specsmith 0.11.3.dev436__tar.gz → 0.11.3.dev438__tar.gz

{specsmith-0.11.3.dev436/src/specsmith.egg-info → specsmith-0.11.3.dev438}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.11.3.dev436
+Version: 0.11.3.dev438
 Summary: Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands.
 Author: BitConcepts
 License-Expression: MIT
@@ -274,8 +274,9 @@ be overwritten by the next sync.
 | `docs/requirements/yaml_governance.yml` | REQ-300..312 | YAML governance layer |
 | `docs/requirements/multiagent_compliance.yml` | REQ-313..320 | Multi-agent governance traceability |
 | `docs/requirements/dispatch.yml` | REQ-321..334 | Multi-agent DAG dispatcher |
+| `docs/requirements/overflow.yml` | REQ-335..356 | VCS ops, skills catalog, ESDB namespace, session governance, modern web types, Codity.ai integration |
 
-**Migration from Markdown-primary:** Run
+**Migration from Markdown-primary:**
 `scripts/migrate_governance_to_yaml.py` once to convert an existing project.
 Idempotent — safe to re-run.
 
@@ -934,6 +935,25 @@ production LLM systems:
 
 ---
 
+## Codity.ai AI Code Review Integration
+
+specsmith can scaffold [Codity.ai](https://codity.ai) AI code review into any project:
+
+```bash
+specsmith integrate codity --project-dir ./my-project
+```
+
+This generates:
+- `.github/workflows/codity-review.yml` (GitHub Actions) or `.gitlab-ci-codity.yml` / `.azure-pipelines/codity-review.yml` depending on your VCS
+- `docs/codity-setup.md` — one-time setup checklist
+- Appends a TODO checklist to `LEDGER.md`
+
+**AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
+
+See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.
+
+---
+
 ## The specsmith Bootstrap
 
 specsmith governs itself — the specsmith repo is a specsmith-managed project. Run `specsmith audit`

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/README.md

@@ -202,8 +202,9 @@ be overwritten by the next sync.
 | `docs/requirements/yaml_governance.yml` | REQ-300..312 | YAML governance layer |
 | `docs/requirements/multiagent_compliance.yml` | REQ-313..320 | Multi-agent governance traceability |
 | `docs/requirements/dispatch.yml` | REQ-321..334 | Multi-agent DAG dispatcher |
+| `docs/requirements/overflow.yml` | REQ-335..356 | VCS ops, skills catalog, ESDB namespace, session governance, modern web types, Codity.ai integration |
 
-**Migration from Markdown-primary:** Run
+**Migration from Markdown-primary:**
 `scripts/migrate_governance_to_yaml.py` once to convert an existing project.
 Idempotent — safe to re-run.
 
@@ -862,6 +863,25 @@ production LLM systems:
 
 ---
 
+## Codity.ai AI Code Review Integration
+
+specsmith can scaffold [Codity.ai](https://codity.ai) AI code review into any project:
+
+```bash
+specsmith integrate codity --project-dir ./my-project
+```
+
+This generates:
+- `.github/workflows/codity-review.yml` (GitHub Actions) or `.gitlab-ci-codity.yml` / `.azure-pipelines/codity-review.yml` depending on your VCS
+- `docs/codity-setup.md` — one-time setup checklist
+- Appends a TODO checklist to `LEDGER.md`
+
+**AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
+
+See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.
+
+---
+
 ## The specsmith Bootstrap
 
 specsmith governs itself — the specsmith repo is a specsmith-managed project. Run `specsmith audit`

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "specsmith"
-version = "0.11.3.dev436"
+version = "0.11.3.dev438"
 description = "Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands."
 readme = "README.md"
 license = "MIT"

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/src/specsmith/integrations/__init__.py

@@ -28,6 +28,7 @@ def _load_adapters() -> None:
     from specsmith.integrations.agent_skill import AgentSkillAdapter
     from specsmith.integrations.aider import AiderAdapter
     from specsmith.integrations.claude_code import ClaudeCodeAdapter
+    from specsmith.integrations.codity import CodityAdapter
     from specsmith.integrations.copilot import CopilotAdapter
     from specsmith.integrations.cursor import CursorAdapter
     from specsmith.integrations.gemini import GeminiAdapter
@@ -36,6 +37,7 @@ def _load_adapters() -> None:
     for cls in (
         AgentSkillAdapter,
         ClaudeCodeAdapter,
+        CodityAdapter,
         CursorAdapter,
         CopilotAdapter,
         GeminiAdapter,

specsmith-0.11.3.dev438/src/specsmith/integrations/codity.py

@@ -0,0 +1,296 @@
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2026 BitConcepts, LLC. All rights reserved.
+"""Codity.ai integration adapter.
+
+Generates a GitHub Actions (or GitLab CI / Azure Pipelines) workflow that
+runs ``codity review --staged`` on every pull-request, plus appends a setup
+checklist to LEDGER.md and writes a starter Codity configuration hint.
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from specsmith.config import ProjectConfig
+from specsmith.integrations.base import AgentAdapter
+
+
+class CodityAdapter(AgentAdapter):
+    """Scaffold Codity.ai AI-code-review integration files."""
+
+    @property
+    def name(self) -> str:
+        return "codity"
+
+    @property
+    def description(self) -> str:
+        return "Codity.ai AI code review (.github/workflows/codity-review.yml)"
+
+    # ------------------------------------------------------------------
+    # Public API
+    # ------------------------------------------------------------------
+
+    def generate(self, config: ProjectConfig, target: Path) -> list[Path]:
+        """Generate Codity.ai integration files.
+
+        Creates:
+        - ``.github/workflows/codity-review.yml`` (or GitLab/Azure variant)
+        - ``docs/codity-setup.md`` — one-time setup checklist
+        Appends:
+        - ``LEDGER.md`` — Codity setup TODO entry
+        """
+        created: list[Path] = []
+
+        vcs = self._detect_vcs(target)
+        workflow_path = self._write_workflow(config, target, vcs)
+        if workflow_path:
+            created.append(workflow_path)
+
+        setup_doc = self._write_setup_doc(config, target, vcs)
+        created.append(setup_doc)
+
+        self._append_ledger(target, vcs)
+
+        return created
+
+    # ------------------------------------------------------------------
+    # Internal helpers
+    # ------------------------------------------------------------------
+
+    def _detect_vcs(self, target: Path) -> str:
+        """Detect VCS host from scaffold.yml or directory layout.
+
+        Returns one of: ``"github"``, ``"gitlab"``, ``"azure"``.
+        Defaults to ``"github"`` when the host cannot be determined.
+        """
+        scaffold = target / "scaffold.yml"
+        if scaffold.exists():
+            text = scaffold.read_text(encoding="utf-8")
+            if "gitlab" in text.lower():
+                return "gitlab"
+            if "azure" in text.lower() or "azuredevops" in text.lower():
+                return "azure"
+        # Structural heuristics
+        if (target / ".gitlab-ci.yml").exists():
+            return "gitlab"
+        if (target / "azure-pipelines.yml").exists():
+            return "azure"
+        return "github"
+
+    # ---- workflow writers -------------------------------------------
+
+    def _write_workflow(self, config: ProjectConfig, target: Path, vcs: str) -> Path | None:
+        if vcs == "github":
+            return self._write_github_workflow(config, target)
+        if vcs == "gitlab":
+            return self._write_gitlab_workflow(config, target)
+        if vcs == "azure":
+            return self._write_azure_workflow(config, target)
+        return None
+
+    def _write_github_workflow(self, config: ProjectConfig, target: Path) -> Path:
+        workflows_dir = target / ".github" / "workflows"
+        workflows_dir.mkdir(parents=True, exist_ok=True)
+        workflow_path = workflows_dir / "codity-review.yml"
+        content = f"""\
+# Codity.ai AI Code Review — {config.name}
+# Generated by specsmith (specsmith integrate codity)
+#
+# Prerequisites:
+#   1. Install the Codity GitHub App: https://github.com/apps/codity
+#   2. (Optional) Restrict to specific repos in the App settings.
+#
+# The workflow runs on every pull-request and posts inline AI review
+# comments directly on the PR diff.
+
+name: Codity AI Review
+
+on:
+  pull_request:
+    branches: ["**"]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  codity-review:
+    name: Codity AI Review
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # full history for diff context
+
+      - name: Install Codity CLI
+        run: curl -fsSL https://cli.codity.ai/install.sh | sh
+
+      - name: Run Codity review
+        env:
+          CODITY_ACCESS_TOKEN: ${{{{ secrets.CODITY_ACCESS_TOKEN }}}}
+        run: codity review --staged
+"""
+        workflow_path.write_text(content, encoding="utf-8")
+        return workflow_path
+
+    def _write_gitlab_workflow(self, config: ProjectConfig, target: Path) -> Path:
+        ci_path = target / ".gitlab-ci-codity.yml"
+        content = f"""\
+# Codity.ai AI Code Review — {config.name}
+# Generated by specsmith (specsmith integrate codity)
+#
+# Prerequisites:
+#   1. Configure a GitLab PAT: codity config set-pat --provider gitlab
+#   2. Store it as CI/CD variable CODITY_GITLAB_PAT in GitLab settings.
+
+stages:
+  - review
+
+codity-review:
+  stage: review
+  image: debian:bookworm-slim
+  only:
+    - merge_requests
+  variables:
+    CODITY_ACCESS_TOKEN: $CODITY_ACCESS_TOKEN
+  script:
+    - apt-get update -qq && apt-get install -y -qq curl
+    - curl -fsSL https://cli.codity.ai/install.sh | sh
+    - codity config set-pat --provider gitlab --token "$CODITY_GITLAB_PAT"
+    - codity review --staged
+"""
+        ci_path.write_text(content, encoding="utf-8")
+        return ci_path
+
+    def _write_azure_workflow(self, config: ProjectConfig, target: Path) -> Path:
+        pipelines_dir = target / ".azure-pipelines"
+        pipelines_dir.mkdir(parents=True, exist_ok=True)
+        pipeline_path = pipelines_dir / "codity-review.yml"
+        content = f"""\
+# Codity.ai AI Code Review — {config.name}
+# Generated by specsmith (specsmith integrate codity)
+#
+# Prerequisites:
+#   1. Configure an Azure DevOps PAT: codity config set-pat --provider azure
+#   2. Store it as pipeline variable CODITY_AZURE_PAT (secret).
+
+trigger: none
+
+pr:
+  branches:
+    include:
+      - "*"
+
+pool:
+  vmImage: ubuntu-latest
+
+steps:
+  - script: curl -fsSL https://cli.codity.ai/install.sh | sh
+    displayName: Install Codity CLI
+
+  - script: |
+      codity config set-pat --provider azure --token "$(CODITY_AZURE_PAT)"
+      codity review --staged
+    displayName: Run Codity AI Review
+    env:
+      CODITY_ACCESS_TOKEN: $(CODITY_ACCESS_TOKEN)
+"""
+        pipeline_path.write_text(content, encoding="utf-8")
+        return pipeline_path
+
+    # ---- setup doc --------------------------------------------------
+
+    def _write_setup_doc(self, config: ProjectConfig, target: Path, vcs: str) -> Path:
+        docs_dir = target / "docs"
+        docs_dir.mkdir(parents=True, exist_ok=True)
+        doc_path = docs_dir / "codity-setup.md"
+
+        pat_note = ""
+        if vcs == "gitlab":
+            pat_note = (
+                "\n5. Set GitLab PAT: `codity config set-pat --provider gitlab`\n"
+                "6. Add `CODITY_GITLAB_PAT` as a CI/CD variable in GitLab.\n"
+            )
+        elif vcs == "azure":
+            pat_note = (
+                "\n5. Set Azure DevOps PAT: `codity config set-pat --provider azure`\n"
+                "6. Add `CODITY_AZURE_PAT` as a secret pipeline variable.\n"
+            )
+
+        content = f"""\
+# Codity.ai Setup — {config.name}
+
+> Generated by `specsmith integrate codity`.
+
+## One-time setup checklist
+
+1. Install Codity CLI:
+   ```bash
+   curl -fsSL https://cli.codity.ai/install.sh | sh
+   ```
+
+2. Authenticate:
+   ```bash
+   codity login   # opens browser — magic-link auth
+   ```
+
+3. Initialise in this project:
+   ```bash
+   codity init
+   ```
+
+4. (GitHub) Install the Codity GitHub App:
+   <https://github.com/apps/codity>{pat_note}
+
+## Daily usage
+
+| Command | Effect |
+|---|---|
+| `codity review --staged` | AI review of staged changes |
+| `codity scan --staged` | Security & quality scan of staged changes |
+| `codity test-gen --staged` | Generate tests for staged changes |
+| `codity doctor` | Health-check CLI + project config |
+
+## Config location
+
+`~/.codity/config.yaml` — or set `CODITY_ACCESS_TOKEN` env var to override.
+
+## AGENTS.md rule
+
+Projects with Codity configured SHOULD run `codity review --staged` before
+any commit that touches production code. Treat HIGH-severity findings as
+blocking; MEDIUM findings require inline acknowledgement.
+"""
+        doc_path.write_text(content, encoding="utf-8")
+        return doc_path
+
+    # ---- ledger append ----------------------------------------------
+
+    def _append_ledger(self, target: Path, vcs: str) -> None:
+        ledger = target / "LEDGER.md"
+        if not ledger.exists():
+            return
+        entry = (
+            "\n## TODO: Codity.ai Setup\n\n"
+            "- [ ] Run `codity login` and complete browser auth\n"
+            "- [ ] Run `codity init` in project root\n"
+        )
+        if vcs == "github":
+            entry += "- [ ] Install Codity GitHub App: https://github.com/apps/codity\n"
+            entry += (
+                "- [ ] Add `CODITY_ACCESS_TOKEN` to repo secrets (optional — App handles auth)\n"
+            )
+        elif vcs == "gitlab":
+            entry += (
+                "- [ ] `codity config set-pat --provider gitlab` "
+                "and add `CODITY_GITLAB_PAT` to CI/CD vars\n"
+            )
+        elif vcs == "azure":
+            entry += (
+                "- [ ] `codity config set-pat --provider azure` "
+                "and add `CODITY_AZURE_PAT` to pipeline vars\n"
+            )
+        entry += "- [ ] Run `codity doctor` to verify setup\n"
+        with ledger.open("a", encoding="utf-8") as f:
+            f.write(entry)

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/src/specsmith/skills/governance.py

@@ -631,6 +631,115 @@ Increment NNN by scanning existing PAR entries in `docs/LEDGER.md`.
 - Filed artifacts in `docs/ip/filings/` are immutable.
 - Normative content lives under `docs/ip/specs/` only.
 - Experiment data belongs in `cpsc-engine-rtl`, not cpsc-core.
+""",
+    ),
+    SkillEntry(
+        slug="codity-ai-review",
+        name="Codity.ai AI Review — staged-diff code review, security scan, test-gen",
+        description=(
+            "Codity.ai CLI workflow: install, authenticate, initialise, and run "
+            "codity review --staged / scan --staged / test-gen --staged on every commit "
+            "that touches production code. Covers GitHub App, GitLab PAT, Azure PAT "
+            "setup, CI integration via specsmith integrate codity, and the AGENTS.md rule."
+        ),
+        domain=SkillDomain.GOVERNANCE,
+        tags=[
+            "codity",
+            "ai-review",
+            "code-review",
+            "security",
+            "test-gen",
+            "ci",
+            "github",
+            "gitlab",
+            "azure",
+            "staged",
+            "pre-commit",
+        ],
+        prerequisites=[],
+        body="""\
+# Codity.ai AI Review Skill
+
+Codity.ai provides AI-powered code review, security scanning, and test
+generation that runs against staged changes (`--staged`) before every commit
+that touches production code.
+
+## Installation
+```bash
+curl -fsSL https://cli.codity.ai/install.sh | sh
+```
+
+## Authentication
+```bash
+codity login   # browser magic-link; no password required
+```
+Config stored at `~/.codity/config.yaml`.
+Override with env var: `CODITY_ACCESS_TOKEN=<token>`.
+
+## Project initialisation (once per repo)
+```bash
+codity init
+```
+
+## Daily commands (run on staged changes)
+
+| Command | Effect |
+|---|---|
+| `codity review --staged` | AI inline code review of staged diff |
+| `codity scan --staged` | Security & quality scan of staged diff |
+| `codity test-gen --staged` | Generate tests for staged changes |
+| `codity doctor` | Health-check CLI + project config |
+
+## AGENTS.md rule (non-negotiable)
+
+Projects with Codity configured SHOULD run `codity review --staged` before
+any commit that touches production code.
+
+- **HIGH severity** findings are **blocking** — do not commit until resolved.
+- **MEDIUM severity** findings require inline acknowledgement in the commit
+  message or PR description.
+- Run `codity scan --staged` for security issues on any auth/crypto/infra change.
+
+## CI integration (via specsmith)
+
+```bash
+specsmith integrate codity --project-dir .
+```
+
+This scaffolds:
+- `.github/workflows/codity-review.yml` (GitHub Actions)
+- `.gitlab-ci-codity.yml` (GitLab CI, when gitlab detected)
+- `.azure-pipelines/codity-review.yml` (Azure Pipelines, when azure detected)
+- `docs/codity-setup.md` — one-time setup checklist
+- Appends TODO items to `LEDGER.md`
+
+## VCS-specific setup
+
+### GitHub (recommended)
+1. Install the Codity GitHub App: <https://github.com/apps/codity>
+2. Grant access to your repo(s).
+3. (Optional) Add `CODITY_ACCESS_TOKEN` as a repo secret for CLI auth.
+
+### GitLab
+```bash
+codity config set-pat --provider gitlab --token <YOUR_PAT>
+```
+Add `CODITY_GITLAB_PAT` as a CI/CD variable (masked, protected).
+
+### Azure DevOps
+```bash
+codity config set-pat --provider azure --token <YOUR_PAT>
+```
+Add `CODITY_AZURE_PAT` as a secret pipeline variable.
+
+## Health check
+```bash
+codity doctor
+# Expected output:
+# ✓ CLI version: x.y.z
+# ✓ Authenticated: <email>
+# ✓ Project: initialised
+```
 """,
     ),
     SkillEntry(

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/src/specsmith/templates/agents.md.j2

@@ -103,6 +103,17 @@ Agents MUST defer to specsmith for ALL governance decisions.
 
 ---
 
+## Codity.ai Code Review (if configured)
+
+If `codity doctor` exits 0 (Codity is configured), run
+`codity review --staged` before any commit touching production code.
+- **HIGH severity** findings block the commit.
+- **MEDIUM severity** requires inline acknowledgement in the commit message.
+
+To set up Codity: `specsmith integrate codity --project-dir .`
+
+---
+
 **Project:** {{ project.name }}
 **Type:** {{ project.type_label }}
 **Platforms:** {{ project.platform_names | join(', ') }}

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438/src/specsmith.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.11.3.dev436
+Version: 0.11.3.dev438
 Summary: Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands.
 Author: BitConcepts
 License-Expression: MIT
@@ -274,8 +274,9 @@ be overwritten by the next sync.
 | `docs/requirements/yaml_governance.yml` | REQ-300..312 | YAML governance layer |
 | `docs/requirements/multiagent_compliance.yml` | REQ-313..320 | Multi-agent governance traceability |
 | `docs/requirements/dispatch.yml` | REQ-321..334 | Multi-agent DAG dispatcher |
+| `docs/requirements/overflow.yml` | REQ-335..356 | VCS ops, skills catalog, ESDB namespace, session governance, modern web types, Codity.ai integration |
 
-**Migration from Markdown-primary:** Run
+**Migration from Markdown-primary:**
 `scripts/migrate_governance_to_yaml.py` once to convert an existing project.
 Idempotent — safe to re-run.
 
@@ -934,6 +935,25 @@ production LLM systems:
 
 ---
 
+## Codity.ai AI Code Review Integration
+
+specsmith can scaffold [Codity.ai](https://codity.ai) AI code review into any project:
+
+```bash
+specsmith integrate codity --project-dir ./my-project
+```
+
+This generates:
+- `.github/workflows/codity-review.yml` (GitHub Actions) or `.gitlab-ci-codity.yml` / `.azure-pipelines/codity-review.yml` depending on your VCS
+- `docs/codity-setup.md` — one-time setup checklist
+- Appends a TODO checklist to `LEDGER.md`
+
+**AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
+
+See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.
+
+---
+
 ## The specsmith Bootstrap
 
 specsmith governs itself — the specsmith repo is a specsmith-managed project. Run `specsmith audit`

{specsmith-0.11.3.dev436 → specsmith-0.11.3.dev438}/src/specsmith.egg-info/SOURCES.txt

@@ -162,6 +162,7 @@ src/specsmith/integrations/agent_skill.py
 src/specsmith/integrations/aider.py
 src/specsmith/integrations/base.py
 src/specsmith/integrations/claude_code.py
+src/specsmith/integrations/codity.py
 src/specsmith/integrations/copilot.py
 src/specsmith/integrations/cursor.py
 src/specsmith/integrations/gemini.py
@@ -258,6 +259,7 @@ tests/test_epistemic.py
 tests/test_fallback_chain.py
 tests/test_importer.py
 tests/test_integrations.py
+tests/test_integrations_codity.py
 tests/test_intelligence.py
 tests/test_issue_reporter.py
 tests/test_mcp_client.py