@theagilemonkeys/facility 0.11.4 → 0.12.1

package/src/render.mjs

@@ -1,66 +0,0 @@
-// Template rendering and managed-content insertion.
-//
-// Placeholders are {{UPPER_SNAKE}} with no spaces, so GitHub Actions
-// expressions (`${{ secrets.X }}` — spaces, lowercase, dots) never match and
-// pass through untouched.
-
-/**
- * Substitute {{VARS}} in a template. A placeholder alone on its line is a
- * block variable: an empty value removes the whole line, a multi-line value
- * lands verbatim. Unknown placeholders are left as-is.
- */
-export function render(template, vars) {
-  const withBlocks = template.replace(
-    /^[ \t]*\{\{([A-Z0-9_]+)\}\}[ \t]*\r?\n/gm,
-    (match, name) => {
-      const value = vars[name];
-      if (value === undefined) return match;
-      if (value === "") return "";
-      return value.endsWith("\n") ? value : `${value}\n`;
-    }
-  );
-  return withBlocks.replace(/\{\{([A-Z0-9_]+)\}\}/g, (match, name) => vars[name] ?? match);
-}
-
-/** True when `content` already contains the facility managed-block marker. */
-export function hasManagedBlock(content) {
-  return content.includes("<!-- facility:start");
-}
-
-/** Append a managed block to existing file content (with a blank line). */
-export function appendManagedBlock(content, block) {
-  const base = content.replace(/\s*$/, "");
-  return base ? `${base}\n\n${block}` : block;
-}
-
-const MODULES_START = "<!-- facility:modules:start -->";
-const MODULES_END = "<!-- facility:modules:end -->";
-
-/** Insert a module's standard section between the modules markers. */
-export function insertModuleSection(standard, section, moduleTitle) {
-  if (standard.includes(`(facility module)`) && standard.includes(`### ${moduleTitle} (facility module)`)) {
-    return { content: standard, inserted: false };
-  }
-  const end = standard.indexOf(MODULES_END);
-  if (end === -1) {
-    // No markers (user removed them): append under a Modules heading instead.
-    const block = `\n## Modules\n\n${section.trim()}\n`;
-    return { content: `${standard.replace(/\s*$/, "")}\n${block}`, inserted: true };
-  }
-  const before = standard.slice(0, end).replace(/[ \t]*$/, "");
-  const after = standard.slice(end);
-  return { content: `${before}${section.trim()}\n\n${after}`, inserted: true };
-}
-
-const HOOK_MARKER = "/* facility:module-rules */";
-
-/** Splice a module's hook rules at the marker in protect-files.mjs. */
-export function insertHookRules(hookSource, fragment, moduleName) {
-  const sentinel = `facility module: ${moduleName}`;
-  if (hookSource.includes(sentinel)) return { content: hookSource, inserted: false };
-  if (!hookSource.includes(HOOK_MARKER)) return { content: hookSource, inserted: false };
-  return {
-    content: hookSource.replace(HOOK_MARKER, `${fragment.trim()}\n\n${HOOK_MARKER}`),
-    inserted: true,
-  };
-}

package/templates/claude/settings.json

@@ -1,71 +0,0 @@
-{
-  "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "includeCoAuthoredBy": false,
-  "permissions": {
-    "defaultMode": "default",
-    "allow": [
-      {{ALLOW_CHECKS_JSON}}
-      "Bash(node guards/run.mjs)",
-      "Bash(git status:*)",
-      "Bash(git diff:*)",
-      "Bash(git log:*)",
-      "Bash(git show:*)",
-      "Bash(git add:*)",
-      "Bash(git restore:*)",
-      "Bash(git branch:*)",
-      "Bash(git switch:*)",
-      "Bash(git checkout:*)",
-      "Bash(git commit:*)",
-      "Bash(git fetch:*)",
-      "Bash(git rev-parse:*)",
-      "Bash(gh pr view:*)",
-      "Bash(gh pr list:*)",
-      "Bash(gh pr diff:*)",
-      "Bash(gh pr checks:*)",
-      "Bash(gh issue view:*)",
-      "Bash(gh issue list:*)",
-      "Bash(gh run list:*)",
-      "Bash(gh run view:*)"
-    ],
-    "ask": [
-      "Bash(git push:*)",
-      "Bash(gh pr create:*)",
-      "Bash(gh pr merge:*)",
-      "Bash(gh issue create:*)"
-    ],
-    "deny": [
-      "Read(.env)",
-      "Read(.env.local)",
-      "Read(.env.*.local)",
-      "Bash(sudo:*)",
-      "Bash(rm -rf /)",
-      "Bash(rm -rf ~)",
-      "Bash(git push --force:*)",
-      "Bash(git push -f:*)"
-    ]
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/protect-branch.mjs\"",
-            "timeout": 30
-          }
-        ]
-      },
-      {
-        "matcher": "Edit|Write|MultiEdit",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/protect-files.mjs\"",
-            "timeout": 30
-          }
-        ]
-      }
-    ]
-  }
-}

package/templates/delivery/verify.mjs

@@ -1,157 +0,0 @@
-#!/usr/bin/env node
-// Generated by facility — deterministic /builder delivery acceptance.
-import { execFileSync } from "node:child_process";
-import { appendFileSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-
-const mode = process.argv[2];
-const repo = required("GITHUB_REPOSITORY");
-const defaultBranch = required("DEFAULT_BRANCH");
-const receiptDir = join(required("RUNNER_TEMP"), "facility-delivery");
-const receiptPath = join(receiptDir, "receipt.json");
-const conventionalSubject =
-  /^(feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert)(\((?=\S)[^()\r\n]*[^\s()\r\n]\))?!?: \S.*$/;
-
-if (mode === "discover") discover();
-else if (mode === "finalize") finalize();
-else throw new Error("Usage: verify.mjs discover|finalize");
-
-function discover() {
-  const event = JSON.parse(readFileSync(required("GITHUB_EVENT_PATH"), "utf8"));
-  const startedAt = required("FACILITY_STARTED_AT");
-  const startSha = required("FACILITY_START_SHA");
-  const existingPr =
-    event.pull_request?.number ?? (event.issue?.pull_request ? event.issue.number : undefined);
-  const pr = existingPr ? pull(existingPr) : newlyOpenedPull(startedAt);
-
-  assert(pr.state === "open", `PR #${pr.number} is not open`);
-  assert(!pr.draft, `PR #${pr.number} is still a draft; automated review would not run`);
-  assert(
-    pr.base?.ref === defaultBranch,
-    `PR #${pr.number} targets ${pr.base?.ref}, not ${defaultBranch}`,
-  );
-  assert(pr.head?.repo?.full_name === repo, `PR #${pr.number} is not a same-repository PR`);
-  assert(
-    pr.user?.type === "Bot",
-    `PR #${pr.number} is not bot-authored; address-review would be disabled`,
-  );
-  assert(
-    /^(feature|fix|chore|ci|docs|refactor|perf|test|build|revert)\/[a-z0-9][a-z0-9._/-]*$/.test(
-      pr.head.ref,
-    ),
-    `branch ${pr.head?.ref} is not semantic or still carries an agent/tool prefix`,
-  );
-  assert(pr.head?.sha !== startSha, "builder reported success without delivering a new commit");
-
-  const commits = ghJson(["api", `repos/${repo}/pulls/${pr.number}/commits?per_page=100`]);
-  const startIndex = commits.findIndex((commit) => commit.sha === startSha);
-  if (existingPr) {
-    assert(
-      startIndex >= 0,
-      `PR #${pr.number} no longer contains its pre-builder head; history was rewritten`,
-    );
-  }
-  const delivered = startIndex >= 0 ? commits.slice(startIndex + 1) : commits;
-  assert(delivered.length > 0, `PR #${pr.number} contains no builder-delivered commits`);
-
-  for (const commit of delivered) {
-    const message = commit.commit?.message ?? "";
-    const subject = message.split(/\r?\n/, 1)[0];
-    assert(
-      !hasForbiddenSubjectCharacters(subject) && conventionalSubject.test(subject),
-      `commit ${commit.sha} is not Conventional Commits: ${subject}`,
-    );
-    assert(
-      !/^Co-authored-by:/im.test(message),
-      `commit ${commit.sha} contains a Co-authored-by trailer`,
-    );
-    assert(
-      commit.commit?.verification?.verified === true,
-      `commit ${commit.sha} is not verified by GitHub`,
-    );
-  }
-
-  mkdirSync(receiptDir, { recursive: true });
-  const receipt = {
-    schema: "facility.delivery.v1",
-    repository: repo,
-    pullRequest: { number: pr.number, url: pr.html_url, base: pr.base.ref },
-    branch: pr.head.ref,
-    headSha: pr.head.sha,
-    author: pr.user.login,
-    deliveredCommits: delivered.map((commit) => commit.sha),
-    startedAt,
-    verification: "pending",
-  };
-  writeFileSync(receiptPath, `${JSON.stringify(receipt, null, 2)}\n`);
-  output("pr_number", String(pr.number));
-  output("head_ref", pr.head.ref);
-  output("head_sha", pr.head.sha);
-  console.log(`Validated delivery metadata for ${pr.html_url} at ${pr.head.sha}.`);
-}
-
-function finalize() {
-  const prNumber = required("FACILITY_PR_NUMBER");
-  const headRef = required("FACILITY_HEAD_REF");
-  const headSha = required("FACILITY_HEAD_SHA");
-  const pr = pull(prNumber);
-  assert(pr.head?.ref === headRef, `PR #${prNumber} head branch changed during verification`);
-  assert(pr.head?.sha === headSha, `PR #${prNumber} head commit changed during verification`);
-
-  const receipt = JSON.parse(readFileSync(receiptPath, "utf8"));
-  receipt.verification = "passed";
-  receipt.verifiedAt = new Date().toISOString();
-  writeFileSync(receiptPath, `${JSON.stringify(receipt, null, 2)}\n`);
-  console.log(JSON.stringify(receipt));
-}
-
-function newlyOpenedPull(startedAt) {
-  const pulls = ghJson([
-    "api",
-    `repos/${repo}/pulls?state=open&base=${encodeURIComponent(defaultBranch)}&sort=created&direction=desc&per_page=50`,
-  ]).filter(
-    (pr) =>
-      pr.head?.repo?.full_name === repo &&
-      pr.created_at >= startedAt &&
-      pr.head?.sha !== process.env.FACILITY_START_SHA,
-  );
-  assert(
-    pulls.length === 1,
-    `expected exactly one new PR from this builder run; found ${pulls.length}`,
-  );
-  return pulls[0];
-}
-
-function pull(number) {
-  return ghJson(["api", `repos/${repo}/pulls/${number}`]);
-}
-
-function ghJson(args) {
-  return JSON.parse(execFileSync("gh", args, { encoding: "utf8" }));
-}
-
-function output(name, value) {
-  appendFileSync(required("GITHUB_OUTPUT"), `${name}=${value}\n`);
-}
-
-function hasForbiddenSubjectCharacters(subject) {
-  return [...subject].some((character) => {
-    const codePoint = character.codePointAt(0) ?? 0;
-    return (
-      codePoint <= 0x1f ||
-      (codePoint >= 0x7f && codePoint <= 0x9f) ||
-      codePoint === 0x2028 ||
-      codePoint === 0x2029
-    );
-  });
-}
-
-function required(name) {
-  const value = process.env[name];
-  if (!value) throw new Error(`${name} is required`);
-  return value;
-}
-
-function assert(condition, message) {
-  if (!condition) throw new Error(message);
-}