Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
30c84a7
chore: fix workflow configs and pre-commit formatting
williaby Dec 13, 2025
85cba2a
chore: make scripts executable
williaby Dec 13, 2025
422d271
docs: update README with monorepo packages and publishing workflow
williaby Dec 13, 2025
f9c14a1
chore: fix qlty code quality issues and enable plugins
williaby Dec 13, 2025
d432385
chore: fix markdownlint and yamllint code quality issues
williaby Dec 13, 2025
22b6cf1
feat: add GCP Artifact Registry publishing workflow
williaby Dec 13, 2025
b1e89d7
fix: use correct Infisical action version tag
williaby Dec 13, 2025
2be4f2a
fix: use version tags instead of SHAs for GitHub Actions
williaby Dec 13, 2025
54f8cc4
fix: use project-slug instead of project-id for Infisical action
williaby Dec 13, 2025
0102774
fix: use self-hosted Infisical domain
williaby Dec 13, 2025
35a9ad7
fix: use GitHub Secrets instead of Infisical for GCP credentials
williaby Dec 13, 2025
9578a27
fix: use uv build --package for workspace monorepo builds
williaby Dec 13, 2025
f11a22a
fix: use correct pyproject package names for uv build
williaby Dec 13, 2025
5356fab
fix: use oauth2 access token for Artifact Registry authentication
williaby Dec 13, 2025
0725d43
fix: validate tags are created from main branch before publishing
williaby Dec 13, 2025
324103e
chore: fix workflow SHAs and cloudflare-auth import paths
williaby Dec 13, 2025
2cf5891
chore: fix REUSE compliance for monorepo packages
williaby Dec 13, 2025
569c1d1
fix(cloudflare-auth): add pydantic-settings dependency and fix code f…
williaby Dec 13, 2025
f7a729f
fix(security): sanitize workflow inputs and pin action SHAs
williaby Dec 14, 2025
476736c
refactor(cloudflare-auth): reduce cognitive complexity in middleware …
williaby Dec 14, 2025
bab8ca4
chore: add .qlty cache symlinks to gitignore
williaby Dec 14, 2025
6058fbf
docs: fix markdown code fence formatting and update badges
williaby Dec 14, 2025
ed4c077
fix: add docstrings to helper methods and fix end-of-file markers
williaby Dec 14, 2025
52e5c27
fix(cloudflare-auth): add rate limiting to all authentication failure…
williaby Dec 14, 2025
7110e32
fix: add pydantic and pydantic-settings to root package dependencies
williaby Dec 14, 2025
f30bc84
fix: skip CLI tests and fix Windows CI workflow
williaby Dec 14, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .claude/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ This directory contains Claude Code configuration and standards for this project

## Directory Structure

```
```text
.claude/
├── README.md # This file
├── claude.md # Project-specific Claude guidelines
Expand Down Expand Up @@ -94,6 +94,7 @@ git subtree push --prefix .claude/standard \
3. **Project Overrides**: Finally loads `.claude/claude.md` (project-specific)

This layered approach ensures:

- Consistent standards across all projects
- Project flexibility where needed
- Easy updates to universal guidelines
Expand Down
10 changes: 9 additions & 1 deletion .claude/agents/code-reviewer.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,24 +9,28 @@ Review code changes for quality, maintainability, and adherence to project stand
## Capabilities

### Code Analysis

- Identify code smells and anti-patterns
- Check adherence to Python best practices
- Evaluate code complexity and maintainability
- Detect potential bugs and edge cases

### Standards Compliance

- Verify PEP 8 and project style guide compliance
- Check type annotation completeness
- Validate docstring coverage and quality
- Ensure consistent naming conventions

### Security Review

- Identify potential security vulnerabilities
- Check for hardcoded secrets or credentials
- Validate input handling and sanitization
- Review authentication and authorization logic

### Performance Review

- Identify potential performance bottlenecks
- Check for unnecessary database queries (N+1)
- Review memory usage patterns
Expand All @@ -35,31 +39,35 @@ Review code changes for quality, maintainability, and adherence to project stand
## Review Checklist

### Code Quality

- [ ] Code is readable and self-documenting
- [ ] Functions are single-purpose (SRP)
- [ ] No unnecessary complexity
- [ ] Error handling is appropriate

### Testing

- [ ] Tests cover new functionality
- [ ] Edge cases are tested
- [ ] Test names are descriptive
- [ ] Mocks are used appropriately

### Documentation

- [ ] Public APIs are documented
- [ ] Complex logic has comments
- [ ] README updated if needed
- [ ] CHANGELOG entry added

### Security

- [ ] No hardcoded secrets
- [ ] Input validation present
- [ ] SQL injection prevented
- [ ] XSS prevention in place

## Invocation

```
```text
/review or via Task tool with subagent_type='code-reviewer'
```
4 changes: 2 additions & 2 deletions .claude/agents/merge-standards.md
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ This agent helps merge updated baseline standards from `.standards/` into the pr

## Merge Process

```
```text
1. Read both baseline and target files
2. Identify what changed in baseline (git diff .standards/)
3. For each change:
Expand All @@ -106,7 +106,7 @@ This agent helps merge updated baseline standards from `.standards/` into the pr

## Example Usage

```
```text
User: "Merge the updated baseline standards"

Agent:
Expand Down
10 changes: 9 additions & 1 deletion .claude/agents/security-auditor.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,24 +9,28 @@ Proactively identify and mitigate security vulnerabilities, ensure compliance wi
## Capabilities

### Vulnerability Detection

- Static code analysis for security issues
- Dependency vulnerability scanning
- Secret detection and prevention
- Configuration security review

### Threat Assessment

- Identify attack vectors
- Assess risk levels
- Prioritize security fixes
- Document security findings

### Compliance Validation

- OWASP Top 10 compliance
- Security policy adherence
- Secure coding standards
- Audit trail verification

### Security Testing

- Injection attack testing
- Authentication testing
- Authorization testing
Expand All @@ -35,6 +39,7 @@ Proactively identify and mitigate security vulnerabilities, ensure compliance wi
## Security Checklist

### Code Security

- [ ] No hardcoded credentials
- [ ] Input validation on all user input
- [ ] Output encoding for XSS prevention
Expand All @@ -43,18 +48,21 @@ Proactively identify and mitigate security vulnerabilities, ensure compliance wi
- [ ] Proper error handling (no info leakage)

### Dependency Security

- [ ] No known vulnerabilities in dependencies
- [ ] Dependencies up to date
- [ ] Minimal dependency footprint
- [ ] Trusted sources only

### Configuration Security

- [ ] Secrets in environment variables
- [ ] Secure default configurations
- [ ] TLS/SSL properly configured
- [ ] CORS properly restricted

### Authentication & Authorization

- [ ] Strong password policies
- [ ] Secure session management
- [ ] Role-based access control
Expand Down Expand Up @@ -91,6 +99,6 @@ gitleaks detect --source .

## Invocation

```
```text
/security or via Task tool with subagent_type='security-auditor'
```
11 changes: 9 additions & 2 deletions .claude/agents/test-engineer.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,24 +9,28 @@ Design and implement test strategies, generate test cases, and ensure code quali
## Capabilities

### Test Strategy

- Design test plans and strategies
- Identify critical paths for testing
- Balance unit, integration, and e2e tests
- Define coverage targets and metrics

### Test Generation

- Generate unit tests for new code
- Create integration test scenarios
- Design edge case and boundary tests
- Implement property-based tests

### Test Review

- Review existing test quality
- Identify gaps in test coverage
- Suggest test improvements
- Validate test isolation

### Test Automation

- Configure CI/CD test pipelines
- Set up parallel test execution
- Implement test reporting
Expand All @@ -35,12 +39,14 @@ Design and implement test strategies, generate test cases, and ensure code quali
## Testing Standards

### Coverage Requirements

- **Minimum Coverage**: 80%
- **Branch Coverage**: Enabled
- **Critical Paths**: 100% coverage

### Test Organization
```

```text
tests/
├── unit/ # Fast, isolated tests
├── integration/ # Service integration tests
Expand All @@ -50,6 +56,7 @@ tests/
```

### Test Quality Criteria

- Tests are deterministic (no flaky tests)
- Tests are isolated (no shared state)
- Tests are fast (< 1s for unit tests)
Expand All @@ -74,6 +81,6 @@ uv run mutmut run

## Invocation

```
```text
/test or via Task tool with subagent_type='test-engineer'
```
1 change: 1 addition & 0 deletions .claude/commands/merge-standards.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ After running `cruft update`, merge any changes from `.standards/` into project
## Task

1. Check for changes in baseline files:

```bash
git diff .standards/
```
Expand Down
8 changes: 7 additions & 1 deletion .claude/commands/plan.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,14 +32,16 @@ Using the `project-planning` skill, generate these four documents with expert re
For EACH document, follow this generate-review-refine cycle:

### 1. Generate Document

- Read the corresponding template from `.claude/skills/project-planning/templates/`
- Generate project-specific content based on the user's description
- Write to the appropriate location in `docs/planning/`

### 2. Expert Review (Consensus)

After writing each document, request expert review:

```
```text
mcp__zen__consensus with gemini-3-pro-preview:

Review this [Document Type] for Python Libs.
Expand All @@ -60,12 +62,15 @@ DOCUMENT:
```

### 3. Refine if Needed

- If NEEDS REVISION: Incorporate feedback and re-submit for review
- If READY: Proceed to next document
- Each document must be READY before generating the next

### 4. Final Validation

After all documents pass review:

- Run validation script
- Ensure cross-references are valid
- Summarize outcomes
Expand Down Expand Up @@ -99,6 +104,7 @@ This project was created from the cookiecutter-python-template with:
## Fallback (No MCP Server)

If `mcp__zen__consensus` is not available:

- Skip the expert review step
- Generate all documents sequentially
- Run validation script for basic checks
Expand Down
7 changes: 4 additions & 3 deletions .claude/commands/pr.md
Original file line number Diff line number Diff line change
Expand Up @@ -42,9 +42,9 @@ Analyze the current branch and prepare a PR description following the project te
<!-- Optional: known issues, follow-up work -->
```

4. **Output the PR description** ready to copy-paste into GitHub.
1. **Output the PR description** ready to copy-paste into GitHub.

5. **Suggest a PR title** following conventional commits:
2. **Suggest a PR title** following conventional commits:
Comment on lines +45 to +47
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Fix incorrect step numbering.

The steps are renumbered to 1 and 2, but there are already steps 1-3 defined earlier in the document (lines 7-43). This creates confusion in the workflow sequence.

Apply this diff to restore the correct numbering:

-1. **Output the PR description** ready to copy-paste into GitHub.
+4. **Output the PR description** ready to copy-paste into GitHub.

-2. **Suggest a PR title** following conventional commits:
+5. **Suggest a PR title** following conventional commits:
🤖 Prompt for AI Agents
In .claude/commands/pr.md around lines 45 to 47, the two steps were renumbered
as "1" and "2" which conflicts with existing steps 1–3 earlier in the file;
update the numbering to continue the sequence (change those two steps to "4."
and "5.") so the workflow sequence is correct and consistent with the earlier
lines.

- `feat:` for new features
- `fix:` for bug fixes
- `docs:` for documentation
Expand All @@ -57,7 +57,8 @@ Analyze the current branch and prepare a PR description following the project te
**Title**: `feat: add user authentication with OAuth2`

**Description**:
```

```markdown
## Summary

Add OAuth2 authentication flow supporting Google and GitHub providers.
Expand Down
8 changes: 7 additions & 1 deletion .claude/commands/quality.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,12 @@ Run code quality checks including formatting, linting, and type checking.

## Usage

```
```text
/quality [scope]
```

**Arguments:**

- `scope` (optional): `all`, `format`, `lint`, `types` (default: `all`)

## Workflow
Expand All @@ -21,22 +22,26 @@ Run code quality checks including formatting, linting, and type checking.
## Commands Executed

### Format

```bash
uv run black --check .
uv run ruff format --check .
```

### Lint

```bash
uv run ruff check .
```

### Types

```bash
uv run basedpyright src/
```

### All (Pre-commit)

```bash
uv run pre-commit run --all-files
```
Expand All @@ -50,6 +55,7 @@ uv run pre-commit run --all-files
## Fix Issues

To automatically fix formatting and some lint issues:

```bash
uv run black .
uv run ruff check --fix .
Expand Down
Loading
Loading