@lousy-agents/cli 5.2.3 → 5.2.5

package/api/copilot-with-fastify/.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
     "image": "mcr.microsoft.com/devcontainers/javascript-node:24-bookworm",
     "features": {
         "ghcr.io/devcontainers/features/github-cli:1": {
-            "version": "2.83.2"
+            "version": "2.88.1"
         },
         "ghcr.io/rocker-org/devcontainer-features/apt-packages:1": {
             "packages": "yamllint, shellcheck",

package/api/copilot-with-fastify/.github/workflows/assign-copilot.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Assign and Instruct Copilot
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea  # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b  # v7.1.0
         with:
           script: |
             const issue = context.payload.issue;

package/api/copilot-with-fastify/package-lock.json

@@ -14,7 +14,7 @@
                 "kysely": "0.28.12",
                 "pino": "9.6.0",
                 "postgres": "3.4.8",
-                "zod": "3.25.56"
+                "zod": "3.25.76"
             },
             "devDependencies": {
                 "@biomejs/biome": "2.4.2",
@@ -5205,9 +5205,9 @@
             }
         },
         "node_modules/zod": {
-            "version": "3.25.56",
-            "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.56.tgz",
-            "integrity": "sha512-rd6eEF3BTNvQnR2e2wwolfTmUTnp70aUTqr0oaGbHifzC3BKJsoV+Gat8vxUMR1hwOKBs6El+qWehrHbCpW6SQ==",
+            "version": "3.25.76",
+            "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+            "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
             "license": "MIT",
             "funding": {
                 "url": "https://github.com/sponsors/colinhacks"

package/api/copilot-with-fastify/package.json

@@ -22,7 +22,7 @@
         "kysely": "0.28.12",
         "pino": "9.6.0",
         "postgres": "3.4.8",
-        "zod": "3.25.56"
+        "zod": "3.25.76"
     },
     "devDependencies": {
         "@biomejs/biome": "2.4.2",

package/cli/copilot-with-citty/.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
     "image": "mcr.microsoft.com/devcontainers/javascript-node:24-bookworm",
     "features": {
         "ghcr.io/devcontainers/features/github-cli:1": {
-            "version": "2.83.2"
+            "version": "2.88.1"
         },
         "ghcr.io/rocker-org/devcontainer-features/apt-packages:1": {
             "packages": "yamllint, shellcheck",

package/cli/copilot-with-citty/.github/workflows/assign-copilot.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Assign and Instruct Copilot
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea  # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b  # v7.1.0
         with:
           script: |
             const issue = context.payload.issue;

package/cli/copilot-with-citty/package.json

@@ -16,7 +16,7 @@
     "dependencies": {
         "citty": "0.2.1",
         "consola": "3.4.2",
-        "zod": "3.25.56"
+        "zod": "3.25.76"
     },
     "devDependencies": {
         "@biomejs/biome": "2.3.14",

package/dist/index.js

@@ -26930,9 +26930,11 @@ const CopilotSetupConfigSchema = schemas_object({
 /**
  * Loads the copilot-setup configuration using c12.
  * Falls back to defaults if no configuration is found.
- */ async function loadCopilotSetupConfig() {
+ * @param cwd Optional working directory to load config from (defaults to process.cwd())
+ */ async function loadCopilotSetupConfig(cwd) {
     const { config } = await loadConfig({
         name: "lousy-agents",
+        cwd,
         defaults: DEFAULT_COPILOT_SETUP_CONFIG,
         packageJson: "copilotSetup"
     });
@@ -26984,6 +26986,7 @@ const CopilotSetupConfigSchema = schemas_object({
 
 
 
+
 const MAX_VERSION_FILE_BYTES = 16 * 1024;
 async function readVersionFileContent(filePath) {
     await assertFileSizeWithinLimit(filePath, MAX_VERSION_FILE_BYTES, `Version file '${filePath}'`);
@@ -26993,10 +26996,14 @@ async function readVersionFileContent(filePath) {
 /**
  * File system implementation of the environment gateway.
  */ class FileSystemEnvironmentGateway {
+    cwd;
     config = null;
+    constructor(cwd){
+        this.cwd = cwd;
+    }
     async getConfig() {
         if (!this.config) {
-            this.config = await loadCopilotSetupConfig();
+            this.config = await loadCopilotSetupConfig(this.cwd !== undefined ? (0,external_node_path_.resolve)(this.cwd) : undefined);
         }
         return this.config;
     }
@@ -27127,8 +27134,9 @@ async function readVersionFileContent(filePath) {
 }
 /**
  * Creates and returns the default environment gateway.
- */ function createEnvironmentGateway() {
-    return new FileSystemEnvironmentGateway();
+ * @param cwd Optional working directory for config loading (defaults to process.cwd())
+ */ function createEnvironmentGateway(cwd) {
+    return new FileSystemEnvironmentGateway(cwd);
 }
 
 // EXTERNAL MODULE: external "node:child_process"
@@ -32212,16 +32220,21 @@ var dist = __webpack_require__(3519);
 
 
 
+
 const COPILOT_SETUP_WORKFLOW_FILENAMES = [
     "copilot-setup-steps.yml",
     "copilot-setup-steps.yaml"
 ];
 const MAX_WORKFLOW_FILE_BYTES = 1024 * 1024;
 class FileSystemWorkflowGateway {
+    cwd;
     config = null;
+    constructor(cwd){
+        this.cwd = cwd;
+    }
     async getConfig() {
         if (!this.config) {
-            this.config = await loadCopilotSetupConfig();
+            this.config = await loadCopilotSetupConfig(this.cwd !== undefined ? (0,external_node_path_.resolve)(this.cwd) : undefined);
         }
         return this.config;
     }
@@ -32283,8 +32296,8 @@ class FileSystemWorkflowGateway {
         await (0,promises_.writeFile)(workflowPath, content, "utf-8");
     }
 }
-function createWorkflowGateway() {
-    return new FileSystemWorkflowGateway();
+function createWorkflowGateway(cwd) {
+    return new FileSystemWorkflowGateway(cwd);
 }
 
 ;// CONCATENATED MODULE: ../core/src/gateways/workflow-gateway.ts
@@ -32556,7 +32569,7 @@ function buildInstallCandidatesFromPackageManagers(packageManagers, config) {
         }
         const stepName = getInstallStepName(pm.type);
         candidates.push({
-            action: "",
+            action: `run:${pm.type}`,
             source: "version-file",
             name: stepName,
             run: pmConfig.installCommand
@@ -33135,8 +33148,8 @@ const workflow_generator_defaultActionVersionPort = createActionVersionPort(work
  * @returns A typed Step object
  */ function buildStepFromCandidate(candidate, options) {
     // Handle run steps (install commands)
-    // Run steps have a 'run' field and no action (or empty action string)
-    if (candidate.run && !candidate.action) {
+    // Run steps have a 'run' field and use the 'run:' action prefix (e.g., 'run:npm')
+    if (candidate.run && candidate.action.startsWith("run:")) {
         const stepProps = {
             name: candidate.name || "Run command",
             run: candidate.run
@@ -33213,9 +33226,11 @@ const workflow_generator_defaultActionVersionPort = createActionVersionPort(work
     const job = new NormalJob("copilot-setup-steps", {
         "runs-on": "ubuntu-latest",
         "timeout-minutes": 30,
-        permissions: {
+        permissions: options?.includeIdTokenPermission ? {
             "id-token": "write",
             contents: "read"
+        } : {
+            contents: "read"
         }
     }).addSteps(steps);
     const workflow = new Workflow("copilot-setup-steps.yml", {
@@ -34844,9 +34859,9 @@ const copilotSetupCommand = defineCommand({
     args: copilotSetupArgs,
     run: async (context)=>{
         const targetDir = typeof context.data?.targetDir === "string" ? context.data.targetDir : process.cwd();
-        const environmentGateway = createEnvironmentGateway();
-        const workflowGateway = createWorkflowGateway();
-        const copilotSetupConfig = await loadCopilotSetupConfig();
+        const environmentGateway = createEnvironmentGateway(targetDir);
+        const workflowGateway = createWorkflowGateway(targetDir);
+        const copilotSetupConfig = await loadCopilotSetupConfig(targetDir);
         const rulesetGateway = context.data?.rulesetGateway ?? await createGitHubRulesetGateway();
         const npmrcGateway = context.data?.npmrcGateway ?? createNpmrcGateway();
         const prompt = context.data?.prompt ?? ((message, options)=>consola.prompt(message, options));
@@ -34983,6 +34998,43 @@ async function checkAndPromptAgentShell(npmrcGateway, targetDir, prompt, environ
     consola.success("Added agent-shell to .npmrc. Run `npm install -g @lousy-agents/agent-shell` to complete setup.");
 }
 
+;// CONCATENATED MODULE: ../core/src/use-cases/init-copilot-setup-workflow.ts
+/**
+ * Use case for initializing a Copilot Setup Steps workflow in a new project.
+ * Orchestrates environment detection, candidate building, and workflow generation.
+ * Preserves any pre-existing workflow file.
+ */ 
+
+
+/**
+ * Generates a Copilot Setup Steps workflow in the target directory if one does not
+ * already exist. Uses detected environment (version files, package managers) to build
+ * environment-aware setup candidates and writes a SHA-pinned workflow.
+ *
+ * @returns `{ created: false }` when the workflow already exists (preserving it),
+ *          `{ created: true, stepCount }` after writing the generated workflow.
+ */ async function initCopilotSetupWorkflow(input, workflowGateway, environmentGateway, copilotSetupConfig) {
+    const workflowExists = await workflowGateway.copilotSetupWorkflowExists(input.targetDir);
+    if (workflowExists) {
+        return {
+            created: false,
+            stepCount: 0
+        };
+    }
+    const environment = await environmentGateway.detectEnvironment(input.targetDir);
+    const workflowCandidates = await workflowGateway.parseWorkflowsForSetupActions(input.targetDir);
+    const envCandidates = await buildCandidatesFromEnvironment(environment, undefined, copilotSetupConfig);
+    const allCandidates = mergeCandidates(workflowCandidates, envCandidates);
+    const content = await generateWorkflowContent(allCandidates, undefined, {
+        resolvedVersions: input.resolvedVersions
+    });
+    await workflowGateway.writeCopilotSetupWorkflow(input.targetDir, content);
+    return {
+        created: true,
+        stepCount: allCandidates.length + 1
+    }; // +1 for checkout
+}
+
 ;// CONCATENATED MODULE: ./src/lib/config.ts
 
 
@@ -36069,6 +36121,10 @@ const validateUnscopedName = (name)=>{
 
 
 
+
+
+
+
 const ProjectTypeSchema = schemas_enum([
     "cli",
     "webapp",
@@ -36143,6 +36199,61 @@ async function scaffoldProject(projectType, targetDir, templateContext) {
 function isSupportedProjectType(projectType) {
     return SUPPORTED_PROJECT_TYPES.includes(projectType);
 }
+/**
+ * SHA-pinned action versions for new projects.
+ * Actions shared with the repository's copilot-setup-steps.yml (checkout, setup-python,
+ * mise-action) use the same SHAs for consistency. Additional entries (setup-node,
+ * setup-java, setup-go) are defaults for newly scaffolded projects that may need them
+ * and are aligned with the scaffold template workflows.
+ */ const INIT_RESOLVED_VERSIONS = [
+    {
+        action: "actions/checkout",
+        sha: "0c366fd6a839edf440554fa01a7085ccba70ac98",
+        versionTag: "v6.0.2"
+    },
+    {
+        action: "actions/setup-node",
+        sha: "53b83947a5a98c8d113130e565377fae1a50d02f",
+        versionTag: "v6.3.0"
+    },
+    {
+        action: "actions/setup-python",
+        sha: "28f2168f4d98ee0445e3c6321f6e6616c83dd5ec",
+        versionTag: "v6.2.0"
+    },
+    {
+        action: "actions/setup-java",
+        sha: "7a6d8a8234af8eb26422e24e3006232cccaa061b",
+        versionTag: "v4.6.0"
+    },
+    {
+        action: "actions/setup-go",
+        sha: "5fbf81aa9aa1f4a83e0b6f3c86e690bc4c2aebfe",
+        versionTag: "v5.3.0"
+    },
+    {
+        action: "jdx/mise-action",
+        sha: "c1ecc8f748cd28cdeabf76dab3cccde4ce692fe4",
+        versionTag: "v3.6.1"
+    }
+];
+async function generateCopilotSetupWorkflow(targetDir) {
+    // Normalize path (e.g., resolve ../../relative segments) before
+    // passing to config loading or gateway construction.
+    const resolvedTargetDir = (0,external_node_path_.resolve)(targetDir);
+    const workflowGateway = createWorkflowGateway(resolvedTargetDir);
+    const environmentGateway = createEnvironmentGateway(resolvedTargetDir);
+    const copilotSetupConfig = await loadCopilotSetupConfig(resolvedTargetDir);
+    const result = await initCopilotSetupWorkflow({
+        targetDir: resolvedTargetDir,
+        resolvedVersions: INIT_RESOLVED_VERSIONS
+    }, workflowGateway, environmentGateway, copilotSetupConfig);
+    if (!result.created) {
+        consola.info("Copilot setup workflow already exists - preserving existing file");
+        return;
+    }
+    consola.success(`Created copilot-setup-steps.yml with ${result.stepCount} step(s)`);
+}
 const initCommand = defineCommand({
     meta: {
         name: "init",
@@ -36174,6 +36285,7 @@ const initCommand = defineCommand({
             projectName
         };
         await scaffoldProject(projectType, targetDir, templateContext);
+        await generateCopilotSetupWorkflow(targetDir);
         consola.info(`${config.label} project scaffolding complete. Run 'npm install' to install dependencies.`);
     }
 });