delimit-cli 3.13.0 → 3.13.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [3.13.1] - 2026-03-27
+
+### Added
+- `delimit init` guided onboarding wizard with framework auto-detection (Express, NestJS, FastAPI, Django, Flask, Fastify, Hono, Next.js)
+- Interactive preset selection (strict/default/relaxed) with context-aware defaults
+- First lint runs automatically after init — see governance results in under 1 second
+- Zero-Spec baseline auto-saved for FastAPI/Express/NestJS projects on first init
+- GitHub Action workflow generation with confirmation prompt
+- `--yes` flag for non-interactive CI usage
+
+### Changed
+- `delimit init` now detects CI provider (GitHub Actions, GitLab) and adapts workflow generation
+- OpenAPI spec detection expanded to 17 common file locations
+
 ## [3.12.0] - 2026-03-26
 
 ### Added

package/README.md

@@ -6,6 +6,7 @@ Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, govern
 [![GitHub Action](https://img.shields.io/badge/GitHub%20Action-v1.6.0-blue)](https://github.com/marketplace/actions/delimit-api-governance)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 [![Glama](https://glama.ai/mcp/servers/delimit-ai/delimit-mcp-server/badges/score.svg)](https://glama.ai/mcp/servers/delimit-ai/delimit-mcp-server)
+[![API Governance](https://delimit-ai.github.io/badge/pass.svg)](https://github.com/marketplace/actions/delimit-api-governance)
 
 <p align="center">
   <img src="docs/demo.gif" alt="Delimit detecting breaking API changes" width="700">

package/bin/delimit-setup.js

@@ -47,6 +47,27 @@ function findGitDir(startDir) {
     return null;
 }
 
+/**
+ * Recursively find OpenAPI/Swagger spec files, ignoring node_modules.
+ */
+function findSpecFiles(dir, depth = 0) {
+    if (depth > 5) return [];
+    const results = [];
+    try {
+        const entries = fs.readdirSync(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.name === 'node_modules' || entry.name === '.git' || entry.name === 'vendor') continue;
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                results.push(...findSpecFiles(fullPath, depth + 1));
+            } else if (/^(openapi|swagger)[^/]*\.(ya?ml|json)$/i.test(entry.name)) {
+                results.push(path.relative(process.cwd(), fullPath));
+            }
+        }
+    } catch {}
+    return results;
+}
+
 async function main() {
     log('');
     log(blue('    ____  ________    ______  _____________'));
@@ -535,10 +556,17 @@ printf "  \${MAGENTA}\${BOLD}[Delimit]\${RESET} \${MAGENTA}═══════
 sleep 0.08
 printf "  \${GREEN}\${BOLD}[Delimit]\${RESET} \${GREEN}✓ Allowed\${RESET}\\n"
 echo ""
-for c in /usr/bin/${toolName} /usr/local/bin/${toolName} $HOME/.local/bin/${toolName}; do
-    [ -x "$c" ] && exec "$c" "$@"
+# Find real binary — check common paths then fallback to PATH search (excluding shim dir)
+SELF="$(readlink -f "$0" 2>/dev/null || echo "$0")"
+for c in /usr/bin/${toolName} /usr/local/bin/${toolName} "$HOME/.local/bin/${toolName}" "$(npm bin -g 2>/dev/null)/${toolName}"; do
+    [ -x "$c" ] && [ "$(readlink -f "$c" 2>/dev/null)" != "$SELF" ] && exec "$c" "$@"
 done
-echo "[Delimit] ${toolName} not found" >&2; exit 127
+# Last resort: search PATH excluding shim directory
+REAL=$(PATH=$(echo "$PATH" | tr ':' '\\n' | grep -v '.delimit/shims' | tr '\\n' ':') command -v ${toolName} 2>/dev/null)
+[ -x "$REAL" ] && exec "$REAL" "$@"
+echo "[Delimit] ${toolName} not found in PATH" >&2
+echo "  Install: npm install -g @anthropic-ai/claude-code" >&2
+exit 127
 `;
 
             for (const [tool, display] of [['claude', 'Claude'], ['codex', 'Codex'], ['gemini', 'Gemini CLI']]) {
@@ -717,8 +745,28 @@ echo "[Delimit] ${toolName} not found" >&2; exit 127
     }
     log('');
 
-    // Step 9: Done
-    step(10, 'Done!');
+    // Step 10: Auto-detect OpenAPI specs
+    step(10, 'Scanning for API specs...');
+
+    let detectedSpecs = [];
+    try {
+        const { minimatch } = (() => { try { return require('minimatch'); } catch { return { minimatch: null }; } })();
+        // Simple recursive glob for spec files
+        detectedSpecs = findSpecFiles(process.cwd());
+    } catch {}
+
+    if (detectedSpecs.length > 0) {
+        log(`  ${green('✓')} Found ${detectedSpecs.length} API spec(s):`);
+        detectedSpecs.forEach(s => log(`    ${s}`));
+        log('');
+        log(`  Try: ${bold(`npx delimit-cli lint ${detectedSpecs[0]}`)}`);
+    } else {
+        log(`  ${dim('  No OpenAPI/Swagger specs found in current directory')}`);
+    }
+    log('');
+
+    // Step 11: Done
+    step(11, 'Done!');
     log('');
     log(`  ${green('Delimit is installed.')} Your AI now has persistent memory and governance.`);
     log('');
@@ -730,22 +778,24 @@ echo "[Delimit] ${toolName} not found" >&2; exit 127
     log(`  ${green('✓')} ${tools.join(', ')}`);
 
     log('');
-    log('  Try it now:');
-    log(`  ${bold('$ claude')}`);
-    log('');
-    log(`  Then say: ${blue('"scan this project"')}`);
-    log('');
-    log('  Or try:');
-    log(`  ${dim('-')} "lint my API spec"                    ${dim('— catch breaking changes')}`);
-    log(`  ${dim('-')} "add to ledger: set up CI pipeline"  ${dim('— track tasks across sessions')}`);
-    log(`  ${dim('-')} "deliberate [question]"               ${dim('— multi-model AI consensus')}`);
+
+    // "What's next" box
+    log('  \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510');
+    log(`  \u2502  ${bold('What\'s next:')}                           \u2502`);
+    log('  \u2502                                         \u2502');
+    log(`  \u2502  1. ${blue('npx delimit-cli lint')}                \u2502`);
+    log(`  \u2502  2. ${blue('npx delimit-cli doctor')}              \u2502`);
+    log(`  \u2502  3. Add the GitHub Action to your repo  \u2502`);
+    log('  \u2502                                         \u2502');
+    log(`  \u2502  Docs: ${dim('https://delimit.ai/docs')}          \u2502`);
+    log(`  \u2502  Try:  ${dim('https://delimit.ai/try')}           \u2502`);
+    log('  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518');
     log('');
     log(`  ${dim('Config:')} ${MCP_CONFIG}`);
     log(`  ${dim('Server:')} ${actualServer}`);
     log(`  ${dim('Agents:')} ${AGENTS_DIR}`);
     log('');
-    log(`  ${dim('Docs:')} https://delimit.ai/docs`);
-    log(`  ${dim('GitHub:')} https://github.com/delimit-ai/delimit-mcp-server`);
+    log(`  ${bold('Keep Building.')}`);
     log('');
 }
 

package/lib/cross-model-hooks.js

@@ -167,12 +167,13 @@ function installClaudeHooks(tool, hookConfig) {
         }
     }
 
-    // PreToolUse hook for file edits
+    // PreToolUse hook — scoped to Edit/Write on OpenAPI/Swagger spec files
     if (hookConfig.pre_tool) {
         const preToolHook = {
             type: 'command',
-            command: `${npxCmd} hook pre-tool`,
-            matcher: 'Edit|Write|Bash',
+            command: `${npxCmd} hook pre-tool $TOOL_NAME`,
+            matcher: 'Edit|Write',
+            if: "Edit && (path_matches('**/openapi*') || path_matches('**/swagger*') || path_matches('**/*.yaml') || path_matches('**/*.yml'))",
         };
         if (!config.hooks.PreToolUse) {
             config.hooks.PreToolUse = [];
@@ -180,12 +181,40 @@ function installClaudeHooks(tool, hookConfig) {
         const existing = config.hooks.PreToolUse.find(
             h => h.command && h.command.includes('delimit-cli hook pre-tool')
         );
-        if (!existing) {
+        if (existing) {
+            // Upgrade existing hook to include conditional `if` field
+            if (!existing.if) {
+                existing.matcher = preToolHook.matcher;
+                existing.command = preToolHook.command;
+                existing.if = preToolHook.if;
+                changes.push('PreToolUse (upgraded)');
+            }
+        } else {
             config.hooks.PreToolUse.push(preToolHook);
             changes.push('PreToolUse');
         }
     }
 
+    // PreToolUse hook — pre-commit governance on git commit/push
+    if (hookConfig.pre_commit) {
+        const preCommitHook = {
+            type: 'command',
+            command: `${npxCmd} hook pre-commit`,
+            matcher: 'Bash',
+            if: "Bash && (input_contains('git commit') || input_contains('git push'))",
+        };
+        if (!config.hooks.PreToolUse) {
+            config.hooks.PreToolUse = [];
+        }
+        const existing = config.hooks.PreToolUse.find(
+            h => h.command && h.command.includes('delimit-cli hook pre-commit')
+        );
+        if (!existing) {
+            config.hooks.PreToolUse.push(preCommitHook);
+            changes.push('PreCommit');
+        }
+    }
+
     fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
     return changes;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "delimit-cli",
   "mcpName": "io.github.delimit-ai/delimit-mcp-server",
-  "version": "3.13.0",
+  "version": "3.13.2",
   "description": "Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, governance, and multi-model debate.",
   "main": "index.js",
   "files": [
@@ -9,6 +9,7 @@
     "lib/",
     "adapters/",
     "gateway/",
+    "scripts/",
     "server.json",
     "README.md",
     "LICENSE",
@@ -19,7 +20,7 @@
     "delimit-cli": "./bin/delimit-cli.js"
   },
   "scripts": {
-    "postinstall": "echo '\\nRun: npx delimit-cli setup\\n'",
+    "postinstall": "node scripts/postinstall.js",
     "test": "node --test tests/setup-onboarding.test.js tests/setup-matrix.test.js tests/config-export-import.test.js tests/cross-model-hooks.test.js"
   },
   "keywords": [

package/scripts/postinstall.js

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+/**
+ * Postinstall — anonymous install ping + setup hint.
+ * No PII. Silent fail. Never blocks install.
+ */
+
+// Print setup hint
+console.log('\n  Run: npx delimit-cli setup\n');
+
+// Anonymous telemetry ping — no PII, just "someone installed"
+try {
+    const https = require('https');
+    const data = JSON.stringify({
+        event: 'install',
+        version: require('../package.json').version,
+        node: process.version,
+        platform: process.platform,
+        arch: process.arch,
+        ts: new Date().toISOString()
+    });
+    const req = https.request({
+        hostname: 'delimit.ai',
+        path: '/api/telemetry',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(data)
+        },
+        timeout: 3000
+    });
+    req.on('error', () => {}); // silent fail
+    req.on('timeout', () => { req.destroy(); });
+    req.write(data);
+    req.end();
+} catch (e) { /* silent fail */ }

package/scripts/weekly-tweet.py

@@ -0,0 +1,191 @@
+#!/usr/bin/env python3
+"""
+Weekly Activity Tweet for @delimit_ai.
+
+Gathers GitHub activity stats across delimit-ai repos and npm download
+counts, then posts a summary tweet via the Twitter API.
+
+Reads Twitter credentials from environment variables (for GitHub Actions).
+"""
+
+import os
+import sys
+import json
+from datetime import datetime, timedelta, timezone
+
+import requests
+import tweepy
+
+ORG = "delimit-ai"
+NPM_PACKAGE = "delimit-cli"
+GITHUB_API = "https://api.github.com"
+NPM_API = "https://api.npmjs.org"
+
+
+def get_org_repos():
+    """Fetch all public repos for the org."""
+    repos = []
+    page = 1
+    while True:
+        resp = requests.get(
+            f"{GITHUB_API}/orgs/{ORG}/repos",
+            params={"type": "public", "per_page": 100, "page": page},
+        )
+        if resp.status_code != 200:
+            break
+        batch = resp.json()
+        if not batch:
+            break
+        repos.extend(batch)
+        page += 1
+    return repos
+
+
+def get_total_stars(repos):
+    """Sum stargazers across all repos."""
+    return sum(r.get("stargazers_count", 0) for r in repos)
+
+
+def get_commits_last_week(repos):
+    """Count commits in the last 7 days across all repos."""
+    since = (datetime.now(timezone.utc) - timedelta(days=7)).isoformat()
+    total = 0
+    for repo in repos:
+        name = repo["full_name"]
+        page = 1
+        while True:
+            resp = requests.get(
+                f"{GITHUB_API}/repos/{name}/commits",
+                params={"since": since, "per_page": 100, "page": page},
+            )
+            if resp.status_code != 200:
+                break
+            batch = resp.json()
+            if not batch:
+                break
+            total += len(batch)
+            if len(batch) < 100:
+                break
+            page += 1
+    return total
+
+
+def get_prs_merged_last_week(repos):
+    """Count PRs merged in the last 7 days."""
+    since = (datetime.now(timezone.utc) - timedelta(days=7)).isoformat()
+    total = 0
+    for repo in repos:
+        name = repo["full_name"]
+        resp = requests.get(
+            f"{GITHUB_API}/repos/{name}/pulls",
+            params={"state": "closed", "sort": "updated", "direction": "desc", "per_page": 100},
+        )
+        if resp.status_code != 200:
+            continue
+        for pr in resp.json():
+            if pr.get("merged_at") and pr["merged_at"] >= since:
+                total += 1
+    return total
+
+
+def get_issues_stats(repos):
+    """Count issues opened and closed in the last 7 days."""
+    since = (datetime.now(timezone.utc) - timedelta(days=7)).isoformat()
+    opened = 0
+    closed = 0
+    for repo in repos:
+        name = repo["full_name"]
+        # Opened
+        resp = requests.get(
+            f"{GITHUB_API}/repos/{name}/issues",
+            params={"state": "all", "since": since, "per_page": 100},
+        )
+        if resp.status_code == 200:
+            for issue in resp.json():
+                if issue.get("pull_request"):
+                    continue
+                if issue.get("created_at", "") >= since:
+                    opened += 1
+                if issue.get("closed_at") and issue["closed_at"] >= since:
+                    closed += 1
+    return opened, closed
+
+
+def get_npm_downloads():
+    """Get npm download count for the last week."""
+    resp = requests.get(f"{NPM_API}/downloads/point/last-week/{NPM_PACKAGE}")
+    if resp.status_code != 200:
+        return 0
+    return resp.json().get("downloads", 0)
+
+
+def format_tweet(npm_downloads, total_stars, prs_merged, commits):
+    """Format the weekly summary tweet."""
+    lines = ["This week at Delimit:", ""]
+    if npm_downloads > 0:
+        lines.append(f"\U0001f4e6 {npm_downloads:,} npm downloads")
+    if total_stars > 0:
+        lines.append(f"\u2b50 {total_stars:,} stars")
+    if prs_merged > 0:
+        lines.append(f"\U0001f500 {prs_merged:,} PRs merged")
+    if commits > 0:
+        lines.append(f"\U0001f6e0\ufe0f {commits:,} commits")
+    lines.append("")
+    lines.append("Keep Building.")
+    lines.append("")
+    lines.append("delimit.ai")
+    return "\n".join(lines)
+
+
+def post_tweet(text):
+    """Post tweet using tweepy with OAuth 1.0a credentials from env vars."""
+    consumer_key = os.environ.get("TWITTER_CONSUMER_KEY")
+    consumer_secret = os.environ.get("TWITTER_CONSUMER_SECRET")
+    access_token = os.environ.get("TWITTER_ACCESS_TOKEN")
+    access_token_secret = os.environ.get("TWITTER_ACCESS_TOKEN_SECRET")
+
+    if not all([consumer_key, consumer_secret, access_token, access_token_secret]):
+        print("ERROR: Missing Twitter credentials in environment variables.")
+        sys.exit(1)
+
+    client = tweepy.Client(
+        consumer_key=consumer_key,
+        consumer_secret=consumer_secret,
+        access_token=access_token,
+        access_token_secret=access_token_secret,
+    )
+    response = client.create_tweet(text=text)
+    print(f"Tweet posted: https://x.com/delimit_ai/status/{response.data['id']}")
+
+
+def main():
+    print("Gathering weekly stats for delimit-ai...")
+
+    repos = get_org_repos()
+    print(f"  Found {len(repos)} public repos")
+
+    npm_downloads = get_npm_downloads()
+    print(f"  npm downloads (last week): {npm_downloads}")
+
+    total_stars = get_total_stars(repos)
+    print(f"  Total stars: {total_stars}")
+
+    prs_merged = get_prs_merged_last_week(repos)
+    print(f"  PRs merged (last week): {prs_merged}")
+
+    commits = get_commits_last_week(repos)
+    print(f"  Commits (last week): {commits}")
+
+    # Don't tweet if there's nothing to report
+    if npm_downloads == 0 and total_stars == 0 and prs_merged == 0 and commits == 0:
+        print("No activity this week. Skipping tweet.")
+        return
+
+    tweet_text = format_tweet(npm_downloads, total_stars, prs_merged, commits)
+    print(f"\nTweet ({len(tweet_text)} chars):\n{tweet_text}\n")
+
+    post_tweet(tweet_text)
+
+
+if __name__ == "__main__":
+    main()