@theholocron/cli 2.0.0-alpha.60 → 2.0.0-alpha.61

package/dist/cli.mjs

@@ -4304,6 +4304,23 @@ async function runSetup(input) {
 	});
 	print("");
 	print(`  ${summary.ok} ok, ${summary.fail} fail, ${summary.skip} skipped${dryRun ? `, ${summary.dryRun} would-do` : ""}`);
+	if (steps.some((s) => s.reason === "permissions")) {
+		print("");
+		print("  ⚠  Some steps failed with 403 (insufficient token permissions).");
+		print("     These operations require a temporary fine-grained PAT with the");
+		print("     following repository permissions:");
+		print("");
+		print("       · Administration          — read and write");
+		print("       · Code scanning alerts    — read and write");
+		print("       · Contents                — read and write");
+		print("       · Secret scanning alerts  — read and write");
+		print("       · Workflows               — read and write");
+		print("       · Metadata                — read (added automatically)");
+		print("");
+		print("     Create one at: https://github.com/settings/personal-access-tokens/new");
+		print("     Then re-run:   holocron setup --token <your-temp-pat>");
+		print("     You can revoke it immediately after setup completes.");
+	}
 	return {
 		steps,
 		summary
@@ -4325,6 +4342,16 @@ async function runStep(capability, step, dryRun, body) {
 		if (typeof note === "string") result.message = note;
 		return result;
 	} catch (err) {
+		if (err instanceof ProviderApiError$1 && err.status === 403) {
+			const reason = classify403(err);
+			return {
+				capability,
+				step,
+				status: "fail",
+				message: err.message,
+				reason
+			};
+		}
 		return {
 			capability,
 			step,
@@ -4333,10 +4360,16 @@ async function runStep(capability, step, dryRun, body) {
 		};
 	}
 }
+function classify403(err) {
+	const msg = `${err.message} ${String(err.details)}`.toLowerCase();
+	if (msg.includes("advanced security") || msg.includes("not enabled for this repository") || msg.includes("upgrade") || msg.includes("not available on")) return "plan";
+	return "permissions";
+}
 function formatStep(step) {
 	const icon = step.status === "ok" ? "✓" : step.status === "fail" ? "✗" : step.status === "dry-run" ? "…" : "·";
+	const tag = step.reason === "permissions" ? " [permissions]" : step.reason === "plan" ? " [plan restriction]" : "";
 	const detail = step.message ? `  (${step.message})` : "";
-	return `    ${icon} ${step.step}${detail}`;
+	return `    ${icon} ${step.step}${tag}${detail}`;
 }
 //#endregion
 //#region src/commands/sync.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/cli",
-  "version": "2.0.0-alpha.60",
+  "version": "2.0.0-alpha.61",
   "description": "The Holocron CLI — a pluggable, capability-based orchestrator for spinning up and operating software projects.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/cli#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",