docguard-cli 0.34.6__tar.gz → 0.34.7__tar.gz

{docguard_cli-0.34.6/extensions/spec-kit-docguard → docguard_cli-0.34.7/.agent}/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.34.6
+  version: 0.34.7
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.34.6 -->
+<!-- docguard:version: 0.34.7 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.agent/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.34.6
+  version: 0.34.7
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.34.6 -->
+<!-- docguard:version: 0.34.7 -->
 
 # DocGuard Guard Skill
 

{docguard_cli-0.34.6/extensions/spec-kit-docguard → docguard_cli-0.34.7/.agent}/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.34.6
+  version: 0.34.7
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.34.6 -->
+<!-- docguard:version: 0.34.7 -->
 
 # DocGuard Review Skill
 

{docguard_cli-0.34.6/extensions/spec-kit-docguard → docguard_cli-0.34.7/.agent}/skills/docguard-score/SKILL.md

@@ -6,10 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.34.6
+  version: 0.34.7
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.34.6 -->
+<!-- docguard:version: 0.34.7 -->
 
 # DocGuard Score Skill
 

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.agent/skills/docguard-sync/SKILL.md

@@ -4,10 +4,10 @@ description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-trut
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.34.6
+  version: 0.34.7
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.34.6 -->
+<!-- docguard:version: 0.34.7 -->
 
 # DocGuard Sync Skill
 

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.github/workflows/release.yml

@@ -212,11 +212,23 @@ jobs:
           # permission" while an empty _authToken was present, then ENEEDAUTH
           # once it wasn't -- neither of which names the actual cause.
           node-version: 24
-          # registry-url IS required (npm's documented example sets it). An
-          # earlier theory blamed the empty _authToken it writes; that was
-          # wrong. The empty token only mattered BECAUSE Node 20 had already
-          # taken OIDC off the table, leaving token auth as the only path.
-          registry-url: 'https://registry.npmjs.org'
+          # NO registry-url, deliberately, and this combination has never
+          # actually been tried before. Tracing every failed run:
+          #   v0.34.4  Node 20 + registry-url  -> E404      (Node too old for
+          #                                                  OIDC; empty token
+          #                                                  used instead)
+          #   v0.34.5  Node 20 + no registry   -> ENEEDAUTH (no token at all,
+          #                                                  Node still too old)
+          #   v0.34.6  Node 24 + registry-url  -> E404      (Node fine, but the
+          #                                                  empty _authToken
+          #                                                  setup-node writes
+          #                                                  took the token path)
+          # Each run had exactly ONE of the two blockers. Node >= 22.14 clears
+          # the OIDC floor; omitting registry-url stops setup-node writing
+          # `//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}`, which with
+          # NODE_AUTH_TOKEN unset expands to an EMPTY token that npm still
+          # treats as configured auth. npm defaults to registry.npmjs.org
+          # anyway, so nothing is lost by omitting it.
 
       # Belt and braces: Node 24 already bundles npm >= 11.5.1, but pin
       # explicitly so a runner-image change can't silently drop below the
@@ -250,12 +262,37 @@ jobs:
           fi
           echo "OIDC preconditions satisfied."
 
+      # Diagnostics. Six releases have failed here on a generic 404 that never
+      # names the real cause, so capture the auth state BEFORE publishing
+      # rather than inferring it from the failure afterwards.
+      - name: Diagnose npm auth state
+        run: |
+          echo "--- versions ---"
+          echo "node=$(node -p 'process.versions.node')  npm=$(npm --version)"
+          echo "--- OIDC env present? (values intentionally not printed) ---"
+          [ -n "$ACTIONS_ID_TOKEN_REQUEST_URL" ] && echo "ACTIONS_ID_TOKEN_REQUEST_URL: set" || echo "ACTIONS_ID_TOKEN_REQUEST_URL: MISSING"
+          [ -n "$ACTIONS_ID_TOKEN_REQUEST_TOKEN" ] && echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN: set" || echo "ACTIONS_ID_TOKEN_REQUEST_TOKEN: MISSING"
+          echo "--- resolved registry ---"
+          npm config get registry
+          echo "--- .npmrc files (token VALUES redacted, presence shown) ---"
+          USERCONFIG=$(npm config list | sed -n 's/^userconfig = "\(.*\)"$/\1/p')
+          for f in "$USERCONFIG" ".npmrc" "$HOME/.npmrc"; do
+            if [ -n "$f" ] && [ -f "$f" ]; then
+              echo "  [$f]"
+              sed -E 's/(_authToken=).*/\1<REDACTED-OR-EMPTY>/' "$f" | sed 's/^/    /'
+            else
+              echo "  [$f] (absent)"
+            fi
+          done
+
       # No --provenance flag and no NODE_AUTH_TOKEN: under Trusted Publishing
       # npm generates provenance attestations automatically, and the OIDC
       # exchange against the trusted-publisher connection on npmjs.com
       # (raccioly/docguard -> release.yml) IS the authentication.
+      # --loglevel verbose so that if this fails again, the log shows which
+      # auth path npm chose instead of leaving it to inference.
       - name: Publish (provenance is automatic under Trusted Publishing)
-        run: npm publish
+        run: npm publish --loglevel verbose
 
   # ── Step 6: Publish to PyPI ────────────────────────────────────────────
   publish-pypi:

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.wolf/anatomy.md

@@ -1,6 +1,6 @@
 # anatomy.md
 
-> Auto-maintained by OpenWolf. Last scanned: 2026-09-11T15:58:20.999Z
+> Auto-maintained by OpenWolf. Last scanned: 2026-09-11T16:09:12.886Z
 > Files: 707 tracked | Anatomy hits: 0 | Misses: 0
 
 ## ../../../../../../../tmp/
@@ -962,7 +962,7 @@
 - `auto-merge.yml` — CI: Auto-merge (green bot PRs) (~2234 tok)
 - `ci.yml` — CI: DocGuard CI (~1843 tok)
 - `jules-triage.yml` — CI: Jules PR Triage (~1635 tok)
-- `release.yml` — CI: Auto Release — Tag, GitHub Release, npm, PyPI (~4763 tok)
+- `release.yml` — CI: Auto Release — Tag, GitHub Release, npm, PyPI (~5444 tok)
 - `scheduled-release.yml` — CI: Scheduled Release (~2099 tok)
 - `sync-speckit-catalog.yml` — CI: Prepare Spec Kit Catalog Submission (Manual) (~1385 tok)
 

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.wolf/buglog.json

@@ -4752,6 +4752,22 @@
       "related_bugs": [],
       "occurrences": 1,
       "last_seen": "2026-09-11T15:57:59.781Z"
+    },
+    {
+      "id": "bug-288",
+      "timestamp": "2026-09-11T16:08:59.962Z",
+      "error_message": "Significant refactor of ",
+      "file": ".github/workflows/release.yml",
+      "root_cause": "5 lines replaced/restructured",
+      "fix": "Rewrote 6→18 lines (5 removed)",
+      "tags": [
+        "auto-detected",
+        "refactor",
+        "yml"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-09-11T16:08:59.962Z"
     }
   ]
 }

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.wolf/hooks/_session.json

@@ -18,8 +18,8 @@
       "first_read": "2026-09-11T14:49:34.552Z"
     },
     "/Users/ricardoaccioly/Repo_claude/canonical-spec-kit/.github/workflows/release.yml": {
-      "count": 6,
-      "tokens": 4964,
+      "count": 7,
+      "tokens": 4763,
       "first_read": "2026-09-11T15:15:37.248Z"
     },
     "/private/tmp/claude-501/-Users-ricardoaccioly-Repo-claude-canonical-spec-kit/25ac0636-5765-49fe-a808-dd97dc825b30/tasks/bcylzwtls.output": {
@@ -36,6 +36,11 @@
       "count": 1,
       "tokens": 0,
       "first_read": "2026-09-11T15:56:42.484Z"
+    },
+    "/private/tmp/claude-501/-Users-ricardoaccioly-Repo-claude-canonical-spec-kit/25ac0636-5765-49fe-a808-dd97dc825b30/tasks/b4o2fwehl.output": {
+      "count": 1,
+      "tokens": 0,
+      "first_read": "2026-09-11T16:01:53.189Z"
     }
   },
   "files_written": [
@@ -206,13 +211,25 @@
       "action": "edit",
       "tokens": 594,
       "at": "2026-09-11T15:58:21.011Z"
+    },
+    {
+      "file": "/Users/ricardoaccioly/Repo_claude/canonical-spec-kit/.github/workflows/release.yml",
+      "action": "edit",
+      "tokens": 375,
+      "at": "2026-09-11T16:08:59.960Z"
+    },
+    {
+      "file": "/Users/ricardoaccioly/Repo_claude/canonical-spec-kit/.github/workflows/release.yml",
+      "action": "edit",
+      "tokens": 526,
+      "at": "2026-09-11T16:09:12.899Z"
     }
   ],
   "edit_counts": {
     ".github/dependabot.yml": 1,
     "CHANGELOG.md": 9,
     "package.json": 3,
-    ".github/workflows/release.yml": 7,
+    ".github/workflows/release.yml": 9,
     ".github/workflows/ci.yml": 1,
     ".github/workflows/auto-merge.yml": 3,
     ".github/workflows/scheduled-release.yml": 2,
@@ -220,8 +237,8 @@
     "tests/commands.test.mjs": 1
   },
   "anatomy_hits": 2,
-  "anatomy_misses": 5,
-  "repeated_reads_warned": 7,
+  "anatomy_misses": 6,
+  "repeated_reads_warned": 8,
   "cerebrum_warnings": 0,
-  "stop_count": 17
+  "stop_count": 19
 }

{docguard_cli-0.34.6 → docguard_cli-0.34.7}/.wolf/memory.md

@@ -1312,3 +1312,7 @@
 | 11:56 | Session end: 26 writes across 9 files (dependabot.yml, CHANGELOG.md, package.json, release.yml, ci.yml) | 6 reads | ~68423 tok |
 | 11:57 | Edited .github/workflows/release.yml | 14→17 lines | ~303 |
 | 11:58 | Edited .github/workflows/release.yml | added 2 condition(s) | ~594 |
+| 11:59 | Session end: 28 writes across 9 files (dependabot.yml, CHANGELOG.md, package.json, release.yml, ci.yml) | 7 reads | ~69392 tok |
+| 12:02 | Session end: 28 writes across 9 files (dependabot.yml, CHANGELOG.md, package.json, release.yml, ci.yml) | 8 reads | ~69392 tok |
+| 12:08 | Edited .github/workflows/release.yml | expanded (+12 lines) | ~375 |
+| 12:09 | Edited .github/workflows/release.yml | expanded (+25 lines) | ~526 |