCO",
+				...configuredWorkflowNames.flatMap((name) => {
+					const ctx = WORKFLOW_CHECK_CONTEXTS[name];
+					return ctx ? [ctx] : [];
+				}),
+				...policy.requiredChecks ?? []
+			] : [];
 			steps.push(await upsertBranchProtection(source, dryRun, requiredChecks));
 			print(formatStep(steps[steps.length - 1]));
 		}
@@ -3788,6 +3819,13 @@ async function runSetup(input) {
 		}));
 		print(formatStep(steps[steps.length - 1]));
 	}
+	if (loader.has("source")) {
+		const source = loader.get("source");
+		steps.push(await runStep("source", "write .alexrc.json", dryRun, async () => {
+			await source.writeRepoFile(".alexrc.json", ALEX_CONFIG);
+		}));
+		print(formatStep(steps[steps.length - 1]));
+	}
 	if (loader.has("environments")) {
 		const envs = loader.get("environments");
 		print("  → environments");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/cli",
-  "version": "2.0.0-alpha.21",
+  "version": "2.0.0-alpha.23",
   "description": "The Holocron CLI — a pluggable, capability-based orchestrator for spinning up and operating software projects.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/cli#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",