git-cai-cli 0.1.0__tar.gz → 0.1.dev1__tar.gz

git_cai_cli-0.1.dev1/.caiignore

@@ -0,0 +1 @@
+tests/unit/test_secrets.py

git_cai_cli-0.1.dev1/.gitattributes

@@ -0,0 +1,51 @@
+###############################################################################
+# Global defaults
+###############################################################################
+
+# Automatically detect text files and normalize line endings
+* text=auto
+
+###############################################################################
+# Enforce Linux (LF) line endings for known text formats
+###############################################################################
+
+# YAML
+*.yml   text eol=lf
+*.yaml  text eol=lf
+
+# Shell scripts
+*.sh    text eol=lf
+
+# Python
+*.py    text eol=lf
+
+# Makefiles
+Makefile        text eol=lf
+makefile        text eol=lf
+*.mk            text eol=lf
+
+# Plain text
+*.txt   text eol=lf
+*.md    text eol=lf
+*.rst   text eol=lf
+
+###############################################################################
+# Git configuration and metadata files
+###############################################################################
+
+.gitattributes  text eol=lf
+.gitignore      text eol=lf
+.gitmodules     text eol=lf
+
+###############################################################################
+# Binary files (never attempt to diff or normalize)
+###############################################################################
+
+*.png   binary
+*.jpg   binary
+*.jpeg  binary
+*.gif   binary
+*.pdf   binary
+*.zip   binary
+*.tar   binary
+*.gz    binary

git_cai_cli-0.1.dev1/.github/cd/.SRCINFO

@@ -0,0 +1,22 @@
+pkgbase = cai
+	pkgdesc = CLI tool that generates concise git commit messages from diffs or commit history using large language models
+	pkgver = Y.Y.Y
+	pkgrel = 1
+	url = https://github.com/thorstenfoltz/cai
+	arch = any
+	license = MIT
+	makedepends = python-build
+	makedepends = python-installer
+	makedepends = python-setuptools
+	makedepends = python-wheel
+	makedepends = python-setuptools-scm
+	depends = python
+	depends = python-yaml
+	depends = python-openai
+	depends = python-requests
+	depends = python-typer
+	depends = git
+	source = cai-Y.Y.Y.tar.gz::https://github.com/thorstenfoltz/cai/archive/refs/tags/Y.Y.Y.tar.gz
+	sha256sums = YYYYYY
+
+pkgname = cai

git_cai_cli-0.1.dev1/.github/cd/PKGBUILD

@@ -0,0 +1,39 @@
+# Maintainer: Thorsten Foltz <thorsten.foltz@live.com>
+# Contributor: Thorsten Foltz <thorsten.foltz@live.com>
+pkgname=cai
+pkgver=X.X.X
+pkgrel=1
+pkgdesc="CLI tool that generates concise git commit messages from diffs or commit history using large language models"
+arch=('any')
+url="https://github.com/thorstenfoltz/cai"
+license=('MIT')
+depends=(
+  python
+  python-yaml
+  python-openai
+  python-requests
+  python-typer
+  git
+)
+makedepends=(
+  python-build
+  python-installer
+  python-setuptools
+  python-wheel
+  python-setuptools-scm
+)
+source=(
+  "$pkgname-$pkgver.tar.gz::https://github.com/thorstenfoltz/cai/archive/refs/tags/$pkgver.tar.gz"
+)
+sha256sums=(
+  'XXX'
+)
+build() {
+    cd "$srcdir/cai-$pkgver"
+    export SETUPTOOLS_SCM_PRETEND_VERSION_FOR_GIT_CAI_CLI="$pkgver"
+    python -m build --wheel --no-isolation
+}
+package() {
+    cd "$srcdir/cai-$pkgver"
+    python -m installer --destdir="$pkgdir" dist/*.whl
+}

git_cai_cli-0.1.dev1/.github/ci/_version.py

@@ -0,0 +1,6 @@
+"""
+Dummy for CI to copy the version file here.
+Pylint will otherwise complain about missing module.
+"""
+
+__version__ = "0.0.0"

git_cai_cli-0.1.dev1/.github/ci/cai_config.ci.yml

@@ -0,0 +1,33 @@
+default: groq
+language: en
+style: professional
+emoji: false
+load_tokens_from: /home/runner/work/.config/cai/tokens.yml
+timeout: 30
+full_files: false
+anthropic:
+  model: claude-haiku-4-5
+  temperature: 0
+  max_tokens: 32768
+deepseek:
+  model: deepseek-chat
+  temperature: 0
+gemini:
+  model: gemini-2.5-flash
+  temperature: 0
+groq:
+  model: moonshotai/kimi-k2-instruct
+  temperature: 0
+mistral:
+  model: codestral-2508
+  temperature: 0
+ollama:
+  model: llama3.1
+  temperature: 0
+  timeout: 300
+openai:
+  model: gpt-5.1
+  temperature: 0
+xai:
+  model: grok-4-1-fast-reasoning
+  temperature: 0

git_cai_cli-0.1.dev1/.github/ci/tokens.ci.yml

@@ -0,0 +1,7 @@
+gemini: DUMMY_API_KEY_FOR_TESTING_PURPOSES
+openai: sk-proj-DUMMY_API_KEY_FOR_TESTING_PURPOSES
+anthropic: sk-ant-api03-DUMMY_API_KEY_FOR_TESTING_PURPOSES
+groq: DUMMY_API_KEY_FOR_TESTING_PURPOSES
+xai: DUMMY_API_KEY_FOR_TESTING_PURPOSES
+mistral: DUMMY_API_KEY_FOR_TESTING_PURPOSES
+deepseek: DUMMY_API_KEY_FOR_TESTING_PURPOSES

git_cai_cli-0.1.dev1/.github/workflows/python-tests.yml

@@ -0,0 +1,117 @@
+name: Tests-and-Linters
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  check-branch-name:
+    name: Check git branch name
+    runs-on: ubuntu-slim
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+
+      - name: Make script executable
+        run: chmod +x .linters/check_git_branch_name.sh
+
+      - name: Run branch name check
+        run: .linters/check_git_branch_name.sh
+
+  test:
+    needs: check-branch-name
+    runs-on: ubuntu-slim
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
+
+      - name: Create virtual environment
+        run: uv venv
+
+      - name: Restore cache uv
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/uv
+            .venv
+          key: uv-${{ runner.os }}-${{ matrix.python-version }}-${{ hashFiles('**/pyproject.toml') }}
+          restore-keys: |
+            uv-${{ runner.os }}-${{ matrix.python-version }}-
+
+      - name: Install dependencies
+        run: |
+          uv sync --dev
+
+      - name: Create CAI config and tokens
+        run: |
+          mkdir -p /home/runner/.config/cai /home/runner/work/.config/cai
+
+          cp .github/ci/cai_config.ci.yml /home/runner/.config/cai/cai_config.yml
+          cp .github/ci/cai_config.ci.yml /home/runner/work/.config/cai/cai_config.yml
+
+          cp .github/ci/tokens.ci.yml /home/runner/.config/cai/tokens.yml
+          cp .github/ci/tokens.ci.yml /home/runner/work/.config/cai/tokens.yml
+
+      - name: Run tests
+        run: |
+          uv run pytest
+
+  megalinter:
+    name: MegaLinter
+    needs: test
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+
+    steps:
+      # Git Checkout
+      - name: Checkout Code
+        uses: actions/checkout@v6
+        with:
+          token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
+          fetch-depth: 0
+
+      - name: Generate version file
+        run: cp .github/ci/_version.py "$GITHUB_WORKSPACE/src/git_cai_cli/_version.py"
+
+      # MegaLinter
+      - name: MegaLinter
+        uses: oxsecurity/megalinter@42bb470545e359597e7f12156947c436e4e3fb9a
+        id: ml
+        env:
+          VALIDATE_ALL_CODEBASE: false
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      # Upload MegaLinter artifacts
+      - name: Archive production artifacts
+        if: success() || failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: MegaLinter reports
+          include-hidden-files: "true"
+          path: |
+            megalinter-reports
+            mega-linter.log

git_cai_cli-0.1.dev1/.github/workflows/release.yml

@@ -0,0 +1,57 @@
+name: Release to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  pypi-release:
+    runs-on: ubuntu-latest
+
+    environment:
+      name: pypi
+      url: https://pypi.org/project/git-cai-cli/
+
+    steps:
+      - name: Checkout tagged commit
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867
+
+      - name: Create virtual environment
+        run: uv venv
+
+      - name: Restore uv cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/uv
+            .venv
+          key: uv-${{ runner.os }}-release-${{ hashFiles('**/pyproject.toml') }}
+          restore-keys: |
+            uv-${{ runner.os }}-release-
+
+      - name: Install dependencies (including dev)
+        run: uv sync --dev
+
+      - name: Build distributions
+        run: |
+          source .venv/bin/activate
+          python -m build
+
+      - name: Publish to PyPI (Trusted Publishing)
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
+        with:
+          packages-dir: dist/

git_cai_cli-0.1.dev1/.github/workflows/release_aur.yml

@@ -0,0 +1,130 @@
+name: Publish to AUR
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Release version (e.g. 0.6.5)"
+        required: true
+
+jobs:
+  aur:
+    runs-on: ubuntu-slim
+    environment:
+      name: aur
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y git curl openssh-client
+
+      - name: Determine release version
+        id: version
+        run: |
+          if [ -n "${{ github.event.inputs.version }}" ]; then
+          VERSION="${{ github.event.inputs.version }}"
+          else
+          TAG="${GITHUB_REF_NAME}"
+          VERSION="${TAG#v}"
+          fi
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Download release tarball
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+
+          if [ "${{ github.event_name }}" = "release" ]; then
+            TAG="${GITHUB_REF_NAME}"
+          else
+            TAG="${VERSION}"
+          fi
+
+          echo "Downloading tag: ${TAG}"
+
+          curl -fL \
+            -o cai-${VERSION}.tar.gz \
+            https://github.com/thorstenfoltz/cai/archive/refs/tags/${TAG}.tar.gz
+
+      - name: Compute sha256sum
+        id: sha
+        run: |
+          SHA256=$(sha256sum cai-${{ steps.version.outputs.version }}.tar.gz | awk '{print $1}')
+          echo "sha256=$SHA256" >> "$GITHUB_OUTPUT"
+
+      - name: Configure SSH for AUR (RSA)
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.AUR_SSH_PRIVATE_KEY }}" > ~/.ssh/aur
+          chmod 600 ~/.ssh/aur
+
+          cat >> ~/.ssh/config <<'EOF'
+          Host aur.archlinux.org
+            IdentityFile ~/.ssh/aur
+            User aur
+          EOF
+
+          ssh-keyscan aur.archlinux.org >> ~/.ssh/known_hosts
+
+      - name: Clone AUR repository (master branch)
+        run: |
+          git -c init.defaultBranch=master clone \
+            ssh://aur@aur.archlinux.org/cai.git aur
+
+      - name: Copy PKGBUILD and .SRCINFO
+        run: |
+          cp .github/cd/PKGBUILD aur/PKGBUILD
+          cp .github/cd/.SRCINFO aur/.SRCINFO
+
+      - name: Update PKGBUILD and .SRCINFO
+        run: |
+          cd aur
+
+          VERSION="${{ steps.version.outputs.version }}"
+          SHA="${{ steps.sha.outputs.sha256 }}"
+
+          # PKGBUILD
+          sed -i \
+            -e "s/^pkgver=.*/pkgver=${VERSION}/" \
+            -e "/^sha256sums=/,/^)/c\sha256sums=(\n  '${SHA}'\n)" \
+            PKGBUILD
+
+          # .SRCINFO
+          sed -i \
+            -e "s/^\tpkgver = .*/\tpkgver = ${VERSION}/" \
+            -e "s|^\tsource = .*|\tsource = cai-${VERSION}.tar.gz::https://github.com/thorstenfoltz/cai/archive/refs/tags/${VERSION}.tar.gz|" \
+            -e "s/^\tsha256sums = .*/\tsha256sums = ${SHA}/" \
+            .SRCINFO
+
+      - name: Show updated files
+        run: |
+          cd aur
+          cat PKGBUILD
+          echo "-----"
+          cat .SRCINFO
+
+      - name: Verify PKGBUILD and .SRCINFO have changed
+        run: |
+          set -euo pipefail
+
+          cd aur
+
+          STATUS="$(git status --porcelain)"
+
+          echo "$STATUS" | grep -q '^.*PKGBUILD$'
+          echo "$STATUS" | grep -q '^.*\.SRCINFO$'
+
+      - name: Commit and push
+        run: |
+          cd aur
+          git config user.name "GitHub Actions"
+          git config user.email "actions@github.com"
+
+          git add PKGBUILD .SRCINFO
+          git commit -m "release ${{ steps.version.outputs.version }}"
+          git push

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.gitignore

@@ -1,13 +1,24 @@
 # directories
 build/
+.claude/
 dist/
 src/git_cai_cli.egg-info/
 .ipynb_checkpoints/
 megalinter-reports/
 __pycache__/
 .ruff_cache/
+.pytest_cache/
+.mypy_cache/
 .venv/
 
 # files
 
-*.ipynb
+*.ipynb
+_version.py
+*.log
+*.tar.gz
+*.zip
+*.tar.zst
+
+# exceptions
+!.github/ci/_version.py

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.linters/.bandit.yml

@@ -1,4 +1,4 @@
 # FILE: bandit.yml
 exclude_dirs: ["venv", "megalinter-reports", "tests"]
 #tests: ['B201', 'B301']
-skips: ["B404", "B603", "B607"]
+skips: ["B404", "B603", "B607", "B608"]

git_cai_cli-0.1.dev1/.linters/.checkov.yml

@@ -0,0 +1,2 @@
+skip-path:
+  - /.github/workflows/

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.linters/.flake8

@@ -1,5 +1,5 @@
 [flake8]
-#extend-ignore = E501, F821
+extend-ignore = E203
 exclude =
     test_copy_files_fsb.py,
     __pycache__

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.linters/.proselintrc

@@ -18,7 +18,7 @@
         , "lgbtq.offensive_terms": true
         , "lgbtq.terms": true
         , "lexical_illusions.misc": false
-        , "links.broken": true
+        , "links.broken": false
         , "malapropisms.misc": true
         , "misc.apologizing": true
         , "misc.back_formations": true
@@ -48,7 +48,7 @@
         , "misc.whence": true
         , "mixed_metaphors.misc": true
         , "mondegreens.misc": true
-        , "needless_variants.misc": true
+        , "needless_variants.misc": false
         , "nonwords.misc": true
         , "oxymorons.misc": true
         , "psychology.misc": true
@@ -73,6 +73,6 @@
         , "typography.symbols": false
         , "uncomparables.misc": true
         , "weasel_words.misc": true
-        , "weasel_words.very": true
+        , "weasel_words.very": false
     }
 }

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.linters/.pylintrc

@@ -4,12 +4,12 @@ analyse-fallback-blocks=no      # Don’t analyze import fallback blocks (legacy
 clear-cache-post-run=no         # Keep caches after linting (faster subsequent runs)
 jobs=0                          # Use all CPU cores (parallel analysis)
 persistent=yes                  # Save data between runs (improves inference caching)
-suggestion-mode=yes             # Provide friendly hints instead of false positives
 unsafe-load-any-extension=no    # Prevent loading arbitrary C extensions for safety
 
-ignore=venv,build,dist,__pycache__         # Ignore common generated/virtual dirs
-ignore-paths=.*[/\\](\.venv|\.mypy_cache|\.pytest_cache|build|dist|docs)[/\\].*
-ignore-patterns=^\.#                       # Ignore editor lockfiles (e.g., Emacs)
+ignore=venv,build,dist,__pycache__,tests        # Ignore common generated/virtual dirs
+ignore-paths=.*[\\/](\.venv|\.mypy_cache|\.pytest_cache|build|dist|docs)([\\/].*)?$,.*[\\/]_version\.py$
+
+ignore-patterns=^\.#,^__init__\.py$        # Ignore editor lockfiles (e.g., Emacs)
 
 extension-pkg-allow-list=                  # List allowed C-extension modules (empty = none)
 fail-on=                                   # Fail immediately if these specific warnings/errors are found
@@ -41,7 +41,7 @@ include-naming-hint=yes                    # Suggest the expected format when na
 max-line-length=256                        # Maximum line length
 indent-string='    '                       # Use 4 spaces per indentation level
 indent-after-paren=4                       # Hanging indent size
-max-module-lines=1000                      # Max lines per module before warning
+max-module-lines=2000                      # Max lines per module before warning
 ignore-long-lines=^\s*(# )?<?https?://\S+>?$
                                            # Ignore long lines if they’re URLs or comments
 expected-line-ending-format=LF             # Require LF line endings
@@ -66,18 +66,18 @@ check-protected-access-in-special-methods=no
                                            # Don’t warn about protected attr access in dunder methods
 
 [DESIGN]
-max-args=10                                # Max arguments per function
-max-attributes=7                           # Max attributes per class
-max-branches=12                            # Max branches per function
-max-locals=30                              # Max locals per function
-max-returns=6                              # Max return statements per function
-max-statements=50                          # Max total statements per function
+max-args=30                                # Max arguments per function
+max-attributes=12                          # Max attributes per class
+max-branches=30                            # Max branches per function
+max-locals=80                              # Max locals per function
+max-returns=10                             # Max return statements per function
+max-statements=130                         # Max total statements per function
 max-public-methods=20                      # Max public methods per class
 min-public-methods=1                       # Min public methods per class
 max-nested-blocks=15                       # Max nesting depth
 max-bool-expr=15                           # Max boolean subexpressions in a condition
 max-parents=7                              # Max base classes per class
-max-positional-arguments=10                 # Max positional arguments per function
+max-positional-arguments=25                # Max positional arguments per function
 
 [EXCEPTIONS]
 overgeneral-exceptions=builtins.BaseException,builtins.Exception
@@ -91,7 +91,10 @@ logging-modules=logging                    # Logging library to check against
 confidence=HIGH,CONTROL_FLOW,INFERENCE,INFERENCE_FAILURE,UNDEFINED
                                            # Only show warnings with these confidence levels
 disable=logging-too-many-args,
-        import-error
+        import-error,
+        wrong-import-order,
+        import-outside-toplevel,
+        duplicate-code,
                                            # Disable noisy/meta warnings
 
 

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.linters/lychee.toml

@@ -15,4 +15,5 @@ exclude_path = [
     "logs",
     "megalinter-reports",
     ".venv",
+    ".github/workflows",
     ]

git_cai_cli-0.1.dev1/.markdownlintignore

@@ -0,0 +1,2 @@
+commit_prompt.md
+squash_prompt.md

{git_cai_cli-0.1.0 → git_cai_cli-0.1.dev1}/.mega-linter.yml

@@ -54,6 +54,7 @@ PRINT_ALPACA: false
 PYTHON_BANDIT_RULES_PATH: .linters
 PYTHON_BANDIT_CONFIG_FILE: .bandit.yml
 PYTHON_FLAKE8_RULES_PATH: .linters
+PYTHON_PYLINT_FILTER_REGEX_EXCLUDE: tests/.*
 REPOSITORY_LS_LINT_RULES_PATH: .linters
 REPOSITORY_SEMGREP_RULESETS:
   [
@@ -67,6 +68,7 @@ REPOSITORY_SEMGREP_RULESETS:
     "p/secure-defaults",
   ]
 SHOW_ELAPSED_TIME: true
-SHOW_SKIPPED_LINTERS: false
+SHOW_SKIPPED_LINTERS: true
 SPELL_PROSELINT_RULES_PATH: .linters
 SPELL_VALE_RULES_PATH: .linters
+VALIDATE_ALL_CODEBASE: false

git_cai_cli-0.1.dev1/.semgrepignore

@@ -0,0 +1,6 @@
+.devcontainer/Dockerfile
+cli.py
+config.py
+squash.py
+pr.py
+release_aur.yml

git_cai_cli-0.1.dev1/.trivyignore

@@ -0,0 +1,8 @@
+# urllib3 vulnerability is introduced via twine, which is a dev-only dependency
+# used exclusively for package publishing. It is not included in runtime
+# environments or production artifacts. No production attack surface exists.
+#
+# Upstream fix pending in twine.
+#
+# Reviewed: 2026-01-10
+CVE-2026-21441