housebroken-cli 0.6.2__tar.gz → 0.6.4__tar.gz

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: housebroken-cli
-Version: 0.6.2
+Version: 0.6.4
 Summary: Agent-written pull requests that do not make a mess in someone else's house.
 Project-URL: Repository, https://github.com/lenamonj/housebroken
 License-Expression: MIT
@@ -79,6 +79,7 @@ A memory-safety, remote-abort, injection or path-escape finding goes by the proj
 `branch-check.sh` refuses a dirty working tree, a file whose mode disagrees with its siblings, a file the repository's own `.gitignore` excludes, a working artifact, a commit carrying a tool trailer, a session link or a tool identity, a sign-off naming a username, a branch not on top of its base, and any comment added to code; it prints every absolute claim in added prose for falsification, and stamps the head it passed.
 `review.sh` names the adversarial reviewer: a different model from the one that wrote the change, one tier down, never below Sonnet. The reviewer gets a fresh context, hard read-only limits and an attack list that starts with every claim the prose makes and includes the form of the code: the reviewer writes the changed block the way the strongest engineer in that language would, in the repository's own idioms, and a smaller or clearer version is a finding; every finding carries evidence it produced itself, and its report is bound to the head and the text it read. A fix is a new head and gets a new review.
 `file-pr.sh` is the only way a pull request is opened. It refuses without a prior-art printout under a day old, a policy printout under a day old that does not read BAN, a body that discloses when the policy asks, a branch stamp for the exact head, and a POST AS IS review of that head and that body.
+`file-issue.sh` is the only way an issue is opened. It refuses without the same prior-art and policy printouts, refuses the same prose, and refuses a body that mentions a fix, a patch or a pull request without a GitHub link to the branch or commit, so work that exists is attributable to whoever did it.
 
 **10. Watch it land.**
 `verify-filed-pr.sh` re-derives from GitHub that the head is the intended commit, the diff is exactly the intended files, and CI settled. `inbox.sh` prints every event on your threads since the last acknowledged cursor, bodies included, with a census of failing, blocked and conflicting checks. Every maintainer comment gets a same-day answer in the contributor's voice, checked by `claim-check.sh` and, when it concedes, disagrees or rides on a code change, by the adversarial review. Replies to one repository are spaced ten minutes apart. When the maintainer is right, concede in one sentence. A silent maintainer is never nudged.
@@ -123,6 +124,7 @@ uv tool install git+https://github.com/lenamonj/housebroken
 | `scripts/branch-check.sh` | the branch's mechanical facts: clean tree, modes, artifacts, trailers, sign-offs, comments, absolute claims |
 | `scripts/review.sh` | the adversarial review: a different model attacks the change, and the filing is held to exactly what it read |
 | `scripts/file-pr.sh` | the only way a pull request gets filed: five gates in front of `gh pr create` |
+| `scripts/file-issue.sh` | the only way an issue gets filed: the same printouts and prose, and a fix offered is a fix linked |
 | `scripts/verify-filed-pr.sh` | the filed pull request is what was meant, and CI settled |
 | `scripts/pr-sweep.sh` | every open pull request where the ball is in your court |
 | `scripts/inbox.sh` | what GitHub has to tell you since you last looked, bodies included, with a census of every open pull request |

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/README.md

@@ -67,6 +67,7 @@ A memory-safety, remote-abort, injection or path-escape finding goes by the proj
 `branch-check.sh` refuses a dirty working tree, a file whose mode disagrees with its siblings, a file the repository's own `.gitignore` excludes, a working artifact, a commit carrying a tool trailer, a session link or a tool identity, a sign-off naming a username, a branch not on top of its base, and any comment added to code; it prints every absolute claim in added prose for falsification, and stamps the head it passed.
 `review.sh` names the adversarial reviewer: a different model from the one that wrote the change, one tier down, never below Sonnet. The reviewer gets a fresh context, hard read-only limits and an attack list that starts with every claim the prose makes and includes the form of the code: the reviewer writes the changed block the way the strongest engineer in that language would, in the repository's own idioms, and a smaller or clearer version is a finding; every finding carries evidence it produced itself, and its report is bound to the head and the text it read. A fix is a new head and gets a new review.
 `file-pr.sh` is the only way a pull request is opened. It refuses without a prior-art printout under a day old, a policy printout under a day old that does not read BAN, a body that discloses when the policy asks, a branch stamp for the exact head, and a POST AS IS review of that head and that body.
+`file-issue.sh` is the only way an issue is opened. It refuses without the same prior-art and policy printouts, refuses the same prose, and refuses a body that mentions a fix, a patch or a pull request without a GitHub link to the branch or commit, so work that exists is attributable to whoever did it.
 
 **10. Watch it land.**
 `verify-filed-pr.sh` re-derives from GitHub that the head is the intended commit, the diff is exactly the intended files, and CI settled. `inbox.sh` prints every event on your threads since the last acknowledged cursor, bodies included, with a census of failing, blocked and conflicting checks. Every maintainer comment gets a same-day answer in the contributor's voice, checked by `claim-check.sh` and, when it concedes, disagrees or rides on a code change, by the adversarial review. Replies to one repository are spaced ten minutes apart. When the maintainer is right, concede in one sentence. A silent maintainer is never nudged.
@@ -111,6 +112,7 @@ uv tool install git+https://github.com/lenamonj/housebroken
 | `scripts/branch-check.sh` | the branch's mechanical facts: clean tree, modes, artifacts, trailers, sign-offs, comments, absolute claims |
 | `scripts/review.sh` | the adversarial review: a different model attacks the change, and the filing is held to exactly what it read |
 | `scripts/file-pr.sh` | the only way a pull request gets filed: five gates in front of `gh pr create` |
+| `scripts/file-issue.sh` | the only way an issue gets filed: the same printouts and prose, and a fix offered is a fix linked |
 | `scripts/verify-filed-pr.sh` | the filed pull request is what was meant, and CI settled |
 | `scripts/pr-sweep.sh` | every open pull request where the ball is in your court |
 | `scripts/inbox.sh` | what GitHub has to tell you since you last looked, bodies included, with a census of every open pull request |

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/bin/housebroken

@@ -53,6 +53,7 @@ usage: housebroken <subcommand> [args...]
   9  branch      the mechanical facts about the branch: tree, modes, artifacts, claims
   9  review      a different model attacks the change before it is filed
   9  file        the only way a pull request gets filed
+  9  issue       the only way an issue gets filed
  10  verify      the filed pull request is what was meant, and CI settled
  10  sweep       every open pull request where the ball is in your court
  10  inbox       what GitHub has to tell you since you last looked, bodies included
@@ -98,6 +99,7 @@ case "$cmd" in
   branch)    script=branch-check.sh ;;
   review)    script=review.sh ;;
   file)      script=file-pr.sh ;;
+  issue)     script=file-issue.sh ;;
   verify)    script=verify-filed-pr.sh ;;
   sweep)     script=pr-sweep.sh ;;
   inbox)     script=inbox.sh ;;

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "housebroken-cli"
-version = "0.6.2"
+version = "0.6.4"
 description = "Agent-written pull requests that do not make a mess in someone else's house."
 dynamic = ["readme"]
 license = "MIT"

housebroken_cli-0.6.4/scripts/file-issue.sh

@@ -0,0 +1,168 @@
+#!/bin/bash
+# file-issue.sh - the only way an issue gets filed: gh issue create behind four
+# gates.
+#
+# Gate one is prior art: prior-art-<owner>-<repo>.md exists under
+# $HOUSEBROKEN_HOME/prior-art/ and is under 24 hours old.
+# Gate two is the policy: policy-<owner>-<repo>.md exists under
+# $HOUSEBROKEN_HOME/policy/ (check-ai-policy.sh --out), is under 24 hours old,
+# does not read BAN, and when it reads DISCLOSE the body discloses.
+# Gate three is the prose: no tool footer, session trailer, co-author trailer,
+# em dash or en dash in the body or the title.
+# Gate four is the link: a body that offers a fix, a patch or a pull request
+# names a branch or commit on GitHub. On 2026-09-09 an issue that described a
+# fix without linking one was answered by another contributor's pull request
+# seven hours later; on 2026-09-23 it happened again. Work that exists is
+# linked so it is attributable to whoever did it.
+#
+# Usage:
+#   bash file-issue.sh owner/repo --title ... --body-file ...
+#   FILE_ISSUE_DRY=1 bash file-issue.sh owner/repo ...   # print, run nothing
+#   bash file-issue.sh --help
+#
+# Environment:
+#   HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken; the prior
+#                     art and policy printouts are read from it.
+#   FILE_ISSUE_DRY    set to 1 to print the gh command instead of running it.
+#
+# Assumes gh is installed and authenticated. It writes to GitHub only after all
+# four gates pass, and only when FILE_ISSUE_DRY is not 1.
+set -u
+
+usage() {
+  cat <<'EOF'
+usage: file-issue.sh owner/repo --title ... --body-file ... [gh issue create args...]
+       file-issue.sh --help
+
+  owner/repo  the upstream repository the issue is filed on
+  the remaining arguments go to gh issue create, and only these are accepted:
+  --title (required), --body-file (required), --label, --assignee,
+  --milestone and --project, each value as its own argument or after an
+  equals sign
+
+gates:
+  prior art   $HOUSEBROKEN_HOME/prior-art/prior-art-<owner>-<repo>.md must
+              exist and be under 24 hours old
+  policy      $HOUSEBROKEN_HOME/policy/policy-<owner>-<repo>.md must exist,
+              be under 24 hours old and not read RESULT: BAN; when it reads
+              RESULT: DISCLOSE the body must name the AI use
+  prose       no tool footer, session trailer, co-author trailer, em dash or
+              en dash, in any case, in the --body-file or the --title
+  link        a body that mentions a fix, a patch or a pull request must
+              carry a github.com URL to a branch, commit or comparison, so
+              the work it describes is attributable
+
+environment:
+  HOUSEBROKEN_HOME  work directory, default $HOME/.housebroken
+  FILE_ISSUE_DRY    1 prints the gh command and files nothing
+EOF
+}
+
+if [ "$#" -eq 0 ] || [ "${1:-}" = "--help" ] || [ "${1:-}" = "-h" ]; then
+  usage
+  [ "$#" -eq 0 ] && exit 2
+  exit 0
+fi
+
+command -v gh >/dev/null 2>&1 || { echo "REFUSED: gh is not on PATH" >&2; exit 2; }
+
+repo="$1"
+shift
+case "$repo" in
+  */*) : ;;
+  *) echo "REFUSED: first argument must be owner/repo" >&2; exit 2 ;;
+esac
+[ "$#" -gt 0 ] || { echo "REFUSED: no gh issue create arguments given" >&2; exit 2; }
+
+home="${HOUSEBROKEN_HOME:-$HOME/.housebroken}"
+art="$home/prior-art/prior-art-${repo%%/*}-${repo##*/}.md"
+if [ ! -f "$art" ]; then
+  echo "REFUSED: no prior art at $art - run prior-art.sh $repo <terms> --out first" >&2
+  exit 2
+fi
+now=$(date +%s)
+made=$(date -r "$art" +%s) || { echo "REFUSED: cannot read the age of $art" >&2; exit 2; }
+if [ $((now - made)) -gt 86400 ]; then
+  echo "REFUSED: prior art $art is $(( (now - made) / 3600 ))h old - rerun prior-art.sh --out" >&2
+  exit 2
+fi
+
+policy="$home/policy/policy-${repo%%/*}-${repo##*/}.md"
+if [ ! -f "$policy" ]; then
+  echo "REFUSED: no policy printout at $policy - run check-ai-policy.sh $repo --out first" >&2
+  exit 2
+fi
+made=$(date -r "$policy" +%s) || { echo "REFUSED: cannot read the age of $policy" >&2; exit 2; }
+if [ $((now - made)) -gt 86400 ]; then
+  echo "REFUSED: policy printout $policy is $(( (now - made) / 3600 ))h old - rerun check-ai-policy.sh --out" >&2
+  exit 2
+fi
+policy_result=$(grep -m1 '^RESULT: ' "$policy" | awk '{print $2}')
+case "$policy_result" in
+  BAN) echo "REFUSED: $repo forbids AI-written contributions ($policy); never file here" >&2; exit 2 ;;
+  DISCLOSE|MENTION|CLEAN) ;;
+  *) echo "REFUSED: $policy has no RESULT line - rerun check-ai-policy.sh --out" >&2; exit 2 ;;
+esac
+
+em=$(printf '\xe2\x80\x94')   # em dash U+2014, built at runtime to keep this file ASCII
+en=$(printf '\xe2\x80\x93')   # en dash U+2013
+banned_re="Generated with|Claude-Session|claude\.ai/code/session_|Co-Authored-By|$em|$en|&[mn]dash;|&#821[12];|&#x201[34];"
+check_text() {
+  local what="$1" text="$2" hit
+  hit=$(printf '%s' "$text" | grep -ioE "$banned_re" | head -1) || true
+  if [ -n "$hit" ]; then
+    echo "REFUSED: $what contains '$hit' - strip it before filing" >&2
+    exit 2
+  fi
+}
+
+# gh issue create also takes a body from --body, --template, --recover, --web
+# and stdin, and obeys the last -R it is given. Each of those files something
+# no gate read, so only these flags pass.
+bodyfile=""
+title=""
+pass=()
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    -F|--body-file) bodyfile="${2:-}"; pass+=("$1" "${2:-}"); shift ;;
+    --body-file=*) bodyfile="${1#--body-file=}"; pass+=("$1") ;;
+    -t|--title) title="${2:-}"; pass+=("$1" "${2:-}"); shift ;;
+    --title=*) title="${1#--title=}"; pass+=("$1") ;;
+    -l|--label|-a|--assignee|-m|--milestone|-p|--project) pass+=("$1" "${2:-}"); shift ;;
+    --label=*|--assignee=*|--milestone=*|--project=*) pass+=("$1") ;;
+    *)
+      echo "REFUSED: file-issue.sh does not pass $1 to gh issue create: the body comes from one --body-file, the repository is the first argument" >&2
+      exit 2
+      ;;
+  esac
+  shift
+done
+[ -n "$title" ] || { echo "REFUSED: pass --title" >&2; exit 2; }
+[ -n "$bodyfile" ] || { echo "REFUSED: pass the body as --body-file so the gates can read it" >&2; exit 2; }
+if [ "$bodyfile" = "-" ] || [ ! -f "$bodyfile" ]; then
+  echo "REFUSED: body file $bodyfile does not exist" >&2
+  exit 2
+fi
+body=$(cat "$bodyfile")
+check_text "body file $bodyfile" "$body"
+check_text "--title" "$title"
+if [ "$policy_result" = "DISCLOSE" ] && ! grep -qiE '\bAI\b|LLM|Claude|Copilot|ChatGPT|language model|assist' "$bodyfile"; then
+  echo "REFUSED: $repo requires AI use to be disclosed ($policy) and the body does not name it" >&2
+  exit 2
+fi
+
+offer_re='\b(fix|fixed|fixes|patch|patched|patches|pull request|PR)\b'
+link_re='https://github\.com/[^/[:space:]]+/[^/[:space:]]+/(tree|commit|compare|blob)/[^[:space:])]+'
+offer=$(printf '%s' "$body" | grep -ioE "$offer_re" | head -1) || true
+if [ -n "$offer" ] && ! printf '%s' "$body" | grep -qE "$link_re"; then
+  echo "REFUSED: the body says '$offer' and links no branch or commit - push the work to your fork and link it, or take it out of the body" >&2
+  exit 2
+fi
+
+if [ "${FILE_ISSUE_DRY:-0}" = "1" ]; then
+  printf 'DRY RUN, not filed:\ngh issue create -R %s' "$repo"
+  for arg in "${pass[@]}"; do printf ' %q' "$arg"; done
+  printf '\n'
+  exit 0
+fi
+gh issue create -R "$repo" "${pass[@]}"

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/scripts/verify-filed-pr.sh

@@ -20,6 +20,8 @@
 # that the caller knows which head sha and which files were intended. Exits
 # non-zero when the head does not match, when checks are red, or when they do
 # not settle before the watch gives up.
+# Exits 3, and says NOT SETTLED, when nothing is wrong but a workflow on the
+# head still waits for a maintainer's approval, so CI has not run.
 set -u
 
 usage() {
@@ -38,6 +40,7 @@ repo="$1"
 pr="$2"
 want="${3:-}"
 fail=0
+unsettled=0
 note() { printf '%-26s %s\n' "$1" "$2"; }
 
 view() {
@@ -66,7 +69,7 @@ view files '.files[] | "   " + .path + "  +" + (.additions|tostring) + "/-" + (.
 echo ""
 echo "-- checks (waits until every check has settled)"
 gh pr checks "$pr" --repo "$repo" --watch --interval 20 >/dev/null 2>&1 || true
-rollup=$(view statusCheckRollup '[.statusCheckRollup[] | (.conclusion // .status)] | group_by(.) | map({k:.[0], n:length}) | .[] | .k + "=" + (.n|tostring)')
+rollup=$(view statusCheckRollup '[.statusCheckRollup[] | (.conclusion // .status // .state)] | group_by(.) | map({k:.[0], n:length}) | .[] | .k + "=" + (.n|tostring)')
 if [ -z "$rollup" ]; then
   note "checks" "none reported"
 else
@@ -76,6 +79,13 @@ else
     *IN_PROGRESS*|*QUEUED*|*PENDING*) note "CHECKS DID NOT SETTLE" "watch timed out"; fail=1 ;;
   esac
 fi
+# A fork's workflow that waits for a maintainer's approval has run nothing and
+# is absent from the rollup above.
+waiting=$(gh run list --repo "$repo" --commit "$head" --json conclusion --jq '[.[] | select(.conclusion == "action_required")] | length' 2>/dev/null)
+if [ "${waiting:-0}" -gt 0 ]; then
+  note "WORKFLOWS AWAIT APPROVAL" "$waiting run(s) on this head have not started"
+  unsettled=1
+fi
 
 echo ""
 echo "-- rendered body, first 15 lines"
@@ -86,5 +96,8 @@ echo "-- comments, newest last"
 view comments '.comments[] | "   " + .author.login + ": " + (.body | gsub("\n"; " ") | .[0:150])'
 
 echo ""
-if [ "$fail" -eq 0 ]; then echo "PR-VERIFY: OK"; else echo "PR-VERIFY: PROBLEMS ABOVE"; fi
+if [ "$fail" -ne 0 ]; then echo "PR-VERIFY: PROBLEMS ABOVE"
+elif [ "$unsettled" -ne 0 ]; then echo "PR-VERIFY: NOT SETTLED (CI has not run on this head)"
+else echo "PR-VERIFY: OK"; fi
+[ "$fail" -eq 0 ] && [ "$unsettled" -ne 0 ] && exit 3
 exit "$fail"

{housebroken_cli-0.6.2 → housebroken_cli-0.6.4}/skills/housebroken/SKILL.md

@@ -70,7 +70,9 @@ report it in one line and do not proceed to the next step.
    says behavior changes need discussion first, and a runtime behavior
    change on a stable major that the project's own compatibility promise
    forbids. Even then the patch is pushed to a branch and linked from the
-   issue, so the work is attributable to whoever did it. Classify every
+   issue, so the work is attributable to whoever did it; `housebroken issue
+   owner/repo --title ... --body-file ...` is the only way an issue is
+   opened, and it refuses a body that offers a fix without that link. Classify every
    patch before writing a test for it. A finding whose only red evidence is a measurement, such
    as peak memory or elapsed time, is a hold: a pull request needs a test
    that fails on the default branch for a wrong value, a crash or an

housebroken_cli-0.6.4/src/housebroken/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.6.4"

housebroken_cli-0.6.2/src/housebroken/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.6.2"