savepoint 1.0.4 → 1.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "savepoint",
-  "version": "1.0.4",
+  "version": "1.0.7",
   "description": "It’s a simple, file-based state machine and cinematic Terminal UI (TUI) designed to force you—and your agent (Claude, Cursor, Aider, Gemini)—to slow down, write down what you're actually building, and check your work before moving on.",
   "keywords": [
     "board",
@@ -18,9 +18,16 @@
   "license": "MIT",
   "author": "anipatke",
   "bin": {
-    "savepoint": "./savepoint"
+    "savepoint": "./savepoint.exe"
   },
+  "files": [
+    "savepoint.exe",
+    "README.md",
+    "LICENSE"
+  ],
   "scripts": {
-    "test": "echo \"Run 'make test' for Go tests\""
+    "build": "go build -o savepoint.exe .",
+    "test": "echo \"Run 'make test' for Go tests\"",
+    "prepublishOnly": "npm run build"
   }
-}
+}

package/.claude/settings.local.json

@@ -1,38 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(npm run *)",
-      "Bash(npx prettier *)",
-      "Bash(npm test *)",
-      "Bash(npm install *)",
-      "Bash(npx vitest *)",
-      "Bash(echo \"lint exit: $?\")",
-      "Bash(echo \"format exit: $?\")",
-      "Bash(npx tsc *)",
-      "Bash(node --require ./scripts/vitest-preload.cjs ./node_modules/vitest/vitest.mjs run --configLoader runner --config vitest.config.js --reporter=verbose test/tui/components/Board.test.tsx)",
-      "Bash(node --require ./scripts/vitest-preload.cjs ./node_modules/vitest/vitest.mjs run --configLoader runner --config vitest.config.js --reporter=verbose test/tui/components/Board.test.tsx test/tui/components/App.test.tsx test/tui/components/DetailPane.test.tsx)",
-      "Bash(node --require ./scripts/vitest-preload.cjs ./node_modules/vitest/vitest.mjs run --configLoader runner --config vitest.config.js)",
-      "Bash(go test *)",
-      "Bash(go build *)",
-      "Bash(go vet *)",
-      "Bash(make build *)",
-      "Bash(make test *)",
-      "Bash(go get *)",
-      "Bash(go doc *)",
-      "Bash(make clean *)",
-      "Bash(make build-linux *)",
-      "Bash(./savepoint_test_bin --version)",
-      "PowerShell(go run *)",
-      "Bash(go run *)",
-      "PowerShell(Get-ChildItem -Path \"C:\\\\Users\\\\User\\\\Branding\\\\03-VIBE-LAB\\\\savepoint\" -Force | Select-Object Name, @{Name=\"Type\"; Expression={if\\($_.PSIsContainer\\){\"DIR\"}else{\"FILE\"}}} | Format-Table -AutoSize)",
-      "PowerShell(Get-ChildItem *)",
-      "Bash(Get-ChildItem -Path \"C:\\\\Users\\\\User\\\\Branding\\\\03-VIBE-LAB\\\\savepoint\\\\.savepoint\\\\releases\\\\v1.1\\\\epics\\\\E08-board-command\" -Recurse -Filter \"*.md\")",
-      "Bash(Select-Object -ExpandProperty FullName)",
-      "Bash(cmd\")",
-      "PowerShell(go build *)",
-      "PowerShell(go test *)",
-      "PowerShell(cd \"C:\\\\Users\\\\User\\\\Branding\\\\03-VIBE-LAB\\\\savepoint\"; $files = @\\(\"agent-skills\\\\savepoint-create-task\\\\SKILL.md\", \"templates\\\\project\\\\agent-skills\\\\savepoint-create-task\\\\SKILL.md\"\\); foreach \\($f in $files\\) { $bytes = [System.IO.File]::ReadAllBytes\\($f\\); Write-Host \"$f first bytes: $\\($bytes[0..9] -join ','\\) \\(CRLF: $\\($bytes[3] -eq 13\\)\\)\" })",
-      "PowerShell(cd \"C:\\\\Users\\\\User\\\\Branding\\\\03-VIBE-LAB\\\\savepoint\"; $others = Get-ChildItem agent-skills -Recurse -Filter \"SKILL.md\" | Where-Object { $_.DirectoryName -notmatch \"savepoint-create-task\" }; foreach \\($f in $others\\) { $bytes = [System.IO.File]::ReadAllBytes\\($f.FullName\\); Write-Host \"$\\($f.Name\\) dir=$\\($f.Directory.Name\\) CRLF=$\\($bytes[3] -eq 13\\)\" })"
-    ]
-  }
-}

package/.github/workflows/ci.yml

@@ -1,20 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-    branches: [master]
-
-jobs:
-  ci:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version: '1.26'
-          check-latest: true
-
-      - run: make ci

package/.golangci.yml

@@ -1,11 +0,0 @@
-run:
-  timeout: 5m
-
-linters:
-  enable:
-    - unused
-    - errcheck
-    - staticcheck
-    - govet
-    - ineffassign
-    - gosimple

package/.prettierignore

@@ -1,4 +0,0 @@
-dist/
-coverage/
-node_modules/
-.claude/

package/.savepoint/Design.md

@@ -1,207 +0,0 @@
----
-type: project-design
-status: active
-last_audited: v1.1/E15-hardening
----
-
-# Savepoint — System Architecture
-
-> Project-level architecture. Audit-kept fresh: every epic's audit step merges its delta into this document.
->
-> **Visual identity** lives separately in `.savepoint/visual-identity.md` and is loaded only for TUI/theme/visual tasks.
-
-## 1. Architecture model
-
-- **File-only.** No MCP server in v1. Agents read and edit Markdown + YAML files directly using their native file tools.
-- **Agent routing:** AGENTS.md → `.savepoint/router.md` → template prompts. See AGENTS.md Workflow section.
-- **Bundled Agent Skills:** Savepoint ships with custom skills (`savepoint-draft-prd`, `savepoint-system-design`, `savepoint-create-plan`, `savepoint-create-task`, `savepoint-build-task`, `savepoint-audit`) to enforce each phase of the state machine.
-- **Token-efficiency principle.**
-  - Cold session bootstrap: ~5–7K tokens (one-time per conversation).
-  - Per-task incremental: <2KB.
-  - Audit: 5–15KB.
-  - Anything that breaks these bounds violates the wedge.
-- **Go data-reader boundary:** established in epic `E02-data-readers` (2026-05-01). `internal/data` owns Savepoint file parsing and discovery for the Go implementation: task frontmatter models, markdown YAML extraction, router state parsing, config theme defaults, release/epic/task directory listing, task lifecycle validation/defaulting, write-time status validation, and boundary error sentinels.
-- **Template assets** live under `templates/` with helpers in `src/templates/` (epic E04).
-- **Init command** (`savepoint init`) validates target directories, scaffolds rendered copies of `templates/project/`, prints the rendered magic prompt, attempts best-effort clipboard copy, and optionally runs `npm install` after scaffolding (v1.1 E07).
-- **Board command** (`savepoint board`, and bare `savepoint`) reads project state, renders the Atari-Noir TUI board when stdout is a TTY, falls back to a deterministic plain table in non-TTY mode, supports `--release`/`--epic` filtering, detail overlays, task status transitions with mtime-guarded writes, release/epic-scoped router priority markers, fsnotify-based task auto-refresh (epic E06), header Next Activity display, height-aware column/detail viewport scrolling, stable focused/unfocused column border geometry (v1.1 E01), dedicated phase-colored Next Activity line below the header, sentence-boundary checklist rendering in task details, shared status glyph mapping for task cards and the epic sidebar, a forced ANSI256 Lipgloss color profile for board startup (v1.1 E03), a focusable wide-screen epic sidebar with purple epic focus, epic detail overlays, and status glyphs loaded from epic detail frontmatter (v1.1 E04), and an epic Detail/Audit tab switch that renders user-facing audit findings from `{epic}/E##-Audit.md` (v1.1 E06).
-- **Doctor command** (`savepoint doctor`, `savepoint doctor --epic E##`) runs read-only integrity diagnostics for config, router state, release/epic/task structure, frontmatter validity, acceptance criteria presence, dependencies, duplicate task IDs, stale audit files, orphaned task IDs, and configured quality gates. It prints a human-readable report with repair suggestions and exits 0 when clean, 1 when problems are diagnosed, and 2 for internal or invocation failures.
-- **Audit remediation baseline** (v1.1 E13) centralizes frontmatter/body splitting and line-ending normalization in `internal/data`, uses typed sentinel errors for doctor repair suggestions, applies a configurable `quality_gates.gate_timeout`, removes tracked build artifacts from source control, adds `.golangci.yml`, and moves board filesystem reads/writes behind Bubble Tea command messages while preserving direct file I/O inside command helpers.
-- **Structural improvement baseline** (v1.1 E14) groups board `Model` fields into focused embedded state structs, defines consumer-side board/doctor data-access interfaces, routes doctor orphan discovery through `Discover.ListRootDirs`, renders audit-tab hidden sections via exact heading matches, improves quality-gate shell tokenization for quoted and escaped arguments, removes the separate `TaskStatus` enum in favor of `ColumnType`, and adds `internal/testutil` for shared Go test fixtures.
-- **Hardening baseline** (v1.1 E15) adds board render/layout benchmarks, data frontmatter fuzz targets, debug logging via CLI `--debug` or `SAVEPOINT_DEBUG`, abbreviation-aware task checklist sentence splitting, root test package isolation, documented audit-tab hidden-section allowlisting, repo-local CI, `make ci`, distribution SHA256 checksums, and Windows amd64/arm64 build outputs.
-- **Agent audit workflow** is skill-driven, not a CLI pipeline. At `audit-pending`, a fresh audit agent writes one epic-local `E##-Audit.md`; the user reviews its Audit tab, then asks an agent to apply the admin proposal blocks, update the visible audit findings to reflect the applied outcome, and close the epic.
-
-## 2. Directory layout
-
-```
-<project-root>/
-├── AGENTS.md                       ← agent entry point
-└── .savepoint/
-    ├── PRD.md                      ← project vision (rare changes)
-    ├── Design.md                   ← project architecture (this file)
-    ├── visual-identity.md          ← design system; loaded conditionally for TUI work
-    ├── router.md                   ← state-machine routing
-    ├── config.yml                  ← theme, quality_gates, verify_strict
-    └── releases/
-        └── {release}/              ← e.g. v1, v1.1
-            ├── {release}-PRD.md    ← release-scoped PRD
-            └── epics/
-                └── E##-{epic-name}/
-                    ├── E##-Detail.md   ← epic delta
-                    ├── E##-Audit.md    ← audit findings + admin apply proposals
-                    └── tasks/
-                        └── T001-slug.md
-```
-
-AGENTS.md at root (uppercase, cross-vendor spec). Design.md in `.savepoint/` (working doc, not public-facing). visual-identity.md conditional — only loaded for TUI/theme/visual tasks. Subtasks are inline checklists inside task `.md` — never separate files. Epic folders and task files use `E##`/`T##` prefix. Scaffold assets live under `templates/`; generated projects receive rendered copies, not hardcoded strings.
-
-## 3. Hierarchy semantics
-
-| Level        | Definition                                                                             |
-| ------------ | -------------------------------------------------------------------------------------- |
-| **Release**  | The thing being built. One PRD per release. v1 = MVP.                                  |
-| **Epic**     | A major feature within a release. Has its own E##-Detail.md (delta from project Design). |
-| **Task**     | Independently buildable. Objective-led. **Requires implementation plan before build.** |
-| **Sub-task** | Inline checklist item — _evidence of the implementation plan_, not standalone work.    |
-
-## 4. Status model & gates
-
-Three statuses, with explicit gates and ownership boundaries:
-
-| Status        | Meaning                    | Entry gate                                                      | Who may set it                         |
-| ------------- | -------------------------- | --------------------------------------------------------------- | -------------------------------------- |
-| `planned`     | Ready to build             | plan section non-empty                                          | User or planning workflow              |
-| `in_progress` | AI building                | all `depends_on` are `done`                                     | Agent when starting implementation     |
-| `done`        | Complete for current scope | all implementation items checked; verification per project mode | User only                              |
-
-- `blocked` is a **flag**, not a status — `in_progress` + `blocked: "reason"` is valid.
-- Agents may only advance a task into `in_progress`; they must not set `done` or retreat a task to an earlier status.
-- Only the user may set a task to `done` or retreat it from `done` to `in_progress` when follow-up work is required.
-- Router updates are explicit TUI actions: after setting a task to `in_progress`, the agent prompts the user to press `p` in the board to mark the focused task as router priority. Navigation alone must not change router task priority.
-- Verification mode: see `config.yml`.
-
-## 5. Dependencies
-
-- Declared in YAML frontmatter: `depends_on: [E##-epic/T###-task-id, ...]` (repo-relative IDs).
-- `src/validation/dependencies.ts` detects duplicate task IDs, missing dependencies, and dependency cycles.
-- Cross-epic deps allowed but warned (signal that epic boundaries may be wrong).
-
-## 6. CLI surface (3 commands, no extras)
-
-| Command                | Purpose                                                                           |
-| ---------------------- | --------------------------------------------------------------------------------- |
-| `savepoint init`       | Scaffold `.savepoint/`, print magic prompt to stdout + clipboard                  |
-| `savepoint board`      | Launch TUI; auto-falls-back to plain table on non-TTY                             |
-| `savepoint doctor`     | Integrity check + ad-hoc quality-gate run + Layer-2 prompt for AI semantic review |
-| `--version` / `--help` | Standard global flags                                                             |
-
-- Bare `savepoint` prints help.
-- Source modules: see AGENTS.md Codebase Map.
-- **Explicitly rejected:** `task new`, `epic new`, `release new`, `plan`, `next`, `status`, `task done`. All are file edits or TUI actions.
-
-**Names:** npm package `savepoint`; binary `savepoint`. No `vk` alias.
-## 7. Agent audit workflow
-
-```
-0. Quality Gates  — Build agent runs configured build/test gates before audit handoff.
-1. Audit Pending  — Router enters `audit-pending` for the completed epic.
-2. Reconcile      — Fresh audit agent reads router, epic detail, task files, Design.md, AGENTS.md, and scoped source/test files.
-3. Findings       — Agent writes exactly one `{epic}/E##-Audit.md`.
-4. Review         — User reviews the TUI Epic Detail Audit tab.
-5. Apply + Close  — After user approval, agent applies proposal blocks, updates the audit file's visible findings, marks the epic audited, updates `last_audited`, and advances router.
-```
-
-- `audit-pending` is a **hard gate**: next epic's tasks cannot enter `in_progress` until prior epic is `audited` or the user explicitly skips the audit.
-- `E##-Audit.md` has two user-facing sections: `## Main Findings` and `## Code Style Review`.
-- `## Main Findings` contains narrative audit findings only: AC verification, important drift, and notable risks. It must not contain file-specific replacement blocks.
-- `## Code Style Review` contains the 10 AGENTS.md code style checks.
-- `## Proposed Changes` contains admin/apply metadata using `### Target File`, `### Replace`, and `### With`. The TUI Audit tab intentionally does not render this section to avoid stale file-change details in the Epic Detail panel.
-- Apply/close must rewrite `## Main Findings` and `## Code Style Review` in the same `E##-Audit.md` so the TUI Audit tab shows resolved findings and remaining risks instead of stale pre-apply blockers. `## Proposed Changes` stays as the trace of what was applied unless the user asks otherwise.
-- There is no `savepoint audit` CLI pipeline in the active design. Audit is performed by agents using `agent-skills/savepoint-audit/SKILL.md`.
-
-Three layers:
-
-- **Layer 1 (mechanical):** user's chosen linter. Recommended: eslint+dependency-cruiser (TS), radon+pylint (Python), gocyclo+staticcheck (Go). Cross-language fallback: `lizard`. Quality gate config: see `.savepoint/config.yml`.
-- **Layer 2 (AI semantic review):** baked into the audit reconcile prompt. Outputs Main Findings and Code Style Review in the epic-local audit file. **Advisory, not blocking.**
-- **Layer 3:** `savepoint doctor` runs Layer 1 + prints Layer 2 prompt for ad-hoc use.
-
-## 8. TUI
-
-**Theming:** Atari-Noir is the default theme. **For full design tokens, palette, and rendering rules, see `.savepoint/visual-identity.md`** (loaded conditionally for TUI tasks). Live values in `config.yml` `theme:` section.
-
-Acknowledged terminal limits: fonts, scanlines, glows, letter-spacing, mouse-driven motion don't translate. Lean on color discipline + box-drawing geometry + uppercase headings.
-
-**Render fallbacks:** 256-color → 16-color hard-coded → `NO_COLOR=1` monochrome with glyphs → non-TTY plain table.
-
-**Layout:** single screen with a 3-column task board (`planned`, `in_progress`, `done`), optional epic sidebar on wide terminals, centered overlays for release/epic/help/task/epic-detail views, static Atari-Noir header/footer, full-width dividers, uniform black TUI backgrounds, and navigation hints. Active router `next_action` renders as a dedicated full-width line below the header with phase-colored `PLAN`, `BUILD`, or `AUDIT` prefix styling and truncates to terminal width. Columns and detail overlays use height-aware viewport slicing with subtle above/more scroll indicators. Focused and unfocused columns preserve the same rounded-border geometry so focus changes do not shift content. Task detail implementation-plan checkboxes render once per semantic sentence, not once per hard-wrapped markdown line. On terminals at least 120 columns wide, the epic sidebar is focusable from the Planned column; it uses the purple epic accent for focused panel borders, focused epic labels, and epic detail overlays while task-column focus remains orange. Task card and epic sidebar status glyphs share `internal/board/status.go`; task cards use explicit `Task.Status` when available and retain the legacy column/stage glyph fallback when it is not. Non-TTY output remains a plain table fallback.
-
-**Visual guardrail:** the terminal board intentionally uses one black background for Background, Surface, and Surface 2. Do not restore subtly different dark panel fills; depth should come from spacing, dividers, glyphs, and focused Atari Orange borders.
-
-**Terminal color policy:** the board must use a deterministic Lipgloss color profile and one canonical terminal black across truecolor, ANSI256, and ANSI fallbacks. In 256-color mode, Background, Surface, and Surface 2 must map to the same actual black value, not adjacent dark-gray values. Full-screen/root surfaces may paint that one black background for consistency; nested task cards, task text, glyphs, tags, metadata, and router-priority labels should remain foreground-only unless a component explicitly owns a filled visual region. This prevents padded text from creating gray bars in terminals such as PowerShell, Windows Terminal, VS Code terminal, and Warp.
-
-**Border policy:** focus must not change geometry or introduce terminal-specific broken border rendering. Use one consistent box-border family across columns, cards, and overlays. If rounded borders render as dash bars or broken segments in Warp, prefer the single-line border style already allowed by `.savepoint/visual-identity.md`; do not mix rounded and single-line borders as an ad-hoc per-component workaround.
-
-**Board persistence and refresh:** task status transitions write canonical task frontmatter through `internal/data.WriteTaskStatus` with mtime conflict checks. Board update handlers dispatch filesystem reads and writes through Bubble Tea command helpers (`routerWriteMsg`, `taskWriteMsg`, `epicDetailMsg`, `auditContentMsg`, and `errorMsg`) so `Update()` remains an event/message reducer. The board treats `Model.Root` as the `.savepoint` directory, watches `.savepoint/releases/` recursively with fsnotify, adds watches for newly-created release/epic/task directories, and reloads task plus release/epic index data plus epic status metadata after debounced file changes. Router priority markers match release + epic + task, not only the short `T###` value; completed cards render with the orange build glyph even if they previously matched router priority. The `p` key explicitly writes the focused non-done task to router state as `task-building`; it does not infer `audit-pending` from task position. Epic status glyphs are cached from each epic's `E##-Detail.md` frontmatter and shown in the wide epic sidebar only.
-
-**Implementation modules:** see AGENTS.md Codebase Map.
-
-**Keybindings:** arrow/vim navigation, enter opens focused task detail, space advances, backspace retreats, `p` marks the focused non-done task as router priority, `r`/`R` opens release selection or refreshes where supported, `?` opens help, and `q` quits or closes overlays.
-
-## 9. Concurrency
-
-- **mtime-based optimistic concurrency.** TUI status writes compare the expected task-file mtime before parsing and again immediately before a no-op or write; conflicts are reported as non-destructive messages that require manual refresh before retry.
-- Agents edit freely; the TUI defers.
-- **No lockfile.**
-
-## 10. Release versioning (PRDs)
-
-- Sequential integer (`v1`, `v2`). Optional `name` in YAML.
-- `savepoint doctor` warns when creating `v2` while `v1` has un-audited epics.
-
-## 11. Failure modes
-
-All failure modes are diagnosed by `savepoint doctor`. Doctor diagnoses and proposes; never auto-destructive.
-
-| Failure                                      | Behavior                                                    |
-| -------------------------------------------- | ----------------------------------------------------------- |
-| Corrupt YAML                                 | Doctor flags file:line. TUI marks `⚠ corrupt`, refuses ops. |
-| Missing dep                                  | Doctor flags. TUI shows `⚠ broken dep`.                     |
-| Dependency cycle                             | Doctor refuses to start either side; prints cycle path.     |
-| Duplicate task ID                            | Doctor flags.                                               |
-| Audit proposals without `audit_pending` flag | Doctor offers cleanup or restore.                           |
-| Task in nonexistent epic                     | Doctor moves to `.savepoint/orphans/`.                      |
-| Missing `config.yml`                         | All commands except `init` refuse.                          |
-| Unknown CLI flag                             | Show help, exit 1.                                          |
-
-## 12. Distribution & build
-
-> Audit note: the live repository is now a Go module (`github.com/opencode/savepoint`). Remaining TypeScript-era distribution details should be removed as Go epics are audited.
-
-- **License:** MIT.
-- **Runtime:** Go CLI binary. Source builds with `go build`; tests run with `go test ./...`.
-- **Local build:** `make build` delegates to `internal/buildtool`, builds `savepoint` or `savepoint.exe`, and injects `main.version` from `VERSION` or the latest git tag.
-- **Cross-platform builds:** `make build-all` cross-compiles linux-amd64, linux-arm64, darwin-amd64, darwin-arm64, windows-amd64, and windows-arm64 raw binaries into `dist/{platform}-{arch}/savepoint` or `savepoint.exe` for Windows. `make ci` runs the repo-local verification sequence used by CI.
-- **Artifacts:** `make dist` creates versioned `.tar.gz` archives in `dist/` for Linux, Darwin, and Windows targets using Go archive APIs, not shell `tar`, and writes SHA256 hashes to `dist/checksums.txt`.
-- **Smoke validation:** `make smoke-test` builds the local binary and runs `--version` as a headless exit-0 check.
-- **No telemetry.** Ever.
-
-## 13. Testing
-
-| Layer                                                    | Tool                             | Coverage                                                               |
-| -------------------------------------------------------- | -------------------------------- | ---------------------------------------------------------------------- |
-| Unit: file ops, YAML, frontmatter, snapshot gen          | `vitest`                         | High                                                                   |
-| Unit: state transitions, dep resolution, cycle detection | `vitest`                         | High                                                                   |
-| Integration: CLI commands in temp dirs                   | `vitest` + `tmp`                 | Medium                                                                 |
-| TUI reducers (state, isolated from rendering)            | `vitest` + `ink-testing-library` | Medium                                                                 |
-| TUI rendering (snapshot tests)                           | —                                | **None.** Brittle.                                                     |
-| End-to-end with real AI agents                           | Manual matrix                    | Pre-release: `[Claude, Cursor, Gemini, Aider]` × `[init, plan, audit]` |
-
-~70% line coverage target; behavior coverage prioritized.
-
-## 14. Package versioning
-
-- `0.1.0` — first public release: scaffolding, status model, CLI, basic TUI, audit (no AI semantic review).
-- `0.2.0` — AI semantic review + broader quality-gate language presets.
-- `0.3.0` — file watching, search.
-- `1.0.0` — MCP server + production stability.
-
-Strict semver. Pre-1.0 minors may break.

package/.savepoint/PRD.md

@@ -1,58 +0,0 @@
----
-type: project-prd
-status: active
----
-
-# Savepoint — Product Vision
-
-## What it is
-
-A public OSS CLI + Ink-based TUI that scaffolds an opinionated AI-driven development workflow. The user runs `npx savepoint init` in an empty directory, points any AI agent (Claude / Cursor / Cline / Gemini / Aider / Codex) at the project, and the embedded prompt templates carry the agent through:
-
-> **PRD → Design → Epics → Tasks → Build → Audit**
-
-…with hard gates at each transition.
-
-run dev npm run build && node dist/cli.js board to test
-
-## Why
-
-Three failure modes plague AI-driven development today:
-
-1. **Inconsistency.** No repeatable process from high-level intent to working MVP.
-2. **Token bloat.** Monolithic backlogs and MCP overhead burn context for everyone, but especially users on minimal AI plans.
-3. **Documentation drift.** `Design.md` and agent instructions go stale after the first iteration; nobody updates them.
-
-Savepoint addresses all three with a single mechanism: **a file-based state machine that any agent can follow, where every epic completion forces a documentation audit before the next epic can start.**
-
-## Target user
-
-**Vibe coders** — builders with minimal-to-moderate development experience, on minimal AI plans, who want AI agents to drive most of the implementation while a structured workflow keeps the project coherent.
-
-Not: experienced engineers who already have their own systems. (They can still use it; they're not the audience.)
-
-## Headline differentiator
-
-**The Audit Loop.** When the last task in an epic moves to `done`, the next epic cannot start until `Design.md`, `AGENTS.md`, and the epic's own design have been reconciled with the actual code that was built. No existing markdown-first task tool has this gate.
-
-Token-efficient hierarchy and markdown-first storage are table stakes. The audit loop is the marketing-first feature.
-
-## Success metrics
-
-- **Token usage:** AI agents complete tasks reading <2KB of context per task. Audit budget bounded to ~5–15KB.
-- **Documentation accuracy:** zero drift — `AGENTS.md` always correctly maps the current codebase, enforced by gate.
-- **Agent reach:** works with any agent that can read markdown and edit files (no MCP required, no per-agent adapters).
-- **Time-to-first-PR:** a vibe coder can go from `npx savepoint init` to a merged epic in one weekend.
-
-## Constraints
-
-- File-only architecture for v1. No MCP server.
-- Agent-agnostic via the [Router Pattern](Design.md). No per-agent forks.
-- Recommended planning model is top-tier (Opus / Gemini Pro / GPT-5.5 equivalent). Lighter models work for execution but planning fidelity drops.
-
-## Out of scope (forever or for now)
-
-- Telemetry. Ever.
-- Multi-user collaboration / cloud sync.
-- Mouse / drag-and-drop in the TUI.
-- Per-language adapter code (we recommend tools, don't ship them).

package/.savepoint/config.yml

@@ -1,27 +0,0 @@
-# Savepoint config — single source of truth for project preferences.
-
-verify_strict: false # vibe-coder soft mode; tasks reach done on assertion. Set true for TDD-strict.
-
-quality_gates:
-  # Filled in by epic E01-scaffolding. Until then, audits skip step 0.
-  lint: null
-  typecheck: null
-  test: null
-  block_on_failure: true
-
-audit:
-  divergence_threshold: 0.5 # warn if a proposal changes >50% of a live file
-
-theme:
-  bg: "#000000"
-  surface: "#000000"
-  surface_2: "#000000"
-  border: "#1A1A1A"
-  text: "#F0E6DA"
-  accents:
-    planned: "#B1A1DF"
-    in_progress: "#FC6323" # Atari Orange
-    done: "#A4C639" # NPP Green
-    blocked: "#FF4444"
-    epic: "#B1A1DF" # Vibe Purple
-  borders: "subtle" # subtle | sharp | none

package/.savepoint/releases/v1/epics/E01-go-setup/E01-Detail.md

@@ -1,39 +0,0 @@
----
-type: epic-design
-status: planned
----
-
-# Epic E01: Go Project Setup
-
-## Purpose
-
-Initialize the savepoint CLI as a Go module. Set up the project directory structure, add Bubble Tea + Lip Gloss dependencies, and establish a working build/test loop.
-
-## What this epic adds
-
-- `go.mod` with module path `github.com/opencode/savepoint`.
-- `main.go` entrypoint that launches the Bubble Tea program.
-- Directory structure: `cmd/`, `internal/board/`, `internal/data/`, `internal/styles/`.
-- `go.sum` with resolved Bubble Tea, Lip Gloss, reflow, and YAML dependencies.
-- `Makefile` or script for `build`, `test`, `run`.
-
-## Definition of Done
-
-- `go mod init` succeeds and `go mod tidy` produces clean `go.mod`/`go.sum`.
-- `go build` produces a working binary.
-- `go test ./...` runs (even if no tests yet, it must not error).
-- Bubble Tea `tea.NewProgram` launches and renders a blank screen.
-- No TypeScript files, `package.json`, or `node_modules` remain at project root.
-
-## Components and files
-
-| Path | Purpose |
-|------|---------|
-| `go.mod` | Go module definition |
-| `go.sum` | Dependency checksums |
-| `main.go` | Entrypoint: tea.NewProgram |
-| `Makefile` | Build/test/run shortcuts |
-| `cmd/` | CLI command setup |
-| `internal/board/` | Board TUI package |
-| `internal/data/` | Data reading/parsing package |
-| `internal/styles/` | Lip Gloss styles package |

package/.savepoint/releases/v1/epics/E01-go-setup/tasks/T001-init-module.md

@@ -1,42 +0,0 @@
----
-id: E01-go-setup/T001-init-module
-status: done
-objective: "Initialize Go module and add Bubble Tea + Lip Gloss dependencies"
-depends_on: []
----
-
-# T001: Initialize Go Module
-
-## Acceptance Criteria
-
-- `go.mod` exists with module path.
-- `go.sum` exists with resolved dependencies.
-- `go build` compiles without errors.
-
-## Implementation Plan
-
-- [x] Run `go mod init github.com/opencode/savepoint`.
-- [x] Add Bubble Tea: `go get github.com/charmbracelet/bubbletea`.
-- [x] Add Lip Gloss: `go get github.com/charmbracelet/lipgloss`.
-- [x] Add YAML parser: `go get gopkg.in/yaml.v3`.
-- [x] Run `go mod tidy`.
-- [x] Verify `go build` succeeds.
-
-## Context Log
-
-Files read:
-
-- `.savepoint/router.md`
-- `.savepoint/releases/v1/epics/E01-go-setup/E01-Detail.md`
-- `.savepoint/releases/v1/epics/E01-go-setup/tasks/T001-init-module.md`
-- `go.mod`
-- `go.sum`
-
-Estimated input tokens: 4,000
-
-Notes:
-
-- `go.mod` exists with module path `github.com/opencode/savepoint`.
-- `go.sum` exists with resolved Bubble Tea, Lip Gloss, YAML, and transitive dependency checksums.
-- `go build ./...` passed during the E01 audit when run outside the sandbox because the Go build cache is outside the workspace.
-- `go test ./...` was not used as T001 evidence because the current failure is in active E02 data-reader test code, outside this task's scope.

package/.savepoint/releases/v1/epics/E01-go-setup/tasks/T002-entrypoint.md

@@ -1,23 +0,0 @@
----
-id: E01-go-setup/T002-entrypoint
-status: done
-objective: "Create main.go that launches a blank Bubble Tea program"
-depends_on: [E01-go-setup/T001-init-module]
----
-
-# T002: Create Entrypoint
-
-## Acceptance Criteria
-
-- `main.go` exists and compiles.
-- Running the binary launches a Bubble Tea program.
-- Pressing `q` or `ctrl+c` exits cleanly.
-- No TypeScript files remain at project root.
-
-## Implementation Plan
-
-- [x] Write `main.go` with `tea.NewProgram` and a minimal model.
-- [x] Implement `Init()`, `Update()`, `View()` on the model.
-- [x] Handle `tea.KeyMsg` for `q` and `ctrl+c`.
-- [x] Verify `go run main.go` launches and quits.
-- [x] Delete `src/`, `test/`, `dist/`, `package.json`, `node_modules/`, `tsconfig.json`, `tsup.config.ts`, `vitest.config.js`, `eslint.config.js`, `.prettierrc.json`.

package/.savepoint/releases/v1/epics/E01-go-setup/tasks/T003-directory-structure.md

@@ -1,24 +0,0 @@
----
-id: E01-go-setup/T003-directory-structure
-status: done
-objective: "Set up internal package directories"
-depends_on: [E01-go-setup/T002-entrypoint]
----
-
-# T003: Directory Structure
-
-## Acceptance Criteria
-
-- `cmd/`, `internal/board/`, `internal/data/`, `internal/styles/` directories exist.
-- `main.go` lives at root and imports `internal/board`.
-- Build compiles with packages.
-
-## Implementation Plan
-
-- [x] Create `cmd/` directory.
-- [x] Create `internal/board/` directory.
-- [x] Create `internal/data/` directory.
-- [x] Create `internal/styles/` directory.
-- [x] Move entrypoint logic into `internal/board/` package.
-- [x] Update `main.go` to delegate to `board.Run()`.
-- [x] Verify `go build`.

package/.savepoint/releases/v1/epics/E01-go-setup/tasks/T004-makefile.md

@@ -1,23 +0,0 @@
----
-id: E01-go-setup/T004-makefile
-status: done
-objective: "Create Makefile for build, test, run"
-depends_on: [E01-go-setup/T003-directory-structure]
----
-
-# T004: Makefile
-
-## Acceptance Criteria
-
-- `Makefile` exists with `build`, `test`, `run`, `clean` targets.
-- `make build` produces a binary.
-- `make test` runs `go test ./...`.
-
-## Implementation Plan
-
-- [x] Create `Makefile`.
-- [x] Add `build` target: `go build -o savepoint main.go`.
-- [x] Add `test` target: `go test ./...`.
-- [x] Add `run` target: `go run main.go`.
-- [x] Add `clean` target: `rm -f savepoint`.
-- [x] Verify all targets work.

package/.savepoint/releases/v1/epics/E02-data-readers/E02-Detail.md

@@ -1,61 +0,0 @@
----
-type: epic-design
-status: audited
----
-
-# Epic E02: Data Readers
-
-## Purpose
-
-Read and parse the `.savepoint/` file structure in Go. Parse YAML frontmatter from task files, read router state, config theme, and discover releases/epics/tasks on disk.
-
-## What this epic adds
-
-- Markdown frontmatter parser (`---\n...\n---`) using `gopkg.in/yaml.v3`.
-- Task struct with phase support.
-- Router state reader (`router.md` yaml block extraction).
-- Config reader (`config.yml` theme parsing).
-- Release/epic/task file discovery (walk directories).
-- Error types for missing files, malformed yaml, schema rejection.
-
-## Definition of Done
-
-- Can read any task `.md` file and parse frontmatter into a Task struct.
-- Can read `router.md` and extract the Current state yaml block.
-- Can read `config.yml` and parse theme colors.
-- Can list all releases, epics within a release, and tasks within an epic.
-- All parsing functions have unit tests.
-- `go test ./internal/data/...` passes.
-
-## Components and files
-
-## Implemented As
-
-- `internal/data/task.go` defines task metadata, column, progress stage, dependency, and progress structs.
-- `internal/data/parser.go` extracts YAML frontmatter from markdown and maps task ID, objective/title, description, status/column, phase/stage, dependency, priority, points, tags, acceptance, notes, release, epic, and progress fields into `Task`.
-- `internal/data/router.go` extracts and parses the `## Current state` fenced YAML block from `router.md`.
-- `internal/data/config.go` reads `config.yml` theme values, fills missing theme fields from defaults, returns defaults when the file is missing, and surfaces malformed YAML/read errors.
-- `internal/data/discover.go` finds the `.savepoint` root and lists release, epic, and task directories in stable order.
-- `internal/data/errors.go` defines shared parser/discovery boundary error sentinels.
-
-## Audit Reconciliation
-
-- Fixed parser field coverage for `status`, `phase`, `depends_on`, and the remaining task metadata fields covered by the `Task` struct.
-- Fixed config boundary behavior so missing files default while malformed YAML and read errors are returned.
-- Replaced discovery tests that depended on the live repository with deterministic temporary fixtures.
-- Added parser tests for malformed YAML and task metadata mapping.
-- Added the planned `internal/data/errors.go` boundary error file.
-
-| Path | Purpose |
-|------|---------|
-| `internal/data/task.go` | Task struct, frontmatter parsing |
-| `internal/data/parser.go` | Markdown YAML frontmatter extraction |
-| `internal/data/router.go` | Router state reader |
-| `internal/data/config.go` | Config/theme reader |
-| `internal/data/discover.go` | Directory walking, file discovery |
-| `internal/data/errors.go` | Error types |
-| `internal/data/parser_test.go` | Frontmatter parser tests |
-| `internal/data/config_test.go` | Config parsing tests |
-| `internal/data/task_test.go` | Task parsing tests |
-| `internal/data/router_test.go` | Router parsing tests |
-| `internal/data/discover_test.go` | Discovery tests |