specsmith 0.15.3.dev568__tar.gz → 0.15.3.dev572__tar.gz

{specsmith-0.15.3.dev568/src/specsmith.egg-info → specsmith-0.15.3.dev572}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.15.3.dev568
+Version: 0.15.3.dev572
 Summary: AEE governance toolkit for AI-assisted development — session preflight gates, multi-agent dispatch, requirements↔test traceability, ESDB persistence, MCP server, and skills for Warp, Cursor, Claude Code, Copilot, Windsurf, and Aider.
 Author: Layer1Labs Silicon, Inc.
 License-Expression: MIT
@@ -231,6 +231,11 @@ No additional packages, no license key, no configuration — it works out of the
 specsmith esdb status   # shows: SQLite (free, MIT) — active by default
 ```
 
+**ESDB version-control policy (this repository):**
+- Commit canonical SQLite state file: `.specsmith/esdb.sqlite3`.
+- Commit canonical ChronoMemory state files: `.chronomemory/events.wal` and `.chronomemory/snapshot.json`.
+- Do not commit ChronoMemory timestamped backup copies under `.chronomemory/backup/` (regenerated by `specsmith save` / `specsmith esdb backup`).
+
 **Upgrading to chronomemory ChronoStore (commercial):**
 
 If you hold a chronomemory ESDB license, activate the commercial backend:
@@ -1048,6 +1053,8 @@ This generates:
 - `docs/codity-setup.md` — one-time setup checklist
 - Appends a TODO checklist to `LEDGER.md`
 
+**Windows note:** Codity's `install.sh` is Linux/macOS only. For native PowerShell use, install `codity.exe` from the official `codity-ai/codity-cli` GitHub release zip and place it on PATH (for example `~/.local/bin`).
+
 **AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
 
 See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/README.md

@@ -153,6 +153,11 @@ No additional packages, no license key, no configuration — it works out of the
 specsmith esdb status   # shows: SQLite (free, MIT) — active by default
 ```
 
+**ESDB version-control policy (this repository):**
+- Commit canonical SQLite state file: `.specsmith/esdb.sqlite3`.
+- Commit canonical ChronoMemory state files: `.chronomemory/events.wal` and `.chronomemory/snapshot.json`.
+- Do not commit ChronoMemory timestamped backup copies under `.chronomemory/backup/` (regenerated by `specsmith save` / `specsmith esdb backup`).
+
 **Upgrading to chronomemory ChronoStore (commercial):**
 
 If you hold a chronomemory ESDB license, activate the commercial backend:
@@ -970,6 +975,8 @@ This generates:
 - `docs/codity-setup.md` — one-time setup checklist
 - Appends a TODO checklist to `LEDGER.md`
 
+**Windows note:** Codity's `install.sh` is Linux/macOS only. For native PowerShell use, install `codity.exe` from the official `codity-ai/codity-cli` GitHub release zip and place it on PATH (for example `~/.local/bin`).
+
 **AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
 
 See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "specsmith"
-version = "0.15.3.dev568"
+version = "0.15.3.dev572"
 description = "AEE governance toolkit for AI-assisted development — session preflight gates, multi-agent dispatch, requirements↔test traceability, ESDB persistence, MCP server, and skills for Warp, Cursor, Claude Code, Copilot, Windsurf, and Aider."
 readme = "README.md"
 license = "MIT"

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/auditor.py

@@ -1130,7 +1130,11 @@ def check_industrial_artifacts(root: Path) -> list[AuditResult]:
     raw = _read_scaffold_raw(root)
     declared: dict[str, Any] = raw.get("industrial_artifacts", {}) or {}
     declared_eds = declared.get("canopen_eds", []) or []
-    declared_paths = {e.get("path", "") for e in declared_eds if isinstance(e, dict)}
+    # Normalise declared paths to forward slashes and lowercase so they match
+    # on Windows where YAML uses '/' but Path.relative_to() returns '\\' (#251).
+    declared_paths = {
+        e.get("path", "").replace("\\", "/").lower() for e in declared_eds if isinstance(e, dict)
+    }
 
     # Scan for .eds and .xdd files — respect scan_exclude_dirs and
     # scan_exclude_patterns from scaffold.yml (#175).
@@ -1158,9 +1162,12 @@ def check_industrial_artifacts(root: Path) -> list[AuditResult]:
     if not found_eds:
         return results  # No industrial artifacts found
 
-    # Use as_posix() for cross-platform comparison — avoids single-backslash
-    # mismatch on Windows where str(Path) uses '\' but declared paths use '/' (#173).
-    undeclared = [f for f in found_eds if f.relative_to(root).as_posix() not in declared_paths]
+    # Use as_posix().lower() for cross-platform comparison — avoids backslash
+    # mismatch on Windows where str(Path) uses '\' but YAML paths use '/' (#173,
+    # #251). Both sides are lowercased so Windows case-insensitive FS is handled.
+    undeclared = [
+        f for f in found_eds if f.relative_to(root).as_posix().lower() not in declared_paths
+    ]
 
     if undeclared:
         results.append(

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/cli.py

@@ -2577,30 +2577,47 @@ def save_cmd(project_dir: str, message: str, no_push: bool, force: bool, as_json
     """
     import json as _json
 
-    from specsmith.esdb.bridge import EsdbBridge
+    from specsmith import esdb as esdb_mod
+    from specsmith.sync import normalize_esdb_gitignore_policy
     from specsmith.vcs_commands import has_uncommitted_changes, run_commit, run_push
 
     root = Path(project_dir).resolve()
     steps: list[dict[str, Any]] = []
+    # 0. Normalize ESDB policy for legacy projects
+    try:
+        changed = normalize_esdb_gitignore_policy(root)
+        steps.append(
+            {
+                "step": "gitignore_policy",
+                "ok": True,
+                "note": "normalized legacy ESDB policy" if changed else "already compliant",
+            }
+        )
+    except Exception as exc:  # noqa: BLE001
+        steps.append({"step": "gitignore_policy", "ok": False, "error": str(exc)})
 
     # 1. ESDB backup
     try:
-        bridge = EsdbBridge(str(root))
-        store = bridge._get_store()  # noqa: SLF001
-        if store is not None:
-            backup_path = store.backup()
-            steps.append({"step": "esdb_backup", "ok": True, "path": str(backup_path)})
-        else:
-            steps.append(
-                {"step": "esdb_backup", "ok": True, "note": "JSON fallback (no WAL to backup)"}
-            )
-    except ImportError:
-        # chronomemory not installed — non-fatal; commit and push still proceed.
-        # Install with: pipx inject specsmith
-        #   "chronomemory @ git+https://github.com/layer1labs/chronomemory.git@v0.1.1"
-        from specsmith.esdb import _INSTALL_HINT  # noqa: PLC0415
-
-        steps.append({"step": "esdb_backup", "ok": True, "note": f"skipped — {_INSTALL_HINT}"})
+        with esdb_mod.open_default_store(root, warn=False) as store:  # type: ignore[attr-defined]
+            backup_fn = getattr(store, "backup", None)
+            if callable(backup_fn):
+                backup_path = backup_fn()
+                steps.append(
+                    {
+                        "step": "esdb_backup",
+                        "ok": True,
+                        "path": str(backup_path),
+                        "backend": esdb_mod.ESDB_BACKEND,
+                    }
+                )
+            else:
+                steps.append(
+                    {
+                        "step": "esdb_backup",
+                        "ok": True,
+                        "note": f"{esdb_mod.ESDB_BACKEND} backend has no native backup method",
+                    }
+                )
     except Exception as exc:  # noqa: BLE001
         steps.append({"step": "esdb_backup", "ok": False, "error": str(exc)})
 
@@ -5653,7 +5670,8 @@ def phase_next(project_dir: str, force: bool) -> None:
     """Advance to the next AEE workflow phase.
 
     Performs readiness checks on the current phase first.
-    Use --force to skip checks.
+    Use --force to skip checks.  Phases listed in ``suppressed_phases`` in the
+    scaffold config (docs/SPECSMITH.yml) are automatically skipped (#254).
     """
     from specsmith.phase import PHASE_MAP, evaluate_phase, read_phase, write_phase
 
@@ -5679,12 +5697,45 @@ def phase_next(project_dir: str, force: bool) -> None:
         )
         return
 
-    write_phase(root, phase.next_phase)
-    next_phase = PHASE_MAP[phase.next_phase]
+    # Read suppressed_phases from the scaffold config (#254).
+    suppressed: list[str] = []
+    try:
+        import yaml as _yaml
+
+        from specsmith.paths import find_scaffold
+
+        sp = find_scaffold(root)
+        if sp:
+            _raw = _yaml.safe_load(sp.read_text(encoding="utf-8")) or {}
+            suppressed = [str(p) for p in (_raw.get("suppressed_phases") or [])]
+    except Exception:  # noqa: BLE001
+        pass  # Never block phase advance on config parse errors
+
+    # Walk the phase chain until we find a non-suppressed next phase.
+    target_key: str | None = phase.next_phase
+    skipped: list[str] = []
+    while target_key and target_key in suppressed:
+        skipped.append(target_key)
+        target_phase = PHASE_MAP.get(target_key)
+        target_key = target_phase.next_phase if target_phase else None
+
+    if not target_key:
+        console.print(
+            f"[bold]{phase.emoji} {phase.label}[/bold] is the effective final phase "
+            "(all remaining phases are suppressed)."
+        )
+        if skipped:
+            console.print(f"  [dim]Suppressed: {', '.join(skipped)}[/dim]")
+        return
+
+    write_phase(root, target_key)
+    next_phase = PHASE_MAP[target_key]
     console.print(
         f"[green]\u2713[/green] Advanced from [bold]{phase.label}[/bold] "
         f"to [bold]{next_phase.emoji} {next_phase.label}[/bold]."
     )
+    if skipped:
+        console.print(f"  [dim]Skipped suppressed phase(s): {', '.join(skipped)}[/dim]")
     console.print(f"  {next_phase.description}")
     if next_phase.commands:
         console.print("\n  [bold]Next steps:[/bold]")
@@ -5693,14 +5744,14 @@ def phase_next(project_dir: str, force: bool) -> None:
 
     # G3: keep the agents routing table aligned with the active phase.
     # We pin a synthetic ``phase:active`` route so the runner can flip the
-    # whole session to the new phase’s preferred profile without the user
+    # whole session to the new phase's preferred profile without the user
     # having to run `specsmith agents route set` themselves.
     try:
         from specsmith.agent.profiles import ProfileStore
 
         agents_store = ProfileStore.load()
         if agents_store.profiles:
-            phase_key_target = f"phase:{phase.next_phase}"
+            phase_key_target = f"phase:{target_key}"
             target_id = agents_store.routes.get(phase_key_target) or (
                 agents_store.default_profile_id
             )
@@ -10554,9 +10605,15 @@ def esdb_enable_cmd(key_file: str, as_json: bool) -> None:
             console.print("[dim]Contact licensing@layer1labs.com to obtain a valid license.[/dim]")
         raise SystemExit(1)
 
+    import os
+
     dest = Path.home() / ".specsmith" / "esdb.key"
     dest.parent.mkdir(parents=True, exist_ok=True)
-    shutil.copy2(key_file, dest)
+    # Skip the copy when source and destination are the same file (#249).
+    # On Windows, shutil.copy2(src, dst) raises PermissionError / WinError 32
+    # when src == dst (file is already at the expected location).
+    if os.path.realpath(str(key_file)) != os.path.realpath(str(dest)):
+        shutil.copy2(key_file, dest)
 
     if as_json:
         click.echo(

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/esdb/sqlite_store.py

@@ -289,6 +289,22 @@ class SqliteStore:
         row = conn.execute("SELECT MAX(rowid) FROM records").fetchone()
         return int(row[0]) if row and row[0] is not None else 0
 
+    def backup(self, backup_dir: str | Path | None = None) -> Path:
+        """Create a timestamped SQLite snapshot and return its path."""
+        conn = self._require_open()
+        ts = time.strftime("%Y%m%dT%H%M%SZ", time.gmtime())
+        dest_dir = Path(backup_dir) if backup_dir else self._db_path.parent / "backups"
+        dest_dir.mkdir(parents=True, exist_ok=True)
+        dest = dest_dir / f"esdb_sqlite_backup_{ts}.sqlite3"
+
+        backup_conn = sqlite3.connect(str(dest))
+        try:
+            conn.backup(backup_conn)
+        finally:
+            backup_conn.close()
+
+        return dest
+
     def chain_valid(self) -> bool:
         """Always True — SQLite ACID guarantees integrity (no SHA-256 WAL chain)."""
         return True

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/integrations/codity.py

@@ -229,6 +229,21 @@ steps:
    ```bash
    curl -fsSL https://cli.codity.ai/install.sh | sh
    ```
+   Native Windows (PowerShell) is also supported via GitHub Releases
+   (`codity-ai/codity-cli`), because the shell installer is Linux/macOS only:
+   ```powershell
+   # No official winget/scoop/choco package currently.
+   $release = Invoke-RestMethod -Uri "https://api.github.com/repos/codity-ai/codity-cli/releases/latest"
+   $version = $release.tag_name.TrimStart("v")
+   $assetName = "codity_" + $version + "_windows_amd64.zip"
+   $asset = $release.assets | Where-Object {{ $_.name -eq $assetName }} | Select-Object -First 1
+   $zip = Join-Path $env:TEMP $asset.name
+   $tmp = Join-Path $env:TEMP ("codity-install-" + [guid]::NewGuid().ToString())
+   Invoke-WebRequest -Uri $asset.browser_download_url -OutFile $zip
+   Expand-Archive -Path $zip -DestinationPath $tmp -Force
+   New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\\.local\\bin" | Out-Null
+   Copy-Item (Join-Path $tmp "codity.exe") "$env:USERPROFILE\\.local\\bin\\codity.exe" -Force
+   ```
 
 2. Authenticate:
    ```bash

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/skills/governance.py

@@ -1127,9 +1127,24 @@ generation that runs against staged changes (`--staged`) before every commit
 that touches production code.
 
 ## Installation
+Linux/macOS:
 ```bash
 curl -fsSL https://cli.codity.ai/install.sh | sh
 ```
+Native Windows (PowerShell):
+```powershell
+# No official winget/scoop/choco package currently.
+$release = Invoke-RestMethod -Uri "https://api.github.com/repos/codity-ai/codity-cli/releases/latest"
+$version = $release.tag_name.TrimStart("v")
+$asset = $release.assets | Where-Object { $_.name -eq "codity_${version}_windows_amd64.zip" } | Select-Object -First 1
+$zip = Join-Path $env:TEMP $asset.name
+$tmp = Join-Path $env:TEMP ("codity-install-" + [guid]::NewGuid().ToString())
+Invoke-WebRequest -Uri $asset.browser_download_url -OutFile $zip
+Expand-Archive -Path $zip -DestinationPath $tmp -Force
+New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\\.local\\bin" | Out-Null
+Copy-Item (Join-Path $tmp "codity.exe") "$env:USERPROFILE\\.local\\bin\\codity.exe" -Force
+```
+Verify with `codity doctor`.
 
 ## Authentication
 ```bash

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/sync.py

@@ -207,6 +207,88 @@ class SyncResult:
         return "Machine state already in sync."
 
 
+# ---------------------------------------------------------------------------
+# ESDB legacy policy normalization (.gitignore)
+# ---------------------------------------------------------------------------
+
+_ESDB_GITIGNORE_FORBIDDEN = frozenset(
+    {
+        ".specsmith/",
+        ".chronomemory/",
+    }
+)
+
+_ESDB_GITIGNORE_REQUIRED = (
+    "!.specsmith/config.yml",
+    "!.specsmith/requirements.json",
+    "!.specsmith/testcases.json",
+    "!.specsmith/esdb.sqlite3",
+    "!.chronomemory/events.wal",
+    "!.chronomemory/snapshot.json",
+    ".chronomemory/backup/",
+    ".specsmith/workitems.json",
+    ".specsmith/runs/",
+    ".specsmith/chat/",
+    ".specsmith/perf/",
+    ".specsmith/recovery/",
+    ".specsmith/ledger.jsonl",
+    ".specsmith/ledger-chain.txt",
+    ".specsmith/trace.jsonl",
+    ".specsmith/credit-budget.json",
+    ".specsmith/credits.json",
+    ".specsmith/model-rate-limits.json",
+    ".specsmith/pids/",
+    ".specsmith/logs/",
+    ".specsmith/sessions/",
+    ".specsmith/agent-reports/",
+    ".specsmith/dispatch/",
+    ".specsmith/esdb_migration_manifest.json",
+)
+
+
+def normalize_esdb_gitignore_policy(root: Path, *, dry_run: bool = False) -> bool:
+    """Normalize ESDB gitignore policy for legacy projects.
+
+    Ensures broad ignores that hide canonical ESDB state are removed and that
+    explicit policy lines are present so SQLite/Chrono canonical artifacts are
+    always tracked while runtime files stay ignored.
+    """
+    gitignore_path = root / ".gitignore"
+    if gitignore_path.exists():
+        original_lines = gitignore_path.read_text(encoding="utf-8").splitlines()
+    else:
+        original_lines = []
+
+    normalized_lines: list[str] = []
+    removed_forbidden = False
+    for line in original_lines:
+        if line.strip() in _ESDB_GITIGNORE_FORBIDDEN:
+            removed_forbidden = True
+            continue
+        normalized_lines.append(line)
+
+    existing = {line.strip() for line in normalized_lines if line.strip()}
+    missing = [entry for entry in _ESDB_GITIGNORE_REQUIRED if entry not in existing]
+    changed = removed_forbidden or bool(missing)
+
+    if not changed:
+        return False
+
+    if normalized_lines and normalized_lines[-1].strip():
+        normalized_lines.append("")
+    if missing:
+        normalized_lines.append("# specsmith ESDB policy (auto-normalized)")
+        normalized_lines.extend(missing)
+
+    if not dry_run:
+        rendered = "\n".join(normalized_lines)
+        if rendered and not rendered.endswith("\n"):
+            rendered += "\n"
+        gitignore_path.write_text(rendered, encoding="utf-8")
+
+    return True
+
+
 # ---------------------------------------------------------------------------
 # Core sync
 # ---------------------------------------------------------------------------
@@ -244,6 +326,8 @@ def run_sync(root: Path, *, dry_run: bool = False) -> SyncResult:
     tests_md_path = root / "docs" / "TESTS.md"
     reqs_json_path = state_dir / "requirements.json"
     tests_json_path = state_dir / "testcases.json"
+    if not dry_run:
+        normalize_esdb_gitignore_policy(root)
 
     if is_yaml_mode(root):
         # ── YAML-first mode ─────────────────────────────────────────────────

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith/templates/gitignore.j2

@@ -37,8 +37,41 @@ htmlcov/
 .work/
 *.log
 
-# specsmith local data (credits, config)
-.specsmith/
+# specsmith governance data policy
+# Keep committed:
+# - .specsmith/config.yml
+# - .specsmith/requirements.json
+# - .specsmith/testcases.json
+# - .specsmith/esdb.sqlite3
+# - .chronomemory/events.wal
+# - .chronomemory/snapshot.json
+# Always track these even if broader ignore rules are added later:
+!.specsmith/config.yml
+!.specsmith/requirements.json
+!.specsmith/testcases.json
+!.specsmith/esdb.sqlite3
+!.chronomemory/events.wal
+!.chronomemory/snapshot.json
+#
+# Ignore runtime-only / regeneratable artifacts:
+.chronomemory/backup/
+.specsmith/workitems.json
+.specsmith/runs/
+.specsmith/chat/
+.specsmith/perf/
+.specsmith/recovery/
+.specsmith/ledger.jsonl
+.specsmith/ledger-chain.txt
+.specsmith/trace.jsonl
+.specsmith/credit-budget.json
+.specsmith/credits.json
+.specsmith/model-rate-limits.json
+.specsmith/pids/
+.specsmith/logs/
+.specsmith/sessions/
+.specsmith/agent-reports/
+.specsmith/dispatch/
+.specsmith/esdb_migration_manifest.json
 {% if project.type in ('cli-rust', 'library-rust') %}
 
 # Rust

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572/src/specsmith.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.15.3.dev568
+Version: 0.15.3.dev572
 Summary: AEE governance toolkit for AI-assisted development — session preflight gates, multi-agent dispatch, requirements↔test traceability, ESDB persistence, MCP server, and skills for Warp, Cursor, Claude Code, Copilot, Windsurf, and Aider.
 Author: Layer1Labs Silicon, Inc.
 License-Expression: MIT
@@ -231,6 +231,11 @@ No additional packages, no license key, no configuration — it works out of the
 specsmith esdb status   # shows: SQLite (free, MIT) — active by default
 ```
 
+**ESDB version-control policy (this repository):**
+- Commit canonical SQLite state file: `.specsmith/esdb.sqlite3`.
+- Commit canonical ChronoMemory state files: `.chronomemory/events.wal` and `.chronomemory/snapshot.json`.
+- Do not commit ChronoMemory timestamped backup copies under `.chronomemory/backup/` (regenerated by `specsmith save` / `specsmith esdb backup`).
+
 **Upgrading to chronomemory ChronoStore (commercial):**
 
 If you hold a chronomemory ESDB license, activate the commercial backend:
@@ -1048,6 +1053,8 @@ This generates:
 - `docs/codity-setup.md` — one-time setup checklist
 - Appends a TODO checklist to `LEDGER.md`
 
+**Windows note:** Codity's `install.sh` is Linux/macOS only. For native PowerShell use, install `codity.exe` from the official `codity-ai/codity-cli` GitHub release zip and place it on PATH (for example `~/.local/bin`).
+
 **AGENTS.md rule (REQ-355):** Projects with Codity configured SHOULD run `codity review --staged` before any commit touching production code. HIGH-severity findings are blocking; MEDIUM findings require inline acknowledgement.
 
 See the `codity-ai-review` governance skill (`specsmith skill install codity-ai-review`) for the full CLI workflow reference.

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/src/specsmith.egg-info/SOURCES.txt

@@ -268,6 +268,7 @@ tests/test_e2e_nexus.py
 tests/test_endpoints_cli.py
 tests/test_endpoints_store.py
 tests/test_epistemic.py
+tests/test_esdb_enforcement.py
 tests/test_esdb_license.py
 tests/test_esdb_sqlite.py
 tests/test_fallback_chain.py

specsmith-0.15.3.dev572/tests/test_esdb_enforcement.py

@@ -0,0 +1,81 @@
+# SPDX-License-Identifier: MIT
+# Copyright (c) 2026 Layer1Labs Silicon, Inc. All rights reserved.
+"""Regression tests for ESDB fallback and legacy policy enforcement."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+import pytest
+from click.testing import CliRunner
+
+from specsmith.cli import main
+from specsmith.esdb.sqlite_store import SqliteRecord, SqliteStore
+from specsmith.sync import run_sync
+
+
+def _run(args: list[str]):  # type: ignore[return]  # noqa: ANN201
+    runner = CliRunner()
+    return runner.invoke(
+        main,
+        args,
+        env={
+            "SPECSMITH_NO_AUTO_UPDATE": "1",
+            "SPECSMITH_PYPI_CHECKED": "1",
+            "SPECSMITH_ALLOW_NON_PIPX": "1",
+        },
+    )
+
+
+def test_run_sync_normalizes_legacy_esdb_gitignore(tmp_path: Path) -> None:
+    """Legacy broad ignores are removed and canonical ESDB policy is injected."""
+    (tmp_path / ".gitignore").write_text(
+        "\n".join(
+            [
+                ".specsmith/",
+                ".chronomemory/",
+            ]
+        )
+        + "\n",
+        encoding="utf-8",
+    )
+
+    run_sync(tmp_path)
+
+    lines = {
+        line.strip()
+        for line in (tmp_path / ".gitignore").read_text(encoding="utf-8").splitlines()
+        if line.strip()
+    }
+    assert ".specsmith/" not in lines
+    assert ".chronomemory/" not in lines
+    assert ".chronomemory/backup/" in lines
+    assert ".specsmith/workitems.json" in lines
+    assert "!.specsmith/esdb.sqlite3" in lines
+    assert "!.chronomemory/events.wal" in lines
+    assert "!.chronomemory/snapshot.json" in lines
+
+
+def test_save_uses_sqlite_store_backup(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
+    """specsmith save should create a SQLite backup when ChronoStore is unavailable."""
+    monkeypatch.setenv("SPECSMITH_ESDB_BACKEND", "sqlite")
+    with SqliteStore(tmp_path) as store:
+        store.upsert(
+            SqliteRecord(
+                id="REQ-001",
+                kind="requirement",
+                label="SQLite fallback requirement",
+            )
+        )
+
+    result = _run(["save", "--project-dir", str(tmp_path), "--no-push", "--json"])
+    assert result.exit_code == 0, result.output
+    payload = json.loads(result.output)
+    backup_step = next(step for step in payload["steps"] if step["step"] == "esdb_backup")
+    assert backup_step["ok"] is True
+    assert backup_step["backend"] == "sqlite"
+
+    backup_path = Path(backup_step["path"])
+    assert backup_path.is_file()
+    assert backup_path.suffix == ".sqlite3"

{specsmith-0.15.3.dev568 → specsmith-0.15.3.dev572}/tests/test_scaffolder.py

@@ -86,6 +86,19 @@ class TestScaffoldCLIPython:
         files = scaffold_project(cfg, tmp_target)
         assert len(files) >= 25  # baseline for cli-python type
 
+    def test_gitignore_tracks_canonical_esdb_files(self, tmp_target: Path) -> None:
+        cfg = _make_config(ProjectType.CLI_PYTHON)
+        scaffold_project(cfg, tmp_target)
+        content = (tmp_target / ".gitignore").read_text(encoding="utf-8")
+        assert ".chronomemory/backup/" in content
+        assert ".specsmith/workitems.json" in content
+        assert ".specsmith/esdb_migration_manifest.json" in content
+        assert "!.specsmith/esdb.sqlite3" in content
+        assert "!.chronomemory/events.wal" in content
+        assert "!.chronomemory/snapshot.json" in content
+        assert "\n.specsmith/\n" not in content
+        assert "\n.chronomemory/\n" not in content
+
 
 class TestScaffoldFPGA:
     """Tests for FPGA/RTL project type."""