Dev10x 0.97.0__tar.gz → 0.99.0__tar.gz

{dev10x-0.97.0/src/Dev10x.egg-info → dev10x-0.99.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.97.0
+Version: 0.99.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.97.0 → dev10x-0.99.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "Dev10x"
-version = "0.97.0"
+version = "0.99.0"
 description = "Claude Code plugin providing reusable skills, hooks, and commands"
 readme = "README.md"
 license = { file = "LICENSE" }

{dev10x-0.97.0 → dev10x-0.99.0/src/Dev10x.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.97.0
+Version: 0.99.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.97.0 → dev10x-0.99.0}/src/Dev10x.egg-info/SOURCES.txt

@@ -64,6 +64,7 @@ src/dev10x/domain/sensitivity.py
 src/dev10x/domain/session_document.py
 src/dev10x/domain/session_rules.py
 src/dev10x/domain/session_staleness.py
+src/dev10x/domain/transport_budget.py
 src/dev10x/domain/watchdog.py
 src/dev10x/domain/common/__init__.py
 src/dev10x/domain/common/accepted_findings.py
@@ -73,6 +74,7 @@ src/dev10x/domain/common/bash_tokens.py
 src/dev10x/domain/common/branch_name.py
 src/dev10x/domain/common/commit_subject.py
 src/dev10x/domain/common/config_io.py
+src/dev10x/domain/common/ide_choice.py
 src/dev10x/domain/common/mcp_tool_name.py
 src/dev10x/domain/common/mktmp_path.py
 src/dev10x/domain/common/plugin_loader.py
@@ -129,6 +131,7 @@ src/dev10x/hooks/session_dispatch.py
 src/dev10x/hooks/session_place.py
 src/dev10x/hooks/session_policy.py
 src/dev10x/hooks/skill.py
+src/dev10x/hooks/stop_verdict.py
 src/dev10x/hooks/task_guard.py
 src/dev10x/hooks/task_plan_sync.py
 src/dev10x/mcp/__init__.py
@@ -173,6 +176,7 @@ src/dev10x/scope/index_parser.py
 src/dev10x/scope/norms_renderer.py
 src/dev10x/scope/safeguards_renderer.py
 src/dev10x/session/__init__.py
+src/dev10x/session/ide_pin.py
 src/dev10x/session/preset_pin.py
 src/dev10x/session/service.py
 src/dev10x/session/supervisor_review_pin.py
@@ -204,11 +208,15 @@ src/dev10x/skills/doctor/strategies/home_in_additional_directories.py
 src/dev10x/skills/doctor/strategies/mcp_horizontal_duplicates.py
 src/dev10x/skills/doctor/strategies/mcp_vs_script_drift.py
 src/dev10x/skills/doctor/strategies/missing_linear_mcp_allow.py
+src/dev10x/skills/doctor/strategies/retired_session_yaml.py
+src/dev10x/skills/doctor/strategies/shell_equivalent_mcp_tools.py
 src/dev10x/skills/evidence/__init__.py
 src/dev10x/skills/foreman/__init__.py
 src/dev10x/skills/foreman/watch.py
 src/dev10x/skills/git_fixup/__init__.py
 src/dev10x/skills/git_fixup/find_fixup_target.py
+src/dev10x/skills/merge/__init__.py
+src/dev10x/skills/merge/fixes_scope.py
 src/dev10x/skills/monitor/__init__.py
 src/dev10x/skills/monitor/ci_check_status.py
 src/dev10x/skills/monitor/pr_notify.py
@@ -236,6 +244,8 @@ src/dev10x/skills/permission/doctor.py
 src/dev10x/skills/permission/enumerate_mcp.py
 src/dev10x/skills/permission/file_lock.py
 src/dev10x/skills/permission/generalize.py
+src/dev10x/skills/permission/ide_resolve.py
+src/dev10x/skills/permission/ignore_session_state.py
 src/dev10x/skills/permission/manifest.py
 src/dev10x/skills/permission/merge_worktree_permissions.py
 src/dev10x/skills/permission/migrate_config.py
@@ -287,6 +297,7 @@ src/dev10x/validators/sensitivity_target.py
 src/dev10x/validators/skill_redirect.py
 src/dev10x/validators/spec_drift.py
 src/dev10x/validators/sql_safety.py
+src/dev10x/validators/write_destination.py
 tests/test_cli.py
 tests/test_cli_lazy.py
 tests/test_cwd_discipline_sweep.py
@@ -300,4 +311,5 @@ tests/test_regenerable_caches_untracked.py
 tests/test_retired_config_paths.py
 tests/test_script_loadability.py
 tests/test_shell_script_flags.py
-tests/test_subprocess_utils.py
+tests/test_subprocess_utils.py
+tests/test_use_cwd_absolute.py

{dev10x-0.97.0 → dev10x-0.99.0}/src/dev10x/commands/github_app.py

@@ -3,7 +3,7 @@
 Walks the engineer through GitHub App registration with install-target
 guidance, picks up the downloaded ``.pem`` from disk, and runs an
 end-to-end verification (App JWT → installations → installation token →
-repo read) before writing config under ``~/.claude/Dev10x/github-bot/``.
+repo read) before writing config under ``~/.config/Dev10x/github-bot/``.
 """
 
 from __future__ import annotations
@@ -13,17 +13,37 @@ import shutil
 import sys
 from dataclasses import dataclass, field
 from pathlib import Path
+from typing import Any
 
 import click
 
 from dev10x.commands import github_app_api as api
 from dev10x.domain.dev10x_paths import Dev10xConfigDir
 from dev10x.domain.file_locks import atomic_write_text
+from dev10x.github.app_auth import AppConfig
 
 CONFIG_DIR = Dev10xConfigDir.github_bot_dir()
 CONFIG_PATH = Dev10xConfigDir.github_app_yaml()
 KEY_PATH = CONFIG_DIR / "dev10x-bot.pem"
 
+# What the plugin calls, and the capability each one unlocks. Reported
+# against the permissions the INSTALLATION was granted, not the ones the
+# App requests: editing an App's permissions raises a request the
+# installation must accept, and until it does every call runs on the old
+# set (GH-1271).
+NEEDED_PERMISSIONS = {
+    "pull_requests": ("write", "review-thread replies, PR summary comments"),
+    "issues": ("write", "comments on issues — the shared /issues/ endpoint"),
+    "contents": ("write", "repo reads; bot-authored commits"),
+}
+
+# Short of these the bot is degraded, not broken, so status still passes.
+# The setup doc sanctions `Contents: read` for comments-without-commit-
+# identity; failing that configuration would contradict our own guidance.
+OPTIONAL_PERMISSIONS = {"contents": "commit identity unavailable; comments still work"}
+
+_PERMISSION_RANK = {"read": 1, "write": 2, "admin": 3}
+
 PERSONAL_NEW_APP_URL = "https://github.com/settings/apps/new"
 
 INTRO = """\
@@ -476,7 +496,7 @@ def setup(*, force: bool, paste: bool) -> None:
 
 @github_app.command()
 def status() -> None:
-    """Show current GitHub App config status."""
+    """Show GitHub App config status and the permissions actually granted."""
     if not CONFIG_PATH.exists():
         click.echo(f"No config at {CONFIG_PATH}")
         click.echo("Run `dev10x github-app setup` to create one.")
@@ -490,3 +510,68 @@ def status() -> None:
         click.echo(f"Key mode:      {mode}")
         if mode != "0o600":
             click.echo("  ⚠  Expected 0o600 — fix with: chmod 600 " + str(KEY_PATH))
+
+    click.echo("")
+    if not _report_granted_permissions():
+        sys.exit(1)
+
+
+def _report_granted_permissions() -> bool:
+    """Exercise the credentials and report granted vs needed permissions.
+
+    A status command that reads config and stops is the defect GH-1271
+    names: token resolution falls back to user auth silently, so an
+    unusable App and an absent one look identical from the outside.
+    """
+    config = AppConfig.load(path=CONFIG_PATH)
+    if config is None:
+        click.echo("Token check:   ✗ config is unreadable, disabled, or missing app_id")
+        click.echo("  The bot will fall back to your engineer identity on every call.")
+        return False
+
+    try:
+        jwt_token = api.mint_app_jwt(
+            app_id=config.app_id, private_key=config.private_key_path.read_text()
+        )
+        installations = api.list_installations(jwt_token=jwt_token)
+    except Exception as exc:
+        # Any failure here is a report line, not a traceback: the whole
+        # point is to name what silently falls back (GH-1271).
+        click.echo(f"Token check:   ✗ {exc}")
+        click.echo("  The bot will fall back to your engineer identity on every call.")
+        return False
+
+    if not installations:
+        click.echo("Token check:   ✗ App is registered but not installed anywhere")
+        return False
+
+    # Every installation is reported, not just the first: an App on both
+    # a personal account and an org has independent permission sets, and
+    # picking one is a coin flip on exactly the setup the doc calls a trap.
+    complete = True
+    for installation in installations:
+        complete = _report_one_installation(installation) and complete
+
+    if not complete:
+        click.echo("")
+        click.echo("  A permission you added still needs the INSTALLATION to accept it.")
+        click.echo("  Personal install: https://github.com/settings/installations")
+        click.echo("  Org install:      /organizations/<org>/settings/installations")
+    return complete
+
+
+def _report_one_installation(installation: dict[str, Any]) -> bool:
+    account = (installation.get("account") or {}).get("login", "?")
+    click.echo(f"Installation {installation.get('id')} ({account}):")
+
+    granted = installation.get("permissions") or {}
+    satisfied = True
+    for name, (needed, unlocks) in NEEDED_PERMISSIONS.items():
+        actual = granted.get(name)
+        has_level = _PERMISSION_RANK.get(actual or "", 0) >= _PERMISSION_RANK[needed]
+        optional = name in OPTIONAL_PERMISSIONS
+        mark = "✓" if has_level else ("•" if optional else "✗")
+        suffix = "" if has_level else (f" — {OPTIONAL_PERMISSIONS[name]}" if optional else "")
+        click.echo(f"  {mark} {name}: {actual or 'none'} (need {needed}) — {unlocks}{suffix}")
+        satisfied = satisfied and (has_level or optional)
+    return satisfied

{dev10x-0.97.0 → dev10x-0.99.0}/src/dev10x/commands/permission.py

@@ -774,6 +774,47 @@ def seed_worktree(*, worktree_path: str, dry_run: bool) -> None:
     click.echo(f"{verb} {result.value['added']} rule(s) → {result.value['path']}")
 
 
+@permission.command(name="ensure-ignored")
+@click.option("--dry-run", is_flag=True, help="Show changes without modifying files")
+@click.option("--quiet", is_flag=True, help="Suppress per-repo details")
+def ensure_ignored(*, dry_run: bool, quiet: bool) -> None:
+    """Keep Dev10x's own session state out of `git status` (GH-1275).
+
+    Writes `.claude/Dev10x/` to each managed repo's `.git/info/exclude`.
+    That file lives in the git COMMON dir, so one write per repo covers
+    every present and future worktree of it — there is no per-worktree
+    pass to keep up to date.
+    """
+    from dev10x.skills.permission import ignore_session_state as mod
+
+    ctx = _require_context()
+    roots = ctx.config.get("roots", [])
+    if not roots:
+        click.echo("No roots configured. Run `dev10x permission init` first.")
+        return
+
+    if dry_run and not quiet:
+        click.echo("(dry run — no files will be modified)\n")
+
+    outcomes = mod.ensure_ignored_for_roots(
+        repo_roots=[Path(root) for root in roots],
+        dry_run=dry_run,
+    )
+    if not quiet:
+        for outcome in outcomes:
+            click.echo(outcome.summary())
+
+    changed = [outcome for outcome in outcomes if outcome.changed]
+    verb = "would gain" if dry_run else "gained"
+    click.echo(f"\n{len(changed)} of {len(outcomes)} repo(s) {verb} the rule.")
+
+    suggestions = [text for text in map(mod.suggestion_for, changed) if text]
+    if suggestions:
+        click.echo("\nOptional — a tracked rule survives a fresh clone:")
+        for text in suggestions:
+            click.echo(text)
+
+
 @permission.command(name="merge-worktree")
 @click.option("--dry-run", is_flag=True, help="Show changes without modifying files")
 @click.option("--restore", is_flag=True, help="Restore settings from most recent backups")

{dev10x-0.97.0 → dev10x-0.99.0}/src/dev10x/commands/session.py

@@ -336,3 +336,41 @@ def set_playbook(*, skill: str, modes: tuple[str, ...], skip_steps: tuple[str, .
         skip_steps=list(skip_steps) or None,
     )
     click.echo(f"wrote playbook modes for {skill} to {written}")
+
+
+@session.command("reap")
+@click.option(
+    "--dry-run",
+    is_flag=True,
+    help="Report what would be removed without writing.",
+)
+def reap(*, dry_run: bool) -> None:
+    """Drop durable project pins whose every named checkout is gone.
+
+    The maintenance machinery's only removal path (GH-1253). Every other
+    command ensures something is present, so nothing has ever retired a
+    pin for an ephemeral worktree that no longer exists — and
+    first-match-wins evaluation walks all of them before reaching a real
+    project.
+
+    An entry is removed only when it names at least one absolute path and
+    every such path is absent. A glob-only entry names no checkout that
+    can be checked, so it is always kept.
+    """
+    from dev10x.domain.dev10x_paths import Dev10xConfigDir
+    from dev10x.domain.documents.session_yaml import (
+        is_provably_dead,
+        project_entries,
+        reap_dead_projects,
+    )
+
+    if dry_run:
+        path = Dev10xConfigDir.friction_yaml()
+        entries = project_entries(path=path)
+        dead = [entry for entry in entries if is_provably_dead(entry)]
+        click.echo(f"  {path}: {len(entries)} entries, {len(dead)} provably dead")
+        for entry in dead:
+            click.echo(f"    − {', '.join(str(m) for m in entry.get('match', []))}")
+        return
+
+    click.echo(reap_dead_projects().summary())

dev10x-0.99.0/src/dev10x/domain/common/ide_choice.py

@@ -0,0 +1,109 @@
+"""IDE-keyed permission seeding (GH-1261).
+
+The mirror of :mod:`dev10x.domain.common.tracker_choice`, for the same
+reason it exists: an IDE MCP server is a property of *some* setups, so
+seeding its rules unconditionally hands everyone else a pile of inert
+allows — the failure GH-768 fixed for trackers.
+
+``none`` is the resolved default rather than a named IDE, because unlike
+a tracker (every project has one) most checkouts have no IDE server at
+all. A user who pins nothing folds nothing.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from enum import StrEnum
+
+from dev10x.domain.common.tracker_choice import ALLOW_KEY, DENY_KEY
+
+IDE_ALLOW_KEY = "ide_permissions"
+IDE_DENY_KEY = "ide_denies"
+
+
+class Ide(StrEnum):
+    """IDE MCP servers with a first-class permission block (v1 scope).
+
+    VS Code and the JetBrains siblings beyond PyCharm are absent
+    deliberately: their tool surfaces have not been enumerated, and an
+    empty block would look supported.
+    """
+
+    PYCHARM = "pycharm"
+    NONE = "none"
+
+    @classmethod
+    def default(cls) -> Ide:
+        return cls.NONE
+
+
+@dataclass(frozen=True)
+class IdeRules:
+    """The allow/deny rules one IDE contributes to the baseline."""
+
+    allow: tuple[str, ...] = ()
+    deny: tuple[str, ...] = ()
+
+    def __bool__(self) -> bool:
+        return bool(self.allow or self.deny)
+
+
+def parse_ide(value: object) -> Ide | None:
+    """Coerce a config value to an :class:`Ide`, or ``None``.
+
+    ``None`` means "not configured". An unrecognised name also returns
+    ``None`` so a typo degrades to the caller's default rather than
+    raising inside a seeding run.
+    """
+    if not isinstance(value, str):
+        return None
+    try:
+        return Ide(value.strip().lower())
+    except ValueError:
+        return None
+
+
+def _rules_for(*, config: dict, ide: Ide) -> IdeRules:
+    def entries(key: str) -> tuple[str, ...]:
+        block = config.get(key)
+        if not isinstance(block, dict):
+            return ()
+        rules = block.get(ide.value)
+        if not isinstance(rules, list):
+            return ()
+        return tuple(rule for rule in rules if isinstance(rule, str))
+
+    return IdeRules(allow=entries(IDE_ALLOW_KEY), deny=entries(IDE_DENY_KEY))
+
+
+def ide_inventory(*, config: dict) -> dict[Ide, IdeRules]:
+    """Every IDE block the catalog defines, keyed by IDE."""
+    return {ide: _rules_for(config=config, ide=ide) for ide in Ide}
+
+
+def apply_ide_selection(*, config: dict, ide: Ide) -> dict:
+    """Return ``config`` with only ``ide``'s rules folded into the flat lists.
+
+    The input is not mutated: seeding runs read the shipped catalog from
+    a cached loader, so mutating it would leak the first run's IDE into
+    every later one in the same process.
+
+    Idempotent — a rule already in the flat list is not duplicated.
+    """
+    rules = _rules_for(config=config, ide=ide)
+    merged = dict(config)
+    for key, additions in ((ALLOW_KEY, rules.allow), (DENY_KEY, rules.deny)):
+        existing = [rule for rule in merged.get(key, []) if isinstance(rule, str)]
+        merged[key] = existing + [rule for rule in additions if rule not in existing]
+    return merged
+
+
+__all__ = [
+    "IDE_ALLOW_KEY",
+    "IDE_DENY_KEY",
+    "Ide",
+    "IdeRules",
+    "apply_ide_selection",
+    "ide_inventory",
+    "parse_ide",
+]