@theholocron/cli 4.10.2 → 4.11.0

package/README.md

@@ -133,6 +133,21 @@ Writes `"holocron": "<holocronScript ?? 'holocron'>"` plus one
 `"<task>": "holocron run <task>"` per runnable task. `syncScripts: false`
 opts out entirely.
 
+### `holocron run`
+
+```bash
+holocron run <task> [job] [--required] [--filter <pkg>] [--dry-run] [-- <passthrough>]
+```
+
+Runs one task locally — resolving turbo vs the package manager vs the tool
+itself. A `job` argument targets a sub-job of tasks that have them: `holocron
+run audit performance` runs Lighthouse CI, `holocron run audit knip` runs Knip,
+`holocron run audit` (no job) runs every audit sub-job in declared order. A
+sub-job whose tool isn't installed, or that has no local equivalent
+(`bundle-size`), is skipped with a note — `--required` makes that a failure. For
+a task with no sub-jobs the `job` slot is the first passthrough arg
+(`holocron run build src/`).
+
 ### `holocron ci`
 
 ```bash
@@ -146,7 +161,9 @@ first failure — the "will my PR be green?" pre-flight, and what the
 `--all` forces the full set; `--filter` is a `turbo --filter=` passthrough.
 Order comes from the `CI_ORDER` constant in `@theholocron/astromech`
 (`typecheck → lint → test → build → …`). Tasks with no local equivalent
-(`audit`, `codeql`, `deploy`) are reported as enforced-in-CI, never failures.
+(`codeql`, `deploy`) are reported as enforced-in-CI, never failures; `audit`
+expands into its sub-jobs (each under its own `audit / …` check context)
+unless the repo ships its own `"audit"` script.
 
 ### Lint parity
 
@@ -306,9 +323,11 @@ all three. See the [telemetry guide](https://docs.theholocron.dev/holocron/telem
   capability config packages, builds the capability registry
 - `src/cli.ts` — yargs entry, dispatches subcommands. `holocron run` / `ci` are
   delegated to [`@theholocron/astromech`](../astromech) (`createAstromech`).
-  `holocron sync-github` pushes the reusable `workflow_call` implementations +
-  composite actions from `astromech.reusableTemplates()` to `theholocron/.github`
-  (a pure sync target — never hand-edit its `.github/workflows/*`).
+  `holocron sync` / `holocron setup` write each repo's `.github/workflows/*.yml`
+  thin callers from `astromech.thinCallers()`; `holocron sync-github` pushes the
+  reusable `workflow_call` implementations + composite actions from
+  `astromech.reusableTemplates()` to `theholocron/.github` (a pure sync target —
+  never hand-edit its `.github/workflows/*`).
 - `src/commands/` — `setup`, `sync`, `doctor`, `deploy`, `secret set`,
   `secrets sync`, `npm publish-initial`, `sync-github`, `upgrade node`,
   `plugin create`, `auth`

package/dist/cli.mjs

@@ -3,7 +3,7 @@ import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import path, { basename, dirname, join, relative, resolve } from "node:path";
 import { checkbox, input, select } from "@inquirer/prompts";
-import { KNOWN_WORKFLOWS, createAstromech, deriveDeployPaths, extractPreviewConfig, generateCombinedDeployContent, generateThinCallerContent, lintThinCallerWith, normalizeWorkflowWith, reusableTemplates } from "@theholocron/astromech";
+import { KNOWN_WORKFLOWS, createAstromech, extractPreviewConfig, reusableTemplates } from "@theholocron/astromech";
 import { loadTasksConfig } from "@theholocron/astromech/config";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
@@ -4385,31 +4385,16 @@ async function runSetup(input) {
 	if (loader.has("source") && tasks && tasks.length > 0) {
 		const source = loader.get("source");
 		print(style.step("workflows"));
+		const files = createAstromech({
+			cwd: input.context.repoRoot,
+			config: { tasks },
+			orgContext: {
+				org: config.org,
+				domain: config.domain
+			}
+		}).thinCallers();
 		for (const entry of tasks) {
 			const name = typeof entry === "string" ? entry : entry.name;
-			const rawWith = typeof entry === "object" ? entry.with : void 0;
-			const normalized = rawWith ? normalizeWorkflowWith(rawWith) : void 0;
-			let withOverrides = normalized;
-			let comments;
-			if (name === "lint") {
-				let rootFiles = [];
-				try {
-					rootFiles = readdirSync(input.context.repoRoot);
-				} catch {}
-				const lint = lintThinCallerWith({
-					explicit: typeof entry === "object" ? entry.linters : void 0,
-					rootFiles,
-					extra: normalized
-				});
-				withOverrides = lint.withOverrides;
-				comments = lint.comments;
-			}
-			const additionalPaths = (typeof entry === "object" ? entry.paths : void 0) ?? (name === "deploy" && rawWith ? deriveDeployPaths(rawWith) : void 0);
-			if (name === "test" && withOverrides) {
-				const runUnit = withOverrides["run-unit"];
-				const runStorybook = withOverrides["run-storybook"];
-				if (runUnit === false && runStorybook === false) throw new ConfigError("test workflow: at least one of \"run-unit\" or \"run-storybook\" must be true. Library repos use run-unit: true; UI/Storybook repos use run-storybook: true.");
-			}
 			if (!KNOWN_WORKFLOWS.has(name)) {
 				steps.push({
 					capability: "source",
@@ -4420,22 +4405,12 @@ async function runSetup(input) {
 				print(formatStep(steps[steps.length - 1]));
 				continue;
 			}
-			if (name === "deploy" && rawWith) {
-				const previewCfg = extractPreviewConfig(rawWith, {
-					org: config.org,
-					domain: config.domain
-				});
-				if (previewCfg) {
-					const paths = additionalPaths;
-					steps.push(await runStep("source", "write workflow deploy (with preview)", dryRun, async () => {
-						await source.writeWorkflowFile("deploy.yml", `${workflowHeader$1()}${generateCombinedDeployContent(withOverrides, paths, previewCfg)}`);
-					}));
-					print(formatStep(steps[steps.length - 1]));
-					continue;
-				}
-			}
-			steps.push(await runStep("source", `write workflow ${name}`, dryRun, async () => {
-				await source.writeWorkflowFile(`${name}.yml`, `${workflowHeader$1()}${generateThinCallerContent(name, withOverrides, additionalPaths, void 0, comments)}`);
+			const filename = name === "deploy" ? "deploy.yml" : `${name}.yml`;
+			const content = files.get(filename);
+			if (content === void 0) continue;
+			const step = name === "deploy" && content.includes("workflows/preview.yml@main") ? "write workflow deploy (with preview)" : `write workflow ${name}`;
+			steps.push(await runStep("source", step, dryRun, async () => {
+				await source.writeWorkflowFile(filename, `${workflowHeader$1()}${content}`);
 			}));
 			print(formatStep(steps[steps.length - 1]));
 		}
@@ -5647,51 +5622,36 @@ async function runSync(input) {
 					message: "no tasks configured"
 				});
 				print(formatSyncStep(steps[steps.length - 1]));
-			} else for (const entry of taskEntries) {
-				const name = typeof entry === "string" ? entry : entry.name;
-				const rawWith = typeof entry === "object" ? entry.with : void 0;
-				const normalized = rawWith ? normalizeWorkflowWith(rawWith) : void 0;
-				let withOverrides = normalized;
-				let comments;
-				if (name === "lint") {
-					const lint = lintThinCallerWith({
-						explicit: typeof entry === "object" ? entry.linters : void 0,
-						rootFiles: safeReaddir(input.context.repoRoot),
-						extra: normalized
-					});
-					withOverrides = lint.withOverrides;
-					comments = lint.comments;
-				}
-				const additionalPaths = (typeof entry === "object" ? entry.paths : void 0) ?? (name === "deploy" && rawWith ? deriveDeployPaths(rawWith) : void 0);
-				if (!KNOWN_WORKFLOWS.has(name)) {
-					steps.push({
-						capability: "local",
-						step: `sync workflow ${name}`,
-						status: "skip",
-						message: `unknown workflow "${name}" — no template available`
-					});
-					print(formatSyncStep(steps[steps.length - 1]));
-					continue;
-				}
-				if (name === "deploy" && rawWith) {
-					const previewCfg = extractPreviewConfig(rawWith, {
+			} else {
+				const files = createAstromech({
+					cwd: input.context.repoRoot,
+					config: { tasks: config.tasks },
+					orgContext: {
 						org: config.org,
 						domain: config.domain
-					});
-					if (previewCfg) {
-						steps.push(await runSyncStep("local", "sync workflow deploy (with preview)", dryRun, async () => {
-							const content = `${workflowHeader()}${generateCombinedDeployContent(withOverrides, additionalPaths, previewCfg)}`;
-							await writeWorkflowFile(input.context.repoRoot, "deploy.yml", content);
-						}));
+					}
+				}).thinCallers();
+				for (const entry of taskEntries) {
+					const name = typeof entry === "string" ? entry : entry.name;
+					if (!KNOWN_WORKFLOWS.has(name)) {
+						steps.push({
+							capability: "local",
+							step: `sync workflow ${name}`,
+							status: "skip",
+							message: `unknown workflow "${name}" — no template available`
+						});
 						print(formatSyncStep(steps[steps.length - 1]));
 						continue;
 					}
+					const filename = name === "deploy" ? "deploy.yml" : `${name}.yml`;
+					const content = files.get(filename);
+					if (content === void 0) continue;
+					const step = `sync workflow ${name}${name === "deploy" && content.includes("workflows/preview.yml@main") ? " (with preview)" : ""}`;
+					steps.push(await runSyncStep("local", step, dryRun, async () => {
+						await writeWorkflowFile(input.context.repoRoot, filename, `${workflowHeader()}${content}`);
+					}));
+					print(formatSyncStep(steps[steps.length - 1]));
 				}
-				steps.push(await runSyncStep("local", `sync workflow ${name}`, dryRun, async () => {
-					const content = `${workflowHeader()}${generateThinCallerContent(name, withOverrides, additionalPaths, void 0, comments)}`;
-					await writeWorkflowFile(input.context.repoRoot, `${name}.yml`, content);
-				}));
-				print(formatSyncStep(steps[steps.length - 1]));
 			}
 		}
 		if (stepName === "scripts") if (config.syncScripts === false) {
@@ -5781,14 +5741,6 @@ function formatSyncStep(step) {
 	const detail = step.message ? `  (${step.message})` : "";
 	return `    ${icon} ${step.step}${detail}`;
 }
-/** Repo-root filenames for linter auto-detection; `[]` when the dir is unreadable. */
-function safeReaddir(dir) {
-	try {
-		return readdirSync(dir);
-	} catch {
-		return [];
-	}
-}
 async function writePackageJsonField(repoRoot, field, value) {
 	const pkgPath = join(repoRoot, "package.json");
 	let content;
@@ -6983,10 +6935,13 @@ try {
 			},
 			...argv.steps && argv.steps.length > 0 ? { steps: argv.steps } : {}
 		})).summary.fail > 0) process.exitCode = 1;
-	}).command("run <task> [passthrough..]", "Run a task locally (test, typecheck, lint, build) — figures out turbo / the tool / the package manager", (y) => y.positional("task", {
+	}).command("run <task> [job] [passthrough..]", "Run a task locally (test, typecheck, lint, build, audit) — figures out turbo / the tool / the package manager", (y) => y.positional("task", {
 		type: "string",
 		demandOption: true,
-		describe: "Task name (test, typecheck, lint, build). See `holocron run --help`."
+		describe: "Task name (test, typecheck, lint, build, audit). See `holocron run --help`."
+	}).positional("job", {
+		type: "string",
+		describe: "Sub-job within the task (e.g. `holocron run audit performance`). Omit to run every job. Only `audit` has jobs today."
 	}).positional("passthrough", {
 		type: "string",
 		array: true,
@@ -7006,6 +6961,7 @@ try {
 			logger,
 			config
 		}).run(argv.task, {
+			...argv.job !== void 0 ? { job: argv.job } : {},
 			passthrough: argv.passthrough ?? [],
 			dryRun: argv.dryRun,
 			required: argv.required,
@@ -7424,8 +7380,8 @@ try {
 		let extra = [];
 		try {
 			const raw = readFileSync(join(argv.cwd, "holocron.config.json"), "utf8");
-			const upgradeNode = JSON.parse(raw).upgrade?.node;
-			if (Array.isArray(upgradeNode?.extra)) extra = upgradeNode.extra;
+			const extraRaw = JSON.parse(raw).upgrade?.node?.extra;
+			if (Array.isArray(extraRaw)) extra = extraRaw;
 		} catch {}
 		const report = await runUpgradeNode({
 			to: argv.to,