docguard-cli 0.9.9__tar.gz → 0.9.10__tar.gz

{docguard_cli-0.9.9 → docguard_cli-0.9.10}/.docguard.json

@@ -27,6 +27,10 @@
     "runCommand": "node cli/docguard.mjs"
   },
 
+  "securityIgnore": [
+    "tests/**"
+  ],
+
   "validators": {
     "structure": true,
     "docsSync": true,

docguard_cli-0.9.10/.github/scripts/patch-catalog.py

@@ -0,0 +1,104 @@
+#!/usr/bin/env python3
+"""Surgical catalog.community.json patcher for DocGuard.
+
+Updates ONLY the docguard entry and top-level updated_at.
+Does NOT re-serialize the entire JSON (preserves unicode escapes,
+formatting, and other extensions' entries exactly as-is).
+
+Usage: python3 patch-catalog.py <version> <download_url> <updated_at>
+"""
+import sys
+import json
+
+if len(sys.argv) != 4:
+    print("Usage: patch-catalog.py <version> <download_url> <updated_at>")
+    sys.exit(1)
+
+version = sys.argv[1]
+download_url = sys.argv[2]
+updated_at = sys.argv[3]
+
+CATALOG_FILE = "extensions/catalog.community.json"
+
+with open(CATALOG_FILE, "r") as f:
+    content = f.read()
+
+# Parse to validate structure and get current values
+data = json.loads(content)
+
+if "extensions" not in data or "docguard" not in data["extensions"]:
+    print("❌ DocGuard entry not found in catalog.extensions")
+    sys.exit(1)
+
+dg = data["extensions"]["docguard"]
+old_version = dg["version"]
+old_url = dg["download_url"]
+old_entry_updated = dg["updated_at"]
+old_desc = dg["description"]
+top_updated = data["updated_at"]
+
+# Correct description (matches our constitution: "Zero NPM runtime dependencies")
+new_desc = (
+    "Canonical-Driven Development enforcement. "
+    "Validates, scores, and traces project documentation with automated checks, "
+    "AI-driven workflows, and spec-kit hooks. Zero NPM runtime dependencies."
+)
+
+# Surgical string replacements — only touch specific values
+# 1. DocGuard version (first occurrence after "docguard" block)
+content = content.replace(
+    f'"version": "{old_version}"',
+    f'"version": "{version}"',
+    1,
+)
+
+# 2. Download URL (unique string, safe to replace globally)
+content = content.replace(old_url, download_url)
+
+# 3. DocGuard updated_at (first occurrence after version change)
+content = content.replace(
+    f'"updated_at": "{old_entry_updated}"',
+    f'"updated_at": "{updated_at}"',
+    1,
+)
+
+# 4. Description fix (if needed)
+if old_desc != new_desc:
+    content = content.replace(old_desc, new_desc)
+
+# 5. Bump top-level updated_at (should appear early in file)
+content = content.replace(
+    f'"updated_at": "{top_updated}"',
+    f'"updated_at": "{updated_at}"',
+    1,
+)
+
+with open(CATALOG_FILE, "w") as f:
+    f.write(content)
+
+print(f"✅ Updated catalog.community.json → v{version} (surgical, no noisy diffs)")
+print(f"   version: {old_version} → {version}")
+print(f"   download_url: updated")
+print(f"   updated_at: {old_entry_updated} → {updated_at}")
+print(f"   top-level updated_at: {top_updated} → {updated_at}")
+if old_desc != new_desc:
+    print(f"   description: updated to match constitution")
+
+# --- Also patch extensions/README.md (table row description) ---
+README_FILE = "extensions/README.md"
+try:
+    with open(README_FILE, "r") as f:
+        readme = f.read()
+
+    # The DocGuard row in the README table looks like:
+    # | DocGuard — CDD Enforcement | <description> | [spec-kit-docguard](...) |
+    # Only update if the old description is present
+    if old_desc in readme and old_desc != new_desc:
+        readme = readme.replace(old_desc, new_desc)
+        with open(README_FILE, "w") as f:
+            f.write(readme)
+        print(f"✅ Updated extensions/README.md — description synced")
+    else:
+        print(f"ℹ️  extensions/README.md already up to date")
+except FileNotFoundError:
+    print(f"⚠️  {README_FILE} not found — skipping README update")

docguard_cli-0.9.10/.github/workflows/release.yml

@@ -0,0 +1,191 @@
+name: Auto Release — Tag, GitHub Release, npm, PyPI
+
+# Triggers on push to main — detects version bumps automatically
+on:
+  workflow_dispatch: # Allow manual trigger for recovery
+  push:
+    branches: [main]
+    paths:
+      - 'package.json' # Only run when package.json changes (version bump)
+
+permissions:
+  contents: write # Needed to create tags and releases
+
+jobs:
+  # ── Step 1: Detect if version changed ──────────────────────────────────
+  detect-version:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.check.outputs.version }}
+      changed: ${{ steps.check.outputs.changed }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2 # Need previous commit to compare
+
+      - name: Check if version changed
+        id: check
+        run: |
+          CURRENT=$(node -p "require('./package.json').version")
+          # Get version from previous commit
+          PREVIOUS=$(git show HEAD~1:package.json 2>/dev/null | node -p "JSON.parse(require('fs').readFileSync('/dev/stdin','utf-8')).version" 2>/dev/null || echo "0.0.0")
+          echo "current=$CURRENT"
+          echo "previous=$PREVIOUS"
+          if [ "$CURRENT" != "$PREVIOUS" ]; then
+            echo "version=$CURRENT" >> "$GITHUB_OUTPUT"
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+            echo "✅ Version changed: $PREVIOUS → $CURRENT"
+          else
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            echo "⏭️ Version unchanged ($CURRENT), skipping release"
+          fi
+
+  # ── Step 2: Run full test suite ────────────────────────────────────────
+  test:
+    needs: detect-version
+    if: needs.detect-version.outputs.changed == 'true'
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20, 22]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - name: Run Tests
+        run: npm test
+      - name: Guard (self-check)
+        run: node cli/docguard.mjs guard || [ $? -eq 2 ]
+
+  # ── Step 3: Create git tag + GitHub Release ────────────────────────────
+  create-release:
+    needs: [detect-version, test]
+    if: needs.detect-version.outputs.changed == 'true'
+    runs-on: ubuntu-latest
+    outputs:
+      tag: v${{ needs.detect-version.outputs.version }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Fetch all history + tags for reliable tag detection
+
+      - name: Create and push tag
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          TAG="v${VERSION}"
+
+          # Check if tag already exists on remote (not just local)
+          if git ls-remote --tags origin | grep -q "refs/tags/$TAG$"; then
+            echo "✅ Tag $TAG already exists on remote, skipping tag creation"
+          else
+            git config user.name "github-actions[bot]"
+            git config user.email "github-actions[bot]@users.noreply.github.com"
+            git tag -a "$TAG" -m "Release $TAG"
+            git push origin "$TAG"
+            echo "✅ Tag $TAG created and pushed"
+          fi
+
+      - name: Generate release notes from CHANGELOG
+        id: notes
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          # Extract the section for this version from CHANGELOG.md
+          # Matches from ## [X.X.X] until the next ## [
+          NOTES=$(awk "/^## \\[${VERSION}\\]/{found=1; next} /^## \\[/{if(found) exit} found{print}" CHANGELOG.md)
+          if [ -z "$NOTES" ]; then
+            NOTES="Release v${VERSION} — see CHANGELOG.md for details."
+          fi
+          # Write to file to avoid escaping issues
+          echo "$NOTES" > /tmp/release-notes.md
+          echo "✅ Release notes extracted"
+
+      - name: Create GitHub Release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          TAG="v${VERSION}"
+          # Skip if release already exists (e.g., manually created)
+          if gh release view "$TAG" >/dev/null 2>&1; then
+            echo "✅ Release $TAG already exists, skipping"
+          else
+            gh release create "$TAG" \
+              --title "DocGuard $TAG" \
+              --notes-file /tmp/release-notes.md \
+              --latest
+          fi
+
+  # ── Step 4: Build and attach spec-kit extension ZIP ────────────────────
+  build-extension:
+    needs: [detect-version, create-release]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build extension ZIP
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          cd extensions/spec-kit-docguard
+          zip -r "../../spec-kit-docguard-v${VERSION}.zip" . -x ".*"
+          cd ../..
+          echo "--- ZIP contents ---"
+          unzip -l "spec-kit-docguard-v${VERSION}.zip"
+
+      - name: Upload to release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          gh release upload "v${VERSION}" \
+            "spec-kit-docguard-v${VERSION}.zip" \
+            --clobber
+
+  # ── Step 5: Publish to npm ─────────────────────────────────────────────
+  publish-npm:
+    needs: [detect-version, test, create-release]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Publish
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+  # ── Step 6: Publish to PyPI ────────────────────────────────────────────
+  publish-pypi:
+    needs: [detect-version, test, create-release]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Sync version in pyproject.toml
+        run: |
+          VERSION="${{ needs.detect-version.outputs.version }}"
+          sed -i "s/^version = \".*\"/version = \"$VERSION\"/" pyproject.toml
+          echo "Publishing version $VERSION"
+          grep 'version' pyproject.toml
+
+      - name: Install build tools
+        run: pip install build twine
+
+      - name: Build
+        run: python -m build
+
+      - name: Publish
+        run: python -m twine upload dist/*
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

docguard_cli-0.9.10/.github/workflows/sync-speckit-catalog.yml

@@ -0,0 +1,162 @@
+name: Sync DocGuard to Spec Kit Community Catalog
+
+# Triggers after the release workflow completes, or manually
+on:
+  workflow_run:
+    workflows: ["Auto Release — Tag, GitHub Release, npm, PyPI"]
+    types: [completed]
+    branches: [main]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Override version (leave empty to read from package.json)'
+        required: false
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  sync-catalog:
+    runs-on: ubuntu-latest
+    # Only run if the release workflow succeeded (or manual trigger)
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
+
+    steps:
+      - name: Checkout docguard repo
+        uses: actions/checkout@v4
+
+      - name: Get version and metadata
+        id: meta
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          else
+            VERSION=$(node -p "require('./package.json').version")
+          fi
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "tag=v${VERSION}" >> "$GITHUB_OUTPUT"
+          echo "download_url=https://github.com/raccioly/docguard/releases/download/v${VERSION}/spec-kit-docguard-v${VERSION}.zip" >> "$GITHUB_OUTPUT"
+          echo "updated_at=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$GITHUB_OUTPUT"
+
+          # Extract short description (avoid multiline output issues)
+          DESC="Canonical-Driven Development enforcement with automated checks, AI skills, and spec-kit hooks. Zero NPM runtime dependencies."
+          echo "description=$DESC" >> "$GITHUB_OUTPUT"
+
+          # Count commands
+          COMMANDS=$(ls extensions/spec-kit-docguard/commands/*.md 2>/dev/null | wc -l | tr -d ' ')
+          echo "commands=${COMMANDS:-6}" >> "$GITHUB_OUTPUT"
+
+          echo "✅ Version: $VERSION"
+          echo "   Download: https://github.com/raccioly/docguard/releases/download/v${VERSION}/spec-kit-docguard-v${VERSION}.zip"
+
+      - name: Extract release notes from CHANGELOG
+        id: notes
+        run: |
+          VERSION="${{ steps.meta.outputs.version }}"
+          NOTES=$(awk "/^## \\[${VERSION}\\]/{found=1; next} /^## \\[/{if(found) exit} found{print}" CHANGELOG.md)
+          if [ -z "$NOTES" ]; then
+            NOTES="Updated to v${VERSION}. See [CHANGELOG](https://github.com/raccioly/docguard/blob/main/CHANGELOG.md) for details."
+          fi
+          # Write to file (avoids multiline env var issues)
+          echo "$NOTES" > /tmp/changelog-section.md
+          echo "✅ Release notes extracted ($(wc -l < /tmp/changelog-section.md) lines)"
+
+      - name: Sync fork with upstream
+        env:
+          GH_TOKEN: ${{ secrets.SPECKIT_PR_TOKEN }}
+        run: |
+          # Use GitHub API to sync fork — avoids needing workflow scope on PAT
+          gh repo sync raccioly/spec-kit --source github/spec-kit --branch main --force
+          echo "✅ Fork synced with upstream"
+
+      - name: Checkout spec-kit fork (fresh after sync)
+        uses: actions/checkout@v4
+        with:
+          repository: raccioly/spec-kit
+          token: ${{ secrets.SPECKIT_PR_TOKEN }}
+          path: spec-kit-fork
+          ref: main
+
+      - name: Update catalog.community.json
+        working-directory: spec-kit-fork
+        run: |
+          VERSION="${{ steps.meta.outputs.version }}"
+          DOWNLOAD_URL="${{ steps.meta.outputs.download_url }}"
+          UPDATED_AT="${{ steps.meta.outputs.updated_at }}"
+
+          # Surgical updates using external script — no full-file re-serialization
+          # Prevents noisy diffs on unrelated extensions (unicode escapes, formatting)
+          # Also bumps top-level updated_at and fixes description wording
+          cp ${{ github.workspace }}/.github/scripts/patch-catalog.py /tmp/patch-catalog.py
+          python3 /tmp/patch-catalog.py "$VERSION" "$DOWNLOAD_URL" "$UPDATED_AT"
+
+      - name: Create or update branch
+        working-directory: spec-kit-fork
+        run: |
+          BRANCH="update-docguard"
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+          # Always use the same branch name (so PRs get updated, not duplicated)
+          git checkout -B "$BRANCH"
+          git add extensions/catalog.community.json extensions/README.md
+          git commit -m "chore: update DocGuard extension to v${{ steps.meta.outputs.version }}" || echo "No changes to commit"
+          git push --force origin "$BRANCH"
+          echo "✅ Branch $BRANCH pushed"
+
+      - name: Create or update PR
+        working-directory: spec-kit-fork
+        env:
+          GH_TOKEN: ${{ secrets.SPECKIT_PR_TOKEN }}
+        run: |
+          VERSION="${{ steps.meta.outputs.version }}"
+          BRANCH="update-docguard"
+
+          # Build PR body
+          cat > /tmp/pr-body.md << 'HEADER'
+          ## DocGuard Community Extension Update
+
+          Updates the DocGuard community extension catalog entry.
+
+          ### Changes
+          HEADER
+
+          echo "- Version: **v${VERSION}**" >> /tmp/pr-body.md
+          echo "- Download: \`spec-kit-docguard-v${VERSION}.zip\`" >> /tmp/pr-body.md
+          echo "- Repository: https://github.com/raccioly/docguard" >> /tmp/pr-body.md
+          echo "" >> /tmp/pr-body.md
+          echo "### Release Notes" >> /tmp/pr-body.md
+          echo "" >> /tmp/pr-body.md
+          cat /tmp/changelog-section.md >> /tmp/pr-body.md
+          echo "" >> /tmp/pr-body.md
+          echo "---" >> /tmp/pr-body.md
+          echo "*This PR was automatically generated by the DocGuard release pipeline.*" >> /tmp/pr-body.md
+
+          # Try to create PR first — if it already exists, edit it instead
+          PR_URL=$(gh pr create \
+            --repo github/spec-kit \
+            --head "raccioly:${BRANCH}" \
+            --base main \
+            --title "chore: update DocGuard extension to v${VERSION}" \
+            --body-file /tmp/pr-body.md 2>&1) && {
+            echo "✅ Created new PR: $PR_URL"
+          } || {
+            echo "PR already exists — updating title and body..."
+            # Find the existing PR number
+            EXISTING_PR=$(gh pr list \
+              --repo github/spec-kit \
+              --head "raccioly:${BRANCH}" \
+              --state open \
+              --json number \
+              --jq '.[0].number' 2>/dev/null || echo "")
+            if [ -n "$EXISTING_PR" ] && [ "$EXISTING_PR" != "null" ]; then
+              gh pr edit "$EXISTING_PR" \
+                --repo github/spec-kit \
+                --title "chore: update DocGuard extension to v${VERSION}" \
+                --body-file /tmp/pr-body.md
+              echo "✅ Updated existing PR #${EXISTING_PR}"
+            else
+              echo "✅ Branch force-pushed — PR content is updated via the branch"
+            fi
+          }

docguard_cli-0.9.10/.specify/extensions/.cache/catalog-ebf165086500aab1-metadata.json

@@ -0,0 +1,4 @@
+{
+  "cached_at": "2026-03-17T15:48:51.701820+00:00",
+  "catalog_url": "https://raw.githubusercontent.com/github/spec-kit/main/extensions/catalog.community.json"
+}