cerber-core 1.1.5 → 1.1.7

package/team/templates/cerber.yml.tpl

@@ -1,53 +1,96 @@
-# Generated by Cerber init
-name: Cerber CI
-
-on:
-  push:
-    branches: {{CI_BRANCHES}}
-  pull_request:
-    branches: {{CI_BRANCHES}}
-  workflow_dispatch:
-
-jobs:
-  cerber-ci:
-    name: Cerber CI
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build (if script exists)
-        run: |
-          if npm run | grep -q "build"; then
-            npm run build
-          else
-            echo "No build script defined; skipping"
-          fi
-
-      - name: Test (if script exists)
-        run: |
-          if npm run | grep -q "test"; then
-            npm test
-          else
-            echo "No test script defined; skipping"
-          fi
-
-      - name: Run Guardian
-        run: |
-          if npm run | grep -q "cerber:guardian"; then
-            npm run cerber:guardian
-          else
-            node scripts/cerber-guardian.mjs
-          fi
-
-{{POST_DEPLOY_BLOCK}}
+# Generated by Cerber init
+name: Cerber CI
+
+on:
+  push:
+    branches: {{CI_BRANCHES}}
+  pull_request:
+    branches: {{CI_BRANCHES}}
+  workflow_dispatch:
+
+jobs:
+  cerber-integrity:
+    name: Cerber Self-Protection
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Verify protected files exist
+        run: |
+          echo "🛡️ Cerber Integrity Check"
+          MISSING=0
+          
+          # Check core files
+          [ ! -f "CERBER.md" ] && echo "❌ CERBER.md missing" && MISSING=1
+          [ ! -f ".github/workflows/cerber.yml" ] && echo "❌ cerber.yml missing" && MISSING=1
+          [ ! -f "scripts/cerber-guardian.mjs" ] && echo "❌ cerber-guardian.mjs missing" && MISSING=1
+          [ ! -f ".husky/pre-commit" ] && echo "❌ pre-commit hook missing" && MISSING=1
+          
+          # Check schema file (strict mode only)
+          SCHEMA_MODE=$(grep -A 10 "^schema:" CERBER.md | grep "mode:" | awk '{print $2}' | head -1)
+          if [ "$SCHEMA_MODE" = "strict" ]; then
+            SCHEMA_FILE=$(grep -A 10 "^schema:" CERBER.md | grep "file:" | awk '{print $2}' | head -1)
+            [ ! -f "$SCHEMA_FILE" ] && echo "❌ Schema file $SCHEMA_FILE missing (strict mode)" && MISSING=1
+          fi
+          
+          if [ $MISSING -eq 1 ]; then
+            echo "🚨 Protected files missing. Cerber self-protection compromised."
+            exit 1
+          fi
+          
+          echo "✅ All protected files present"
+
+      - name: Verify cerber-ci job exists
+        run: |
+          if ! grep -q "cerber-ci:" .github/workflows/cerber.yml; then
+            echo "🚨 Job 'cerber-ci' not found in cerber.yml"
+            echo "Never rename or remove the cerber-ci job ID"
+            exit 1
+          fi
+          echo "✅ cerber-ci job ID intact"
+
+  cerber-ci:
+    name: Cerber CI
+    runs-on: ubuntu-latest
+    needs: [cerber-integrity]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build (if script exists)
+        run: |
+          if npm run | grep -q "build"; then
+            npm run build
+          else
+            echo "No build script defined; skipping"
+          fi
+
+      - name: Test (if script exists)
+        run: |
+          if npm run | grep -q "test"; then
+            npm test
+          else
+            echo "No test script defined; skipping"
+          fi
+
+      - name: Run Guardian
+        run: |
+          if npm run | grep -q "cerber:guardian"; then
+            npm run cerber:guardian
+          else
+            node scripts/cerber-guardian.mjs
+          fi
+
+{{POST_DEPLOY_BLOCK}}

package/team/templates/pre-commit.tpl

@@ -1,4 +1,4 @@
-#!/bin/sh
-# Generated by Cerber init
-
-npm run cerber:guardian
+#!/bin/sh
+# Generated by Cerber init
+
+npm run cerber:guardian