rvlib-shipkit 2.0.0 → 2.0.2

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 2.0.2
+
+- **SK001 clears its own lint shadow.** A `lint` or `fmt` script that routes through `shipkit ci` beside the bunfig section of the same name is deleted by the repair, with its `:raw` half, so `bun lint` runs the built-in. A script whose body is a tool stays named for a human.
+
+## 2.0.1
+
+- **`sk fleet --update --major` crosses the major again.** Each repo's guarded run now stays in its own process (`SHIPKIT_NO_HOME`), because a check the home answered never saw `SHIPKIT_ALLOW_MAJOR` and refused the breaking jump, naming the very command that was running.
+
 ## 2.0.0
 
 - **A clean commit prints one line**, `ok: N commit gate(s) clean`. A gate that fails still prints whole, and a WARN or a waived hit inside a passing gate still prints.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "rvlib-shipkit",
-    "version": "2.0.0",
+    "version": "2.0.2",
     "funding": "https://github.com/sponsors/rvion",
     "description": "All-in-one repo companion: ci gate (task DAG), auto-discovered health checks, release-contract fulfillness, asks queue, md-wiki tools, asset atelier, live tui",
     "license": "MIT",

package/src/checks/SK001-package-json-shape.check.ts

@@ -282,6 +282,19 @@ export const packageJsonShape = check({
         // none, so scaffolding this into a repo without any turns the gate red
         // on work the fixer itself did. a fixer must never manufacture a failure.
         if (pkg.scripts['test'] == null && hasTestFiles(testFiles(c))) { pkg.scripts['test'] = 'bun test'; changes.push(`script 'test' added`) }
+        // a script beside its declared bunfig section only shadows the built-in.
+        // A routed body and its `<id>:raw` are house wiring, so they go. A tool
+        // body is a repo's own answer and stays named
+        const bunfig = c.read('bunfig.toml')
+        for (const n of ['lint', 'fmt'] as const) {
+            const body = pkg.scripts[n]
+            if (body == null || !bunfigDeclares(bunfig, n)) continue
+            if (!routesToShipkit(body)) { notes.push(`'${n}' shadows \`bun ${n}\` — its body is a tool, left for a human`); continue }
+            delete pkg.scripts[n]
+            const gone: string[] = [n]
+            if (pkg.scripts[rawName(n)] != null) { delete pkg.scripts[rawName(n)]; gone.push(rawName(n)) }
+            changes.push(`script ${gone.map((g) => `'${g}'`).join(' and ')} deleted (bunfig.toml [${n}] runs \`bun ${n}\`)`)
+        }
         // ONE WAY IN, last so it also routes whatever this pass just added:
         // the tool body slides to `<id>:raw` and `<id>` becomes the shipkit
         // call. Both keys keep their place in the file, so the diff a human

package/src/fleet/update-fleet.ts

@@ -30,6 +30,16 @@ export type FleetUpdateOpts = {
 /** returns how many repos did not update. A repo whose gate refused (dirty
  *  tree, frozen, a lease held elsewhere) is a REPORT, not a failure of the
  *  command: SK005 defers on purpose */
+/** the env of one repo's guarded run. It stays in its own process
+ *  (SHIPKIT_NO_HOME): a check the home daemon answers never sees this env, so
+ *  --major would be dropped on the way */
+export function fleetEnv(base: Record<string, string | undefined>, major: boolean): Record<string, string> {
+    const env: Record<string, string> = Object.fromEntries(Object.entries(base).filter((e): e is [string, string] => e[1] != null && e[0] !== 'SHIPKIT_SELF_UPDATED' && e[0] !== ALLOW_MAJOR_ENV))
+    env['SHIPKIT_NO_HOME'] = '1'
+    if (major) env[ALLOW_MAJOR_ENV] = '1'
+    return env
+}
+
 export async function updateFleet(behind: FleetRepo[], o: FleetUpdateOpts): Promise<number> {
     const w = o.print
     let failed = 0
@@ -61,8 +71,7 @@ export async function updateFleet(behind: FleetRepo[], o: FleetUpdateOpts): Prom
         // way around it: SK005 has no autofix, so the binary refuses the id.
         // The re-exec guard is dropped so the repo's own startup self-update
         // can still fire, and --major travels as the one env the policy reads.
-        const env: Record<string, string> = Object.fromEntries(Object.entries(process.env).filter((e): e is [string, string] => e[1] != null && e[0] !== 'SHIPKIT_SELF_UPDATED' && e[0] !== ALLOW_MAJOR_ENV))
-        if (o.major) env[ALLOW_MAJOR_ENV] = '1'
+        const env = fleetEnv(process.env, o.major === true)
         const res = await spawnWithTimeout(['bun', cli, 'check', '--fresh'], { cwd: r.dir, env, timeoutMs: o.timeoutMs ?? 600_000 })
         // judge by what node_modules carries now (the pin, for a linked dep),
         // never by the exit code or a printed line: the code covers every rule