beth-copilot 1.0.17 → 1.1.0

package/dist/cli/commands/pre-push-guard.js

@@ -0,0 +1,257 @@
+/**
+ * Pre-Push Guard — Branch discipline enforcement
+ *
+ * Validates before push:
+ * - No direct pushes to main/master (BLOCKS)
+ * - Current branch follows epic/<id> convention (WARNING)
+ * - Open in-progress beads issues reported (WARNING)
+ * - Bypassed with BETH_SKIP_PUSH_GUARD=1 environment variable
+ */
+import { execFileSync } from 'child_process';
+const COLORS = {
+    reset: '\x1b[0m',
+    bright: '\x1b[1m',
+    red: '\x1b[31m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+};
+/** Protected branch names that cannot receive direct pushes. */
+const PROTECTED_BRANCHES = ['main', 'master'];
+/** Epic branch naming convention: epic/<rig>-<hash> */
+const EPIC_BRANCH_PATTERN = /^epic\/[a-z]+-[a-z0-9]+$/;
+/** Release branches are also valid push targets. */
+const RELEASE_BRANCH_PATTERN = /^release\/v?\d+/;
+/**
+ * Parse pre-push stdin input into structured refs.
+ * Git sends: <local ref> <local SHA> <remote ref> <remote SHA>
+ * One line per ref being pushed.
+ */
+export function parsePushRefs(stdin) {
+    return stdin
+        .trim()
+        .split('\n')
+        .filter((line) => line.trim().length > 0)
+        .map((line) => {
+        const parts = line.trim().split(/\s+/);
+        return {
+            localRef: parts[0] || '',
+            localSha: parts[1] || '',
+            remoteRef: parts[2] || '',
+            remoteSha: parts[3] || '',
+        };
+    });
+}
+/**
+ * Extract branch name from a Git ref.
+ * refs/heads/main → main
+ * refs/heads/epic/beth-abc123 → epic/beth-abc123
+ */
+export function extractBranchName(ref) {
+    const prefix = 'refs/heads/';
+    if (ref.startsWith(prefix)) {
+        return ref.slice(prefix.length);
+    }
+    return ref;
+}
+/**
+ * Check if a branch name is protected (main, master).
+ */
+export function isProtectedBranch(branch) {
+    return PROTECTED_BRANCHES.includes(branch);
+}
+/**
+ * Check if the branch follows the epic/<id> convention.
+ */
+export function isEpicBranch(branch) {
+    return EPIC_BRANCH_PATTERN.test(branch);
+}
+/**
+ * Check if the branch is a release branch.
+ */
+export function isReleaseBranch(branch) {
+    return RELEASE_BRANCH_PATTERN.test(branch);
+}
+/**
+ * Check if the branch follows any recognized naming convention.
+ */
+export function isRecognizedBranch(branch) {
+    return isEpicBranch(branch) || isReleaseBranch(branch) || isProtectedBranch(branch);
+}
+/**
+ * Get the current Git branch name.
+ * Returns null if not in a git repo or in detached HEAD state.
+ */
+export function getCurrentBranch() {
+    try {
+        const result = execFileSync('git', ['branch', '--show-current'], {
+            encoding: 'utf-8',
+            timeout: 5000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        return result || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get beads issues with in_progress status.
+ * Returns empty array if bd is unavailable or errors.
+ */
+export function getInProgressIssues() {
+    try {
+        const output = execFileSync('bd', ['list', '--json'], {
+            encoding: 'utf-8',
+            timeout: 10000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const parsed = JSON.parse(output);
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed
+            .filter((item) => typeof item === 'object' &&
+            item !== null &&
+            'id' in item &&
+            'title' in item &&
+            'status' in item &&
+            item.status === 'in_progress')
+            .map((item) => ({ id: item.id, title: item.title }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Run all pre-push guard checks.
+ *
+ * @param currentBranch - Current Git branch name
+ * @param refs - Optional parsed push refs from Git stdin (for remote ref validation)
+ * @param checkBeads - Whether to check for in-progress beads issues
+ * @returns GuardResult with allowed status and diagnostics
+ */
+export function runGuard(currentBranch, refs, checkBeads = true) {
+    const errors = [];
+    const warnings = [];
+    // Check 1: No pushing to protected branches via remote refs
+    if (refs && refs.length > 0) {
+        for (const ref of refs) {
+            const targetBranch = extractBranchName(ref.remoteRef);
+            if (isProtectedBranch(targetBranch)) {
+                errors.push(`Direct push to '${targetBranch}' is blocked. Use a PR from your epic branch.`);
+            }
+        }
+    }
+    // Check 1b: Also block if current branch IS a protected branch
+    // (catches the common case without needing stdin refs)
+    if (currentBranch && isProtectedBranch(currentBranch)) {
+        const msg = `Pushing from '${currentBranch}' is blocked. Work on an epic branch.`;
+        if (!errors.some((e) => e.includes(currentBranch))) {
+            errors.push(msg);
+        }
+    }
+    // Check 2: Current branch should follow epic convention
+    if (currentBranch && !isRecognizedBranch(currentBranch)) {
+        warnings.push(`Branch '${currentBranch}' doesn't follow the epic/<id> convention. Consider renaming.`);
+    }
+    // Check 3: Warn about in-progress beads issues (soft check)
+    if (checkBeads) {
+        try {
+            const inProgress = getInProgressIssues();
+            if (inProgress.length > 0) {
+                warnings.push(`${inProgress.length} issue${inProgress.length === 1 ? '' : 's'} still in_progress:`);
+                for (const issue of inProgress) {
+                    warnings.push(`  ◐ ${issue.id}: ${issue.title}`);
+                }
+                warnings.push('Consider closing completed work before pushing.');
+            }
+        }
+        catch {
+            // bd not available — skip silently
+        }
+    }
+    return {
+        allowed: errors.length === 0,
+        errors,
+        warnings,
+    };
+}
+/**
+ * Main entry point for the pre-push guard command.
+ * Reads refs from stdin (if available) and runs all checks.
+ */
+export async function prePushGuard(stdinInput) {
+    // Check bypass
+    if (process.env.BETH_SKIP_PUSH_GUARD === '1') {
+        console.error(`${COLORS.yellow}⚠ Pre-push guard bypassed (BETH_SKIP_PUSH_GUARD=1)${COLORS.reset}`);
+        return;
+    }
+    // Read stdin if not provided (Git pre-push pipes refs via stdin)
+    let stdin = stdinInput;
+    if (stdin === undefined) {
+        const fs = await import('fs');
+        try {
+            stdin = fs.readFileSync(0, 'utf-8');
+        }
+        catch {
+            stdin = '';
+        }
+    }
+    const refs = stdin.trim() ? parsePushRefs(stdin) : undefined;
+    const currentBranch = getCurrentBranch();
+    const result = runGuard(currentBranch, refs);
+    // Print warnings
+    for (const warning of result.warnings) {
+        console.error(`${COLORS.yellow}⚠ ${warning}${COLORS.reset}`);
+    }
+    // Print errors and exit non-zero to block push
+    if (!result.allowed) {
+        console.error('');
+        for (const error of result.errors) {
+            console.error(`${COLORS.red}✗ ${error}${COLORS.reset}`);
+        }
+        console.error(`\n${COLORS.yellow}Set BETH_SKIP_PUSH_GUARD=1 to bypass.${COLORS.reset}`);
+        process.exit(1);
+    }
+}
+/**
+ * Generate the shell script content to append to .beads/hooks/pre-push.
+ * Pure shell — no Node dependency at hook time for speed.
+ */
+export function generateHookScript() {
+    return `
+# --- BEGIN BETH GUARD ---
+# Branch discipline enforcement — installed by beth-copilot
+# Bypass: BETH_SKIP_PUSH_GUARD=1 git push
+if [ "\$BETH_SKIP_PUSH_GUARD" = "1" ]; then
+  echo "⚠ Pre-push guard bypassed (BETH_SKIP_PUSH_GUARD=1)" >&2
+else
+  _beth_branch=\$(git branch --show-current 2>/dev/null)
+
+  # Block pushes from protected branches
+  case "\$_beth_branch" in
+    main|master)
+      echo "✗ Pushing from '\$_beth_branch' is blocked. Work on an epic branch." >&2
+      echo "  Set BETH_SKIP_PUSH_GUARD=1 to bypass." >&2
+      exit 1
+      ;;
+  esac
+
+  # Warn if not on an epic or release branch
+  case "\$_beth_branch" in
+    epic/*) ;;
+    release/*) ;;
+    "")
+      echo "⚠ Detached HEAD — no branch name. Proceeding anyway." >&2
+      ;;
+    *)
+      echo "⚠ Branch '\$_beth_branch' doesn't follow the epic/<id> convention." >&2
+      ;;
+  esac
+fi
+# --- END BETH GUARD ---
+`;
+}
+/** Marker used to detect if bethguard is already installed in a hook file. */
+export const BETH_GUARD_BEGIN = '# --- BEGIN BETH GUARD ---';
+export const BETH_GUARD_END = '# --- END BETH GUARD ---';
+//# sourceMappingURL=pre-push-guard.js.map

package/dist/cli/commands/pre-push-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-guard.js","sourceRoot":"","sources":["../../../src/cli/commands/pre-push-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE9C,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD,oDAAoD;AACpD,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAejD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACxB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACxB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACzB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE;YAC/D,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,OAAO,MAAM;aACV,MAAM,CACL,CAAC,IAAa,EAAyD,EAAE,CACvE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,IAAI,IAAI,IAAI;YACZ,OAAO,IAAI,IAAI;YACf,QAAQ,IAAI,IAAI;YACf,IAAgC,CAAC,MAAM,KAAK,aAAa,CAC7D;aACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CACtB,aAA4B,EAC5B,IAAgB,EAChB,UAAU,GAAG,IAAI;IAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,4DAA4D;IAC5D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,mBAAmB,YAAY,+CAA+C,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,uDAAuD;IACvD,IAAI,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,iBAAiB,aAAa,uCAAuC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CACX,WAAW,aAAa,+DAA+D,CACxF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CACX,GAAG,UAAU,CAAC,MAAM,SAAS,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAqB,CACrF,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACnD,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAmB;IACpD,eAAe;IACf,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,GAAG,MAAM,CAAC,MAAM,qDAAqD,MAAM,CAAC,KAAK,EAAE,CACpF,CAAC;QACF,OAAO;IACT,CAAC;IAED,iEAAiE;IACjE,IAAI,KAAK,GAAG,UAAU,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAE7C,iBAAiB;IACjB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,KAAK,CACX,KAAK,MAAM,CAAC,MAAM,wCAAwC,MAAM,CAAC,KAAK,EAAE,CACzE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BR,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/dist/cli/commands/pre-push-guard.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Pre-Push Guard Tests
+ *
+ * Tests branch discipline enforcement:
+ * - Push ref parsing from Git stdin
+ * - Branch name extraction from refs
+ * - Protected branch detection
+ * - Epic branch convention validation
+ * - Release branch recognition
+ * - Guard logic: errors vs warnings
+ * - Hook script generation
+ * - Beads in-progress issue detection
+ */
+export {};
+//# sourceMappingURL=pre-push-guard.test.d.ts.map

package/dist/cli/commands/pre-push-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-guard.test.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/pre-push-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}