@popoverai/dotrequirements 0.24.0 → 0.24.1

package/README.md

@@ -9,7 +9,7 @@ Tests prove *something* works—but nobody is certain it's the right something.
 
 **dot•requirements** closes this gap. Write requirements as structured Markdown, reference them directly in tests, and see coverage update automatically. When a requirement changes, the tests that validate it are one click away.
 
-> **Alpha Software** — Under active development. Please report issues to support@popover.ca.
+> **Alpha Software** — Under active development. Please report issues to support@dotrequirements.io.
 
 ## Who Is This For?
 
@@ -253,7 +253,7 @@ dotreq cts skill-install                   # install the conversational skill wr
 
 `cts` shells out to `claude -p` and uses whatever auth mode you've configured for Claude Code. Each pipeline stage is also runnable on its own (`dotreq cts pack`, `plan-loop`, `fan-out`, `compose`, `edit-loop`, `present`) for partial re-runs and debugging.
 
-> **Alpha:** output quality is prompt-sensitive and varies by codebase. See the [Codebase to Spec docs](https://dotrequirements.io/tools/cli/codebase-to-spec) for prerequisites, options, exit codes, and known rough edges. Feedback to support@popover.ca welcome.
+> **Alpha:** output quality is prompt-sensitive and varies by codebase. See the [Codebase to Spec docs](https://docs.dotrequirements.io/tools/cli/codebase-to-spec) for prerequisites, options, exit codes, and known rough edges. Feedback to support@dotrequirements.io welcome.
 
 > **Heads up:** as of June 15, 2026, `claude -p` bills against your Claude subscription's API credit instead of the subscription seat (per Anthropic's May 13, 2026 announcement). `cts` runs will draw from that credit.
 
@@ -725,7 +725,7 @@ This file is automatically added to `.gitignore` during initialization.
 
 - [Documentation](https://docs.dotrequirements.io)
 - [Getting Started Guide](https://docs.dotrequirements.io/getting-started)
-- [Support](mailto:support@popover.ca)
+- [Support](mailto:support@dotrequirements.io)
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@popoverai/dotrequirements",
-  "version": "0.24.0",
+  "version": "0.24.1",
   "description": "Requirements tracking CLI, test harness, and MCP server",
   "type": "module",
   "bin": {
@@ -42,7 +42,7 @@
   "license": "MIT",
   "homepage": "https://dotrequirements.io",
   "bugs": {
-    "email": "support@popover.ca"
+    "email": "support@dotrequirements.io"
   },
   "engines": {
     "node": ">=18"

package/dist/codebase-to-spec/prompts/planner-apply.d.ts

@@ -1,12 +0,0 @@
-/**
- * System prompt for the applying planner (apply mode).
- *
- * Receives the prior outline + an explicit list of mechanical revisions and
- * applies them verbatim. Used when the reviewer's verdict was
- * `approved-with-revisions`.
- *
- * Requirements covered:
- * - CTS-PLAN-4: Approved-with-revisions outline triggers one mechanical revision
- */
-export declare const PLANNER_APPLY_PROMPT = "You are applying mechanical revisions to a planning outline. A reviewer has approved the outline subject to a specific list of small revisions. Your job is to apply each revision verbatim and emit the revised outline.\n\nYou are NOT revising the outline using your own judgment. You are NOT adding new areas, dropping existing areas, or restructuring. You ONLY apply the listed revisions.\n\nYou will output a JSON object matching the schema you have been given. No prose preamble, no explanation, no markdown fences \u2014 JSON only.\n\nYou will receive:\n1. The previous outline as JSON\n2. An explicit list of revisions, each phrased as a directive\n\n## Process\n\nFor each revision in the list:\n- Apply the directive exactly as stated.\n- If the directive is ambiguous or would require new judgment, leave that area unchanged and proceed.\n\nPreserve everything else from the prior outline byte-for-byte (modulo the listed changes).\n\n## Output\n\nOutput ONLY the JSON object matching the supplied schema. No preamble. Begin with `{`.";
-//# sourceMappingURL=planner-apply.d.ts.map

package/dist/codebase-to-spec/prompts/planner-apply.js

@@ -1,32 +0,0 @@
-/**
- * System prompt for the applying planner (apply mode).
- *
- * Receives the prior outline + an explicit list of mechanical revisions and
- * applies them verbatim. Used when the reviewer's verdict was
- * `approved-with-revisions`.
- *
- * Requirements covered:
- * - CTS-PLAN-4: Approved-with-revisions outline triggers one mechanical revision
- */
-export const PLANNER_APPLY_PROMPT = `You are applying mechanical revisions to a planning outline. A reviewer has approved the outline subject to a specific list of small revisions. Your job is to apply each revision verbatim and emit the revised outline.
-
-You are NOT revising the outline using your own judgment. You are NOT adding new areas, dropping existing areas, or restructuring. You ONLY apply the listed revisions.
-
-You will output a JSON object matching the schema you have been given. No prose preamble, no explanation, no markdown fences — JSON only.
-
-You will receive:
-1. The previous outline as JSON
-2. An explicit list of revisions, each phrased as a directive
-
-## Process
-
-For each revision in the list:
-- Apply the directive exactly as stated.
-- If the directive is ambiguous or would require new judgment, leave that area unchanged and proceed.
-
-Preserve everything else from the prior outline byte-for-byte (modulo the listed changes).
-
-## Output
-
-Output ONLY the JSON object matching the supplied schema. No preamble. Begin with \`{\`.`;
-//# sourceMappingURL=planner-apply.js.map

package/dist/commands/browsertest.d.ts

@@ -1,6 +0,0 @@
-interface BrowserTestOptions {
-    json?: boolean;
-}
-export declare function browserTestCommand(requirementKey: string, url: string | undefined, options: BrowserTestOptions): Promise<void>;
-export {};
-//# sourceMappingURL=browsertest.d.ts.map

package/dist/commands/browsertest.js

@@ -1,212 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { formatRequirement, getRequirementTree, loadAllRequirements, } from "../mcp/requirements.js";
-import { getProjectInfo, readProjectSettings, } from "../utils/project-settings.js";
-const execFileAsync = promisify(execFile);
-function extractResults(parsed) {
-    if (Array.isArray(parsed))
-        return parsed;
-    if (parsed && typeof parsed === "object") {
-        const obj = parsed;
-        // { results: [...] } format
-        if (Array.isArray(obj.results))
-            return obj.results;
-        // { structured_output: { results: [...] } } format
-        if (obj.structured_output && typeof obj.structured_output === "object") {
-            const so = obj.structured_output;
-            if (Array.isArray(so.results))
-                return so.results;
-        }
-    }
-    throw new Error("Unexpected browser-automation output format");
-}
-export async function browserTestCommand(requirementKey, url, options) {
-    // 1. Find project and load settings
-    const projectInfo = getProjectInfo();
-    if (!projectInfo) {
-        console.error("Error: No dotrequirements project found.");
-        console.log('Run "dotrequirements init" to create one.');
-        process.exit(1);
-    }
-    let settings;
-    try {
-        settings = readProjectSettings(projectInfo.rootPath);
-    }
-    catch (err) {
-        // Settings file exists but is invalid
-        console.error(`Error: ${err.message}`);
-        process.exit(1);
-    }
-    // 2. Determine URL
-    const targetURL = url || settings?.defaultURL;
-    if (!targetURL) {
-        console.error("Error: No URL provided and no defaultURL in project-settings.json.");
-        console.log('Either provide a URL argument or add "defaultURL" to .requirements/project-settings.json');
-        process.exit(1);
-    }
-    // 3. Resolve model config
-    const modelName = settings?.browserTest?.modelName;
-    const modelApiKey = settings?.browserTest?.modelApiKey;
-    const geminiApiKey = settings?.browserTest?.geminiApiKey;
-    if (!modelName && !modelApiKey && !geminiApiKey) {
-        console.error("Error: no browser-test model configured in project-settings.json.");
-        console.log("Add a block like:\n" +
-            '  "browserTest": {\n' +
-            '    "modelName": "gateway/anthropic/claude-haiku-4-5",\n' +
-            '    "modelApiKey": "..."\n' +
-            "  }\n" +
-            "to .requirements/project-settings.json. See the docs for supported models.");
-        process.exit(1);
-    }
-    if ((modelName && !modelApiKey) || (modelApiKey && !modelName)) {
-        console.error("Error: browserTest.modelName and browserTest.modelApiKey must be set together.");
-        process.exit(1);
-    }
-    // 4. Load requirements
-    const { flattened } = await loadAllRequirements(projectInfo.rootPath);
-    if (flattened.length === 0) {
-        console.error("Error: No requirements found in .requirements/");
-        process.exit(1);
-    }
-    // 5. Find the requirement tree
-    const requirementTree = getRequirementTree(flattened, requirementKey);
-    if (requirementTree.length === 0) {
-        console.error(`Error: Requirement "${requirementKey}" not found.`);
-        process.exit(1);
-    }
-    // 6. Format each requirement as an assertion
-    const assertions = requirementTree.map((req) => formatRequirement(req));
-    // 7. Build environment with injected secrets
-    const env = { ...process.env };
-    // env var keeps the key out of process listings (not a CLI flag)
-    if (modelApiKey) {
-        env.MODEL_API_KEY = modelApiKey;
-    }
-    else if (geminiApiKey) {
-        env.GEMINI_API_KEY = geminiApiKey;
-    }
-    if (settings?.browserTest?.vercelBypassSecret) {
-        env.VERCEL_AUTOMATION_BYPASS_SECRET =
-            settings.browserTest.vercelBypassSecret;
-    }
-    if (settings?.browserTest?.browserbaseApiKey) {
-        env.BROWSERBASE_API_KEY = settings.browserTest.browserbaseApiKey;
-    }
-    if (settings?.browserTest?.browserbaseProjectId) {
-        env.BROWSERBASE_PROJECT_ID = settings.browserTest.browserbaseProjectId;
-    }
-    // 8. Run browser-automation
-    if (!options.json) {
-        console.log(`Testing ${requirementKey} against ${targetURL}...\n`);
-    }
-    try {
-        const modelFlags = modelName ? ["--modelName", modelName] : [];
-        const { stdout } = await execFileAsync("npx", [
-            "@popoverai/browser-automation",
-            "test",
-            ...modelFlags,
-            targetURL,
-            ...assertions,
-        ], { env, maxBuffer: 10 * 1024 * 1024 });
-        // 9. Parse results
-        let results;
-        try {
-            const parsed = JSON.parse(stdout.trim());
-            results = extractResults(parsed);
-        }
-        catch (parseErr) {
-            console.error("Error: Could not parse browser-automation output");
-            console.error(parseErr.message);
-            console.error(stdout);
-            process.exit(1);
-        }
-        // 10. Display results
-        if (options.json) {
-            outputJson(requirementTree, results);
-        }
-        else {
-            displayResults(requirementTree, results);
-        }
-        // 11. Exit with appropriate code
-        const failedCount = results.filter((r) => r.status !== "passed").length;
-        if (failedCount > 0) {
-            process.exit(1);
-        }
-    }
-    catch (err) {
-        const error = err;
-        // browser-automation returns exit code 1 on failure, but still outputs JSON
-        if (error.stdout) {
-            try {
-                const parsed = JSON.parse(error.stdout.trim());
-                const results = extractResults(parsed);
-                if (options.json) {
-                    outputJson(requirementTree, results);
-                }
-                else {
-                    displayResults(requirementTree, results);
-                }
-                process.exit(1);
-            }
-            catch {
-                // Not JSON, show raw output
-                console.error("browser-automation error:");
-                if (error.stdout)
-                    console.error(error.stdout);
-                if (error.stderr)
-                    console.error(error.stderr);
-                process.exit(1);
-            }
-        }
-        else {
-            console.error(`Error running browser-automation: ${error.message}`);
-            if (error.stderr)
-                console.error(error.stderr);
-            process.exit(1);
-        }
-    }
-}
-function displayResults(requirements, results) {
-    let passedCount = 0;
-    let failedCount = 0;
-    for (let i = 0; i < requirements.length; i++) {
-        const req = requirements[i];
-        const result = results[i];
-        if (!result) {
-            console.log(`  ? ${req.id}: No result`);
-            failedCount++;
-            continue;
-        }
-        const indent = "  ".repeat(req.path.length);
-        const label = req.label ? ` (${req.label})` : "";
-        const icon = result.status === "passed" ? "\u2713" : "\u2717";
-        console.log(`${indent}${icon} ${req.id}${label}: ${req.content}`);
-        if (result.status !== "passed" && result.notes) {
-            console.log(`${indent}  \u2192 ${result.notes}`);
-        }
-        if (result.status === "passed") {
-            passedCount++;
-        }
-        else {
-            failedCount++;
-        }
-    }
-    console.log();
-    if (failedCount === 0) {
-        console.log(`${passedCount}/${requirements.length} passed`);
-    }
-    else {
-        console.log(`${passedCount}/${requirements.length} passed, ${failedCount} failed`);
-    }
-}
-function outputJson(requirements, results) {
-    const combined = requirements.map((req, i) => ({
-        id: req.id,
-        label: req.label || null,
-        content: req.content,
-        status: results[i]?.status || "blocked",
-        notes: results[i]?.notes || null,
-    }));
-    console.log(JSON.stringify(combined, null, 2));
-}
-//# sourceMappingURL=browsertest.js.map

package/dist/commands/login.d.ts

@@ -1,12 +0,0 @@
-/**
- * Login command - authenticate with WorkOS and manage project credentials.
- *
- * Implements:
- * - LOGIN-1: CLI OAuth implementation
- * - LOGIN-2: Upgrade from placeholder to real credentials
- * - LOGIN-3: Refresh existing project credentials
- * - LOGIN-4: Already logged in detection
- * - LOGIN-6: Handle missing .env.local
- */
-export declare function loginCommand(): Promise<void>;
-//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.js

@@ -1,117 +0,0 @@
-/**
- * Login command - authenticate with WorkOS and manage project credentials.
- *
- * Implements:
- * - LOGIN-1: CLI OAuth implementation
- * - LOGIN-2: Upgrade from placeholder to real credentials
- * - LOGIN-3: Refresh existing project credentials
- * - LOGIN-4: Already logged in detection
- * - LOGIN-6: Handle missing .env.local
- */
-import { executeOAuthFlow } from '../utils/oauth-flow.js';
-import { getConvexUrl } from '../config.js';
-import { hasValidTokens } from '../utils/token-storage.js';
-import { isLocalOnlyProject } from '../utils/local-project.js';
-import * as fs from 'fs';
-import { ConvexHttpClient } from 'convex/browser';
-import { findUp } from 'find-up';
-import { brand } from '../utils/brand.js';
-export async function loginCommand() {
-    console.log(`Logging in to ${brand}...\n`);
-    // LOGIN-4: Check if already logged in
-    if (await hasValidTokens()) {
-        console.log('✓ Already logged in');
-        console.log('Run "dotrequirements logout" to log in as a different user.');
-        return;
-    }
-    // LOGIN-1: Execute OAuth flow
-    const result = await executeOAuthFlow();
-    console.log('\n✓ Logged in successfully!');
-    // LOGIN-6: Check if there's a .env.local in the current directory
-    const envPath = await findUp('.env.local');
-    if (envPath) {
-        await handleExistingProject(envPath, result.accessToken);
-    }
-    else {
-        // LOGIN-6.1: No project in current directory
-        console.log('\nNo project found in this directory.');
-        console.log('Run "dotrequirements init" to create a new project in the current directory.');
-    }
-}
-/**
- * Handle existing project based on credential type (placeholder vs real)
- */
-async function handleExistingProject(envPath, accessToken) {
-    try {
-        // Read .env.local to get project ID and secret
-        const envContent = fs.readFileSync(envPath, 'utf-8');
-        const projectIdMatch = envContent.match(/DOTREQUIREMENTS_PROJECT_ID=(.+)/);
-        const secretMatch = envContent.match(/DOTREQUIREMENTS_PROJECT_SECRET=(.+)/);
-        if (!projectIdMatch || !secretMatch) {
-            console.log('\n.env.local found but missing project credentials.');
-            return;
-        }
-        const projectId = projectIdMatch[1].trim();
-        const projectSecret = secretMatch[1].trim();
-        const convexUrl = getConvexUrl();
-        const client = new ConvexHttpClient(convexUrl);
-        client.setAuth(accessToken);
-        // LOGIN-2: Check if placeholder credentials
-        if (isLocalOnlyProject(projectId)) {
-            await upgradeFromPlaceholder(envPath, envContent, client);
-        }
-        else {
-            // LOGIN-3: Refresh existing project credentials
-            await refreshCredentials(envPath, envContent, projectId, client);
-        }
-    }
-    catch (error) {
-        console.error('\nFailed to update project credentials:');
-        console.error(error instanceof Error ? error.message : String(error));
-        console.log('\nYour authentication was successful.');
-        console.log('You can continue using the project with its existing credentials.');
-    }
-}
-/**
- * LOGIN-2: Upgrade from placeholder credentials to real project
- */
-async function upgradeFromPlaceholder(envPath, envContent, client) {
-    console.log('\nUpgrading from local-only mode to cloud access...');
-    // LOGIN-2.0, LOGIN-2.1: Create team and project
-    const result = await client.mutation('lib/authMutations:createProjectForAuthenticatedUser', {});
-    if (!result.success) {
-        throw new Error(result.error || 'Unknown error');
-    }
-    console.log('✓ Created new project in your team');
-    // LOGIN-2.3: Update .env.local with real credentials
-    const updatedEnv = envContent
-        .replace(/DOTREQUIREMENTS_PROJECT_ID=.+/, `DOTREQUIREMENTS_PROJECT_ID=${result.projectId}`)
-        .replace(/DOTREQUIREMENTS_PROJECT_SECRET=.+/, `DOTREQUIREMENTS_PROJECT_SECRET=${result.projectSecret}`);
-    fs.writeFileSync(envPath, updatedEnv);
-    console.log('✓ Updated .env.local with cloud credentials');
-    // LOGIN-2.4: Display next steps
-    console.log('\nYour project is now connected to the cloud!');
-    console.log('Run "dotrequirements push" to sync your requirements.');
-}
-/**
- * LOGIN-3: Refresh existing project credentials
- */
-async function refreshCredentials(envPath, envContent, projectId, client) {
-    console.log('\nRefreshing your project credentials...');
-    // LOGIN-3.0: Verify access and generate new secret
-    const result = await client.mutation('lib/authMutations:refreshProjectSecret', {
-        projectId: projectId, // Cast to Id<"projects">
-    });
-    if (!result.success) {
-        // LOGIN-3.4: User doesn't have access
-        throw new Error(result.error || 'Unknown error');
-    }
-    // LOGIN-3.2: Update .env.local with new secret
-    const updatedEnv = envContent.replace(/DOTREQUIREMENTS_PROJECT_SECRET=.+/, `DOTREQUIREMENTS_PROJECT_SECRET=${result.projectSecret}`);
-    fs.writeFileSync(envPath, updatedEnv);
-    // LOGIN-3.3: Confirm access extended
-    const expiryDate = new Date(result.expiresAt).toLocaleDateString();
-    console.log(`✓ Access extended until ${expiryDate}`);
-    console.log('✓ Updated .env.local with new credentials');
-}
-//# sourceMappingURL=login.js.map

package/dist/commands/logout.d.ts

@@ -1,5 +0,0 @@
-/**
- * Logout command - clear stored authentication tokens.
- */
-export declare function logoutCommand(): Promise<void>;
-//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.js

@@ -1,17 +0,0 @@
-/**
- * Logout command - clear stored authentication tokens.
- */
-import { deleteTokens, hasValidTokens } from '../utils/token-storage.js';
-export async function logoutCommand() {
-    const wasLoggedIn = await hasValidTokens();
-    await deleteTokens();
-    if (wasLoggedIn) {
-        console.log('Logged out successfully.');
-    }
-    else {
-        console.log('No active session found.');
-    }
-    console.log('\nYour project credentials in .env.local are unchanged.');
-    console.log('Run "dotrequirements login" to authenticate again.');
-}
-//# sourceMappingURL=logout.js.map

package/dist/commands/mcp-setup.d.ts

@@ -1,5 +0,0 @@
-/**
- * MCP setup command - configures the MCP server for AI assistants
- */
-export declare function mcpSetupCommand(): Promise<void>;
-//# sourceMappingURL=mcp-setup.d.ts.map