mcoda 0.1.2 → 0.1.4

package/.github/workflows/release.yml

@@ -1,139 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  id-token: write
-
-env:
-  NPM_CONFIG_PROVENANCE: "true"
-
-jobs:
-  package:
-    name: Package (${{ matrix.archive }})
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - os: ubuntu-22.04
-            archive: mcoda-linux-x64-gnu
-          - os: ubuntu-22.04
-            archive: mcoda-linux-x64-musl
-          - os: ubuntu-22.04
-            archive: mcoda-linux-arm64-gnu
-          - os: macos-15
-            archive: mcoda-darwin-x64
-          - os: macos-latest
-            archive: mcoda-darwin-arm64
-          - os: windows-latest
-            archive: mcoda-win32-x64
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Install deps
-        run: pnpm install
-
-      - name: Build
-        run: pnpm -r run build
-
-      - name: Run tests
-        run: node tests/all.js
-
-      - name: Pack npm tarballs
-        run: node scripts/pack-npm-tarballs.js
-
-      - name: Bundle release archive
-        shell: bash
-        run: |
-          mkdir -p release
-          tar -czf "release/${{ matrix.archive }}.tar.gz" -C artifacts .
-
-      - name: Upload release package
-        uses: actions/upload-artifact@v4
-        with:
-          name: ${{ matrix.archive }}
-          path: release/${{ matrix.archive }}.tar.gz
-
-  publish-npm:
-    needs: package
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          registry-url: https://registry.npmjs.org
-
-      - name: Install deps
-        run: pnpm install
-
-      - name: Build
-        run: pnpm -r run build
-
-      - name: Packaging guardrails
-        run: pnpm --filter mcoda run pack:verify
-
-      - name: Verify tag matches package versions
-        env:
-          TAG: ${{ github.ref_name }}
-        run: |
-          node -e "
-            const fs = require('fs');
-            const path = require('path');
-            const tag = process.env.TAG.replace(/^v/, '');
-            const packages = [
-              'packages/cli',
-              'packages/core',
-              'packages/shared',
-              'packages/db',
-              'packages/integrations',
-              'packages/agents'
-            ];
-            const mismatches = [];
-            for (const dir of packages) {
-              const pkgPath = path.join(dir, 'package.json');
-              const version = JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version;
-              if (version !== tag) {
-                mismatches.push(`${dir}: ${version}`);
-              }
-            }
-            if (mismatches.length) {
-              console.error(`Tag v${tag} does not match package versions:\n${mismatches.join('\n')}`);
-              process.exit(1);
-            }
-            console.log(`✓ Tag matches all package versions: ${tag}`);
-          "
-
-      - name: Update npm to latest
-        run: npm install -g npm@latest
-
-      - name: Publish packages (OIDC)
-        env:
-          NPM_CONFIG_PROVENANCE: "true"
-        run: pnpm -r publish --access public --no-git-checks

package/.prettierrc

@@ -1,5 +0,0 @@
-{
-  "singleQuote": true,
-  "semi": true,
-  "trailingComma": "es5"
-}

package/.release-please-manifest.json

@@ -1,8 +0,0 @@
-{
-  "packages/cli": "0.1.2",
-  "packages/core": "0.1.2",
-  "packages/shared": "0.1.2",
-  "packages/db": "0.1.2",
-  "packages/integrations": "0.1.2",
-  "packages/agents": "0.1.2"
-}

package/CLA.md

@@ -1,42 +0,0 @@
-# Mcoda Contributor License Agreement (CLA)
-
-Modeled after Apache ICLA + CCLA, simplified.
-
-1. Grant of Copyright License  
-   You grant Bekir Dag (Mcoda Project Owner) a worldwide, irrevocable, perpetual, transferable, sublicensable, royalty-free copyright license to:  
-   - use, reproduce, modify, adapt, publish, distribute, and create derivative works of your contributions;  
-   - include your contributions in future versions of Mcoda under any license (including commercial licenses).
-
-2. Grant of Patent License  
-   You grant the Project Owner a worldwide, perpetual, irrevocable, royalty-free patent license to:  
-   - make, use, sell, and distribute your contribution,  
-   - and derivative works that include your contribution.
-
-3. Your Rights Remain Yours  
-   - You keep copyright to your own contributions.  
-   - You may use your own contributions anywhere else without restriction.  
-   - This CLA does not transfer your ownership to the Project Owner.
-
-4. Original Work Only  
-   You confirm that:  
-   - Your contribution is your own original work,  
-   - OR you have the right to submit it under this agreement.  
-   You also agree not to knowingly contribute:  
-   - code or content you do not have permission to provide,  
-   - anything violating third-party IP rights.
-
-5. No Warranty  
-   You provide contributions "as is," without warranty.
-
-6. Contact Information  
-   You agree to provide a valid email address so the Project Owner can contact you for IP-related matters.
-
-7. Identification of Contribution  
-   A "Contribution" means any code, documentation, bug fixes, designs, tests, or other materials submitted via pull request, issue, or any communication explicitly intended to contribute to Mcoda.
-
-8. Acceptance of the CLA  
-   You accept this CLA by submitting a contribution and confirming agreement (e.g., via GitHub sign-off, CI CLA bot, or checkbox).
-
-## Signature / Assertion
-
-By submitting a contribution to the Mcoda repository, you agree to this Contributor License Agreement.

package/CONTRIBUTING.md

@@ -1,38 +0,0 @@
-# Contributing to mcoda
-
-Thanks for your interest in improving mcoda! This guide covers the basics for local setup, testing, and releases.
-
-## Prereqs
-- Node.js >= 20
-- pnpm (recommended) or npm
-- Git
-
-## Setup
-```bash
-git clone git@github.com:bekirdag/mcoda.git
-cd mcoda
-pnpm install
-pnpm -r run build
-pnpm -r run test
-```
-
-## Making changes
-- Keep versions aligned across published packages (cli, core, db, integrations, shared, agents).
-- Add or update docs when behavior or flags change.
-- Prefer small, focused PRs with clear commit messages.
-
-## Testing
-- Run the full test suite before opening a PR:
-  - `pnpm -r run build`
-  - `pnpm -r run test`
-- If you touch packaging or release logic, run:
-  - `pnpm --filter mcoda run pack:verify`
-
-## Releases
-- Releases are tagged as `vX.Y.Z` on `main`.
-- GitHub Actions runs release workflows and publishes to npm using trusted publishing (OIDC).
-- Release-please manages version bumps and changelogs.
-
-## Reporting issues
-- Include repro steps, expected/actual behavior, and environment details.
-- For security issues, use GitHub Security Advisories instead of filing a public issue.

package/docs/oss_publishing_plan.md

@@ -1,41 +0,0 @@
-# mcoda OSS publishing plan
-
-## Goals
-- Mirror docdex OSS release hygiene for mcoda: docs, license, CI, release automation, and tests.
-- Prepare npm publishing with clear metadata and repeatable release steps.
-
-## Docdex items to replicate
-- Core docs: README, LICENSE, CHANGELOG, CONTRIBUTING, CLA.
-- Npm-facing docs: README, CHANGELOG, LICENSE in the published package.
-- Issue templates and release workflows (ci, nightly, release-please, release, dry-run).
-- Quality gates doc and packaging/test guardrails.
-
-## Plan
-1) Documentation and governance
-- Add root LICENSE, CHANGELOG, CONTRIBUTING, CLA.
-- Expand README with npm install, quick start, and support links.
-- Add `docs/usage.md` and `docs/quality_gates.md` for deeper usage + release quality checks.
-
-2) Package metadata and npm layout
-- Decide package name (`mcoda` vs `@mcoda/cli`) and versioning scheme.
-- Ensure runtime packages are publishable (cli, core, shared, db, integrations, agents).
-- Mark non-public packages as private.
-- Add metadata (description, repository, bugs, homepage, keywords, engines, license, files).
-- Add npm packaging guard test (tarball content sanity).
-
-3) CI and release automation
-- Add CI workflow: build + test on push/PR.
-- Add nightly quality workflow: audit + tests + packaging checks.
-- Add release-please config + manifest for versioning.
-- Add release workflow for npm publish with OIDC.
-- Add release dry-run workflow.
-- Add GitHub issue templates.
-
-4) Verification
-- Run local build/tests and npm pack dry-run for the CLI.
-- Validate workflows are consistent with the repo structure.
-
-## Decisions (current)
-- npm package name: `mcoda`.
-- Published packages: `mcoda`, `@mcoda/core`, `@mcoda/shared`, `@mcoda/db`, `@mcoda/integrations`, `@mcoda/agents`.
-- Private packages: `@mcoda/generators`, `@mcoda/testing`.

package/docs/quality_gates.md

@@ -1,32 +0,0 @@
-# mcoda Quality Gates
-
-This document defines baseline quality gates for mcoda releases. Use it for release readiness checks and nightly CI.
-
-## Release targets (global)
-- Stability:
-  - Core CLI flows complete without unhandled exceptions.
-  - Workspace initialization creates `.mcoda` and the SQLite DB reliably.
-  - Task creation, ordering, and migrations succeed on sample projects.
-- Performance:
-  - Dependency ordering completes within 5s for 10k tasks on a laptop.
-  - Backlog listing for 1k tasks completes within 3s.
-- Security:
-  - No critical/high CVEs in direct dependencies.
-  - Secrets are never printed in CLI output or logs.
-- Documentation:
-  - README and `docs/usage.md` cover new flags and behavior changes.
-  - Changelog updated for user-facing changes.
-- Tests:
-  - Unit and integration tests pass across workspace packages.
-  - Packaging guardrails pass (no accidental artifacts in npm tarball).
-
-## Nightly checks
-- `pnpm -r run build`
-- `node tests/all.js`
-- `pnpm --filter mcoda run pack:verify`
-- `pnpm audit --audit-level high`
-
-## Evidence artifacts
-- Test logs from CI runs.
-- Pack dry-run output from `npm pack --dry-run --json`.
-- Audit output stored in CI logs.