Skip to content

Commit ffa72d4

Browse files
zhou-wang-gitzhou-wang-git
committed
Initialize BugBundle
0 parents  commit ffa72d4

45 files changed

Lines changed: 2762 additions & 0 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/ISSUE_TEMPLATE/bug.yml‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
name: Bug report
2+
description: Report a reproducible BugBundle defect
3+
title: "[Bug]: "
4+
labels: [bug, needs-triage]
5+
body:
6+
- type: markdown
7+
attributes:
8+
value: |
9+
Do not paste secrets or proprietary source. Run `bugbundle preview` before sharing an archive.
10+
- type: textarea
11+
id: description
12+
attributes:
13+
label: Description
14+
description: What happened, and what did you expect?
15+
validations:
16+
required: true
17+
- type: textarea
18+
id: reproduction
19+
attributes:
20+
label: Reproduction
21+
description: Provide the smallest safe command or public repository that demonstrates the problem.
22+
placeholder: |
23+
Command:
24+
Expected exit/output:
25+
Actual exit/output:
26+
validations:
27+
required: true
28+
- type: input
29+
id: version
30+
attributes:
31+
label: BugBundle version
32+
placeholder: 0.1.0
33+
validations:
34+
required: true
35+
- type: dropdown
36+
id: operating-system
37+
attributes:
38+
label: Operating system
39+
options:
40+
- Linux
41+
- macOS
42+
- Windows
43+
- Other
44+
validations:
45+
required: true
46+
- type: checkboxes
47+
id: safety
48+
attributes:
49+
label: Safety confirmation
50+
options:
51+
- label: I reviewed all content and removed secrets and proprietary information.
52+
required: true

‎.github/ISSUE_TEMPLATE/config.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
blank_issues_enabled: false
2+
contact_links:
3+
- name: Security vulnerability
4+
url: https://github.com/bugbundleZ/bugbundle/security/advisories/new
5+
about: Report vulnerabilities privately. Never attach secrets or private source to a public issue.

‎.github/PULL_REQUEST_TEMPLATE.md‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
## What changed
2+
3+
<!-- Describe the user-visible change. -->
4+
5+
## Why
6+
7+
<!-- Explain the problem this solves. -->
8+
9+
## Verification
10+
11+
<!-- List the exact commands or fixtures used. -->
12+
13+
- [ ] `pnpm check`
14+
- [ ] I added regression coverage for behavior changes.
15+
- [ ] I reviewed collectors and fixtures for sensitive content.

‎.github/dependabot.yml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: npm
4+
directory: /
5+
schedule:
6+
interval: weekly
7+
groups:
8+
development-dependencies:
9+
dependency-type: development

‎.github/workflows/ci.yml‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
name: CI
2+
3+
on:
4+
pull_request:
5+
push:
6+
branches: [main]
7+
8+
permissions:
9+
contents: read
10+
11+
jobs:
12+
test:
13+
strategy:
14+
fail-fast: false
15+
matrix:
16+
os: [ubuntu-latest, macos-latest, windows-latest]
17+
node: [22, 24]
18+
runs-on: ${{ matrix.os }}
19+
steps:
20+
- uses: actions/checkout@v4
21+
- uses: pnpm/action-setup@v4
22+
- uses: actions/setup-node@v4
23+
with:
24+
node-version: ${{ matrix.node }}
25+
cache: pnpm
26+
- run: pnpm install --frozen-lockfile
27+
- run: pnpm check
28+
- run: pnpm build

‎.gitignore‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
node_modules/
2+
dist/
3+
coverage/
4+
.bugbundle/
5+
*.tgz
6+
.DS_Store

‎AGENTS.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# Repository guidance
2+
3+
- Keep the core deterministic and usable without network access or an AI model.
4+
- Treat bundle contents as sensitive. New collectors require redaction tests.
5+
- Prefer stable JSON output and explicit exit codes over interactive-only behavior.
6+
- Add fixture or regression coverage for every behavior change.
7+
- Run `pnpm check` and `pnpm build` before handing off changes.
8+
- Do not add telemetry without an explicit public design decision.

‎CHANGELOG.md‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
# Changelog
2+
3+
All notable changes follow [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This project uses semantic versioning after the initial experimental series.
4+
5+
## [Unreleased]
6+
7+
## [0.1.0] - 2026-07-11
8+
9+
### Added
10+
11+
- deterministic ZIP capture with bounded, redacted stdout and stderr;
12+
- versioned manifest schema and per-entry SHA-256 integrity checks;
13+
- safe `inspect` and non-executing `verify` commands;
14+
- explicit `verify --run` command replay;
15+
- `.bugbundle.yml` file allowlists and `preview` workflow;
16+
- mandatory secret-file, dependency, Git metadata, and symlink exclusions;
17+
- streaming expanded-size enforcement and archive path validation; and
18+
- cross-platform CI plus core and CLI integration tests.

‎CODE_OF_CONDUCT.md‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
# Code of Conduct
2+
3+
## Our pledge
4+
5+
We pledge to make participation in this project a harassment-free experience for everyone, regardless of background, identity, experience level, or personal characteristics.
6+
7+
## Expected behavior
8+
9+
- Be respectful, specific, and constructive.
10+
- Critique ideas and code, not people.
11+
- Respect privacy and never post another person's secrets or proprietary source.
12+
- Accept maintainer decisions about scope and safety.
13+
14+
## Unacceptable behavior
15+
16+
Harassment, threats, discriminatory language, sustained disruption, publishing private information, and deliberately unsafe submissions are not tolerated.
17+
18+
## Enforcement
19+
20+
Maintainers may edit, remove, or reject contributions and may temporarily or permanently restrict participation when necessary. Until a public conduct contact is configured, sensitive reports should use the repository's private vulnerability reporting channel.

‎CONTRIBUTING.md‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# Contributing
2+
3+
BugBundle welcomes focused bug reports and pull requests.
4+
5+
## Development
6+
7+
Requirements: Node.js 22 or 24 and pnpm 11.
8+
9+
```bash
10+
pnpm install --frozen-lockfile
11+
pnpm check
12+
```
13+
14+
Every behavior change needs a fixture or regression test. Changes to collectors or file handling require redaction and path-safety coverage. Changes to `manifest.schema.json` require compatibility discussion because bundles are intended to remain independently verifiable.
15+
16+
Please keep pull requests small, explain the user-visible problem, and describe the command used to verify the change.

0 commit comments

Comments
 (0)