rosett-ai 1.3.3

data/.rosett-ai/config.yml

@@ -0,0 +1,3 @@
+---
+project_name: rosett-ai
+default_engine: claude

data/.rspec

@@ -0,0 +1,5 @@
+--color
+--format documentation
+--require spec_helper
+--order random
+--warnings

data/.rubocop.yml

@@ -0,0 +1,380 @@
+# Rosett-AI - RuboCop Configuration
+#
+# MFA disabled due to OTP timing issues when pushing gems
+Gemspec/RequireMFA:
+  Enabled: false
+#
+# Use plugins for extensions that support it
+plugins:
+  - rubocop-factory_bot
+  - rubocop-performance
+  - rubocop-rake
+  - rubocop-rspec
+  - rubocop-thread_safety
+#
+# Custom project cops
+require:
+  - ./lib/rubocop/rosett_ai
+#
+# === Custom Security Cops ===
+#
+RosettAi/UnsafeYamlLoad:
+  Enabled: true
+  Severity: error
+#
+RosettAi/ShellInterpolation:
+  Enabled: true
+  Severity: error
+#
+# Advisory cops (warning) - existing safe code uses frozen registries
+RosettAi/UnsafeConstGet:
+  Enabled: true
+  Severity: warning
+  Exclude:
+    # RuboCop cops use on_send which is part of the AST API
+    - 'lib/rubocop/cop/**/*'
+    # Test helpers use dynamic patterns for setup
+    - 'spec/**/*'
+    # These files use frozen PARSER_REGISTRY/CATEGORIES constants (safe pattern)
+    - 'lib/rosett_ai/retrofit/engine.rb'
+    - 'lib/rosett_ai/thor/tasks/validate.rb'
+    # Logger const_get catches NameError and falls back to WARN (safe)
+    - 'lib/rosett_ai/structured_logger.rb'
+#
+RosettAi/UnsafeSend:
+  Enabled: true
+  Severity: warning
+  Exclude:
+    # GTK4 apps use send for action dispatch with validated method names
+    - 'lib/rosett_ai/desktop/**/*'
+    # GUI logger delegates via send with internally-defined method names
+    - 'lib/rosett_ai/desktop/gui_logger.rb'
+    # Thor tasks use send for Rainbow color methods (hardcoded)
+    - 'lib/rosett_ai/thor/tasks/**/*'
+    # RuboCop cops test AST patterns
+    - 'lib/rubocop/cop/**/*'
+    # Test helpers may use dynamic dispatch
+    - 'spec/**/*'
+#
+# === Thread Safety ===
+#
+# Thread safety cops are advisory for nncc — many patterns that trigger these
+# cops are intentional (singletons, registries, parallel dispatch). We exclude
+# files with known-safe patterns and keep the cops enabled to catch new issues.
+#
+ThreadSafety:
+  Enabled: true
+  Exclude:
+    # Test files may use patterns that trigger thread safety cops for setup/teardown
+    - 'spec/**/*'
+#
+ThreadSafety/ClassInstanceVariable:
+  Enabled: true
+  Exclude:
+    # Module-level memoization for singletons (standard Ruby pattern)
+    - 'lib/rosett_ai.rb'
+    # Singleton patterns and registries (intentional)
+    - 'lib/rosett_ai/dbus/**/*'
+    - 'lib/rosett_ai/deprecation.rb'
+    - 'lib/rosett_ai/desktop/**/*'
+    - 'lib/rosett_ai/doctor.rb'
+    - 'lib/rosett_ai/doctor/check.rb'
+    - 'lib/rosett_ai/feature_flags.rb'
+    - 'lib/rosett_ai/path_resolver.rb'
+    - 'lib/rosett_ai/plugins/registry.rb'
+    - 'lib/rosett_ai/structured_logger.rb'
+    - 'lib/rosett_ai/telemetry/reporter.rb'
+    - 'lib/rosett_ai/thor/tasks/build.rb'
+    - 'lib/rosett_ai/ui/registry.rb'
+    - 'spec/**/*'
+#
+ThreadSafety/NewThread:
+  Enabled: true
+  Exclude:
+    # D-Bus service and focus adapters require threads by design
+    - 'lib/rosett_ai/dbus/**/*'
+    # Quorum dispatcher uses threads for parallel engine execution
+    - 'lib/rosett_ai/quorum/dispatcher.rb'
+    - 'spec/**/*'
+#
+ThreadSafety/DirChdir:
+  Enabled: true
+  Exclude:
+    # Tests commonly use Dir.chdir for isolation
+    - 'spec/**/*'
+    # Reference compiler needs chdir for relative path handling
+    - 'lib/rosett_ai/documentation/reference_compiler.rb'
+    # Gemspec uses chdir for file listing
+    - '*.gemspec'
+#
+ThreadSafety/ClassAndModuleAttributes:
+  Enabled: true
+  Exclude:
+    - 'spec/**/*'
+#
+ThreadSafety/MutableClassInstanceVariable:
+  Enabled: true
+  Exclude:
+    - 'spec/**/*'
+    # Registry patterns use mutable hashes intentionally
+    - 'lib/rosett_ai/deprecation.rb'
+    - 'lib/rosett_ai/doctor.rb'
+    - 'lib/rosett_ai/ui/registry.rb'
+#
+AllCops:
+  TargetRubyVersion: 3.3
+  NewCops: enable
+  Exclude:
+    - 'vendor/**/*'
+    - 'tmp/**/*'
+    - 'cache/**/*'
+    - 'coverage/**/*'
+    - 'pkg/**/*'
+#
+# Layout
+Layout/LineLength:
+  Max: 120
+  AllowedPatterns:
+    - '^\s*#'
+    - '^\s*"'
+    - "^\\s*'"
+#
+Layout/MultilineMethodCallIndentation:
+  EnforcedStyle: indented
+#
+Layout/FirstArrayElementIndentation:
+  EnforcedStyle: consistent
+#
+Layout/FirstHashElementIndentation:
+  EnforcedStyle: consistent
+#
+# Metrics
+Metrics/AbcSize:
+  Max: 25
+  Exclude:
+    # Test setup blocks are inherently verbose (let chains, before hooks, multi-step arrange)
+    - 'spec/**/*'
+    # Thor tasks orchestrate multi-stage workflows (build, backup, compile) with sequential steps
+    - 'lib/rosett_ai/thor/tasks/**/*'
+    # Compiler render/diff methods handle complex string assembly and multi-pass transformation
+    - 'lib/rosett_ai/compiler/**/*'
+    # GTK4 desktop app builds UI widget trees — inherently creates many objects
+    - 'lib/rosett_ai/desktop/**/*'
+    # Engine backends render markdown with complex string assembly
+    - 'lib/rosett_ai/engines/*/backend.rb'
+#
+Metrics/BlockLength:
+  Exclude:
+    # RSpec describe/context blocks are naturally long by design
+    - 'spec/**/*'
+    # Standard Ruby exclusions — gemspec, Gemfile, and Rakefile use DSL blocks
+    - '*.gemspec'
+    - 'Gemfile'
+    - 'Rakefile'
+#
+Metrics/ModuleLength:
+  Exclude:
+    # Root module declares 20+ error classes (one-liners) + module-level singletons
+    - 'lib/rosett_ai.rb'
+    # Instructions module contains 7 markdown heredoc sections — content, not complexity
+    - 'lib/rosett_ai/mcp/instructions.rb'
+    # Governance module is a tool/resource/prompt registry — grows with each tool
+    - 'lib/rosett_ai/mcp/governance.rb'
+#
+Metrics/ClassLength:
+  Max: 200
+  Exclude:
+    # BuildPackage orchestrates a 9-stage build pipeline with per-stage methods and formatting
+    - 'lib/rosett_ai/thor/tasks/build.rb'
+    # Documentation has scan + apply + reference compilation + locale + status methods
+    - 'lib/rosett_ai/thor/tasks/documentation.rb'
+    # Compile orchestrates engine resolution + compilation + orphan removal + locale compilation
+    - 'lib/rosett_ai/thor/tasks/compile.rb'
+    # GTK4 desktop app has many UI builder methods and action handlers
+    - 'lib/rosett_ai/desktop/**/*'
+    # Thor task classes grow with long_desc blocks (help text, not logic)
+    - 'lib/rosett_ai/thor/tasks/mcp.rb'
+    - 'lib/rosett_ai/thor/tasks/dbus.rb'
+    - 'lib/rosett_ai/thor/tasks/release.rb'
+    # Init has long_desc blocks + multiple scope setup methods + MCP registration
+    - 'lib/rosett_ai/thor/tasks/init.rb'
+    - 'lib/rosett_ai/thor/tasks/tooling.rb'
+    - 'lib/rosett_ai/thor/tasks/hooks.rb'
+    - 'lib/rosett_ai/thor/tasks/backup.rb'
+#
+Metrics/MethodLength:
+  Max: 25
+  Exclude:
+    # Test methods contain multi-step setup and assertion sequences
+    - 'spec/**/*'
+    # Thor task methods orchestrate multi-stage CLI workflows with inline output formatting
+    - 'lib/rosett_ai/thor/tasks/**/*'
+    # GTK4 desktop app methods build widget trees with multiple configuration steps
+    - 'lib/rosett_ai/desktop/**/*'
+#
+Metrics/CyclomaticComplexity:
+  Max: 10
+#
+Metrics/PerceivedComplexity:
+  Max: 10
+#
+# Naming
+Naming/FileName:
+  Exclude:
+    - 'Gemfile'
+    - 'Rakefile'
+#
+Naming/AccessorMethodName:
+  Exclude:
+    # D-Bus interfaces follow standard D-Bus method naming (GetStatus, GetFocusState)
+    - 'lib/rosett_ai/dbus/*_interface.rb'
+#
+# Style
+Style/Documentation:
+  Enabled: true
+#
+Style/FrozenStringLiteralComment:
+  Enabled: true
+  EnforcedStyle: always
+#
+Style/Copyright:
+  Enabled: true
+  Notice: 'SPDX-License-Identifier: GPL-3.0-only'
+  AutocorrectNotice: "# SPDX-License-Identifier: GPL-3.0-only\n# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds"
+  Exclude:
+    # Dependency manifests and external config files are not project source code
+    - 'Gemfile'
+    - '.mdl_style.rb'
+#
+Style/StringLiterals:
+  EnforcedStyle: single_quotes
+#
+Style/StringLiteralsInInterpolation:
+  EnforcedStyle: single_quotes
+#
+Style/SymbolArray:
+  EnforcedStyle: brackets
+#
+Style/WordArray:
+  EnforcedStyle: brackets
+#
+Style/TrailingCommaInArrayLiteral:
+  EnforcedStyleForMultiline: no_comma
+#
+Style/TrailingCommaInHashLiteral:
+  EnforcedStyleForMultiline: no_comma
+#
+Style/HashSyntax:
+  EnforcedStyle: ruby19
+#
+Style/RedundantSelf:
+  Enabled: true
+#
+Style/ClassAndModuleChildren:
+  EnforcedStyle: nested
+#
+Style/RescueModifier:
+  Exclude:
+    # Tests use rescue modifier for concise exception-testing patterns
+    - 'spec/**/*'
+#
+Style/RedundantConstantBase:
+  Enabled: true
+  Exclude:
+    # Specs reference ::Thor to avoid resolving to RosettAi::Thor module
+    - 'spec/rosett_ai/smart_feedback/thor_middleware_spec.rb'
+    - 'spec/rosett_ai/thor/tasks/**/*'
+#
+# RSpec
+RSpec/ExampleLength:
+  Max: 15
+#
+RSpec/MultipleMemoizedHelpers:
+  Max: 7
+#
+RSpec/MultipleExpectations:
+  Max: 5
+#
+RSpec/NestedGroups:
+  Max: 4
+#
+RSpec/DescribeClass:
+  Exclude:
+    # Integration specs test cross-cutting behaviour, not individual classes
+    - 'spec/integration/**/*'
+#
+RSpec/SpecFilePathFormat:
+  Enabled: true
+  Exclude:
+    # D-Bus module uses uppercase DBus, not D_Bus — directory naming follows module structure
+    - 'spec/rosett_ai/dbus/**/*'
+    - 'spec/rosett_ai/thor/tasks/dbus_spec.rb'
+#
+RSpec/SpecFilePathSuffix:
+  Enabled: true
+#
+RSpec/AnyInstance:
+  Exclude:
+    # Thor tasks have private stage methods that need stubbing for isolation testing
+    - 'spec/rosett_ai/thor/tasks/**/*'
+    # D-Bus interfaces use AnyInstance for stubbing compile pipelines
+    - 'spec/rosett_ai/dbus/**/*'
+#
+RSpec/VerifiedDoubles:
+  Exclude:
+    # External D-Bus libraries (ruby-dbus, i3ipc) can't be verified — classes loaded dynamically
+    - 'spec/rosett_ai/dbus/**/*'
+    - 'spec/rosett_ai/thor/tasks/dbus_spec.rb'
+    # GTK4/Adwaita classes can't be verified — gem may not be installed
+    - 'spec/rosett_ai/desktop/**/*'
+    - 'spec/rosett_ai/thor/tasks/desktop_spec.rb'
+    # MCP gem classes are optional — can't be verified when gem not loaded
+    - 'spec/rosett_ai/mcp/server_spec.rb'
+#
+RSpec/MessageSpies:
+  Exclude:
+    # D-Bus specs use expect().to receive for setup simplicity with mocked external services
+    - 'spec/rosett_ai/dbus/**/*'
+    # Desktop specs use expect().to receive for GTK4/D-Bus mocking
+    - 'spec/rosett_ai/desktop/**/*'
+    - 'spec/rosett_ai/thor/tasks/desktop_spec.rb'
+#
+RSpec/ReceiveMessages:
+  Exclude:
+    # Desktop specs set up mock objects with multiple stubs
+    - 'spec/rosett_ai/desktop/**/*'
+    - 'spec/rosett_ai/thor/tasks/desktop_spec.rb'
+#
+RSpec/LeadingSubject:
+  Exclude:
+    # Desktop specs place subject after mocks for readability
+    - 'spec/rosett_ai/desktop/**/*'
+#
+RSpec/DescribedClass:
+  Enabled: true
+#
+RSpec/MultipleDescribes:
+  Enabled: true
+  Exclude:
+    # Compressor/Destination base + subclasses are tightly coupled — one spec file per hierarchy
+    - 'spec/rosett_ai/backup/compressor_spec.rb'
+    - 'spec/rosett_ai/backup/destination_spec.rb'
+#
+# Performance
+Performance/StringReplacement:
+  Enabled: true
+#
+Performance/RegexpMatch:
+  Enabled: true
+#
+# Rake
+Rake/Desc:
+  Enabled: true
+#
+# Gemspec
+Gemspec/DevelopmentDependencies:
+  Enabled: true
+#
+RSpec/PredicateMatcher:
+  Enabled: true
+#

data/.ruby-version

@@ -0,0 +1 @@
+3.3.10

data/.yamllint

@@ -0,0 +1,51 @@
+# NeatNerds Code Companion - yamllint Configuration
+
+extends: default
+
+rules:
+  line-length:
+    max: 240
+    level: warning
+
+  indentation:
+    spaces: 2
+    indent-sequences: whatever
+
+  document-start: disable
+
+  truthy:
+    level: warning
+
+  comments:
+    min-spaces-from-content: 1
+
+  braces:
+    min-spaces-inside: 0
+    max-spaces-inside: 1
+
+  brackets:
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+
+  colons:
+    max-spaces-before: 0
+    max-spaces-after: 1
+
+  commas:
+    max-spaces-before: 0
+    min-spaces-after: 1
+    max-spaces-after: 1
+
+  hyphens:
+    max-spaces-after: 1
+
+  empty-lines:
+    max: 2
+    max-start: 0
+    max-end: 1
+
+ignore:
+  - vendor/
+  - cache/
+  - coverage/
+  - .git/

data/.yardopts

@@ -0,0 +1,12 @@
+--output-dir doc/api
+--markup markdown
+--title "NeatNerds Code Companion API Documentation"
+--protected
+--no-private
+--hide-void-return
+--exclude lib/rubocop
+lib/**/*.rb
+-
+CHANGELOG.md
+INSTALL.md
+doc/SETUP.md

data/AI-DISCLOSURE.md

@@ -0,0 +1,48 @@
+# AI Disclosure
+
+This project uses AI tools in its development process.
+
+## AI Tools Used
+
+| Tool | Provider | Purpose |
+|------|----------|---------|
+| Claude Code | Anthropic | Code authoring, refactoring, testing, documentation |
+
+## Governance Policy
+
+1. **All AI-generated code is human-reviewed** before merging. The human
+   contributor bears primary responsibility for all committed code,
+   regardless of whether it was AI-generated.
+
+2. **Commit trailers document AI involvement.** Every commit that includes
+   AI-generated or AI-assisted content carries a `Co-Authored-By` trailer
+   identifying the AI tool and model version.
+
+3. **AI provenance is tracked.** The `.ai-provenance.yml` file records
+   which sessions contributed to the codebase, the AI model used, the
+   scope of work, and which files were affected.
+
+4. **No AI-generated code ships without tests.** All new functionality
+   includes test coverage verified by the human reviewer.
+
+5. **DCO sign-off required.** All contributions comply with the Developer
+   Certificate of Origin. The `Signed-off-by` trailer is enforced via
+   git hooks where applicable.
+
+## License Compatibility
+
+This project is licensed under GPL-3.0-only. AI-generated code is
+contributed under the same license. SPDX license identifiers are present
+on all source files.
+
+## Provenance Verification
+
+```bash
+raictl provenance validate   # Validate all provenance entries
+raictl provenance log         # View provenance history
+raictl comply --headers       # Verify SPDX headers
+```
+
+## Questions
+
+For questions about AI usage in this project, contact: query@neatnerds.be