sauron-cli 1.3.0 → 1.4.1

package/OpenSpec-main/.devcontainer/README.md

@@ -1,92 +0,0 @@
-# Dev Container Setup
-
-This directory contains the VS Code dev container configuration for OpenSpec development.
-
-## What's Included
-
-- **Node.js 20 LTS** (>=20.19.0) - TypeScript/JavaScript runtime
-- **pnpm** - Fast, disk space efficient package manager
-- **Git + GitHub CLI** - Version control tools
-- **VS Code Extensions**:
-  - ESLint & Prettier for code quality
-  - Vitest Explorer for running tests
-  - GitLens for enhanced git integration
-  - Error Lens for inline error highlighting
-  - Code Spell Checker
-  - Path IntelliSense
-
-## How to Use
-
-### First Time Setup
-
-1. **Install Prerequisites** (on your local machine):
-   - [VS Code](https://code.visualstudio.com/)
-   - [Docker Desktop](https://www.docker.com/products/docker-desktop)
-   - [Dev Containers extension](https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-containers)
-
-2. **Open in Container**:
-   - Open this project in VS Code
-   - You'll see a notification: "Folder contains a Dev Container configuration file"
-   - Click "Reopen in Container"
-
-   OR
-
-   - Open Command Palette (`Cmd/Ctrl+Shift+P`)
-   - Type "Dev Containers: Reopen in Container"
-   - Press Enter
-
-3. **Wait for Setup**:
-   - The container will build (first time takes a few minutes)
-   - `pnpm install` runs automatically via `postCreateCommand`
-   - All extensions install automatically
-
-### Daily Development
-
-Once set up, the container preserves your development environment:
-
-```bash
-# Run development build
-pnpm run dev
-
-# Run CLI in development
-pnpm run dev:cli
-
-# Run tests
-pnpm test
-
-# Run tests in watch mode
-pnpm test:watch
-
-# Build the project
-pnpm run build
-```
-
-### SSH Keys
-
-Your SSH keys are mounted read-only from `~/.ssh`, so git operations work seamlessly with GitHub/GitLab.
-
-### Rebuilding the Container
-
-If you modify `.devcontainer/devcontainer.json`:
-- Command Palette → "Dev Containers: Rebuild Container"
-
-## Benefits
-
-- No need to install Node.js or pnpm on your local machine
-- Consistent development environment across team members
-- Isolated from other Node.js projects on your machine
-- All dependencies and tools containerized
-- Easy onboarding for new developers
-
-## Troubleshooting
-
-**Container won't build:**
-- Ensure Docker Desktop is running
-- Check Docker has enough memory allocated (recommend 4GB+)
-
-**Extensions not appearing:**
-- Rebuild the container: "Dev Containers: Rebuild Container"
-
-**Permission issues:**
-- The container runs as the `node` user (non-root)
-- Files created in the container are owned by this user

package/OpenSpec-main/.devcontainer/devcontainer.json

@@ -1,68 +0,0 @@
-{
-  "name": "OpenSpec Development",
-  "image": "mcr.microsoft.com/devcontainers/typescript-node:1-20-bookworm",
-
-  // Additional tools and features
-  "features": {
-    "ghcr.io/devcontainers/features/git:1": {
-      "version": "latest",
-      "ppa": true
-    },
-    "ghcr.io/devcontainers/features/github-cli:1": {
-      "version": "latest"
-    }
-  },
-
-  // Configure tool-specific properties
-  "customizations": {
-    "vscode": {
-      // Set default container specific settings
-      "settings": {
-        "typescript.tsdk": "node_modules/typescript/lib",
-        "typescript.enablePromptUseWorkspaceTsdk": true,
-        "editor.formatOnSave": true,
-        "editor.defaultFormatter": "esbenp.prettier-vscode",
-        "editor.codeActionsOnSave": {
-          "source.fixAll": "explicit"
-        },
-        "files.eol": "\n",
-        "terminal.integrated.defaultProfile.linux": "bash"
-      },
-
-      // Add extensions you want installed when the container is created
-      "extensions": [
-        // TypeScript/JavaScript essentials
-        "dbaeumer.vscode-eslint",
-        "esbenp.prettier-vscode",
-
-        // Testing
-        "vitest.explorer",
-
-        // Git
-        "eamodio.gitlens",
-
-        // Utilities
-        "streetsidesoftware.code-spell-checker",
-        "usernamehw.errorlens",
-        "christian-kohler.path-intellisense"
-      ]
-    }
-  },
-
-  // Use 'forwardPorts' to make a list of ports inside the container available locally
-  // "forwardPorts": [],
-
-  // Use 'postCreateCommand' to run commands after the container is created
-  "postCreateCommand": "corepack enable && corepack prepare pnpm@latest --activate && pnpm install",
-
-  // Configure mounts to preserve SSH keys for git operations
-  "mounts": [
-    "source=${localEnv:HOME}${localEnv:USERPROFILE}/.ssh,target=/home/node/.ssh,readonly,type=bind,consistency=cached"
-  ],
-
-  // Set the default user to 'node' (non-root user)
-  "remoteUser": "node",
-
-  // Ensure git is properly configured
-  "initializeCommand": "echo 'Initializing dev container...'"
-}

package/OpenSpec-main/.github/CODEOWNERS

@@ -1,2 +0,0 @@
-# Default code ownership
-* @TabishB

package/OpenSpec-main/.github/workflows/README.md

@@ -1,20 +0,0 @@
-# Github Workflows
-
-## Testing CI Locally
-
-Test GitHub Actions workflows locally using [act](https://nektosact.com/):
-
-```bash
-# Test all PR checks
-act pull_request
-
-# Test specific job
-act pull_request -j nix-flake-validate
-
-# Dry run to see what would execute
-act pull_request --dryrun
-```
-
-The `.actrc` file configures act to use the appropriate Docker image.
-
-

package/OpenSpec-main/.github/workflows/ci.yml

@@ -1,346 +0,0 @@
-name: CI
-
-on:
-  pull_request:
-    branches: [main]
-  merge_group:
-    branches: [main]
-  push:
-    branches: [main]
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ci-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  # Detect which files changed to enable path-based filtering
-  changes:
-    name: Detect changes
-    runs-on: ubuntu-latest
-    outputs:
-      nix: ${{ steps.filter.outputs.nix }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Check for Nix-related changes
-        uses: dorny/paths-filter@v3
-        id: filter
-        with:
-          filters: |
-            nix:
-              - 'flake.nix'
-              - 'flake.lock'
-              - 'package.json'
-              - 'pnpm-lock.yaml'
-              - 'scripts/update-flake.sh'
-              - '.github/workflows/ci.yml'
-
-  test_pr:
-    name: Test
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    if: github.event_name == 'pull_request' || github.event_name == 'merge_group'
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Build project
-        run: pnpm run build
-
-      - name: Run tests
-        run: pnpm test
-
-      - name: Upload test coverage
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage-report-pr
-          path: coverage/
-          retention-days: 7
-
-  test_matrix:
-    name: Test (${{ matrix.label }})
-    runs-on: ${{ matrix.os }}
-    timeout-minutes: 15
-    if: github.event_name == 'push'
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - os: ubuntu-latest
-            shell: bash
-            label: linux-bash
-          - os: macos-latest
-            shell: bash
-            label: macos-bash
-          - os: windows-latest
-            shell: pwsh
-            label: windows-pwsh
-
-    defaults:
-      run:
-        shell: ${{ matrix.shell }}
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Print environment diagnostics
-        run: |
-          node -p "JSON.stringify({ platform: process.platform, arch: process.arch, shell: process.env.SHELL || process.env.ComSpec || '' })"
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Build project
-        run: pnpm run build
-
-      - name: Run tests
-        run: pnpm test
-
-      - name: Upload test coverage
-        if: matrix.os == 'ubuntu-latest'
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage-report-main
-          path: coverage/
-          retention-days: 7
-
-  lint:
-    name: Lint & Type Check
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Build project
-        run: pnpm run build
-
-      - name: Type check
-        run: pnpm exec tsc --noEmit
-
-      - name: Lint
-        run: pnpm lint
-
-      - name: Check for build artifacts
-        run: |
-          if [ ! -d "dist" ]; then
-            echo "Error: dist directory not found after build"
-            exit 1
-          fi
-          if [ ! -f "dist/cli/index.js" ]; then
-            echo "Error: CLI entry point not found"
-            exit 1
-          fi
-
-  nix-flake-validate:
-    name: Nix Flake Validation
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    needs: changes
-    if: needs.changes.outputs.nix == 'true'
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v21
-
-      - name: Setup Nix cache
-        uses: DeterminateSystems/magic-nix-cache-action@v13
-
-      - name: Build with Nix
-        run: nix build
-
-      - name: Verify build output
-        run: |
-          if [ ! -e "result" ]; then
-            echo "Error: Nix build output 'result' symlink not found"
-            exit 1
-          fi
-          if [ ! -f "result/bin/openspec" ]; then
-            echo "Error: openspec binary not found in build output"
-            exit 1
-          fi
-          echo "✅ Build output verified"
-
-      - name: Test binary execution
-        run: |
-          VERSION=$(nix run . -- --version)
-          echo "OpenSpec version: $VERSION"
-          if [ -z "$VERSION" ]; then
-            echo "Error: Version command returned empty output"
-            exit 1
-          fi
-          echo "✅ Binary execution successful"
-
-      - name: Validate update script
-        run: |
-          echo "Testing update-flake.sh script..."
-          bash scripts/update-flake.sh
-          echo "✅ Update script executed successfully"
-
-      - name: Check flake.nix modifications
-        run: |
-          if git diff --quiet flake.nix; then
-            echo "ℹ️  flake.nix unchanged (hash already up-to-date)"
-          else
-            echo "✅ flake.nix was updated by script"
-            git diff flake.nix
-          fi
-
-      - name: Restore flake.nix
-        if: always()
-        run: git checkout -- flake.nix || true
-
-  validate-changesets:
-    name: Validate Release Tracking
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request' || github.event_name == 'merge_group'
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Determine release tracking
-        id: changed-changesets
-        run: |
-          changed_changesets="$(git diff --name-only --diff-filter=ACMRT origin/main...HEAD -- '.changeset/*.md' ':!.changeset/README.md')"
-          if [[ -n "$changed_changesets" ]]; then
-            echo "has_changesets=true" >> "$GITHUB_OUTPUT"
-            {
-              echo "files<<EOF"
-              echo "$changed_changesets"
-              echo "EOF"
-            } >> "$GITHUB_OUTPUT"
-          else
-            echo "has_changesets=false" >> "$GITHUB_OUTPUT"
-            echo "This PR follows the normal release cadence; continuing with standard validation"
-          fi
-
-      - name: Setup pnpm
-        if: steps.changed-changesets.outputs.has_changesets == 'true'
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - name: Setup Node.js
-        if: steps.changed-changesets.outputs.has_changesets == 'true'
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20'
-          cache: 'pnpm'
-
-      - name: Install dependencies
-        if: steps.changed-changesets.outputs.has_changesets == 'true'
-        run: pnpm install --frozen-lockfile
-
-      - name: Validate release-tracked changesets
-        if: steps.changed-changesets.outputs.has_changesets == 'true'
-        env:
-          CHANGESET_FILES: ${{ steps.changed-changesets.outputs.files }}
-        run: |
-          echo "Validating changed changesets:"
-          printf '%s\n' "$CHANGESET_FILES"
-          pnpm exec changeset status --since=origin/main
-
-  required-checks-pr:
-    name: All checks passed
-    runs-on: ubuntu-latest
-    needs: [test_pr, lint, nix-flake-validate]
-    if: always() && (github.event_name == 'pull_request' || github.event_name == 'merge_group')
-    steps:
-      - name: Verify all checks passed
-        run: |
-          if [[ "${{ needs.test_pr.result }}" != "success" ]]; then
-            echo "Test job failed"
-            exit 1
-          fi
-          if [[ "${{ needs.lint.result }}" != "success" ]]; then
-            echo "Lint job failed"
-            exit 1
-          fi
-          # Nix validation may be skipped if no Nix-related files changed
-          if [[ "${{ needs.nix-flake-validate.result }}" != "success" && "${{ needs.nix-flake-validate.result }}" != "skipped" ]]; then
-            echo "Nix flake validation job failed"
-            exit 1
-          fi
-          if [[ "${{ needs.nix-flake-validate.result }}" == "skipped" ]]; then
-            echo "Nix flake validation skipped (no Nix-related changes)"
-          fi
-          echo "All required checks passed!"
-
-  required-checks-main:
-    name: All checks passed
-    runs-on: ubuntu-latest
-    needs: [test_matrix, lint, nix-flake-validate]
-    if: always() && github.event_name == 'push'
-    steps:
-      - name: Verify all checks passed
-        run: |
-          if [[ "${{ needs.test_matrix.result }}" != "success" ]]; then
-            echo "Matrix test job failed"
-            exit 1
-          fi
-          if [[ "${{ needs.lint.result }}" != "success" ]]; then
-            echo "Lint job failed"
-            exit 1
-          fi
-          # Nix validation may be skipped if no Nix-related files changed
-          if [[ "${{ needs.nix-flake-validate.result }}" != "success" && "${{ needs.nix-flake-validate.result }}" != "skipped" ]]; then
-            echo "Nix flake validation job failed"
-            exit 1
-          fi
-          if [[ "${{ needs.nix-flake-validate.result }}" == "skipped" ]]; then
-            echo "Nix flake validation skipped (no Nix-related changes)"
-          fi
-          echo "All required checks passed!"

package/OpenSpec-main/.github/workflows/release-prepare.yml

@@ -1,60 +0,0 @@
-name: Release (prepare)
-
-on:
-  push:
-    branches: [main]
-
-permissions:
-  contents: write
-  pull-requests: write
-  id-token: write # Required for npm OIDC trusted publishing
-
-concurrency:
-  group: release-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  prepare:
-    if: github.repository == 'Fission-AI/OpenSpec'
-    runs-on: ubuntu-latest
-    steps:
-      # Generate GitHub App token first - used for checkout and changesets
-      # This allows git operations to trigger CI workflows on the version PR
-      # (GITHUB_TOKEN cannot trigger workflows by design)
-      - name: Generate GitHub App Token
-        id: app-token
-        uses: actions/create-github-app-token@v2
-        with:
-          app-id: ${{ vars.APP_ID }}
-          private-key: ${{ secrets.APP_PRIVATE_KEY }}
-
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          token: ${{ steps.app-token.outputs.token }}
-
-      - uses: pnpm/action-setup@v4
-        with:
-          version: 9
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '24' # Node 24 includes npm 11.5.1+ required for OIDC
-          cache: 'pnpm'
-          registry-url: 'https://registry.npmjs.org'
-
-      - run: pnpm install --frozen-lockfile
-
-      # Opens/updates the Version Packages PR; publishes when the Version PR merges
-      - name: Create/Update Version PR
-        id: changesets
-        uses: changesets/action@v1
-        with:
-          title: 'chore(release): version packages'
-          createGithubReleases: true
-          # Use CI-specific release script: relies on version PR having been merged
-          # so package.json already contains the bumped version.
-          publish: pnpm run release:ci
-        env:
-          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
-          # npm authentication handled via OIDC trusted publishing (no token needed)