donbr · September 23, 2025 18:02
diff --git a/claude-code-ci-cd-processes.md b/claude-code-ci-cd-processes.md
diff --git a/claude-code-templates1.md b/claude-code-templates1.md
diff --git a/claude-code-templates2.md b/claude-code-templates2.md
diff --git a/claude-code-templates2.py b/claude-code-templates2.py
 # Create PR-ready files for Claude Code governance and MCP setup

 import os, json, textwrap, zipfile, pathlib

 base_dir = "/mnt/data/claude_pr_package"
 claude_dir = os.path.join(base_dir, ".claude")
 github_dir = os.path.join(base_dir, ".github")

 os.makedirs(claude_dir, exist_ok=True)
 os.makedirs(github_dir, exist_ok=True)

 # 1) .mcp.json (project-scoped)
 mcp_json = {
    "mcpServers": {
        "linear": {
            "type": "sse",
            "url": "https://mcp.linear.app/sse",
            "headers": {"Authorization": "Bearer ${LINEAR_API_KEY}"}
        },
        "notion": {
            "type": "http",
            "url": "https://mcp.notion.com/mcp",
            "headers": {"Authorization": "Bearer ${NOTION_API_KEY}"}
        },
        "local-deepagents": {
            "command": "uv",
            "args": ["run", "python", "integrations/mcp-rag/minimal_test.py"],
            "cwd": "integrations/mcp-rag",
            "timeout": 120000
        }
    }
 }

 with open(os.path.join(base_dir, ".mcp.json"), "w", encoding="utf-8") as f:
    json.dump(mcp_json, f, indent=2)

 # 2) .claude/settings.json (project-shared)
 settings_json = {
    "enableAllProjectMcpServers": True,
    "includeCoAuthoredBy": True,
    "permissions": {
        "deny": ["Read(./.env)", "Read(./secrets/**)", "Bash(curl:*)"],
        "ask": ["Bash(git push:*)", "Bash(pip install:*)", "Bash(uv run:*)"],
        "allow": ["Bash(ruff *)", "Bash(pytest *)", "Bash(python flows/*)"]
    },
    "env": {
        "MCP_TIMEOUT": "15000",
        "MAX_MCP_OUTPUT_TOKENS": "50000"
    }
 }
 with open(os.path.join(claude_dir, "settings.json"), "w", encoding="utf-8") as f:
    json.dump(settings_json, f, indent=2)

 # 3) .claude/tasks.yaml (starter slice)
 tasks_yaml = textwrap.dedent("""\
    schema: "ai-tasks/v0.3"
    version: "2.2"
    project: "rag-eval-foundations"
    description: "Starter tasks slice to validate governance with Claude Code + Prefect 3"
    phases:
      - id: phase.research
        name: "Research & Synthesis"
        tasks:
          - id: collect.sources
            name: "Collect authoritative sources"
            run:
              - "mkdir -p docs/research"
              - "python - << 'PY'\nfrom pathlib import Path; Path('docs/research/sources.md').write_text('# Sources\\n', encoding='utf-8')\nPY"
            verify:
              - "test -f docs/research/sources.md"
            artifacts:
              - "docs/research/sources.md"

      - id: phase.impl
        name: "Implement change"
        depends_on: [phase.research]
        tasks:
          - id: impl.code_and_tests
            name: "Code & unit tests"
            perf_budget_ms: 180000
            run:
              - "ruff check src/ --fix"
              - "pytest -q"
            verify:
              - "python scripts/verify_quality_gates.py --all || echo 'skip if script absent'"
            artifacts:
              - "reports/unit-test-report.xml"

      - id: phase.flow-validation
        name: "Validate Prefect flow by phase"
        depends_on: [phase.impl]
        tasks:
          - id: validate.flow
            name: "Run flow for this phase"
            run:
              - "uv run python flows/golden_testset_flow.py --only-phase phase.impl || python flows/golden_testset_flow.py --only-phase phase.impl"
            verify:
              - "echo 'Flow completed (see CI logs for details)'"
            artifacts: []
    """)

 with open(os.path.join(claude_dir, "tasks.yaml"), "w", encoding="utf-8") as f:
    f.write(tasks_yaml)

 # 4) .github/PULL_REQUEST_TEMPLATE.md
 pr_tpl = textwrap.dedent("""\
    ## Summary
    <!-- What change does this PR introduce? Why? Link to issue/ticket if applicable. -->

    ## How tested
    - [ ] Local flow run: `uv run python flows/golden_testset_flow.py --only-phase <phase>` (or `python ...`)
    - [ ] Unit tests pass locally (`pytest -q`)
    - [ ] Linting (`ruff check src/ --fix`)

    ## Checklist (Claude-assisted changes)
    - [ ] **Task plan updated**: `.claude/tasks.yaml` includes `run/verify/perf_budget_ms/artifacts` for this change.
    - [ ] **MCP inventory**: project `.mcp.json` lists only the servers required for this PR; least-privilege headers/tokens used.
    - [ ] **Permissions evidence**: key snippets from `.claude/settings.json` (deny/ask/allow) are appropriate; no secret file reads.
    - [ ] **CI status checks** passing (lint, security, performance, integration).
    - [ ] **CODEOWNERS/branch protection** approvals satisfied.
    - [ ] **Artifacts** (reports/logs) attached where relevant.
    - [ ] **Conventional Commit** style in title (e.g., `feat:`, `fix:`, `docs:`).

    ## Notes for reviewers
    <!-- Risks, trade-offs, or follow-ups -->
    """)
 with open(os.path.join(github_dir, "PULL_REQUEST_TEMPLATE.md"), "w", encoding="utf-8") as f:
    f.write(pr_tpl)

 # 5) Optional: sample CODEOWNERS (with placeholders)
 codeowners = textwrap.dedent("""\
    # Learn more: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
    # Replace placeholders with your GitHub team or user handles.
    *       @your-org/eng-core
    flows/  @your-org/data-eng
    .claude/ @your-org/devex
    """)
 with open(os.path.join(github_dir, "CODEOWNERS.sample"), "w", encoding="utf-8") as f:
    f.write(codeowners)

 # Zip up the package for easy download
 zip_path = "/mnt/data/claude-pr-package_20250922.zip"
 with zipfile.ZipFile(zip_path, "w", zipfile.ZIP_DEFLATED) as z:
    for root, _, files in os.walk(base_dir):
        for file in files:
            full = os.path.join(root, file)
            rel = os.path.relpath(full, base_dir)
            z.write(full, arcname=os.path.join("claude_pr_package", rel))

 # Return a directory listing for visibility
 file_tree = []
 for p in pathlib.Path(base_dir).rglob("*"):
    file_tree.append(str(p.relative_to(base_dir)))

 file_tree, zip_path
	# Create PR-ready files for Claude Code governance and MCP setup

	import os, json, textwrap, zipfile, pathlib

	base_dir = "/mnt/data/claude_pr_package"
	claude_dir = os.path.join(base_dir, ".claude")
	github_dir = os.path.join(base_dir, ".github")

	os.makedirs(claude_dir, exist_ok=True)
	os.makedirs(github_dir, exist_ok=True)

	# 1) .mcp.json (project-scoped)
	mcp_json = {
	"mcpServers": {
	"linear": {
	"type": "sse",
	"url": "https://mcp.linear.app/sse",
	"headers": {"Authorization": "Bearer ${LINEAR_API_KEY}"}
	},
	"notion": {
	"type": "http",
	"url": "https://mcp.notion.com/mcp",
	"headers": {"Authorization": "Bearer ${NOTION_API_KEY}"}
	},
	"local-deepagents": {
	"command": "uv",
	"args": ["run", "python", "integrations/mcp-rag/minimal_test.py"],
	"cwd": "integrations/mcp-rag",
	"timeout": 120000
	}
	}
	}

	with open(os.path.join(base_dir, ".mcp.json"), "w", encoding="utf-8") as f:
	json.dump(mcp_json, f, indent=2)

	# 2) .claude/settings.json (project-shared)
	settings_json = {
	"enableAllProjectMcpServers": True,
	"includeCoAuthoredBy": True,
	"permissions": {
	"deny": ["Read(./.env)", "Read(./secrets/*)", "Bash(curl:)"],
	"ask": ["Bash(git push:)", "Bash(pip install:)", "Bash(uv run:*)"],
	"allow": ["Bash(ruff )", "Bash(pytest )", "Bash(python flows/*)"]
	},
	"env": {
	"MCP_TIMEOUT": "15000",
	"MAX_MCP_OUTPUT_TOKENS": "50000"
	}
	}
	with open(os.path.join(claude_dir, "settings.json"), "w", encoding="utf-8") as f:
	json.dump(settings_json, f, indent=2)

	# 3) .claude/tasks.yaml (starter slice)
	tasks_yaml = textwrap.dedent("""\
	schema: "ai-tasks/v0.3"
	version: "2.2"
	project: "rag-eval-foundations"
	description: "Starter tasks slice to validate governance with Claude Code + Prefect 3"
	phases:
	- id: phase.research
	name: "Research & Synthesis"
	tasks:
	- id: collect.sources
	name: "Collect authoritative sources"
	run:
	- "mkdir -p docs/research"
	- "python - << 'PY'\nfrom pathlib import Path; Path('docs/research/sources.md').write_text('# Sources\\n', encoding='utf-8')\nPY"
	verify:
	- "test -f docs/research/sources.md"
	artifacts:
	- "docs/research/sources.md"

	- id: phase.impl
	name: "Implement change"
	depends_on: [phase.research]
	tasks:
	- id: impl.code_and_tests
	name: "Code & unit tests"
	perf_budget_ms: 180000
	run:
	- "ruff check src/ --fix"
	- "pytest -q"
	verify:
	- "python scripts/verify_quality_gates.py --all \|\| echo 'skip if script absent'"
	artifacts:
	- "reports/unit-test-report.xml"

	- id: phase.flow-validation
	name: "Validate Prefect flow by phase"
	depends_on: [phase.impl]
	tasks:
	- id: validate.flow
	name: "Run flow for this phase"
	run:
	- "uv run python flows/golden_testset_flow.py --only-phase phase.impl \|\| python flows/golden_testset_flow.py --only-phase phase.impl"
	verify:
	- "echo 'Flow completed (see CI logs for details)'"
	artifacts: []
	""")

	with open(os.path.join(claude_dir, "tasks.yaml"), "w", encoding="utf-8") as f:
	f.write(tasks_yaml)

	# 4) .github/PULL_REQUEST_TEMPLATE.md
	pr_tpl = textwrap.dedent("""\
	## Summary
	<!-- What change does this PR introduce? Why? Link to issue/ticket if applicable. -->

	## How tested
	- [ ] Local flow run: `uv run python flows/golden_testset_flow.py --only-phase <phase>` (or `python ...`)
	- [ ] Unit tests pass locally (`pytest -q`)
	- [ ] Linting (`ruff check src/ --fix`)

	## Checklist (Claude-assisted changes)
	- [ ] Task plan updated: `.claude/tasks.yaml` includes `run/verify/perf_budget_ms/artifacts` for this change.
	- [ ] MCP inventory: project `.mcp.json` lists only the servers required for this PR; least-privilege headers/tokens used.
	- [ ] Permissions evidence: key snippets from `.claude/settings.json` (deny/ask/allow) are appropriate; no secret file reads.
	- [ ] CI status checks passing (lint, security, performance, integration).
	- [ ] CODEOWNERS/branch protection approvals satisfied.
	- [ ] Artifacts (reports/logs) attached where relevant.
	- [ ] Conventional Commit style in title (e.g., `feat:`, `fix:`, `docs:`).

	## Notes for reviewers
	<!-- Risks, trade-offs, or follow-ups -->
	""")
	with open(os.path.join(github_dir, "PULL_REQUEST_TEMPLATE.md"), "w", encoding="utf-8") as f:
	f.write(pr_tpl)

	# 5) Optional: sample CODEOWNERS (with placeholders)
	codeowners = textwrap.dedent("""\
	# Learn more: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
	# Replace placeholders with your GitHub team or user handles.
	* @your-org/eng-core
	flows/ @your-org/data-eng
	.claude/ @your-org/devex
	""")
	with open(os.path.join(github_dir, "CODEOWNERS.sample"), "w", encoding="utf-8") as f:
	f.write(codeowners)

	# Zip up the package for easy download
	zip_path = "/mnt/data/claude-pr-package_20250922.zip"
	with zipfile.ZipFile(zip_path, "w", zipfile.ZIP_DEFLATED) as z:
	for root, _, files in os.walk(base_dir):
	for file in files:
	full = os.path.join(root, file)
	rel = os.path.relpath(full, base_dir)
	z.write(full, arcname=os.path.join("claude_pr_package", rel))

	# Return a directory listing for visibility
	file_tree = []
	for p in pathlib.Path(base_dir).rglob("*"):
	file_tree.append(str(p.relative_to(base_dir)))

	file_tree, zip_path