@moretea-labs/forge 1.5.0-rc.1

package/assets/templates/helpers/check-deploy-sql-order.sh

@@ -0,0 +1,117 @@
+#!/bin/bash
+set -euo pipefail
+
+usage() {
+  cat <<'USAGE_EOF'
+Usage: scripts/check-deploy-sql-order.sh [--quiet] [--root deploy/sql]
+
+Validates deployment SQL assets:
+- deployment SQL files must live directly under deploy/sql/
+- filenames must start with a 4-digit numeric prefix
+- prefixes must be strictly ascending in filename order
+- if tests/sql/control_plane_invariants.sql exists, it must reference every deployment SQL file
+
+Example: deploy/sql/0001_create_tables.sql
+USAGE_EOF
+}
+
+quiet=0
+sql_root="deploy/sql"
+invariant_file="tests/sql/control_plane_invariants.sql"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --quiet)
+      quiet=1
+      shift
+      ;;
+    --root)
+      sql_root="${2:-}"
+      if [[ -z "$sql_root" ]]; then
+        echo "--root requires a path" >&2
+        exit 1
+      fi
+      shift 2
+      ;;
+    --help|-h)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "Unknown argument: $1" >&2
+      usage
+      exit 1
+      ;;
+  esac
+done
+
+sql_root="${sql_root%/}"
+deploy_root="${sql_root%%/sql}"
+issues=0
+
+report_issue() {
+  echo "[deploy-sql] $1"
+  issues=$((issues + 1))
+}
+
+if [[ "$sql_root" != "deploy/sql" ]]; then
+  report_issue "SQL root must be deploy/sql; got: $sql_root"
+fi
+
+if [[ ! -d "$sql_root" ]]; then
+  report_issue "Missing SQL directory: $sql_root"
+else
+  if [[ -d "$deploy_root" ]]; then
+    while IFS= read -r file; do
+      [[ -z "$file" ]] && continue
+      if [[ "$file" != "$sql_root/"* ]]; then
+        report_issue "Deploy SQL file must live under $sql_root/: $file"
+        continue
+      fi
+
+      rel="${file#"$sql_root"/}"
+      if [[ "$rel" == */* ]]; then
+        report_issue "SQL file must be a direct child of $sql_root/: $file"
+      fi
+    done < <(find "$deploy_root" -type f -name '*.sql' | sort)
+  fi
+
+  previous_number=-1
+  previous_file=""
+  while IFS= read -r file; do
+    [[ -z "$file" ]] && continue
+    base="$(basename "$file")"
+
+    if [[ ! "$base" =~ ^([0-9]{4})[_-].+\.sql$ ]]; then
+      report_issue "SQL filename must start with a 4-digit prefix: $file (example: deploy/sql/0001_create_tables.sql)"
+      continue
+    fi
+
+    number="${BASH_REMATCH[1]}"
+    number_value=$((10#$number))
+    if (( previous_number >= 0 && number_value <= previous_number )); then
+      report_issue "SQL prefixes must be strictly ascending: $previous_file before $file"
+    fi
+
+    previous_number="$number_value"
+    previous_file="$file"
+  done < <(find "$sql_root" -maxdepth 1 -type f -name '*.sql' | sort)
+
+  if [[ -f "$invariant_file" ]]; then
+    while IFS= read -r file; do
+      [[ -z "$file" ]] && continue
+      base="$(basename "$file")"
+      if ! grep -Fq "$file" "$invariant_file" && ! grep -Fq "$base" "$invariant_file"; then
+        report_issue "SQL migration must be referenced by $invariant_file: $file"
+      fi
+    done < <(find "$sql_root" -maxdepth 1 -type f -name '*.sql' | sort)
+  fi
+fi
+
+if (( issues > 0 )); then
+  exit 1
+fi
+
+if (( quiet == 0 )); then
+  echo "[deploy-sql] OK"
+fi

package/assets/templates/helpers/check-skill-version.ts

@@ -0,0 +1,193 @@
+#!/usr/bin/env bun
+/**
+ * Skill Version Consistency Checker
+ *
+ * Validates that version numbers are consistent across:
+ * - package.json
+ * - assets/skill-version.json
+ *
+ * Also checks if a generated project needs migration.
+ */
+
+import { readFileSync, existsSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { resolveAgenticDevRoot } from "./workflow-contract.ts";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const REPO_ROOT = __dirname.endsWith("/.ai/harness/scripts")
+  ? join(__dirname, "../../..")
+  : __dirname.endsWith("/assets/templates/helpers")
+    ? join(__dirname, "../../..")
+    : join(__dirname, "..");
+
+export interface ConsistencyResult {
+  consistent: boolean;
+  packageJsonVersion: string | null;
+  skillVersionJsonVersion: string;
+  templateVersionJsonVersion: string;
+  skillVersionSource: string;
+  warnings: string[];
+  errors: string[];
+}
+
+export interface MigrationCheckResult {
+  needsMigration: boolean;
+  currentSkillVersion: string;
+  projectSkillVersion: string | null;
+  projectTemplatVersion: string | null;
+}
+
+/**
+ * Check version consistency across the version sources this repo owns.
+ */
+export function checkConsistency(repoRoot: string = REPO_ROOT): ConsistencyResult {
+  const errors: string[] = [];
+  const warnings: string[] = [];
+
+  // Read package.json
+  const pkgPath = join(repoRoot, "package.json");
+  if (!existsSync(pkgPath)) {
+    throw new Error(`package.json not found at ${pkgPath}`);
+  }
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+  const packageJsonVersion =
+    typeof pkg.version === "string" && pkg.version.length > 0
+      ? (pkg.version as string)
+      : null;
+
+  // Read the local source manifest when this script runs inside forge;
+  // generated projects resolve the upstream skill root instead.
+  const localSvPath = join(repoRoot, "assets", "skill-version.json");
+  const svPath = existsSync(localSvPath)
+    ? localSvPath
+    : join(resolveAgenticDevRoot(repoRoot), "assets", "skill-version.json");
+  if (!existsSync(svPath)) {
+    throw new Error(`skill-version.json not found at ${svPath}`);
+  }
+  const sv = JSON.parse(readFileSync(svPath, "utf-8"));
+  const skillVersionJsonVersion = sv.version as string;
+  const templateVersionJsonVersion = sv.templateVersion as string;
+  const usingLocalSkillManifest = svPath === localSvPath;
+
+  const packageCoreVersion = packageJsonVersion?.split("-", 1)[0] ?? null;
+  const isForgePackage =
+    pkg.name === "forge" ||
+    pkg.name === "@moretea-labs/forge-controller" ||
+    pkg.name === "@moretea-labs/forge";
+
+  if (
+    usingLocalSkillManifest &&
+    isForgePackage &&
+    packageCoreVersion !== null &&
+    packageCoreVersion !== skillVersionJsonVersion
+  ) {
+    errors.push(
+      `package.json core version (${packageCoreVersion}) must match assets/skill-version.json version (${skillVersionJsonVersion})`
+    );
+  }
+
+  if (usingLocalSkillManifest && templateVersionJsonVersion !== skillVersionJsonVersion) {
+    errors.push(
+      `assets/skill-version.json templateVersion (${templateVersionJsonVersion}) must match version (${skillVersionJsonVersion})`
+    );
+  }
+
+  if (!usingLocalSkillManifest && packageJsonVersion !== null) {
+    warnings.push(
+      `package.json.version (${packageJsonVersion}) belongs to the target repo; workflow stamp uses upstream forge skill-version.json`
+    );
+  }
+
+  return {
+    consistent: errors.length === 0,
+    packageJsonVersion,
+    skillVersionJsonVersion,
+    templateVersionJsonVersion,
+    skillVersionSource: svPath,
+    warnings,
+    errors,
+  };
+}
+
+/**
+ * Check if a generated project needs migration.
+ */
+export function checkProjectNeedsMigration(
+  projectPath: string,
+  repoRoot: string = REPO_ROOT
+): MigrationCheckResult {
+  const localSvPath = join(repoRoot, "assets", "skill-version.json");
+  const svPath = existsSync(localSvPath)
+    ? localSvPath
+    : join(resolveAgenticDevRoot(repoRoot), "assets", "skill-version.json");
+  const sv = JSON.parse(readFileSync(svPath, "utf-8"));
+  const currentSkillVersion = sv.version as string;
+
+  const stampPath = join(projectPath, ".claude", ".skill-version");
+  if (!existsSync(stampPath)) {
+    return {
+      needsMigration: true,
+      currentSkillVersion,
+      projectSkillVersion: null,
+      projectTemplatVersion: null,
+    };
+  }
+
+  const stampContent = readFileSync(stampPath, "utf-8");
+  const skillVersionMatch = stampContent.match(/^skill_version=(.+)$/m);
+  const templateVersionMatch = stampContent.match(/^template_version=(.+)$/m);
+
+  const projectSkillVersion = skillVersionMatch?.[1] ?? null;
+  const projectTemplatVersion = templateVersionMatch?.[1] ?? null;
+
+  return {
+    needsMigration: projectSkillVersion !== currentSkillVersion,
+    currentSkillVersion,
+    projectSkillVersion,
+    projectTemplatVersion,
+  };
+}
+
+// CLI entry point
+if (import.meta.main) {
+  const args = process.argv.slice(2);
+  const projectIdx = args.indexOf("--project");
+  const projectPath = projectIdx !== -1 ? args[projectIdx + 1] : null;
+
+  try {
+    const result = checkConsistency();
+
+    if (result.consistent) {
+      console.log(
+        `Workflow version check passed: forge=${result.skillVersionJsonVersion}, template=${result.templateVersionJsonVersion}`
+      );
+      console.log(`Workflow version source: ${result.skillVersionSource}`);
+      for (const warning of result.warnings) {
+        console.log(`Warning: ${warning}`);
+      }
+    } else {
+      console.error("Version consistency check FAILED:");
+      for (const error of result.errors) {
+        console.error(`  - ${error}`);
+      }
+      process.exit(1);
+    }
+
+    if (projectPath) {
+      const migration = checkProjectNeedsMigration(projectPath);
+      if (migration.needsMigration) {
+        console.log(
+          `Project at ${projectPath} needs migration: ` +
+          `${migration.projectSkillVersion ?? "(no stamp)"} → ${migration.currentSkillVersion}`
+        );
+      } else {
+        console.log(`Project at ${projectPath} is up to date (${migration.currentSkillVersion})`);
+      }
+    }
+  } catch (error) {
+    console.error("Error:", error instanceof Error ? error.message : error);
+    process.exit(1);
+  }
+}

package/assets/templates/helpers/check-task-sync.sh

@@ -0,0 +1,65 @@
+#!/bin/bash
+set -euo pipefail
+
+if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  echo "[task-sync] Not a git repository; skipping task-sync check."
+  exit 0
+fi
+
+get_changed_files() {
+  if ! git diff --cached --quiet --ignore-submodules --; then
+    git diff --cached --name-only --diff-filter=ACMR
+    return
+  fi
+
+  git diff --name-only --diff-filter=ACMR
+  git ls-files --others --exclude-standard
+}
+
+changed_files=()
+while IFS= read -r line; do
+  [[ -n "$line" ]] && changed_files+=("$line")
+done < <(get_changed_files)
+
+if [[ "${#changed_files[@]}" -eq 0 ]]; then
+  echo "[task-sync] No changes detected."
+  exit 0
+fi
+
+has_non_task_change=0
+has_task_sync_change=0
+
+for file in "${changed_files[@]}"; do
+  case "$file" in
+    tasks/archive/*)
+      has_non_task_change=1
+      ;;
+    tasks/*)
+      has_task_sync_change=1
+      ;;
+    docs/researches/*)
+      has_task_sync_change=1
+      ;;
+    *)
+      has_non_task_change=1
+      ;;
+  esac
+done
+
+if [[ "$has_non_task_change" -eq 0 ]]; then
+  if [[ "$has_task_sync_change" -eq 1 ]]; then
+    echo "[task-sync] Only task/research sync files changed."
+  else
+    echo "[task-sync] No substantive repo changes detected."
+  fi
+  exit 0
+fi
+
+if [[ "$has_task_sync_change" -eq 1 ]]; then
+  echo "[task-sync] Repo changes include synchronized tasks/ updates."
+  exit 0
+fi
+
+echo "[task-sync] Substantive repo changes detected without tasks/ synchronization."
+echo "[task-sync] Update tasks/current.md, tasks/todos.md, tasks/lessons.md, docs/researches/*.md, tasks/notes/*.md, or an active tasks/contracts/*.md file."
+exit 1