madeby 0.3.3 → 0.3.4

package/dist/madeby.mjs

@@ -1880,8 +1880,9 @@ function whoCommand(args) {
 }
 
 // src/init-repo.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join5 } from "node:path";
+var ACO_SENTINEL = "<!-- madeby:aco -->";
 var GH_WORKFLOW = `name: Disclosure
 on: pull_request
 jobs:
@@ -1894,6 +1895,7 @@ jobs:
       - uses: MadeByFYI/MadeBy/packages/action@v0.2.0
 `;
 var AGENTS_CONVENTION = `# AGENTS.md \u2014 Authorship disclosure convention (ACO)
+${ACO_SENTINEL}
 
 This repository asks any AI agent \u2014 or a human working with one \u2014 to **disclose who authored the
 changes they make**, per **ACO, the Authorship Certificate of Origin**
@@ -1921,6 +1923,17 @@ After you commit, run the matching command (works with no install via \`npx\`):
 
 Undisclosed content stays *unknown*, never guessed. See ACO for the standard.
 `;
+var ACO_SECTION = `
+${ACO_SENTINEL}
+## Authorship disclosure (ACO)
+
+Disclose who authored your changes, per [ACO](https://github.com/MadeByFYI/MadeBy/blob/main/ACO.md).
+After committing, run the command for the honest category (no install needed):
+
+- **ai** \u2014 an AI authored it (the committer stays accountable): \`npx madeby@latest ai [tool]\`
+- **with_ai** \u2014 a human authored it with AI assistance: \`npx madeby@latest me --with-ai [tool]\`
+- **human** \u2014 a human authored it: \`npx madeby@latest me\`
+`;
 function writeIfAbsent(abs, rel, content, created, skipped) {
   if (existsSync4(abs)) {
     skipped.push(rel);
@@ -1930,21 +1943,42 @@ function writeIfAbsent(abs, rel, content, created, skipped) {
   writeFileSync2(abs, content);
   created.push(rel);
 }
+function ensureAco(abs, rel, res, opts) {
+  if (!existsSync4(abs)) {
+    if (!opts.createIfAbsent) return;
+    mkdirSync2(dirname2(abs), { recursive: true });
+    writeFileSync2(abs, AGENTS_CONVENTION);
+    res.created.push(rel);
+    return;
+  }
+  const current = readFileSync6(abs, "utf8");
+  if (current.includes(ACO_SENTINEL)) {
+    res.skipped.push(rel);
+    return;
+  }
+  const sep = current.endsWith("\n") ? "\n" : "\n\n";
+  writeFileSync2(abs, current + sep + ACO_SECTION);
+  res.merged.push(rel);
+}
 function initRepo(root, opts = {}) {
   const mode = opts.mode ?? "advisory";
   const host = opts.host ?? "github";
   const created = [];
   const skipped = [];
+  const merged = [];
+  const res = { created, skipped, merged };
   writeIfAbsent(join5(root, ".madeby", "policy.json"), ".madeby/policy.json", JSON.stringify({ version: 0, mode }, null, 2) + "\n", created, skipped);
-  writeIfAbsent(join5(root, "AGENTS.md"), "AGENTS.md", AGENTS_CONVENTION, created, skipped);
+  ensureAco(join5(root, "AGENTS.md"), "AGENTS.md", res, { createIfAbsent: true });
+  ensureAco(join5(root, "CLAUDE.md"), "CLAUDE.md", res, { createIfAbsent: false });
   if (host === "github") {
     writeIfAbsent(join5(root, ".github", "workflows", "disclosure.yml"), ".github/workflows/disclosure.yml", GH_WORKFLOW, created, skipped);
   }
   const nextSteps = ["Commit the created files."];
   if (created.includes("AGENTS.md")) {
-    nextSteps.push("An AGENTS.md ACO convention was added \u2014 agents that read it disclose authorship (e.g. 'npx madeby@latest me --with-ai <tool>'). Tune it to your repo's tools.");
-  } else if (skipped.includes("AGENTS.md")) {
-    nextSteps.push("You already have an AGENTS.md \u2014 add the ACO disclosure rule to it (reference: https://github.com/MadeByFYI/MadeBy/blob/main/AGENTS.md).");
+    nextSteps.push("An AGENTS.md ACO convention was added \u2014 agents that read it disclose authorship (e.g. 'npx madeby@latest ai [tool]'). Tune it to your repo's tools.");
+  }
+  if (merged.length > 0) {
+    nextSteps.push(`Merged the ACO disclosure rule into your existing ${merged.join(" + ")} \u2014 review the appended "Authorship disclosure (ACO)" section and tune it to your repo.`);
   }
   if (host === "azure-devops") {
     nextSteps.push("Add the Azure Pipelines template (packages/action/azure-pipelines-disclosure.yml) and wire it as a PR build-validation branch policy.");
@@ -1956,7 +1990,7 @@ function initRepo(root, opts = {}) {
   }
   nextSteps.push("Contributors disclose origin with a Co-Authored-By / Generated-by trailer (AI), an Authored-by-human trailer ('madeby me'), an Authored-by-ai trailer ('madeby ai' \u2014 AI authored, committer accountable), a DCO Signed-off-by, or a signed commit. Evidence upgrade: 'madeby ai --witness' records your own AI session's witnessed spans.");
   nextSteps.push("Existing history is accounted for honestly, not fabricated: run 'madeby check' over full history to recognize what's already disclosed; pre-adoption commits stay unknown. See madeby://guide/backfill.");
-  return { created, skipped, policyMode: mode, host, nextSteps };
+  return { created, skipped, merged, policyMode: mode, host, nextSteps };
 }
 
 // src/commands/init.ts
@@ -1972,6 +2006,7 @@ function initCommand(args) {
   const host = hostIdx >= 0 ? args[hostIdx + 1] : void 0;
   const r = initRepo(root, { mode, host });
   for (const f of r.created) console.log(`  + ${f}`);
+  for (const f of r.merged) console.log(`  ~ ${f} (merged in the ACO rule)`);
   for (const f of r.skipped) console.log(`  \xB7 ${f} (exists \u2014 left as-is)`);
   console.log(`
 madeby init \u2014 policy: ${r.policyMode}, host: ${r.host}`);
@@ -1983,7 +2018,7 @@ madeby init \u2014 policy: ${r.policyMode}, host: ${r.host}`);
 import { execFileSync as execFileSync6 } from "node:child_process";
 import { createInterface } from "node:readline";
 var DEFAULT_PROTOCOL = "2024-11-05";
-var SERVER_INFO = { name: "madeby", version: "0.3.3" };
+var SERVER_INFO = { name: "madeby", version: "0.3.4" };
 function rootFor(path) {
   const cwd = path && path.length ? path : process.cwd();
   return execFileSync6("git", ["-C", cwd, "-c", "core.quotePath=false", "rev-parse", "--show-toplevel"], { encoding: "utf8" }).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "madeby",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "mcpName": "io.github.MadeByFYI/madeby",
   "description": "Disclose AI authorship of code. `npx madeby ai` adds an Authored-by-ai git trailer; AI coding agents disclose per the ACO standard (human/with_ai/ai) from an AGENTS.md convention. Disclosure, not detection. Gate PRs with `madeby check`.",
   "license": "MIT",