@theholocron/cli 4.4.0 → 4.5.0

package/README.md

@@ -93,6 +93,21 @@ Writes `"holocron": "<holocronScript ?? 'holocron'>"` plus one
 `"<task>": "holocron run <task>"` per runnable task. `syncScripts: false`
 opts out entirely.
 
+### Lint parity
+
+The `lint` task takes an optional `linters` array — one list that drives
+**both** the CI `lint` job (super-linter's `VALIDATE_*` env, baked into the
+generated `.github/workflows/lint.yml` thin caller as a `super-linter-env`
+input) **and** `holocron run lint` locally. Omitted → auto-detected from the
+config files present plus the org always-on set.
+
+```ts
+export default defineConfig({
+  tasks: [{ name: "lint", linters: ["eslint", "prettier", "yamllint", "actionlint", "gitleaks"] }],
+  providers: { source: "github" },
+});
+```
+
 ### Skills installer
 
 `holocron setup` can install shared skills from `@theholocron/skills` into the local repo:

package/dist/cli.mjs

@@ -3,7 +3,7 @@ import { createRequire } from "node:module";
 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import path, { basename, dirname, join, relative, resolve } from "node:path";
 import { checkbox, input, select } from "@inquirer/prompts";
-import { KNOWN_WORKFLOWS, WORKFLOW_CHECK_CONTEXTS, WORKFLOW_TEMPLATES, createAstromech, deriveDeployPaths, extractPreviewConfig, generateCombinedDeployContent, generateThinCallerContent, normalizeWorkflowWith } from "@theholocron/astromech";
+import { KNOWN_WORKFLOWS, WORKFLOW_CHECK_CONTEXTS, WORKFLOW_TEMPLATES, createAstromech, deriveDeployPaths, extractPreviewConfig, generateCombinedDeployContent, generateThinCallerContent, lintThinCallerWith, normalizeWorkflowWith } from "@theholocron/astromech";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
 import { AuthError, ProviderApiError, ProviderApiError as ProviderApiError$1, createRestClient } from "@theholocron/http-client";
@@ -4371,10 +4371,21 @@ async function runSetup(input) {
 			const name = typeof entry === "string" ? entry : entry.name;
 			const rawWith = typeof entry === "object" ? entry.with : void 0;
 			const normalized = rawWith ? normalizeWorkflowWith(rawWith) : void 0;
-			const withOverrides = name === "lint" ? {
-				"enable-auto-commit": true,
-				...normalized ?? {}
-			} : normalized;
+			let withOverrides = normalized;
+			let comments;
+			if (name === "lint") {
+				let rootFiles = [];
+				try {
+					rootFiles = readdirSync(input.context.repoRoot);
+				} catch {}
+				const lint = lintThinCallerWith({
+					explicit: typeof entry === "object" ? entry.linters : void 0,
+					rootFiles,
+					extra: normalized
+				});
+				withOverrides = lint.withOverrides;
+				comments = lint.comments;
+			}
 			const additionalPaths = (typeof entry === "object" ? entry.paths : void 0) ?? (name === "deploy" && rawWith ? deriveDeployPaths(rawWith) : void 0);
 			if (name === "test" && withOverrides) {
 				const runUnit = withOverrides["run-unit"];
@@ -4406,7 +4417,7 @@ async function runSetup(input) {
 				}
 			}
 			steps.push(await runStep("source", `write workflow ${name}`, dryRun, async () => {
-				await source.writeWorkflowFile(`${name}.yml`, `${workflowHeader$2()}${generateThinCallerContent(name, withOverrides, additionalPaths)}`);
+				await source.writeWorkflowFile(`${name}.yml`, `${workflowHeader$2()}${generateThinCallerContent(name, withOverrides, additionalPaths, void 0, comments)}`);
 			}));
 			print(formatStep(steps[steps.length - 1]));
 		}
@@ -5580,10 +5591,17 @@ async function runSync(input) {
 				const name = typeof entry === "string" ? entry : entry.name;
 				const rawWith = typeof entry === "object" ? entry.with : void 0;
 				const normalized = rawWith ? normalizeWorkflowWith(rawWith) : void 0;
-				const withOverrides = name === "lint" ? {
-					"enable-auto-commit": true,
-					...normalized ?? {}
-				} : normalized;
+				let withOverrides = normalized;
+				let comments;
+				if (name === "lint") {
+					const lint = lintThinCallerWith({
+						explicit: typeof entry === "object" ? entry.linters : void 0,
+						rootFiles: safeReaddir(input.context.repoRoot),
+						extra: normalized
+					});
+					withOverrides = lint.withOverrides;
+					comments = lint.comments;
+				}
 				const additionalPaths = (typeof entry === "object" ? entry.paths : void 0) ?? (name === "deploy" && rawWith ? deriveDeployPaths(rawWith) : void 0);
 				if (!KNOWN_WORKFLOWS.has(name)) {
 					steps.push({
@@ -5610,7 +5628,7 @@ async function runSync(input) {
 					}
 				}
 				steps.push(await runSyncStep("local", `sync workflow ${name}`, dryRun, async () => {
-					const content = `${workflowHeader$1()}${generateThinCallerContent(name, withOverrides, additionalPaths)}`;
+					const content = `${workflowHeader$1()}${generateThinCallerContent(name, withOverrides, additionalPaths, void 0, comments)}`;
 					await writeWorkflowFile(input.context.repoRoot, `${name}.yml`, content);
 				}));
 				print(formatSyncStep(steps[steps.length - 1]));
@@ -5703,6 +5721,14 @@ function formatSyncStep(step) {
 	const detail = step.message ? `  (${step.message})` : "";
 	return `    ${icon} ${step.step}${detail}`;
 }
+/** Repo-root filenames for linter auto-detection; `[]` when the dir is unreadable. */
+function safeReaddir(dir) {
+	try {
+		return readdirSync(dir);
+	} catch {
+		return [];
+	}
+}
 async function writePackageJsonField(repoRoot, field, value) {
 	const pkgPath = join(repoRoot, "package.json");
 	let content;