git-vibe-setup 3.0.1 → 3.0.3

package/README.md

@@ -3,9 +3,19 @@
 Local initializer for GitVibe consumer repositories.
 
 ```bash
-npx --package=git-vibe-setup git-vibe-setup
+npx git-vibe-setup setup
 ```
 
-The command writes `.github` and `.git-vibe` starter files, pins reusable
+The `setup` command writes `.github` and `.git-vibe` starter files, pins reusable
 workflow refs to the latest stable `markhuangai/git-vibe` release, and fails
 before writing if release lookup or target-file validation fails.
+
+```bash
+npx git-vibe-setup update
+```
+
+The `update` command rewrites only `.github/workflows/*.yml` GitVibe wrapper
+files from the latest package templates and pins them to the latest stable
+release. It does not update `.github/git-vibe.yml`, `.git-vibe`, secrets, or
+variables, and it refuses to overwrite workflow files that do not look like
+GitVibe wrappers.

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 interface SetupCliRuntime {
+    argv?: string[];
     cwd?: string;
     error?: (message: string) => void;
     fetchImpl?: typeof fetch;
@@ -7,5 +8,7 @@ interface SetupCliRuntime {
     repositoryRoot?: string;
 }
 export declare function runSetup(runtime?: SetupCliRuntime): Promise<void>;
+export declare function runUpdate(runtime?: SetupCliRuntime): Promise<void>;
 export declare function setupCli(runtime?: SetupCliRuntime): Promise<number>;
+export declare function isDirectRun(moduleUrl: string, entrypoint?: string): boolean;
 export {};

package/dist/cli.js

@@ -1,10 +1,22 @@
 #!/usr/bin/env node
+import { realpathSync } from "node:fs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { fileURLToPath } from "node:url";
-import { blockingInstallPaths, buildInstallFiles, existingFilesError, installFiles, } from "./install.js";
+import { blockingInstallPaths, buildInstallFiles, buildWorkflowUpdateFiles, existingFilesError, installFiles, unmanagedWorkflowUpdateError, unmanagedWorkflowUpdatePaths, updateFiles, } from "./install.js";
 import { renderManualSetupInstructions } from "./instructions.js";
 import { latestStableReleaseTag } from "./releases.js";
+const usage = `Usage:
+  git-vibe-setup setup
+  git-vibe-setup update
+  git-vibe-setup
+
+Commands:
+  setup   Install GitVibe starter files into the current repository.
+  update  Update GitVibe workflow wrapper files in the current repository.
+
+Options:
+  -h, --help   Show this help message.`;
 export async function runSetup(runtime = {}) {
     const cwd = runtime.cwd || process.cwd();
     const repositoryRoot = runtime.repositoryRoot || packageRoot();
@@ -16,9 +28,33 @@ export async function runSetup(runtime = {}) {
     installFiles(files);
     (runtime.log || console.log)(renderManualSetupInstructions(releaseTag));
 }
+export async function runUpdate(runtime = {}) {
+    const cwd = runtime.cwd || process.cwd();
+    const repositoryRoot = runtime.repositoryRoot || packageRoot();
+    const releaseTag = await latestStableReleaseTag(runtime.fetchImpl || fetch);
+    const files = buildWorkflowUpdateFiles({ cwd, releaseTag, repositoryRoot });
+    const unmanagedPaths = unmanagedWorkflowUpdatePaths(files);
+    if (unmanagedPaths.length > 0)
+        throw unmanagedWorkflowUpdateError(unmanagedPaths, cwd);
+    updateFiles(files);
+    (runtime.log || console.log)(`GitVibe workflow files updated with reusable workflows pinned to ${releaseTag}.`);
+}
 export async function setupCli(runtime = {}) {
+    const argv = runtime.argv || process.argv.slice(2);
+    const command = argv[0] || "setup";
+    if (command === "--help" || command === "-h" || command === "help") {
+        (runtime.log || console.log)(usage);
+        return 0;
+    }
+    if (command !== "setup" && command !== "update") {
+        (runtime.error || console.error)(`Unknown command: ${command}\n\n${usage}`);
+        return 1;
+    }
     try {
-        await runSetup(runtime);
+        if (command === "update")
+            await runUpdate(runtime);
+        else
+            await runSetup(runtime);
         return 0;
     }
     catch (error) {
@@ -36,6 +72,12 @@ if (isDirectRun(import.meta.url)) {
     process.exitCode = exitCode;
 }
 /* c8 ignore stop */
-function isDirectRun(moduleUrl, entrypoint = process.argv[1]) {
-    return Boolean(entrypoint && moduleUrl === pathToFileURL(resolve(entrypoint)).href);
+export function isDirectRun(moduleUrl, entrypoint = process.argv[1]) {
+    if (!entrypoint)
+        return false;
+    return (pathToFileURL(realpathSync(resolve(entrypoint))).href ===
+        pathToFileURL(modulePath(moduleUrl)).href);
+}
+function modulePath(moduleUrl) {
+    return realpathSync(fileURLToPath(moduleUrl));
 }

package/dist/install.d.ts

@@ -8,7 +8,15 @@ export declare function buildInstallFiles(options: {
     releaseTag: string;
     repositoryRoot: string;
 }): InstallFile[];
+export declare function buildWorkflowUpdateFiles(options: {
+    cwd: string;
+    releaseTag: string;
+    repositoryRoot: string;
+}): InstallFile[];
 export declare function blockingInstallPaths(files: InstallFile[]): string[];
+export declare function unmanagedWorkflowUpdatePaths(files: InstallFile[]): string[];
 export declare function installFiles(files: InstallFile[]): void;
+export declare function updateFiles(files: InstallFile[]): void;
 export declare function existingFilesError(paths: string[], cwd: string): Error;
+export declare function unmanagedWorkflowUpdateError(paths: string[], cwd: string): Error;
 export declare function pinWorkflowReleaseRefs(content: string, releaseTag: string): string;

package/dist/install.js

@@ -1,5 +1,5 @@
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { dirname, join, relative } from "node:path";
+import { basename, dirname, join, relative } from "node:path";
 export function buildInstallFiles(options) {
     return installSources(options.repositoryRoot).flatMap((source) => listRelativeFiles(source.sourceDirectory).map((relativePath) => {
         const sourcePath = join(source.sourceDirectory, relativePath);
@@ -12,12 +12,31 @@ export function buildInstallFiles(options) {
         };
     }));
 }
+export function buildWorkflowUpdateFiles(options) {
+    const sourceDirectory = join(options.repositoryRoot, "templates", ".github", "workflows");
+    return listRelativeFiles(sourceDirectory).map((relativePath) => {
+        const sourcePath = join(sourceDirectory, relativePath);
+        const targetPath = join(options.cwd, ".github", "workflows", relativePath);
+        const content = readFileSync(sourcePath, "utf8");
+        return {
+            content: pinWorkflowReleaseRefs(content, options.releaseTag),
+            sourcePath,
+            targetPath,
+        };
+    });
+}
 export function blockingInstallPaths(files) {
     return files
         .map((file) => file.targetPath)
         .filter((targetPath) => existsSync(targetPath))
         .sort();
 }
+export function unmanagedWorkflowUpdatePaths(files) {
+    return files
+        .filter((file) => existsSync(file.targetPath) && !isManagedWorkflowTarget(file))
+        .map((file) => file.targetPath)
+        .sort();
+}
 export function installFiles(files) {
     const createdDirectories = [];
     const createdFiles = [];
@@ -33,10 +52,29 @@ export function installFiles(files) {
         throw error;
     }
 }
+export function updateFiles(files) {
+    const createdDirectories = [];
+    const snapshots = [];
+    try {
+        for (const file of files) {
+            ensureDirectory(dirname(file.targetPath), createdDirectories);
+            snapshots.push(snapshotFile(file.targetPath));
+            writeFileSync(file.targetPath, file.content);
+        }
+    }
+    catch (error) {
+        rollbackUpdate(snapshots, createdDirectories);
+        throw error;
+    }
+}
 export function existingFilesError(paths, cwd) {
     const listed = paths.map((path) => `- ${relative(cwd, path) || path}`).join("\n");
     return new Error(`git-vibe-setup found existing GitVibe files and did not overwrite them:\n${listed}\nRemove the listed files before running setup again.`);
 }
+export function unmanagedWorkflowUpdateError(paths, cwd) {
+    const listed = paths.map((path) => `- ${relative(cwd, path) || path}`).join("\n");
+    return new Error(`git-vibe-setup found workflow files that do not look like GitVibe wrappers and did not overwrite them:\n${listed}`);
+}
 export function pinWorkflowReleaseRefs(content, releaseTag) {
     return content.replace(/(uses:\s*markhuangai\/git-vibe\/\.github\/workflows\/[^\s@]+)@[^\s]+/g, (_match, workflowReference) => `${workflowReference}@${releaseTag}`);
 }
@@ -52,6 +90,21 @@ function installSources(repositoryRoot) {
         },
     ];
 }
+function isManagedWorkflowTarget(file) {
+    try {
+        const workflowName = basename(file.targetPath);
+        return managedWorkflowPattern(workflowName).test(readFileSync(file.targetPath, "utf8"));
+    }
+    catch {
+        return false;
+    }
+}
+function managedWorkflowPattern(workflowName) {
+    return new RegExp(`uses:\\s*markhuangai/git-vibe/\\.github/workflows/${escapeRegExp(workflowName)}@`);
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, String.raw `\$&`);
+}
 function listRelativeFiles(directory) {
     return readdirSync(directory, { withFileTypes: true })
         .flatMap((entry) => {
@@ -64,6 +117,15 @@ function listRelativeFiles(directory) {
     })
         .sort();
 }
+function snapshotFile(targetPath) {
+    if (!existsSync(targetPath))
+        return { existed: false, targetPath };
+    return {
+        content: readFileSync(targetPath, "utf8"),
+        existed: true,
+        targetPath,
+    };
+}
 function ensureDirectory(directory, createdDirectories) {
     const missing = missingDirectories(directory);
     for (const path of missing) {
@@ -84,6 +146,19 @@ function missingDirectories(directory) {
     }
     return missing.reverse();
 }
+function rollbackUpdate(snapshots, createdDirectories) {
+    for (const snapshot of [...snapshots].reverse()) {
+        if (snapshot.existed) {
+            writeFileSync(snapshot.targetPath, snapshot.content || "");
+        }
+        else {
+            rmSync(snapshot.targetPath, { force: true });
+        }
+    }
+    for (const directory of [...createdDirectories].reverse()) {
+        rmSync(directory, { force: true, recursive: false });
+    }
+}
 function rollbackInstall(createdFiles, createdDirectories) {
     for (const file of [...createdFiles].reverse()) {
         rmSync(file, { force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-vibe-setup",
-  "version": "3.0.1",
+  "version": "3.0.3",
   "private": false,
   "type": "module",
   "bin": {

package/templates/.github/workflows/address-feedback.yml

@@ -8,6 +8,16 @@ on:
         description: Pull request number with feedback to address.
         required: true
         type: string
+      timeout_minutes:
+        description: Maximum minutes for the feedback remediation job.
+        required: false
+        type: number
+        default: 120
+      max_turns:
+        description: Maximum AI turns for feedback remediation.
+        required: false
+        type: number
+        default: 120
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -25,8 +35,8 @@ jobs:
     with:
       pr-number: ${{ inputs.pr-number }}
       runner: ubuntu-latest
-      timeout_minutes: 120
-      max_turns: 120
+      timeout_minutes: ${{ inputs.timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets:

package/templates/.github/workflows/develop.yml

@@ -8,6 +8,41 @@ on:
         description: Approved implementation issue number.
         required: true
         type: string
+      implementation_timeout_minutes:
+        description: Maximum minutes for the implementation job.
+        required: false
+        type: number
+        default: 120
+      review_timeout_minutes:
+        description: Maximum minutes for the review matrix job.
+        required: false
+        type: number
+        default: 60
+      create_pr_timeout_minutes:
+        description: Maximum minutes for the PR creation job.
+        required: false
+        type: number
+        default: 15
+      max_turns:
+        description: Default maximum AI turns for stages in this workflow.
+        required: false
+        type: number
+        default: 90
+      implementation_max_turns:
+        description: Maximum AI turns for implementation and feedback-style coding work.
+        required: false
+        type: number
+        default: 200
+      validation_repair_attempts:
+        description: Maximum validation repair attempts inside each implementation run.
+        required: false
+        type: number
+        default: 3
+      validation_repair_max_turns:
+        description: Maximum AI turns for each validation repair attempt.
+        required: false
+        type: number
+        default: 45
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -25,13 +60,13 @@ jobs:
     with:
       issue-number: ${{ inputs.issue-number }}
       runner: ubuntu-latest
-      implementation_timeout_minutes: 120
-      review_timeout_minutes: 60
-      create_pr_timeout_minutes: 15
-      max_turns: 90
-      implementation_max_turns: 120
-      validation_repair_attempts: 2
-      validation_repair_max_turns: 90
+      implementation_timeout_minutes: ${{ inputs.implementation_timeout_minutes }}
+      review_timeout_minutes: ${{ inputs.review_timeout_minutes }}
+      create_pr_timeout_minutes: ${{ inputs.create_pr_timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
+      implementation_max_turns: ${{ inputs.implementation_max_turns }}
+      validation_repair_attempts: ${{ inputs.validation_repair_attempts }}
+      validation_repair_max_turns: ${{ inputs.validation_repair_max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets:

package/templates/.github/workflows/investigate.yml

@@ -8,6 +8,16 @@ on:
         description: Issue number to investigate.
         required: true
         type: string
+      timeout_minutes:
+        description: Maximum minutes for the investigation job.
+        required: false
+        type: number
+        default: 60
+      max_turns:
+        description: Maximum AI turns for this stage.
+        required: false
+        type: number
+        default: 90
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -25,8 +35,8 @@ jobs:
     with:
       issue-number: ${{ inputs.issue-number }}
       runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
+      timeout_minutes: ${{ inputs.timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets:

package/templates/.github/workflows/materialize.yml

@@ -8,6 +8,16 @@ on:
         description: Discussion number to materialize.
         required: true
         type: string
+      timeout_minutes:
+        description: Maximum minutes for this job.
+        required: false
+        type: number
+        default: 60
+      max_turns:
+        description: Maximum AI turns for this stage.
+        required: false
+        type: number
+        default: 90
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -25,8 +35,8 @@ jobs:
     with:
       discussion-number: ${{ inputs.discussion-number }}
       runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
+      timeout_minutes: ${{ inputs.timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets:

package/templates/.github/workflows/review.yml

@@ -8,6 +8,16 @@ on:
         description: Pull request number to review.
         required: true
         type: string
+      timeout_minutes:
+        description: Maximum minutes for the review matrix job.
+        required: false
+        type: number
+        default: 60
+      max_turns:
+        description: Maximum AI turns for the review stage.
+        required: false
+        type: number
+        default: 90
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -25,8 +35,8 @@ jobs:
     with:
       pr-number: ${{ inputs.pr-number }}
       runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
+      timeout_minutes: ${{ inputs.timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets:

package/templates/.github/workflows/validate.yml

@@ -14,6 +14,16 @@ on:
         required: false
         type: string
         default: ""
+      timeout_minutes:
+        description: Maximum minutes for this job.
+        required: false
+        type: number
+        default: 60
+      max_turns:
+        description: Maximum AI turns for this stage.
+        required: false
+        type: number
+        default: 90
       dry-run:
         description: Validate without writing to GitHub.
         required: false
@@ -32,8 +42,8 @@ jobs:
       issue-number: ${{ inputs.issue-number }}
       discussion-number: ${{ inputs.discussion-number }}
       runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
+      timeout_minutes: ${{ inputs.timeout_minutes }}
+      max_turns: ${{ inputs.max_turns }}
       dry-run: ${{ inputs.dry-run }}
       source-comment: ${{ inputs.source-comment }}
     secrets: