@getmonoceros/workbench 1.1.0 → 1.3.0

package/features/atlassian/devcontainer-feature.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://raw.githubusercontent.com/devcontainers/spec/main/schemas/devContainerFeature.schema.json",
+  "id": "atlassian",
+  "name": "Atlassian CLIs (Rovo Dev + Teamwork Graph)",
+  "version": "1.0.0",
+  "description": "Bundles two Atlassian CLIs that share a single account: Rovo Dev (the `acli rovodev` AI agent) and Teamwork Graph (`twg`). Each tool can be toggled independently via the `rovodev` and `twg` options; both share `instance` / `email` / `apiToken` so credentials only live once in the yml. Auth state for both persists under /home/node/.{config/acli,rovodev,config/twg}, which Monoceros bind-mounts so logins survive `monoceros apply` rebuilds.",
+  "documentationURL": "https://developer.atlassian.com/cloud/",
+  "options": {
+    "rovodev": {
+      "type": "boolean",
+      "default": true,
+      "description": "Install the Atlassian Command Line Interface (acli) which includes the Rovo Dev agent (`acli rovodev`). Default true. Set to false to skip when you only want twg."
+    },
+    "twg": {
+      "type": "boolean",
+      "default": true,
+      "description": "Install the Teamwork Graph CLI (twg). Default true. Set to false to skip when you only want rovodev."
+    },
+    "instance": {
+      "type": "string",
+      "default": "",
+      "description": "Atlassian site host, e.g. yoursite.atlassian.net. Required for twg's non-interactive login. Rovo Dev asks for the site itself on first `acli rovodev run` so this option isn't used by it."
+    },
+    "email": {
+      "type": "string",
+      "default": "",
+      "description": "Email tied to your Atlassian account. Used for both Rovo Dev and twg non-interactive login when set together with apiToken."
+    },
+    "apiToken": {
+      "type": "string",
+      "default": "",
+      "description": "Atlassian API token from id.atlassian.com → Security → API tokens. Used for both Rovo Dev and twg non-interactive login when set together with email."
+    },
+    "bitbucketToken": {
+      "type": "string",
+      "default": "",
+      "description": "Optional Bitbucket API token (Bitbucket Cloud → Personal settings → App passwords). Only used by twg, for Bitbucket-specific commands. When set, twg's optional Bitbucket prompt is skipped; when empty, twg's prompt is skipped via an empty Enter — Bitbucket-specific twg commands will then ask the builder to run `twg login --force` interactively."
+    }
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": ["Atlassian.atlascode"]
+    }
+  },
+  "x-monoceros": {
+    "persistentHomePaths": [
+      ".config/acli",
+      ".rovodev",
+      ".config/twg",
+      ".agents"
+    ],
+    "optionHints": ["instance", "email", "apiToken", "bitbucketToken"],
+    "usageNotes": [
+      "Bundles two CLIs that share one Atlassian account: `acli rovodev` (Rovo Dev agent) and `twg` (Teamwork Graph). Both default to on — set `rovodev: false` or `twg: false` to skip either install.",
+      "Auth: email + apiToken below cover both tools. `instance` is required upfront for twg's auto-login; acli rovodev prompts for the site at first `acli rovodev run`. `bitbucketToken` is only needed if you use twg's Bitbucket commands. Skip the credentials entirely to log in interactively inside the container — state persists under home/.config/{acli,twg} and home/.rovodev."
+    ]
+  }
+}

package/features/claude-code/devcontainer-feature.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "https://raw.githubusercontent.com/devcontainers/spec/main/schemas/devContainerFeature.schema.json",
+  "id": "claude-code",
+  "name": "Claude Code CLI",
+  "version": "1.1.0",
+  "description": "Installs the Anthropic Claude Code CLI globally via npm. Login (subscription / OAuth) lives inside the container under /home/node/.claude, which Monoceros bind-mounts from <container-dir>/home/.claude — so the login survives `monoceros apply` rebuilds and stays per-container. If an `apiKey` option is provided, ANTHROPIC_API_KEY is exported instead and the OAuth flow is bypassed.",
+  "documentationURL": "https://docs.anthropic.com/en/docs/claude-code",
+  "options": {
+    "version": {
+      "type": "string",
+      "default": "latest",
+      "description": "npm-style version spec for @anthropic-ai/claude-code (e.g. 'latest', '0.4.2', '^0.4')."
+    },
+    "apiKey": {
+      "type": "string",
+      "default": "",
+      "description": "Optional Anthropic API key. When set, exported as ANTHROPIC_API_KEY for all shells in the container, which makes Claude Code use API auth instead of the subscription/OAuth flow."
+    }
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": ["anthropic.claude-code"]
+    }
+  },
+  "x-monoceros": {
+    "persistentHomePaths": [".claude"],
+    "persistentHomeFiles": [
+      {
+        "path": ".claude.json",
+        "initialContent": "{}\n"
+      }
+    ],
+    "optionHints": ["apiKey"],
+    "usageNotes": [
+      "Two auth modes: (1) set apiKey below for non-interactive API auth via ANTHROPIC_API_KEY, or (2) leave apiKey empty and run `claude login` once inside the container for the subscription/OAuth flow. Either way the resulting login state lives under home/.claude on the host and survives `monoceros apply` rebuilds."
+    ]
+  }
+}

package/features/github-cli/devcontainer-feature.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://raw.githubusercontent.com/devcontainers/spec/main/schemas/devContainerFeature.schema.json",
+  "id": "github-cli",
+  "name": "GitHub CLI (gh)",
+  "version": "1.0.0",
+  "description": "Installs the official GitHub CLI (`gh`) from the upstream apt repository. When an `apiToken` option is provided, its value is exported as GH_TOKEN via /etc/profile.d/ so `gh` works non-interactively in any login shell. Without a token, `gh` is installed but unauthenticated and the builder runs `gh auth login` once interactively; the resulting credentials persist under /home/node/.config/gh via Monoceros' bind-mount.",
+  "documentationURL": "https://cli.github.com/",
+  "options": {
+    "apiToken": {
+      "type": "string",
+      "default": "",
+      "description": "GitHub Personal Access Token (github.com → Settings → Developer settings → Personal access tokens → classic). Minimum scopes: repo, read:org, gist. When set, exported as GH_TOKEN in every login shell. Named `apiToken` to match the same option on the atlassian feature."
+    }
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": ["github.vscode-pull-request-github"]
+    }
+  },
+  "x-monoceros": {
+    "persistentHomePaths": [".config/gh"],
+    "optionHints": ["apiToken"],
+    "usageNotes": [
+      "Two auth modes: (1) set apiToken below for non-interactive auth via GH_TOKEN (PAT scopes: repo, read:org, gist), or (2) leave apiToken empty and run `gh auth login` once inside the container for the browser-based OAuth flow with optional SSH-key upload. State persists under home/.config/gh so the login survives `monoceros apply` rebuilds."
+    ]
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmonoceros/workbench",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Monoceros workbench CLI — local, reproducible dev containers with first-class AI coding tooling.",
   "keywords": [
     "devcontainer",
@@ -27,6 +27,7 @@
   "files": [
     "dist",
     "templates",
+    "features",
     "README.md"
   ],
   "engines": {
@@ -36,6 +37,8 @@
     "start": "tsx src/bin.ts",
     "typecheck": "tsc --build",
     "test": "vitest run",
+    "manifests:sync": "node scripts/sync-feature-manifests.mjs",
+    "prebuild": "pnpm manifests:sync",
     "build": "tsup",
     "prepublishOnly": "pnpm typecheck && pnpm test && pnpm build"
   },