feat: add repository settings compliance check

[flemzord]

Summary

• add a repository-settings check that validates feature toggles, visibility, merge options, and template presence
• extend the config/JSON schemas, CLI surfaces, and docs to expose the new policy block
• wire a GitHub client helper + tests so template requirements can be detected

Testing

• npm run lint:fix
• npm test

---

Summary by cubic

Adds a new repository-settings compliance check to enforce repo feature toggles, visibility, merge options, and required templates. Also updates config schema, CLI support, docs, and adds a GitHub client helper for template detection.

• New Features

  • New check: repository-settings validates features (issues, projects, wiki, discussions, pages), visibility, general options (auto-merge, delete branch on merge, update branch, squash title), and presence of issue/PR templates.
  • Config: new defaults.repository_settings with rule-level overrides; JSON schema and Zod schema extended.
  • CLI: repository-settings included when configured; --checks supports repository-settings.
  • GitHub client: pathExists helper to detect template files/dirs.
  • Docs: README and configuration reference updated with examples.
  • Tests: unit tests for the check and integration tests for pathExists.

• Migration

  • Add a repository_settings block under defaults (and rules if needed).
  • If you pin checks explicitly, include repository-settings in checks.
  • Ensure the token has permission to read repo contents for template detection.

[flemzord]

Link to issue #6

[github-actions]

📊 Build Report

Bundle Size: 1.19 KB
Node Versions Tested: 18, 20, 22
All Checks: ✅ Passed

Details

• Linting (BiomeJS, Knip, TypeScript): ✅
• Tests with coverage: ✅
• Build: ✅
• Integration test: ✅

Generated for commit fdee8e9

[cubic-dev-ai]

4 issues found across 17 files

Prompt for AI agents (all 4 issues)

Understand the root cause of the following 4 issues and fix them.


<file name="docs/configuration-reference.md">

<violation number="1" location="docs/configuration-reference.md:433">
Duplicate &#39;repository-settings&#39; entry in checks.enabled example; remove the repeated line to avoid confusion and redundancy.</violation>
</file>

<file name="src/checks/repository-settings.ts">

<violation number="1" location="src/checks/repository-settings.ts:26">
PR template detection misses docs/PULL_REQUEST_TEMPLATE.md, causing false negatives for valid templates stored in docs.</violation>
</file>

<file name="src/config/schema.ts">

<violation number="1" location="src/config/schema.ts:154">
allow_public and enforce_private can both be true with no validation, leading to ambiguous visibility policy; add a refine to forbid contradictory combinations.</violation>

<violation number="2" location="src/config/schema.ts:165">
Duplicate merge options under repository_settings.general mirror merge_methods, creating two sources of truth and potential config conflicts.</violation>
</file>

_{React with 👍 or 👎 to teach cubic. Mention @cubic-dev-ai to give feedback, ask questions, or re-run the review.}