ci: add commitlint, Husky, and release-please

.claude/rules/cli-version.md

@@ -1,12 +1,11 @@
 # CLI Version Management
 
-**CRITICAL: Bump the version on every CLI change!**
+**Version bumps are handled automatically by release-please.** Do NOT manually edit the version in `packages/cli/package.json`.
 
-- **ANY change to `packages/cli/` requires a version bump** in `packages/cli/package.json`
-- Use semantic versioning:
-  - **Patch** (0.2.X → 0.2.X+1): Bug fixes, minor improvements, documentation
-  - **Minor** (0.X.0 → 0.X+1.0): New features, significant improvements
-  - **Major** (X.0.0 → X+1.0.0): Breaking changes
-- The CLI has auto-update enabled — users get new versions immediately on next run
-- Version bumps ensure users always have the latest fixes and features
+- Use **conventional commit types** to control the bump level:
+  - `fix:` → patch bump (0.15.17 → 0.15.18)
+  - `feat:` → minor bump (0.15.17 → 0.16.0)
+  - `feat!:` or `BREAKING CHANGE:` → major bump (but while pre-1.0, treated as minor: 0.15.17 → 0.16.0)
+- release-please opens a PR that accumulates unreleased changes and bumps the version
+- Merging that PR creates a GitHub release, which triggers the CLI build + publish workflow
 - **NEVER commit `packages/cli/cli.js`** — it is a build artifact (already in `.gitignore`). It is produced during releases, not checked into the repo. Do NOT use `git add -f packages/cli/cli.js`.

.github/workflows/cli-release.yml

@@ -1,12 +1,8 @@
 name: CLI Release
 
 on:
-  push:
-    branches: [main]
-    paths:
-      - 'packages/cli/src/**'
-      - 'packages/cli/package.json'
-      - 'packages/cli/bun.lock'
+  release:
+    types: [published]
   workflow_dispatch:
 
 concurrency:
@@ -16,6 +12,7 @@ concurrency:
 jobs:
   build:
     name: Build and release CLI
+    if: github.event_name == 'workflow_dispatch' || startsWith(github.event.release.tag_name, 'packages/cli-v')
     runs-on: ubuntu-latest
     permissions:
       contents: write

.github/workflows/commitlint.yml

@@ -0,0 +1,28 @@
+name: Commitlint
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, edited, synchronize, reopened]
+
+jobs:
+  lint:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Install commitlint
+        run: bun install --no-save @commitlint/cli @commitlint/config-conventional
+
+      - name: Lint PR title
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          printf '%s\n' "$PR_TITLE" > /tmp/pr_title.txt
+          bunx commitlint < /tmp/pr_title.txt

.github/workflows/release-please.yml

@@ -0,0 +1,28 @@
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release:
+    name: Create release PR
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
+      - name: Run release-please
+        uses: googleapis/release-please-action@v4
+        with:
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json
+          token: ${{ steps.app-token.outputs.token }}

.husky/commit-msg

@@ -0,0 +1 @@
+bunx --no-install commitlint --edit "$1"

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  "packages/cli": "0.15.17"
+}

commitlint.config.ts

@@ -0,0 +1,23 @@
+export default {
+  extends: ["@commitlint/config-conventional"],
+  rules: {
+    "type-enum": [
+      2,
+      "always",
+      [
+        "feat",
+        "fix",
+        "docs",
+        "style",
+        "refactor",
+        "perf",
+        "test",
+        "build",
+        "ci",
+        "chore",
+        "revert",
+      ],
+    ],
+    "header-max-length": [2, "always", 100],
+  },
+};

package.json

@@ -5,5 +5,13 @@
     "packages/*",
     ".claude/skills/setup-spa",
     ".claude/scripts"
-  ]
+  ],
+  "scripts": {
+    "prepare": "husky"
+  },
+  "devDependencies": {
+    "@commitlint/cli": "^19",
+    "@commitlint/config-conventional": "^19",
+    "husky": "^9"
+  }
 }

release-please-config.json

@@ -0,0 +1,22 @@
+{
+  "packages": {
+    "packages/cli": {
+      "release-type": "node",
+      "bump-minor-pre-major": true,
+      "changelog-sections": [
+        { "type": "feat", "section": "Features" },
+        { "type": "fix", "section": "Bug Fixes" },
+        { "type": "perf", "section": "Performance" },
+        { "type": "refactor", "section": "Refactoring" },
+        { "type": "test", "section": "Tests", "hidden": true },
+        { "type": "docs", "section": "Documentation", "hidden": true },
+        { "type": "chore", "section": "Miscellaneous", "hidden": true },
+        { "type": "ci", "section": "CI", "hidden": true },
+        { "type": "build", "section": "Build", "hidden": true },
+        { "type": "style", "section": "Styles", "hidden": true },
+        { "type": "revert", "section": "Reverts" }
+      ]
+    }
+  },
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json"
+}