code-foundry 0.1.3 → 0.2.0

package/.githooks/pre-commit

@@ -38,13 +38,28 @@ if printf '%s\n' "$changed" | grep -Eq '\.rs$|(^|/)Cargo\.toml$'; then
   cargo clippy --all-targets -- -D warnings
 fi
 
-if printf '%s\n' "$changed" | grep -Eq '\.py$|(^|/)(pyproject\.toml|requirements(-dev)?\.txt)$'; then
+python_files=()
+python_config=false
+while IFS= read -r file; do
+  case "$file" in
+    *.py)
+      [ -f "$file" ] && python_files+=("$file")
+      ;;
+    pyproject.toml|requirements.txt|requirements-dev.txt)
+      python_config=true
+      ;;
+  esac
+done <<< "$changed"
+
+if [ "$python_config" = true ] || [ "${#python_files[@]}" -gt 0 ]; then
+  ruff_targets=(.)
+  [ "$python_config" = true ] || ruff_targets=("${python_files[@]}")
   if [ -x .venv/bin/ruff ]; then
-    .venv/bin/ruff format --check .
-    .venv/bin/ruff check .
+    .venv/bin/ruff format --check "${ruff_targets[@]}"
+    .venv/bin/ruff check "${ruff_targets[@]}"
   elif command -v ruff >/dev/null 2>&1; then
-    ruff format --check .
-    ruff check .
+    ruff format --check "${ruff_targets[@]}"
+    ruff check "${ruff_targets[@]}"
   else
     echo "Python files changed but Ruff is not installed; run the template setup first." >&2
     exit 1

package/.github/CODEOWNERS

@@ -1,2 +1,4 @@
-# Default owner for all repository files.
-* @0xPlayerOne
+# Repository owners and administrators are populated by code-foundry
+# initializer. GitHub CODEOWNERS does not interpolate shell variables.
+# Run the initializer in the target repository to replace this default rule.
+* @OWNER

package/.github/CONTRIBUTING.md

@@ -164,10 +164,14 @@ Keep pull requests focused and reviewable. Include screenshots or recordings for
 | Push to `staging`                | Release PR workflow                      |
 | Version tag such as `v1.2.3`     | Release workflow                         |
 
-The workflows use separate concurrency groups. A newer run for the same branch or pull request cancels its older run, while independent CI, test, security, and CodeQL workflows continue in parallel.
+The workflows use separate concurrency groups keyed by the commit under test. A newer run for the same commit cancels a duplicate event-triggered run, while newer commits cancel older runs and independent CI, Test, Security, and CodeQL workflows continue in parallel.
 
 Required checks are enforced by branch protection. Do not duplicate their checklists in the pull request description; document validation commands and results instead.
 
+### Release conventions
+
+Use Conventional Commits so the release automation can determine the next version: `fix:` produces a patch release, `feat:` produces a minor release, and `!` or `BREAKING CHANGE:` produces a major release. Add `Release-As: x.y.z` only when a deliberate version override is needed. The release workflow maintains the changelog and GitHub release after changes land on `main`; npm publication is opt-in through `.github/template.yml`.
+
 Security checks can be skipped when repository visibility or the GitHub plan does not support a feature. A skipped optional check must not be configured as a required status check.
 
 ## Review and merge protocol

package/.github/actions/cache/action.yml

@@ -0,0 +1,43 @@
+name: Repository Cache
+description: Restore a cache and optionally enable the post-job save performed by actions/cache.
+
+inputs:
+  path:
+    description: Cache paths.
+    required: true
+  key:
+    description: Primary cache key.
+    required: true
+  restore-keys:
+    description: Optional newline-delimited restore keys.
+    required: false
+    default: ''
+  save:
+    description: Enable cache saving after the job completes.
+    required: false
+    default: 'true'
+
+outputs:
+  cache-hit:
+    description: Whether an exact cache was restored.
+    value: ${{ steps.cache.outputs.cache-hit || steps.restore.outputs.cache-hit }}
+
+runs:
+  using: composite
+  steps:
+    - name: Restore cache
+      id: restore
+      if: inputs.save != 'true'
+      uses: actions/cache/restore@v5
+      with:
+        path: ${{ inputs.path }}
+        key: ${{ inputs.key }}
+        restore-keys: ${{ inputs.restore-keys }}
+    - name: Restore and save cache
+      id: cache
+      if: inputs.save == 'true'
+      uses: actions/cache@v5
+      with:
+        path: ${{ inputs.path }}
+        key: ${{ inputs.key }}
+        restore-keys: ${{ inputs.restore-keys }}

package/.github/actions/codeql/action.yml

@@ -0,0 +1,29 @@
+name: CodeQL Analyze
+description: Initialize and analyze one CodeQL language using the repository baseline.
+
+inputs:
+  language:
+    description: CodeQL language identifier.
+    required: true
+  build-mode:
+    description: CodeQL build mode.
+    required: false
+    default: none
+  category:
+    description: CodeQL analysis category.
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Initialize
+      uses: github/codeql-action/init@v4
+      with:
+        languages: ${{ inputs.language }}
+        build-mode: ${{ inputs.build-mode }}
+    - name: Analyze
+      uses: github/codeql-action/analyze@v4
+      with:
+        category: ${{ inputs.category }}
+        upload-database: false
+        wait-for-processing: false