@gitset-dev/cli 1.2.1 → 2.0.1

package/src/commands/license.js

@@ -0,0 +1,208 @@
+'use strict';
+
+/**
+ * `gitset license` — fully local, offline license generator.
+ * No backend. Standard public license texts embedded; {year}/{owner}
+ * substituted. Replaces the old remote /api/licenses path.
+ */
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+const readline = require('readline');
+
+const tty = () => process.stdout.isTTY;
+const c = (code, s) => (tty() ? `\x1b[${code}m${s}\x1b[0m` : s);
+const ask = (q) => new Promise((r) => {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  rl.question(q, (a) => { rl.close(); r(a.trim()); });
+});
+
+const MIT = `MIT License
+
+Copyright (c) {year} {owner}
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+`;
+
+const ISC = `ISC License
+
+Copyright (c) {year} {owner}
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+`;
+
+const BSD2 = `BSD 2-Clause License
+
+Copyright (c) {year}, {owner}
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES ARE DISCLAIMED. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGE.
+`;
+
+const BSD3 = `BSD 3-Clause License
+
+Copyright (c) {year}, {owner}
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice,
+   this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors
+   may be used to endorse or promote products derived from this software
+   without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES ARE DISCLAIMED. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGE.
+`;
+
+const UNLICENSE = `This is free and unencumbered software released into the public domain.
+
+Anyone is free to copy, modify, publish, use, compile, sell, or distribute
+this software, either in source code form or as a compiled binary, for any
+purpose, commercial or non-commercial, and by any means.
+
+In jurisdictions that recognize copyright laws, the author or authors of this
+software dedicate any and all copyright interest in the software to the public
+domain.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+For more information, please refer to <https://unlicense.org>
+`;
+
+const APACHE2_NOTICE = `                                 Apache License
+                           Version 2.0, January 2004
+
+Copyright (c) {year} {owner}
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+NOTE: This is the standard Apache-2.0 short notice. Include the full license
+text from https://www.apache.org/licenses/LICENSE-2.0.txt as required.
+`;
+
+const LICENSES = {
+  mit: { name: 'MIT License', requiresOwner: true, text: MIT },
+  isc: { name: 'ISC License', requiresOwner: true, text: ISC },
+  'bsd-2-clause': { name: 'BSD 2-Clause', requiresOwner: true, text: BSD2 },
+  'bsd-3-clause': { name: 'BSD 3-Clause', requiresOwner: true, text: BSD3 },
+  'apache-2.0': { name: 'Apache License 2.0', requiresOwner: true, text: APACHE2_NOTICE },
+  unlicense: { name: 'The Unlicense', requiresOwner: false, text: UNLICENSE },
+};
+
+function listIds() { return Object.keys(LICENSES); }
+
+function getLicense(id, { owner = '', year = new Date().getFullYear() } = {}) {
+  const lic = LICENSES[String(id).toLowerCase()];
+  if (!lic) return null;
+  return lic.text.replace(/\{year\}/g, String(year)).replace(/\{owner\}/g, owner || 'the authors');
+}
+
+function flag(argv, name) {
+  const i = argv.indexOf(name);
+  return i !== -1 && argv[i + 1] && !argv[i + 1].startsWith('-') ? argv[i + 1] : null;
+}
+
+async function runLicenseCommand(argv) {
+  const printList = () => {
+    console.log('Available licenses:');
+    for (const k of listIds()) console.log(`  ${k.padEnd(16)} ${LICENSES[k].name}`);
+  };
+
+  if (argv.includes('--list')) { printList(); return 0; }
+
+  let id = flag(argv, '--id') || (argv[0] && !argv[0].startsWith('-') ? argv[0] : null);
+  if (!id) {
+    printList();
+    if (!process.stdin.isTTY) { console.error(`${c('31', '✗')} Specify a license: gitset license --id mit --owner "Name"`); return 1; }
+    id = (await ask('\nLicense id: ')).toLowerCase();
+  }
+  const lic = LICENSES[String(id).toLowerCase()];
+  if (!lic) { console.error(`${c('31', '✗')} Unknown license "${id}". Try --list.`); return 1; }
+
+  let owner = flag(argv, '--owner') || '';
+  if (lic.requiresOwner && !owner) {
+    let guess = '';
+    try { guess = execFileSync('git', ['config', 'user.name'], { encoding: 'utf8' }).trim(); } catch {  }
+    if (!process.stdin.isTTY) owner = guess;
+    else owner = (await ask(`Copyright holder${guess ? ` (${guess})` : ''}: `)) || guess;
+    if (!owner) { console.error(`${c('31', '✗')} This license needs a copyright holder (--owner).`); return 1; }
+  }
+
+  const content = getLicense(id, { owner });
+  const target = path.join(process.cwd(), 'LICENSE');
+  if (fs.existsSync(target) && !argv.includes('--force')) {
+    if (!process.stdin.isTTY) { console.error(`${c('31', '✗')} LICENSE exists. Use --force.`); return 1; }
+    if ((await ask('LICENSE exists. Overwrite? [y/N] ')).toLowerCase() !== 'y') { console.log('Aborted.'); return 0; }
+  }
+  fs.writeFileSync(target, content);
+  console.log(`${c('32', '✓')} Wrote LICENSE (${lic.name})`);
+  return 0;
+}
+
+module.exports = { runLicenseCommand, getLicense, listIds, LICENSES };

package/src/commands/release.js

@@ -0,0 +1,180 @@
+const { execSync, execFileSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const { log, askQuestion, selectOption } = require('../utils/ui');
+const genLocal = require('../../lib/generate-local');
+
+function execCommand(cmd) {
+    try {
+        return execSync(cmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+    } catch (err) {
+        return null;
+    }
+}
+
+function getTags() {
+    const tagsOutput = execCommand('git tag --sort=-creatordate');
+    return tagsOutput ? tagsOutput.split('\n').filter(Boolean) : [];
+}
+
+function getCommits(from, to) {
+    const cmd = `git log ${from}..${to} --pretty=format:"%h|%an|%s"`;
+    const output = execCommand(cmd);
+    if (!output) return [];
+    return output.split('\n').filter(Boolean).map(line => {
+        const [hash, author, message] = line.split('|');
+        return { hash, author, message };
+    });
+}
+
+function getCurrentBranch() {
+    return execCommand('git rev-parse --abbrev-ref HEAD') || 'HEAD';
+}
+
+function commitsToText(commits) {
+    if (!commits || commits.length === 0) return '';
+    return commits.map(c => `- ${c.hash || ''} ${c.message || ''} (${c.author || ''})`).join('\n');
+}
+
+module.exports = async function commandRelease(options = {}) {
+    console.log('\n=== Gitset Release Manager (BYOAI) ===\n');
+
+    let fromRef = options.from;
+    let toRef = options.to || getCurrentBranch();
+
+    if (!fromRef) {
+        const tags = getTags();
+        if (tags.length > 0) {
+            const useLatestTag = await selectOption('Select previous tag (From):', [
+                { label: `Latest Tag (${tags[0]})`, value: tags[0] },
+                { label: 'Select from list', value: 'list' },
+                { label: 'Manual Input', value: 'manual' },
+                { label: 'No previous tag (Initial Release)', value: 'initial' }
+            ]);
+
+            if (useLatestTag === 'list') {
+                fromRef = await selectOption('Select tag:', tags.slice(0, 10).map(t => ({ label: t, value: t })));
+            } else if (useLatestTag === 'manual') {
+                fromRef = await askQuestion('Enter start reference (tag/sha): ');
+            } else if (useLatestTag === 'initial') {
+                fromRef = null;
+            } else {
+                fromRef = useLatestTag;
+            }
+        } else {
+            log('No tags found. Assuming initial release.', 'yellow');
+            fromRef = null;
+        }
+    }
+
+    log(`\nAnalyzing commits from ${fromRef ? fromRef : 'start'} to ${toRef}...`, 'dim');
+    let commits = [];
+    if (fromRef) {
+        commits = getCommits(fromRef, toRef);
+    } else {
+        const output = execCommand(`git log ${toRef} --pretty=format:"%h|%an|%s"`);
+        if (output) {
+            commits = output.split('\n').filter(Boolean).map(line => {
+                const [hash, author, message] = line.split('|');
+                return { hash, author, message };
+            });
+        }
+    }
+
+    if (commits.length === 0) {
+        log('No commits found in range.', 'yellow');
+        const proceed = await selectOption('Proceed anyway?', [
+            { label: 'Yes, use Manual Mode', value: 'manual' },
+            { label: 'Abort', value: 'abort' }
+        ]);
+        if (proceed === 'abort') return 0;
+    } else {
+        log(`Found ${commits.length} commits.`, 'green');
+    }
+
+    let tagName = options.version;
+    while (!tagName) {
+        tagName = await askQuestion('Enter new tag name (e.g. v1.2.0): ');
+        if (!tagName) log('Tag name is required.', 'red');
+    }
+
+    let currentNotes = '';
+
+    const generate = async (instr = '') => {
+        log('\nGenerating release notes…', 'cyan');
+        try {
+            const result = await genLocal.generate({
+                tool: 'release',
+                ctx: {
+                    tag: tagName,
+                    commits: commitsToText(commits),
+                    mode: commits.length === 0 ? 'manual' : 'summary',
+                    instruction: instr,
+                    previous: instr ? currentNotes : '',
+                },
+                provider: options.provider,
+                model: options.model,
+                maxTokens: 4096,
+                interactive: true,
+            });
+            currentNotes = result.text;
+            log(`\n--- Release Notes (via ${result.provider}) ---\n`, 'green');
+            console.log(currentNotes);
+            log('\n-------------------------------\n', 'green');
+            return true;
+        } catch (err) {
+            if (err instanceof genLocal.AIError) {
+                log(`AI provider error (${err.code}): ${err.message}`, 'red');
+            } else {
+                log(err.message, 'red');
+            }
+            return false;
+        }
+    };
+
+    if (!(await generate())) return 2;
+
+    while (true) {
+        const action = await selectOption('What would you like to do?', [
+            { label: 'Create Release (GitHub)', value: 'create' },
+            { label: 'Refine with AI', value: 'refine' },
+            { label: 'Edit Manually (Open Editor)', value: 'edit' },
+            { label: 'Abort', value: 'abort' }
+        ]);
+
+        if (action === 'abort') return 0;
+
+        if (action === 'refine') {
+            const instruction = await askQuestion('Enter refinement instruction: ');
+            if (instruction) await generate(instruction);
+        } else if (action === 'edit') {
+            const tempFile = path.join(os.tmpdir(), 'RELEASE_NOTES.md');
+            fs.writeFileSync(tempFile, currentNotes);
+            log(`Opening ${tempFile} in default editor…`, 'dim');
+            try {
+                execFileSync(process.env.EDITOR || 'vi', [tempFile], { stdio: 'inherit' });
+                currentNotes = fs.readFileSync(tempFile, 'utf8');
+                log('Notes updated from editor.', 'green');
+            } catch (e) {
+                log('Failed to open editor. You can edit the file manually.', 'red');
+            }
+        } else if (action === 'create') {
+            const notesFile = 'RELEASE_NOTES.md';
+            fs.writeFileSync(notesFile, currentNotes);
+            log(`Saved notes to ${notesFile}`, 'dim');
+            log('Creating release via gh CLI…', 'cyan');
+            try {
+                execFileSync('gh', ['release', 'create', tagName, '--title', tagName, '--notes-file', notesFile], { stdio: 'inherit' });
+                log('\nRelease created successfully!', 'green');
+                try { fs.unlinkSync(notesFile); } catch {  }
+                return 0;
+            } catch (e) {
+                log('\nFailed to create release with gh CLI.', 'red');
+                log('Ensure "gh" is installed and authenticated.', 'dim');
+                log(`Your notes are saved in ${notesFile}`, 'yellow');
+                return 1;
+            }
+        }
+    }
+};

package/src/commands/repo.js

@@ -0,0 +1,176 @@
+'use strict';
+
+/**
+ * `gitset repo <about|license|backup>` — local, BYOAI, no backend.
+ *
+ *  about   : AI description + topics from local repo context, applied via `gh`
+ *  license : delegates to the local license generator
+ *  backup  : writes a SECURE local GitHub Actions mirror workflow. We NEVER
+ *            handle the user's PAT (the old remote/PAT flow was insecure and
+ *            half-broken — removed). The user sets one repo secret in GitHub.
+ */
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+const readline = require('readline');
+const genLocal = require('../../lib/generate-local');
+const { runLicenseCommand } = require('./license');
+
+const tty = () => process.stdout.isTTY;
+const c = (code, s) => (tty() ? `\x1b[${code}m${s}\x1b[0m` : s);
+const ask = (q) => new Promise((r) => {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  rl.question(q, (a) => { rl.close(); r(a.trim()); });
+});
+const flag = (argv, n) => {
+  const i = argv.indexOf(n);
+  return i !== -1 && argv[i + 1] && !argv[i + 1].startsWith('-') ? argv[i + 1] : null;
+};
+function git(args) {
+  try { return execFileSync('git', args, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'ignore'] }).trim(); }
+  catch { return null; }
+}
+function parseJsonish(text) {
+  let t = String(text).trim().replace(/^```[a-z]*\n?/i, '').replace(/\n?```$/i, '');
+  const a = t.indexOf('{'); const b = t.lastIndexOf('}');
+  if (a !== -1 && b !== -1) { try { return JSON.parse(t.slice(a, b + 1)); } catch {  } }
+  return { description: t.slice(0, 350), topics: [] };
+}
+
+async function aboutCmd(argv) {
+  const remote = git(['config', '--get', 'remote.origin.url']);
+  let owner = '', name = '';
+  const m = remote && remote.match(/[:/]([^/]+)\/([^/.]+)(?:\.git)?$/);
+  if (m) { owner = m[1]; name = m[2]; }
+  if (!name) { console.error(`${c('31', '✗')} No git remote origin found.`); return 1; }
+  console.log(`${c('1', `${owner}/${name}`)}`);
+
+  let ctx = '';
+  for (const f of ['README.md', 'package.json', 'pyproject.toml', 'Cargo.toml', 'go.mod']) {
+    if (fs.existsSync(f)) ctx += `\n--- ${f} ---\n${fs.readFileSync(f, 'utf8').slice(0, 6000)}\n`;
+  }
+  if (!ctx && !process.stdin.isTTY) { console.error(`${c('31', '✗')} No README/manifest; run interactively to describe it.`); return 1; }
+  if (!ctx) ctx = await ask('Briefly describe the project: ');
+
+  async function gen(previous, instruction) {
+    process.stderr.write(c('90', '… generating about\n'));
+    const r = await genLocal.generate({
+      tool: 'about',
+      ctx: { context: ctx, previous: previous || '', instruction: instruction || '' },
+      provider: flag(argv, '--provider'), model: flag(argv, '--model'), maxTokens: 1024,
+    });
+    return parseJsonish(r.text);
+  }
+
+  let data;
+  try { data = await gen(); }
+  catch (e) {
+    if (e instanceof genLocal.AIError) { console.error(`${c('31', '✗')} AI provider error (${e.code}): ${e.message}`); return 2; }
+    console.error(`${c('31', '✗')} ${e.message}`); return /gitset config/.test(e.message || '') ? 1 : 2;
+  }
+  let { description = '', topics = [] } = data;
+
+  const nonInteractive = !process.stdin.isTTY || argv.includes('--yes') || argv.includes('-y');
+  for (;;) {
+    console.log(`\n${c('1', 'Description:')} ${description}`);
+    console.log(`${c('1', 'Topics:')} ${(topics || []).join(', ')}`);
+    if (nonInteractive) {
+      if (!argv.includes('--apply')) return 0;
+    }
+    const action = nonInteractive ? 'apply'
+      : (await ask(`\n${c('1', '[a]')}pply to GitHub  ${c('1', '[r]')}efine  ${c('1', '[e]')}dit  ${c('1', '[q]')}uit > `)).toLowerCase();
+
+    if (action === 'q' || action === '') return 0;
+    if (action === 'a' || action === 'apply') {
+      try {
+        if (description) execFileSync('gh', ['repo', 'edit', `${owner}/${name}`, '--description', description], { stdio: 'ignore' });
+        if (topics && topics.length) {
+          const args = ['repo', 'edit', `${owner}/${name}`];
+          for (const t of topics) args.push('--add-topic', String(t).trim());
+          execFileSync('gh', args, { stdio: 'ignore' });
+        }
+        console.log(`${c('32', '✓')} Applied to ${owner}/${name}`);
+        return 0;
+      } catch {
+        console.error(`${c('31', '✗')} gh repo edit failed (is gh installed & authenticated?).`);
+        return 1;
+      }
+    }
+    if (action === 'e') {
+      description = (await ask(`Description: `)) || description;
+      const t = await ask('Topics (comma separated): ');
+      if (t) topics = t.split(',').map((x) => x.trim()).filter(Boolean);
+    }
+    if (action === 'r') {
+      const instr = await ask('Refinement instruction: ');
+      if (instr) { try { ({ description = description, topics = topics } = await gen(JSON.stringify({ description, topics }), instr)); } catch (e) { console.error(`${c('31', '✗')} ${e.message}`); } }
+    }
+  }
+}
+
+const BACKUP_WORKFLOW = (schedule) => `name: Gitset Backup Mirror
+# Pushes this repository to a mirror you control.
+# Set repo secret BACKUP_MIRROR_URL, e.g.
+#   https://<user>:<TOKEN>@github.com/<user>/<repo>-backup.git
+# (Create the token yourself in GitHub → Settings → Developer settings.
+#  Gitset never sees or stores it.)
+on:
+  schedule:
+    - cron: '${schedule}'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  mirror:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with: { fetch-depth: 0 }
+      - name: Push mirror
+        run: |
+          if [ -z "\${{ secrets.BACKUP_MIRROR_URL }}" ]; then
+            echo "::error::Set the BACKUP_MIRROR_URL repo secret."; exit 1
+          fi
+          git push --mirror "\${{ secrets.BACKUP_MIRROR_URL }}"
+`;
+
+async function backupCmd(argv) {
+  const schedules = { daily: '0 0 * * *', weekly: '0 0 * * 0', monthly: '0 0 1 * *' };
+  const sched = schedules[flag(argv, '--schedule') || 'daily'] || schedules.daily;
+  const dir = path.join(process.cwd(), '.github', 'workflows');
+  const file = path.join(dir, 'gitset-backup.yml');
+  if (fs.existsSync(file) && !argv.includes('--force')) {
+    console.error(`${c('31', '✗')} ${path.relative(process.cwd(), file)} exists. Use --force.`);
+    return 1;
+  }
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(file, BACKUP_WORKFLOW(sched));
+  console.log(`${c('32', '✓')} Wrote ${path.relative(process.cwd(), file)} (schedule: ${sched})`);
+  console.log(c('1', '\nNext (you control the credentials — Gitset never touches them):'));
+  console.log('  1. Create an empty mirror repo + a token with repo scope.');
+  console.log('  2. Repo → Settings → Secrets → Actions → add BACKUP_MIRROR_URL');
+  console.log('     = https://<user>:<TOKEN>@github.com/<user>/<repo>-backup.git');
+  console.log('  3. git add .github/workflows/gitset-backup.yml && commit && push\n');
+  return 0;
+}
+
+async function runRepoCommand(argv) {
+  const sub = argv[0] && !argv[0].startsWith('-') ? argv[0]
+    : argv.includes('--about') ? 'about'
+      : argv.includes('--license') ? 'license'
+        : argv.includes('--backup') ? 'backup' : null;
+
+  if (sub === 'about') return aboutCmd(argv.slice(1));
+  if (sub === 'license') return runLicenseCommand(argv.filter((a) => a !== 'license'));
+  if (sub === 'backup') return backupCmd(argv.slice(1));
+
+  console.log(`${c('1', 'gitset repo')} — repository tools (local, BYOAI)
+
+  gitset repo about     AI description + topics, applied via gh
+  gitset repo license   generate a LICENSE file (offline)
+  gitset repo backup    write a secure mirror-backup GitHub Actions workflow
+`);
+  return sub ? 1 : 0;
+}
+
+module.exports = { runRepoCommand };

package/src/commands/status.js

@@ -0,0 +1,56 @@
+'use strict';
+
+/**
+ * `gitset status` — local environment status. No backend, no gitset_key.
+ * Shows git state + configured BYOAI providers + vendored AI core.
+ */
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+const config = require('../../lib/config');
+
+const tty = () => process.stdout.isTTY;
+const c = (code, s) => (tty() ? `\x1b[${code}m${s}\x1b[0m` : s);
+const git = (args) => {
+  try { return execFileSync('git', args, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'ignore'] }).trim(); }
+  catch { return null; }
+};
+
+function runStatusCommand() {
+  console.log(c('1', '\nGitset — status\n'));
+
+  const inRepo = git(['rev-parse', '--is-inside-work-tree']) === 'true';
+  if (inRepo) {
+    const branch = git(['branch', '--show-current'])
+      || git(['symbolic-ref', '--short', 'HEAD'])
+      || 'HEAD (detached)';
+    const porcelain = git(['status', '--porcelain']) || '';
+    const lines = porcelain ? porcelain.split('\n') : [];
+    const staged = lines.filter((l) => l[0] && l[0] !== ' ' && l[0] !== '?').length;
+    const modified = lines.filter((l) => l[1] && l[1] !== ' ').length;
+    const untracked = lines.filter((l) => l.startsWith('??')).length;
+    console.log(`${c('36', 'git')}      branch ${c('1', branch)} · ${staged} staged · ${modified} modified · ${untracked} untracked`);
+  } else {
+    console.log(`${c('36', 'git')}      ${c('33', 'not a git repository')}`);
+  }
+
+  let providers = [];
+  try { providers = config.list(); } catch { providers = []; }
+  if (providers.length === 0) {
+    console.log(`${c('36', 'ai')}       ${c('33', 'no provider configured')} — run: gitset config set <provider> --key <key>`);
+  } else {
+    for (const p of providers) {
+      const def = p.isDefault ? c('32', ' (default)') : '';
+      const key = p.keyLast4 ? `••••${p.keyLast4}` : c('33', 'no key');
+      console.log(`${c('36', 'ai')}       ${p.provider}${def} — ${key}${p.model ? ` · ${p.model}` : ''}`);
+    }
+  }
+  console.log(`${c('36', 'config')}   ${config.FILE}`);
+
+  const aiOk = fs.existsSync(path.join(__dirname, '..', '..', 'lib', 'ai', 'index.js'));
+  console.log(`${c('36', 'core')}     vendored lib/ai ${aiOk ? c('32', 'present') : c('31', 'MISSING (run: pnpm sync:ai)')}`);
+  console.log();
+  return 0;
+}
+
+module.exports = { runStatusCommand };