@theholocron/cli 3.17.1 → 3.18.0

package/dist/cli.mjs

@@ -970,7 +970,10 @@ function patchFiles(dir, variants, description, homepage, runtimeEnvironment, pr
 		if (isBinary(content)) continue;
 		const original = content;
 		for (const [search, replacement] of variants) content = content.split(search).join(replacement);
-		if (description !== void 0) content = content.split("<description>").join(description);
+		if (description !== void 0) {
+			content = content.split("<description>").join(description);
+			content = content.replace(/(<!-- holocron:description -->)[\s\S]*?(<!-- \/holocron:description -->)/g, `$1\n${description}\n$2`);
+		}
 		if (homepage !== void 0) content = content.split("<homepage>").join(homepage);
 		if (runtimeEnvironment !== void 0) content = content.split("<runtime_environment>").join(runtimeEnvironment);
 		content = content.replace(/\n?<!-- holocron:template-only -->[\s\S]*?<!-- \/holocron:template-only -->\n?/g, "");
@@ -989,9 +992,24 @@ function preflight$1() {
 function defaultExec$3(cmd, args, opts) {
 	execFileSync(cmd, args, {
 		cwd: opts.cwd,
-		stdio: opts.stdio
+		stdio: opts.stdio,
+		...opts.env && Object.keys(opts.env).length > 0 ? { env: {
+			...process.env,
+			...opts.env
+		} } : {}
 	});
 }
+function keychainLookup(key) {
+	const result = spawnSync("security", [
+		"find-generic-password",
+		"-s",
+		"com.theholocron.cli",
+		"-a",
+		key,
+		"-w"
+	], { encoding: "utf8" });
+	return result.status === 0 ? result.stdout?.trim() || void 0 : void 0;
+}
 function defaultReadFile(filepath) {
 	return readFileSync(filepath, "utf-8");
 }
@@ -1023,13 +1041,14 @@ async function runNew(input) {
 	}
 	if (existsSync(repoDir)) throw new NewError(`\`${repoDir}\` already exists — delete it or pick a different name.`);
 	print(`  Creating ${newRepo} from template ${templateRepo}…`);
+	const visibility = input.openSource ? "--public" : "--private";
 	try {
 		execFn("gh", [
 			"repo",
 			"create",
 			newRepo,
 			`--template=${templateRepo}`,
-			"--private",
+			visibility,
 			"--clone"
 		], {
 			cwd,
@@ -1038,6 +1057,28 @@ async function runNew(input) {
 	} catch (err) {
 		throw new NewError(`gh repo create failed: ${err instanceof Error ? err.message : String(err)}`);
 	}
+	if (input.isTemplate) try {
+		execFn("gh", [
+			"repo",
+			"edit",
+			newRepo,
+			"--template=true"
+		], {
+			cwd,
+			stdio: "inherit"
+		});
+	} catch {}
+	try {
+		execFn("gh", [
+			"repo",
+			"edit",
+			newRepo,
+			`--visibility=${input.openSource ? "public" : "private"}`
+		], {
+			cwd,
+			stdio: "inherit"
+		});
+	} catch {}
 	let templateSlug = `${input.type}-template`;
 	const pkgJsonPath = path.join(repoDir, "package.json");
 	if (existsSync(pkgJsonPath)) try {
@@ -1048,6 +1089,8 @@ async function runNew(input) {
 	print(`  Patching files…`);
 	const variants = deriveVariants(templateSlug, input.name);
 	variants.unshift([`theholocron/${templateSlug}`, `${org}/${input.name}`]);
+	const displayName = input.name.split("-").map(cap).join(" ");
+	variants.push(["<display_name>", displayName]);
 	const filesPatched = patchFiles(repoDir, variants, input.description, input.homepage, input.runtimeEnvironment, print, readFn, writeFn, walkFn);
 	print(`  ${filesPatched.length} file${filesPatched.length === 1 ? "" : "s"} patched`);
 	if (input.description !== void 0 || input.homepage !== void 0) try {
@@ -1110,9 +1153,22 @@ async function runNew(input) {
 		print("");
 		print("  Running holocron setup…");
 		try {
-			execFn("holocron", ["setup"], {
+			const setupArgs = ["setup"];
+			const setupEnv = {};
+			const adminToken = input.token ?? keychainLookup("github.admin");
+			if (adminToken) setupArgs.push("--token", adminToken);
+			if (!process.env["HOLOCRON_ORG_TOKEN"]) {
+				const orgToken = keychainLookup("github.org");
+				if (orgToken) setupEnv["HOLOCRON_ORG_TOKEN"] = orgToken;
+			}
+			if (!process.env["HOLOCRON_DEPLOY_TOKEN"]) {
+				const deployToken = keychainLookup("github.deploy");
+				if (deployToken) setupEnv["HOLOCRON_DEPLOY_TOKEN"] = deployToken;
+			}
+			execFn("holocron", setupArgs, {
 				cwd: repoDir,
-				stdio: "inherit"
+				stdio: "inherit",
+				env: setupEnv
 			});
 		} catch {
 			print("  ✗ holocron setup failed — run it manually after checking your config");
@@ -3144,6 +3200,10 @@ async function runSetup(input) {
 	if (loader.has("source")) {
 		const source = loader.get("source");
 		print(style.step("source"));
+		const SECURITY_SKIP_CODES = {
+			enableSecretScanning: [422],
+			enablePrivateVulnerabilityReporting: [404]
+		};
 		for (const method of [
 			"enableVulnerabilityAlerts",
 			"enableAutomatedSecurityFixes",
@@ -3153,7 +3213,7 @@ async function runSetup(input) {
 		]) {
 			steps.push(await runStep("source", method, dryRun, async () => {
 				await source[method]();
-			}));
+			}, { skipCodes: SECURITY_SKIP_CODES[method] }));
 			print(formatStep(steps[steps.length - 1]));
 		}
 		const usesAdvancedCodeQL = (config.workflows ?? []).map((e) => typeof e === "string" ? e : e.name).includes("codeql");
@@ -3287,7 +3347,7 @@ async function runSetup(input) {
 		}
 		const teams = repo?.teams ?? [];
 		if (teams.length > 0) if (source.syncTeams) {
-			steps.push(await runStep("source", "sync teams", dryRun, () => source.syncTeams(teams)));
+			steps.push(await runStep("source", "sync teams", dryRun, () => source.syncTeams(teams), { skipCodes: [422] }));
 			print(formatStep(steps[steps.length - 1]));
 			const repoCoord = input.context.repo ?? repo?.name ?? "";
 			const org = repoCoord.includes("/") ? repoCoord.split("/")[0] : "";
@@ -3654,7 +3714,7 @@ async function updateSkillsGitignore(gitignorePath, existingContent, skills, sym
 	} else content = (existingContent.trimEnd() ? existingContent.trimEnd() + "\n\n" : "") + block + "\n";
 	await writeFile(gitignorePath, content, "utf8");
 }
-async function runStep(capability, step, dryRun, body) {
+async function runStep(capability, step, dryRun, body, opts = {}) {
 	if (dryRun) return {
 		capability,
 		step,
@@ -3670,15 +3730,23 @@ async function runStep(capability, step, dryRun, body) {
 		if (typeof note === "string") result.message = note;
 		return result;
 	} catch (err) {
-		if (err instanceof ProviderApiError$1 && err.status === 403) {
-			const reason = classify403(err);
-			return {
+		if (err instanceof ProviderApiError$1) {
+			if (err.status !== void 0 && opts.skipCodes?.includes(err.status)) return {
 				capability,
 				step,
-				status: "fail",
-				message: err.message,
-				reason
+				status: "skip",
+				message: err.message
 			};
+			if (err.status === 403) {
+				const reason = classify403(err);
+				return {
+					capability,
+					step,
+					status: reason === "plan" ? "skip" : "fail",
+					message: err.message,
+					reason
+				};
+			}
 		}
 		return {
 			capability,
@@ -5385,6 +5453,9 @@ try {
 	}).option("skills", {
 		type: "string",
 		describe: "Comma-separated agent skill names (e.g. git-safety,pr-workflow)"
+	}).option("is-template", {
+		type: "boolean",
+		describe: "Mark the new repo as a GitHub template repository"
 	}).option("org", {
 		type: "string",
 		default: "theholocron",
@@ -5395,6 +5466,9 @@ try {
 		describe: "Run pnpm install + holocron setup after bootstrapping (--no-verify skips)"
 	}), async (argv) => {
 		try {
+			const tokens = tokenContext(argv.token);
+			if (!tokens) return;
+			const adminToken = tokens.cliTokens?.["github"] ?? tokens.cliToken;
 			let type = argv.type;
 			let name = argv.name;
 			let description = argv.description;
@@ -5410,6 +5484,7 @@ try {
 			let openSource = argv.openSource;
 			let usesExternalPackages = argv.usesExternalPackages;
 			let skills = parseTopics(argv.skills);
+			const isTemplate = argv.isTemplate;
 			if (!type) type = await select({
 				message: "Template type:",
 				choices: [
@@ -5589,7 +5664,9 @@ try {
 				usesExternalPackages: usesExternalPackages ?? true,
 				topics,
 				skills,
+				isTemplate,
 				org: argv.org,
+				token: adminToken,
 				dryRun: argv.dryRun,
 				noVerify: !argv.verify,
 				cwd: argv.cwd