yadflow 2.11.0 → 2.11.1

package/CHANGELOG.md

@@ -1,9 +1,9 @@
-# [2.11.0](https://github.com/abdelrahmannasr/yadflow/compare/v2.10.0...v2.11.0) (2026-06-15)
+## [2.11.1](https://github.com/abdelrahmannasr/yadflow/compare/v2.11.0...v2.11.1) (2026-06-15)
 
 
-### Features
+### Bug Fixes
 
-* add yad-sync-repos — switch every connected repo to its default branch + ff pull ([#67](https://github.com/abdelrahmannasr/yadflow/issues/67)) ([0abdcdf](https://github.com/abdelrahmannasr/yadflow/commit/0abdcdf80c8a0a6bfd8c94129fde90f1d35ec365)), closes [#30](https://github.com/abdelrahmannasr/yadflow/issues/30)
+* **doctor:** scope platform-CLI auth probe to the hub host ([#68](https://github.com/abdelrahmannasr/yadflow/issues/68)) ([3cb2801](https://github.com/abdelrahmannasr/yadflow/commit/3cb28011c80645e0ff42e544a9b3d933231daeb3))
 
 # [2.2.0](https://github.com/abdelrahmannasr/yadflow/compare/v2.1.0...v2.2.0) (2026-06-14)
 

package/cli/doctor.mjs

@@ -8,7 +8,7 @@ import { c, log, ok, info, warn, fail, hand, run, has, exists, readJSON, readJSO
 import { VERSION, PROJECT_FILES, DESIGN_TOOLS, TESTING_TOOLS, LEARNING_TOOLS } from './manifest.mjs';
 import { loadLedger, epicRoot } from './epic-state.mjs';
 import { gitHead } from './setup.mjs';
-import { cliFor, validateLogin } from './platform.mjs';
+import { cliFor, validateLogin, hostFromGitUrl } from './platform.mjs';
 
 const MIN_NODE = 18;
 
@@ -68,8 +68,13 @@ export function projectChecks(checks, root) {
       // platform CLI + auth (best-effort; auth probing is the user's own session)
       const cli = cliFor(hub.platform);
       if (cli) {
+        // Scope the auth probe to the hub's own host (derived from git_url). `${cli} auth status`
+        // without --hostname exits non-zero when ANY configured instance fails, so an unrelated
+        // stale login (e.g. a dead gitlab.com token) would falsely flag a working self-hosted hub.
+        const host = hostFromGitUrl(hub.git_url);
+        const authArgs = host ? ['auth', 'status', '--hostname', host] : ['auth', 'status'];
         if (!has(cli)) check(checks, 'platform-cli', 'project', 'warn', `${cli} not found on PATH [YAD-ENV-002]`, `install ${cli} — the gate degrades to file-only without it`);
-        else if (!run(cli, ['auth', 'status']).ok) check(checks, 'platform-cli', 'project', 'warn', `${cli} present but not authenticated [YAD-ENV-002]`, `run \`${cli} auth login\``);
+        else if (!run(cli, authArgs).ok) check(checks, 'platform-cli', 'project', 'warn', `${cli} present but not authenticated${host ? ` for ${host}` : ''} [YAD-ENV-002]`, `run \`${cli} auth login${host ? ` --hostname ${host}` : ''}\``);
         else {
           check(checks, 'platform-cli', 'project', 'ok', `${cli} present and authenticated`);
           // Re-validate each roster login against the hub (warn-only). Skips when a login is already

package/cli/platform.mjs

@@ -17,6 +17,23 @@ export function cliFor(platform) {
   return null;
 }
 
+// Bare host from a git remote URL, for hostname-scoped CLI auth checks. Handles both the
+// `https://[user@]host[:port]/...` and the scp-like `git@host:group/repo.git` forms. Returns
+// null when nothing parses (caller falls back to an unscoped check).
+export function hostFromGitUrl(url = '') {
+  if (typeof url !== 'string' || !url.trim()) return null;
+  const u = url.trim();
+  // scp-like syntax: [user@]host:path — only when there's no scheme and the colon precedes a path.
+  const scp = u.match(/^(?:[^@/]+@)?([^/:]+):(?!\/)/);
+  if (scp && !/^[a-z][a-z0-9+.-]*:\/\//i.test(u)) return scp[1].toLowerCase() || null;
+  try {
+    // URL needs a scheme to parse a host; ssh:// and https:// both work here.
+    return new URL(u).hostname.toLowerCase() || null;
+  } catch {
+    return null;
+  }
+}
+
 // Is the platform CLI present? (auth is the user's own; we don't probe it here.)
 export function platformReady(platform) {
   const cli = cliFor(platform);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "yadflow",
-  "version": "2.11.0",
+  "version": "2.11.1",
   "description": "Yadflow — the gated, team, multi-repo SDLC: author → review → build with a PR-driven review gate and a zero-dependency `yad` CLI (setup, gate, commit, open-pr, ship, repo). A BMAD module + 30 yad-* skills.",
   "type": "module",
   "author": "AbdelRahman Nasr",