@theholocron/cli 3.7.0 → 3.8.0

package/dist/cli.mjs

@@ -889,7 +889,21 @@ function generateHolocronConfig(opts) {
 	if (opts.homepage) lines.push(`\thomepage: ${JSON.stringify(opts.homepage)},`);
 	const topics = opts.topics?.length ? opts.topics : [];
 	const hasRuntimeOverride = opts.runtimeEnvironment != null && opts.runtimeEnvironment !== "node";
-	if (topics.length > 0 || hasRuntimeOverride) {
+	if (opts.org != null) {
+		const repoName = `${opts.org}/${opts.name}`;
+		lines.push(`\trepo: {`);
+		lines.push(`\t\tname: ${JSON.stringify(repoName)},`);
+		lines.push(`\t\tteams: [{ slug: "gatekeepers", permission: "maintain" }],`);
+		lines.push(`\t\ttopics: ${JSON.stringify(topics)},`);
+		lines.push(`\t\t...repo,`);
+		if (opts.protection && opts.protection !== "strict") lines.push(`\t\tprotection: ${JSON.stringify(opts.protection)},`);
+		const propParts = [];
+		if (hasRuntimeOverride) propParts.push(`runtime_environment: ${JSON.stringify(opts.runtimeEnvironment)}`);
+		if (opts.openSource === false) propParts.push(`open_source: false`);
+		if (opts.usesExternalPackages === false) propParts.push(`uses_external_packages: false`);
+		if (propParts.length > 0) lines.push(`\t\tproperties: { ...repo.properties, ${propParts.join(", ")} },`);
+		lines.push(`\t},`);
+	} else if (topics.length > 0 || hasRuntimeOverride) {
 		lines.push(`\trepo: {`);
 		if (topics.length > 0) lines.push(`\t\ttopics: ${JSON.stringify(topics)},`);
 		lines.push(`\t\t...repo,`);
@@ -917,6 +931,7 @@ function generateHolocronConfig(opts) {
 		lines.push(`\t},`);
 	} else lines.push(`\tproviders,`);
 	if (opts.agent && opts.agent !== "none") lines.push(`\tagent: ${JSON.stringify(opts.agent)},`);
+	if (opts.skills?.length) lines.push(`\tskills: ${JSON.stringify(opts.skills)},`);
 	lines.push(`});`);
 	lines.push(``);
 	return lines.join("\n");
@@ -1029,11 +1044,14 @@ async function runNew(input) {
 	} catch {}
 	print(`  Detected template slug: ${templateSlug}`);
 	print(`  Patching files…`);
-	const filesPatched = patchFiles(repoDir, deriveVariants(templateSlug, input.name), input.description, input.homepage, input.runtimeEnvironment, print, readFn, writeFn, walkFn);
+	const variants = deriveVariants(templateSlug, input.name);
+	variants.unshift([`theholocron/${templateSlug}`, `${org}/${input.name}`]);
+	const filesPatched = patchFiles(repoDir, variants, input.description, input.homepage, input.runtimeEnvironment, print, readFn, writeFn, walkFn);
 	print(`  ${filesPatched.length} file${filesPatched.length === 1 ? "" : "s"} patched`);
 	const configContent = generateHolocronConfig({
 		name: input.name,
 		type: input.type,
+		org,
 		description: input.description,
 		homepage: input.homepage,
 		vaultProvider: input.vaultProvider,
@@ -1042,7 +1060,11 @@ async function runNew(input) {
 		deploymentProvider: input.deploymentProvider,
 		agent: input.agent,
 		runtimeEnvironment: input.runtimeEnvironment,
-		topics: input.topics
+		protection: input.protection,
+		openSource: input.openSource,
+		usesExternalPackages: input.usesExternalPackages,
+		topics: input.topics,
+		skills: input.skills
 	});
 	writeFn(path.join(repoDir, "holocron.config.ts"), configContent);
 	print(`  Generated holocron.config.ts`);
@@ -4024,7 +4046,7 @@ var setup_node_default = "name: Setup Node\ndescription: Install pnpm and Node.j
 var audit_default = "name: Audit\n\non: # yamllint disable-line rule:truthy\n  workflow_call:\n    inputs:\n      build-script:\n        description: Script to build and upload bundle stats to Codecov\n        type: string\n        required: false\n        default: pnpm build\n      run-knip:\n        description: Run Knip to detect unused files, exports, and dependencies\n        type: boolean\n        required: false\n        default: false\n      knip-script:\n        description: Script that invokes Knip (must exit non-zero on findings)\n        type: string\n        required: false\n        default: pnpm run audit\n    secrets:\n      CODECOV_TOKEN:\n        required: false\n      TURBO_TOKEN:\n        required: false\n\njobs:\n  bundle-size:\n    name: Audit the bundle size\n    permissions:\n      contents: read\n    runs-on: ubuntu-latest\n    timeout-minutes: 15\n    concurrency:\n      group: audit-${{ github.ref }}\n      cancel-in-progress: true\n    env:\n      TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}\n      TURBO_TEAM: ${{ vars.TURBO_TEAM }}\n    steps:\n      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0\n        name: Checkout repository\n\n      - uses: theholocron/.github/.github/actions/setup@main\n        name: Setup\n\n      - run: eval \"$BUILD_SCRIPT\"\n        name: Build and upload bundle stats\n        env:\n          BUILD_SCRIPT: ${{ inputs.build-script }}\n          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}\n\n  knip:\n    name: Knip\n    if: ${{ inputs.run-knip }}\n    permissions:\n      contents: read\n    runs-on: ubuntu-latest\n    timeout-minutes: 10\n    concurrency:\n      group: knip-${{ github.ref }}\n      cancel-in-progress: true\n    env:\n      TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}\n      TURBO_TEAM: ${{ vars.TURBO_TEAM }}\n    steps:\n      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0\n        name: Checkout repository\n        with:\n          persist-credentials: false\n\n      - uses: theholocron/.github/.github/actions/setup@main\n        name: Setup\n\n      - run: eval \"$KNIP_SCRIPT\"\n        name: Run Knip\n        env:\n          KNIP_SCRIPT: ${{ inputs.knip-script }}\n";
 //#endregion
 //#region src/templates/workflows/bookkeeping.yml
-var bookkeeping_default = "name: Bookkeeping\n\non: # yamllint disable-line rule:truthy\n  workflow_call:\n    inputs:\n      configuration-path:\n        description: Path to the labeler configuration file in the calling repo\n        type: string\n        required: false\n        default: .github/labeler.yml\n\njobs:\n  label:\n    name: Apply Labels\n    permissions:\n      contents: read\n      pull-requests: write\n    runs-on: ubuntu-latest\n    timeout-minutes: 5\n    concurrency:\n      group: bookkeeping-${{ github.event.pull_request.number || github.event.issue.number }}\n      cancel-in-progress: true\n    steps:\n      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0\n        with:\n          sparse-checkout: ${{ inputs.configuration-path || '.github/labeler.yml' }}\n          sparse-checkout-cone-mode: false\n\n      - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4\n        if: ${{ github.event_name == 'pull_request' && hashFiles(inputs.configuration-path || '.github/labeler.yml') != '' }}\n        # v3.4 bundles Node 20; allow it to run under Actions' current default.\n        env:\n          ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true\n        with:\n          # Fall back to default path when triggered directly (not via workflow_call)\n          # because inputs.* defaults only apply on workflow_call events.\n          configuration-path: ${{ inputs.configuration-path || '.github/labeler.yml' }}\n          include-title: 1\n          include-body: 0\n          sync-labels: 1\n          enable-versioned-regex: 0\n          repo-token: ${{ github.token }}\n";
+var bookkeeping_default = "name: Bookkeeping\n\non: # yamllint disable-line rule:truthy\n  workflow_call:\n    inputs:\n      configuration-path:\n        description: Path to the labeler configuration file in the calling repo\n        type: string\n        required: false\n        default: .github/labeler.yml\n\njobs:\n  label:\n    name: Apply Labels\n    permissions:\n      contents: read\n      issues: write\n      pull-requests: write\n    runs-on: ubuntu-latest\n    timeout-minutes: 5\n    concurrency:\n      group: bookkeeping-${{ github.event.pull_request.number || github.event.issue.number }}\n      cancel-in-progress: true\n    steps:\n      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0\n        with:\n          sparse-checkout: ${{ inputs.configuration-path || '.github/labeler.yml' }}\n          sparse-checkout-cone-mode: false\n\n      - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4\n        if: ${{ github.event_name == 'pull_request' && hashFiles(inputs.configuration-path || '.github/labeler.yml') != '' }}\n        # v3.4 bundles Node 20; allow it to run under Actions' current default.\n        env:\n          ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true\n        with:\n          # Fall back to default path when triggered directly (not via workflow_call)\n          # because inputs.* defaults only apply on workflow_call events.\n          configuration-path: ${{ inputs.configuration-path || '.github/labeler.yml' }}\n          include-title: 1\n          include-body: 0\n          sync-labels: 1\n          enable-versioned-regex: 0\n          repo-token: ${{ github.token }}\n";
 //#endregion
 //#region src/templates/workflows/codeql.yml
 var codeql_default = "name: CodeQL\n\non: # yamllint disable-line rule:truthy\n  workflow_call:\n    inputs:\n      language:\n        description: CodeQL language to analyze\n        type: string\n        required: false\n        default: javascript-typescript\n\njobs:\n  analyze:\n    name: Analyze (${{ inputs.language }})\n    permissions:\n      actions: read\n      contents: read\n      security-events: write\n    runs-on: ubuntu-latest\n    timeout-minutes: 45\n    # Do not cancel in-progress security scans.\n    concurrency:\n      group: codeql-${{ github.ref }}\n      cancel-in-progress: false\n    steps:\n      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0\n        name: Checkout repository\n\n      - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0\n        name: Initialize CodeQL\n        with:\n          languages: ${{ inputs.language }}\n\n      - uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0\n        name: Autobuild\n\n      - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0\n        name: Analyze\n        with:\n          category: /language:${{ inputs.language }}\n";
@@ -5205,6 +5227,18 @@ try {
 	}).option("topics", {
 		type: "string",
 		describe: "Comma-separated repo topics (e.g. typescript,nodejs)"
+	}).option("protection", {
+		type: "string",
+		describe: "Branch protection level: strict, balanced, minimal"
+	}).option("open-source", {
+		type: "boolean",
+		describe: "Whether the repo is open source (default: true)"
+	}).option("uses-external-packages", {
+		type: "boolean",
+		describe: "Whether the repo calls external APIs or services (default: true)"
+	}).option("skills", {
+		type: "string",
+		describe: "Comma-separated agent skill names (e.g. git-safety,pr-workflow)"
 	}).option("org", {
 		type: "string",
 		default: "theholocron",
@@ -5226,6 +5260,10 @@ try {
 			let agent = argv.agent;
 			let runtimeEnvironment = argv.runtimeEnvironment;
 			let topics = parseTopics(argv.topics);
+			let protection = argv.protection;
+			let openSource = argv.openSource;
+			let usesExternalPackages = argv.usesExternalPackages;
+			let skills = parseTopics(argv.skills);
 			if (!type) type = await select({
 				message: "Template type:",
 				choices: [
@@ -5341,6 +5379,44 @@ try {
 				}]
 			});
 			if (topics.length === 0) topics = parseTopics(await input({ message: "Topics (comma-separated, optional):" }));
+			if (!protection) protection = await select({
+				message: "Branch protection:",
+				choices: [
+					{
+						name: "strict    — required reviews + passing checks",
+						value: "strict"
+					},
+					{
+						name: "balanced  — required reviews, flexible checks",
+						value: "balanced"
+					},
+					{
+						name: "minimal   — branch protection only",
+						value: "minimal"
+					}
+				]
+			});
+			if (openSource === void 0) openSource = await select({
+				message: "Open source?",
+				choices: [{
+					name: "Yes",
+					value: "yes"
+				}, {
+					name: "No",
+					value: "no"
+				}]
+			}) === "yes";
+			if (usesExternalPackages === void 0) usesExternalPackages = await select({
+				message: "Uses external APIs or services?",
+				choices: [{
+					name: "Yes",
+					value: "yes"
+				}, {
+					name: "No",
+					value: "no"
+				}]
+			}) === "yes";
+			if (skills.length === 0) skills = parseTopics(await input({ message: "Agent skills (comma-separated, optional):" }));
 			if (!type) {
 				console.error("new: template type is required");
 				process.exitCode = 1;
@@ -5362,7 +5438,11 @@ try {
 				deploymentProvider: deploymentProvider ?? "none",
 				agent: agent ?? "claude",
 				runtimeEnvironment: runtimeEnvironment ?? "node",
+				protection: protection ?? "strict",
+				openSource: openSource ?? true,
+				usesExternalPackages: usesExternalPackages ?? true,
 				topics,
+				skills,
 				org: argv.org,
 				dryRun: argv.dryRun,
 				noVerify: !argv.verify,