delimit-cli 3.14.11 → 3.14.13

package/README.md

@@ -121,6 +121,7 @@ That's it. Delimit auto-fetches the base branch spec, diffs it, and posts a PR c
 ## CLI commands
 
 ```bash
+npx delimit-cli quickstart                       # Clone demo project + guided walkthrough
 npx delimit-cli try                              # Zero-risk demo — saves governance report
 npx delimit-cli demo                             # Self-contained governance demo
 npx delimit-cli init                             # Guided wizard with compliance templates

package/bin/delimit-cli.js

@@ -1538,6 +1538,112 @@ program
         try { fs.rmSync(tmpDir, { recursive: true }); } catch {}
     });
 
+// Quickstart command — clone demo repo + guided walkthrough (LED-267)
+program
+    .command('quickstart')
+    .description('Clone a demo project and walk through governance in 5 minutes')
+    .action(async () => {
+        const targetDir = path.join(process.cwd(), 'delimit-demo');
+
+        console.log(chalk.bold('\n  Delimit Quickstart\n'));
+        console.log(chalk.gray('  Clone a demo API project with a pre-broken spec,'));
+        console.log(chalk.gray('  then walk through the governance flow step by step.\n'));
+
+        // Step 1: Clone the quickstart repo
+        if (fs.existsSync(targetDir)) {
+            console.log(chalk.yellow(`  ${targetDir} already exists. Using existing directory.\n`));
+        } else {
+            console.log(chalk.bold('  Step 1: Cloning demo project...'));
+            try {
+                execSync(`git clone --depth 1 https://github.com/delimit-ai/delimit-quickstart.git "${targetDir}" 2>/dev/null`, { stdio: 'pipe' });
+                await logp(chalk.green('  Cloned delimit-ai/delimit-quickstart'));
+            } catch {
+                console.log(chalk.yellow('  Could not clone repo. Creating demo files locally...'));
+                fs.mkdirSync(targetDir, { recursive: true });
+                // Create inline demo specs
+                const baseSpec = { openapi: '3.0.3', info: { title: 'Pet Store API', version: '1.0.0' }, paths: { '/pets': { get: { summary: 'List pets', responses: { '200': { description: 'OK' } } } }, '/pets/{petId}': { get: { summary: 'Get pet', parameters: [{ name: 'petId', in: 'path', required: true, schema: { type: 'string' } }], responses: { '200': { description: 'OK' } } } } }, components: { schemas: { Pet: { type: 'object', properties: { id: { type: 'integer' }, name: { type: 'string' }, tag: { type: 'string' } } } } } };
+                const changedSpec = JSON.parse(JSON.stringify(baseSpec));
+                changedSpec.info.version = '2.0.0';
+                delete changedSpec.paths['/pets/{petId}'];
+                delete changedSpec.components.schemas.Pet.properties.tag;
+                fs.writeFileSync(path.join(targetDir, 'openapi.yaml'), yaml.dump(baseSpec));
+                fs.writeFileSync(path.join(targetDir, 'openapi-changed.yaml'), yaml.dump(changedSpec));
+                await logp(chalk.green('  Created demo specs locally'));
+            }
+        }
+        console.log('');
+
+        // Step 2: Initialize governance
+        console.log(chalk.bold('  Step 2: Setting up governance...'));
+        const configDir = path.join(targetDir, '.delimit');
+        if (!fs.existsSync(path.join(configDir, 'policies.yml'))) {
+            fs.mkdirSync(configDir, { recursive: true });
+            fs.writeFileSync(path.join(configDir, 'policies.yml'), POLICY_PRESETS['strict']);
+            await logp(chalk.green('  Created .delimit/policies.yml (strict)'));
+        } else {
+            await logp(chalk.green('  Governance already initialized'));
+        }
+        console.log('');
+
+        // Step 3: Run lint to show breaking changes
+        console.log(chalk.bold('  Step 3: Running governance lint...\n'));
+        const oldSpec = path.join(targetDir, 'openapi.yaml');
+        const newSpec = path.join(targetDir, 'openapi-changed.yaml');
+
+        if (fs.existsSync(oldSpec) && fs.existsSync(newSpec)) {
+            try {
+                const result = apiEngine.lint(oldSpec, newSpec, { policy: 'strict' });
+                if (result && result.summary) {
+                    const s = result.summary;
+                    const breaking = s.breaking || s.breaking_changes || 0;
+                    if (breaking > 0) {
+                        console.log(chalk.red.bold(`  BLOCKED — ${breaking} breaking change(s) detected\n`));
+                    }
+                    const violations = result.violations || [];
+                    violations.forEach(v => {
+                        const icon = v.severity === 'error' ? chalk.red('  BLOCK') : chalk.yellow('  WARN ');
+                        console.log(`  ${icon} ${v.message}`);
+                    });
+                }
+            } catch {
+                console.log(chalk.green('  Spec validated — no breaking changes'));
+            }
+        } else {
+            console.log(chalk.yellow('  No spec files found. Run delimit lint manually.'));
+        }
+
+        // Step 4: Show what to do next
+        console.log(chalk.bold('\n  What just happened:'));
+        await logp(chalk.gray('    1. Cloned a demo API project'));
+        await logp(chalk.gray('    2. Initialized strict governance policy'));
+        await logp(chalk.gray('    3. Ran lint and caught breaking changes'));
+        console.log('');
+        console.log(chalk.bold('  Now try in your own project:'));
+        console.log(`    ${chalk.green('npx delimit-cli init')}     — set up governance`);
+        console.log(`    ${chalk.green('npx delimit-cli lint')}     — check your API spec`);
+        console.log(`    ${chalk.green('npx delimit-cli setup')}    — configure AI assistants`);
+        console.log('');
+        console.log(chalk.gray(`  Demo project: ${targetDir}`));
+        console.log(chalk.gray(`  Clean up: rm -rf delimit-demo\n`));
+
+        // Beta capture
+        try {
+            const betaAns = await inquirer.prompt([{
+                type: 'input',
+                name: 'email',
+                message: chalk.blue('Join the beta? Enter your email (or press Enter to skip):'),
+            }]);
+            if (betaAns.email && betaAns.email.includes('@')) {
+                try {
+                    await axios.post('https://delimit.ai/api/subscribe', { email: betaAns.email, source: 'cli-quickstart' });
+                    console.log(chalk.green('\n  Thanks! You\'re on the list.\n'));
+                } catch {
+                    console.log(chalk.green('\n  Thanks! Visit https://delimit.ai\n'));
+                }
+            }
+        } catch {}
+    });
+
 // Try command — zero-risk demo with Markdown report artifact (LED-264)
 program
     .command('try')

package/bin/delimit-setup.js

@@ -880,49 +880,64 @@ function getDelimitSection() {
 
 Unify all AI coding assistants with persistent context, governance, and multi-model debate.
 
-## On every session start:
-1. Call \`delimit_ledger_context\` to check for open tasks
-2. Call \`delimit_gov_health\` to check governance status
-3. Call \`delimit_inbox_daemon(action="start")\` to start email polling — ALL venture inboxes route through this. Owner approves/adjusts/denies via email reply, same as being logged in.
-4. If returning user, summarize what's pending
-5. If new project, call \`delimit_scan\` to discover what Delimit can do
-
-## Tool chaining — ALWAYS auto-trigger:
-- When drafting social content: ALWAYS call \`delimit_social_post\` or \`delimit_notify\` immediately. Never ask permission.
-- When discovering outreach targets: ALWAYS chain to drafting a reply and sending via notify/social_post.
-- When identifying strategic opportunities: ALWAYS create a ledger item via \`delimit_ledger_add\`.
-- The founder reviews and approves via email. The AI's job is to draft and send, not to ask.
-
-## After editing code:
-- After editing UI/CSS: call \`delimit_design_validate_responsive\`
-- After editing API specs: call \`delimit_lint\`
-- After editing tests: call \`delimit_test_smoke\`
-
-## Before deploying:
-1. Call \`delimit_security_audit\`
-2. Call \`delimit_test_smoke\`
-3. Call \`delimit_deploy_plan\`
+## Auto-Trigger Rules (Consensus 123)
 
-## Before committing:
-- Call \`delimit_repo_diagnose\` to check for common issues
+These rules fire automatically. The AI MUST call the specified tools without asking permission.
+The founder reviews and approves via email. The AI's job is to draft, send, and chain — not to ask.
 
-## When starting a new project:
-- Call \`delimit_scan\` to discover what Delimit can do
-- Call \`delimit_init\` to set up governance
+### Session Lifecycle
+- **Session start**: call \`delimit_ledger_context\` + \`delimit_gov_health\` + \`delimit_inbox_daemon(action="start")\` + \`delimit_notify_routing(action="status")\`
+- **Session end or idle**: call \`delimit_session_handoff\` to preserve context for next session
+- If returning user, summarize what's pending. If new project, call \`delimit_scan\`.
 
-## Try these:
-- "scan this project" -- discover what Delimit can do here
-- "lint my API spec" -- catch breaking changes in your OpenAPI spec
-- "add to ledger: [anything]" -- track tasks across sessions
-- "what's on the ledger?" -- pick up where you left off
-- "deliberate [question]" -- get multi-model AI consensus
+### Code Development (debounced per edit batch)
+- After editing UI/CSS: call \`delimit_design_validate_responsive\`
+- After editing API specs: call \`delimit_lint\` + \`delimit_drift_check\`
+- After editing tests: call \`delimit_test_smoke\`
+- After any significant code change: call \`delimit_test_smoke\` if applicable tests exist
+
+### Pre-Commit / Pre-Deploy Gates
+- Before \`git commit\`: call \`delimit_repo_diagnose\`
+- Deploy requested: \`delimit_security_audit\` then \`delimit_test_smoke\` then \`delimit_changelog\` then \`delimit_deploy_plan\`
+- Deploy succeeds: \`delimit_deploy_verify\` + \`delimit_evidence_collect\`
+- Verify succeeds: \`delimit_ledger_done\` (related task) + \`delimit_notify\`
+
+### Content / Outreach (all drafts, never auto-post)
+- Social content drafted: ALWAYS call \`delimit_social_post\` or \`delimit_notify\` immediately
+- \`delimit_social_target\` scan completes: call \`delimit_notify\` with target summary
+- Screenshot of social thread shared: auto-draft reply + call \`delimit_notify\`
+
+### Strategic / Business Operations
+- Strategic opportunity identified: call \`delimit_ledger_add\` immediately
+- \`delimit_ledger_add\` fires (non-P0): \`delimit_notify\` (batched, 15-min digest)
+- \`delimit_ledger_add\` fires (P0): \`delimit_notify\` (immediate) + \`delimit_agent_dispatch\`
+- Conflicting high-severity signals: call \`delimit_deliberate\` for multi-model consensus
+
+### Monitoring / Sensors
+- GitHub issue state change (closed, merged, labeled): \`delimit_ledger_update\` + \`delimit_notify\` (immediate)
+- GitHub issue new comments: \`delimit_ledger_update\` + \`delimit_notify\` (batched digest)
+- \`delimit_drift_check\` finds drift: \`delimit_ledger_add\` + \`delimit_notify\`
+
+### Approval Loop (Email Control Plane)
+- Approval email detected: execute the approved action based on context
+- Rejection email detected: \`delimit_ledger_update\` (mark rejected)
+
+### Audit Trail
+- After security audit, test run, or deploy: call \`delimit_evidence_collect\`
+- Any gate failure: \`delimit_evidence_collect\` + \`delimit_ledger_add\` + \`delimit_notify\` (immediate)
+
+### Storm Prevention
+- Edit triggers: debounce to once per assistant turn
+- Non-P0 notifications: batch into 15-minute digests
+- Max 5 immediate notifications per hour (overflow to digest)
+- Per-scan fan-out: max 10 targets per notification
 
 ## What Delimit does:
 - **API governance** -- lint, diff, semver classification, migration guides
-- **Persistent ledger** -- tasks survive across sessions
+- **Persistent context** -- memory and ledger survive across sessions and models
 - **Security audit** -- dependency scanning, secret detection
 - **Test verification** -- confirm tests actually ran, measure coverage
-- **Multi-model deliberation** -- say "deliberate [question]" to get consensus from multiple AI models
+- **Multi-model deliberation** -- consensus from multiple AI models (3 free, then BYOK)
 
 ## GitHub Action
 Add breaking change detection to any repo:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "delimit-cli",
   "mcpName": "io.github.delimit-ai/delimit-mcp-server",
-  "version": "3.14.11",
+  "version": "3.14.13",
   "description": "Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, governance, and multi-model debate.",
   "main": "index.js",
   "files": [