agents-gitflow-guard 0.0.7 → 0.0.9

package/README.md

@@ -204,7 +204,7 @@ archive (optional; you archive after release)
 | **integration** | `branches.integration` | always | no direct push (default `pr`); features merge in via PR/MR |
 | **preview** | `branches.preview` (array) | optional | no direct push; updates via PR/MR only (env endpoints) |
 | **production** | `branches.production` (array) | optional | PR/MR only; merge by user only (`mergeBy: "user"`) |
-| **archive** | `branches.archive` (array) | optional | user-hand only — agents cannot even create a PR |
+| **archive** | `branches.archive` (array) | optional | archive PR/MR may be created by agents; the merge stays user-hand only |
 
 ### Customizing branch names & rules — any naming works
 
@@ -274,7 +274,7 @@ archive (optional; you archive after release)
 | direct push / force-push / delete integration / preview / production / archive | 🚫 block (integration/preview `flexible` direct push allowed) |
 | PR/MR: feature → integration / preview | ✅ allow |
 | PR/MR: feature → production | ✅ allow to create; **merge blocked** (you merge in UI) |
-| PR/MR targeting archive | 🚫 block |
+| PR/MR into archive | ✅ create allowed; 🚫 merge blocked (you merge in UI) |
 | local `git merge feature/x` while on integration / preview | 🚫 block (PR/MR required); `update: flexible` allows |
 | chained commands (`checkout develop && merge feature/x`) | 🚫 blocked — branch switches are simulated per segment, no bypass |
 
@@ -354,6 +354,12 @@ hooks:
 }
 ```
 
+**GitHub Copilot — deliberately no hook here.** Copilot ships its own guardrails for exactly this job: per-tool **allow/deny/ask** permissions and project **rules** (`rules.json` + `AGENTS.md`). Point Copilot users at the official docs instead of a plugin hook:
+
+- [Allowing and denying tool use (GitHub Docs)](https://docs.github.com/en/copilot/how-tos/copilot-cli/use-copilot-cli/allowing-tools)
+- [Adding custom rules for the Copilot coding agent (GitHub Docs)](https://docs.github.com/en/copilot/customizing-copilot/adding-custom-rules-for-the-copilot-coding-agent)
+- Optional: Copilot also has a [hooks system](https://docs.github.com/en/copilot/reference/hooks-reference) (`preToolUse` → `permissionDecision:"deny"`) if you want command-level interception.
+
 - The hook reads the payload on stdin and answers with that platform's protocol: Claude Code / OpenCode → `exit 2` (stderr is the reason + "next step" hint); Codex → JSON `{"hookSpecificOutput":{"permissionDecision":"deny",...}}` on stdout; Antigravity → JSON `{"decision":"deny","reason":...}` on stdout with `exit 0` (Antigravity requires exit 0 and rejects `hookSpecificOutput` / non-allow values).
 - Only the pre-tool event is needed: the guard blocks *before* the command runs. There is no permit to consume afterwards, so no post-tool hooks are required.
 - Use an **absolute path** to the binary — hook subprocesses may not inherit your shell `PATH`. `${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs` (Claude Code), `node bin/gitflow-guard.mjs` (Codex, runs from the project working directory), or `$OPENCODE_PROJECT_DIR/bin/gitflow-guard.mjs` (OpenCode) or `node bin/gitflow-guard.mjs` (Antigravity, relative to the workspace `.agents/` dir) also work from a checkout.

package/README.zh.md

@@ -201,7 +201,7 @@ archive(可选, 发布后你亲手归档)
 | **integration** | `branches.integration` | 必填 | 禁直推(默认 `pr`);feature 只经 PR/MR 合入 |
 | **preview** | `branches.preview`(数组) | 可选 | 禁直推;只走 PR/MR(环境终点) |
 | **production** | `branches.production`(数组) | 可选 | 只走 PR/MR;合并仅限你(`mergeBy: "user"`) |
-| **archive** | `branches.archive`(数组) | 可选 | 仅用户——agent 连建 PR 都不行 |
+| **archive** | `branches.archive`(数组) | 可选 | 允许 agent 创建指向它的 PR/MR; 合并仍限用户亲手 |
 
 ### 自定义分支名与规则——任何命名都可以
 
@@ -351,6 +351,12 @@ hooks:
 }
 ```
 
+**GitHub Copilot —— 故意不提供 hook**。Copilot 自带这套守卫的原生能力: 工具级 **allow/deny/ask** 权限 + 项目 **rules**(`rules.json` + `AGENTS.md`)。对 Copilot 用户,直接引官方文档即可,不需要我们的插件:
+
+- [允许和拒绝工具使用(GitHub Docs)](https://docs.github.com/en/copilot/how-tos/copilot-cli/use-copilot-cli/allowing-tools)
+- [为 Copilot coding agent 添加自定义规则(GitHub Docs)](https://docs.github.com/en/copilot/customizing-copilot/adding-custom-rules-for-the-copilot-coding-agent)
+- 可选: Copilot 也有官方 [hooks 系统](https://docs.github.com/en/copilot/reference/hooks-reference)(`preToolUse` → `permissionDecision:"deny"`),想要命令级拦截可以自己接。
+
 - hook 读 stdin payload,按**各平台协议**作答:Claude Code / OpenCode → `exit 2`(stderr 展示原因 + "下一步"提示);Codex → stdout 输出 JSON `{"hookSpecificOutput":{"permissionDecision":"deny",...}}`;Antigravity → stdout 输出 `{"decision":"deny","reason":...}` 且 **exit 0**(Antigravity 要求 exit 0,拒绝 hookSpecificOutput/非 allow 值)。
 - 只需要**执行前事件**:守卫在命令执行*之前*拦截;没有特许可事后消费,因此无需执行后钩子。
 - 用**绝对路径**指向二进制——hook 子进程不一定继承你的 shell PATH。Claude Code 用 `${CLAUDE_PROJECT_DIR}/bin/gitflow-guard.mjs`,Codex 用 `node bin/gitflow-guard.mjs`,OpenCode 用 `$OPENCODE_PROJECT_DIR/bin/gitflow-guard.mjs`、Antigravity 用 `node bin/gitflow-guard.mjs`(相对 workspace `.agents/` 目录)也可以。
@@ -432,7 +438,7 @@ MIT,免费,无条件。随便用、随便改、随便发,唯一义务是保留
 | **integration** | 集成分支,唯一必填角色(`branches.integration`);feature 经 PR/MR 合入;受保护 |
 | **preview** | 可选环境终点分支(`branches.preview`,数组);只走 PR/MR 更新 |
 | **production** | 可选生产分支(`branches.production`,数组);PR/MR + 合并仅限用户 |
-| **archive** | 可选发布后归档分支(`branches.archive`);仅用户亲手 |
+| **archive** | `branches.archive`(数组) | 可选 | 允许 agent 创建指向它的 PR/MR; 合并仍限用户亲手 |
 | **feature 分支** | 你的工作分支,由 `featurePattern` 识别;自由区 |
 | **门禁矩阵** | 把每条被分类的命令映射为放行/拦截的判定表 |
 | **pre-execute** | 工具管线中拦截发生的钩子——在命令运行之前 |

package/lib/cli.mjs

@@ -1,4 +1,4 @@
-import { c as findRepoRoot, d as resolveLocale, f as loadConfig, i as formatDeny, l as gitRunner, m as classify, o as stateDir, p as roleMatches, r as evaluateCommand, s as currentBranch, u as makeT } from "./src-2TtpUFC9.mjs";
+import { c as findRepoRoot, d as resolveLocale, f as loadConfig, i as formatDeny, l as gitRunner, m as classify, o as stateDir, p as roleMatches, r as evaluateCommand, s as currentBranch, u as makeT } from "./src-CeEqUVQP.mjs";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 //#region src/platform.ts
@@ -33,9 +33,6 @@ function extractHookPayload(raw, platform = "auto") {
 	} else if (plat === "opencode") {
 		command = str(j.tool_args?.command) || str(j.tool_args?.cmd);
 		cwd = str(j.cwd);
-	} else if (plat === "copilot") {
-		command = str(j.tool_input?.command) || str(j.toolArgs?.command);
-		cwd = str(j.cwd);
 	} else if (plat === "antigravity") {
 		command = str(j.toolCall?.args?.CommandLine);
 		cwd = str(j.cwd);
@@ -84,10 +81,6 @@ function encodeDeny(platform, reason) {
 				reason
 			})
 		};
-		case "copilot": return {
-			exitCode: 2,
-			stderr: reason
-		};
 	}
 }
 //#endregion

package/lib/index.mjs

@@ -1,2 +1,2 @@
-import { a as name, i as formatDeny, n as apply, o as stateDir, r as evaluateCommand, t as appendAudit } from "./src-2TtpUFC9.mjs";
+import { a as name, i as formatDeny, n as apply, o as stateDir, r as evaluateCommand, t as appendAudit } from "./src-CeEqUVQP.mjs";
 export { appendAudit, apply, evaluateCommand, formatDeny, name, stateDir };

package/lib/{src-2TtpUFC9.mjs → src-CeEqUVQP.mjs}

@@ -97,6 +97,7 @@ function parsePush(args, ctx) {
 	for (const a of args) if (a === "-f" || a === "--force" || a === "--force-with-lease" || a.startsWith("--force-with-lease=")) force = true;
 	else if (a === "--delete" || a === "-d") isDelete = true;
 	else if (a === "--all" || a === "--mirror") all = true;
+	else if (a === "--tags") return [{ kind: "other" }];
 	else if (a.startsWith("-")) {} else nonFlag.push(a);
 	if (all) return [{
 		kind: "push",
@@ -113,10 +114,15 @@ function parsePush(args, ctx) {
 		delete: false
 	}];
 	return refspecs.map((ref) => {
+		let refForce = force;
+		if (ref.startsWith("+")) {
+			refForce = true;
+			ref = ref.slice(1);
+		}
 		if (ref.startsWith(":")) return {
 			kind: "push",
 			dst: stripRefPrefix(ref.slice(1)) || null,
-			force,
+			force: refForce,
 			delete: true
 		};
 		const colon = ref.indexOf(":");
@@ -126,20 +132,20 @@ function parsePush(args, ctx) {
 			return {
 				kind: "push",
 				dst: dst ? stripRefPrefix(dst) : null,
-				force,
+				force: refForce,
 				delete: deleteTarget || isDelete
 			};
 		}
 		if (ref === "HEAD") return {
 			kind: "push",
 			dst: ctx.currentBranch ?? null,
-			force,
+			force: refForce,
 			delete: isDelete
 		};
 		return {
 			kind: "push",
 			dst: stripRefPrefix(ref),
-			force,
+			force: refForce,
 			delete: isDelete
 		};
 	});
@@ -379,8 +385,6 @@ const en = {
 	"mergeFeature.next": (v) => `Push the feature branch first, then open a PR/MR into ${v.branch}.`,
 	"prCreateNoTarget.why": () => "Cannot determine the PR/MR target branch",
 	"prCreateNoTarget.next": (v) => `Specify --base/--target-branch explicitly (e.g. \`gh pr create --base ${v.base}\`).`,
-	"prCreateArchive.why": () => "Archive branches are user-managed; PRs/MRs into them are not allowed",
-	"prCreateArchive.next": () => "Do the release/archive yourself in your terminal or UI.",
 	"prCreateHead.why": (v) => `Current branch (${v.head}) is not a feature branch, so it cannot be the source of a PR/MR into ${v.role}`,
 	"prCreateHead.next": () => "Open the PR/MR into integration/preview/production from a feature/topic branch.",
 	"prMergeProduction.why": () => "Merging into production is allowed only by you (click merge)",
@@ -449,8 +453,6 @@ const zh = {
 	"mergeFeature.next": (v) => `先推 feature 分支, 再创建指向 ${v.branch} 的 PR/MR`,
 	"prCreateNoTarget.why": () => "无法确定 PR/MR 目标分支",
 	"prCreateNoTarget.next": (v) => `请显式指定 --base/--target-branch(如 gh pr create --base ${v.base})`,
-	"prCreateArchive.why": () => "归档分支(archive)仅用户亲手操作, 不允许创建指向它的 PR/MR",
-	"prCreateArchive.next": () => "发布/归档由你自己在终端或 UI 完成",
 	"prCreateHead.why": (v) => `当前分支(${v.head})不是 feature 分支, 不能作为指向${v.role}的 PR/MR 源`,
 	"prCreateHead.next": () => "请从 feature/topic 分支上创建指向集成/预览/生产分支的 PR/MR",
 	"prMergeProduction.why": () => "合入生产(production)分支仅允许用户亲手点合并",
@@ -598,7 +600,6 @@ function decidePrCreate(c, facts, config, t) {
 	const targetRole = roleOfBranch(c.target, config);
 	const head = facts.currentBranch;
 	const headRole = roleOfBranch(head, config);
-	if (targetRole === "archive") return deny(t("prCreateArchive.why"), t("prCreateArchive.next"));
 	if (targetRole === "integration" || targetRole === "preview" || targetRole === "production") {
 		if (headRole !== "feature") return deny(t("prCreateHead.why", {
 			head: head ?? t("head.unknown"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-gitflow-guard",
-  "version": "0.0.7",
+  "version": "0.0.9",
   "description": "A configurable branch-role guard for AI coding agents (DSH / Claude Code / Codex / OpenCode / Antigravity) — integration/preview/production/archive, each with its own update rules",
   "license": "MIT",
   "type": "module",