james.maes
3dd5adf89d
Generate an offline setup plan, require successful current bootstrap PR checks before applying settings, bind contexts to GitHub Actions, and validate readback. Preserve conflicting existing protections and stop instead of replacing them. Propagate the tested human-acknowledged review gate and locked JavaScript tooling to generated apps, including custom owner replacement and CodeQL coverage. Exclude node_modules and worktree metadata from template packages. Document owner bootstrap, least-privilege settings and the remaining live proof. Validation: 13 setup and four coverage Pester tests, seven review Node tests, PowerShell analysis, ESLint, workflow/security/documentation lint. npm verifies 83 signatures and 20 attestations. Actual packed CLI/no-CLI variants generate correct owners and reviewers and pass locked restores and zero-warning builds. Live repository provisioning requires authorized creation/push and hosted CI. Refs: KofTwentyTwo/AppKit#10, KofTwentyTwo/AppKit#13, KofTwentyTwo/AppKit#7, KofTwentyTwo/AppKit#9, KofTwentyTwo/AppKit#20 Co-Authored-By: Codex (GPT-6) <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>
19 lines
539 B
JSON
19 lines
539 B
JSON
{
|
|
"name": "kof22-app-repository-tools",
|
|
"private": true,
|
|
"description": "Lint and test the repository review gate; no shipped application dependencies.",
|
|
"engines": {
|
|
"node": ">=24.0.0"
|
|
},
|
|
"scripts": {
|
|
"lint": "eslint .github/scripts eslint.config.mjs --max-warnings 0",
|
|
"test": "node --test .github/scripts/review-gate.test.cjs"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "10.0.1",
|
|
"@stylistic/eslint-plugin": "5.10.0",
|
|
"eslint": "10.12.0"
|
|
},
|
|
"packageManager": "npm@11.16.0"
|
|
}
|