@axis-bootstrap/cli 0.1.2 → 1.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axis-bootstrap/cli",
-  "version": "0.1.2",
+  "version": "1.0.0",
   "description": "AXIS — Harness-first scaffolding & SPDD pipeline CLI for AI-augmented projects",
   "type": "module",
   "repository": {

package/templates/bootstrap-skill/references/PHASE-3-HARNESS.md

@@ -231,6 +231,36 @@ Symlinks on Windows require administrator permission or Developer Mode enabled.
 
 ---
 
+## Step 4.5 — Copilot Code Review (conditional)
+
+**Apply only if the user declared GitHub Copilot in Phase 1.** Skip otherwise.
+
+GitHub Copilot Code Review reads two file shapes (both with a **4000-char hard limit per file**):
+
+1. `.github/copilot-instructions.md` — repo-wide. Already a symlink to `.ai/INSTRUCTIONS.md` created by `setup-ide-links.sh`. Ensure the project purpose and accept/reject criteria appear in the first 4000 chars of INSTRUCTIONS (i.e., near the top — don't bury them past the truncation point).
+2. `.github/instructions/*.instructions.md` — path-targeted. Each file must end in `.instructions.md` and carry an `applyTo:` frontmatter glob.
+
+**Scaffold:**
+
+```bash
+mkdir -p .ai/instructions
+# Copy the .instructions.md template from references/TEMPLATES.md
+# into .ai/instructions/code-review.instructions.md and fill placeholders.
+```
+
+Run `setup-ide-links.sh` — it now symlinks `.github/instructions` → `.ai/instructions/` when the latter exists, so the path-targeted files become visible to Copilot Code Review automatically.
+
+**Validate after scaffolding:**
+
+```bash
+wc -c .ai/instructions/*.instructions.md   # each must be < 4000
+readlink .github/instructions              # must resolve to ../.ai/instructions
+```
+
+**For non-Copilot teams:** skip this step entirely. The `.ai/instructions/` directory is not created, `setup-ide-links.sh`'s conditional skips the symlink, and Copilot configuration is absent — no harm, no noise.
+
+---
+
 ## Step 5 — Smoke Test and Gate
 
 ```bash

package/templates/bootstrap-skill/references/TEMPLATES.md

@@ -147,6 +147,65 @@ paths:
 
 ---
 
+## Copilot Code Review — path-targeted (`.instructions.md`)
+
+Create only if the user declared **GitHub Copilot** in Phase 1. Lives in `.ai/instructions/` (single source of truth) and is exposed to Copilot via `.github/instructions/` symlink (handled by `setup-ide-links.sh`).
+
+**Hard constraint:** Copilot Code Review reads only the first **4000 chars** of each file. Stay under it. Verify with `wc -c .ai/instructions/*.instructions.md`.
+
+```markdown
+---
+applyTo: "src/**,lib/**"
+---
+
+# Code Review — <Project Name>
+
+> Copilot Code Review reads this file when a PR touches a path matching `applyTo`. Keep it under 4000 chars.
+
+## Project purpose
+
+<1-2 sentences from .ai/INSTRUCTIONS.md describing what the project does and for whom.>
+
+A PR is in scope when it serves this purpose. Reject changes that drift.
+
+## Accept when
+
+- It advances the project's stated purpose.
+- It respects the conventions in `.ai/INSTRUCTIONS.md` and `.ai/rules/`.
+- Tests cover new behavior (if `.ai/rules/testing.md` exists).
+- Naming, error handling, and dependencies match the project's rules.
+
+## Reject when
+
+- Runtime features outside the project's domain.
+- Commits secrets, tokens, or `.env*`.
+- Removes tests without justification.
+- Adds dependencies without explanation in the PR description.
+
+## Security checks
+
+- External inputs sanitized before queries / shell / paths.
+- Auth checks before data access / mutation.
+- No secrets in logs.
+- Error messages don't expose internals.
+
+## Output format
+
+Group findings: **blocker** / **warning** / **suggestion**. Each: location · what · why · suggested fix.
+```
+
+**Recommended split for medium/large projects:**
+
+| File | `applyTo:` | Focus |
+| ---- | ---------- | ----- |
+| `code-review.instructions.md` | `src/**,lib/**` (or equivalent) | Project purpose, code quality, security |
+| `tests.instructions.md` | `**/*.test.*,**/*_test.*,tests/**` | Test coverage rules, fixture conventions |
+| `infra.instructions.md` | `.github/**,infra/**,Dockerfile*` | Workflow permissions, secret handling, image hardening |
+
+Stop at 2-3 files. More fragmentation reduces signal.
+
+---
+
 ## workflow.md (rule)
 
 Populated from Phase 1 Block 4. Keep only the sections that apply — empty sections add noise.

package/templates/setup-ide-links.sh

@@ -1,5 +1,9 @@
 #!/usr/bin/env bash
 # setup-ide-links.sh — Idempotent multi-IDE symlink installer for AXIS.
+#
+# Uses `ln -sfn` for directory targets so re-running this script repoints
+# existing symlinks-to-directories instead of nesting a new link inside
+# the old target.
 set -euo pipefail
 cd "$(dirname "$0")"
 
@@ -8,26 +12,31 @@ if [ ! -d .ai ]; then
   exit 1
 fi
 
-ln -sf .ai/INSTRUCTIONS.md AGENTS.md
-ln -sf .ai/INSTRUCTIONS.md CLAUDE.md
+ln -sf  .ai/INSTRUCTIONS.md AGENTS.md
+ln -sf  .ai/INSTRUCTIONS.md CLAUDE.md
 
 mkdir -p .claude
-ln -sf ../.ai/INSTRUCTIONS.md .claude/CLAUDE.md
-ln -sf ../.ai/skills          .claude/skills
-[ -d .ai/rules ] && ln -sf ../.ai/rules .claude/rules || true
+ln -sf  ../.ai/INSTRUCTIONS.md .claude/CLAUDE.md
+ln -sfn ../.ai/skills          .claude/skills
+[ -d .ai/rules ] && ln -sfn ../.ai/rules .claude/rules || true
 
 mkdir -p .cursor
-ln -sf ../.ai/skills .cursor/skills
-[ -d .ai/rules ] && ln -sf ../.ai/rules .cursor/rules || true
+ln -sfn ../.ai/skills .cursor/skills
+[ -d .ai/rules ] && ln -sfn ../.ai/rules .cursor/rules || true
 
 mkdir -p .agents
-ln -sf ../.ai/INSTRUCTIONS.md .agents/AGENTS.md
-ln -sf ../.ai/skills          .agents/skills
-[ -d .ai/rules ] && ln -sf ../.ai/rules .agents/rules || true
+ln -sf  ../.ai/INSTRUCTIONS.md .agents/AGENTS.md
+ln -sfn ../.ai/skills          .agents/skills
+[ -d .ai/rules ] && ln -sfn ../.ai/rules .agents/rules || true
 
 mkdir -p .github
-ln -sf ../.ai/INSTRUCTIONS.md .github/copilot-instructions.md
-ln -sf ../.ai/skills          .github/skills
-[ -d .ai/rules ] && ln -sf ../.ai/rules .github/instructions || true
+ln -sf  ../.ai/INSTRUCTIONS.md .github/copilot-instructions.md
+ln -sfn ../.ai/skills          .github/skills
+# .github/instructions is Copilot Code Review's path-targeted instructions
+# directory. It needs *.instructions.md files with `applyTo:` frontmatter —
+# different format from .ai/rules/. If your project uses Copilot Code Review,
+# axis-bootstrap Phase 3 creates .ai/instructions/ with starter files; this
+# symlink then exposes them. Otherwise the line is a no-op.
+[ -d .ai/instructions ] && ln -sfn ../.ai/instructions .github/instructions || true
 
 echo "✓ symlinks installed"