From 3e9d345d839d48c2902fe984f1db82f5418947e9 Mon Sep 17 00:00:00 2001
From: rdwj <wjackson@redhat.com>
Date: Wed, 6 May 2026 17:13:24 -0500
Subject: [PATCH] Add .fips-template.yaml to opt into fips-agents patch flow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Without this manifest, the fips-agents-cli refuses to run
`fips-agents patch` against UI projects — its
`get_categories_for_type` raises for gateway / ui / sandbox project
types because no hardcoded category set exists for them. The
presence of this file is what makes the patch flow work for
projects scaffolded from this template.

Schema: schema_version: 1, with three categories (chart, docs,
build) and a 9-entry never_patch list separating template-managed
scaffolding from the user's Go source, web content, and deploy
values.

Companion to fips-agents/fips-agents-cli#48 (the loader). Older CLI
installs that don't know about .fips-template.yaml will simply
ignore the file — nothing breaks.

Assisted-by: Claude Code (Opus 4.7)
---
 .fips-template.yaml | 61 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 .fips-template.yaml

diff --git a/.fips-template.yaml b/.fips-template.yaml
new file mode 100644
index 0000000..84e3da3
--- /dev/null
+++ b/.fips-template.yaml
@@ -0,0 +1,61 @@
+# fips-agents-cli template manifest.
+#
+# This file declares which paths in the UI template are managed by
+# the template (and so should be offered as patches by `fips-agents
+# patch`) and which belong to the user. The CLI reads this file from
+# the template root after cloning, before computing drift in
+# `fips-agents patch check`.
+#
+# Without this manifest, `fips-agents patch` does not work for UI
+# projects — `get_categories_for_type` in the CLI raises ValueError for
+# gateway / ui / sandbox project types. The presence of this file is
+# what opts the UI template into the patch flow. See:
+#   https://github.com/fips-agents/fips-agents-cli/issues/45
+
+schema_version: 1
+
+patch:
+  categories:
+
+    chart:
+      description: Helm chart templates
+      patterns:
+        - chart/templates/**/*
+        - chart/Chart.yaml
+      ask_before_patch: true
+
+    docs:
+      description: Documentation files
+      patterns:
+        - CLAUDE.md
+        - llms.txt
+        - docs/**/*
+      ask_before_patch: false
+
+    build:
+      description: Build and deployment files
+      patterns:
+        - Makefile
+        - Containerfile
+        - .containerignore
+        - .gitignore
+      ask_before_patch: true
+
+  never_patch:
+    # User's Go entry point
+    - cmd/**
+    # User's Go module dependencies
+    - go.mod
+    # User's deploy values
+    - chart/values.yaml
+    # User-authored planning notes
+    - planning/**
+    # User's web content (HTML/CSS/JS and the embed.go that serves it)
+    - static/**
+    # Tests are user code
+    - "**/*_test.go"
+    # Environment files
+    - .env*
+    # User's README and license
+    - README.md
+    - LICENSE