cdk-real-drift/.markgate.yml at main · go-to-k/cdk-real-drift · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# markgate configuration — https://github.com/go-to-k/markgate
#
# Gates back the pre-commit / pre-PR / pre-merge checks (mirrors cdk-local's
# layout). cdk-real-drift is READ-ONLY against AWS (no destroy path, no schema
# migration), so cdkd's destroy / broad / schema-migration gates are not needed.
#
# Gates:
#   check     — typecheck (tsc) / lint+fmt (vp check) / build / unit tests
#               (set by /check and /verify-pr).
#   docs      — README / DESIGN / docs consistency with src
#               (set by /check-docs and /verify-pr).
#   verify-pr — pre-release readiness checklist; AND of check + docs.
#               (set by /verify-pr.) cdkrd is solo + local-only with no GitHub
#               remote, so this is a pre-RELEASE gate, not a PR gate.
#
# The check / docs / verify-pr gates each have a companion skill under
# .claude/skills/ that SETS their marker (/check, /check-docs, /verify-pr). Those
# three are the wanted, satisfiable gates for this solo repo.
#
# INERT gates (kept for layout parity with the sibling repos, but with NO
# companion skill in cdkrd — do NOT wire a commit/merge hook to either until a
# companion skill is ported, or it would become unsatisfiable and brick the flow):
#   pr-review — `/review-pr` reviewer-dispatch verification (sha-bound). N/A:
#               cdkrd has no GitHub remote / PR review flow. No companion skill.
#   integ     — read-only real-AWS verification (gather/check/inject-drift). cdkrd
#               is READ-ONLY against AWS (no deploy/destroy, no schema migration),
#               so cdkd's destroy / broad / local / schema-migration integ gates
#               are deliberately ABSENT here — only this single read-only gate
#               remains, and it has no companion /run-integ skill yet. 14d TTL
#               (AWS-side wire-format + Cloud Control behavior drift over time).
#
# Bug-hunt cleanup is NOT a markgate gate — it is a sentinel-file gate
# (.markgate-bughunt-pending + .claude/hooks/bughunt-clean-gate.sh), armed by
# /hunt-bugs's bughunt-track.sh BEFORE any deploy and released only after every
# deployed stack is deleted + SWEEP CLEAN. A sentinel (not a content hash) is used
# deliberately: it tracks outstanding live resources regardless of which fixture
# files a later commit happens to touch, so a deployed stack can never be forgotten.
#
# NOTE: the commit/PR-blocking ENFORCEMENT (the .claude hooks that call markgate)
# is now installed (R83): check-gate (commit), verify-pr-gate (gh pr create/merge),
# plus the marker-free branch-gate and non-english-text-gate. Hooks are wired ONLY
# to check / docs / verify-pr — the gates with companion skills. pr-review and integ
# remain INERT and UNWIRED (no companion skill) so they cannot brick the flow.
# CI (.github/workflows/ci.yml) still enforces typecheck/lint/build/test on push.

gates:
  check:
    hash: files
    include:
      - 'src/**'
      - 'tests/**'
      - 'package.json'
      - 'pnpm-lock.yaml'
      - 'tsconfig*.json'
      - 'vite.config.ts'

  docs:
    hash: files
    include:
      - 'src/**'
      - 'docs/**'
      - 'README.md'
      - 'DESIGN.md'

  verify-pr:
    requires: [check, docs]

  pr-review:
    hash: files
    include:
      - '.markgate-pr-review-sha'

  integ:
    hash: files
    ttl: 14d
    include:
      - 'src/**'
      - 'tests/integration/**'