@ethlete/agent-rules 0.1.0-next.7 → 0.1.0-next.9

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @ethlete/agent-rules
 
+## 0.1.0-next.9
+
+### Minor Changes
+
+- [`ae165cc`](https://github.com/ethlete-io/ethdk/commit/ae165cc4123e3f2abaa88c5cfd8262b13aac81d1) Thanks [@TomTomB](https://github.com/TomTomB)! - New `api-source` skill reads the API repo of the app you are in, from the local config's new `apiRepoPaths` map (`{ "hub": "../fut-hub-backend" }`).
+
+- [`f132d0b`](https://github.com/ethlete-io/ethdk/commit/f132d0b64e322c5823c9f50adeedecf388c5aa65) Thanks [@TomTomB](https://github.com/TomTomB)! - `ethlete-agents timetrack` reaches Jira through the running Timetrack app, so no repository holds a
+  token any more — the `jira` credentials in the local config and the `JIRA_*` variables are gone.
+
+- [#3066](https://github.com/ethlete-io/ethdk/pull/3066) [`fef4586`](https://github.com/ethlete-io/ethdk/commit/fef45868b10b0a0f01efff741958d65d9e405a31) Thanks [@github-actions](https://github.com/apps/github-actions)! - `git-flow`: add `conformingNameFor()`, which names what a non-conforming branch should be renamed to, and `git-flow repair` now handles a keyless branch it previously refused.
+
+- [#3066](https://github.com/ethlete-io/ethdk/pull/3066) [`fef4586`](https://github.com/ethlete-io/ethdk/commit/fef45868b10b0a0f01efff741958d65d9e405a31) Thanks [@github-actions](https://github.com/apps/github-actions)! - `git-flow`: export `featureBranchesFor()` and `nestedSpecFor()`, so a host can plan a nested branch without running the CLI.
+
+## 0.1.0-next.8
+
+### Patch Changes
+
+- [#3058](https://github.com/ethlete-io/ethdk/pull/3058) [`7074ffc`](https://github.com/ethlete-io/ethdk/commit/7074ffcb99812faed82a4e32fa3f8a1a43fcaf9d) Thanks [@github-actions](https://github.com/apps/github-actions)! - The `sdk-docs` skill points agents at the docs site's `llms.txt` index and the `.md` suffix on any page URL, so a page can be found and read without guessing a URL from the hardcoded domain list.
+
+- [#3058](https://github.com/ethlete-io/ethdk/pull/3058) [`86fce5b`](https://github.com/ethlete-io/ethdk/commit/86fce5b87770ef4d5b069e59fec745eae93fda7b) Thanks [@github-actions](https://github.com/apps/github-actions)! - The `sdk-source` skill points at `apps/storybook/`, the SDK repo's renamed Storybook host.
+
 ## 0.1.0-next.7
 
 ### Minor Changes

package/README.md

@@ -196,25 +196,25 @@ exist already - `start` says so rather than inventing a parent. `--of <branch>`
 parent explicitly, `--hotfix` branches off production, `--release <date>` makes a release
 branch, and `--subject <text>` skips Jira entirely.
 
-Jira needs a host, an email and an API token. Only the host belongs in the committed
-config; the two secrets come from `JIRA_EMAIL` / `JIRA_API_TOKEN` or from the gitignored
-local config.
+The issue is read through the Timetrack app - see [Jira, through Timetrack](#jira-through-timetrack).
+No repository holds a Jira credential, so the only thing the committed config still says about
+Jira is how an issue type becomes a branch type:
 
 ```json
 {
   "jira": {
-    "host": "https://your-team.atlassian.net",
-    "subjectField": "customfield_10050",
     "typeByIssueType": { "Bug": "fix" }
   }
 }
 ```
 
-- **`subjectField`** - the field holding a Story's branch subject. Without it the summary
-  is slugified, which is a paraphrase rather than the agreed subject.
 - **`typeByIssueType`** - the branch type per Jira issue type; anything unlisted becomes
   `feat`. `--type` overrides it per call.
 
+The branch subject comes from the instance's own subject field, which Timetrack resolves
+because the field id is a property of the instance rather than of this repo. An issue that
+sets no subject falls back to its summary, and the printed plan says which of the two it used.
+
 ### `repair` - renaming a branch that does not conform
 
 `git-flow repair [ref]` derives the conforming name (`--key FIP-2900` when the old name
@@ -232,6 +232,44 @@ Everything is checked before the first mutation, and it refuses rather than half
 - If a retarget fails halfway, the old branch is still there and the recovery commands are
   printed.
 
+## Jira, through Timetrack
+
+A Jira token in every repository is a secret nobody can rotate. There is one on this machine
+instead, in the Timetrack app's keychain entry, and every repository asks the running app:
+
+```bash
+npx ethlete-agents timetrack status                # is it reachable, and what does it hold?
+npx ethlete-agents timetrack issue FIP-2177        # summary, type, parent, branch subject
+npx ethlete-agents timetrack search "password"     # open issues of the picked projects
+npx ethlete-agents timetrack project               # which project does this repo log into?
+npx ethlete-agents timetrack create --summary "…"  # file a ticket with the instance's settings
+npx ethlete-agents timetrack log --issue FIP-2177 --minutes 45
+```
+
+`--json` prints the raw answer instead of lines. `git-flow start` uses the same channel.
+
+**How it connects.** The app binds a loopback socket and writes its port and a fresh token
+into `agent.json` in its own data directory (`~/.local/share/io.ethlete.timetrack/` on Linux,
+`~/Library/Application Support/…` on macOS, `%APPDATA%\…` on Windows), readable by its owner
+alone. The token lives no longer than the run, so a caller left over from an earlier one is
+refused rather than trusted, and a request carrying an `Origin` header is refused outright -
+a page the user happens to have open must not reach Jira through a port it guessed.
+`TIMETRACK_AGENT_DISCOVERY` names the file for a machine that keeps it elsewhere.
+
+**What the app answers, not this package.** The instance, the credentials, the picked
+projects, the subject field and the ticket shape are all settings there. That is what makes
+`create` file a ticket indistinguishable from one the app filed, and it is why none of them
+appear in a repo's config any more.
+
+**`log` writes to the day, not to Tempo.** It adds the same row the app's own timeline draws
+for work nothing observed, and the user reviews the day before syncing it. A worklog posted
+behind the review would double-book against whatever the evidence already proposed for that
+hour.
+
+**When the app is not running** every command says so and exits non-zero. There is no
+fallback to an environment variable on purpose - a fallback is how the per-repo secret comes
+back.
+
 ## Hooks (opt-in)
 
 Hooks run commands on the developer's machine, so none are emitted by default - opt in
@@ -328,7 +366,7 @@ differ per developer, without touching any committed file:
 {
   "disableHooks": true,
   "sdkSourcePath": "/absolute/path/to/ethlete-sdk",
-  "jira": { "email": "you@example.com", "token": "…" }
+  "apiRepoPaths": { "hub": "../fut-hub-backend" }
 }
 ```
 
@@ -338,19 +376,22 @@ differ per developer, without touching any committed file:
 - **`disableAutoHandoffSave`** - keeps the `context-warning` hook's tiered warnings but
   drops the auto-mode escalation: at the critical tier it recommends `/ethlete-handoff`
   instead of saving the handoff file itself.
-- **`jira`** - the credentials `git-flow start` needs (`host`, `email`, `token`). This is
-  the one place in a repo a secret may sit, and only because the file is gitignored;
-  `JIRA_EMAIL` / `JIRA_API_TOKEN` in the environment are the alternative and win over it.
 - **`sdkSourcePath`** - a local `ethlete-sdk` checkout. The `sdk-source` and
   `sdk-local-build` skills read it when the agent needs the SDK's own sources, or has to
   build the SDK and install it here through a `file:` dependency. A relative path is
   resolved from the repo root.
+- **`apiRepoPaths`** - one checkout per app, keyed by the app's project name
+  (`{ "hub": "../fut-hub-backend" }`). The `api-source` skill reads it to confirm a
+  response shape, a status code or an enum in the API's own source instead of guessing it
+  from the client. Relative paths resolve from the repo root; a map with a single entry is
+  used for whatever app is in play.
 
 Everything in this file is read at runtime, never by `sync`: the generated files stay
 identical on every machine and in CI, which is what lets `check` diff them. That is also
 why the file takes nothing beyond these keys - `sync`/`check` warn about unknown keys,
-and about an `sdkSourcePath` that is missing or is not an SDK checkout. Add the filename
-to your repo's `.gitignore`.
+about an `sdkSourcePath` that is missing or is not an SDK checkout, and about an
+`apiRepoPaths` entry that is not a directory. Add the filename to your repo's
+`.gitignore`.
 
 ## Authoring content
 

package/content/skills/api-source/SKILL.md

@@ -0,0 +1,118 @@
+---
+name: api-source
+description: How to read the source of the API an app in this repo talks to, from a local backend checkout named in ethlete-agents.config.local.json. Read when a response shape, a status code, an error body, an enum or an auth rule has to be confirmed rather than guessed - and never edit that checkout as part of work in this repo.
+kind: skill
+scope: consumer
+---
+
+# Reading the API source
+
+The client's types describe what the frontend _expects_. When the two disagree, the
+server is right, so a question about the contract is answered in the API repository -
+not by reading the frontend's own models harder.
+
+Reach for the checkout when:
+
+- a response arrives with a field, a shape or a `null` the frontend types do not allow
+- you need the exact status code, error body or validation message for a failure path
+- an enum, a permission or a filter parameter has to match the server's list exactly
+- a request fails and you cannot tell whether the client or the server is wrong
+- you are about to report or fix something in the API itself
+
+Do not read it to design frontend code that the API does not serve yet. An endpoint in
+the checkout is not deployed until the API team ships it.
+
+## 1. Resolve the checkout for your app
+
+One repository can hold several apps, each with its own API, so the paths are a map from
+app to checkout. They are per machine, so the map lives in the gitignored
+`ethlete-agents.config.local.json` at the repo root:
+
+```json
+{
+  "apiRepoPaths": {
+    "hub": "../fut-hub-backend"
+  }
+}
+```
+
+Read that file before searching anywhere. The rules:
+
+- **The key is the app** as this repo names it - the workspace project name, which is
+  normally also the folder under `apps/`. Match the app you are working in.
+- **A relative path resolves from the repo root**, not from the app folder.
+- **One entry means one API.** If the map holds a single entry, use it whatever it is
+  called.
+- **No matching entry - stop and ask.** Do not guess a sibling folder and do not clone
+  the repository. Say which app you needed the API for and offer the snippet above; the
+  file is gitignored, so adding it changes nothing for anyone else.
+
+Without a checkout, fall back to what the running API tells you: the generated API
+description if the project serves one (`/openapi.json`, `/swagger`, `/api/doc`), and the
+real response body of the call you are debugging.
+
+## 2. Check the branch before you read anything
+
+A checkout sits on whatever branch its developer left it on, and the code you would
+quote must be the code that serves this app:
+
+```bash
+git -C <apiRepoPath> fetch --quiet     # read-only, safe
+git -C <apiRepoPath> status -sb        # branch, ahead/behind, dirty files
+```
+
+**The state to expect is the API's own development branch, up to date with its remote.**
+Anything else, and you are describing a different API than the one the app calls.
+
+When it is not in that state, **say so and ask** - never switch, pull, stash or reset it
+yourself:
+
+- **On another branch** - name it and ask. A feature branch may be exactly the endpoint
+  you were sent to look at, but it is not what the app talks to today.
+- **Behind its remote** - report how far. The behaviour you are about to call a bug may
+  already be fixed upstream.
+- **Dirty** - it holds someone's work in progress. Say so rather than quoting it as API
+  behaviour.
+
+## 3. The checkout is not the environment the app calls
+
+Even a clean, current checkout is only the source. The app talks to a deployed
+environment, which can lag it:
+
+- Read the app's API base URL from its environment config, and say which environment
+  your answer is about.
+- When the source and the observed response disagree, **the observed response wins** for
+  what the app has to handle today. Report the difference instead of writing client code
+  against the newer source.
+
+## 4. Search it, don't read it whole
+
+The stack is whatever the API team chose, so search by the thing you already know - the
+path, the field name, the error message - rather than by an expected file layout:
+
+```bash
+rg -n "api/v1/matches" <apiRepoPath> --glob '!*test*'   # the route
+rg -n "kickoffAt" <apiRepoPath>                         # a field of the payload
+rg -n "MATCH_NOT_FOUND" <apiRepoPath>                   # an error code you received
+```
+
+Two things to find first, because they answer most questions on their own:
+
+- **The API description** the project generates or checks in (OpenAPI, Swagger, GraphQL
+  schema, `.http` files). It is the contract, and it is cheaper to read than the code.
+- **The serializer, resource or DTO** for the entity - the field list the client sees,
+  which is usually a subset of the database model, and the place where a name is
+  rewritten between the two.
+
+The API's own tests describe intended behaviour more directly than the implementation:
+they name the status code and the body for each case.
+
+## 5. The checkout is read-only from here
+
+It is a different repository with its own branch, review and release process. Never edit
+it while working on a task in this repo, and never change its git state without being
+asked (`fetch` is fine).
+
+When the fix belongs in the API, say so precisely: the endpoint, the field, and the
+behaviour it should have. Then handle the API as it is today - a client workaround for a
+server bug is a decision for the user, and it needs a comment naming what it waits on.

package/content/skills/git-flow/SKILL.md

@@ -26,6 +26,10 @@ npx ethlete-agents git-flow repair <branch>       # rename a non-conforming one,
 `--dry-run` to see the plan alone. It refuses on a dirty working tree, and a Task nests under
 its parent Story's branch, so that branch has to exist first.
 
+It reads the issue through the running Timetrack app, which holds this machine's only Jira
+credentials - see the `timetrack` skill. If it reports that the app is not running, ask the
+user to start it. `--subject <text>` names a branch without reading Jira at all.
+
 ## The five shapes
 
 | Shape                                                                             | Issue | Branch from                    | MR targets                                                       |

package/content/skills/sdk-docs/SKILL.md

@@ -43,8 +43,15 @@ Component domains under `/components/`:
 `tabs` `text-inputs` `time-picker` `toggletip` `tooltip`
 
 So the table guide is `{%docsBaseUrl%}/components/table`, the menu guide
-`{%docsBaseUrl%}/components/menu`, and so on. When a name isn't in that list, start at
-`{%docsBaseUrl%}/components/` and follow the sidebar rather than guessing a URL.
+`{%docsBaseUrl%}/components/menu`, and so on.
+
+That list is a snapshot. The site itself is machine-readable, so fetch rather than guess:
+
+- `{%docsBaseUrl%}/llms.txt` - every page's title and path as of the last deploy. Use it
+  when a name isn't in the list above, or to check the list hasn't drifted.
+- Append `.md` to any page URL - `{%docsBaseUrl%}/components/button.md` - to get raw
+  markdown instead of the rendered page. Prefer this over `/llms-full.txt`, which is the
+  entire site in one ~1 MB file.
 
 ## How to use them
 

package/content/skills/sdk-source/SKILL.md

@@ -94,7 +94,7 @@ Paths are relative to the checkout root:
 | `libs/cdk/`                         | The predecessor UI toolkit, maintenance mode - only for code still on it    |
 | `libs/eslint-plugin/src/`           | The lint rules, including the message text explaining each one              |
 | `apps/docs/`                        | The markdown behind {%docsBaseUrl%}                                         |
-| `apps/playground/`                  | The Storybook app - stories also live next to each component                |
+| `apps/storybook/`                   | The Storybook app - stories also live next to each component                |
 
 Inside a component domain: `<name>.component.ts` with its `.css` next to it,
 `<name>.imports.ts` (the imports array to spread into a consumer component),

package/content/skills/styleguide/STYLEGUIDE.md

@@ -37,7 +37,7 @@ Run your lint task with `--fix` - the rules below are enforced (and mostly auto-
 | Max two function parameters                                                                                                       | `max-params`                                                                                                                                                                                                        |
 | No `import type` / inline `type` specifiers                                                                                       | `ethlete/no-type-only-import`                                                                                                                                                                                       |
 | Generic params `T`-prefixed (`TValue`), never bare `T`                                                                            | `@typescript-eslint/naming-convention`                                                                                                                                                                              |
-| No `async`/`await` - use RxJS                                                                                                     | `no-restricted-syntax`                                                                                                                                                                                              |
+| No `async`/`await` - use RxJS                                                                                                     | `ethlete/no-async-await`                                                                                                                                                                                            |
 | Arrow fns standalone; methods in classes; no arrow-fn class props; no `function` keyword                                          | `no-restricted-syntax`                                                                                                                                                                                              |
 | Blank line before `return` in multi-line guard clauses                                                                            | `ethlete/guard-return-newline`                                                                                                                                                                                      |
 | No trivially-inferable explicit return types                                                                                      | `ethlete/no-trivial-return-type`                                                                                                                                                                                    |

package/content/skills/timetrack/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: timetrack
+description: How to reach Jira from any repo through the running Timetrack app - look up an issue, search for one, ask which project a repo logs into, file a ticket, or add a worklog row. Read whenever a task needs Jira data or a Jira write, and never put a Jira token in a repo.
+kind: skill
+scope: both
+---
+
+# Reaching Jira through Timetrack
+
+**No repository holds a Jira token.** The Timetrack desktop app holds one set of credentials
+in this machine's keychain, and every repository asks it:
+
+```bash
+npx ethlete-agents timetrack status                 # is the app reachable, and what does it hold?
+npx ethlete-agents timetrack issue FIP-2177         # one issue: summary, type, parent, subject
+npx ethlete-agents timetrack search "password"      # open issues of the picked projects
+npx ethlete-agents timetrack project                # which project does this repo log into?
+```
+
+Add `--json` to any of them when you need to read a field rather than a line.
+
+**Never ask the user for a Jira token, and never write one into a file.** If a command reports
+that the app is not running, say so and ask the user to start it. That is the whole fix -
+there is no per-repo fallback, by design: a secret copied into every checkout is a secret
+nobody can rotate.
+
+## What each command is for
+
+| Command                           | Use it when                                                             |
+| --------------------------------- | ----------------------------------------------------------------------- |
+| `status`                          | Before anything else, when a Jira command failed and you need the cause |
+| `issue <KEY>`                     | The user names a key and you need its summary, type or parent           |
+| `search [text]`                   | The user describes work but names no key                                |
+| `project [path]`                  | You need the project a repository files into                            |
+| `create --summary "…"`            | The work has no ticket and the user asked for one                       |
+| `log --issue <KEY> --minutes <n>` | The user asks to record time that nothing observed                      |
+
+`git-flow start` uses the same channel, so a branch is named from the real issue rather than
+from a key you typed - see the `git-flow` skill.
+
+## Writes
+
+Two commands write, so both need the user to have asked for them in this conversation:
+
+```bash
+npx ethlete-agents timetrack create --summary "Reset password mail is not sent" --project FIP
+npx ethlete-agents timetrack log --issue FIP-2177 --minutes 45 --description "pairing call"
+```
+
+- **`create`** files the issue with the instance's own ticket settings - its type, its parent
+  rule and its subject field all come from the app, so the ticket is shaped like every other.
+  `--project` is needed unless the app holds exactly one picked project.
+- **`log`** adds a row to the day in Timetrack. It is **not** a Tempo entry: the user reviews
+  the day and syncs it, which is what keeps an agent's row from double-booking against the
+  hours the day already observed. `--at <date>` places it; without one it starts now.
+
+## What the app decides, not you
+
+- **The projects.** The user picked them in Timetrack. `search` is scoped to them, and
+  `--project <KEY>` is how you look outside.
+- **The branch subject.** `issue` returns `subject` when the instance's subject field is set on
+  that issue. Prefer it over the summary; the summary is a paraphrase.
+- **The instance.** Its host, its issue types and its hierarchy are settings in the app. Do not
+  hardcode any of them in this repo.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ethlete/agent-rules",
-  "version": "0.1.0-next.7",
+  "version": "0.1.0-next.9",
   "license": "MIT",
   "type": "commonjs",
   "exports": {

package/src/index.js

@@ -8,6 +8,7 @@ const config_1 = require("./lib/config");
 const git_flow_command_1 = require("./lib/git-flow-command");
 const migrate_1 = require("./lib/migrate");
 const sync_1 = require("./lib/sync");
+const timetrack_command_1 = require("./lib/timetrack-command");
 const USAGE = `ethlete-agents — compile @ethlete agent rules and skills into your repo
 
   ethlete-agents sync      Write the generated rules/skills for every detected agent
@@ -15,6 +16,9 @@ const USAGE = `ethlete-agents — compile @ethlete agent rules and skills into y
   ethlete-agents init      Write a starter ${config_1.CONFIG_FILE_NAME}
   ethlete-agents git-flow  Name, check and repair branches against the repo's git flow
                            (start, check, repair, explain)
+  ethlete-agents timetrack Ask the running Timetrack app about Jira - it holds this
+                           machine's credentials, so no repo needs a token
+                           (status, issue, search, project, create, log)
   ethlete-agents migrate   Convert the repo to the AGENTS.md + .agents/skills layout:
                            CLAUDE.md content moves into AGENTS.md (CLAUDE.md becomes an
                            @AGENTS.md import), hand-written .claude/skills move to
@@ -67,6 +71,8 @@ const run = (argv) => {
             return init(root);
         case 'git-flow':
             return (0, git_flow_command_1.gitFlowCommand)({ root, argv: argv.slice(1) });
+        case 'timetrack':
+            return (0, timetrack_command_1.timetrackCommand)({ root, argv: argv.slice(1) });
         case 'migrate':
             return (0, migrate_1.migrate)(Object.assign(Object.assign({}, options), { dryRun: argv.includes('--dry-run') }));
         default:

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/agent-rules/src/index.ts"],"names":[],"mappings":";;;;AACA,2BAA+C;AAC/C,+BAA4B;AAC5B,yCAA2F;AAC3F,6DAAwD;AACxD,2CAAwC;AACxC,qCAAyC;AAEzC,MAAM,KAAK,GAAG;;;;6CAI+B,yBAAgB;;;;;;;;;kDASX,sBAAa,CAAC,IAAI,CAAC,IAAI,CAAC;;;CAGzE,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnC,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAc,EAAE,EAAE;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAExC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAkB,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;IAC5B,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,yBAAgB,CAAC,CAAC;IAE1C,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,GAAG,yBAAgB,kBAAkB,CAAC,CAAC;QAErD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAA,sBAAa,EAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,IAAA,kBAAa,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,SAAS,yBAAgB,mEAAmE,CAAC,CAAC;IAE1G,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,IAAc,EAA4B,EAAE;;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAA,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,mCAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IAEtD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,IAAA,WAAI,kCAAM,OAAO,KAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAG,CAAC;QAClE,KAAK,OAAO;YACV,OAAO,IAAA,YAAK,EAAC,OAAO,CAAC,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,IAAA,iCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,KAAK,SAAS;YACZ,OAAO,IAAA,iBAAO,kCAAM,OAAO,KAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAG,CAAC;QACrE;YACE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEnB,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC;AAEF,gDAAsB;AAEtB,oFAAoF;AACpF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,OAAO,EAAE;SACd,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/agent-rules/src/index.ts"],"names":[],"mappings":";;;;AACA,2BAA+C;AAC/C,+BAA4B;AAC5B,yCAA2F;AAC3F,6DAAwD;AACxD,2CAAwC;AACxC,qCAAyC;AACzC,+DAA2D;AAE3D,MAAM,KAAK,GAAG;;;;6CAI+B,yBAAgB;;;;;;;;;;;;kDAYX,sBAAa,CAAC,IAAI,CAAC,IAAI,CAAC;;;CAGzE,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnC,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAc,EAAE,EAAE;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAExC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAkB,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;IAC5B,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,yBAAgB,CAAC,CAAC;IAE1C,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,GAAG,yBAAgB,kBAAkB,CAAC,CAAC;QAErD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,IAAA,sBAAa,EAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,IAAA,kBAAa,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,SAAS,yBAAgB,mEAAmE,CAAC,CAAC;IAE1G,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,IAAc,EAA4B,EAAE;;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAA,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,mCAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IAEtD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,IAAA,WAAI,kCAAM,OAAO,KAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAG,CAAC;QAClE,KAAK,OAAO;YACV,OAAO,IAAA,YAAK,EAAC,OAAO,CAAC,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,IAAA,iCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,KAAK,WAAW;YACd,OAAO,IAAA,oCAAgB,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzD,KAAK,SAAS;YACZ,OAAO,IAAA,iBAAO,kCAAM,OAAO,KAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAG,CAAC;QACrE;YACE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEnB,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC;AAEF,gDAAsB;AAEtB,oFAAoF;AACpF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,OAAO,EAAE;SACd,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/src/lib/config.d.ts

@@ -5,16 +5,10 @@ export type AgentTarget = (typeof AGENT_TARGETS)[number];
 export declare const CONFIG_FILE_NAME = "ethlete-agents.config.json";
 export declare const LOCAL_CONFIG_FILE_NAME = "ethlete-agents.config.local.json";
 /**
- * Non-secret Jira wiring, committed with the repo — `git-flow start` resolves an issue key through
- * it. Credentials never live here; they come from the environment or the gitignored local config.
+ * How this repo reads a Jira issue into a branch name. The instance, the credentials and the subject
+ * field are not here and cannot be: the Timetrack app holds them, and `git-flow start` asks it.
  */
 export type JiraSettings = {
-    host?: string;
-    /**
-     * The instance's field holding a Story's branch subject (`customfield_10050`). Without it the
-     * summary is slugified instead, which is a paraphrase rather than the agreed subject.
-     */
-    subjectField?: string;
     /** Branch type per Jira issue type, e.g. `{ "Bug": "fix" }`. Anything unlisted becomes `feat`. */
     typeByIssueType?: Record<string, string>;
 };
@@ -51,19 +45,18 @@ export type SyncConfig = {
  *   a handoff instead of writing the handoff file automatically.
  * - `sdkSourcePath` points at a local `ethlete-sdk` checkout, which the SDK source and local-build
  *   skills read when they need the SDK's own sources instead of the published package.
- * - `jira` holds the per-user Jira credentials `git-flow start` needs. This is the one place in the
- *   repo a secret may sit, and only because the file is gitignored; `JIRA_EMAIL`/`JIRA_API_TOKEN`
- *   in the environment are the alternative.
+ * - `apiRepoPaths` maps an app in this repo to the checkout of the API it talks to (`{ "hub":
+ *   "../fut-hub-backend" }`), which the api-source skill reads to answer a question about the
+ *   server instead of guessing it from the client.
+ *
+ * No secret belongs here any more. Jira is reached through the Timetrack app, which holds the token
+ * in the machine's keychain — one secret per machine rather than one per checkout.
  */
 export type LocalConfig = {
     disableHooks?: boolean | string[];
     disableAutoHandoffSave?: boolean;
     sdkSourcePath?: string;
-    jira?: {
-        host?: string;
-        email?: string;
-        token?: string;
-    };
+    apiRepoPaths?: Record<string, string>;
 };
 export type LocalConfigState = {
     exists: false;

package/src/lib/config.js

@@ -15,7 +15,12 @@ const readRawConfig = (root) => {
         return {};
     return JSON.parse((0, fs_1.readFileSync)(path, 'utf8'));
 };
-const LOCAL_CONFIG_KEYS = ['disableHooks', 'disableAutoHandoffSave', 'sdkSourcePath', 'jira'];
+const LOCAL_CONFIG_KEYS = [
+    'disableHooks',
+    'disableAutoHandoffSave',
+    'sdkSourcePath',
+    'apiRepoPaths',
+];
 const readLocalConfig = (root) => {
     const path = (0, path_1.join)(root, exports.LOCAL_CONFIG_FILE_NAME);
     if (!(0, fs_1.existsSync)(path))

package/src/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../libs/agent-rules/src/lib/config.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,+BAA4B;AAC5B,6CAAuE;AAEvE,yCAAmF;AACnF,iDAAiD;AAEpC,QAAA,aAAa,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAIlE,QAAA,gBAAgB,GAAG,4BAA4B,CAAC;AAEhD,QAAA,sBAAsB,GAAG,kCAAkC,CAAC;AAmDzE,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE;IACrC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,wBAAgB,CAAC,CAAC;IAE1C,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;AAC7D,CAAC,CAAC;AA8BF,MAAM,iBAAiB,GAA0B,CAAC,cAAc,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;AAE9G,MAAM,eAAe,GAAG,CAAC,IAAY,EAAoB,EAAE;IAChE,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,8BAAsB,CAAC,CAAC;IAEhD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEhD,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAElH,MAAM,MAAM,GAAG,MAAqB,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAwB,CAAC,CAAC,CAAC;IAE/G,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC,CAAC;AAnBW,QAAA,eAAe,mBAmB1B;AAEF;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAAC,IAAY,EAAiB,EAAE;IAC3D,MAAM,QAAQ,GAAkB,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEhE,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AARW,QAAA,aAAa,iBAQxB;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAsB,EAAE,EAAE;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,qBAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAqC,EAAE,CAAC,CAAC;IAClF,wBAAwB,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;IAC1D,uBAAuB,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;IACxD,YAAY,EAAE,OAAO,CAAC,KAAK;IAC3B,kBAAkB,EAAE,OAAO,CAAC,WAAW;IACvC,gBAAgB,EAAE,OAAO,CAAC,SAAS;CACpC,CAAC,CAAC;AAEI,MAAM,UAAU,GAAG,CAAC,OAAyD,EAAc,EAAE;;IAClG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,OAAO,GAAG,MAAA,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,UAAU,mCAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAA,+BAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAElD,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC;QAC/D,IAAI,8DACC,IAAA,8BAAe,GAAE,GACjB,WAAW,CAAC,OAAO,CAAC,GACpB,IAAA,8BAAiB,EAAC,IAAA,iCAAoB,EAAC,IAAI,CAAC,CAAC,GAC7C,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CACpB;QACD,OAAO,EAAE,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE;QAC1B,uBAAuB,EAAE,MAAA,GAAG,CAAC,uBAAuB,mCAAI,KAAK;QAC7D,KAAK,EAAE,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE;QACtB,QAAQ,EAAE,MAAA,GAAG,CAAC,QAAQ,mCAAI,EAAE;QAC5B,OAAO;QACP,IAAI,EAAE,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE;KACrB,CAAC;AACJ,CAAC,CAAC;AA1BW,QAAA,UAAU,cA0BrB"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../libs/agent-rules/src/lib/config.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,+BAA4B;AAC5B,6CAAuE;AAEvE,yCAAmF;AACnF,iDAAiD;AAEpC,QAAA,aAAa,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAIlE,QAAA,gBAAgB,GAAG,4BAA4B,CAAC;AAEhD,QAAA,sBAAsB,GAAG,kCAAkC,CAAC;AA6CzE,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE;IACrC,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,wBAAgB,CAAC,CAAC;IAE1C,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;AAC7D,CAAC,CAAC;AAiCF,MAAM,iBAAiB,GAA0B;IAC/C,cAAc;IACd,wBAAwB;IACxB,eAAe;IACf,cAAc;CACf,CAAC;AAEK,MAAM,eAAe,GAAG,CAAC,IAAY,EAAoB,EAAE;IAChE,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,8BAAsB,CAAC,CAAC;IAEhD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEhD,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAElH,MAAM,MAAM,GAAG,MAAqB,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAwB,CAAC,CAAC,CAAC;IAE/G,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC,CAAC;AAnBW,QAAA,eAAe,mBAmB1B;AAEF;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAAC,IAAY,EAAiB,EAAE;IAC3D,MAAM,QAAQ,GAAkB,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEhE,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AARW,QAAA,aAAa,iBAQxB;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAsB,EAAE,EAAE;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,qBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,qBAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAqC,EAAE,CAAC,CAAC;IAClF,wBAAwB,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;IAC1D,uBAAuB,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;IACxD,YAAY,EAAE,OAAO,CAAC,KAAK;IAC3B,kBAAkB,EAAE,OAAO,CAAC,WAAW;IACvC,gBAAgB,EAAE,OAAO,CAAC,SAAS;CACpC,CAAC,CAAC;AAEI,MAAM,UAAU,GAAG,CAAC,OAAyD,EAAc,EAAE;;IAClG,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,OAAO,GAAG,MAAA,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,UAAU,mCAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAA,+BAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAElD,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC;QAC/D,IAAI,8DACC,IAAA,8BAAe,GAAE,GACjB,WAAW,CAAC,OAAO,CAAC,GACpB,IAAA,8BAAiB,EAAC,IAAA,iCAAoB,EAAC,IAAI,CAAC,CAAC,GAC7C,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE,CAAC,CACpB;QACD,OAAO,EAAE,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE;QAC1B,uBAAuB,EAAE,MAAA,GAAG,CAAC,uBAAuB,mCAAI,KAAK;QAC7D,KAAK,EAAE,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE;QACtB,QAAQ,EAAE,MAAA,GAAG,CAAC,QAAQ,mCAAI,EAAE;QAC5B,OAAO;QACP,IAAI,EAAE,MAAA,GAAG,CAAC,IAAI,mCAAI,EAAE;KACrB,CAAC;AACJ,CAAC,CAAC;AA1BW,QAAA,UAAU,cA0BrB"}

package/src/lib/git-flow/index.d.ts

@@ -1,5 +1,6 @@
 export * from './build';
 export * from './config';
 export * from './parse';
+export * from './rename';
 export * from './start';
 export * from './validate';

package/src/lib/git-flow/index.js

@@ -4,6 +4,7 @@ const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./build"), exports);
 tslib_1.__exportStar(require("./config"), exports);
 tslib_1.__exportStar(require("./parse"), exports);
+tslib_1.__exportStar(require("./rename"), exports);
 tslib_1.__exportStar(require("./start"), exports);
 tslib_1.__exportStar(require("./validate"), exports);
 //# sourceMappingURL=index.js.map

package/src/lib/git-flow/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/agent-rules/src/lib/git-flow/index.ts"],"names":[],"mappings":";;;AAAA,kDAAwB;AACxB,mDAAyB;AACzB,kDAAwB;AACxB,kDAAwB;AACxB,qDAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/agent-rules/src/lib/git-flow/index.ts"],"names":[],"mappings":";;;AAAA,kDAAwB;AACxB,mDAAyB;AACzB,kDAAwB;AACxB,mDAAyB;AACzB,kDAAwB;AACxB,qDAA2B"}

package/src/lib/git-flow/rename.d.ts

@@ -0,0 +1,24 @@
+import { GitFlowConfig } from './config';
+export type ConformingName = {
+    ok: true;
+    name: string;
+} | {
+    ok: false;
+    /**
+     * `needs-key` is the only reason a caller can act on: file the issue, then ask again with the
+     * key it returned.
+     */
+    reason: 'already-conforms' | 'needs-key' | 'no-shape';
+};
+/**
+ * The conforming name a non-conforming branch should take, once an issue key exists for it.
+ *
+ * A candidate is returned only after it parses as fully conforming, so a rename always lands on a
+ * name the grammar accepts — `parseBranch`'s own `suggestedName` does not guarantee that for a
+ * nested branch whose leaf names no issue, and half a rename is worse than none.
+ */
+export declare const conformingNameFor: (options: {
+    branch: string;
+    key?: string;
+    config: GitFlowConfig;
+}) => ConformingName;

package/src/lib/git-flow/rename.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.conformingNameFor = void 0;
+const build_1 = require("./build");
+const parse_1 = require("./parse");
+const KEY_PLACEHOLDER = '<KEY>';
+/**
+ * The spec that rebuilds a branch whose leaf carries no key at all, which is why `parseBranch` left
+ * `suggestedName` unset. Only the kinds the grammar can spell are here — an unrecognised name names
+ * no kind, and inventing one would rename the branch to something the user never chose.
+ */
+const specFor = (options) => {
+    var _a;
+    const { parse, key } = options;
+    const subject = (_a = parse.subject) !== null && _a !== void 0 ? _a : '';
+    switch (parse.kind) {
+        case 'main-feature':
+            return { kind: 'main-feature', type: parse.type, key, subject };
+        case 'hotfix':
+            return { kind: 'hotfix', key, subject };
+        case 'sub-feature':
+            return parse.parent ? { kind: 'sub-feature', parent: parse.parent, key, subject } : undefined;
+        case 'release-fix':
+            return parse.parent ? { kind: 'release-fix', parent: parse.parent, key, subject } : undefined;
+        default:
+            return undefined;
+    }
+};
+const candidatesFor = (options) => {
+    const { parse, key, config } = options;
+    const suggested = parse.suggestedName;
+    const candidates = [];
+    if (suggested && !suggested.includes(KEY_PLACEHOLDER))
+        candidates.push(suggested);
+    if (key) {
+        if (suggested === null || suggested === void 0 ? void 0 : suggested.includes(KEY_PLACEHOLDER))
+            candidates.push(suggested.replace(/<KEY>/g, key.toUpperCase()));
+        const spec = specFor({ parse, key: key.toUpperCase() });
+        if (spec)
+            candidates.push((0, build_1.buildBranchName)({ spec, config }));
+    }
+    return candidates;
+};
+/**
+ * The conforming name a non-conforming branch should take, once an issue key exists for it.
+ *
+ * A candidate is returned only after it parses as fully conforming, so a rename always lands on a
+ * name the grammar accepts — `parseBranch`'s own `suggestedName` does not guarantee that for a
+ * nested branch whose leaf names no issue, and half a rename is worse than none.
+ */
+const conformingNameFor = (options) => {
+    var _a;
+    const { key, config } = options;
+    const parse = (0, parse_1.parseBranch)({ branch: options.branch, config });
+    if (parse.ok)
+        return { ok: false, reason: 'already-conforms' };
+    for (const name of candidatesFor({ parse, key, config })) {
+        if (name !== parse.branch && (0, parse_1.parseBranch)({ branch: name, config }).ok)
+            return { ok: true, name };
+    }
+    if (key)
+        return { ok: false, reason: 'no-shape' };
+    // Whether a key would help is answered by trying one, using a prefix this repo accepts so the
+    // probe is not rejected by `keyPrefixes` for a reason the real key would not hit.
+    const probe = candidatesFor({ parse, key: `${(_a = config.keyPrefixes[0]) !== null && _a !== void 0 ? _a : 'KEY'}-1`, config });
+    const rebuildable = probe.some((name) => (0, parse_1.parseBranch)({ branch: name, config }).ok);
+    return { ok: false, reason: rebuildable ? 'needs-key' : 'no-shape' };
+};
+exports.conformingNameFor = conformingNameFor;
+//# sourceMappingURL=rename.js.map