specfact-cli 0.47.6__py3-none-any.whl → 0.48.2__py3-none-any.whl

specfact_cli/__init__.py

@@ -76,6 +76,6 @@ def _install_progressive_disclosure() -> None:
 # keeps missing-command and missing-parameter UX consistent outside the root CLI too.
 _install_progressive_disclosure()
 
-__version__ = "0.47.6"
+__version__ = "0.48.2"
 
 __all__ = ["__version__"]

specfact_cli/adapters/ado.py

@@ -1986,7 +1986,7 @@ class AdoAdapter(BridgeAdapter, BacklogAdapterMixin, BacklogAdapter):
         return cast(
             Any,
             self._request_with_retry(
-                lambda: requests.post(url, **request_kwargs),
+                lambda: requests.post(url, **request_kwargs),  # nosec B113 - request_kwargs always includes timeout.
                 retry_on_ambiguous_transport=retry_on_ambiguous_transport,
             ),
         )
@@ -2129,7 +2129,7 @@ class AdoAdapter(BridgeAdapter, BacklogAdapterMixin, BacklogAdapter):
         change_id_escaped = change_id.replace("'", "''")
         wiql = {
             "query": (
-                "Select [System.Id] From WorkItems "
+                "Select [System.Id] From WorkItems "  # nosec B608 - WIQL uses escaped literals, not SQL.
                 f"Where [System.TeamProject] = '{project_escaped}' "
                 f"And [System.Description] Contains 'OpenSpec Change Proposal: `{change_id_escaped}`'"
             )

specfact_cli/generators/persona_exporter.py

@@ -90,7 +90,7 @@ class PersonaExporter:
         self.project_templates_dir = project_templates_dir
 
         # Create Jinja2 environment with fallback support
-        self.env = Environment(
+        self.env = Environment(  # nosec B701 - exports trusted Markdown templates, not HTML.
             loader=FileSystemLoader(
                 [str(self.templates_dir)] + ([str(self.project_templates_dir)] if project_templates_dir else [])
             ),

specfact_cli/generators/plan_generator.py

@@ -33,7 +33,7 @@ class PlanGenerator:
             templates_dir = Path(__file__).parent.parent.parent.parent / "resources" / "templates"
 
         self.templates_dir = Path(templates_dir)
-        self.env = Environment(
+        self.env = Environment(  # nosec B701 - generates trusted text/YAML workflow templates, not HTML.
             loader=FileSystemLoader(self.templates_dir),
             # Must be False: trim_blocks removes the newline after {% endraw %}, merging `if:` with `run:`.
             trim_blocks=False,

specfact_cli/generators/protocol_generator.py

@@ -32,7 +32,7 @@ class ProtocolGenerator:
             templates_dir = Path(__file__).parent.parent.parent.parent / "resources" / "templates"
 
         self.templates_dir = Path(templates_dir)
-        self.env = Environment(
+        self.env = Environment(  # nosec B701 - generates trusted protocol Markdown, not HTML.
             loader=FileSystemLoader(self.templates_dir),
             trim_blocks=True,
             lstrip_blocks=True,

specfact_cli/generators/report_generator.py

@@ -43,7 +43,7 @@ class ReportGenerator:
             templates_dir = Path(__file__).parent.parent.parent.parent / "resources" / "templates"
 
         self.templates_dir = Path(templates_dir)
-        self.env = Environment(
+        self.env = Environment(  # nosec B701 - generates trusted validation reports, not HTML.
             loader=FileSystemLoader(self.templates_dir),
             trim_blocks=True,
             lstrip_blocks=True,

specfact_cli/generators/workflow_generator.py

@@ -38,7 +38,7 @@ class WorkflowGenerator:
             templates_dir = Path(__file__).parent.parent.parent.parent / "resources" / "templates"
 
         self.templates_dir = Path(templates_dir)
-        self.env = Environment(
+        self.env = Environment(  # nosec B701 - generates trusted text/YAML workflow templates, not HTML.
             loader=FileSystemLoader(self.templates_dir),
             # Must be False: trim_blocks removes the newline after {% endraw %}, merging `if:` with `run:`.
             trim_blocks=False,

specfact_cli/modules/init/module-package.yaml

@@ -1,5 +1,5 @@
 name: init
-version: 0.1.37
+version: 0.1.41
 commands:
   - init
 category: core
@@ -17,5 +17,5 @@ publisher:
 description: Initialize SpecFact workspace and bootstrap local configuration.
 license: Apache-2.0
 integrity:
-  checksum: sha256:8741e8fa3408bd38e7d65d0784a25466369955dd9f16f1981a52c0e1550afbe0
-  signature: kPAMdqpcAr92gr+DwxWibXfD0mgCLSb78EwGzoXH3fHct7xss8zt/SFvJLVZ0qkYHA8/4Nu6ls0iihRN9DXhCw==
+  checksum: sha256:7ad9c0b623f52a55b45f35adf9576bea1fd47edcd3005ed2354188a6a6ea20f5
+  signature: 7ED3ulYnu2VsJvPN/rEVLFHdVdBoiqJg1a8kR1FpWTmz9ZILrT/+NYq3CtnwGIvZscD/8CEBLBqKt1+0fCqZCQ==

specfact_cli/modules/init/src/commands.py

@@ -48,14 +48,7 @@ from specfact_cli.utils.ide_setup import (
 )
 
 
-VALID_PROFILES: frozenset[str] = frozenset(
-    {
-        "solo-developer",
-        "backlog-team",
-        "api-first-team",
-        "enterprise-full-stack",
-    }
-)
+VALID_PROFILES: frozenset[str] = frozenset(first_run_selection.get_valid_profile_names())
 PROFILE_BUNDLES: dict[str, list[str]] = first_run_selection.PROFILE_PRESETS
 
 install_bundles_for_init = first_run_selection.install_bundles_for_init
@@ -709,6 +702,21 @@ def init_ide(
         console.print(f"[green]Updated VS Code settings:[/green] {settings_path}")
 
 
+def _write_profile_config_or_exit(repo_path: Path, profile: str) -> None:
+    try:
+        first_run_selection.write_profile_config(repo_path, profile)
+    except ValueError as e:
+        console.print(f"[red]Error:[/red] {e}")
+        raise typer.Exit(1) from e
+
+
+def _apply_explicit_profile_or_install(repo_path: Path, profile: str | None, install: str | None) -> list[str]:
+    enabled_module_ids = _apply_profile_or_install_bundles(profile, install)
+    if profile is not None:
+        _write_profile_config_or_exit(repo_path, profile)
+    return enabled_module_ids
+
+
 @app.callback(invoke_without_command=True)
 @require(lambda repo: _is_valid_repo_path(repo), "Repo path must exist and be directory")
 @ensure(lambda result: result is None, "Command should return None")
@@ -725,7 +733,10 @@ def init(
     profile: str | None = typer.Option(
         None,
         "--profile",
-        help="First-run profile preset: solo-developer, backlog-team, api-first-team, enterprise-full-stack",
+        help=(
+            "Validation tier or legacy workflow preset: solo, startup, mid_size, enterprise, "
+            "solo-developer, backlog-team, api-first-team, enterprise-full-stack"
+        ),
     ),
     install: str | None = typer.Option(
         None,
@@ -750,7 +761,7 @@ def init(
 
         enabled_module_ids: list[str] = []
         if profile is not None or install is not None:
-            enabled_module_ids = _apply_profile_or_install_bundles(profile, install)
+            enabled_module_ids = _apply_explicit_profile_or_install(repo_path, profile, install)
         elif is_first_run(user_root=INIT_USER_MODULES_ROOT) and is_non_interactive():
             console.print(
                 "[red]Error:[/red] In CI/CD (non-interactive) mode, first-run init requires "

specfact_cli/modules/init/src/first_run_selection.py

@@ -3,10 +3,13 @@
 from __future__ import annotations
 
 import os
+from collections.abc import Mapping
+from copy import deepcopy
 from dataclasses import dataclass
 from pathlib import Path
-from typing import Any
+from typing import Any, cast
 
+import yaml
 from beartype import beartype
 from icontract import ensure, require
 
@@ -25,8 +28,118 @@ PROFILE_PRESETS: dict[str, list[str]] = {
         "specfact-spec",
         "specfact-govern",
     ],
+    "solo": ["specfact-codebase", "specfact-code-review"],
+    "startup": ["specfact-project", "specfact-backlog", "specfact-codebase", "specfact-code-review"],
+    "mid_size": ["specfact-project", "specfact-backlog", "specfact-codebase", "specfact-spec", "specfact-code-review"],
+    "enterprise": [
+        "specfact-project",
+        "specfact-backlog",
+        "specfact-codebase",
+        "specfact-spec",
+        "specfact-govern",
+        "specfact-code-review",
+    ],
+}
+
+VALIDATION_TIER_PROFILES: tuple[str, ...] = ("solo", "startup", "mid_size", "enterprise")
+
+LEGACY_PROFILE_TO_VALIDATION_TIER: dict[str, str] = {
+    "solo-developer": "solo",
+    "backlog-team": "startup",
+    "api-first-team": "mid_size",
+    "enterprise-full-stack": "enterprise",
+}
+
+
+def _canonical_module_ids(bundle_ids: list[str]) -> list[str]:
+    return [f"nold-ai/{bundle_id}" for bundle_id in bundle_ids]
+
+
+_PROFILE_DEFAULTS: dict[str, dict[str, Any]] = {
+    "solo": {
+        "profile": "solo",
+        "validation": {
+            "severity": "advisory",
+            "policy_mode": "advisory",
+            "evidence_persistence": "local",
+        },
+        "clean_code": {
+            "mode": "advisory",
+        },
+        "modules": {
+            "enabled": _canonical_module_ids(PROFILE_PRESETS["solo"]),
+        },
+        "requirements_schema": {
+            "required_fields": ["id", "title", "acceptance"],
+        },
+    },
+    "startup": {
+        "profile": "startup",
+        "validation": {
+            "severity": "mixed",
+            "policy_mode": "mixed",
+            "evidence_persistence": "repo",
+        },
+        "clean_code": {
+            "mode": "advisory_then_mixed",
+        },
+        "modules": {
+            "enabled": _canonical_module_ids(PROFILE_PRESETS["startup"]),
+        },
+        "requirements_schema": {
+            "required_fields": ["id", "title", "owner", "acceptance"],
+        },
+    },
+    "mid_size": {
+        "profile": "mid_size",
+        "validation": {
+            "severity": "mixed",
+            "policy_mode": "mixed",
+            "evidence_persistence": "repo",
+        },
+        "clean_code": {
+            "mode": "mixed",
+        },
+        "modules": {
+            "enabled": _canonical_module_ids(PROFILE_PRESETS["mid_size"]),
+        },
+        "requirements_schema": {
+            "required_fields": ["id", "title", "owner", "acceptance", "trace_links"],
+        },
+    },
+    "enterprise": {
+        "profile": "enterprise",
+        "validation": {
+            "severity": "hard",
+            "policy_mode": "hard",
+            "evidence_persistence": "required",
+        },
+        "clean_code": {
+            "mode": "hard",
+        },
+        "modules": {
+            "enabled": _canonical_module_ids(PROFILE_PRESETS["enterprise"]),
+        },
+        "requirements_schema": {
+            "required_fields": [
+                "id",
+                "title",
+                "owner",
+                "acceptance",
+                "trace_links",
+                "risk_classification",
+                "exception_evidence",
+            ],
+        },
+    },
 }
 
+_RESERVED_CONFIG_KEYS: frozenset[str] = frozenset({"source_annotations", "profile_warnings"})
+_PROFILE_GENERATED_CONFIG_KEYS: frozenset[str] = frozenset(
+    {"validation", "clean_code", "modules", "requirements_schema"}
+)
+_POLICY_STRENGTH: dict[str, int] = {"advisory": 1, "advisory_then_mixed": 2, "mixed": 3, "hard": 4}
+
 _INSTALL_ALL_BUNDLES: tuple[str, ...] = (
     "specfact-project",
     "specfact-backlog",
@@ -53,6 +166,8 @@ BUNDLE_ALIAS_TO_CANONICAL: dict[str, str] = {
     "backlog": "specfact-backlog",
     "codebase": "specfact-codebase",
     "code": "specfact-codebase",
+    "code-review": "specfact-code-review",
+    "code_review": "specfact-code-review",
     "spec": "specfact-spec",
     "govern": "specfact-govern",
 }
@@ -83,6 +198,15 @@ BUNDLE_DISPLAY: dict[str, str] = {
 }
 
 
+@dataclass(frozen=True)
+class ResolvedProfileConfig:
+    """Resolved profile config with source annotations for each winning value."""
+
+    values: dict[str, Any]
+    sources: dict[str, Any]
+    warnings: list[str]
+
+
 def _emit_init_bundle_progress() -> bool:
     """Return True when init should print progress (suppressed during pytest)."""
     return os.environ.get("PYTEST_CURRENT_TEST") is None
@@ -107,6 +231,160 @@ def _expand_bundle_install_order(bundle_ids: list[str]) -> list[str]:
     return to_install
 
 
+def _normalize_profile_key(profile: str) -> str:
+    key = profile.strip().lower()
+    return "mid_size" if key in {"mid-size", "mid_size"} else key
+
+
+@require(lambda profile: isinstance(profile, str) and profile.strip() != "", "profile must be non-empty string")
+@ensure(lambda result: result in VALIDATION_TIER_PROFILES, "result must be a validation tier")
+@beartype
+def resolve_validation_tier(profile: str) -> str:
+    """Map a validation tier or legacy workflow preset to a validation config tier."""
+    key = profile.strip().lower()
+    normalized = _normalize_profile_key(profile)
+    if normalized in VALIDATION_TIER_PROFILES:
+        return normalized
+    if key in LEGACY_PROFILE_TO_VALIDATION_TIER:
+        return LEGACY_PROFILE_TO_VALIDATION_TIER[key]
+    valid = ", ".join(get_valid_profile_names())
+    raise ValueError(f"Unknown profile {profile!r}. Valid profiles: {valid}")
+
+
+def _source_tree(value: Any, source: str) -> Any:
+    if isinstance(value, Mapping):
+        return {str(key): _source_tree(child, source) for key, child in value.items()}
+    return source
+
+
+def _merge_config_layer(target: dict[str, Any], sources: dict[str, Any], layer: Mapping[str, Any], source: str) -> None:
+    for raw_key, raw_value in layer.items():
+        key = str(raw_key)
+        if key in _RESERVED_CONFIG_KEYS:
+            continue
+        value = deepcopy(raw_value)
+        if isinstance(value, Mapping) and isinstance(target.get(key), dict):
+            existing_source = sources.get(key)
+            if not isinstance(existing_source, dict):
+                sources[key] = {}
+            _merge_config_layer(target[key], sources[key], value, source)
+            continue
+        target[key] = value
+        sources[key] = _source_tree(value, source)
+
+
+def _extract_policy_value(layer: Mapping[str, Any] | None, key: str) -> str | None:
+    if not layer:
+        return None
+    validation = layer.get("validation")
+    if not isinstance(validation, Mapping):
+        return None
+    validation_values: dict[str, Any] = {str(raw_key): raw_value for raw_key, raw_value in validation.items()}
+    value = validation_values.get(key)
+    return value if isinstance(value, str) else None
+
+
+def _local_policy_weakened(org_baseline: Mapping[str, Any] | None, developer_local: Mapping[str, Any] | None) -> bool:
+    for key in ("severity", "policy_mode"):
+        org_value = _extract_policy_value(org_baseline, key)
+        local_value = _extract_policy_value(developer_local, key)
+        if org_value is None or local_value is None:
+            continue
+        if _POLICY_STRENGTH.get(local_value, 0) < _POLICY_STRENGTH.get(org_value, 0):
+            return True
+    return False
+
+
+@require(lambda profile: isinstance(profile, str) and profile.strip() != "", "profile must be non-empty string")
+@ensure(lambda result: isinstance(result, ResolvedProfileConfig), "result must be a resolved profile config")
+@beartype
+def resolve_profile_config(
+    profile: str,
+    *,
+    org_baseline: Mapping[str, Any] | None = None,
+    repo_overlay: Mapping[str, Any] | None = None,
+    developer_local: Mapping[str, Any] | None = None,
+) -> ResolvedProfileConfig:
+    """Resolve profile defaults, org baseline, repo overlay, and developer-local config layers."""
+    tier = resolve_validation_tier(profile)
+    values: dict[str, Any] = {}
+    sources: dict[str, Any] = {}
+    _merge_config_layer(values, sources, _PROFILE_DEFAULTS[tier], f"profile:{tier}")
+    for layer, source in (
+        (org_baseline, "org_baseline"),
+        (repo_overlay, "repo_overlay"),
+        (developer_local, "developer_local"),
+    ):
+        if layer:
+            _merge_config_layer(values, sources, layer, source)
+
+    warnings: list[str] = []
+    if _local_policy_weakened(org_baseline, developer_local):
+        warnings.append("developer_local weakens org validation policy")
+    return ResolvedProfileConfig(values=values, sources=sources, warnings=warnings)
+
+
+def _read_yaml_mapping(path: Path) -> dict[str, Any]:
+    if not path.exists():
+        return {}
+    raw = yaml.safe_load(path.read_text(encoding="utf-8")) or {}
+    if not isinstance(raw, dict):
+        raise ValueError(f"Config file must contain a mapping: {path}")
+    return raw
+
+
+def _source_tree_contains_profile(value: Any) -> bool:
+    if isinstance(value, str):
+        return value.startswith("profile:")
+    if isinstance(value, Mapping):
+        return any(_source_tree_contains_profile(child) for child in value.values())
+    return False
+
+
+def _repo_overlay_without_generated_profile_values(raw_overlay: Mapping[str, Any]) -> dict[str, Any]:
+    overlay = {str(key): deepcopy(value) for key, value in raw_overlay.items()}
+    overlay.pop("profile", None)
+    source_annotations = overlay.pop("source_annotations", {})
+    overlay.pop("profile_warnings", None)
+    if not isinstance(source_annotations, Mapping):
+        return overlay
+    sources_by_key = {str(key): cast(Any, value) for key, value in source_annotations.items()}
+    for key in _PROFILE_GENERATED_CONFIG_KEYS:
+        if _source_tree_contains_profile(sources_by_key.get(key)):
+            overlay.pop(key, None)
+    return overlay
+
+
+@require(lambda repo_path: isinstance(repo_path, Path), "repo_path must be Path")
+@require(lambda profile: isinstance(profile, str) and profile.strip() != "", "profile must be non-empty string")
+@ensure(lambda result: isinstance(result, ResolvedProfileConfig), "result must be a resolved profile config")
+@beartype
+def write_profile_config(repo_path: Path, profile: str) -> ResolvedProfileConfig:
+    """Write `.specfact/config.yaml` for the selected profile with source annotations."""
+    specfact_dir = repo_path / ".specfact"
+    config_path = specfact_dir / "config.yaml"
+    local_path = specfact_dir / "config.local.yaml"
+    org_path = Path.home() / ".specfact" / "config.yaml"
+
+    repo_overlay = _repo_overlay_without_generated_profile_values(_read_yaml_mapping(config_path))
+    resolved = resolve_profile_config(
+        profile,
+        org_baseline=_read_yaml_mapping(org_path),
+        repo_overlay=repo_overlay,
+        developer_local=_read_yaml_mapping(local_path),
+    )
+
+    payload = deepcopy(resolved.values)
+    payload["profile"] = resolve_validation_tier(profile)
+    payload["source_annotations"] = resolved.sources
+    if resolved.warnings:
+        payload["profile_warnings"] = resolved.warnings
+
+    specfact_dir.mkdir(parents=True, exist_ok=True)
+    config_path.write_text(yaml.safe_dump(payload, sort_keys=False, allow_unicode=False), encoding="utf-8")
+    return resolved
+
+
 @dataclass
 class _InitBundleInstallDeps:
     root: Path
@@ -235,7 +513,7 @@ def _process_one_bundle_install_row(bid: str, deps: _InitBundleInstallDeps) -> N
 @beartype
 def resolve_profile_bundles(profile: str) -> list[str]:
     """Resolve a profile name to the list of canonical bundle ids to install."""
-    key = profile.strip().lower()
+    key = _normalize_profile_key(profile)
     if key not in PROFILE_PRESETS:
         valid = ", ".join(sorted(PROFILE_PRESETS))
         raise ValueError(f"Unknown profile {profile!r}. Valid profiles: {valid}")

specfact_cli/modules/module_registry/module-package.yaml

@@ -1,5 +1,5 @@
 name: module-registry
-version: 0.1.26
+version: 0.1.32
 commands:
   - module
 category: core
@@ -17,5 +17,5 @@ publisher:
 description: 'Manage modules: search, list, show, install, and upgrade.'
 license: Apache-2.0
 integrity:
-  checksum: sha256:52a65869fb3d2d36910308c954e0ba199cb1c73f24136ee0d4aa7254f0996a22
-  signature: Uo2eJ40HiWBqe77N8gjiDg7zGhsvJE/hN82+Jcto7yUoqbH7bidLw9DfVQ0CrJfgM9Y0XHAUS1+LMyPr1jAaBg==
+  checksum: sha256:a707de59cb2a706bad96a30415b693df0905cc67edf9238c0e9d601cc5b6af70
+  signature: GREOnCQAXmZvwN0s+2T6wwhPFTYiDchy/V7uut9uMHZjevK7ZDBxbTPZJhGjb1ndX7pkaL+/TfyNOuh/9AUDDw==

specfact_cli/modules/module_registry/src/commands.py

@@ -16,7 +16,7 @@ import typer
 import yaml
 from beartype import beartype
 from click.exceptions import Exit as ClickExit
-from icontract import require
+from icontract import ensure, require
 from packaging.version import InvalidVersion, Version
 from rich.console import Console
 from rich.table import Table
@@ -54,13 +54,21 @@ from specfact_cli.registry.module_packages import get_discovered_modules_for_sta
 from specfact_cli.registry.module_security import ensure_publisher_trusted, is_official_publisher
 from specfact_cli.registry.module_state import read_modules_state, write_modules_state
 from specfact_cli.registry.registry import CommandRegistry
-from specfact_cli.runtime import is_non_interactive
+from specfact_cli.runtime import is_non_interactive, refresh_loaded_module_consoles
 
 
 app = typer.Typer(help="Manage marketplace modules")
 console = Console()
 
 
+@app.callback()
+@beartype
+@ensure(lambda result: result is None, "module registry callback returns None")
+def module_registry_callback() -> None:
+    """Prepare invocation-local output streams for direct module command tests."""
+    refresh_loaded_module_consoles()
+
+
 def _module_upgrade_show_spinner() -> bool:
     """Rich Live/spinner breaks some tests; mirror ``utils.progress`` test-mode detection."""
     return os.environ.get("TEST_MODE") != "true" and os.environ.get("PYTEST_CURRENT_TEST") is None
@@ -386,10 +394,10 @@ def _install_one(module_id: str, params: _InstallOneParams) -> bool:
     except Exception as exc:
         console.print(f"[red]Failed installing {normalized}: {exc}[/red]")
         return False
-    console.print(f"[green]Installed[/green] {normalized} -> {installed_path}")
+    typer.echo(f"Installed {normalized} -> {installed_path}")
     publisher = _publisher_from_module_id(normalized)
     if is_official_publisher(publisher):
-        console.print(f"Verified: official ({publisher})")
+        typer.echo(f"Verified: official ({publisher})")
     return True
 
 

specfact_cli/registry/dependency_resolver.py

@@ -127,15 +127,18 @@ def _collect_constraints(modules: list[ModulePackageMetadata]) -> list[str]:
     seen: set[str] = set()
     for meta in modules:
         for d in meta.pip_dependencies or []:
-            if d.strip() and d not in seen:
-                constraints.append(d.strip())
-                seen.add(d)
+            normalized = d.strip()
+            if normalized and normalized not in seen:
+                constraints.append(normalized)
+                seen.add(normalized)
         for vd in meta.pip_dependencies_versioned or []:
-            spec = vd.version_specifier or ""
-            s = f"{vd.name}{spec}" if spec else vd.name
-            if s not in seen:
-                constraints.append(s)
-                seen.add(s)
+            name = vd.name.strip()
+            spec = (vd.version_specifier or "").strip()
+            s = f"{name}{spec}" if spec else name
+            normalized = s.strip()
+            if normalized and normalized not in seen:
+                constraints.append(normalized)
+                seen.add(normalized)
     return constraints
 
 

specfact_cli/registry/module_installer.py

@@ -825,7 +825,7 @@ def _extract_marketplace_archive(archive_path: Path, extract_root: Path) -> None
         try:
             archive.extractall(path=extract_root, members=members, filter="data")
         except TypeError:
-            archive.extractall(path=extract_root, members=members)
+            archive.extractall(path=extract_root, members=members)  # nosec B202 - members were validated above.
 
 
 def _load_first_extracted_module_manifest(extract_root: Path) -> tuple[Path, dict[str, Any]]:

specfact_cli/telemetry.py

@@ -14,6 +14,7 @@ import json
 import logging
 import os
 import sys
+import tempfile
 import time
 from collections.abc import MutableMapping
 from contextlib import contextmanager, suppress
@@ -677,6 +678,11 @@ def test_telemetry_settings_from_env_property() -> None:
     assert isinstance(settings.opt_in_source, str)
 
 
+def _crosshair_temp_log_path() -> Path:
+    """Return a unique local telemetry log path for property tests."""
+    return Path(tempfile.gettempdir()) / f"test_telemetry-{uuid4().hex}.log"
+
+
 @beartype
 @require(lambda enabled: isinstance(enabled, bool), "enabled must be a bool")
 def test_telemetry_manager_init_property(enabled: bool) -> None:
@@ -685,7 +691,7 @@ def test_telemetry_manager_init_property(enabled: bool) -> None:
         enabled=enabled,
         endpoint=None,
         headers={},
-        local_path=Path("/tmp/test_telemetry.log"),
+        local_path=_crosshair_temp_log_path(),
         debug=False,
         opt_in_source="disabled",
     )
@@ -752,7 +758,7 @@ def test_telemetry_manager_normalize_value_property(value: Any) -> None:
 @require(lambda event: isinstance(event, Mapping), "event must be a Mapping")
 def test_telemetry_manager_write_local_event_property(event: Mapping[str, Any]) -> None:
     """CrossHair property test for TelemetryManager._write_local_event."""
-    manager = TelemetryManager(TelemetrySettings(enabled=False, local_path=Path("/tmp/test_telemetry.log")))
+    manager = TelemetryManager(TelemetrySettings(enabled=False, local_path=_crosshair_temp_log_path()))
     # This test verifies the function doesn't raise exceptions
     # Actual file writing is tested in integration tests
     with suppress(OSError):  # Expected in some test environments
@@ -763,7 +769,7 @@ def test_telemetry_manager_write_local_event_property(event: Mapping[str, Any])
 @require(lambda event: isinstance(event, MutableMapping), "event must be a MutableMapping")
 def test_telemetry_manager_emit_event_property(event: MutableMapping[str, Any]) -> None:
     """CrossHair property test for TelemetryManager._emit_event."""
-    manager = TelemetryManager(TelemetrySettings(enabled=False, local_path=Path("/tmp/test_telemetry.log")))
+    manager = TelemetryManager(TelemetrySettings(enabled=False, local_path=_crosshair_temp_log_path()))
     manager._emit_event(event)
     assert manager._last_event is not None
     assert isinstance(manager._last_event, dict)
@@ -779,7 +785,7 @@ def test_telemetry_manager_track_command_property(command: str, initial_metadata
     """CrossHair property test for TelemetryManager.track_command."""
     if not command or len(command) == 0:
         return  # Skip invalid inputs
-    manager = TelemetryManager(TelemetrySettings(enabled=True, local_path=Path("/tmp/test_telemetry.log")))
+    manager = TelemetryManager(TelemetrySettings(enabled=True, local_path=_crosshair_temp_log_path()))
     try:
         with manager.track_command(command, initial_metadata) as record:
             assert callable(record)

specfact_cli/utils/suggestions.py

@@ -52,7 +52,7 @@ def suggest_next_steps(repo_path: Path, context: ProjectContext | None = None) -
 
     # Analysis suggestions
     if context.has_plan and context.contract_coverage < 0.5:
-        suggestions.append("specfact analyze --bundle <name>  # Analyze contract coverage")
+        suggestions.append("specfact code analyze contracts --bundle <name>  # Analyze contract coverage")
         suggestions.append("specfact code import --repo . <name>  # Update the project bundle from code")
 
     # Specmatic integration suggestions
@@ -95,8 +95,8 @@ def suggest_fixes(error_message: str, context: ProjectContext | None = None) ->
 
     # Contract validation errors
     if "contract" in error_lower and ("violation" in error_lower or "invalid" in error_lower):
-        suggestions.append("specfact analyze --bundle <name>  # Analyze contract violations")
-        suggestions.append("specfact repro --bundle <name>  # Run validation suite")
+        suggestions.append("specfact code analyze contracts --bundle <name>  # Analyze contract violations")
+        suggestions.append("specfact code repro --repo .  # Run validation suite")
 
     # Specmatic errors
     if "specmatic" in error_lower or "openapi" in error_lower:
@@ -126,7 +126,7 @@ def suggest_improvements(context: ProjectContext) -> list[str]:
 
     # Low contract coverage
     if context.contract_coverage < 0.3:
-        suggestions.append("specfact analyze --bundle <name>  # Identify missing contracts")
+        suggestions.append("specfact code analyze contracts --bundle <name>  # Identify missing contracts")
         suggestions.append("specfact code import --repo . <name>  # Extract contracts from code")
 
     # Missing OpenAPI specs

{specfact_cli-0.47.6.dist-info → specfact_cli-0.48.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specfact-cli
-Version: 0.47.6
+Version: 0.48.2
 Summary: AI-bloat defense CLI for Python teams. Run deterministic code review, cleanup forecasts, and spec/contract evidence for AI-assisted and brownfield delivery.
 Project-URL: Homepage, https://github.com/nold-ai/specfact-cli
 Project-URL: Repository, https://github.com/nold-ai/specfact-cli.git

{specfact_cli-0.47.6.dist-info → specfact_cli-0.48.2.dist-info}/RECORD

@@ -1,10 +1,10 @@
-specfact_cli/__init__.py,sha256=Pr_YuiGSDCX2soGovLHD4gTEg1gxwyr14l57UHpRv_4,2764
+specfact_cli/__init__.py,sha256=T-PnD8QbK4vSRTj5J_c5wvngcQDPQQjm8edqWjp27fc,2764
 specfact_cli/__main__.py,sha256=EpP5xlutNYI5AuMlMw8fGt1TywZUR1-CXHpzpWKyNuo,141
 specfact_cli/cli.py,sha256=IlAtbxyaLxhj2FCteq7P1GRxME4nl_3OiRb3gY9gKDw,53060
 specfact_cli/runtime.py,sha256=4tEcOsz2bE6-KuZF5nuHvHuwinO7l8fNAGzrra9pNrc,13474
-specfact_cli/telemetry.py,sha256=HcF6Vbv43X39fcYOg8GTuBOcGaYlc15ZoSr_Dq9Aro0,30893
+specfact_cli/telemetry.py,sha256=LS34mq8jIJPcXFCm9SgLRjDUe7Ks41fPWvZmD6PXcVM,31079
 specfact_cli/adapters/__init__.py,sha256=phzCwBSYzkXSLA6nIZan_EyInGNJ4SedmdRuAp3hyho,932
-specfact_cli/adapters/ado.py,sha256=uC-jHUqLtRTlWQtGVw4OCskV5V9euzCmD7O8DdFqd7o,163279
+specfact_cli/adapters/ado.py,sha256=gLsiEjnwfXWTpWVcL2GgitJOLny7d6KtzXnqdQYK-Ds,163388
 specfact_cli/adapters/backlog_base.py,sha256=CLsFDKhxxQeU00Tqj2glKiRn-eBPmAQ4S5J9BV_9geA,26167
 specfact_cli/adapters/base.py,sha256=NMYNCzze8klSGYVU5QuAmum0joBooKP8wBhh3jg7HEg,8813
 specfact_cli/adapters/github.py,sha256=MWEp34ckuCPW1cstP4u01k9zwBgXIDiJ4ADtC6SQn-s,143039
@@ -72,13 +72,13 @@ specfact_cli/enrichers/plan_enricher.py,sha256=ejwLrBgFp-eomACYFRdvpPRU-iATArC_6
 specfact_cli/generators/__init__.py,sha256=l0yBBgmOhdRYywFIvKNeQdRQ_kOJOTfFKJmZtqTyC5s,570
 specfact_cli/generators/contract_generator.py,sha256=m8U_iIFLSdBEPyTSZ-j0-PpZPpHyGcFgUszDLhSZg3E,15492
 specfact_cli/generators/openapi_extractor.py,sha256=S7yQIcdjlQXla0s9QIHiFLA9mO3LGQXLeb_h6u-k-uM,56133
-specfact_cli/generators/persona_exporter.py,sha256=u07EBgwAeEJ84kt12xPAgn0xswER1DqWw8f3MtSOEAY,18559
-specfact_cli/generators/plan_generator.py,sha256=ASzjfhbjLPZhF-bOGaRImX9quC2gQ7hhD2wNyzc9xBY,5017
-specfact_cli/generators/protocol_generator.py,sha256=FPWQIBLbK5Vuc8lWzFm7OJCzfOnu5cfqMKf6sXVOmng,4392
-specfact_cli/generators/report_generator.py,sha256=j3icmmnED_oOeRS1hy3m3efB91VvEu81htUZsa88Dko,8339
+specfact_cli/generators/persona_exporter.py,sha256=pXFT-TCGzLMxnL2AI_5Relix2zq-rxDGZIUc6ygG_uU,18621
+specfact_cli/generators/plan_generator.py,sha256=smEW6LahAkkN6-31sZQpGkpyjMm_tpQoTW8z83bkr-I,5091
+specfact_cli/generators/protocol_generator.py,sha256=YLsVINiow9Jxee6rQ00J7N1SuFf2-D7cdvPEQ5Hu45Y,4455
+specfact_cli/generators/report_generator.py,sha256=1nhQ9n3qid1Jq_GGRN5PUgS8otdJqsl7dpau7KifErg,8403
 specfact_cli/generators/task_generator.py,sha256=Zjz8GiOkM1MRRt21wgRfo5z13rd8U4UH4P4EnvqDn5c,16565
 specfact_cli/generators/test_to_openapi.py,sha256=cWxvkIJpJwxn4Kg6EYg1drUT6nH-UF74sEa7girNcoM,20355
-specfact_cli/generators/workflow_generator.py,sha256=qHtJHXqd1JHlcJcDx9e1WPfvc_cM7UGAHzY9lqxqPaw,5203
+specfact_cli/generators/workflow_generator.py,sha256=LsACS_uhv7RujbL_MUotBYFjn_VXdm-tGsSg9t5URBI,5277
 specfact_cli/groups/__init__.py,sha256=Bgx5Rx1XJ8Sl96dbc78rNlagM3jZRWFH_CBo3zFM9Xk,440
 specfact_cli/groups/codebase_group.py,sha256=cWbODxdPXp-A6DhQBVyoylO3TA4S5b4zSEyGupDi1Zw,1176
 specfact_cli/groups/govern_group.py,sha256=YNyOuuRBCUVJyHef0EhUwAD2CkPlEhosGj-T1dSJSes,1177
@@ -119,15 +119,15 @@ specfact_cli/modes/router.py,sha256=VK9kk3US-agR6rF7fVB5EY5MyHjTKzFTTApwOVx-BCk,
 specfact_cli/modules/__init__.py,sha256=jcxpCTLc1M4TFNN80MOyhzegG4QTkHbRPJb6UK33hVg,112
 specfact_cli/modules/_bundle_import.py,sha256=KfaNZoNvS1N8dVrUdxpx5sI6clxq590e0x1V0LRCBdY,1602
 specfact_cli/modules/module_io_shim.py,sha256=gNUVuzuvCf2cyQb8UK5-eG4QHZkrig0MPl7Y7VfbThA,3423
-specfact_cli/modules/init/module-package.yaml,sha256=XJSB9sxF-Ri03nLTRwATL4d4U6pN8a4cVjZnMQ6JX64,688
+specfact_cli/modules/init/module-package.yaml,sha256=h8q1cyXldQZ9cclLKb6PfFsmIfMtgu3DjobGvqvaegA,688
 specfact_cli/modules/init/src/__init__.py,sha256=hCfRT0VH7kl70Rm_jHlNFlCLerJoI8InHi7OS74WIL8,39
 specfact_cli/modules/init/src/app.py,sha256=laUNKmpNqrFl1Jab3bBYICAaq3GUsj5hN5yjVFYAjvE,107
-specfact_cli/modules/init/src/commands.py,sha256=z5HLWOyTGSy8GZ3mFwzRHK9ohuxaAoXMP2147QK2sMQ,30032
-specfact_cli/modules/init/src/first_run_selection.py,sha256=nt7TS9gbQzUoSv8UXipunIo6A3IZS3JQWidyjDdvci4,12729
-specfact_cli/modules/module_registry/module-package.yaml,sha256=BMSKtkoNdVbXhPA2lnDZ3w33yAOL3Ed3WqTj0g1HRKk,699
+specfact_cli/modules/init/src/commands.py,sha256=iU5J-0qbIjd36USQu9E6bigfS6M9sySVZq9vQQpN_Qg,30632
+specfact_cli/modules/init/src/first_run_selection.py,sha256=tcog19C2avEkIuY0VQRbclmH8BR_uwzzEw432zeG0As,23126
+specfact_cli/modules/module_registry/module-package.yaml,sha256=iV9YB6TaE3yIuADP-3ymn9YlBy-NzNI4YsMTdJLjXDQ,699
 specfact_cli/modules/module_registry/src/__init__.py,sha256=Y97pOZc6y1DLxUBSHeh15AQ-sWCrg67ESyUNI5NRShY,42
 specfact_cli/modules/module_registry/src/app.py,sha256=sAKRXfaJNVM22rA952DFpG-12c8dazEb_zBQuc1KCF0,351
-specfact_cli/modules/module_registry/src/commands.py,sha256=M1-nklcd1s_gr_Z-kv6KZvSfikbq3EJwLJZbupaS6i4,61455
+specfact_cli/modules/module_registry/src/commands.py,sha256=Fpn6LggGGfyEbTcSDZMOds7NHre74neez4TyizJkkZI,61742
 specfact_cli/modules/upgrade/module-package.yaml,sha256=TtgHUVBEW7sIsJPuv6F486iUGgM4T4B4i65l-zoMRFU,647
 specfact_cli/modules/upgrade/src/__init__.py,sha256=hCfRT0VH7kl70Rm_jHlNFlCLerJoI8InHi7OS74WIL8,39
 specfact_cli/modules/upgrade/src/app.py,sha256=lOeaPyWumUuuWbmOTZB7ZbdmvKjDzma0B8fTU976Z00,113
@@ -140,7 +140,7 @@ specfact_cli/registry/bootstrap.py,sha256=-XwVbpjgutpSaIv-T6WPRNRIBE0N5jft7cCuT3
 specfact_cli/registry/bridge_registry.py,sha256=RvBy5nl6G4kJNGmugMzT01UYYIjPpJFmuoljDH7Nv_4,6227
 specfact_cli/registry/crypto_validator.py,sha256=6oY-axdMa32_szUDuPs01lhOj7VJ4p6Pk5qd5a6eH-4,7649
 specfact_cli/registry/custom_registries.py,sha256=LrHbVH6o7r09_FZOZCxgNKJqryjKO1Q5J3rYUFteJWw,6979
-specfact_cli/registry/dependency_resolver.py,sha256=NoXpHigJtPvSnUmmMwqIyDx7PiO7bV0oLizPXbHJE8k,7104
+specfact_cli/registry/dependency_resolver.py,sha256=uYjt8etlLdZeVqMLFZYghJjhgJOQdwKjOzfr5SRHWgs,7275
 specfact_cli/registry/extension_registry.py,sha256=y7tzaX6m6aXHaxGMNhJ8IkfQ60F7Xq0NX41hLWK_Y3A,2644
 specfact_cli/registry/help_cache.py,sha256=fsy8gSUni3yIRFAzrmb-ybmum2EB6uL5Ys2a8g5x3Gw,5505
 specfact_cli/registry/marketplace_client.py,sha256=BH1WKr80UccV4VX-N2sL0IxQIC_EtmAbv_XVI28szZQ,13113
@@ -148,7 +148,7 @@ specfact_cli/registry/metadata.py,sha256=mSIW8UZgBzBdiAH_52K8GL-VBMgZoyGQXIXg0bs
 specfact_cli/registry/module_availability.py,sha256=_fWsXUcWVY-aVhkjtKrYfb3Qkr80KsZ8P0y75PXCW-8,8115
 specfact_cli/registry/module_discovery.py,sha256=ga4w8OCVySExDGeWYp_Qo6OjSjU5OVDPWO5g2tqgX6A,8822
 specfact_cli/registry/module_grouping.py,sha256=Qly2YKxlsn1Wt9hDRlHMMZeui85w3KbbT86VAJ4Mz2o,3186
-specfact_cli/registry/module_installer.py,sha256=1NOue9V00KBDSHUtNrGa0xtLOAzcsghx0fE8EGqb27s,45102
+specfact_cli/registry/module_installer.py,sha256=72OlptZI43UrHr-3_5a6QyyL7vBU51ojuBpM5AnH5vc,45148
 specfact_cli/registry/module_lifecycle.py,sha256=17QhSER6lQV4JeTn3rvF6lsFRTIjT_UrIzMGpVveFEw,9541
 specfact_cli/registry/module_packages.py,sha256=4tBeqpB1UF6F1_LSOSr9P5mkhQFjEba5iY_viOHzGZ8,66661
 specfact_cli/registry/module_security.py,sha256=RfKJmkR9sdBXP7q1YBsK1Io-ys0vhHshhPR06uk5TjM,4517
@@ -217,7 +217,7 @@ specfact_cli/utils/source_scanner.py,sha256=VmyJE8gvViGR124TuQjODr_0mBlV9kJxE14t
 specfact_cli/utils/startup_checks.py,sha256=M6AxZMLsM3_z6QgTAxo1mNfmYLCpPJR2u6P0SCx9qQ0,19046
 specfact_cli/utils/structure.py,sha256=Z4Ii4ZKk51KnRVv65CsrGptkG5sECXY6ykxG5XpWCKA,56888
 specfact_cli/utils/structured_io.py,sha256=86KnxZHFl62GboWJRG1TpxR2qgwlHRRSpqYr-oTZIqM,6069
-specfact_cli/utils/suggestions.py,sha256=A9fFaRMBF8f6XQPCHuGk_GBpUUel2ePxUf1AuFREc_s,5756
+specfact_cli/utils/suggestions.py,sha256=BwAkz9_Rcretjy5oVMqjSineDjs6atMTLcPnBsdpKSU,5799
 specfact_cli/utils/terminal.py,sha256=mCSetNY7fiEkld2qY3YNbzo8RgNBT4YNKNt4kADa0U4,8021
 specfact_cli/utils/yaml_utils.py,sha256=KNUBwYvk9CNWof1VySogBlaT0RgbLoDaTNgti2PiGcc,9426
 specfact_cli/validation/__init__.py,sha256=ncdOStsXWhJkPh-qWRluW5x_tuQUS4-9tzXdc2UhQGI,322
@@ -287,8 +287,8 @@ specfact_cli/resources/templates/policies/kanban.yaml,sha256=9jt7YYfZ8e8aB5skY2D
 specfact_cli/resources/templates/policies/mixed.yaml,sha256=-fkrT-TLKLTBzjKeKr8bEJHFC-nh1TlyLOEFfgRdSi8,243
 specfact_cli/resources/templates/policies/safe.yaml,sha256=uiwe5_ABvaU4nmq6rsLUn8zRotkBITItPUsdPZPTHTw,157
 specfact_cli/resources/templates/policies/scrum.yaml,sha256=6FHYOntkjCxHAn-ga14IQzA1PvYUJgxfLsEQYtWJILM,188
-specfact_cli-0.47.6.dist-info/METADATA,sha256=EXFnLZ3O83YI-mgT5wOOxMyQbL7l-dzXSgVYwhyqCLo,25589
-specfact_cli-0.47.6.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
-specfact_cli-0.47.6.dist-info/entry_points.txt,sha256=pwDD5Ttu6AF3p3T05M4G0aR2BELFyUu3214kjMRGEow,96
-specfact_cli-0.47.6.dist-info/licenses/LICENSE,sha256=nWX_6oozyEFlF3mDaSWyBD9HLpyLRmCYYqdcgoVOrOk,11361
-specfact_cli-0.47.6.dist-info/RECORD,,
+specfact_cli-0.48.2.dist-info/METADATA,sha256=DMH1iUe0ytrB7rMelRHOxJfH1pTlrx6amYVQb-H8wf0,25589
+specfact_cli-0.48.2.dist-info/WHEEL,sha256=mffPy8wBnZQn2VnJUU5jE99KsxaSfiyMHV9Yt0aLVxs,87
+specfact_cli-0.48.2.dist-info/entry_points.txt,sha256=pwDD5Ttu6AF3p3T05M4G0aR2BELFyUu3214kjMRGEow,96
+specfact_cli-0.48.2.dist-info/licenses/LICENSE,sha256=nWX_6oozyEFlF3mDaSWyBD9HLpyLRmCYYqdcgoVOrOk,11361
+specfact_cli-0.48.2.dist-info/RECORD,,