@theholocron/cli 5.0.0-alpha.144 → 5.0.0-alpha.146

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
-import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, writeFileSync } from "node:fs";
 import { homedir, hostname, tmpdir, userInfo } from "node:os";
 import path, { basename, dirname, join, relative, resolve, sep } from "node:path";
 import { checkbox, confirm, input, select } from "@inquirer/prompts";
@@ -18,8 +18,8 @@ import { createLogger, isCI, parseLogLevel, resolveAxiomFromEnv } from "@theholo
 import chalk from "chalk";
 import ora from "ora";
 import { execFile, execFileSync, spawn, spawnSync } from "node:child_process";
-import { access, copyFile, mkdir, readFile, readdir, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
-import { createHash } from "node:crypto";
+import { access, copyFile, mkdir, readFile, readdir, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { createHash, randomUUID } from "node:crypto";
 import { generateReadme } from "@theholocron/components-doc/markdown";
 import { getClients, getConfigs, getDocs, getPlugins, getSkills, getThemes, getUtils } from "@theholocron/registry-doc";
 import { createGitHubClient } from "@theholocron/github-client";
@@ -6462,6 +6462,55 @@ function runSkillsUpdate(input) {
 	return { status: exitCode === 0 ? "ok" : "fail" };
 }
 //#endregion
+//#region src/utils/find-git-root.ts
+/**
+* Walks up from `startDir` looking for a `.git` entry — a directory for a
+* normal checkout, a file for a worktree/submodule (contains a `gitdir:`
+* pointer, never followed here; its presence is enough to mark the root).
+*
+* `--cwd` picks which `holocron.config.ts` to load, which is NOT
+* necessarily the git repository root — a monorepo subpackage (e.g.
+* `packages/sentinel`) has its own config but no `.git` of its own.
+* Anything inherently repo-wide (`.github/workflows`, `.github/CODEOWNERS`,
+* `turbo.json`, "is this repo a monorepo") must resolve against the real
+* root, not `--cwd`, or it silently writes into a GitHub-invisible nested
+* `.github/` instead (holocron#1014).
+*
+* Falls back to the resolved start dir when no `.git` is found walking all
+* the way to the filesystem root — soft-skip, not a hard failure; every
+* caller already treats `--cwd` itself as the root today, so an
+* unexpected non-git checkout just keeps today's behavior.
+*
+* Resolves `startDir` to an absolute, symlink-free path before walking:
+* a relative `--cwd` (e.g. `"packages/sentinel"`) would otherwise hit
+* `dirname`'s fixed point at `"."` after only two steps, far short of the
+* real root, and a `--cwd` reached through a symlink would walk the
+* symlink's own lexical ancestors instead of the physical directory
+* tree its target actually lives in — in both cases landing on the
+* wrong directory, not genuinely "no `.git` found anywhere."
+*
+* `realpathSync` itself throws when `startDir` doesn't exist on disk at
+* all (a real possibility in tests, which often use a synthetic path
+* like `"/tmp/test"` that's never actually created) — caught and treated
+* the same as "no `.git` found," since this function's whole contract is
+* soft-skip, never a hard failure.
+*/
+function findGitRoot(startDir) {
+	let resolvedStart;
+	try {
+		resolvedStart = realpathSync(startDir);
+	} catch {
+		return startDir;
+	}
+	let dir = resolvedStart;
+	for (;;) {
+		if (existsSync(`${dir}/.git`)) return dir;
+		const parent = dirname(dir);
+		if (parent === dir) return resolvedStart;
+		dir = parent;
+	}
+}
+//#endregion
 //#region src/commands/sync-readme.ts
 const MARKER_INSTALL_START = "<!-- holocron:installation -->";
 const MARKER_INSTALL_END = "<!-- /holocron:installation -->";
@@ -6868,6 +6917,13 @@ async function runSync(input) {
 	const dryRun = input.context.dryRun ?? false;
 	const requestedSteps = input.steps;
 	const steps = [];
+	const gitRoot = findGitRoot(input.context.repoRoot);
+	let resolvedRepoRoot;
+	try {
+		resolvedRepoRoot = realpathSync(input.context.repoRoot);
+	} catch {
+		resolvedRepoRoot = input.context.repoRoot;
+	}
 	logger.info({
 		config: config.name,
 		steps: requestedSteps ?? "all",
@@ -6908,7 +6964,7 @@ async function runSync(input) {
 					const properties = {};
 					const effectivePreset = repo?.protection;
 					if (effectivePreset && effectivePreset !== "none") properties["holocron_branch_protection_level"] = effectivePreset;
-					const isMonorepo = await access(join(input.context.repoRoot, "pnpm-workspace.yaml")).then(() => true).catch(() => false);
+					const isMonorepo = await access(join(gitRoot, "pnpm-workspace.yaml")).then(() => true).catch(() => false);
 					properties["monorepo"] = String(isMonorepo);
 					const manual = repo?.properties ?? {};
 					if (manual.lifecycle) properties["lifecycle"] = manual.lifecycle;
@@ -6916,12 +6972,11 @@ async function runSync(input) {
 					if (manual.runtime_environment) properties["runtime_environment"] = manual.runtime_environment;
 					if (manual.uses_external_packages !== void 0) properties["uses_external_packages"] = String(manual.uses_external_packages);
 					{
-						const rootPackageJson = await readFile(join(input.context.repoRoot, "package.json"), "utf8").then((raw) => JSON.parse(raw)).catch(() => null);
-						const workspacePackages = readWorkspacePackages(input.context.repoRoot);
-						const workspacePackageJsons = await readWorkspacePackageJsons(input.context.repoRoot, workspacePackages);
+						const rootPackageJson = await readFile(join(gitRoot, "package.json"), "utf8").then((raw) => JSON.parse(raw)).catch(() => null);
+						const workspacePackageJsons = await readWorkspacePackageJsons(gitRoot, readWorkspacePackages(gitRoot));
 						properties["holocron_profile"] = deriveProfile({
 							rootPackageJson,
-							repoName: basename(input.context.repoRoot),
+							repoName: basename(gitRoot),
 							isMonorepo,
 							workspacePackageJsons
 						});
@@ -7146,7 +7201,7 @@ async function runSync(input) {
 					if (content === void 0) continue;
 					const step = `sync workflow ${name}${content.includes("workflows/preview.yml@main") ? " (with preview)" : ""}`;
 					steps.push(await runSyncStep("local", step, dryRun, async () => {
-						await writeWorkflowFile(input.context.repoRoot, filename, `${workflowHeader()}${content}`);
+						await writeWorkflowFile(gitRoot, filename, `${workflowHeader()}${content}`);
 					}));
 					print(formatSyncStep(steps[steps.length - 1]));
 				}
@@ -7182,6 +7237,16 @@ async function runSync(input) {
 			}
 		}
 		if (stepName === "turbo") {
+			if (resolvedRepoRoot !== gitRoot) {
+				steps.push({
+					capability: "local",
+					step: "sync turbo.json",
+					status: "skip",
+					message: "--cwd is a monorepo subpackage, not the git root — run from the root to sync turbo.json"
+				});
+				print(formatSyncStep(steps[steps.length - 1]));
+				continue;
+			}
 			const astromechTurbo = createAstromech({
 				cwd: input.context.repoRoot,
 				config: { tasks: config.tasks },
@@ -7198,17 +7263,17 @@ async function runSync(input) {
 				print(formatSyncStep(steps[steps.length - 1]));
 			} else {
 				steps.push(await runSyncStep("local", "sync turbo.json", dryRun, async () => {
-					await writeFile(join(input.context.repoRoot, "turbo.json"), content, "utf8");
+					await writeFile(join(gitRoot, "turbo.json"), content, "utf8");
 				}));
 				print(formatSyncStep(steps[steps.length - 1]));
-				const rootPkgRaw = await readFile(join(input.context.repoRoot, "package.json"), "utf8").catch(() => null);
+				const rootPkgRaw = await readFile(join(gitRoot, "package.json"), "utf8").catch(() => null);
 				const rootPkg = rootPkgRaw ? JSON.parse(rootPkgRaw) : null;
-				const workspaceYaml = await readFile(join(input.context.repoRoot, "pnpm-workspace.yaml"), "utf8").catch(() => "");
+				const workspaceYaml = await readFile(join(gitRoot, "pnpm-workspace.yaml"), "utf8").catch(() => "");
 				const rootScripts = rootPkg?.scripts ?? {};
 				const workspaceFix = astromechTurbo.ensureRootWorkspaceMember(workspaceYaml, rootScripts);
 				if (workspaceFix.changed) {
 					steps.push(await runSyncStep("local", "fix pnpm-workspace.yaml (root workspace member, #692)", dryRun, async () => {
-						await writeFile(join(input.context.repoRoot, "pnpm-workspace.yaml"), workspaceFix.content, "utf8");
+						await writeFile(join(gitRoot, "pnpm-workspace.yaml"), workspaceFix.content, "utf8");
 					}));
 					print(formatSyncStep(steps[steps.length - 1]));
 				}
@@ -7216,7 +7281,7 @@ async function runSync(input) {
 					const depFix = astromechTurbo.ensureTurboDependency(rootPkgRaw, workspaceFix.content);
 					if (depFix.changed) {
 						steps.push(await runSyncStep("local", "add turbo devDependency", dryRun, async () => {
-							await writeFile(join(input.context.repoRoot, "package.json"), depFix.content, "utf8");
+							await writeFile(join(gitRoot, "package.json"), depFix.content, "utf8");
 						}));
 						print(formatSyncStep(steps[steps.length - 1]));
 					}
@@ -7226,7 +7291,10 @@ async function runSync(input) {
 		if (stepName === "wiki") {
 			const result = await runSyncWiki({
 				loaded: input.loaded,
-				context: input.context
+				context: {
+					...input.context,
+					repoRoot: gitRoot
+				}
 			});
 			steps.push(result);
 			print(formatSyncStep(result));
@@ -7379,10 +7447,22 @@ async function updateReadmeDescription(repoRoot, description) {
 	await writeFile(readmePath, lines.join("\n"), "utf8");
 	return true;
 }
+/**
+* Writes via a temp file + rename in the same directory, not a direct
+* `writeFile` — a monorepo subpackage sync can target the same root-level
+* file a root sync (or another subpackage's sync) also writes, and a
+* process killed mid-write would otherwise leave the live GitHub Actions
+* workflow truncated until some later sync happens to restore it. A same-
+* directory rename is atomic on POSIX filesystems, so readers only ever
+* see the old complete content or the new complete content, never a
+* partial write.
+*/
 async function writeWorkflowFile(repoRoot, filename, content) {
 	const dir = join(repoRoot, ".github", "workflows");
 	await mkdir(dir, { recursive: true });
-	await writeFile(join(dir, filename), content, "utf8");
+	const tmpPath = join(dir, `.${filename}.${randomUUID()}.tmp`);
+	await writeFile(tmpPath, content, "utf8");
+	await rename(tmpPath, join(dir, filename));
 }
 //#endregion
 //#region src/telemetry/resolve.ts