devcouncil 0.2.0 → 0.2.2

package/bin/devcouncil.js

@@ -1,18 +1,129 @@
 #!/usr/bin/env node
 
+/**
+ * npm `dev` / `devcouncil` shim.
+ *
+ * Live commands belong to the Go `devcouncil` binary, including `map` /
+ * `graph` / `ast` (which that binary execs `devmap` for). This file never
+ * invokes Python or uv, and it is not a second owner of any command.
+ */
+
 const { spawnSync } = require("node:child_process");
-const { existsSync } = require("node:fs");
+const {
+  closeSync,
+  existsSync,
+  openSync,
+  readSync,
+  realpathSync,
+  statSync,
+} = require("node:fs");
 const path = require("node:path");
 
-const packageRoot = path.resolve(__dirname, "..");
-const pyproject = path.join(packageRoot, "pyproject.toml");
+const WIN32 = process.platform === "win32";
+
+function localBinDir() {
+  const home = process.env.HOME || process.env.USERPROFILE || "";
+  return home ? path.join(home, ".local", "bin") : "";
+}
+
+function isSelf(file) {
+  try {
+    return realpathSync(file) === realpathSync(__filename);
+  } catch {
+    return path.resolve(file) === path.resolve(__filename);
+  }
+}
+
+function looksLikeNodeShim(file) {
+  const lower = file.toLowerCase();
+  if (
+    lower.endsWith(".js") ||
+    lower.endsWith(".cmd") ||
+    lower.endsWith(".bat") ||
+    lower.endsWith(".ps1")
+  ) {
+    return true;
+  }
+  let fd;
+  try {
+    fd = openSync(file, "r");
+    const buf = Buffer.alloc(160);
+    const n = readSync(fd, buf, 0, 160, 0);
+    const line = buf.slice(0, n).toString("utf8").split(/\r?\n/, 1)[0] || "";
+    if (line.startsWith("#!") && /\bnode\b/i.test(line)) {
+      return true;
+    }
+  } catch {
+    return false;
+  } finally {
+    if (fd !== undefined) {
+      closeSync(fd);
+    }
+  }
+  return false;
+}
+
+function isNativeBin(file) {
+  if (!file || !existsSync(file)) {
+    return false;
+  }
+  try {
+    if (statSync(file).isDirectory()) {
+      return false;
+    }
+  } catch {
+    return false;
+  }
+  if (isSelf(file) || looksLikeNodeShim(file)) {
+    return false;
+  }
+  return true;
+}
+
+function resolveBin(name, envKey) {
+  const override = process.env[envKey];
+  if (override) {
+    return override;
+  }
+  const dirs = (process.env.PATH || "").split(path.delimiter).filter(Boolean);
+  const local = localBinDir();
+  if (local) {
+    dirs.push(local);
+  }
+  const exts = WIN32 ? [".exe", ".com", ""] : [""];
+  for (const dir of dirs) {
+    for (const ext of exts) {
+      const candidate = path.join(dir, name + ext);
+      if (isNativeBin(candidate)) {
+        return candidate;
+      }
+    }
+  }
+  return null;
+}
+
+function spawnEnv() {
+  const env = { ...process.env };
+  const local = localBinDir();
+  if (local && existsSync(local)) {
+    const current = env.PATH || env.Path || "";
+    const parts = current.split(path.delimiter);
+    if (!parts.includes(local)) {
+      env.PATH = `${local}${path.delimiter}${current}`;
+      if (WIN32) {
+        env.Path = env.PATH;
+      }
+    }
+  }
+  return env;
+}
 
 function run(command, args) {
   return spawnSync(command, args, {
     cwd: process.cwd(),
     stdio: "inherit",
-    shell: process.platform === "win32",
-    env: process.env,
+    shell: false,
+    env: spawnEnv(),
   });
 }
 
@@ -21,42 +132,29 @@ function fail(message) {
   process.exit(1);
 }
 
-function ensureUv() {
-  const check = spawnSync("uv", ["--version"], {
-    stdio: "ignore",
-    shell: process.platform === "win32",
-  });
-
-  if (check.status === 0) {
-    return;
-  }
-
+function missing(name, hint) {
   fail(
     [
-      "DevCouncil requires uv to run from the npm package.",
-      "Install uv first:",
-      "  macOS/Linux: curl -LsSf https://astral.sh/uv/install.sh | sh",
-      '  Windows:     powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"',
-      "",
-      "Then rerun:",
-      "  devcouncil --help",
+      `DevCouncil requires the ${name} binary on PATH (or ~/.local/bin).`,
+      hint,
     ].join("\n")
   );
 }
 
-if (!existsSync(pyproject)) {
-  fail(
-    "DevCouncil npm package is missing pyproject.toml. Reinstall the package and try again."
+const args = process.argv.slice(2);
+
+const goBin = resolveBin("devcouncil", "DEVCOUNCIL_BIN");
+if (!goBin) {
+  missing(
+    "devcouncil",
+    WIN32
+      ? "Build: go -C backend/go_orchestrator build -o %USERPROFILE%\\.local\\bin\\devcouncil.exe ./cmd/devcouncil\nAlso copy it to %USERPROFILE%\\.local\\bin\\dev.exe (scripts/install.ps1)."
+      : "Build: go -C backend/go_orchestrator build -o ~/.local/bin/devcouncil ./cmd/devcouncil\nAlso: ln -sf devcouncil ~/.local/bin/dev"
   );
 }
 
-ensureUv();
-
-const args = process.argv.slice(2);
-const result = run("uv", ["run", "--project", packageRoot, "devcouncil", ...args]);
-
+const result = run(goBin, args);
 if (result.error) {
-  fail(`Failed to start DevCouncil: ${result.error.message}`);
+  fail(`Failed to start devcouncil: ${result.error.message}`);
 }
-
 process.exit(result.status ?? 1);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devcouncil",
-  "version": "0.2.0",
-  "description": "Gated orchestrator for AI-assisted software development",
+  "version": "0.2.2",
+  "description": "Code intelligence and deterministic verification for AI coding agents: symbol-level code graph, blast radius, dead-code analysis, and MCP servers for Claude Code, Cursor, and Codex",
   "license": "Apache-2.0",
   "homepage": "https://github.com/bharathvbcr/DevCouncil#readme",
   "repository": {
@@ -17,7 +17,21 @@
     "coding-agent",
     "devtools",
     "orchestration",
-    "verification"
+    "verification",
+    "code-graph",
+    "code-intelligence",
+    "codebase-context",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "claude-code",
+    "cursor",
+    "static-analysis",
+    "tree-sitter",
+    "dead-code",
+    "blast-radius",
+    "call-graph",
+    "repo-map"
   ],
   "bin": {
     "devcouncil": "bin/devcouncil.js",
@@ -25,28 +39,17 @@
   },
   "files": [
     "bin/",
-    "src/**/*.py",
-    "src/**/*.md",
-    "src/**/*.png",
-    "src/**/*.svg",
-    "src/**/*.yaml",
-    "src/**/*.mjs",
-    "pyproject.toml",
-    "uv.lock",
     "README.md",
     "LICENSE"
   ],
   "scripts": {
-    "install:dev": "uv tool install --force .",
-    "install:editable": "uv pip install -e .",
-    "dev": "uv run devcouncil",
     "pack:check": "npm pack --dry-run",
-    "smoke:wheel": "uv run python scripts/check-wheel-assets.py",
     "smoke:package": "node scripts/npm-runtime-smoke.mjs",
-    "test": "uv run pytest",
-    "lint": "uv run ruff check .",
-    "typecheck": "uv run mypy src",
-    "check": "uv run ruff check . && uv run mypy src && uv run pytest"
+    "smoke:registry": "node scripts/npm-registry-smoke.mjs",
+    "check:release": "node scripts/check-release.mjs",
+    "check:workflows": "node scripts/check-workflows.mjs",
+    "test:scripts": "node --test scripts/check-release.test.mjs scripts/check-workflows.test.mjs",
+    "ci:local": "node scripts/ci-local.mjs"
   },
   "engines": {
     "node": ">=18"

package/pyproject.toml

@@ -1,66 +0,0 @@
-[project]
-name = "devcouncil"
-version = "0.2.0"
-description = "Gated orchestrator for AI-assisted software development"
-readme = "README.md"
-requires-python = ">=3.12"
-dependencies = [
-    "typer>=0.12.3",
-    "rich>=13.7.1",
-    "pydantic>=2.7.1",
-    "pyyaml>=6.0.1",
-    "sqlmodel>=0.0.19",
-    "httpx>=0.27.0",
-    "gitpython>=3.1.49",
-    "mcp>=1.27.0",
-    "gepa>=0.1.1",
-    "watchdog>=4.0.0",
-]
-
-[project.urls]
-Homepage = "https://github.com/bharathvbcr/DevCouncil"
-Repository = "https://github.com/bharathvbcr/DevCouncil.git"
-Issues = "https://github.com/bharathvbcr/DevCouncil/issues"
-
-[project.scripts]
-dev = "devcouncil.cli.main:app"
-devcouncil = "devcouncil.cli.main:app"
-
-[dependency-groups]
-dev = [
-    "pytest>=8.2.0",
-    "ruff>=0.4.4",
-    "mypy>=1.10.0",
-    "types-pyyaml>=6.0.12.20260408",
-    # Used only to exercise the diff↔coverage path end-to-end in tests. DevCouncil
-    # never requires coverage at runtime — it uses whatever the target repo provides.
-    "coverage>=7.4",
-]
-
-[tool.uv]
-# Security floors for transitive dependencies (Dependabot advisories, 2026-06).
-# These are not direct deps; constraint-dependencies pins their minimum patched
-# version in the resolver without adding them to the dependency tree, so they can
-# never resolve back below the fix.
-constraint-dependencies = [
-    "cryptography>=48.0.1",
-    "starlette>=1.3.1",
-    "pyjwt>=2.13.0",
-    "python-multipart>=0.0.31",
-    "pydantic-settings>=2.14.2",
-    "idna>=3.15",
-]
-
-[tool.pytest.ini_options]
-testpaths = ["tests"]
-
-[build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
-
-[tool.hatch.build.targets.wheel.force-include]
-"src/devcouncil/llm/model_defaults.yaml" = "devcouncil/llm/model_defaults.yaml"
-"src/devcouncil/telemetry/model_pricing.yaml" = "devcouncil/telemetry/model_pricing.yaml"
-"src/devcouncil/assets/devcouncil-logo.svg" = "devcouncil/assets/devcouncil-logo.svg"
-"src/devcouncil/assets/devcouncil_logo_premium.png" = "devcouncil/assets/devcouncil_logo_premium.png"
-"src/devcouncil/integrations/opencode_devcouncil_plugin.mjs" = "devcouncil/integrations/opencode_devcouncil_plugin.mjs"

package/src/devcouncil/__main__.py

@@ -1,4 +0,0 @@
-from devcouncil.cli.main import app
-
-if __name__ == "__main__":
-    app()

package/src/devcouncil/app/__init__.py

@@ -1,28 +0,0 @@
-from devcouncil.app.state_machine import StateMachine, ProjectPhase
-from devcouncil.app.run_context import RunContext
-from devcouncil.app.orchestrator import Orchestrator
-from devcouncil.app.events import EventBus, bus, EventTypes
-from devcouncil.app.errors import (
-    DevCouncilError,
-    GatingError,
-    ConfigurationError,
-    OrchestrationError,
-    ExecutionError,
-    VerificationError,
-)
-
-__all__ = [
-    "StateMachine",
-    "ProjectPhase",
-    "RunContext",
-    "Orchestrator",
-    "EventBus",
-    "bus",
-    "EventTypes",
-    "DevCouncilError",
-    "GatingError",
-    "ConfigurationError",
-    "OrchestrationError",
-    "ExecutionError",
-    "VerificationError",
-]

package/src/devcouncil/app/config.py

@@ -1,320 +0,0 @@
-"""Typed configuration loader with Pydantic validation.
-
-Replaces scattered yaml.safe_load() calls with a single validated config service.
-"""
-
-from __future__ import annotations
-
-import os
-import shutil
-import subprocess
-from pathlib import Path
-from typing import Dict, List
-
-from pydantic import BaseModel, Field
-
-
-class ModelRoleConfig(BaseModel):
-    model: str
-    temperature: float = 0.0
-
-
-class ModelsConfig(BaseModel):
-    provider: str = "openrouter"
-    roles: Dict[str, ModelRoleConfig] = Field(default_factory=dict)
-
-
-class ProjectConfig(BaseModel):
-    name: str = "devcouncil-project"
-    root: str = "."
-    default_branch: str = "main"
-
-
-class CommandsConfig(BaseModel):
-    test: List[str] = Field(default_factory=list)
-    lint: List[str] = Field(default_factory=list)
-    typecheck: List[str] = Field(default_factory=list)
-
-
-class VerificationSandboxConfig(BaseModel):
-    docker_image: str = "python:3.12-slim"
-    docker_setup_commands: List[str] = Field(default_factory=list)
-    nix_flake_attr: str | None = None
-
-
-class DiffCoverageConfig(BaseModel):
-    """Diff↔coverage gating: prove the *changed* lines were exercised by tests.
-
-    ``measure`` runs the diff-coverage analysis and records it as evidence (and a
-    non-blocking signal) whenever the target repo's coverage tooling is present.
-    ``enforce`` promotes an unexercised diff to a *blocking* gap. Enforcement is
-    off by default so the signal is visible before it ever gates — a passing test
-    that does not touch the new code is surfaced first, then teams opt in to
-    blocking. ``min_ratio`` of 0.0 means "require at least one changed executable
-    line to be exercised"; a higher value demands that fraction of changed lines.
-    """
-
-    measure: bool = True
-    enforce: bool = False
-    min_ratio: float = 0.0
-
-
-class VerificationConfig(BaseModel):
-    sandbox: VerificationSandboxConfig = Field(default_factory=VerificationSandboxConfig)
-    diff_coverage: DiffCoverageConfig = Field(default_factory=DiffCoverageConfig)
-
-
-class GatesConfig(BaseModel):
-    require_clean_git_before_task: bool = True
-    block_orphan_diffs: bool = True
-    block_missing_tests_for_high_requirements: bool = True
-    block_dependency_changes_without_approval: bool = True
-    block_schema_change_without_migration: bool = True
-    block_failed_commands: bool = True
-
-
-class ExecutionConfig(BaseModel):
-    default_executor: str = "manual"
-    max_repair_attempts: int = 3
-    checkpoint_before_each_task: bool = True
-    command_timeout: int = 300
-    stream_cli_output: bool = False
-    # Default lifetime of an MCP task lease. A crashed/disconnected agent's lease
-    # auto-expires after this, so the task frees up without a human running force.
-    lease_ttl_seconds: int = 1800
-    # When true, the post-task coding-CLI hook runs deterministic verification of the
-    # active task (and records gaps) instead of only printing a reminder. Off by default
-    # so hooks stay fast/cheap unless a team opts in.
-    verify_on_post_task: bool = False
-    cursor_resume_mode: str = "off"
-    coding_cli_probe_order: List[str] = Field(default_factory=list)
-
-
-class PrivacyConfig(BaseModel):
-    redact_env_vars: bool = True
-    redact_secrets_in_logs: bool = True
-    store_prompts_locally: bool = True
-
-
-class AgentFlowIntegrationConfig(BaseModel):
-    enabled: bool = False
-    trace_path: str = ".devcouncil/logs/traces.jsonl"
-    mode: str = "jsonl"
-
-
-class CodeReviewGraphIntegrationConfig(BaseModel):
-    enabled: bool = False
-    command: str = "code-review-graph"
-    optional: bool = True
-
-
-class LiveReviewIntegrationConfig(BaseModel):
-    enabled: bool = True
-    cards_path: str = ".devcouncil/live/cards"
-    signals_path: str = ".devcouncil/live/signals"
-    default_client: str = "claude"
-
-
-class WarpIntegrationConfig(BaseModel):
-    enabled: bool = False
-    command: str = "oz"
-    run_mode: str = "local"
-    mcp_config_path: str = ".devcouncil/integrations/warp-mcp.json"
-    profile: str | None = None
-    model: str | None = None
-    environment: str | None = None
-    share: List[str] = Field(default_factory=list)
-
-
-class OpenCodeIntegrationConfig(BaseModel):
-    enabled: bool = False
-    config_path: str = "opencode.json"
-
-
-class AntigravityIntegrationConfig(BaseModel):
-    enabled: bool = False
-    mcp_config_path: str = ".agents/mcp_config.json"
-
-
-class CursorIntegrationConfig(BaseModel):
-    enabled: bool = False
-    config_path: str = ".cursor/mcp.json"
-    hooks_path: str = ".cursor/hooks.json"
-
-
-class AiderIntegrationConfig(BaseModel):
-    enabled: bool = False
-
-
-class CliAgentProfileConfig(BaseModel):
-    description: str = ""
-    timeout_seconds: int | None = None
-    prompt_preamble: str = ""
-    require_explicit_confirmation: bool = False
-    # Per-profile CLI containment overrides. Empty/None reproduce today's behavior
-    # exactly so a profile that only sets a prompt preamble is a no-op on the
-    # subprocess invocation. ``extra_args`` are appended verbatim to the resolved
-    # command, ``permission_mode`` is translated into the right per-CLI flag where
-    # known (and overly-permissive flags are dropped for stricter modes), and
-    # ``model`` overrides the model flag for CLIs that accept one.
-    extra_args: List[str] = Field(default_factory=list)
-    permission_mode: str | None = None
-    model: str | None = None
-
-
-class CustomCliAgentConfig(BaseModel):
-    command: str
-    args: List[str] = Field(default_factory=list)
-    input_mode: str = "stdin"
-    prompt_arg: str | None = None
-    timeout_seconds: int | None = None
-    env: Dict[str, str] = Field(default_factory=dict)
-    display_name: str | None = None
-    kind: str = "custom"
-    supports_mcp: bool = False
-    supports_diff_review: bool = False
-    default_profile: str = "default"
-    help_command: List[str] = Field(default_factory=list)
-
-
-class CliAgentsIntegrationConfig(BaseModel):
-    enabled: bool = True
-    profiles: Dict[str, CliAgentProfileConfig] = Field(default_factory=dict)
-    agents: Dict[str, CustomCliAgentConfig] = Field(default_factory=dict)
-
-
-class McpIntegrationConfig(BaseModel):
-    write_task_scope_to_config: bool = False
-
-
-class IntegrationsConfig(BaseModel):
-    mcp: McpIntegrationConfig = Field(default_factory=McpIntegrationConfig)
-    agent_flow: AgentFlowIntegrationConfig = Field(default_factory=AgentFlowIntegrationConfig)
-    code_review_graph: CodeReviewGraphIntegrationConfig = Field(default_factory=CodeReviewGraphIntegrationConfig)
-    live_review: LiveReviewIntegrationConfig = Field(default_factory=LiveReviewIntegrationConfig)
-    cursor: CursorIntegrationConfig = Field(default_factory=CursorIntegrationConfig)
-    aider: AiderIntegrationConfig = Field(default_factory=AiderIntegrationConfig)
-    antigravity: AntigravityIntegrationConfig = Field(default_factory=AntigravityIntegrationConfig)
-    warp: WarpIntegrationConfig = Field(default_factory=WarpIntegrationConfig)
-    opencode: OpenCodeIntegrationConfig = Field(default_factory=OpenCodeIntegrationConfig)
-    cli_agents: CliAgentsIntegrationConfig = Field(default_factory=CliAgentsIntegrationConfig)
-
-
-class ProviderConfig(BaseModel):
-    sort: str = "price"
-    allow_fallbacks: bool = True
-    require_parameters: bool = True
-    data_collection: str = "deny"
-
-
-class DevCouncilConfig(BaseModel):
-    """Top-level validated configuration."""
-
-    project: ProjectConfig = Field(default_factory=ProjectConfig)
-    models: ModelsConfig = Field(default_factory=ModelsConfig)
-    provider: ProviderConfig = Field(default_factory=ProviderConfig)
-    commands: CommandsConfig = Field(default_factory=CommandsConfig)
-    gates: GatesConfig = Field(default_factory=GatesConfig)
-    execution: ExecutionConfig = Field(default_factory=ExecutionConfig)
-    verification: VerificationConfig = Field(default_factory=VerificationConfig)
-    privacy: PrivacyConfig = Field(default_factory=PrivacyConfig)
-    integrations: IntegrationsConfig = Field(default_factory=IntegrationsConfig)
-
-
-def load_config(project_root: Path = Path(".")) -> DevCouncilConfig:
-    """Load and validate .devcouncil/config.yaml.
-    
-    Returns DevCouncilConfig with defaults for any missing fields.
-    Raises FileNotFoundError if config doesn't exist.
-    """
-    import yaml  # type: ignore[import-untyped]
-
-    config_path = project_root / ".devcouncil" / "config.yaml"
-    if not config_path.exists():
-        raise FileNotFoundError(f"Config not found at {config_path}. Run 'dev init' first.")
-
-    with open(config_path, encoding="utf-8") as f:
-        try:
-            raw = yaml.safe_load(f) or {}
-        except yaml.YAMLError as exc:
-            raise ValueError(
-                f"Invalid YAML in {config_path}: {exc}. Fix the syntax or re-run 'dev init'."
-            ) from exc
-
-    return DevCouncilConfig.model_validate(raw)
-
-
-def provider_api_key_env_var(provider: str = "openrouter") -> str:
-    normalized = provider.strip().lower().replace("-", "").replace("_", "")
-    env_map = {
-        "openrouter": "OPENROUTER_API_KEY",
-        "vertexai": "VERTEXAI_ACCESS_TOKEN",
-        "doubleword": "DOUBLEWORD_API_KEY",
-        "ollama": "OLLAMA_API_KEY",
-        "openai": "OPENAI_API_KEY",
-        "anthropic": "ANTHROPIC_API_KEY",
-    }
-    return env_map.get(normalized, f"{normalized.upper()}_API_KEY")
-
-
-def _normalized_provider_name(provider: str) -> str:
-    return provider.strip().lower().replace("-", "").replace("_", "")
-
-
-def load_local_secrets(project_root: Path = Path(".")) -> Dict[str, str]:
-    secrets_path = project_root / ".devcouncil" / "secrets.env"
-    if not secrets_path.exists():
-        return {}
-
-    secrets: Dict[str, str] = {}
-    for line in secrets_path.read_text(encoding="utf-8").splitlines():
-        stripped = line.strip()
-        if not stripped or stripped.startswith("#") or "=" not in stripped:
-            continue
-        key, value = stripped.split("=", 1)
-        secrets[key.strip()] = value.strip().strip('"').strip("'")
-    return secrets
-
-
-def get_gcloud_access_token() -> str | None:
-    executable = shutil.which("gcloud")
-    if not executable:
-        return None
-    try:
-        token = subprocess.check_output(
-            [executable, "auth", "print-access-token"],
-            stderr=subprocess.STDOUT,
-            text=True,
-            encoding="utf-8",
-            errors="replace",
-            timeout=10,
-        ).strip()
-    except Exception:
-        return None
-    return token or None
-
-
-def get_api_key(provider: str = "openrouter", project_root: Path = Path(".")) -> str:
-    """Retrieve the API key for the configured provider from environment.
-    
-    Raises ValueError if not found.
-    """
-    env_var = provider_api_key_env_var(provider)
-    key = os.environ.get(env_var) or load_local_secrets(project_root).get(env_var)
-    if not key and _normalized_provider_name(provider) == "vertexai":
-        key = get_gcloud_access_token()
-    if not key and _normalized_provider_name(provider) == "ollama":
-        # Ollama is a local server and needs no API key; an explicitly-set
-        # OLLAMA_API_KEY still flows through above if present.
-        return ""
-    if not key:
-        extra = (
-            " You can also authenticate with 'gcloud auth login' for vertexai."
-            if _normalized_provider_name(provider) == "vertexai"
-            else ""
-        )
-        raise ValueError(
-            f"API key not found. Set {env_var} in your environment or run 'dev setup'. "
-            f"Provider: {provider}.{extra}"
-        )
-    return key