Skip to content

Add guarded SPI add-package automation#40

Merged
gaelic-ghost merged 3 commits into
mainfrom
docs/spi-badge-guidance
May 3, 2026
Merged

Add guarded SPI add-package automation#40
gaelic-ghost merged 3 commits into
mainfrom
docs/spi-badge-guidance

Conversation

@gaelic-ghost
Copy link
Copy Markdown
Owner

Summary

  • Add a guarded SPI add-package script that only opens the official Swift Package Index PackageList issue form.
  • Add readiness checks for public GitHub package URL, SemVer tag visibility, Swift tools version, package products, build/test health, .spi.yml, live issue-template shape, and existing indexing state.
  • Update Socket and apple-dev-skills guidance so agents are forbidden from PackageList forks, manual packages.json edits, gh issue create, or manual label paths.
  • Push the apple-dev-skills subtree state out to standalone gaelic-ghost/apple-dev-skills and release v6.4.1.

Closes #39

Release

Verification

  • uv run pytest tests
  • uv run scripts/validate_socket_metadata.py
  • uv run ruff check scripts/spi_add_package.py tests/test_spi_add_package.py
  • (cd plugins/apple-dev-skills && bash .github/scripts/validate_repo_docs.sh)
  • (cd plugins/apple-dev-skills && uv run pytest)
  • git diff --check

@gaelic-ghost gaelic-ghost added the enhancement New feature or request label May 3, 2026
@gaelic-ghost gaelic-ghost merged commit 5ca18e0 into main May 3, 2026
1 check passed
@gaelic-ghost gaelic-ghost deleted the docs/spi-badge-guidance branch May 3, 2026 02:27
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 86ebc185fb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

confirm_remote_semver_tag(identity, package_root, semver_tags)
checked_steps.append("remote semantic-version tag")

if indexed_state == "indexed":
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Fail closed when SPI index status is unknown

run_readiness only rejects indexed_state == "indexed", but check_spi_index_state also returns non-authoritative values like unknown-network and unknown-http-* when SPI cannot be checked. In open/hands-free mode this still allows opening the Add Package form even though the duplicate-submission guard did not actually run (for example during SPI outages or transient HTTP failures), which defeats the script’s safety contract. Treat any state other than not-indexed as a hard failure unless --skip-index-check is explicitly requested.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add SPI gate to prevent failed PackageList submission attempts

1 participant