@theholocron/cli 5.0.0-alpha.128 → 5.0.0-alpha.129

package/README.md

@@ -54,11 +54,11 @@ entirely, straight to the real run, for when you already know what you want.
 
 Every command is tagged with how much of a repo it needs:
 
-| Context      | Needs                                                    | Examples                                                                                     |
-| ------------ | -------------------------------------------------------- | -------------------------------------------------------------------------------------------- |
-| `global`     | the CLI binary alone                                     | `version`, `clone`, `new`, `upgrade node`, `auth set` / `check`, `plugin create`, `skills …` |
-| `repo-aware` | `./holocron.config`, walking up from cwd, no plugins     | `run`, `ci`, `config show`, `sync-readme`                                                    |
-| `workspace`  | the `@theholocron/holocron-plugin-*` packages resolvable | `doctor`, `setup`, `sync`, `secrets sync`, `deploy`                                          |
+| Context      | Needs                                                    | Examples                                                                                                            |
+| ------------ | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
+| `global`     | the CLI binary alone                                     | `version`, `clone`, `new`, `upgrade node`, `auth set` / `check`, `plugin create`, `run lint commit-msg`, `skills …` |
+| `repo-aware` | `./holocron.config`, walking up from cwd, no plugins     | `run`, `run ci`, `config show`, `sync-readme`                                                                       |
+| `workspace`  | the `@theholocron/holocron-plugin-*` packages resolvable | `doctor`, `setup`, `sync`, `secrets sync`, `deploy`                                                                 |
 
 A `workspace` command run from a bare global install (no plugins next to the
 CLI) fails with one actionable line — install the plugins as devDependencies or
@@ -252,7 +252,7 @@ export default defineConfig({
 });
 ```
 
-`holocron setup` writes `.husky/pre-push` (runs `holocron ci` before every
+`holocron setup` writes `.husky/pre-push` (runs `holocron run ci` before every
 push) and `.husky/pre-commit` (runs `gitleaks protect --staged` + `lint-staged`
 before every commit — scoped to staged changes, not the whole history, so a
 past false positive can't permanently block future commits) and sets
@@ -298,7 +298,7 @@ export default defineConfig({
 `@theholocron/astromech`'s `loadTasksConfig` merges it over
 `holocron.config`'s `tasks` — **task arrays concatenate**
 (`holocron.config` first), the dedicated file **wins on scalars**,
-`extraRequiredChecks` concatenate. `holocron run` / `holocron ci` /
+`extraRequiredChecks` concatenate. `holocron run` / `holocron run ci` /
 `holocron setup` / `holocron sync` all read the merged result, so the
 split is transparent. Useful for keeping the capability/provider config
 and the "what this repo runs" manifest in separate files (this repo does).
@@ -343,10 +343,10 @@ delivery.deploy`. A package that doesn't apply is skipped; a failed deploy
 exits non-zero. The shared `delivery.publish` workflow runs it as its own
 `deploy` job after the release job (opt in with `deploy-on-release: true`).
 
-### `holocron ci`
+### `holocron run ci`
 
 ```bash
-holocron ci [--all] [--filter <pkg>] [--dry-run]
+holocron run ci [--all] [--filter <pkg>] [--dry-run]
 ```
 
 Runs the merge-gating checks locally, in CI order, exiting non-zero on the
@@ -466,7 +466,7 @@ export default acmeConfig;
   shape (`const { repo, workflows } = node()` + `repo.requiredChecks` +
   `workflows:`) to the current composed-preset API (`const preset = node()` +
   `...preset` + `tasks:` + `extraRequiredChecks:`). Mechanical transforms only —
-  review the result, then `pnpm install && holocron ci`. `--pins-only` skips
+  review the result, then `pnpm install && holocron run ci`. `--pins-only` skips
   the config migration; `--dry-run` prints without writing.
 
 ## Auth — fine-grained tokens

package/dist/cli.mjs

@@ -330,9 +330,9 @@ const COMMAND_CONTEXTS = {
 	"skills install": "global",
 	"skills remove": "global",
 	"skills update": "global",
-	"lint commit-msg": "global",
+	"run lint commit-msg": "global",
 	run: "repo-aware",
-	ci: "repo-aware",
+	"run ci": "repo-aware",
 	"deploy-on-release": "repo-aware",
 	"config show": "repo-aware",
 	"sync-readme": "repo-aware",
@@ -4521,12 +4521,12 @@ function createIgnoreConfig$1() {
 }
 //#endregion
 //#region src/templates/configs/commit-msg/commit-msg
-var commit_msg_default = "__HOLOCRON_SCRIPT__ lint commit-msg \"$1\"\n";
+var commit_msg_default = "__HOLOCRON_SCRIPT__ run lint commit-msg \"$1\"\n";
 //#endregion
 //#region src/templates/configs/commit-msg/create-config.ts
 const { workflowHeader: workflowHeader$8 } = createHeader({ source: "packages/cli/src/templates/configs/commit-msg/create-config.ts" });
 /**
-* `.husky/commit-msg` — lints the commit message via `holocron lint
+* `.husky/commit-msg` — lints the commit message via `holocron run lint
 * commit-msg` (holocron#789), the real programmatic replacement for
 * shelling out to `commitlint --edit`. Installed by `holocron setup` when
 * hooks are enabled. Same `__HOLOCRON_SCRIPT__` substitution as `pre-push`.
@@ -4623,12 +4623,12 @@ function createConfig$3() {
 }
 //#endregion
 //#region src/templates/configs/pre-push/pre-push
-var pre_push_default = "# Run the merge-gating checks locally before pushing — the same set CI runs.\n# Bypass once with:  git push --no-verify\n\n# CI runners (semantic-release, super-linter auto-commit, bots) push without a\n# built dev environment — the hook has nothing to add there.\n[ -n \"$CI\" ] && exit 0\n\n__HOLOCRON_SCRIPT__ ci\n";
+var pre_push_default = "# Run the merge-gating checks locally before pushing — the same set CI runs.\n# Bypass once with:  git push --no-verify\n\n# CI runners (semantic-release, super-linter auto-commit, bots) push without a\n# built dev environment — the hook has nothing to add there.\n[ -n \"$CI\" ] && exit 0\n\n__HOLOCRON_SCRIPT__ run ci\n";
 //#endregion
 //#region src/templates/configs/pre-push/create-config.ts
 const { workflowHeader: workflowHeader$4 } = createHeader({ source: "packages/cli/src/templates/configs/pre-push/create-config.ts" });
 /**
-* `.husky/pre-push` — runs `holocron ci` (the merge-gating checks, in CI order)
+* `.husky/pre-push` — runs `holocron run ci` (the merge-gating checks, in CI order)
 * before every push. Installed by `holocron setup` when hooks are enabled
 * (default for `protection: "strict"`). `git push --no-verify` bypasses it.
 *
@@ -5647,7 +5647,7 @@ async function runSetup(input) {
 		if (hooksEnabled) {
 			steps.push(await runStep("source", "write .husky/pre-push", dryRun, async () => {
 				await source.writeRepoFile(".husky/pre-push", createConfig$2(config.holocronScript));
-				return "runs `holocron ci` before push — bypass with `git push --no-verify`";
+				return "runs `holocron run ci` before push — bypass with `git push --no-verify`";
 			}));
 			print(formatStep(steps[steps.length - 1]));
 			steps.push(await runStep("source", "write .husky/pre-commit", dryRun, async () => {
@@ -7614,7 +7614,7 @@ async function runSyncGithub(input) {
 *    This applies the mechanical transforms and flags anything that needs a
 *    human eye.
 *
-* After running, `pnpm install && holocron ci`.
+* After running, `pnpm install && holocron run ci`.
 */
 const FETCH_TIMEOUT_MS$1 = 4e3;
 /** Resolve a package's `latest` dist-tag from the npm registry. */
@@ -7681,7 +7681,7 @@ function isLegacyConfig(content) {
 }
 /**
 * Apply the mechanical 7.x → 8.x transforms to a `holocron.config.ts`. Best
-* effort — the result should always be reviewed and run through `holocron ci`.
+* effort — the result should always be reviewed and run through `holocron run ci`.
 */
 function migrateConfig(content) {
 	const transforms = [];
@@ -7807,7 +7807,7 @@ async function runUpgradeDeps(input = {}) {
 	print("");
 	if (bumps.length === 0 && !configMigrated) print("Nothing to do — already up to date.");
 	else {
-		print(`Next: ${dryRun ? "run without --dry-run, then " : ""}\`pnpm install && holocron ci\``);
+		print(`Next: ${dryRun ? "run without --dry-run, then " : ""}\`pnpm install && holocron run ci\``);
 		if (configMigrated) print("      review holocron.config.ts before committing.");
 	}
 	const status = dryRun ? "dry-run" : "ok";
@@ -8050,7 +8050,7 @@ async function lintCommitMessage(message, loaded) {
 //#endregion
 //#region src/commit-lint/lint-commit-msg-file.ts
 /**
-* `holocron lint commit-msg <file>` — a real programmatic replacement for
+* `holocron run lint commit-msg <file>` — a real programmatic replacement for
 * shelling out to `commitlint --edit "$1"` from `.husky/commit-msg`
 * (holocron#789). Matches that CLI's own contract exactly: `file` is a
 * path to the commit message being written (the arg git's `commit-msg`
@@ -8194,9 +8194,10 @@ const numeric = (value) => /^\d+$/.test(value) ? true : "enter a number";
 * The full command surface, hand-maintained in parallel with `cli.ts`'s
 * yargs registrations (this module does not introspect yargs at runtime).
 * `run <task>` is deliberately excluded — it's CI/scripting-oriented, and an
-* interactive prompt in front of it would work against that. `lint
-* commit-msg <file>` is excluded for the same reason: it's invoked
-* exclusively from `.husky/commit-msg "$1"`, never typed by a human.
+* interactive prompt in front of it would work against that. (`run ci` is a
+* concrete, prompt-free entry, so it stays.) `run lint commit-msg <file>` is
+* excluded for the same reason: it's invoked exclusively from
+* `.husky/commit-msg "$1"`, never typed by a human.
 */
 const COMMAND_REGISTRY = [
 	{
@@ -8287,7 +8288,7 @@ const COMMAND_REGISTRY = [
 		supportsDryRun: true
 	},
 	{
-		name: "ci",
+		name: "run ci",
 		description: "Run the merge-gating checks locally, in CI order — 'will CI pass?'",
 		positionals: [],
 		supportsDryRun: true
@@ -9165,7 +9166,7 @@ try {
 		describe: "Repo coords (\"owner/name\"). Defaults to plugin-specific resolution."
 	}).option("hooks", {
 		type: "boolean",
-		describe: "Install git hooks (.husky/pre-push → holocron ci). Default: on for protection:'strict'. --no-hooks to skip."
+		describe: "Install git hooks (.husky/pre-push → holocron run ci). Default: on for protection:'strict'. --no-hooks to skip."
 	}), async (argv) => {
 		const tokens = tokenContext(argv.token);
 		if (!tokens) return;
@@ -9454,13 +9455,13 @@ try {
 			},
 			...argv.steps && argv.steps.length > 0 ? { steps: argv.steps } : {}
 		})).summary.fail > 0) process.exitCode = 1;
-	}).command("run <task> [job] [passthrough..]", "Run a task locally (test, typecheck, lint, build, audit) — figures out turbo / the tool / the package manager", (y) => y.positional("task", {
+	}).command("run <task> [job] [passthrough..]", "Run a task locally (test, typecheck, lint, build, audit) — figures out turbo / the tool / the package manager. `run ci` runs every merge-gating check; `run lint commit-msg <file>` lints a commit message.", (y) => y.positional("task", {
 		type: "string",
 		demandOption: true,
-		describe: "Task name (test, typecheck, lint, build, audit). See `holocron run --help`."
+		describe: "Task name (test, typecheck, lint, build, audit, or `ci` for the merge-gating suite). See `holocron run --help`."
 	}).positional("job", {
 		type: "string",
-		describe: "Sub-job within the task (e.g. `holocron run audit performance`). Omit to run every job. Only `audit` has jobs today."
+		describe: "Sub-job within the task (e.g. `holocron run audit performance`, `holocron run lint commit-msg <file>`). Omit to run every job."
 	}).positional("passthrough", {
 		type: "string",
 		array: true,
@@ -9469,11 +9470,43 @@ try {
 		type: "boolean",
 		default: false,
 		describe: "Fail (exit 1) if this repo has no such task, instead of skipping."
+	}).option("all", {
+		type: "boolean",
+		default: false,
+		describe: "With `run ci`: run every `ci: true` task, not just the required ones."
 	}).option("filter", {
 		type: "string",
 		describe: "turbo --filter=<pkg> passthrough (monorepo)."
 	}), async (argv) => {
-		const { logger } = buildCliLogger(argv, { command: "run" });
+		const { logger } = buildCliLogger(argv, { command: argv.task === "ci" ? "run ci" : argv.task === "lint" && argv.job === "commit-msg" ? "run lint commit-msg" : "run" });
+		const passthrough = [...argv.passthrough ?? [], ...argv["--"] ?? []];
+		if (argv.task === "lint" && argv.job === "commit-msg") {
+			const file = passthrough[0];
+			if (!file) {
+				reportError("run lint commit-msg: missing <file> (the commit message file git passes as $1).");
+				process.exitCode = 1;
+				return;
+			}
+			const result = await lintCommitMsgFile(file, argv.cwd);
+			if (!result.valid) {
+				for (const violation of result.violations) console.error(`✖ ${violation.rule}: ${violation.message}`);
+				process.exitCode = 1;
+			}
+			return;
+		}
+		if (argv.task === "ci") {
+			const ciConfig = await loadTasksConfig(argv.cwd).catch(() => void 0);
+			if (createAstromech({
+				cwd: argv.cwd,
+				logger,
+				config: ciConfig
+			}).ci({
+				dryRun: argv.dryRun,
+				scope: argv.all ? "all" : "required",
+				...argv.filter ? { filter: argv.filter } : {}
+			}).status === "fail") process.exitCode = 1;
+			return;
+		}
 		const config = await loadTasksConfig(argv.cwd).catch(() => void 0);
 		const report = createAstromech({
 			cwd: argv.cwd,
@@ -9481,31 +9514,12 @@ try {
 			config
 		}).run(argv.task, {
 			...argv.job !== void 0 ? { job: argv.job } : {},
-			passthrough: [...argv.passthrough ?? [], ...argv["--"] ?? []],
+			passthrough,
 			dryRun: argv.dryRun,
 			required: argv.required,
 			...argv.filter ? { filter: argv.filter } : {}
 		});
 		if (report.status === "fail" || report.status === "unknown") process.exitCode = 1;
-	}).command("ci", "Run the merge-gating checks locally, in CI order — 'will CI pass?'", (y) => y.option("all", {
-		type: "boolean",
-		default: false,
-		describe: "Run every `ci: true` task, not just the required ones."
-	}).option("filter", {
-		type: "string",
-		describe: "turbo --filter=<pkg> passthrough (monorepo)."
-	}), async (argv) => {
-		const { logger } = buildCliLogger(argv, { command: "ci" });
-		const config = await loadTasksConfig(argv.cwd).catch(() => void 0);
-		if (createAstromech({
-			cwd: argv.cwd,
-			logger,
-			config
-		}).ci({
-			dryRun: argv.dryRun,
-			scope: argv.all ? "all" : "required",
-			...argv.filter ? { filter: argv.filter } : {}
-		}).status === "fail") process.exitCode = 1;
 	}).command("deploy-on-release", "Deploy every workspace package whose delivery.deploy task is `on: release` — run by the delivery.publish workflow's deploy job", (y) => y.option("channel", {
 		type: "string",
 		default: "",
@@ -9525,17 +9539,7 @@ try {
 			dryRun: argv.dryRun,
 			print: (line) => console.log(line)
 		})).status === "fail") process.exitCode = 1;
-	}).command("lint", "Lint content locally against the org's shared rules", (y) => y.command("commit-msg <file>", "Lint a commit message file — matches `commitlint --edit`'s own contract, for use from .husky/commit-msg", (yy) => yy.positional("file", {
-		type: "string",
-		demandOption: true,
-		describe: "Path to the commit message file (git's commit-msg hook passes this as $1)."
-	}), async (argv) => {
-		const result = await lintCommitMsgFile(argv.file, argv.cwd);
-		if (!result.valid) {
-			for (const violation of result.violations) console.error(`✖ ${violation.rule}: ${violation.message}`);
-			process.exitCode = 1;
-		}
-	}), () => {}).command("sync-github", "Sync workflow templates and composite actions to theholocron/.github", (y) => y.option("repo", {
+	}).command("sync-github", "Sync workflow templates and composite actions to theholocron/.github", (y) => y.option("repo", {
 		type: "string",
 		default: "theholocron/.github",
 		describe: "Target org/repo (default: theholocron/.github)"