@bluefly/openstandardagents 0.2.5-RC → 0.2.8

package/scripts/README.md

@@ -0,0 +1,103 @@
+# Validation Scripts
+
+Automated validation and maintenance scripts for OSSA.
+
+## Scripts
+
+### validate-all.js
+
+Comprehensive validation suite:
+- Version consistency across packages
+- Schema exports and files
+- Spec directory structure
+- Schema validation
+- Version reference checks
+
+```bash
+npm run validate:all
+```
+
+### fix-schema-formats.js
+
+Automatically fixes unsupported format constraints in JSON schemas.
+
+```bash
+npm run fix:schemas
+```
+
+Removes format constraints like `"format": "uri"` that aren't supported by ajv-cli.
+
+### sync-version.js (website)
+
+Syncs version from package.json to website code.
+
+```bash
+cd website && npm run sync-version
+```
+
+## CI/CD Integration
+
+Validation runs automatically on:
+- Merge requests
+- Commits to main/development
+
+See `.gitlab-ci-validation.yml` for configuration.
+
+## Pre-commit Hook
+
+Install husky to run validations before commit:
+
+```bash
+npm install
+npm run prepare
+```
+
+## Maintenance
+
+### Adding New Validations
+
+Edit `scripts/validate-all.js`:
+
+```javascript
+check('New Check', () => {
+  // Your validation logic
+  if (somethingWrong) {
+    throw new Error('Description');
+  }
+  console.log('✓ Check passed');
+});
+```
+
+### Adding Unsupported Formats
+
+Edit `scripts/fix-schema-formats.js`:
+
+```javascript
+const UNSUPPORTED_FORMATS = ['uri', 'new-format'];
+```
+
+## Troubleshooting
+
+### Schema validation fails
+
+```bash
+npm run fix:schemas
+npm run validate:schema
+```
+
+### Version mismatch
+
+```bash
+# Update root version
+npm version patch
+
+# Sync to website
+cd website && npm run sync-version
+```
+
+### Pre-commit hook not running
+
+```bash
+npm run prepare
+chmod +x .husky/pre-commit
+```

package/scripts/auto-rebase-mrs.ts

@@ -0,0 +1,106 @@
+#!/usr/bin/env tsx
+/**
+ * Auto-rebase all open MRs onto their target branches
+ * Runs in CI or manually to keep MRs up to date
+ */
+
+import { Gitlab } from '@gitbeaker/rest';
+import { execSync } from 'child_process';
+
+const PROJECT_ID = 'blueflyio/openstandardagents';
+const TOKEN = process.env.GITLAB_TOKEN || process.env.SERVICE_ACCOUNT_OSSA_TOKEN || process.env.GITLAB_PUSH_TOKEN;
+
+if (!TOKEN) {
+  console.error('❌ Error: GITLAB_TOKEN or SERVICE_ACCOUNT_OSSA_TOKEN required');
+  process.exit(1);
+}
+
+const gitlab = new Gitlab({
+  host: 'https://gitlab.com',
+  token: TOKEN,
+});
+
+async function rebaseMR(mr: any): Promise<boolean> {
+  const { iid, source_branch, target_branch, merge_status } = mr;
+  
+  console.log(`\n🔄 Rebasing MR !${iid}: ${source_branch} -> ${target_branch}`);
+  
+  try {
+    // Fetch branches
+    execSync(`git fetch origin ${source_branch} ${target_branch}`, { stdio: 'inherit' });
+    
+    // Check if behind
+    const behind = execSync(
+      `git rev-list --count origin/${target_branch}..origin/${source_branch} 2>/dev/null || echo 0`
+    ).toString().trim();
+    
+    if (behind === '0') {
+      console.log(`  ✅ Already up to date`);
+      return true;
+    }
+    
+    console.log(`  ⚠️  ${behind} commits behind, rebasing...`);
+    
+    // Create worktree
+    const worktreePath = `../rebase-${iid}-${source_branch.replace(/\//g, '-')}`;
+    try {
+      execSync(`git worktree remove ${worktreePath}`, { stdio: 'ignore' });
+    } catch {}
+    
+    execSync(`git worktree add ${worktreePath} origin/${source_branch}`, { stdio: 'inherit' });
+    
+    // Rebase
+    try {
+      execSync(`cd ${worktreePath} && git rebase origin/${target_branch}`, { stdio: 'inherit' });
+      
+      // Push
+      execSync(`cd ${worktreePath} && git push origin ${source_branch} --force-with-lease`, { stdio: 'inherit' });
+      
+      console.log(`  ✅ Rebased and pushed successfully`);
+      
+      // Cleanup
+      execSync(`git worktree remove ${worktreePath}`, { stdio: 'ignore' });
+      
+      return true;
+    } catch (error) {
+      console.error(`  ❌ Rebase failed - conflicts may exist`);
+      console.error(`  Worktree: ${worktreePath}`);
+      return false;
+    }
+  } catch (error: any) {
+    console.error(`  ❌ Error: ${error.message}`);
+    return false;
+  }
+}
+
+async function main() {
+  console.log('🔄 Auto-rebasing all open MRs\n');
+  
+  try {
+    const mrs = await gitlab.MergeRequests.all({
+      projectId: PROJECT_ID,
+      state: 'opened',
+      perPage: 20,
+    });
+    
+    console.log(`Found ${mrs.length} open MRs\n`);
+    
+    const results = await Promise.all(mrs.map(rebaseMR));
+    
+    const success = results.filter(Boolean).length;
+    const failed = results.length - success;
+    
+    console.log(`\n✅ Summary:`);
+    console.log(`  Successfully rebased: ${success}`);
+    console.log(`  Failed: ${failed}`);
+    
+    if (failed > 0) {
+      process.exit(1);
+    }
+  } catch (error: any) {
+    console.error('❌ Error:', error.message);
+    process.exit(1);
+  }
+}
+
+main();

package/scripts/batch-dependabot.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+set -e
+
+# Batch merge Dependabot PRs from GitHub
+# Creates a single GitLab MR with all updates
+
+REPO="blueflyio/openstandardagents"
+BRANCH="batch-dependabot-$(date +%Y%m%d)"
+
+echo "🤖 Batching Dependabot PRs..."
+
+# Get all open Dependabot PRs
+DEPENDABOT_PRS=$(gh pr list --repo $REPO --author app/dependabot --state open --json number -q '.[].number')
+
+if [ -z "$DEPENDABOT_PRS" ]; then
+  echo "No Dependabot PRs found"
+  exit 0
+fi
+
+echo "Found PRs: $DEPENDABOT_PRS"
+
+# Create new branch
+git checkout -b $BRANCH main
+
+# Merge each PR
+for PR in $DEPENDABOT_PRS; do
+  echo "Merging PR #$PR..."
+  gh pr checkout $PR
+  git merge --no-ff --no-edit FETCH_HEAD || {
+    echo "⚠️  Conflict in PR #$PR, skipping"
+    git merge --abort
+    continue
+  }
+done
+
+# Push to GitLab
+git push origin $BRANCH
+
+# Create GitLab MR
+glab mr create \
+  --title "chore(deps): batch Dependabot updates $(date +%Y-%m-%d)" \
+  --description "Batched Dependabot PRs from GitHub:
+
+$(echo "$DEPENDABOT_PRS" | while read pr; do
+  echo "- https://github.com/$REPO/pull/$pr"
+done)
+
+**Changes:**
+- Dependency updates from Dependabot
+- Tested in CI before merge
+
+**GitHub PRs will auto-close** when this merges and syncs back." \
+  --source-branch $BRANCH \
+  --target-branch main \
+  --label "dependencies"
+
+echo "✅ Created GitLab MR with batched updates"

package/scripts/configure-gitlab-branch-protection.ts

@@ -0,0 +1,95 @@
+#!/usr/bin/env tsx
+/**
+ * Configure GitLab Branch Protection Rules
+ * Sets up protection for main and development branches via GitLab API
+ */
+
+import { Gitlab } from '@gitbeaker/rest';
+
+const PROJECT_ID = 'blueflyio/openstandardagents';
+const TOKEN = process.env.GITLAB_TOKEN || process.env.SERVICE_ACCOUNT_OSSA_TOKEN || process.env.GITLAB_PUSH_TOKEN;
+
+if (!TOKEN) {
+  console.error('❌ Error: GITLAB_TOKEN or SERVICE_ACCOUNT_OSSA_TOKEN required');
+  process.exit(1);
+}
+
+const gitlab = new Gitlab({
+  host: 'https://gitlab.com',
+  token: TOKEN,
+});
+
+interface ProtectionRule {
+  name: string;
+  push_access_levels?: Array<{ access_level: number }>;
+  merge_access_levels?: Array<{ access_level: number }>;
+  allow_force_push?: boolean;
+  allowed_to_push?: Array<{ user_id?: number; group_id?: number }>;
+  allowed_to_merge?: Array<{ user_id?: number; group_id?: number }>;
+}
+
+async function protectBranch(branch: string, rules: ProtectionRule): Promise<void> {
+  try {
+    console.log(`\n🔒 Protecting branch: ${branch}`);
+    
+    // Check if branch is already protected
+    const existing = await gitlab.ProtectedBranches.all(PROJECT_ID);
+    const isProtected = existing.some((pb: any) => pb.name === branch);
+    
+    if (isProtected) {
+      console.log(`  ⚠️  ${branch} is already protected. Updating...`);
+      await gitlab.ProtectedBranches.unprotect(PROJECT_ID, branch);
+    }
+    
+    // Protect the branch
+    await gitlab.ProtectedBranches.protect(PROJECT_ID, branch, {
+      push_access_levels: [{ access_level: 0 }], // No one can push
+      merge_access_levels: [{ access_level: 40 }], // Maintainers can merge
+      allow_force_push: false,
+    });
+    
+    console.log(`  ✅ ${branch} protected successfully`);
+    console.log(`     - Push: Blocked (no direct pushes)`);
+    console.log(`     - Merge: Maintainers only (via MR)`);
+    console.log(`     - Force push: Disabled`);
+  } catch (error: any) {
+    console.error(`  ❌ Failed to protect ${branch}:`, error.message);
+    throw error;
+  }
+}
+
+async function main() {
+  console.log('🔒 Configuring GitLab Branch Protection Rules\n');
+  console.log(`Project: ${PROJECT_ID}`);
+  console.log(`Token: ${TOKEN.substring(0, 10)}...`);
+  
+  try {
+    // Protect main branch
+    await protectBranch('main', {
+      name: 'main',
+      push_access_levels: [{ access_level: 0 }], // No one
+      merge_access_levels: [{ access_level: 40 }], // Maintainers
+      allow_force_push: false,
+    });
+    
+    // Protect development branch
+    await protectBranch('development', {
+      name: 'development',
+      push_access_levels: [{ access_level: 0 }], // No one
+      merge_access_levels: [{ access_level: 40 }], // Maintainers
+      allow_force_push: false,
+    });
+    
+    console.log('\n✅ Branch protection configured successfully!');
+    console.log('\nProtected branches:');
+    console.log('  - main: No direct pushes, MR required');
+    console.log('  - development: No direct pushes, MR required');
+    console.log('\nView in GitLab:');
+    console.log(`  https://gitlab.com/${PROJECT_ID}/-/settings/repository#protected-branches`);
+  } catch (error: any) {
+    console.error('\n❌ Error configuring branch protection:', error.message);
+    process.exit(1);
+  }
+}
+
+main();

package/scripts/create-issue-helper.ts

@@ -0,0 +1,238 @@
+#!/usr/bin/env tsx
+
+/**
+ * GitLab Issue Creation Helper (Zod Edition)
+ * 
+ * Creates GitLab issues via API with proper validation and error handling.
+ * Uses Zod for runtime validation and type safety.
+ * 
+ * Usage:
+ *   npx tsx scripts/create-issue-helper.ts <title> <milestone-id> <labels> [description-file]
+ * 
+ * Example:
+ *   npx tsx scripts/create-issue-helper.ts "Enhance bin" 3 "enhancement,cli,bin" .gitlab/ISSUE-BIN-ENHANCEMENT.md
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { z } from 'zod';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// ============================================================================
+// Zod Schemas
+// ============================================================================
+
+const ConfigSchema = z.object({
+  gitlabApiUrl: z.string().url(),
+  gitlabToken: z.string().min(1, 'GitLab token is required'),
+  projectId: z.string().min(1, 'Project ID is required'),
+  title: z.string().min(1, 'Title is required'),
+  milestoneId: z.number().int().positive('Milestone ID must be a positive integer'),
+  labels: z.array(z.string().min(1)).min(1, 'At least one label is required'),
+  description: z.string().optional(),
+});
+
+const GitLabIssueResponseSchema = z.object({
+  iid: z.number(),
+  web_url: z.string().url(),
+  title: z.string(),
+  state: z.string(),
+});
+
+const GitLabErrorResponseSchema = z.object({
+  message: z.string().optional(),
+  error: z.string().optional(),
+});
+
+type Config = z.infer<typeof ConfigSchema>;
+type GitLabIssueResponse = z.infer<typeof GitLabIssueResponseSchema>;
+type GitLabErrorResponse = z.infer<typeof GitLabErrorResponseSchema>;
+
+// ============================================================================
+// Configuration
+// ============================================================================
+
+function getConfig(): Config {
+  const args = process.argv.slice(2);
+  
+  if (args.length < 3) {
+    console.error('❌ Usage: tsx scripts/create-issue-helper.ts <title> <milestone-id> <labels> [description-file]');
+    console.error('   Example: tsx scripts/create-issue-helper.ts "Enhance bin" 3 "enhancement,cli,bin" .gitlab/ISSUE-BIN-ENHANCEMENT.md');
+    process.exit(1);
+  }
+
+  const [title, milestoneIdStr, labelsStr, descFile] = args;
+  
+  // Parse milestone ID
+  const milestoneId = parseInt(milestoneIdStr, 10);
+  if (isNaN(milestoneId) || milestoneId <= 0) {
+    console.error(`❌ Invalid milestone ID: ${milestoneIdStr}`);
+    process.exit(1);
+  }
+
+  // Parse labels
+  const labels = labelsStr.split(',').map(l => l.trim()).filter(l => l.length > 0);
+  if (labels.length === 0) {
+    console.error(`❌ No valid labels provided: ${labelsStr}`);
+    process.exit(1);
+  }
+
+  // Read description file if provided
+  let description: string | undefined;
+  if (descFile) {
+    const descPath = path.isAbsolute(descFile) ? descFile : path.join(process.cwd(), descFile);
+    if (!fs.existsSync(descPath)) {
+      console.error(`❌ Description file not found: ${descPath}`);
+      process.exit(1);
+    }
+    description = fs.readFileSync(descPath, 'utf-8');
+  }
+
+  // Get GitLab token (try multiple sources)
+  const gitlabToken = process.env.SERVICE_ACCOUNT_OSSA_TOKEN ||
+                      process.env.SERVICE_ACCOUNT_VERSION_MANAGER_TOKEN ||
+                      process.env.GITLAB_TOKEN ||
+                      process.env.GITLAB_PUSH_TOKEN ||
+                      '';
+
+  if (!gitlabToken) {
+    console.error('❌ No GitLab token found. Please set one of:');
+    console.error('   - SERVICE_ACCOUNT_OSSA_TOKEN');
+    console.error('   - SERVICE_ACCOUNT_VERSION_MANAGER_TOKEN');
+    console.error('   - GITLAB_TOKEN');
+    console.error('   - GITLAB_PUSH_TOKEN');
+    process.exit(1);
+  }
+
+  // Get project ID
+  const projectId = process.env.CI_PROJECT_ID || 
+                    process.env.GITLAB_PROJECT_ID ||
+                    'blueflyio/openstandardagents';
+
+  // Get API URL
+  const gitlabApiUrl = process.env.CI_API_V4_URL ||
+                       process.env.GITLAB_API_URL ||
+                       'https://gitlab.com/api/v4';
+
+  try {
+    return ConfigSchema.parse({
+      gitlabApiUrl,
+      gitlabToken,
+      projectId,
+      title,
+      milestoneId,
+      labels,
+      description,
+    });
+  } catch (error) {
+    if (error instanceof z.ZodError) {
+      console.error('❌ Configuration validation failed:');
+      error.issues.forEach((issue) => {
+        console.error(`   • ${issue.path.join('.')}: ${issue.message}`);
+      });
+    } else {
+      console.error('❌ Configuration error:', error instanceof Error ? error.message : String(error));
+    }
+    process.exit(1);
+  }
+}
+
+// ============================================================================
+// GitLab API
+// ============================================================================
+
+async function createIssue(config: Config): Promise<GitLabIssueResponse> {
+  const projectPath = encodeURIComponent(config.projectId);
+  const url = `${config.gitlabApiUrl}/projects/${projectPath}/issues`;
+
+  const payload = {
+    title: config.title,
+    description: config.description || '',
+    milestone_id: config.milestoneId,
+    labels: config.labels.join(','),
+  };
+
+  try {
+    const response = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'PRIVATE-TOKEN': config.gitlabToken,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify(payload),
+    });
+
+    const responseText = await response.text();
+    let responseData: unknown;
+
+    try {
+      responseData = JSON.parse(responseText);
+    } catch {
+      responseData = responseText;
+    }
+
+    if (!response.ok) {
+      // Try to parse as error response
+      const errorData = GitLabErrorResponseSchema.safeParse(responseData);
+      if (errorData.success) {
+        const error = errorData.data;
+        throw new Error(`GitLab API error: ${error.message || error.error || responseText}`);
+      }
+      throw new Error(`GitLab API error (HTTP ${response.status}): ${responseText}`);
+    }
+
+    // Validate response
+    const issue = GitLabIssueResponseSchema.parse(responseData);
+    return issue;
+  } catch (error) {
+    if (error instanceof z.ZodError) {
+      console.error('❌ Invalid response from GitLab API:');
+      error.issues.forEach((issue) => {
+        console.error(`   • ${issue.path.join('.')}: ${issue.message}`);
+      });
+      throw new Error('Failed to parse GitLab API response');
+    }
+    throw error;
+  }
+}
+
+// ============================================================================
+// Main
+// ============================================================================
+
+async function main(): Promise<void> {
+  console.log('🔧 GitLab Issue Creation Helper (Zod Edition)');
+  console.log('==============================================\n');
+
+  const config = getConfig();
+  
+  console.log(`📋 Configuration:`);
+  console.log(`   Project: ${config.projectId}`);
+  console.log(`   Title: ${config.title}`);
+  console.log(`   Milestone: #${config.milestoneId}`);
+  console.log(`   Labels: ${config.labels.join(', ')}`);
+  console.log(`   Description: ${config.description ? `${config.description.length} chars` : 'none'}`);
+  console.log('');
+
+  try {
+    const issue = await createIssue(config);
+    
+    console.log('✅ Issue created successfully!');
+    console.log(`   Issue: !${issue.iid}`);
+    console.log(`   URL: ${issue.web_url}`);
+    console.log(`   State: ${issue.state}`);
+  } catch (error) {
+    console.error('❌ Failed to create issue:', error instanceof Error ? error.message : String(error));
+    process.exit(1);
+  }
+}
+
+// Run
+main().catch((error) => {
+  console.error('❌ Fatal error:', error instanceof Error ? error.message : String(error));
+  process.exit(1);
+});
+

package/scripts/create-milestone-issue.ts

@@ -0,0 +1,73 @@
+#!/usr/bin/env tsx
+
+/**
+ * Create GitLab Issue for Milestone
+ * Quick script to create issues via GitLab API
+ */
+
+import { readFileSync } from 'fs';
+
+const GITLAB_API_URL = process.env.CI_API_V4_URL || 'https://gitlab.com/api/v4';
+const GITLAB_TOKEN = process.env.SERVICE_ACCOUNT_OSSA_TOKEN || 
+                      process.env.GITLAB_TOKEN || 
+                      process.env.GITLAB_PUSH_TOKEN || '';
+const PROJECT_ID = process.env.CI_PROJECT_ID || 'blueflyio/openstandardagents';
+
+async function createIssue(
+  title: string,
+  description: string,
+  milestoneId: number,
+  labels: string[] = []
+) {
+  if (!GITLAB_TOKEN) {
+    console.error('❌ GITLAB_TOKEN or SERVICE_ACCOUNT_OSSA_TOKEN required');
+    process.exit(1);
+  }
+
+  const projectPath = encodeURIComponent(PROJECT_ID);
+  const url = `${GITLAB_API_URL}/projects/${projectPath}/issues`;
+
+  try {
+    const response = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'PRIVATE-TOKEN': GITLAB_TOKEN,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        title,
+        description,
+        milestone_id: milestoneId,
+        labels: labels.join(','),
+      }),
+    });
+
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Failed to create issue: ${error}`);
+    }
+
+    const issue = await response.json();
+    console.log(`✅ Issue created: !${issue.iid}`);
+    console.log(`   URL: ${issue.web_url}`);
+    return issue.iid;
+  } catch (error) {
+    console.error('❌ Error creating issue:', error);
+    process.exit(1);
+  }
+}
+
+// Main
+const args = process.argv.slice(2);
+if (args.length < 3) {
+  console.log('Usage: tsx scripts/create-milestone-issue.ts <title> <milestone-id> <labels> [description-file]');
+  console.log('Example: tsx scripts/create-milestone-issue.ts "Enhance bin" 3 "enhancement,cli"');
+  process.exit(1);
+}
+
+const [title, milestoneId, labelsStr, descFile] = args;
+const labels = labelsStr.split(',').map(l => l.trim());
+const description = descFile && readFileSync(descFile, 'utf-8') || '';
+
+createIssue(title, description, parseInt(milestoneId), labels);
+

package/scripts/eslint-to-codequality.cjs

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+const fs = require('fs');
+const crypto = require('crypto');
+
+const eslintResults = JSON.parse(fs.readFileSync(process.argv[2] || 'eslint-report.json', 'utf8'));
+
+const codeQualityReport = [];
+
+eslintResults.forEach(file => {
+  file.messages.forEach(msg => {
+    const fingerprint = crypto
+      .createHash('md5')
+      .update(`${file.filePath}:${msg.line}:${msg.ruleId}`)
+      .digest('hex');
+
+    codeQualityReport.push({
+      description: msg.message,
+      check_name: msg.ruleId || 'eslint',
+      fingerprint,
+      severity: msg.severity === 2 ? 'major' : 'minor',
+      location: {
+        path: file.filePath.replace(process.cwd() + '/', ''),
+        lines: {
+          begin: msg.line
+        }
+      }
+    });
+  });
+});
+
+fs.writeFileSync(
+  process.argv[3] || 'gl-code-quality-report.json',
+  JSON.stringify(codeQualityReport, null, 2)
+);