@specship/specship-win32-arm64 0.18.1 → 0.19.1

package/lib/dist/bin/specship.js

@@ -2163,6 +2163,7 @@ function main() {
         .option('--no-permissions', 'Skip writing the auto-allow permissions list')
         .option('--sdd', '(default) Install the spec-driven-development governance tier (spec/authoring/review/design commands + the spec-author nudge hook)')
         .option('--no-sdd', 'Skip the governance tier — retrieval-only install (the pre-0.18 default)')
+        .option('--path <repo>', 'Target repo to wire and initialize (default: current directory). Project-local files and the .specship index land there')
         .option('--with-jira', 'Enable the optional JIRA integration (talks to your Atlassian instance; off by default — the core install is 100% local)')
         .option('--with-designer', 'Enable the optional Designer integration (EXPERIMENTAL — drives claude.ai/design via a debug Chrome session and may break without notice; off by default)')
         .option('--statusline', 'Wire the SpecShip status-line segment into Claude (skips the prompt; never overwrites an existing status line)')
@@ -2179,6 +2180,18 @@ function main() {
             process.stdout.write(claudeTarget.printConfig(loc));
             return;
         }
+        // Target repo (INSTALL-SCOPE-DOC, REQ-SCOPE-002): the project-local
+        // wiring and the .specship index land in --path, not wherever the
+        // command happened to run. Same semantics as the bundle installer's
+        // --path — implemented the same way (the local writers are cwd-based).
+        if (opts.path) {
+            const target = path.resolve(opts.path);
+            if (!fs.existsSync(target) || !fs.statSync(target).isDirectory()) {
+                error(`--path '${opts.path}' is not a directory`);
+                process.exit(1);
+            }
+            process.chdir(target);
+        }
         const { runInstallerWithOptions } = await Promise.resolve().then(() => __importStar(require('../installer')));
         if (opts.location && opts.location !== 'global' && opts.location !== 'local') {
             error(`--location must be "global" or "local" (got "${opts.location}").`);
@@ -3083,6 +3096,8 @@ function main() {
         .option('--api-token <token>', 'Cloud: API token (paired with --email)')
         .option('--pat <token>', 'Data Center: personal access token')
         .option('--deployment <kind>', 'Deployment kind: "cloud" or "datacenter" (inferred if omitted)')
+        .option('--ca-cert <pem>', 'Path to a PEM CA bundle for a corporate/self-signed certificate (Data Center)')
+        .option('--insecure-tls', 'Disable TLS certificate verification for JIRA requests only (last resort)')
         .action(async (opts) => {
         const { saveJiraConfig, resolveJiraCredentials, inferDeployment, jiraConfigPath, JiraClient, JiraAuthError, } = await Promise.resolve().then(() => __importStar(require('../jira')));
         const clack = await importESM('@clack/prompts');
@@ -3109,7 +3124,7 @@ function main() {
             }
             else {
                 const baseUrl = opts.baseUrl ?? (await clack.text({
-                    message: 'JIRA base URL',
+                    message: 'JIRA base URL (include the context path if your instance has one, e.g. https://host:8443/jira)',
                     placeholder: 'https://acme.atlassian.net',
                     validate: (v) => (v && v.trim() ? undefined : 'Required'),
                 }));
@@ -3161,6 +3176,21 @@ function main() {
                     config.pat = String(pat);
                 }
             }
+            // Corporate TLS opt-ins (REQ-JIRATLS-001) — flags apply on both the
+            // flagged and interactive paths.
+            if (opts.caCert) {
+                const caPath = opts.caCert.trim();
+                if (!fs.existsSync(caPath)) {
+                    clack.log.error(`CA certificate not found: ${caPath}`);
+                    process.exit(1);
+                }
+                config.caCertPath = caPath;
+            }
+            if (opts.insecureTls) {
+                config.insecureTls = true;
+                clack.log.warn('TLS certificate verification is DISABLED for JIRA requests. ' +
+                    'Prefer --ca-cert with your corporate CA bundle when possible.');
+            }
             saveJiraConfig(config);
             // NOTE: never print the credential — only the path.
             clack.log.success(`Saved credentials to ${jiraConfigPath()} (permissions 0600).`);