chore: improve self-healing ci docs and integrations

Made-with: Cursor

Author: fraware

.env.example

@@ -0,0 +1,79 @@
+# Copy to .env and fill in values. Never commit .env.
+
+# --- GitHub App (required for apps/github-app and worker GitHub API calls) ---
+GITHUB_APP_ID=
+# PEM contents with literal \n newlines, or path-style single line
+GITHUB_PRIVATE_KEY=
+GITHUB_WEBHOOK_SECRET=
+
+# --- Anthropic (required for diagnosis unless SELF_HEALING_DRY_RUN=true) ---
+ANTHROPIC_API_KEY=
+
+# --- Temporal ---
+TEMPORAL_SERVER_URL=127.0.0.1:7233
+TEMPORAL_NAMESPACE=default
+TEMPORAL_TASK_QUEUE=self-healing-ci
+TEMPORAL_TLS_ENABLED=false
+TEMPORAL_CONNECTION_TIMEOUT=10000
+TEMPORAL_MAX_RETRIES=3
+
+# --- Redis (deduplication, workflow state; optional — falls back if unavailable) ---
+REDIS_URL=redis://127.0.0.1:6379
+
+# --- Self-healing controls ---
+SELF_HEALING_ENABLED=true
+SELF_HEALING_DRY_RUN=false
+SELF_HEALING_MAX_RUNS_PER_DAY=20
+SELF_HEALING_AUTO_MERGE=false
+# Comma-separated substrings; workflow name must contain one (case-insensitive). Empty = default (ci,test,build,lint)
+SELF_HEALING_WORKFLOW_ALLOWLIST=
+PATCH_BACKEND=github
+# run-tests activity: command and wall-clock timeout
+SELF_HEALING_TEST_COMMAND=pnpm test
+SELF_HEALING_TEST_TIMEOUT_MS=600000
+# auto | http | docker | local | disabled — see README for backend selection
+SELF_HEALING_TEST_EXECUTION_MODE=auto
+# Absolute path to a repo checkout (local shell tests, and default host mount for Docker Freestyle)
+SELF_HEALING_TEST_WORKDIR=
+# In auto mode, use @self-healing-ci/freestyle Docker backend when true (needs Docker + WORKDIR)
+FREESTYLE_USE_DOCKER=false
+# Host path to bind into the test container (defaults to SELF_HEALING_TEST_WORKDIR)
+FREESTYLE_HOST_WORKSPACE=
+FREESTYLE_DOCKER_IMAGE=node
+FREESTYLE_DOCKER_TAG=20-bookworm
+FREESTYLE_CONTAINER_WORKSPACE=/workspace
+FREESTYLE_CONTAINER_WORKDIR=/workspace
+FREESTYLE_DOCKER_SOCKET=
+FREESTYLE_RETRY_COUNT=2
+
+# --- Optional: Morph API (when PATCH_BACKEND=morph) ---
+MORPH_API_KEY=
+MORPH_API_URL=https://api.morph.dev
+
+# --- Optional: Freestyle HTTP API (POST /v1/test-runs) ---
+FREESTYLE_API_KEY=
+FREESTYLE_API_URL=https://api.freestyle.dev
+
+# --- Optional: Lean proofs (HTTP or local @self-healing-ci/lean) ---
+LEAN_PROOFS_EXECUTION_MODE=auto
+LEAN_LOCAL_WORKSPACE=/tmp/lean-proofs
+LEAN_LOCAL_TIMEOUT_MS=120000
+LEAN_API_KEY=
+LEAN_API_URL=https://api.lean.dev
+
+# --- Ops / observability ---
+LOG_LEVEL=info
+METRICS_PORT=9090
+JAEGER_ENDPOINT=http://localhost:14268/api/traces
+OPSGENIE_API_KEY=
+# Optional: POST CloudEvents 1.0 JSON to this URL (Bearer token optional)
+CLOUDEVENTS_INGEST_URL=
+CLOUDEVENTS_INGEST_TOKEN=
+
+# --- AWS (deduplication DynamoDB fallback) ---
+AWS_REGION=us-east-1
+DYNAMODB_TABLE=self-healing-ci-dedup
+
+# --- App servers ---
+PORT=3000
+HOST=0.0.0.0

.eslintrc.js

@@ -15,5 +15,34 @@ module.exports = {
     'prefer-const': 'error',
     'no-var': 'error',
   },
-  ignorePatterns: ['dist/', 'node_modules/', '*.js', '*.ts'],
+  ignorePatterns: [
+    'dist/',
+    'node_modules/',
+    'coverage/',
+    '.eslintrc.js',
+    'commitlint.config.js',
+    'jest.config.js',
+    '**/*.d.ts',
+  ],
+  overrides: [
+    {
+      files: ['**/*.ts'],
+      excludedFiles: ['**/*.d.ts'],
+      parser: '@typescript-eslint/parser',
+      parserOptions: {
+        ecmaVersion: 2022,
+        sourceType: 'module',
+      },
+      plugins: ['@typescript-eslint'],
+      extends: ['eslint:recommended', 'plugin:@typescript-eslint/recommended'],
+      rules: {
+        '@typescript-eslint/no-unused-vars': [
+          'warn',
+          { argsIgnorePattern: '^_', varsIgnorePattern: '^_' },
+        ],
+        '@typescript-eslint/no-explicit-any': 'warn',
+        'no-undef': 'off',
+      },
+    },
+  ],
 };

.github/pull_request_template.md

@@ -1,77 +1,52 @@
 ## Description
 
-<!-- Provide a clear and concise description of the changes -->
-
-## Type of Change
-
-- [ ] 🐛 Bug fix (non-breaking change which fixes an issue)
-- [ ] ✨ New feature (non-breaking change which adds functionality)
-- [ ] 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
-- [ ] 📚 Documentation update
-- [ ] 🔧 Refactoring (no functional changes)
-- [ ] ⚡ Performance improvement
-- [ ] 🧪 Test addition or update
-- [ ] 🔒 Security improvement
-- [ ] 🏗️ Build system change
-- [ ] 🔄 CI/CD change
-- [ ] 🎨 Style change (formatting, missing semi colons, etc; no logic change)
-- [ ] 🧹 Chore (updates to dependencies, etc)
-
-## Scope
-
-<!-- Select the scope of your changes -->
-
-- [ ] github-app - GitHub App listener and webhook handling
-- [ ] temporal - Temporal.io workflow orchestration
-- [ ] claude - Claude AI integration for diagnosis
-- [ ] morph - Morph API integration for code patching
-- [ ] freestyle - Freestyle testing framework
-- [ ] lean - Lean 4 formal verification
-- [ ] diagnosis - Root cause analysis engine
-- [ ] patching - Automated code patching
-- [ ] testing - Test framework and execution
-- [ ] proofs - Formal proof generation
-- [ ] merge - Auto-merge functionality
-- [ ] observability - Metrics, tracing, and monitoring
-- [ ] security - Security hardening and compliance
-- [ ] docs - Documentation updates
-- [ ] deps - Dependency updates
+<!-- Clear description of the change -->
+
+## Type of change
+
+- [ ] Bug fix (non-breaking)
+- [ ] New feature (non-breaking)
+- [ ] Breaking change
+- [ ] Documentation only
+- [ ] Refactor (no behavior change)
+- [ ] Performance
+- [ ] Tests
+- [ ] Security
+- [ ] Build / CI
+- [ ] Style (formatting only)
+- [ ] Chore (deps, tooling)
+
+## Scope (check all that apply)
+
+- [ ] `apps/github-app`
+- [ ] `apps/temporal-worker`
+- [ ] `services/claude`
+- [ ] `services/morph`
+- [ ] `services/freestyle`
+- [ ] `services/lean`
+- [ ] Docs
+- [ ] CI / GitHub Actions
+- [ ] Root tooling or config
 
 ## Testing
 
-<!-- Describe the tests that you ran to verify your changes -->
+<!-- How you verified the change -->
 
-- [ ] Unit tests pass
-- [ ] Integration tests pass
-- [ ] End-to-end tests pass
-- [ ] Type checking passes
-- [ ] Linting passes
-- [ ] Security scans pass
-- [ ] Performance benchmarks pass
+- [ ] Unit tests pass (`pnpm test` where relevant)
+- [ ] Typecheck passes (`pnpm type-check` or package `tsc --noEmit`)
+- [ ] Lint passes (`pnpm lint`)
+- [ ] Ran full `pnpm validate` at repo root
 
 ## Checklist
 
-- [ ] My code follows the style guidelines of this project
-- [ ] I have performed a self-review of my own code
-- [ ] I have commented my code, particularly in hard-to-understand areas
-- [ ] I have made corresponding changes to the documentation
-- [ ] My changes generate no new warnings
-- [ ] I have added tests that prove my fix is effective or that my feature works
-- [ ] New and existing unit tests pass locally with my changes
-- [ ] Any dependent changes have been merged and published in downstream modules
-- [ ] I have updated the changelog if appropriate
-- [ ] I have added/updated security documentation if applicable
-
-## Breaking Changes
-
-<!-- If this PR contains breaking changes, describe them here -->
-
-## Additional Notes
+- [ ] Self-review completed
+- [ ] Documentation updated (README / `docs/` if behavior or env vars changed)
+- [ ] No new avoidable warnings; tests added or updated where appropriate
 
-<!-- Add any other context about the pull request here -->
+## Breaking changes
 
-## Related Issues
+<!-- If any, describe migration -->
 
-<!-- Link to any related issues -->
+## Related issues
 
-Closes #
+<!-- Closes # -->

.github/workflows/ci.yml

@@ -0,0 +1,53 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 8
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'pnpm'
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build Claude service (types for worker)
+        run: pnpm --filter @self-healing-ci/claude run build
+
+      - name: Build Freestyle and Lean (worker optional backends)
+        run: |
+          pnpm --filter @self-healing-ci/freestyle run build
+          pnpm --filter @self-healing-ci/lean run build
+
+      - name: Typecheck
+        run: |
+          pnpm --filter @self-healing-ci/temporal-worker exec tsc --noEmit
+          pnpm --filter @self-healing-ci/github-app exec tsc --noEmit
+
+      - name: Lint
+        run: |
+          pnpm --filter @self-healing-ci/temporal-worker run lint
+          pnpm --filter @self-healing-ci/github-app run lint
+
+      - name: Test
+        run: |
+          pnpm --filter @self-healing-ci/temporal-worker test
+          pnpm --filter @self-healing-ci/github-app test
+
+      - name: Audit (informational)
+        run: pnpm audit --audit-level=high
+        continue-on-error: true