Merge pull request #169 from stiwicourage/develop

New release

Author: stiwicourage

.github/actions/check-coverage/action.yml

@@ -0,0 +1,34 @@
+name: Check Coverage
+description: Run CodeScene coverage gates against uploaded coverage artifacts.
+
+inputs:
+  access-token:
+    description: CodeScene REST API access token.
+    required: true
+  project-url:
+    description: Full CodeScene project API URL, for example https://codescene.io/v2/projects/12345.
+    required: true
+  coverage-files:
+    description: Glob pattern matching coverage reports to check.
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Download cs-coverage binary
+      shell: bash
+      run: |
+        set -euo pipefail
+        curl -fsSL -o "$(pwd)/cs-coverage.zip" https://downloads.codescene.io/enterprise/cli/cs-coverage-linux-amd64-latest.zip
+        unzip -oq "$(pwd)/cs-coverage.zip"
+        chmod +x "$(pwd)/cs-coverage"
+
+    - name: Run CodeScene coverage gate check
+      shell: bash
+      env:
+        CS_PROJECT_URL: ${{ inputs.project-url }}
+        CS_ACCESS_TOKEN: ${{ inputs.access-token }}
+      run: |
+        set -euo pipefail
+        find "$(pwd)" -name '*.cobertura.xml' -print
+        "$(pwd)/cs-coverage" check --verbose --coverage-files "${{ inputs.coverage-files }}"

.github/actions/create-annotated-tag/action.yml

@@ -0,0 +1,68 @@
+name: Create annotated tag
+description: Create an annotated git tag for a commit SHA.
+
+inputs:
+  tag-name:
+    description: Tag name to create.
+    required: true
+  target-sha:
+    description: Commit SHA that the tag should reference.
+    required: true
+  message:
+    description: Annotated tag message.
+    required: true
+
+outputs:
+  tag-object-sha:
+    description: SHA of the created tag object.
+    value: ${{ steps.create.outputs.tag-object-sha }}
+
+runs:
+  using: composite
+  steps:
+    - id: create
+      uses: actions/github-script@v7
+      env:
+        TAG_NAME: ${{ inputs.tag-name }}
+        TARGET_SHA: ${{ inputs.target-sha }}
+        TAG_MESSAGE: ${{ inputs.message }}
+      with:
+        script: |
+          const owner = context.repo.owner
+          const repo = context.repo.repo
+          const tagName = process.env.TAG_NAME
+          const targetSha = process.env.TARGET_SHA
+          const message = process.env.TAG_MESSAGE
+
+          try {
+            await github.rest.git.getRef({
+              owner,
+              repo,
+              ref: `tags/${tagName}`
+            })
+
+            core.setFailed(`Tag '${tagName}' already exists.`)
+            return
+          } catch (error) {
+            if (error.status !== 404) {
+              throw error
+            }
+          }
+
+          const tagObject = await github.rest.git.createTag({
+            owner,
+            repo,
+            tag: tagName,
+            message,
+            object: targetSha,
+            type: 'commit'
+          })
+
+          await github.rest.git.createRef({
+            owner,
+            repo,
+            ref: `refs/tags/${tagName}`,
+            sha: tagObject.data.sha
+          })
+
+          core.setOutput('tag-object-sha', tagObject.data.sha)

.github/actions/create-verified-commit/action.yml

@@ -0,0 +1,134 @@
+name: Create verified commit
+description: Create a GitHub-verified commit from local workspace changes.
+
+inputs:
+  base-ref:
+    description: Branch name or refs/heads reference used as the commit parent and base tree.
+    required: true
+  commit-message:
+    description: Commit message for the new commit.
+    required: true
+
+outputs:
+  has-changes:
+    description: Whether there were local changes to commit.
+    value: ${{ steps.create.outputs.has-changes }}
+  commit-sha:
+    description: SHA of the created commit.
+    value: ${{ steps.create.outputs.commit-sha }}
+  parent-sha:
+    description: SHA of the parent commit used for the new commit.
+    value: ${{ steps.create.outputs.parent-sha }}
+
+runs:
+  using: composite
+  steps:
+    - id: create
+      uses: actions/github-script@v7
+      env:
+        BASE_REF: ${{ inputs.base-ref }}
+        COMMIT_MESSAGE: ${{ inputs.commit-message }}
+      with:
+        script: |
+          const fs = require('fs')
+          const { execSync } = require('child_process')
+
+          const owner = context.repo.owner
+          const repo = context.repo.repo
+          const baseRefInput = process.env.BASE_REF
+          const baseRef = baseRefInput.replace(/^refs\/heads\//, '')
+          const commitMessage = process.env.COMMIT_MESSAGE
+
+          const statusLines = execSync('git status --porcelain=v1 --untracked-files=all', {
+            encoding: 'utf-8'
+          })
+            .split('\n')
+            .filter(Boolean)
+
+          if (statusLines.length === 0) {
+            core.info('No changes to commit.')
+            core.setOutput('has-changes', 'false')
+            return
+          }
+
+          const baseRefResponse = await github.rest.git.getRef({
+            owner,
+            repo,
+            ref: `heads/${baseRef}`
+          })
+
+          const parentSha = baseRefResponse.data.object.sha
+          const baseCommit = await github.rest.git.getCommit({
+            owner,
+            repo,
+            commit_sha: parentSha
+          })
+
+          async function createBlobEntry(filePath) {
+            const content = fs.readFileSync(filePath, 'utf8')
+            const blob = await github.rest.git.createBlob({
+              owner,
+              repo,
+              content,
+              encoding: 'utf-8'
+            })
+
+            return {
+              path: filePath,
+              mode: '100644',
+              type: 'blob',
+              sha: blob.data.sha
+            }
+          }
+
+          const tree = []
+
+          for (const line of statusLines) {
+            const status = line.slice(0, 2)
+            const rawPath = line.slice(3)
+
+            if (status.includes('R') && rawPath.includes(' -> ')) {
+              const [oldPath, newPath] = rawPath.split(' -> ')
+
+              tree.push({
+                path: oldPath,
+                mode: '100644',
+                type: 'blob',
+                sha: null
+              })
+
+              tree.push(await createBlobEntry(newPath))
+              continue
+            }
+
+            if (status.includes('D')) {
+              tree.push({
+                path: rawPath,
+                mode: '100644',
+                type: 'blob',
+                sha: null
+              })
+              continue
+            }
+
+            tree.push(await createBlobEntry(rawPath))
+          }
+
+          const newTree = await github.rest.git.createTree({
+            owner,
+            repo,
+            base_tree: baseCommit.data.tree.sha,
+            tree
+          })
+
+          const newCommit = await github.rest.git.createCommit({
+            owner,
+            repo,
+            message: commitMessage,
+            tree: newTree.data.sha,
+            parents: [parentSha]
+          })
+
+          core.setOutput('has-changes', 'true')
+          core.setOutput('commit-sha', newCommit.data.sha)
+          core.setOutput('parent-sha', parentSha)

.github/actions/ensure-psresource-repository/action.yml

@@ -0,0 +1,26 @@
+name: Ensure PSResource repository
+description: Ensure the local PSResourceGet store exists and the requested repository is registered.
+
+inputs:
+  repository-name:
+    description: PSResource repository name to ensure.
+    required: false
+    default: PSGallery
+
+runs:
+  using: composite
+  steps:
+    - shell: pwsh
+      run: |
+        $repositoryName = '${{ inputs.repository-name }}'
+        $psResourcePath = Join-Path $HOME '.local/share/PSResourceGet'
+        New-Item -ItemType Directory -Path $psResourcePath -Force | Out-Null
+
+        if (-not (Get-PSResourceRepository -Name $repositoryName -ErrorAction SilentlyContinue)) {
+          if ($repositoryName -eq 'PSGallery') {
+            Register-PSResourceRepository -PSGallery
+          }
+          else {
+            throw "PSResource repository '$repositoryName' is not registered."
+          }
+        }

.github/actions/update-git-ref/action.yml

@@ -0,0 +1,39 @@
+name: Update git ref
+description: Update an existing branch ref to a specific SHA.
+
+inputs:
+  ref:
+    description: Full git ref, for example refs/heads/main.
+    required: true
+  sha:
+    description: Commit SHA the ref should point to.
+    required: true
+  force:
+    description: Whether to force-update the ref.
+    required: false
+    default: 'false'
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/github-script@v7
+      env:
+        TARGET_REF: ${{ inputs.ref }}
+        TARGET_SHA: ${{ inputs.sha }}
+        FORCE_UPDATE: ${{ inputs.force }}
+      with:
+        script: |
+          const owner = context.repo.owner
+          const repo = context.repo.repo
+          const refInput = process.env.TARGET_REF
+          const ref = refInput.replace(/^refs\//, '')
+          const sha = process.env.TARGET_SHA
+          const force = process.env.FORCE_UPDATE === 'true'
+
+          await github.rest.git.updateRef({
+            owner,
+            repo,
+            ref,
+            sha,
+            force
+          })

.github/prompts/markdown.promt.md

@@ -0,0 +1,81 @@
+# Markdown Wrapper Enforcer
+
+## Purpose
+Force all output to be wrapped in a Markdown code block using the required format:
+
+~~~
+<content>
+~~~
+
+This is used when content must be copy-paste ready and consistently wrapped.
+
+---
+
+## Instructions
+
+When generating output:
+
+1. ALWAYS wrap the entire response in:
+
+~~~
+<content>
+~~~
+
+2. The first line MUST be exactly:~~~
+3. The last line MUST be exactly:~~~
+4. Inside the block:
+    - Write normal Markdown content
+    - Use triple backticks for any code examples
+    - Ensure proper indentation and formatting
+5. Do NOT:
+    - Add text before or after the wrapper
+    - Break the wrapper format
+    - Use alternative fencing styles
+
+---
+
+Inner code block rules
+
+When including code inside the Markdown:
+
+- Use triple backticks
+- Include language when relevant
+
+Example:
+
+```powershell
+PS> Invoke-NovaBuild
+```
+
+```zsh
+% nova build
+```
+
+---
+
+Output rules
+
+- Output ONLY the wrapped Markdown block
+- No explanations outside the block
+- No missing fences
+- No malformed structure
+
+---
+
+Example invocation
+
+Wrap the following content:
+
+* Explain how to run nova build
+* Include CLI and PowerShell examples
+
+---
+
+Expected behavior
+
+The output must:
+
+- Start with: ~~~
+- End with: ~~~
+- Contain valid Markdown inside
+- Be ready to copy directly without edits