ccqa 1.27.0 → 1.28.0

package/dist/bin/ccqa.mjs

@@ -4460,6 +4460,44 @@ function withHubErrors(fn) {
 	};
 }
 //#endregion
+//#region src/cli/repo-local-profiles.ts
+/** Where a named profile's variables lived before profiles moved to the hub. */
+const PROFILES_DIR = ".ccqa/profiles";
+/**
+* Flag `.ccqa/profiles/<name>.env` files the move to hub-stored profiles left
+* behind. Warns, never fails: the run resolved its variables from the right
+* place, so the file's existence is the only thing wrong. A tracked one is
+* called out separately — that is a committed credential, not just dead weight.
+*/
+async function warnRepoLocalProfiles(cwd) {
+	const paths = (await readdir(join(cwd, PROFILES_DIR)).catch(() => [])).filter((name) => name.endsWith(".env")).sort().map((name) => `${PROFILES_DIR}/${name}`);
+	if (paths.length === 0) return;
+	warn(`ccqa does not read repo-local profile files — the values in ${paths.join(", ")} are not in effect for this run. Profile variables come from the hub: register them with \`ccqa hub var set --profile <name>\`, then delete the ${noun(paths.length)}.`);
+	const tracked = await trackedPaths(paths, cwd);
+	if (tracked.length === 0) return;
+	warn(`tracked by git: ${tracked.join(", ")} — a profile file holds credentials, so whatever is in there is committed. Rotate those values; deleting the ${noun(tracked.length)} now does not un-commit them.`);
+}
+function noun(n) {
+	return n === 1 ? "file" : "files";
+}
+/**
+* The subset git reports as tracked. Outside a repository the question has no
+* answer, so stay silent rather than accuse or reassure on a guess.
+*/
+async function trackedPaths(paths, cwd) {
+	try {
+		const { stdout } = await execFileP("git", [
+			"ls-files",
+			"-z",
+			"--",
+			...paths
+		], { cwd });
+		return stdout.split("\0").filter((p) => p !== "");
+	} catch {
+		return [];
+	}
+}
+//#endregion
 //#region src/cli/options.ts
 /**
 * Shared `--language` flag. Every Claude-driven command writes some
@@ -4511,6 +4549,7 @@ async function applyProfileFromOption(opts) {
 * rather than skipping it.
 */
 async function resolveProfileEnv(opts) {
+	await warnRepoLocalProfiles(opts.cwd);
 	if (opts.profile !== void 0) await applyNamedProfile(opts.profile, opts.project, opts.cwd, opts);
 	else await applyDefaultEnv(opts.cwd);
 }
@@ -24086,8 +24125,8 @@ const CLIENT_JS = `
   }
 
   // ── profile switching (per-tab dropdowns) ──────────────────────────────
-  // Profiles scope variables + sessions (a profile is a set of env vars, like
-  // .ccqa/profiles/<name>.env) and, since ADR-0010, the needs-re-run verdict:
+  // Profiles scope variables + sessions (a profile is a set of env vars) and,
+  // since ADR-0010, the needs-re-run verdict:
   // two environments sit at different commits, so that question has no
   // profile-free answer. Prompts are project-wide and runs are cross-profile,
   // so there is still no header-level selector — Secrets and Perspectives each

package/dist/hub-client/index.d.mts

@@ -35,9 +35,9 @@ declare const RunSchema: z.ZodObject<{
     running: "running";
   }>;
   kind: z.ZodDefault<z.ZodEnum<{
-    record: "record";
     run: "run";
     drift: "drift";
+    record: "record";
   }>>;
   drift: z.ZodDefault<z.ZodNullable<z.ZodObject<{
     specs: z.ZodNumber;
@@ -621,9 +621,9 @@ type ReportSpecResult = z.infer<typeof ReportSpecResultSchema>;
 declare const RunReportDataSchema: z.ZodObject<{
   schemaVersion: z.ZodLiteral<1>;
   kind: z.ZodDefault<z.ZodEnum<{
-    record: "record";
     run: "run";
     drift: "drift";
+    record: "record";
   }>>;
   createdAt: z.ZodString;
   runId: z.ZodNullable<z.ZodString>;

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccqa",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "type": "module",
   "description": "Browser test recorder powered by Claude Code and agent-browser",
   "repository": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccqa",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "type": "module",
   "description": "Browser test recorder powered by Claude Code and agent-browser",
   "repository": {
@@ -73,6 +73,7 @@
     "test": "vitest run",
     "test:unit": "vitest run src/",
     "test:e2e": "vitest run tests/e2e",
+    "release:check": "node --experimental-strip-types src/release/check.ts",
     "prepublishOnly": "pnpm typecheck && pnpm test && pnpm build"
   },
   "engines": {