savepoint 1.0.4 → 1.0.7

package/.savepoint/releases/v1.1/epics/E15-hardening/E15-Audit.md

@@ -1,272 +0,0 @@
----
-type: audit-findings
-audited: 2026-05-06
----
-# Audit Findings: E15 Phase 3 - Hardening
-
-## Main Findings
-
-Applied the E15 audit proposals and closed the epic as audited.
-
-- Fixed the Windows archive packaging issue: Windows tarballs now preserve `savepoint.exe` as the archive member name instead of extracting as `savepoint`.
-- Added a regression test covering the Windows archive member name.
-- Reconciled E15 documentation drift in `Design.md`, `AGENTS.md`, and `E15-Detail.md`.
-- Marked `E15-Detail.md` as `status: audited`.
-- Updated `Design.md` `last_audited` to `v1.1/E15-hardening`.
-- Advanced router state to `epic-design` with no active epic because there are no later unarchived epics in v1.1.
-
-Verification after applying proposals:
-
-- `go test ./internal/buildtool`
-- `make build`
-- `make test`
-- `make ci`
-
-No remaining audit blockers are known. The `## Proposed Changes` section remains below as the apply trace.
-
-## Code Style Review
-
-- [x] One job per file - E15 changes stayed within board rendering/debug, data parsing/fuzzing, buildtool packaging, CI, and task metadata.
-- [x] One job per function - new helpers such as `executableName`, `writeChecksums`, `stripDebugFlag`, `debugf`, and abbreviation checks are narrowly scoped.
-- [x] Test branches - Windows build output and Windows archive member naming are now covered.
-- [x] Types document intent - existing Go types and small helper APIs remain explicit enough for this scope.
-- [x] Build only what is needed - no speculative runtime features were added beyond E15 scope.
-- [x] Handle errors at boundaries - buildtool, filesystem, checksum, fuzz, and parser errors are propagated with context.
-- [x] One source of truth - target lists and executable naming are centralized in buildtool; the proposed archive fix reuses that source.
-- [x] Comments explain why - new comments document abbreviation suppression and audit-tab hidden sections rather than restating obvious code.
-- [x] Content lives in data - workflow and architecture copy remain in markdown; no new product copy was embedded in logic.
-- [x] Small diffs - most changes are localized, test-backed additions.
-
-## Proposed Changes
-
-### Target File
-internal/buildtool/main.go
-
-### Replace
-```go
-		if err := writeTarGz(archive, source, "savepoint"); err != nil {
-```
-
-### With
-```go
-		if err := writeTarGz(archive, source, executableName(target.os)); err != nil {
-```
-
-### Target File
-internal/buildtool/main_test.go
-
-### Replace
-```go
-import (
-	"crypto/sha256"
-	"encoding/hex"
-	"os"
-	"path/filepath"
-	"runtime"
-	"strings"
-	"testing"
-)
-```
-
-### With
-```go
-import (
-	"archive/tar"
-	"compress/gzip"
-	"crypto/sha256"
-	"encoding/hex"
-	"io"
-	"os"
-	"path/filepath"
-	"runtime"
-	"strings"
-	"testing"
-)
-```
-
-### Target File
-internal/buildtool/main_test.go
-
-### Replace
-```go
-func TestExecutableName(t *testing.T) {
-	if got := executableName("windows"); got != "savepoint.exe" {
-		t.Errorf("executableName(windows) = %q, want savepoint.exe", got)
-	}
-	if got := executableName("linux"); got != "savepoint" {
-		t.Errorf("executableName(linux) = %q, want savepoint", got)
-	}
-	if got := executableName("darwin"); got != "savepoint" {
-		t.Errorf("executableName(darwin) = %q, want savepoint", got)
-	}
-}
-```
-
-### With
-```go
-func TestExecutableName(t *testing.T) {
-	if got := executableName("windows"); got != "savepoint.exe" {
-		t.Errorf("executableName(windows) = %q, want savepoint.exe", got)
-	}
-	if got := executableName("linux"); got != "savepoint" {
-		t.Errorf("executableName(linux) = %q, want savepoint", got)
-	}
-	if got := executableName("darwin"); got != "savepoint" {
-		t.Errorf("executableName(darwin) = %q, want savepoint", got)
-	}
-}
-
-func TestWriteTarGzPreservesWindowsExecutableName(t *testing.T) {
-	dir := t.TempDir()
-	source := filepath.Join(dir, "savepoint.exe")
-	if err := os.WriteFile(source, []byte("binary"), 0o755); err != nil {
-		t.Fatal(err)
-	}
-
-	archive := filepath.Join(dir, "savepoint-windows-amd64.tar.gz")
-	if err := writeTarGz(archive, source, executableName("windows")); err != nil {
-		t.Fatalf("writeTarGz: %v", err)
-	}
-
-	f, err := os.Open(archive)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer f.Close()
-
-	gz, err := gzip.NewReader(f)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer gz.Close()
-
-	tr := tar.NewReader(gz)
-	header, err := tr.Next()
-	if err != nil {
-		t.Fatal(err)
-	}
-	if header.Name != "savepoint.exe" {
-		t.Fatalf("archive member = %q, want savepoint.exe", header.Name)
-	}
-
-	content, err := io.ReadAll(tr)
-	if err != nil {
-		t.Fatal(err)
-	}
-	if string(content) != "binary" {
-		t.Fatalf("archive content = %q, want binary", content)
-	}
-}
-```
-
-### Target File
-.savepoint/Design.md
-
-### Replace
-```md
-- **Structural improvement baseline** (v1.1 E14) groups board `Model` fields into focused embedded state structs, defines consumer-side board/doctor data-access interfaces, routes doctor orphan discovery through `Discover.ListRootDirs`, renders audit-tab hidden sections via exact heading matches, improves quality-gate shell tokenization for quoted and escaped arguments, removes the separate `TaskStatus` enum in favor of `ColumnType`, and adds `internal/testutil` for shared Go test fixtures.
-- **Agent audit workflow** is skill-driven, not a CLI pipeline. At `audit-pending`, a fresh audit agent writes one epic-local `E##-Audit.md`; the user reviews its Audit tab, then asks an agent to apply the admin proposal blocks, update the visible audit findings to reflect the applied outcome, and close the epic.
-```
-
-### With
-```md
-- **Structural improvement baseline** (v1.1 E14) groups board `Model` fields into focused embedded state structs, defines consumer-side board/doctor data-access interfaces, routes doctor orphan discovery through `Discover.ListRootDirs`, renders audit-tab hidden sections via exact heading matches, improves quality-gate shell tokenization for quoted and escaped arguments, removes the separate `TaskStatus` enum in favor of `ColumnType`, and adds `internal/testutil` for shared Go test fixtures.
-- **Hardening baseline** (v1.1 E15) adds board render/layout benchmarks, data frontmatter fuzz targets, debug logging via CLI `--debug` or `SAVEPOINT_DEBUG`, abbreviation-aware task checklist sentence splitting, root test package isolation, documented audit-tab hidden-section allowlisting, repo-local CI, `make ci`, distribution SHA256 checksums, and Windows amd64/arm64 build outputs.
-- **Agent audit workflow** is skill-driven, not a CLI pipeline. At `audit-pending`, a fresh audit agent writes one epic-local `E##-Audit.md`; the user reviews its Audit tab, then asks an agent to apply the admin proposal blocks, update the visible audit findings to reflect the applied outcome, and close the epic.
-```
-
-### Target File
-.savepoint/Design.md
-
-### Replace
-```md
-- **Cross-platform builds:** `make build-all` cross-compiles linux-amd64, linux-arm64, darwin-amd64, and darwin-arm64 raw binaries into `dist/{platform}-{arch}/savepoint`.
-- **Artifacts:** `make dist` creates versioned `.tar.gz` archives in `dist/` for the Linux and Darwin targets using Go archive APIs, not shell `tar`.
-```
-
-### With
-```md
-- **Cross-platform builds:** `make build-all` cross-compiles linux-amd64, linux-arm64, darwin-amd64, darwin-arm64, windows-amd64, and windows-arm64 raw binaries into `dist/{platform}-{arch}/savepoint` or `savepoint.exe` for Windows. `make ci` runs the repo-local verification sequence used by CI.
-- **Artifacts:** `make dist` creates versioned `.tar.gz` archives in `dist/` for Linux, Darwin, and Windows targets using Go archive APIs, not shell `tar`, and writes SHA256 hashes to `dist/checksums.txt`.
-```
-
-### Target File
-AGENTS.md
-
-### Replace
-```md
-| `internal/board/` | TUI board, overlays, epic sidebar, Next Activity line, router priority key, detail checklist rendering, status glyphs, forced color profile, async update I/O commands, shared board utilities |
-```
-
-### With
-```md
-| `internal/board/` | TUI board, overlays, epic sidebar, Next Activity line, router priority key, detail checklist rendering, status glyphs, forced color profile, debug logging hooks, async update I/O commands, shared board utilities |
-```
-
-### Target File
-AGENTS.md
-
-### Replace
-```md
-| `internal/buildtool/` | Makefile helper, cross-compile, archives |
-```
-
-### With
-```md
-| `internal/buildtool/` | Makefile helper, cross-compile including Windows targets, archives, distribution checksums |
-```
-
-### Target File
-.savepoint/releases/v1.1/epics/E15-hardening/E15-Detail.md
-
-### Replace
-```md
-## Components
-
-| Module | Purpose |
-|--------|---------|
-| `internal/board/view_test.go` | Add render benchmarks |
-| `internal/data/parser_test.go` | Add fuzz targets |
-| `cmd/main.go` | Add --debug / SAVEPOINT_DEBUG |
-| `internal/buildtool/main.go` | Add checksums, Windows targets |
-| `internal/board/detail.go` | Fix abbreviation handling |
-| `internal/board/epic_panel.go` | Extract allowlist constant |
-| `agent_skills_test.go` | Move to cmd_test package |
-| `Makefile` | Add `ci` target for local verification |
-| `.github/workflows/ci.yml` | Add repo CI workflow |
-
-## Boundaries
-```
-
-### With
-```md
-## Components
-
-| Module | Purpose |
-|--------|---------|
-| `internal/board/view_test.go` | Add render and layout benchmarks |
-| `internal/board/card_test.go` | Add card render benchmarks |
-| `internal/board/column_test.go` | Add column render benchmarks |
-| `internal/data/fuzz_test.go` | Add frontmatter and split-body fuzz targets |
-| `main.go` | Add global --debug parsing and SAVEPOINT_DEBUG activation |
-| `internal/board/debug.go` | Add board debug logging helper |
-| `internal/board/board.go` | Log board initialization under debug mode |
-| `internal/board/watch.go` | Log watcher and reload activity under debug mode |
-| `internal/board/update.go` | Log update dispatch and preserve focused-card visibility |
-| `internal/buildtool/main.go` | Add checksums and Windows targets |
-| `internal/board/detail.go` | Fix abbreviation handling |
-| `internal/board/epic_panel.go` | Document audit hidden-section allowlist |
-| `agent_skills_test.go` | Move to external root test package |
-| `Makefile` | Add `ci` target for local verification |
-| `.github/workflows/ci.yml` | Add repo CI workflow |
-
-## Implemented As
-
-- Debug activation is in root `main.go` because global flags are parsed before dispatching into `cmd/`.
-- Fuzz targets live in `internal/data/fuzz_test.go` rather than `internal/data/parser_test.go`.
-- Fuzzing found and fixed `SplitFrontmatterBody` delimiter-offset handling and CR line-ending normalization.
-- Root `agent_skills_test.go` remains at the repository root but now uses external package `main_test`, which removes the root package coupling without moving fixture-relative paths.
-- CI was included as repo-local guardrail scope for E15 via `T008-ci-and-release-automation`.
-
-## Boundaries
-```

package/.savepoint/releases/v1.1/epics/E15-hardening/E15-Detail.md

@@ -1,60 +0,0 @@
----
-type: epic-design
-status: audited
----
-
-# E15: Phase 3 — Hardening
-
-## Purpose
-
-Address the remaining Phase 3 findings from the consolidated codebase audit (Opus 4.6 + GLM 5.1) that were not covered by E13: benchmarks, fuzzing, debug instrumentation, and hardening Medium/Low items.
-
-## What this epic adds
-
-- Benchmark tests for render functions
-- Fuzz targets for YAML frontmatter parsing
-- --debug flag and SAVEPOINT_DEBUG environment variable
-- Distribution checksums in buildtool
-- Windows build targets in buildtool
-- Abbreviation-aware checklist sentence splitting
-- Root-level test relocation and audit allowlist consolidation
-- Repo-local CI workflow and `ci` Makefile target for build/test verification
-
-## Components
-
-| Module | Purpose |
-|--------|---------|
-| `internal/board/view_test.go` | Add render and layout benchmarks |
-| `internal/board/card_test.go` | Add card render benchmarks |
-| `internal/board/column_test.go` | Add column render benchmarks |
-| `internal/data/fuzz_test.go` | Add frontmatter and split-body fuzz targets |
-| `main.go` | Add global --debug parsing and SAVEPOINT_DEBUG activation |
-| `internal/board/debug.go` | Add board debug logging helper |
-| `internal/board/board.go` | Log board initialization under debug mode |
-| `internal/board/watch.go` | Log watcher and reload activity under debug mode |
-| `internal/board/update.go` | Log update dispatch and preserve focused-card visibility |
-| `internal/buildtool/main.go` | Add checksums and Windows targets |
-| `internal/board/detail.go` | Fix abbreviation handling |
-| `internal/board/epic_panel.go` | Document audit hidden-section allowlist |
-| `agent_skills_test.go` | Move to external root test package |
-| `Makefile` | Add `ci` target for local verification |
-| `.github/workflows/ci.yml` | Add repo CI workflow |
-
-## Implemented As
-
-- Debug activation is in root `main.go` because global flags are parsed before dispatching into `cmd/`.
-- Fuzz targets live in `internal/data/fuzz_test.go` rather than `internal/data/parser_test.go`.
-- Fuzzing found and fixed `SplitFrontmatterBody` delimiter-offset handling and CR line-ending normalization.
-- Root `agent_skills_test.go` remains at the repository root but now uses external package `main_test`, which removes the root package coupling without moving fixture-relative paths.
-- CI was included as repo-local guardrail scope for E15 via `T008-ci-and-release-automation`.
-
-## Boundaries
-
-**In scope:**
-- All Phase 3 audit findings not covered by E13 (benchmarks, fuzz, debug flag)
-- Medium/Low hardening items (M10, L7, L10, L11, L12)
-
-**Out of scope:**
-- External deployment hosting beyond repo-local CI/release automation
-- New UI features or commands
-- Structural improvements (separate epic E14)

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T001-benchmarks.md

@@ -1,31 +0,0 @@
----
-id: E15-hardening/T001-benchmarks
-status: done
-objective: Add benchmark tests for board render functions
-depends_on: []
----
-
-# T001: Add Benchmark Tests for Render Functions
-
-## Context Files
-
-- `internal/board/view.go` — renderColumn, renderColumnHeaders
-- `internal/board/card.go` — RenderCard
-- `internal/board/column.go` — RenderColumn
-- `internal/board/layout.go` — layout calculations
-
-## Acceptance Criteria
-
-- [x] Benchmark added for RenderCard with varied content widths
-- [x] Benchmark added for renderColumn with multiple tasks
-- [x] Benchmark added for layout calculations at different widths
-- [x] Benchmarks are repeatable with consistent results
-- [x] Benchmarks don't modify package state
-- [x] `go test -bench=. ./internal/board/` runs without errors
-
-## Implementation Plan
-
-- [x] Add benchmark functions in view_test.go, card_test.go, column_test.go
-- [x] Create test data with representative task mixtures
-- [x] Run benchmarks and document baseline
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T002-fuzz-targets.md

@@ -1,34 +0,0 @@
----
-id: E15-hardening/T002-fuzz-targets
-status: done
-objective: Add fuzz targets for YAML frontmatter parsing round-trip
-depends_on: []
----
-
-# T002: Add Fuzz Targets for YAML Frontmatter Parsing
-
-## Context Files
-
-- `internal/data/parser.go` — extractFrontmatter
-- `internal/data/write.go` — WriteTaskStatus, SplitFrontmatterBody
-- `internal/data/parser_test.go` — existing tests
-
-## Acceptance Criteria
-
-- [x] Fuzz target added for extractFrontmatter round-trip
-- [x] Fuzz target added for WriteTaskStatus round-trip (write then re-parse)
-- [x] Fuzz targets exercise edge cases (empty content, malformed YAML, unicode)
-- [x] `go test -fuzz=. ./internal/data/` runs without errors
-
-## Implementation Plan
-
-- [x] Create fuzz_test.go in internal/data with fuzz targets
-- [x] Define corpus seed inputs from known edge cases
-- [x] Run fuzz targets for short duration to verify stability
-- [x] Run `make build && make test`
-
-## Drift Notes
-
-- Fuzzer found bug in `SplitFrontmatterBody`: used `len(TrimSpace(raw))` for bodyStart, causing off-by-N when frontmatter has leading/trailing whitespace. Fixed to compute bodyStart from actual `\n---` offset.
-- Fuzzer found `normalizeLineEndings` not idempotent with `\r\r\n` sequences. Fixed to also replace lone `\r` with `\n` (handles legacy Mac CR line endings).
-- No new files/modules beyond `internal/data/fuzz_test.go` (in-scope per E15-Detail.md).

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T003-debug-flag.md

@@ -1,30 +0,0 @@
----
-id: E15-hardening/T003-debug-flag
-status: done
-objective: Add --debug flag and SAVEPOINT_DEBUG env var for structured debug logging
-depends_on: []
----
-
-# T003: Add --debug Flag and SAVEPOINT_DEBUG Env Var
-
-## Context Files
-
-- `main.go` — CLI entrypoint, --version flag
-- `cmd/` — command dispatch
-- `internal/board/` — board init, file watchers, command dispatch
-
-## Acceptance Criteria
-
-- [x] --debug flag accepted at CLI level
-- [x] SAVEPOINT_DEBUG env var recognized
-- [x] Debug output includes board init, file watcher events, and command dispatch
-- [x] Debug output is off by default (no performance impact)
-- [x] `go test ./...` passes with no regressions
-
-## Implementation Plan
-
-- [x] Define debug logging helper in a shared location
-- [x] Add --debug flag parsing in main.go
-- [x] Instrument key points in board init, file watcher, and update dispatch
-- [x] Add tests for debug flag behavior
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T004-dist-checksums.md

@@ -1,27 +0,0 @@
----
-id: E15-hardening/T004-dist-checksums
-status: done
-objective: Generate checksums.txt during make dist using Go crypto APIs
-depends_on: []
----
-
-# T004: Add Distribution Checksums
-
-## Context Files
-
-- `internal/buildtool/main.go` — dist() function that creates tar.gz archives
-- `Makefile` — dist target
-
-## Acceptance Criteria
-
-- [x] dist() generates checksums.txt file with SHA256 hashes
-- [x] checksums.txt is included in the dist directory
-- [x] Existing archive creation behavior preserved
-- [x] `go test ./...` passes
-
-## Implementation Plan
-
-- [x] Add SHA256 checksum computation in dist() using crypto/sha256
-- [x] Write checksums.txt to dist directory
-- [x] Add tests for checksum generation
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T005-windows-targets.md

@@ -1,28 +0,0 @@
----
-id: E15-hardening/T005-windows-targets
-status: done
-objective: Add Windows amd64 and arm64 build targets to buildtool
-depends_on: []
----
-
-# T005: Add Windows Build Targets
-
-## Context Files
-
-- `internal/buildtool/main.go` — targets list, build logic, localExecutable
-
-## Acceptance Criteria
-
-- [x] Windows amd64 target added
-- [x] Windows arm64 target added
-- [x] .exe suffix handled for Windows binaries
-- [x] Existing Linux and Darwin targets preserved
-- [x] `go test ./...` passes
-
-## Implementation Plan
-
-- [x] Add windows-amd64 and windows-arm64 to targets list
-- [x] Handle .exe suffix in build output path via `executableName(goos)`
-- [x] Update localExecutable to detect Windows (already done in prior task)
-- [x] Update tests for new targets
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T006-abbreviation-splitting.md

@@ -1,26 +0,0 @@
----
-id: E15-hardening/T006-abbreviation-splitting
-status: done
-objective: Fix splitChecklistSentences to skip periods preceded by known abbreviations
-depends_on: []
----
-
-# T006: Fix Abbreviation Handling in Checklist Sentence Splitting
-
-## Context Files
-
-- `internal/board/detail.go:88` — splitChecklistSentences function
-
-## Acceptance Criteria
-
-- [x] Known abbreviations (e.g., "e.g.", "i.e.") do not trigger sentence breaks
-- [x] Existing sentence splitting behavior preserved for non-abbreviation periods
-- [x] Abbreviation list is configurable/extensible
-- [x] `go test ./...` passes with no regressions
-
-## Implementation Plan
-
-- [x] Define known abbreviation set
-- [x] Add abbreviation check before period-based sentence split
-- [x] Add test cases for abbreviations in sentences
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T007-root-test-allowlist.md

@@ -1,33 +0,0 @@
----
-id: E15-hardening/T007-root-test-allowlist
-status: done
-objective: Move agent_skills_test.go to a test package and extract audit allowlist to a named constant
-depends_on: []
----
-
-# T007: Move Root-Level Test and Extract Audit Allowlist
-
-## Context Files
-
-- `agent_skills_test.go` — root-level package main test
-- `internal/board/epic_panel.go:116-119` — allowedSections map
-
-## Acceptance Criteria
-
-- [x] agent_skills_test.go moved to cmd_test package (or appropriate location)
-- [x] allowedSections extracted to a named constant with documentation
-- [x] All existing tests still pass after refactoring
-- [x] `go test ./...` passes with no regressions
-
-## Implementation Plan
-
-- [x] Move agent_skills_test.go to an appropriate internal test package
-- [x] Update imports and paths in moved test
-- [x] Extract allowedSections map to a named constant
-- [x] Update any references in epic_panel.go
-- [x] Run `make build && make test`
-
-## Notes
-
-- `agent_skills_test.go` changed from `package main` → `package main_test` (external test package at root). Paths remain valid since Go test working dir is the package dir.
-- `epicAuditHiddenSectionHeadings` already extracted as package-level var; added doc comment explaining suppression rationale.

package/.savepoint/releases/v1.1/epics/E15-hardening/tasks/T008-ci-and-release-automation.md

@@ -1,46 +0,0 @@
----
-id: E15-hardening/T008-ci-and-release-automation
-status: done
-objective: Add repo-local CI coverage for build/test checks and keep the buildtool-driven release flow reproducible
-depends_on: []
----
-
-# T008: Add CI and Release Automation Guardrails
-
-## Context Files
-
-- `Makefile` - local entrypoint for build, test, and dist commands
-- `internal/buildtool/main.go` - build orchestration and packaging logic
-- `.savepoint/releases/v1.1/epics/E15-hardening/E15-Detail.md` - epic scope and component map
-
-## Acceptance Criteria
-
-- [x] `.github/workflows/ci.yml` exists and runs on push and pull_request events
-- [x] The CI workflow runs `go test ./...` and `make build` at minimum
-- [x] The CI workflow uses the repo-local Makefile targets rather than duplicating buildtool logic inline
-- [x] `Makefile` exposes a `ci` target that runs the local verification steps used by CI
-- [x] Generated binaries and archives remain excluded from version control via `.gitignore`
-
-## Implementation Plan
-
-- [x] Add a GitHub Actions workflow for CI in `.github/workflows/ci.yml`
-- [x] Add a `ci` Makefile target that wraps the local verification commands
-- [x] Reuse existing `build`, `test`, and `smoke-test` targets instead of duplicating orchestration
-- [x] Confirm artifact ignore rules still cover local binaries and archives
-- [x] Run `make build && make test`
-
-## Context Log
-
-Files read:
-- Makefile
-- internal/buildtool/main.go
-- .gitignore
-- .savepoint/releases/v1.1/epics/E15-hardening/E15-Detail.md
-- main.go
-- go.mod
-
-Estimated input tokens:
-- 
-
-Notes:
-- 

package/.savepoint/releases/v1.1/epics/_archived/T001-cli-entrypoint.md

@@ -1,25 +0,0 @@
----
-id: E06-audit-command/T001-cli-entrypoint
-status: in_progress
-objective: "Create CLI entrypoint for savepoint audit command"
-depends_on: []
----
-
-# T001: CLI Entrypoint
-
-## Acceptance Criteria
-
-- `savepoint audit --help` shows usage: `audit <epic-id|release> [--skip --reason]`
-- `savepoint audit <epic-id>` runs audit for that epic
-- `savepoint audit <release>` runs audit for all unaudited epics in that release
-- `savepoint audit --skip --reason "..."` skips the audit and logs reason
-- Unknown arguments show error and exit non-zero
-
-## Implementation Plan
-
-- [x] Add `cmd/audit.go` with CLI argument parsing
-- [x] Wire audit command into main.go
-- [x] Implement arg validation for epic-id (E##) and release (v#.#) formats
-- [x] Add subcommand dispatch to audit workflow
-- [x] Test `savepoint audit --help` output
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/_archived/T002-quality-gates.md

@@ -1,27 +0,0 @@
----
-id: E06-audit-command/T002-quality-gates
-status: done
-objective: "Implement quality gate runner that blocks on failure"
-depends_on: ["E06-audit-command/T001-cli-entrypoint"]
-phase: build
----
-
-# T002: Quality Gates
-
-## Acceptance Criteria
-
-- Reads `quality_gates` from `.savepoint/config.yml`
-- Runs each configured command (lint, typecheck, test)
-- Blocks audit if any gate fails and `block_on_failure: true`
-- Continues if `block_on_failure: false` but logs failure
-- Shows clear output: which gates passed/failed
-
-## Implementation Plan
-
-- [x] Add `internal/audit/gates.go`
-- [x] Read config `quality_gates` struct
-- [x] Implement `RunGates(ctx) error` that executes each command
-- [x] Handle null gates (skip if not configured)
-- [x] Add exit code propagation for blocking behavior
-- [x] Test with configured gates in .savepoint/config.yml
-- [x] Run `make build && make test`

package/.savepoint/releases/v1.1/epics/_archived/T003-snapshot.md

@@ -1,27 +0,0 @@
----
-id: E06-audit-command/T003-snapshot
-status: planned
-objective: "Generate file tree and changed-files snapshot"
-depends_on: ["E06-audit-command/T002-quality-gates"]
----
-
-# T003: Snapshot Generation
-
-## Acceptance Criteria
-
-- Generates `.savepoint/audit/{release}/{epic}/snapshot.md`
-- Includes file tree (gitignore-respecting)
-- Includes list of changed files (from git)
-- Does NOT include file contents (no code in snapshot)
-- Snapshot path matches expected format
-
-## Implementation Plan
-
-- [ ] Add `internal/audit/snapshot.go`
-- [ ] Implement `GenerateSnapshot(epic, release) error`
-- [ ] Walk directory tree respecting .gitignore
-- [ ] Run `git diff --name-only` for changed files
-- [ ] Write snapshot.md with tree + changed-files sections
-- [ ] Create audit directory if not exists
-- [ ] Test snapshot output format
-- [ ] Run `make build && make test`