@oss-autopilot/core 3.2.0 → 3.4.0

package/README.md

@@ -46,7 +46,7 @@ All commands support `--json` for structured output:
 {
   "success": true,
   "data": { ... },
-  "timestamp": "2026-02-28T12:00:00.000Z"
+  "timestamp": "2026-05-04T00:00:00.000Z"
 }
 ```
 

package/dist/cli-registry.js

@@ -69,6 +69,36 @@ function printRepos(repos) {
     }
 }
 export const commands = [
+    // ── Manifest (#1190) ───────────────────────────────────────────────────
+    // Lets the plugin's session-start hook verify CLI/plugin contract drift —
+    // it diffs the registered commands against `.claude-plugin/expected-cli-contract.json`
+    // and warns when the markdown layer references commands the CLI no longer
+    // exposes. Local-only: no GitHub access needed.
+    {
+        name: 'manifest',
+        localOnly: true,
+        register(program) {
+            program
+                .command('manifest')
+                .description('Print the CLI contract (registered commands + version) for plugin/MCP introspection (#1190)')
+                .option('--json', 'Output as JSON')
+                .action(async (options) => {
+                const { ManifestOutputSchema } = await import('./formatters/json.js');
+                await executeAction(options, async () => {
+                    const { getCLIVersion } = await import('./core/index.js');
+                    return {
+                        schemaVersion: 1,
+                        cliVersion: getCLIVersion(),
+                        commands: commands
+                            .map((c) => ({ name: c.name, localOnly: !!c.localOnly }))
+                            .sort((a, b) => a.name.localeCompare(b.name)),
+                    };
+                }, (data) => {
+                    console.log(`oss-autopilot v${data.cliVersion} (${data.commands.length} commands)`);
+                }, ManifestOutputSchema);
+            });
+        },
+    },
     // ── Daily ──────────────────────────────────────────────────────────────
     {
         name: 'daily',
@@ -473,7 +503,7 @@ export const commands = [
                         for await (const chunk of process.stdin) {
                             chunks.push(chunk);
                         }
-                        message = Buffer.concat(chunks).toString('utf-8').trim();
+                        message = Buffer.concat(chunks).toString('utf8').trim();
                     }
                     else {
                         message = messageParts.join(' ');
@@ -663,7 +693,7 @@ export const commands = [
                 .action(async (options) => {
                 try {
                     const port = parseInt(options.port, 10);
-                    if (isNaN(port) || port < 1 || port > 65535) {
+                    if (isNaN(port) || port < 1 || port > 65_535) {
                         console.error(`Invalid port number: "${options.port}". Must be an integer between 1 and 65535.`);
                         process.exit(1);
                     }
@@ -688,7 +718,7 @@ export const commands = [
                 .action(async (filePath, options) => {
                 const { ParseIssueListOutputSchema } = await import('./formatters/json.js');
                 await executeAction(options, async () => (await import('./commands/parse-list.js')).runParseList({ filePath }), async (data) => {
-                    const path = await import('path');
+                    const path = await import('node:path');
                     const resolvedPath = path.resolve(filePath);
                     console.log(`\n\ud83d\udccb Issue List: ${resolvedPath}\n`);
                     console.log(`Available: ${data.availableCount} | Completed: ${data.completedCount}\n`);
@@ -1093,6 +1123,12 @@ export const commands = [
     // ── Guidelines (#867) ──────────────────────────────────────────────────
     {
         name: 'guidelines',
+        // Skip the preAction auth gate so `guidelines view` works in local mode
+        // (returns storageMode: 'local-unavailable'). Subcommands that DO need
+        // GitHub auth — `store`/`reset` (Gist) and `fetch-corpus` (PR comment
+        // fetch) — call `requireGitHubToken()` themselves and surface a clear
+        // error. Pairs with the parent-chain walk in cli.ts preAction (#1208 M2).
+        localOnly: true,
         register(program) {
             const group = program
                 .command('guidelines')