specfact-cli 0.37.1__tar.gz → 0.37.2__tar.gz

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specfact-cli
-Version: 0.37.1
+Version: 0.37.2
 Summary: The swiss knife CLI for agile DevOps teams. Keep backlog, specs, tests, and code in sync with validation and contract enforcement for new projects and long-lived codebases.
 Project-URL: Homepage, https://github.com/nold-ai/specfact-cli
 Project-URL: Repository, https://github.com/nold-ai/specfact-cli.git
@@ -224,7 +224,9 @@ Classifier: Topic :: Software Development :: Testing
 Requires-Python: >=3.11
 Requires-Dist: azure-identity>=1.17.1
 Requires-Dist: beartype>=0.22.4
+Requires-Dist: cffi>=1.17.1
 Requires-Dist: crosshair-tool>=0.0.97
+Requires-Dist: cryptography>=43.0.0
 Requires-Dist: gitpython>=3.1.45
 Requires-Dist: graphviz>=0.20.1
 Requires-Dist: hypothesis>=6.142.4

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "specfact-cli"
-version = "0.37.1"
+version = "0.37.2"
 description = "The swiss knife CLI for agile DevOps teams. Keep backlog, specs, tests, and code in sync with validation and contract enforcement for new projects and long-lived codebases."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -56,6 +56,8 @@ dependencies = [
     "PyYAML>=6.0.3",
     "requests>=2.32.3",
     "azure-identity>=1.17.1",
+    "cryptography>=43.0.0",
+    "cffi>=1.17.1",
     
     # CLI framework
     "typer>=0.20.0",

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/__init__.py

@@ -3,4 +3,4 @@ SpecFact CLI - Spec→Contract→Sentinel tool for contract-driven development.
 """
 
 # Package version: keep in sync with pyproject.toml, setup.py, src/specfact_cli/__init__.py
-__version__ = "0.36.1"
+__version__ = "0.37.2"

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/__init__.py

@@ -8,6 +8,6 @@ This package provides command-line tools for:
 - Supporting agile ceremonies and team workflows
 """
 
-__version__ = "0.37.1"
+__version__ = "0.37.2"
 
 __all__ = ["__version__"]

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/analyze/module-package.yaml

@@ -1,5 +1,5 @@
 name: analyze
-version: 0.37.1
+version: 0.37.2
 commands:
   - analyze
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Analyze codebase quality, contracts, and architecture signals.
 license: Apache-2.0
 integrity:
-  checksum: sha256:81401deb9416cb772437ab806dbc377778f7cf4d2986e8169765de59d1708733
-  signature: YfTBJOyF5OxkRkIg5Fffqtbc3DHa/eXoewyav97FwEMRZoqRXH6Fhhu80UUjKPEYMWP5JzRU8dWgvi8FgfFqBQ==
+  checksum: sha256:8f0919570eb25f9643f3f4557f40d8137c4754e4422ff71bdbb7ed2aa04e4bff
+  signature: 6sTJRGUeApach2vdwQJubd3bHaJm2bu7b46DnUFJGAZ95X6dLMCyuCWVdxTRA6kX3YHblYZD8SfFwAPPsl1KAg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/auth/module-package.yaml

@@ -1,5 +1,5 @@
 name: auth
-version: 0.37.1
+version: 0.37.2
 commands:
   - auth
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Authenticate SpecFact with supported DevOps providers.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d085de940d5de887f858462eff10a75e5acdb2e31cc61ed7dc79bfe6e4527e76
-  signature: SyoiHxZHlmQLzdnqn45c8B/dzZuqyWzflAo/hf0PWsckPSfeGN6ytlGgTJPV8Rq8IG96aVnPkir2dEJ4gavxAQ==
+  checksum: sha256:fd0c9ff643c73a25c229e5925b58446ff25af7ec5ab4412d3eff9704b4cc10c1
+  signature: 4KKwmf58+3boa+2jMF9m2NvjGcXB6Jdjfu0C6MV5Io+XjF6FUPyOmf7iz2xH9afgTTeVLVdc7X5EjJJGm5tMAQ==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/backlog/module-package.yaml

@@ -1,5 +1,5 @@
 name: backlog
-version: 0.37.1
+version: 0.37.2
 commands:
   - backlog
 command_help:
@@ -28,5 +28,5 @@ publisher:
 description: Manage backlog ceremonies, refinement, and dependency insights.
 license: Apache-2.0
 integrity:
-  checksum: sha256:db36a40672119b436b50bd4142400feec3398ae2732cfa357eacb7b40d8b8582
-  signature: NXgVtRf+ubB+upfAacJUTX8yaGw/cdZa9SSxqusak3ijGZe5POtK+ud+n2lnVMCg/9pOzoq8wdgsTrVr3mkCDA==
+  checksum: sha256:6d31c481c40241a744ffa255d29bcf834e5715de310f58f7ebc74e19f1e4fd8d
+  signature: 20mO8sayOcVV992iqYROkQL/Q7jxjJE3re1fWYbTLIW7HPskNg1CROpCnaeUv9dr629qPMs/YVlzadMl317VDw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/contract/module-package.yaml

@@ -1,5 +1,5 @@
 name: contract
-version: 0.37.1
+version: 0.37.2
 commands:
   - contract
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Validate and manage API contracts for project bundles.
 license: Apache-2.0
 integrity:
-  checksum: sha256:577b9ee6af8075c0ebf58665a50ec5be6b2de935f401454f831447905320b649
-  signature: gHyTzZkYnLDxf27XFNHH/pauUhZ5ZZfTwPNQBwWCZ/v4oEdDV8gGjDr84g2KSsH8myrE7J8q47iBChxqO+FjBw==
+  checksum: sha256:5cc204c3bab58765f19862a6fe2127ddb0b6f0b56422bfc078d69beb91398f0d
+  signature: URMN7NMTIsPqZmtcDW4onpaH1Up4kpZaE49iyb3jaqN4x2KuEGDyU4uudhzu/4Pu1DObWu20c+aVfwtj26LbCQ==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/drift/module-package.yaml

@@ -1,5 +1,5 @@
 name: drift
-version: 0.37.1
+version: 0.37.2
 commands:
   - drift
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Detect and report drift between code, plans, and specs.
 license: Apache-2.0
 integrity:
-  checksum: sha256:5bf84d0a840bbdb47ccacda4490d19685d1298c3f7fd3b8e48ca641a08727e08
-  signature: S8djuQsc+7LBZH8myx+aUNeSfSpnLHXL70iCrK9yCfyYJbqDklQpKNxBGJQ4DjzrApm6ZyTBoxZdmA1BxDvDBw==
+  checksum: sha256:368d6beaf1b4356741c1dbdd8125800e466abb47d8a18e14e2c0f9c66c94397b
+  signature: +gU8OTtpxWqIKTk2xoL4Msed1alxTk4soy/HYG4wJuOcwQgaxG7tM/WEWTRMCXHTN4kCiN+3Wqp975FUtW0UDw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/enforce/module-package.yaml

@@ -1,5 +1,5 @@
 name: enforce
-version: 0.37.1
+version: 0.37.2
 commands:
   - enforce
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Apply governance policies and quality gates to bundles.
 license: Apache-2.0
 integrity:
-  checksum: sha256:16a8bc8d027b175321696f01fceb40a3cbc4a0567fe165c560be94221e412f88
-  signature: OuAE5iZ7AxSsD6VDfm5YKCtxQLJ33i4ACEW/5ejiWY0wlsgQtpkf2CMZaXWUBvS9GvxhID6PS3+yJMgzAaHBAA==
+  checksum: sha256:e93b26c59b548af9cc3230b18eb37aff8c3dc85132fed7457f19bdaaaef1e8a0
+  signature: TcjUHtOLqZ3TNlUB8cq1gwUJY1qjzQ1z6mh8nokMLp+svvaGVJc6zlkcYTN8InmiCnrUoevfUutuDZvN2gGSDg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/generate/module-package.yaml

@@ -1,5 +1,5 @@
 name: generate
-version: 0.37.1
+version: 0.37.2
 commands:
   - generate
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Generate implementation artifacts from plans and SDD.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d9dd799f0a13dc07d2200fdfbe5a4ce3cf869c2737d08f4101cebf3d4ff983fd
-  signature: 7IWVqUEAcD06JdiOinxBUQYp1coH81AecR0KXBQiy+O4XWg9/zI9YQVwWurXWozsSgCBeT/D4HOQ4bxOvrw3DQ==
+  checksum: sha256:16e7312d299e4c1c4ceedea2fdcead13ffd81e795e810fbd6ffabb5d0352d744
+  signature: mkgqkfF8n6gix2oAlV62FJEwIJfZ0ruiiMLcV5KmiH5v9OmuuHFK4NPZxC7nBbRXWoTz2jPD0uEnsU+DIakbCg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/import_cmd/module-package.yaml

@@ -1,5 +1,5 @@
 name: import_cmd
-version: 0.37.1
+version: 0.37.2
 commands:
   - import
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Import projects and requirements from code and external tools.
 license: Apache-2.0
 integrity:
-  checksum: sha256:290a3dbe86dce079ed7cde343893830725ff80068fa89a8d0b0fd935bb746dfa
-  signature: ITiHkBu+zHOChLHGlXh3IQakaHxcFasY+ifLkWhbY9J8/d7hb3fEMz3t0IB3F3/VXi+dvsQdPhxha+baAVpvAA==
+  checksum: sha256:ed7387b3bc4de4fc6e320b976f180befe49961669c337257851de7da385d9ca4
+  signature: j2HV/fWLN7nzmTzWseUIPNv+E0gw5Pif4+a8c6Qe8eHimUxnx6OAauLV9HgawdW9GG52YkDIwpTOkAZ6BBLCBg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/init/module-package.yaml

@@ -1,5 +1,5 @@
 name: init
-version: 0.37.1
+version: 0.37.2
 commands:
   - init
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Initialize SpecFact workspace and bootstrap local configuration.
 license: Apache-2.0
 integrity:
-  checksum: sha256:e6d6cdf1c10a6a760388db5a66e0f666f93b0835dfff1c3db13b19f8da9bce13
-  signature: IvGAdhMfLOyArra2PKdxqN0ozHw6m4gvZh0sEjiLSWx/2hiDDSXHSy6uHx4hEx0868bhknE6mvyUAAL3PZ4XCg==
+  checksum: sha256:38a3261dd947f5827b1a67b34970c0ab81c13de6d2657d7cf5af694da6da8436
+  signature: khTbNy9iE3eXBNWo0+/Cb2B533U1PrLLNKtPnRiJPKNCQTrlfxhWvG+GEcnnFUinSTnfsjY9Of5GJYOuhJyACA==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/migrate/module-package.yaml

@@ -1,5 +1,5 @@
 name: migrate
-version: 0.37.1
+version: 0.37.2
 commands:
   - migrate
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Migrate project bundles across supported structure versions.
 license: Apache-2.0
 integrity:
-  checksum: sha256:3e2b5ea6a71f3917dbec01c92739e5280ff51163b8c64a60e757c33e5a334e6d
-  signature: 0USQ8OTre4Czs0lMzK2Oa2q2CwquGwPdLKnpVNZmSh9ytdiQqG2fx0BvdqDFi460gxx0sxOKAiWDJ+0/coKBBw==
+  checksum: sha256:365f469ff6b6fe9f80cb1cf078adf4da7acceed04c5d18b3a0b37b8c1e58547b
+  signature: APKTWd9UPlnBk4ypohLr3qernnOqIWO0sn7ABgozdD62tTqWnZe5lYRk1xJzXFRxCqO+aL+6/Xdcl8M72OfABw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/module_registry/module-package.yaml

@@ -1,5 +1,5 @@
 name: module-registry
-version: 0.37.1
+version: 0.37.2
 commands:
   - module
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: 'Manage modules: search, list, show, install, and upgrade.'
 license: Apache-2.0
 integrity:
-  checksum: sha256:71f9c1bc5ae79c2a234920b5dcb1be415b4b2255de5827786344280320291629
-  signature: rNpk992cIrwe9BATaH26EPTVgkj1W1ZJcYnAnOikYqGAPxr+f2xprf4kAvHMym2naI0N+P1fjbT8ZnpP2zenCw==
+  checksum: sha256:ce1d40c3c62dcd8d15181ff263811a6c28a88070dd672fba74e09eea64a830e6
+  signature: TIK6aQt7hyoxM11M8XYByKP7s9DlK7+F1h0mVxCRuQyznTV0Pq8c56XD7if+GhBFptqPB94NwQ36rPdjqOCSDw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/patch_mode/module-package.yaml

@@ -1,5 +1,5 @@
 name: patch-mode
-version: 0.37.1
+version: 0.37.2
 commands:
   - patch
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Prepare, review, and apply structured repository patches safely.
 license: Apache-2.0
 integrity:
-  checksum: sha256:05cb624a43ac45da4a467e1a990b8ceb378a7f5d9a1d4edbf583198a8d9bc73b
-  signature: txeDUarIvALJFnaZVWky9OjJ04m9yHPnuKrA4MzOSZaOwaq9OqfLn10dPFwENveOkJ09MErBycS3QaeD8UL6AQ==
+  checksum: sha256:afc1985b0a9385055acf7efdf20d314198429bfdbf33a68bfbe8f8add0476456
+  signature: qcy6s/cQQ2WKo1wGB+PmAKyTcuWl+JmfHs4afP06420raW9mKV5fuuSTABcYH8V9hblyeloHV+I9YuwieDZhBg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/plan/module-package.yaml

@@ -1,5 +1,5 @@
 name: plan
-version: 0.37.1
+version: 0.37.2
 commands:
   - plan
 command_help:
@@ -16,5 +16,5 @@ publisher:
 description: Create and manage implementation plans for project execution.
 license: Apache-2.0
 integrity:
-  checksum: sha256:5e2ccf7212f590f19e6b68e0a6a90e6f72e1bebd28d570f1005cf3fbe320663a
-  signature: QQxUVU+cB2XP9rs5VsYdANzrr9S5Y4VKu5B0PY+h+wx3F7mdfLsyg9xzQj4mgDeby3/XIjXQC4jywNqoqErtDg==
+  checksum: sha256:60f6ea69f2178bb8395ab19743318849b2caea1aad9a880d230da5c87236fd3e
+  signature: luy557R50WTq4gvm3Equ5SV1RMDJOs+szawTwEpgl8eGTuuDd24Nxakb9erW7qzbV5Cn0COsZffUfKvNzH4jBw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/policy_engine/module-package.yaml

@@ -1,5 +1,5 @@
 name: policy-engine
-version: 0.37.1
+version: 0.37.2
 commands:
   - policy
 command_help:
@@ -19,8 +19,8 @@ publisher:
   url: https://github.com/nold-ai/specfact-cli-modules
   email: oss@nold.ai
 integrity:
-  checksum: sha256:88003e837e99353e8c1a5df988c296c784097c6d4c81fcf0b195c610adc6ab2a
-  signature: mGxDYiHVqmH+Iy9Ekzw9fS6cYS41W/O/eQyc75kg8PMj1FF1kWlCIRTkuE9TTHLmdD3ePz4cwGX5+PbkVioWAQ==
+  checksum: sha256:a239acb53ba59ca7d1f1063c90d60037a2501813d074aae0a4c4590b70a34648
+  signature: lG2M7QVkbaomLebkqLH3rRi64YCDGiABkaZfxl8082TSGfIcZ9K0gPXgNeEQZIKVZcVM9UnJe7NZ/fiQXr/JAw==
 dependencies: []
 description: Run policy evaluations with recommendation and compliance outputs.
 license: Apache-2.0

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/project/module-package.yaml

@@ -1,5 +1,5 @@
 name: project
-version: 0.37.1
+version: 0.37.2
 commands:
   - project
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Manage project bundles, contexts, and lifecycle workflows.
 license: Apache-2.0
 integrity:
-  checksum: sha256:130e53a4266f90a6236d892c513692641e6675387bf7a63c8ac51871a27494eb
-  signature: Nu1HNs0tAWUzLrXcHWpUWqpxsq68uYgBZWcR34nmH7iGdejEvBRh7zIC/Gx7G0nQBdVbfc4rtZEvJx55CT38CA==
+  checksum: sha256:80789cfb916a67bbbcd2c9416ebae21fe79affb60596d0bc218777c6652cf5d7
+  signature: RI2XsxN5BBurAWYlAAYm4amcCWsJ/McnJUqSua/2mDGx/KW7WoXVaMD4xccCatjTDqL6Lr7ctkVh4iQ6wTqoDg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/repro/module-package.yaml

@@ -1,5 +1,5 @@
 name: repro
-version: 0.37.1
+version: 0.37.2
 commands:
   - repro
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Run reproducible validation and diagnostics workflows end-to-end.
 license: Apache-2.0
 integrity:
-  checksum: sha256:9167dc7b6d87478d39b5597262cd36e491b62e38253f6bd984f83ecaf5c6a36c
-  signature: DeyWsQRqOQsqlevDAZVMl9GO8K8JxCnbRddH5rhuJCQKIaLQ/gVilYklpzfK6hGota5tUi9zs88gFMFrBN1jCw==
+  checksum: sha256:c319deb6f08acc010d14202ed0d643309b24aaa5399f1c235dd44a388df16ca1
+  signature: rk3tPivhE4DLpxNZ7pSodnehc9VwmDBoVp5+7RYcNFQ/vNXeTJ++fiXU1lI6rHHIEf2MZEPqMcZ2UpCkOKBwAg==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/sdd/module-package.yaml

@@ -1,5 +1,5 @@
 name: sdd
-version: 0.37.1
+version: 0.37.2
 commands:
   - sdd
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Create and validate Spec-Driven Development manifests and mappings.
 license: Apache-2.0
 integrity:
-  checksum: sha256:91e50b4ba782527c1bd5acd60ff9b492cbbb51acb510e2253466af17598b0109
-  signature: 2ZsXXuUgxbkK/cvAyyOooe/rLeUocQaxG4EkV5A+qgQL9k8WLEZnRpfcleSza6nMqMPjWJ9zgi1ksh4JZu0eBA==
+  checksum: sha256:13fba474517e8c1d74e4972b0d232b074a0b20a2f1860cb2b935f3cf000a682f
+  signature: NCuP7ytnX9XbWdlqFCaerqOsRzOiv7atY/w/ibIngAJGpFCelBwLnbf4qGHqMP10oJCAQh2oWV/13mAm6IYpCw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/spec/module-package.yaml

@@ -1,5 +1,5 @@
 name: spec
-version: 0.37.1
+version: 0.37.2
 commands:
   - spec
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Integrate and run API specification and contract checks.
 license: Apache-2.0
 integrity:
-  checksum: sha256:25ee99befd2371e1f3fcc8548883d0e7c73bd9f80e4362dd14280654246b22f0
-  signature: QeyKrrHL4X4qL6ZjR9x5z80pBmRIJBa/SSchgs025/t/deaDbm+tqIykWTN7X7v5xPCY1ddA75kimGpddbBzAA==
+  checksum: sha256:9f94350b959ab97fbb309ecdd0aaaf52137ae7cbae16b66078fde7d38406f39c
+  signature: +UoWzNOY5pHJzrff3Rt85xnXhae/Tbsxhv4e5oH+siIIcdTjp+8qK9ZESAsT44YgqufcjiRoTi/Ld6z8s675CQ==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/sync/module-package.yaml

@@ -1,5 +1,5 @@
 name: sync
-version: 0.37.1
+version: 0.37.2
 commands:
   - sync
 command_help:
@@ -18,5 +18,5 @@ publisher:
 description: Synchronize repository state with connected external systems.
 license: Apache-2.0
 integrity:
-  checksum: sha256:7e70d5256aba0bcca3dbed4f6e777453b16cd03b463d49738f07e554b7bdab96
-  signature: mqaNTclocVTrfrImqoryxSr5BhUPbqZS+6C2jCeLThaTMmSwlzkDB9OPQvDcHatdInWW/YQ1x/iaxdj56Gi+CQ==
+  checksum: sha256:6fcd7b3d1276c318b6ca94f61df056ebff42ec5d4c6770e5b5c7c396dccdf156
+  signature: 6/DQ1LgbzysUep7niPIK9iW/AYd0g4/152yEu0qksuLhPMtC88ghMTgcho1ooBQZjvYuA/T2wOVUcv5Y+UsLBw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/upgrade/module-package.yaml

@@ -1,5 +1,5 @@
 name: upgrade
-version: 0.37.1
+version: 0.37.2
 commands:
   - upgrade
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Check and apply SpecFact CLI version upgrades.
 license: Apache-2.0
 integrity:
-  checksum: sha256:d8c5f2fb4ed4c252701c07125cba0587262700b6738740ef1c8c174611cc5c3b
-  signature: MDFyw5rJ3GBJ+PVMEwCMHsqtiItxryM4XpKm/h+M4bxJKFRHDww5i8Uzpl1MDBucnpW6KGoMeo7GNKgQjeHxBA==
+  checksum: sha256:c4dd29c7289f946a56e00a9dc408a0d56708fc39a89cd8fd5fddaadb1a56dec5
+  signature: 4aNspYwRcNWBnwn3p8tJUfG2BA4ZaXvRNczvjDQXTR/U/SChgMQ0e8B72ujYh0XCLFZLWCW+/kj/w2Y+N8vjCw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/modules/validate/module-package.yaml

@@ -1,5 +1,5 @@
 name: validate
-version: 0.37.1
+version: 0.37.2
 commands:
   - validate
 command_help:
@@ -15,5 +15,5 @@ publisher:
 description: Run schema, contract, and workflow validation suites.
 license: Apache-2.0
 integrity:
-  checksum: sha256:cec0b0ed07a1bfb596c4ff0d0e80422b8a28c76d17cf358110550b594a132932
-  signature: wDHd+UXbv7luqntwGsRKf4eDRIxDr97hk1avCYHR88TyhGHjZglmzAeFQuDBR4Dx5BLSCl8WKFT8Vh6y/wquDg==
+  checksum: sha256:b1f954e5fef7f8b964299aec54f75b3b24ebc50c24b90db8598fc4b3d8532ee1
+  signature: +1azi81aZmGaQxiu4i9gcemRTPyBthDiwP+VWEeK9AGTcTPHjz/meuY3GsO8c33SBVsNltZ3PEggQpw7h8kDCw==

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/registry/module_installer.py

@@ -7,6 +7,7 @@ import os
 import shutil
 import tarfile
 import tempfile
+from functools import lru_cache
 from pathlib import Path
 
 import yaml
@@ -152,6 +153,26 @@ def _module_artifact_payload_stable(package_dir: Path) -> bytes:
     return "\n".join(entries).encode("utf-8")
 
 
+@beartype
+def _is_signature_backend_unavailable(error: ValueError) -> bool:
+    """Return True when signature verification backend is unavailable in runtime."""
+    message = str(error)
+    return (
+        "No module named '_cffi_backend'" in message
+        or "requires the 'cryptography' package" in message
+        or "Signature verification backend unavailable" in message
+    )
+
+
+@lru_cache(maxsize=8)
+def _warn_signature_backend_unavailable_once(error_message: str) -> None:
+    """Emit signature-backend-unavailable warning at most once per distinct message."""
+    get_bridge_logger(__name__).warning(
+        "Module signature backend unavailable (%s). Falling back to checksum-only verification.",
+        error_message,
+    )
+
+
 @beartype
 def install_bundled_module(
     module_name: str,
@@ -337,6 +358,12 @@ def verify_module_artifact(
         try:
             verify_signature(verification_payload, meta.integrity.signature, key_material)
         except ValueError as exc:
+            if _is_signature_backend_unavailable(exc):
+                if require_signature and not allow_unsigned:
+                    logger.warning("Module %s: signature is required but backend is unavailable", meta.name)
+                    return False
+                _warn_signature_backend_unavailable_once(str(exc))
+                return True
             logger.warning("Module %s: Signature check failed: %s", meta.name, exc)
             return False
     elif require_signature and not allow_unsigned:

{specfact_cli-0.37.1 → specfact_cli-0.37.2}/src/specfact_cli/utils/startup_checks.py

@@ -21,7 +21,7 @@ from rich.panel import Panel
 from rich.progress import Progress, SpinnerColumn, TextColumn
 
 from specfact_cli import __version__
-from specfact_cli.registry.module_installer import USER_MODULES_ROOT, get_outdated_or_missing_bundled_modules
+from specfact_cli.registry.module_installer import get_outdated_or_missing_bundled_modules
 from specfact_cli.utils.ide_setup import IDE_CONFIG, detect_ide, find_package_resources_path
 from specfact_cli.utils.metadata import (
     get_last_checked_version,
@@ -287,7 +287,7 @@ def check_module_freshness(repo_path: Path | None = None) -> ModuleFreshnessChec
         repo_path = Path.cwd()
 
     project_modules_root = repo_path / ".specfact" / "modules"
-    user_modules_root = USER_MODULES_ROOT
+    user_modules_root = Path.home() / ".specfact" / "modules"
 
     project_outdated_modules = get_outdated_or_missing_bundled_modules(project_modules_root)
     user_outdated_modules = get_outdated_or_missing_bundled_modules(user_modules_root)