rvlib-shipkit 2.0.0 → 2.0.1

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.0.1
+
+- **`sk fleet --update --major` crosses the major again.** Each repo's guarded run now stays in its own process (`SHIPKIT_NO_HOME`), because a check the home answered never saw `SHIPKIT_ALLOW_MAJOR` and refused the breaking jump, naming the very command that was running.
+
 ## 2.0.0
 
 - **A clean commit prints one line**, `ok: N commit gate(s) clean`. A gate that fails still prints whole, and a WARN or a waived hit inside a passing gate still prints.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "rvlib-shipkit",
-    "version": "2.0.0",
+    "version": "2.0.1",
     "funding": "https://github.com/sponsors/rvion",
     "description": "All-in-one repo companion: ci gate (task DAG), auto-discovered health checks, release-contract fulfillness, asks queue, md-wiki tools, asset atelier, live tui",
     "license": "MIT",

package/src/fleet/update-fleet.ts

@@ -30,6 +30,16 @@ export type FleetUpdateOpts = {
 /** returns how many repos did not update. A repo whose gate refused (dirty
  *  tree, frozen, a lease held elsewhere) is a REPORT, not a failure of the
  *  command: SK005 defers on purpose */
+/** the env of one repo's guarded run. It stays in its own process
+ *  (SHIPKIT_NO_HOME): a check the home daemon answers never sees this env, so
+ *  --major would be dropped on the way */
+export function fleetEnv(base: Record<string, string | undefined>, major: boolean): Record<string, string> {
+    const env: Record<string, string> = Object.fromEntries(Object.entries(base).filter((e): e is [string, string] => e[1] != null && e[0] !== 'SHIPKIT_SELF_UPDATED' && e[0] !== ALLOW_MAJOR_ENV))
+    env['SHIPKIT_NO_HOME'] = '1'
+    if (major) env[ALLOW_MAJOR_ENV] = '1'
+    return env
+}
+
 export async function updateFleet(behind: FleetRepo[], o: FleetUpdateOpts): Promise<number> {
     const w = o.print
     let failed = 0
@@ -61,8 +71,7 @@ export async function updateFleet(behind: FleetRepo[], o: FleetUpdateOpts): Prom
         // way around it: SK005 has no autofix, so the binary refuses the id.
         // The re-exec guard is dropped so the repo's own startup self-update
         // can still fire, and --major travels as the one env the policy reads.
-        const env: Record<string, string> = Object.fromEntries(Object.entries(process.env).filter((e): e is [string, string] => e[1] != null && e[0] !== 'SHIPKIT_SELF_UPDATED' && e[0] !== ALLOW_MAJOR_ENV))
-        if (o.major) env[ALLOW_MAJOR_ENV] = '1'
+        const env = fleetEnv(process.env, o.major === true)
         const res = await spawnWithTimeout(['bun', cli, 'check', '--fresh'], { cwd: r.dir, env, timeoutMs: o.timeoutMs ?? 600_000 })
         // judge by what node_modules carries now (the pin, for a linked dep),
         // never by the exit code or a printed line: the code covers every rule