delimit-cli 3.6.6 → 3.6.8

package/bin/delimit-setup.js

@@ -98,13 +98,32 @@ async function main() {
         fs.copyFileSync(serverSource, path.join(DELIMIT_HOME, 'server', 'mcp-server.py'));
     }
 
-    // Install Python deps
+    // Install Python deps into isolated venv with pinned versions
     log(`  ${dim('  Installing Python dependencies...')}`);
+    const venvDir = path.join(DELIMIT_HOME, 'venv');
+    const reqFile = path.join(DELIMIT_HOME, 'server', 'requirements.txt');
     try {
-        execSync(`${python} -m pip install --quiet fastmcp pyyaml pydantic packaging 2>/dev/null`, { stdio: 'pipe' });
-        log(`  ${green('✓')} Python dependencies installed`);
+        if (!fs.existsSync(venvDir)) {
+            execSync(`${python} -m venv "${venvDir}"`, { stdio: 'pipe' });
+        }
+        const venvPython = path.join(venvDir, 'bin', 'python');
+        const venvPythonWin = path.join(venvDir, 'Scripts', 'python.exe');
+        const venvPy = fs.existsSync(venvPython) ? venvPython : venvPythonWin;
+        if (fs.existsSync(reqFile)) {
+            execSync(`"${venvPy}" -m pip install --quiet -r "${reqFile}" 2>/dev/null`, { stdio: 'pipe' });
+        } else {
+            execSync(`"${venvPy}" -m pip install --quiet fastmcp==3.1.0 pyyaml==6.0.3 pydantic==2.12.5 packaging==26.0 2>/dev/null`, { stdio: 'pipe' });
+        }
+        python = venvPy;  // Use venv python for MCP config
+        log(`  ${green('✓')} Python dependencies installed (isolated venv)`);
     } catch {
-        log(`  ${yellow('!')} pip install failed — run manually: pip install fastmcp pyyaml pydantic packaging`);
+        log(`  ${yellow('!')} venv install failed — trying global pip`);
+        try {
+            execSync(`${python} -m pip install --quiet fastmcp==3.1.0 pyyaml==6.0.3 pydantic==2.12.5 packaging==26.0 2>/dev/null`, { stdio: 'pipe' });
+            log(`  ${green('✓')} Python dependencies installed (global)`);
+        } catch {
+            log(`  ${yellow('!')} pip install failed — run manually: pip install fastmcp pyyaml pydantic packaging`);
+        }
     }
 
     // Step 3: Configure Claude Code MCP

package/gateway/ai/backends/deploy_bridge.py

@@ -84,7 +84,7 @@ def build(app: str, git_ref: Optional[str] = None) -> Dict[str, Any]:
     dockerfile = Path.cwd() / "Dockerfile"
     if not dockerfile.exists():
         # Check app-specific paths
-        for candidate in [Path(f"/home/delimit/{app}/Dockerfile"), Path(f"./{app}/Dockerfile")]:
+        for candidate in [Path.home() / app / "Dockerfile", Path(f"./{app}/Dockerfile")]:
             if candidate.exists():
                 dockerfile = candidate
                 break

package/gateway/ai/backends/generate_bridge.py

@@ -3,6 +3,7 @@ Bridge to delimit-generator MCP server.
 Tier 3 Extended — code generation and project scaffolding.
 """
 
+import os
 import sys
 import logging
 from pathlib import Path
@@ -10,7 +11,7 @@ from typing import Any, Dict, List, Optional
 
 logger = logging.getLogger("delimit.ai.generate_bridge")
 
-GEN_PACKAGE = Path("/home/delimit/.delimit_suite/packages/delimit-generator")
+GEN_PACKAGE = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages" / "delimit-generator"
 
 
 def _ensure_gen_path():

package/gateway/ai/backends/intel_bridge.py

@@ -3,6 +3,7 @@ Bridge to delimit-intel (wireintel) MCP server.
 Tier 3 Extended — data intelligence and versioned datasets.
 """
 
+import os
 import sys
 import logging
 from pathlib import Path
@@ -10,7 +11,7 @@ from typing import Any, Dict, List, Optional
 
 logger = logging.getLogger("delimit.ai.intel_bridge")
 
-INTEL_PACKAGE = Path("/home/delimit/.delimit_suite/packages/wireintel")
+INTEL_PACKAGE = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages" / "wireintel"
 
 
 def _ensure_intel_path():

package/gateway/ai/backends/memory_bridge.py

@@ -3,6 +3,7 @@ Bridge to delimit-memory package.
 Tier 2 Platform tools — semantic memory search and store.
 """
 
+import os
 import sys
 import json
 import asyncio
@@ -12,7 +13,7 @@ from typing import Any, Dict, Optional
 
 logger = logging.getLogger("delimit.ai.memory_bridge")
 
-MEM_PACKAGE = Path("/home/delimit/.delimit_suite/packages/delimit-memory")
+MEM_PACKAGE = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages" / "delimit-memory"
 
 _server = None
 

package/gateway/ai/backends/ops_bridge.py

@@ -3,6 +3,7 @@ Bridge to operational tools: releasepilot, costguard, datasteward, observability
 Governance primitives + internal OS layer.
 """
 
+import os
 import sys
 import json
 import asyncio
@@ -14,7 +15,7 @@ from .async_utils import run_async
 
 logger = logging.getLogger("delimit.ai.ops_bridge")
 
-PACKAGES = Path("/home/delimit/.delimit_suite/packages")
+PACKAGES = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages"
 
 # Add PACKAGES dir so `from shared.base_server import BaseMCPServer` resolves
 _packages = str(PACKAGES)

package/gateway/ai/backends/os_bridge.py

@@ -6,6 +6,7 @@ These do NOT re-implement OS logic. They translate requests
 and forward to the running delimit-os server via direct import.
 """
 
+import os
 import sys
 import logging
 from pathlib import Path
@@ -13,7 +14,7 @@ from typing import Any, Dict, List, Optional
 
 logger = logging.getLogger("delimit.ai.os_bridge")
 
-OS_PACKAGE = Path("/home/delimit/.delimit_suite/packages/delimit-os")
+OS_PACKAGE = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages" / "delimit-os"
 
 _NOT_INIT_MSG = (
     "Project not initialized for governance. "

package/gateway/ai/backends/repo_bridge.py

@@ -15,7 +15,7 @@ from .async_utils import run_async
 
 logger = logging.getLogger("delimit.ai.repo_bridge")
 
-PACKAGES = Path("/home/delimit/.delimit_suite/packages")
+PACKAGES = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages"
 
 # Add PACKAGES dir so `from shared.base_server import BaseMCPServer` resolves
 _packages = str(PACKAGES)

package/gateway/ai/backends/ui_bridge.py

@@ -3,6 +3,7 @@ Bridge to UI tooling: designsystem, storybook, testsmith, docsweaver.
 UI/DX tools for component development and testing.
 """
 
+import os
 import sys
 import json
 import asyncio
@@ -14,7 +15,7 @@ from .async_utils import run_async
 
 logger = logging.getLogger("delimit.ai.ui_bridge")
 
-PACKAGES = Path("/home/delimit/.delimit_suite/packages")
+PACKAGES = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages"
 
 # Add PACKAGES dir so `from shared.base_server import BaseMCPServer` resolves
 _packages = str(PACKAGES)

package/gateway/ai/backends/vault_bridge.py

@@ -3,6 +3,7 @@ Bridge to delimit-vault package.
 Tier 2 Platform tools — artifact and credential storage.
 """
 
+import os
 import sys
 import json
 import asyncio
@@ -13,7 +14,7 @@ from .async_utils import run_async
 
 logger = logging.getLogger("delimit.ai.vault_bridge")
 
-VAULT_PACKAGE = Path("/home/delimit/.delimit_suite/packages/delimit-vault")
+VAULT_PACKAGE = Path(os.environ.get("DELIMIT_HOME", Path.home() / ".delimit")) / "server" / "packages" / "delimit-vault"
 
 _server = None
 

package/gateway/ai/deliberation.py

@@ -148,7 +148,7 @@ def _call_model(model_id: str, config: Dict, prompt: str, system_prompt: str = "
                     os.environ["GOOGLE_APPLICATION_CREDENTIALS"] = creds_path
                 creds, project = google.auth.default()
                 creds.refresh(google.auth.transport.requests.Request())
-                actual_url = api_url.replace("{project}", project or os.environ.get("GOOGLE_CLOUD_PROJECT", "jamsons"))
+                actual_url = api_url.replace("{project}", project or os.environ.get("GOOGLE_CLOUD_PROJECT", "delimit"))
                 data = json.dumps({
                     "contents": [{"role": "user", "parts": [{"text": f"{system_prompt}\n\n{prompt}" if system_prompt else prompt}]}],
                     "generationConfig": {"maxOutputTokens": 4096, "temperature": 0.7},

package/gateway/ai/server.py

@@ -1825,8 +1825,8 @@ def _resolve_venture(venture: str) -> str:
         if name == venture or venture in name:
             return info.get("path", ".")
     # Fallback: assume it's a directory name under common roots
-    for root in ["/home/delimit", "/home/jamsons/ventures", "/home"]:
-        candidate = Path(root) / venture
+    for root in [Path.home(), Path.home() / "ventures", Path("/home")]:
+        candidate = root / venture
         if candidate.exists():
             return str(candidate)
     return "."
@@ -1849,7 +1849,7 @@ def delimit_ledger_add(
 
     Args:
         title: What needs to be done.
-        venture: Project name or path (e.g. "delimit-gateway", "/home/delimit/delimit-gateway"). Auto-detects if empty.
+        venture: Project name or path (e.g. "delimit-gateway", "~/delimit-gateway"). Auto-detects if empty.
         ledger: "ops" (tasks, bugs, features) or "strategy" (decisions, direction).
         type: task, fix, feat, strategy, consensus.
         priority: P0 (urgent), P1 (important), P2 (nice to have).

package/gateway/requirements.txt

@@ -0,0 +1,6 @@
+# Delimit MCP server dependencies — pinned for supply chain security
+# Update these when upgrading deps, then re-publish npm package
+fastmcp==3.1.0
+pyyaml==6.0.3
+pydantic==2.12.5
+packaging==26.0

package/lib/api-engine.js

@@ -17,11 +17,12 @@ const fs = require('fs');
 const os = require('os');
 
 // Gateway root — the Python engine lives here
-const GATEWAY_ROOT = process.env.DELIMIT_GATEWAY_ROOT || '/home/delimit/delimit-gateway';
+const DELIMIT_HOME = process.env.DELIMIT_HOME || path.join(os.homedir(), '.delimit');
+const GATEWAY_ROOT = process.env.DELIMIT_GATEWAY_ROOT || path.join(DELIMIT_HOME, 'gateway');
 
 // Python executable — prefer venv if available
 const PYTHON = (() => {
-    const venvPy = '/home/delimit/.delimit_suite/venv/bin/python';
+    const venvPy = path.join(DELIMIT_HOME, 'venv', 'bin', 'python');
     if (fs.existsSync(venvPy)) return venvPy;
     return 'python3';
 })();

package/lib/hooks-installer.js

@@ -249,6 +249,7 @@ export GEMINI_GOVERNANCE_HOOK="${path.join(this.aiToolsDir, 'gemini')}"
     }
     
     generateGitHook(hookName) {
+        const pkgRoot = path.resolve(__dirname, '..');
         return `#!/bin/sh
 # Delimit Dynamic Governance Hook - ${hookName}
 # Auto-generated by Delimit Hooks Installer
@@ -256,16 +257,17 @@ export GEMINI_GOVERNANCE_HOOK="${path.join(this.aiToolsDir, 'gemini')}"
 # Ensure agent is running
 if ! curl -s http://127.0.0.1:7823/status > /dev/null 2>&1; then
     echo "Starting Delimit Agent..."
-    nohup node /home/delimit/npm-delimit/lib/agent.js > /dev/null 2>&1 &
+    nohup node "${pkgRoot}/lib/agent.js" > /dev/null 2>&1 &
     sleep 2
 fi
 
 # Execute governance check
-node /home/delimit/npm-delimit/bin/delimit-cli.js hook ${hookName} "$@"
+node "${pkgRoot}/bin/delimit-cli.js" hook ${hookName} "$@"
 `;
     }
     
     generateAIToolWrapper(tool, config) {
+        const pkgRoot = path.resolve(__dirname, '..');
         return `#!/bin/sh
 # Delimit Governance Wrapper for ${config.name}
 # Auto-generated by Delimit Hooks Installer
@@ -274,7 +276,7 @@ node /home/delimit/npm-delimit/bin/delimit-cli.js hook ${hookName} "$@"
 echo "[\$(date '+%Y-%m-%d %H:%M:%S')] ${tool} invoked with args: $*" >> ~/.delimit/audit/${tool}.log
 
 # Check governance before execution
-node /home/delimit/npm-delimit/bin/delimit-cli.js proxy ${tool} "$@"
+node "${pkgRoot}/bin/delimit-cli.js" proxy ${tool} "$@"
 
 # If governance passes, execute the real tool
 if [ $? -eq 0 ]; then

package/lib/platform-adapters.js

@@ -10,6 +10,7 @@ const os = require('os');
 class PlatformAdapter {
     constructor() {
         this.HOME = os.homedir();
+        this.PKG_ROOT = path.resolve(__dirname, '..');
     }
     
     /**
@@ -28,7 +29,7 @@ class PlatformAdapter {
                     "name": "delimit-governance",
                     "description": "Governance validation skill",
                     "type": "validation",
-                    "handler": "/home/delimit/npm-delimit/adapters/codex-skill.js",
+                    "handler": path.join(this.PKG_ROOT, "adapters", "codex-skill.js"),
                     "triggers": ["pre-code-generation", "pre-suggestion"],
                     "enabled": true
                 },
@@ -36,14 +37,14 @@ class PlatformAdapter {
                     "name": "delimit-security",
                     "description": "Security validation skill",
                     "type": "security",
-                    "handler": "/home/delimit/npm-delimit/adapters/codex-security.js",
+                    "handler": path.join(this.PKG_ROOT, "adapters", "codex-security.js"),
                     "enabled": true
                 }
             ],
             "commands": {
                 "governance": {
                     "description": "Check governance status",
-                    "handler": "/home/delimit/npm-delimit/bin/delimit-cli.js",
+                    "handler": path.join(this.PKG_ROOT, "bin", "delimit-cli.js"),
                     "args": ["status"]
                 }
             }
@@ -79,16 +80,16 @@ extensions:
       - id: validate-code
         name: Validate Code
         trigger: before_code_generation
-        handler: /home/delimit/npm-delimit/adapters/gemini-action.js
+        handler: ${path.join(this.PKG_ROOT, 'adapters', 'gemini-action.js')}
       - id: collect-evidence
         name: Collect Evidence
         trigger: after_response
-        handler: /home/delimit/npm-delimit/adapters/gemini-evidence.js
+        handler: ${path.join(this.PKG_ROOT, 'adapters', 'gemini-evidence.js')}
     commands:
       - command: "@governance"
         description: Check governance status
         action: run_script
-        script: /home/delimit/npm-delimit/bin/delimit-cli.js
+        script: ${path.join(this.PKG_ROOT, 'bin', 'delimit-cli.js')}
         args: ["status"]
 `;
         
@@ -119,7 +120,7 @@ extensions:
 name = "delimit-governance"
 version = "2.0.0"
 description = "Delimit Governance Plugin"
-entry_point = "/home/delimit/npm-delimit/adapters/xai-plugin.js"
+entry_point = "${path.join(this.PKG_ROOT, 'adapters', 'xai-plugin.js')}"
 
 [plugins.hooks]
 pre_prompt = true
@@ -127,8 +128,8 @@ post_response = true
 code_validation = true
 
 [plugins.commands]
-governance = { cmd = "/home/delimit/npm-delimit/bin/delimit-cli.js", args = ["status"] }
-audit = { cmd = "/home/delimit/npm-delimit/bin/delimit-cli.js", args = ["audit"] }
+governance = { cmd = "${path.join(this.PKG_ROOT, 'bin', 'delimit-cli.js')}", args = ["status"] }
+audit = { cmd = "${path.join(this.PKG_ROOT, 'bin', 'delimit-cli.js')}", args = ["audit"] }
 `;
         
         // Create xAI plugins directory
@@ -172,7 +173,7 @@ audit = { cmd = "/home/delimit/npm-delimit/bin/delimit-cli.js", args = ["audit"]
                                 }
                             }
                         },
-                        "handler": "/home/delimit/npm-delimit/adapters/openai-function.js"
+                        "handler": path.join(this.PKG_ROOT, "adapters", "openai-function.js")
                     }
                 }
             ],
@@ -215,7 +216,7 @@ audit = { cmd = "/home/delimit/npm-delimit/bin/delimit-cli.js", args = ["audit"]
                     "id": "delimit.governance",
                     "name": "Delimit Governance",
                     "version": "2.0.0",
-                    "main": "/home/delimit/npm-delimit/adapters/cursor-extension.js",
+                    "main": path.join(this.PKG_ROOT, "adapters", "cursor-extension.js"),
                     "activationEvents": [
                         "onCommand:delimit.checkGovernance",
                         "onLanguage:javascript",
@@ -276,9 +277,9 @@ workflows:
     version: 2.0.0
     triggers:
       - event: pre_generation
-        handler: /home/delimit/npm-delimit/adapters/windsurf-trigger.js
+        handler: ${path.join(this.PKG_ROOT, 'adapters', 'windsurf-trigger.js')}
       - event: post_generation
-        handler: /home/delimit/npm-delimit/adapters/windsurf-validate.js
+        handler: ${path.join(this.PKG_ROOT, 'adapters', 'windsurf-validate.js')}
     automations:
       - name: validate_code
         trigger: on_code_change
@@ -289,7 +290,7 @@ workflows:
     commands:
       governance:
         description: Check governance status
-        script: /home/delimit/npm-delimit/bin/delimit-cli.js
+        script: ${path.join(this.PKG_ROOT, 'bin', 'delimit-cli.js')}
         args: [status]
 `;
         

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "delimit-cli",
-  "version": "3.6.6",
+  "version": "3.6.8",
   "description": "Catch breaking API changes before they ship. GitHub Action + CLI for OpenAPI specs.",
   "main": "index.js",
   "files": [