@goodandready/dsh-github-ops 0.6.8 → 0.6.10

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.6.10
+
+### Features
+- **GitHub Environments & Deployments Management (#122)**: Added `gh_environment_list` tool to inspect deployment environments, wait timers, and protection rules. Added `gh_deployment_list`, `gh_deployment_create`, and `gh_deployment_status_create` tools for full deployment lifecycle auditing and status updates.
+- **Webhook Simulator & Event Emitter (#125)**: Added `gh_webhook_simulate` tool supporting canonical mock payloads for `issues`, `pull_request`, `workflow_run`, `release`, `deployment`, `deployment_status`, and `push` events, with live broadcast into local `SseEventManager` and optional HTTP delivery to webhook receivers.
+
+## 0.6.9
+
+### Features
+- **Conventional Changelog Generator (#123)**: Added `gh_changelog_generate` tool parsing commit and PR history according to Conventional Commits standard (`feat:`, `fix:`, `perf:`, `refactor:`, `chore:`, etc.), detecting Breaking Changes (`!` and `BREAKING CHANGE:`), recommending SemVer bump (`major`, `minor`, `patch`), and outputting structured JSON and GitHub/CHANGELOG markdown. Added Changelog tab in repository panel UI.
+- **GoodAndReady Community Scaffold (#126)**: Added `gh_community_scaffold` tool generating standardized community health files (`.github/ISSUE_TEMPLATE` bug report, feature request, security advisory; 5-section `.github/PULL_REQUEST_TEMPLATE.md`; `SECURITY.md`, `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`). Integrated `includeCommunityFiles` option into `gh_upload_project` and `uploadProject`.
+
 ## 0.5.0
 
 ### Features

package/lib/client.js

@@ -130,6 +130,9 @@ window.__ModuleLoader__.load({
       panelSecurity: 'Security',
       panelSecurityEmpty: 'No security alerts found.',
       panelSecurityDisabled: 'Security features are disabled or token lacks security scope.',
+      panelChangelog: 'Changelog',
+      panelChangelogEmpty: 'No conventional changelog entries found.',
+      panelCopyMarkdown: 'Copy Markdown',
       panelDiagnose: 'Diagnose',
       panelDiagnosing: 'Diagnosing…',
       panelDiagnoseAsk: 'Ask Agent to Diagnose & Fix',
@@ -257,6 +260,9 @@ window.__ModuleLoader__.load({
       panelSecurity: '安全',
       panelSecurityEmpty: '未发现安全警报。',
       panelSecurityDisabled: '安全功能已禁用或令牌缺少安全权限。',
+      panelChangelog: '更新日志',
+      panelChangelogEmpty: '未找到常规提交更新日志记录。',
+      panelCopyMarkdown: '复制 Markdown',
       panelDiagnose: '诊断',
       panelDiagnosing: '诊断中…',
       panelDiagnoseAsk: '请智能体诊断并修复',
@@ -870,6 +876,7 @@ window.__ModuleLoader__.load({
       const [error, setError] = React.useState('')
       const [loading, setLoading] = React.useState(false)
       const [securityData, setSecurityData] = React.useState({ phase: 'idle', data: null })
+      const [changelogData, setChangelogData] = React.useState({ phase: 'idle', data: null })
       const [diagnostics, setDiagnostics] = React.useState(null)
       const [diagnoseLoadingId, setDiagnoseLoadingId] = React.useState(null)
       const [expandedSteps, setExpandedSteps] = React.useState({})
@@ -921,6 +928,14 @@ window.__ModuleLoader__.load({
           .catch((err) => { setSecurityData({ phase: 'error', data: null }); setError(String((err && err.message) || err)) })
       }, [call, repo])
 
+      const loadChangelog = React.useCallback(() => {
+        if (!repo) return
+        setChangelogData({ phase: 'loading', data: null })
+        call({ what: 'changelog', repo })
+          .then((payload) => setChangelogData({ phase: 'ready', data: payload }))
+          .catch((err) => { setChangelogData({ phase: 'error', data: null }); setError(String((err && err.message) || err)) })
+      }, [call, repo])
+
       const loadDiagnostics = (runId) => {
         if (!repo || !runId) return
         setDiagnoseLoadingId(runId)
@@ -957,8 +972,9 @@ window.__ModuleLoader__.load({
         else if (tab === 'inbox') loadInbox()
         else if (tab === 'matrix') loadMatrix()
         else if (tab === 'security') loadSecurity()
+        else if (tab === 'changelog') loadChangelog()
         else loadList(tab)
-      }, [repo, tab, loadTree, loadList, loadInbox, loadSecurity])
+      }, [repo, tab, loadTree, loadList, loadInbox, loadSecurity, loadChangelog])
 
       const openFile = (entry) => {
         if (entry.type === 'tree') { loadTree(entry.path); return }
@@ -1143,6 +1159,45 @@ window.__ModuleLoader__.load({
         )
       })()
 
+      const changelogView = (() => {
+        if (changelogData.phase === 'loading') return React.createElement('div', { className: 'gho-panel-muted', style: { padding: '8px 0' } }, t('panelLoading'))
+        const data = changelogData.data
+        if (!data || !data.markdown) return React.createElement('div', { className: 'gho-panel-muted', style: { padding: '8px 0' } }, t('panelChangelogEmpty'))
+
+        return React.createElement('div', { style: { padding: '4px 0' } },
+          React.createElement('div', { style: { display: 'flex', gap: '8px', alignItems: 'center', margin: '4px 0 8px' } },
+            React.createElement('span', { className: 'gho-badge gho-badge-active' }, `Bump: ${data.recommendedBump || 'none'}`),
+            React.createElement('span', { style: { fontWeight: 600, fontSize: '13px' } }, data.version || ''),
+            React.createElement('button', {
+              type: 'button',
+              className: 'gho-diagnose-btn',
+              style: { marginLeft: 'auto' },
+              onClick: () => {
+                if (typeof navigator !== 'undefined' && navigator.clipboard && navigator.clipboard.writeText) {
+                  navigator.clipboard.writeText(data.markdown || '').catch(() => {})
+                }
+                setCopiedPrompt(true)
+                setTimeout(() => setCopiedPrompt(false), 3000)
+              },
+            }, copiedPrompt ? t('panelDiagnoseCopied') : t('panelCopyMarkdown')),
+          ),
+          React.createElement('pre', {
+            style: {
+              whiteSpace: 'pre-wrap',
+              fontFamily: 'monospace',
+              fontSize: '11px',
+              lineHeight: '1.4',
+              background: 'var(--dsw-alias-bg-layer-2)',
+              border: '1px solid var(--dsw-alias-border-l2)',
+              borderRadius: '6px',
+              padding: '8px',
+              maxHeight: '360px',
+              overflow: 'auto',
+            },
+          }, data.markdown),
+        )
+      })()
+
       return React.createElement('div', { className: 'gho-panel' },
         header,
         React.createElement('div', { className: 'gho-panel-tabs' },
@@ -1151,12 +1206,13 @@ window.__ModuleLoader__.load({
           tabButton('pulls', t('panelPulls')),
           tabButton('runs', t('panelRuns')),
           tabButton('security', t('panelSecurity')),
+          tabButton('changelog', t('panelChangelog')),
           tabButton('inbox', t('panelInbox')),
           tabButton('matrix', t('panelMatrix')),
           React.createElement('button', { type: 'button', className: 'gho-panel-tab', onClick: () => { setRepo(''); setFile(null) } }, t('panelRepo')),
         ),
         error ? React.createElement('div', { className: 'gho-panel-muted' }, error) : null,
-        tab === 'tree' ? treeView : (tab === 'matrix' ? matrixView : (tab === 'security' ? securityView : list)),
+        tab === 'tree' ? treeView : (tab === 'matrix' ? matrixView : (tab === 'security' ? securityView : (tab === 'changelog' ? changelogView : list))),
       )
     }
 

package/lib/events.js

@@ -1,3 +1,14 @@
+
+let activeEventManager = null
+
+export function setGlobalEventManager(mgr) {
+  activeEventManager = mgr
+}
+
+export function getGlobalEventManager() {
+  return activeEventManager
+}
+
 // Server-Sent Events (SSE) notification manager for CI runs and PR events.
 //
 // Maintains client subscriptions, broadcasts real-time events, and runs an adaptive
@@ -21,6 +32,7 @@ export class SseEventManager {
     this.lastRuns = new Map() // runId -> { status, conclusion }
     this.lastPulls = new Map() // pullNumber -> { updated, state }
     this.hasActiveWork = false
+    setGlobalEventManager(this)
   }
 
   get clientCount() {
@@ -197,5 +209,6 @@ export class SseEventManager {
     this.clients.clear()
     this.lastRuns.clear()
     this.lastPulls.clear()
+    if (getGlobalEventManager() === this) setGlobalEventManager(null)
   }
 }

package/lib/routes.js

@@ -16,6 +16,7 @@ import { encodeRepoPath } from './github.js'
 import { listIssues } from './tools/issues.js'
 import { listRuns, diagnoseRun } from './tools/actions.js'
 import { listSecurityAlerts } from './tools/security.js'
+import { generateChangelog } from './tools/changelog.js'
 import { listNotifications, repoTreeView } from './tools/panel-data.js'
 import { mirrorStatus, syncMirror } from './tools/mirror.js'
 import { matrixStatus } from './tools/matrix.js'
@@ -413,6 +414,12 @@ export function registerRoutes(ctx, deps = {}) {
               const result = await listRuns(github, { ...repo, limit: 20 })
               return sendJson(res, 200, { configured: true, items: result.runs })
             }
+            if (what === 'changelog') {
+              const base = url.searchParams.get('base') || undefined
+              const head = url.searchParams.get('head') || 'HEAD'
+              const result = await generateChangelog(github, { ...repo, base, head })
+              return sendJson(res, 200, { configured: true, ...result })
+            }
             if (what === 'security') {
               const severity = url.searchParams.get('severity') || undefined
               const result = await listSecurityAlerts(github, { ...repo, state, severity, limit: 50 })

package/lib/tools/changelog.js

@@ -0,0 +1,261 @@
+// Conventional changelog generation and SemVer recommendation tools.
+// Pure functions over GitHub client or commit arrays.
+
+export const CATEGORIES = {
+  breaking: { key: 'breaking', title: '⚠️ Breaking Changes', order: 1 },
+  feat: { key: 'feat', title: '🚀 Features', order: 2 },
+  fix: { key: 'fix', title: '🐛 Bug Fixes', order: 3 },
+  perf: { key: 'perf', title: '⚡ Performance Improvements', order: 4 },
+  refactor: { key: 'refactor', title: '♻️ Code Refactoring', order: 5 },
+  docs: { key: 'docs', title: '📚 Documentation', order: 6 },
+  test: { key: 'test', title: '🧪 Tests', order: 7 },
+  maintenance: { key: 'maintenance', title: '🛠️ Maintenance', order: 8 },
+  other: { key: 'other', title: '📦 Other Changes', order: 9 },
+}
+
+const TYPE_TO_CATEGORY = {
+  feat: 'feat',
+  feature: 'feat',
+  fix: 'fix',
+  bugfix: 'fix',
+  perf: 'perf',
+  refactor: 'refactor',
+  docs: 'docs',
+  doc: 'docs',
+  test: 'test',
+  tests: 'test',
+  chore: 'maintenance',
+  ci: 'maintenance',
+  build: 'maintenance',
+  deps: 'maintenance',
+  style: 'maintenance',
+}
+
+const CONVENTIONAL_RE = /^([a-zA-Z]+)(?:\(([^)]+)\))?(!)?:\s*(.+)$/
+
+/** Parse a single commit message into conventional commit structure. */
+export function parseConventionalCommit(rawMessage, sha = '') {
+  const full = String(rawMessage || '').trim()
+  const lines = full.split('\n').map((l) => l.trim())
+  const header = lines[0] || ''
+  const body = lines.slice(1).join('\n')
+
+  let type = 'other'
+  let scope = ''
+  let isBreaking = false
+  let subject = header
+  let breakingNote = ''
+
+  // Check for BREAKING CHANGE in body or footer
+  const breakingMatch = body.match(/BREAKING[- ]CHANGE:\s*([^\n]+)/i)
+  if (breakingMatch) {
+    isBreaking = true
+    breakingNote = breakingMatch[1].trim()
+  }
+
+  const match = header.match(CONVENTIONAL_RE)
+  if (match) {
+    type = match[1].toLowerCase()
+    scope = match[2] ? match[2].trim() : ''
+    if (match[3] === '!') isBreaking = true
+    subject = match[4].trim()
+  } else {
+    // Handle typical merge pull request headers e.g. "Merge pull request #123 from org/branch"
+    const prMatch = header.match(/^Merge pull request #(\d+)/i)
+    if (prMatch) {
+      const candidateLine = lines.slice(1).find((l) => l.trim().length > 0)
+      if (candidateLine) {
+        const subMatch = candidateLine.match(CONVENTIONAL_RE)
+        if (subMatch) {
+          type = subMatch[1].toLowerCase()
+          scope = subMatch[2] ? subMatch[2].trim() : ''
+          if (subMatch[3] === '!') isBreaking = true
+          subject = `${subMatch[4].trim()} (#${prMatch[1]})`
+        }
+      }
+    }
+  }
+
+  const categoryKey = isBreaking
+    ? 'breaking'
+    : (TYPE_TO_CATEGORY[type] || 'other')
+
+  return {
+    sha: sha ? sha.slice(0, 7) : '',
+    fullSha: sha || '',
+    raw: full,
+    header,
+    type,
+    scope,
+    subject,
+    isBreaking,
+    breakingNote,
+    category: categoryKey,
+  }
+}
+
+/** Calculate recommended SemVer bump from parsed commits. */
+export function calculateBump(commits = []) {
+  if (!Array.isArray(commits) || commits.length === 0) return 'none'
+  if (commits.some((c) => c.isBreaking || c.category === 'breaking')) return 'major'
+  if (commits.some((c) => c.type === 'feat' || c.category === 'feat')) return 'minor'
+  return 'patch'
+}
+
+/** Bump a SemVer version string according to bump type ('major', 'minor', 'patch'). */
+export function bumpVersion(version, bump) {
+  if (!version || bump === 'none') return version || '0.1.0'
+  const hasV = version.startsWith('v')
+  const clean = hasV ? version.slice(1) : version
+  const parts = clean.split('-')[0].split('.').map(Number)
+  let [major = 0, minor = 0, patch = 0] = parts
+
+  if (bump === 'major') {
+    major += 1
+    minor = 0
+    patch = 0
+  } else if (bump === 'minor') {
+    minor += 1
+    patch = 0
+  } else if (bump === 'patch') {
+    patch += 1
+  }
+
+  const res = `${major}.${minor}.${patch}`
+  return hasV ? `v${res}` : res
+}
+
+/** Format parsed commits into structured markdown changelog. */
+export function formatChangelog({ version = '', date = '', sections = {}, compareUrl = '' } = {}) {
+  const headerDate = date || new Date().toISOString().slice(0, 10)
+  const lines = []
+  if (version) {
+    lines.push(`## [${version}] - ${headerDate}`)
+  } else {
+    lines.push(`## Changelog - ${headerDate}`)
+  }
+  lines.push('')
+
+  const sortedCategories = Object.values(CATEGORIES).sort((a, b) => a.order - b.order)
+
+  let hasEntries = false
+  for (const cat of sortedCategories) {
+    const list = sections[cat.key] || []
+    if (list.length === 0) continue
+    hasEntries = true
+    lines.push(`### ${cat.title}`)
+    for (const item of list) {
+      const scopePart = item.scope ? `**${item.scope}**: ` : ''
+      const shaPart = item.sha ? ` (${item.sha})` : ''
+      const breakingPrefix = (cat.key === 'breaking' && item.breakingNote) ? `*${item.breakingNote}* — ` : ''
+      lines.push(`- ${scopePart}${breakingPrefix}${item.subject}${shaPart}`)
+    }
+    lines.push('')
+  }
+
+  if (!hasEntries) {
+    lines.push('*No significant user-facing changes.*')
+    lines.push('')
+  }
+
+  if (compareUrl) {
+    lines.push(`[Full Diff](${compareUrl})`)
+    lines.push('')
+  }
+
+  return lines.join('\n').trim()
+}
+
+/** High level changelog generator. */
+export async function generateChangelog(client, {
+  owner, repo, base, head = 'HEAD', version, date, commits: customCommits,
+} = {}) {
+  let commitList = []
+  let compareUrl = ''
+  let previousTag = base || ''
+
+  if (Array.isArray(customCommits)) {
+    commitList = customCommits.map((c) => {
+      if (typeof c === 'string') return { message: c, sha: '' }
+      return { message: c.message || c.commit?.message || '', sha: c.sha || '' }
+    })
+  } else if (client && owner && repo) {
+    if (!previousTag) {
+      try {
+        const { data: tags } = await client.get(`/repos/${owner}/${repo}/tags`, { query: { per_page: 1 } })
+        if (Array.isArray(tags) && tags.length > 0) {
+          previousTag = tags[0].name
+        }
+      } catch {
+        // ignore tag fetch failure
+      }
+    }
+
+    if (previousTag) {
+      try {
+        const { data } = await client.get(`/repos/${owner}/${repo}/compare/${encodeURIComponent(previousTag)}...${encodeURIComponent(head)}`)
+        compareUrl = data?.html_url || ''
+        const rawCommits = data?.commits || []
+        commitList = rawCommits.map((c) => ({
+          message: c.commit?.message || '',
+          sha: c.sha || '',
+          author: c.author?.login || c.commit?.author?.name || '',
+        }))
+      } catch {
+        commitList = []
+      }
+    } else {
+      try {
+        const { data } = await client.get(`/repos/${owner}/${repo}/commits`, { query: { per_page: 50, sha: head } })
+        const rawCommits = Array.isArray(data) ? data : []
+        commitList = rawCommits.map((c) => ({
+          message: c.commit?.message || '',
+          sha: c.sha || '',
+          author: c.author?.login || c.commit?.author?.name || '',
+        }))
+      } catch {
+        commitList = []
+      }
+    }
+  }
+
+  const parsed = commitList.map((c) => parseConventionalCommit(c.message, c.sha))
+  const sections = {}
+  for (const catKey of Object.keys(CATEGORIES)) {
+    sections[catKey] = []
+  }
+  for (const item of parsed) {
+    const key = item.category in sections ? item.category : 'other'
+    sections[key].push(item)
+    if (item.isBreaking && item.type in sections && item.type !== 'breaking') {
+      sections[item.type].push(item)
+    }
+  }
+
+  const recommendedBump = calculateBump(parsed)
+  const nextVersion = version || (previousTag ? bumpVersion(previousTag, recommendedBump) : bumpVersion('0.1.0', recommendedBump))
+  const markdown = formatChangelog({ version: nextVersion, date, sections, compareUrl })
+
+  return {
+    version: nextVersion,
+    previousTag: previousTag || null,
+    head,
+    recommendedBump,
+    commitsCount: parsed.length,
+    summary: {
+      breaking: sections.breaking.length,
+      feat: sections.feat.length,
+      fix: sections.fix.length,
+      perf: sections.perf.length,
+      refactor: sections.refactor.length,
+      docs: sections.docs.length,
+      test: sections.test.length,
+      maintenance: sections.maintenance.length,
+      other: sections.other.length,
+      total: parsed.length,
+    },
+    sections,
+    markdown,
+    commits: parsed,
+  }
+}

package/lib/tools/community.js

@@ -0,0 +1,238 @@
+// Community health files scaffolding tools.
+// Standardized templates for GoodAndReady open source plugins and repositories.
+
+import { pushFiles } from './write-files.js'
+
+export const TEMPLATE_KEYS = [
+  'bug_report',
+  'feature_request',
+  'security_advisory',
+  'pull_request',
+  'security',
+  'contributing',
+  'code_of_conduct',
+]
+
+/** Generate file mapping for requested community templates. */
+export function getCommunityTemplates({
+  projectName = 'Project',
+  contactEmail = 'security@goodandready.app',
+  defaultBranch = 'main',
+  supportVersion = '>= 0.6.0',
+} = {}) {
+  const templates = {}
+
+  templates['.github/ISSUE_TEMPLATE/bug_report.md'] = `---
+name: Bug Report
+about: Create a report to help us improve
+title: 'fix: '
+labels: ['bug']
+assignees: ''
+---
+
+### 1. Context & Description
+<!-- A clear and concise description of what the bug is. -->
+
+### 2. Steps to Reproduce
+1. Go to '...'
+2. Click on '....'
+3. See error
+
+### 3. Expected Behavior
+<!-- What you expected to happen. -->
+
+### 4. Actual Behavior / Logs
+<!-- Screenshots or error logs if applicable. -->
+
+### 5. Environment
+- OS: [e.g. Linux / Windows]
+- Node version: [e.g. 22.x]
+- Plugin version: [e.g. ${supportVersion}]
+`
+
+  templates['.github/ISSUE_TEMPLATE/feature_request.md'] = `---
+name: Feature Request
+about: Suggest an idea or enhancement
+title: 'feat: '
+labels: ['enhancement']
+assignees: ''
+---
+
+### 1. Problem Statement
+<!-- Is your feature request related to a problem? Please describe. -->
+
+### 2. Proposed Solution
+<!-- Describe the solution you'd like. -->
+
+### 3. Acceptance Criteria
+- [ ] Functional requirements met
+- [ ] Automated tests added
+- [ ] Documentation updated
+
+### 4. Alternatives Considered
+<!-- Any alternatives or workaround you have considered. -->
+`
+
+  templates['.github/ISSUE_TEMPLATE/security_advisory.md'] = `---
+name: Security Vulnerability
+about: Privately report a security issue
+title: 'sec: '
+labels: ['security']
+assignees: ''
+---
+
+> [!IMPORTANT]
+> If this is a critical zero-day security vulnerability, please contact ${contactEmail} directly instead of opening a public issue.
+
+### 1. Summary
+### 2. Severity & Impact
+### 3. Steps / Proof of Concept
+### 4. Remediation / Suggested Patch
+`
+
+  templates['.github/PULL_REQUEST_TEMPLATE.md'] = `## 1. Context & Problem
+<!-- Reference issue or explain the problem solved. -->
+
+## 2. Proposed Changes
+<!-- Detailed explanation of architectural and code modifications. -->
+
+## 3. Verification & Testing
+- [ ] Unit tests added / updated
+- [ ] All tests passing (\`npm test\`)
+- [ ] No regression on existing invariants
+
+## 4. Documentation & Contracts
+- [ ] Documentation updated (README / API docs)
+- [ ] Conventional Commits used for automated release notes
+
+## 5. Review Checklist
+- [ ] Code style and lint verified
+- [ ] Zero hardcoded secrets or credentials
+`
+
+  templates['SECURITY.md'] = `# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| ${supportVersion} | :white_check_mark: |
+| < 0.6.0 | :x:                |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities directly to \`${contactEmail}\`.
+All reports will be acknowledged within 48 hours, and an advisory/patch roadmap provided within 7 days.
+`
+
+  templates['CONTRIBUTING.md'] = `# Contributing to ${projectName}
+
+Thank you for your interest in contributing!
+
+## Development Workflow
+1. Fork or branch from \`${defaultBranch}\`.
+2. Install dependencies: \`pnpm install\` or \`npm install\`.
+3. Run tests: \`npm test\`.
+
+## Conventional Commits
+We follow the Conventional Commits specification:
+- \`feat:\` new feature (triggers minor version bump)
+- \`fix:\` bug fix (triggers patch bump)
+- \`perf:\` performance improvement
+- \`refactor:\` code refactoring
+- \`docs:\` documentation updates
+- \`chore:\` maintenance and tooling
+- \`BREAKING CHANGE:\` incompatible API change (triggers major bump)
+
+## Pull Request Process
+- Fill out the 5-section PR template.
+- Ensure all automated checks pass.
+`
+
+  templates['CODE_OF_CONDUCT.md'] = `# Contributor Covenant Code of Conduct
+
+## Our Pledge
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+## Enforcement & Contact
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leadership at \`${contactEmail}\`.
+`
+
+  return templates
+}
+
+/** Map friendly template keys to path patterns */
+const KEY_TO_PATH_PATTERN = {
+  bug_report: '.github/ISSUE_TEMPLATE/bug_report.md',
+  feature_request: '.github/ISSUE_TEMPLATE/feature_request.md',
+  security_advisory: '.github/ISSUE_TEMPLATE/security_advisory.md',
+  issue_templates: '.github/ISSUE_TEMPLATE/',
+  pull_request: '.github/PULL_REQUEST_TEMPLATE.md',
+  pr_template: '.github/PULL_REQUEST_TEMPLATE.md',
+  security: 'SECURITY.md',
+  contributing: 'CONTRIBUTING.md',
+  code_of_conduct: 'CODE_OF_CONDUCT.md',
+}
+
+/** Scaffold community files into a repo branch or preview via dryRun. */
+export async function scaffoldCommunityFiles(client, {
+  owner, repo, branch, templates = 'all', options = {}, dryRun = false, message,
+} = {}) {
+  const allTemplates = getCommunityTemplates({
+    projectName: options.projectName || repo || 'Project',
+    contactEmail: options.contactEmail || 'security@goodandready.app',
+    defaultBranch: branch || 'main',
+    supportVersion: options.supportVersion || '>= 0.6.0',
+  })
+
+  let selectedPaths = Object.keys(allTemplates)
+  if (Array.isArray(templates) && !templates.includes('all')) {
+    const desiredPatterns = templates.map((t) => KEY_TO_PATH_PATTERN[t] || t)
+    selectedPaths = selectedPaths.filter((filePath) =>
+      desiredPatterns.some((pattern) => filePath === pattern || filePath.startsWith(pattern))
+    )
+  }
+
+  const files = selectedPaths.map((filePath) => ({
+    path: filePath,
+    content: allTemplates[filePath],
+  }))
+
+  if (dryRun) {
+    return {
+      dryRun: true,
+      repository: `${owner}/${repo}`,
+      branch: branch || 'main',
+      count: files.length,
+      files,
+    }
+  }
+
+  if (!client || !owner || !repo) {
+    throw new Error('client, owner and repo are required to commit files')
+  }
+
+  const commitMessage = message || 'chore: scaffold GoodAndReady community health files'
+  const pushed = await pushFiles(client, {
+    owner,
+    repo,
+    branch: branch || 'main',
+    message: commitMessage,
+    files,
+  })
+
+  return {
+    success: true,
+    repository: `${owner}/${repo}`,
+    branch: pushed.branch,
+    commit: pushed.commit,
+    count: files.length,
+    files: files.map((f) => f.path),
+  }
+}