nobrainer-tech-flow 0.0.0-stage → 2.4.0

package/plugin.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "nobrainer-tech-flow",
+  "description": "From task to done. nobrainer-tech-flow is one workflow of 18 modules for AI coding agents: it scopes the task, delegates ready work, checks the result and hands over the evidence, including what was not checked.",
+  "version": "2.4.0",
+  "author": {
+    "name": "NoBrainer Tech",
+    "url": "https://nobrainer.tech"
+  },
+  "homepage": "https://nobrainer.tech/flow/",
+  "repository": "https://github.com/nobrainer-tech/nobrainer-tech-flow",
+  "license": "MIT",
+  "keywords": [
+    "workflow",
+    "agent-skills",
+    "research",
+    "writing",
+    "planning",
+    "verification"
+  ],
+  "extensions": {
+    "com.openai": {
+      "interface": {
+        "displayName": "nobrainer-tech-flow",
+        "shortDescription": "From task to done.",
+        "longDescription": "nobrainer-tech-flow is one workflow of 18 modules for coding, research, writing and planning. It clarifies the outcome, delegates independent ready work to native workers, shares concise progress, checks the result and hands over what was delivered, the evidence and what was not checked. It uses the tools and permissions your client already grants.",
+        "developerName": "NoBrainer Tech",
+        "category": "Developer Tools",
+        "capabilities": [
+          "Interactive",
+          "Read",
+          "Write"
+        ],
+        "defaultPrompt": [
+          "Use `nobrainer-tech-flow` to fix this bug: reproduce it, make the smallest fix, run the check and say what is unverified.",
+          "Use `nobrainer-tech-flow` to turn my idea into a plan with acceptance checks, then deliver and verify it.",
+          "Use `nobrainer-tech-flow` to compare these options with sources and give one recommendation."
+        ],
+        "websiteURL": "https://nobrainer.tech/flow/",
+        "privacyPolicyURL": "https://github.com/nobrainer-tech/nobrainer-tech-flow/blob/main/docs/PRIVACY.md",
+        "termsOfServiceURL": "https://github.com/nobrainer-tech/nobrainer-tech-flow/blob/main/LICENSE",
+        "brandColor": "#2948B8",
+        "composerIcon": "./assets/plugin-logo.png",
+        "logo": "./assets/plugin-logo.png",
+        "screenshots": [],
+        "supportURL": "https://github.com/nobrainer-tech/nobrainer-tech-flow/issues"
+      },
+      "onboardingSkill": "./skills/nobrainer-tech-flow/SKILL.md"
+    }
+  }
+}

package/scripts/build_plugin.py

@@ -0,0 +1,50 @@
+#!/usr/bin/env python3
+"""Build a hook-free portable plugin ZIP from the same eighteen canonical skills."""
+import argparse
+import json
+from pathlib import Path
+import zipfile
+
+ROOT = Path(__file__).resolve().parents[1]
+DIRECTORIES = ("skills", "scripts", "adapters", "docs", "assets")
+ROOT_FILES = ("plugin.json", "README.md", "LICENSE", "SECURITY.md", "package.json")
+EXCLUDED = {"__pycache__", ".DS_Store", "node_modules"}
+ARCHIVES = {".zip", ".tgz", ".tar", ".gz"}
+
+
+def build(output: Path) -> None:
+    version = json.loads((ROOT / "plugin.json").read_text())["version"]
+    files = []
+    for directory in DIRECTORIES:
+        for path in sorted((ROOT / directory).rglob("*")):
+            if path.is_symlink():
+                raise ValueError("plugin source must not contain symlinks: " + str(path))
+            if path.is_file() and not set(path.parts) & EXCLUDED and path.suffix not in ARCHIVES | {".pyc"}:
+                if directory == "docs" and path.parent not in (ROOT / "docs", ROOT / "docs/releases"):
+                    continue
+                if directory == "assets" and path.suffix not in (".svg", ".png"):
+                    continue
+                files.append(path)
+    files.extend(ROOT / name for name in ROOT_FILES)
+    skills = list((ROOT / "skills").glob("*/SKILL.md"))
+    if len(skills) != 18:
+        raise ValueError("plugin requires the exact eighteen-module portfolio")
+    output.parent.mkdir(parents=True, exist_ok=True)
+    if output.exists() or output.is_symlink():
+        raise ValueError("output already exists; choose a fresh path")
+    with zipfile.ZipFile(output, "x", compression=zipfile.ZIP_DEFLATED) as archive:
+        for path in files:
+            archive.write(path, path.relative_to(ROOT).as_posix())
+        overlay = json.loads((ROOT / ".codex-plugin/plugin.json").read_text())
+        archive.writestr(".codex-plugin/plugin.json", json.dumps(overlay, indent=2) + "\n")
+        claude = json.loads((ROOT / ".claude-plugin/plugin.json").read_text())
+        claude.pop("hooks", None)
+        archive.writestr(".claude-plugin/plugin.json", json.dumps(claude, indent=2) + "\n")
+    print(f"PLUGIN_READY: {output.name}; version={version}; skills=18; hooks=none; bytes={output.stat().st_size}")
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--output", type=Path, required=True)
+    args = parser.parse_args()
+    build(args.output)

package/scripts/check_flow_update.py

@@ -0,0 +1,18 @@
+#!/usr/bin/env python3
+"""Repository wrapper for the installed skill's nobrainer-tech-flow update checker."""
+
+from __future__ import annotations
+
+import sys
+from pathlib import Path
+
+
+_HELPER_DIR = Path(__file__).resolve().parents[1] / "skills" / "nobrainer-tech-flow" / "scripts"
+sys.path.insert(0, str(_HELPER_DIR))
+
+# Keep the historical import surface available to tests and repository callers.
+from check_flow_update import *  # noqa: E402,F401,F403
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/check_public_commit.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Fail closed before a public-repository commit uses automation or backup state."""
+
+from __future__ import annotations
+
+import re
+import subprocess
+import sys
+
+
+AUTOMATED_IDENTITY_RE = re.compile(
+    r"\b(?:auto|automated|automation|backup|bot)\b",
+    re.IGNORECASE,
+)
+BACKUP_PATH_RE = re.compile(
+    r"(?:^|/)(?:\.git-backups|backup|backups)(?:/|$)"
+    r"|(?:^|/)[^/]*\.(?:bak|backup)(?:[-.]|$)",
+    re.IGNORECASE,
+)
+
+
+def _git(*args: str) -> subprocess.CompletedProcess[str]:
+    try:
+        return subprocess.run(
+            ["git", *args],
+            # Git emits UTF-8 names and paths whatever the console code page is.
+            encoding="utf-8",
+            errors="replace",
+            capture_output=True,
+            check=False,
+        )
+    except OSError as exc:
+        raise RuntimeError(f"git is unavailable: {exc}") from None
+
+
+def _identity(variable: str) -> tuple[str, str]:
+    result = _git("var", variable)
+    if result.returncode != 0:
+        detail = result.stderr.strip() or "git var failed"
+        raise RuntimeError(f"{variable}: {detail}")
+    match = re.match(r"^(?P<name>.+) <(?P<email>[^>]+)>", result.stdout.strip())
+    if match is None:
+        raise RuntimeError(f"{variable}: unparseable identity")
+    return match.group("name"), match.group("email")
+
+
+def _staged_paths() -> tuple[str, ...]:
+    result = _git("diff", "--cached", "--name-only", "-z")
+    if result.returncode != 0:
+        detail = result.stderr.strip() or "git diff failed"
+        raise RuntimeError(f"staged paths: {detail}")
+    return tuple(path for path in result.stdout.split("\0") if path)
+
+
+def main() -> int:
+    violations: list[str] = []
+    try:
+        for variable in ("GIT_AUTHOR_IDENT", "GIT_COMMITTER_IDENT"):
+            name, email = _identity(variable)
+            if AUTOMATED_IDENTITY_RE.search(f"{name} <{email}>"):
+                violations.append(f"{variable}={name} <{email}>")
+
+        for path in _staged_paths():
+            if BACKUP_PATH_RE.search(path):
+                violations.append(f"staged backup path={path}")
+    except RuntimeError as exc:
+        print(f"PUBLIC_COMMIT_GUARD: ERROR: {exc}", file=sys.stderr)
+        return 2
+
+    if violations:
+        print("PUBLIC_COMMIT_GUARD: BLOCKED", file=sys.stderr)
+        for violation in violations:
+            print(f"- {violation}", file=sys.stderr)
+        print(
+            "Use a human repository identity and keep backup state in the "
+            "private repository.",
+            file=sys.stderr,
+        )
+        return 1
+
+    print("PUBLIC_COMMIT_GUARD: PASS")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/fetch_public_refs.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Fetch public remote refs without changing the working tree."""
+
+from __future__ import annotations
+
+import argparse
+import re
+import subprocess
+import sys
+from pathlib import Path
+
+
+REMOTE_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+
+
+def _git(*args: str, cwd: Path | None = None) -> subprocess.CompletedProcess[str]:
+    return subprocess.run(
+        ["git", *args],
+        cwd=cwd,
+        text=True,
+        capture_output=True,
+        check=False,
+    )
+
+
+def _parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(
+        description="Update one public remote-tracking ref; leave the worktree untouched."
+    )
+    parser.add_argument("--remote", default="origin")
+    parser.add_argument("--branch", default="main")
+    return parser
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = _parser().parse_args(argv)
+    if REMOTE_RE.fullmatch(args.remote) is None or args.remote.startswith("-"):
+        print("PUBLIC_FETCH: ERROR: invalid remote name", file=sys.stderr)
+        return 2
+    if args.branch.startswith("-"):
+        print("PUBLIC_FETCH: ERROR: invalid branch name", file=sys.stderr)
+        return 2
+
+    root_result = _git("rev-parse", "--show-toplevel")
+    if root_result.returncode != 0:
+        print("PUBLIC_FETCH: ERROR: not a Git worktree", file=sys.stderr)
+        return 2
+    root = Path(root_result.stdout.strip())
+
+    branch_result = _git("check-ref-format", "--branch", args.branch, cwd=root)
+    if branch_result.returncode != 0:
+        print("PUBLIC_FETCH: ERROR: invalid branch name", file=sys.stderr)
+        return 2
+
+    refspec = f"refs/heads/{args.branch}:refs/remotes/{args.remote}/{args.branch}"
+    fetch_result = _git("fetch", "--no-tags", args.remote, refspec, cwd=root)
+    if fetch_result.returncode != 0:
+        print(
+            f"PUBLIC_FETCH: ERROR: fetch failed (exit {fetch_result.returncode})",
+            file=sys.stderr,
+        )
+        return fetch_result.returncode or 1
+
+    print(f"PUBLIC_FETCH: PASS remote={args.remote} branch={args.branch}")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())