Skip to content

release: SpecFact CLI v0.45.1 (merge dev → main)#478

Merged
djm81 merged 366 commits intomainfrom
dev
Apr 3, 2026
Merged

release: SpecFact CLI v0.45.1 (merge dev → main)#478
djm81 merged 366 commits intomainfrom
dev

Conversation

@djm81
Copy link
Copy Markdown
Collaborator

@djm81 djm81 commented Apr 2, 2026

Description

Merge devmain to ship SpecFact CLI v0.45.1 to PyPI (CI publishes on merge to main when version is newer than published).

This release integrates work merged to dev via #477 (docs & tooling: new user onboarding + smart-test and pre-commit review fixes), including vibe-coder docs entry path, init --profile / module-registry fixes, slim core dependencies with explicit packaging and optional [contracts] / [dev] extras, smart-test baseline behavior, pre-commit review JSON handling, and related tests.

Fixes n/a (release train)

New Features — see CHANGELOG.md [0.45.1]; OpenSpec/docs tracking: #476

Contract References: Runtime @icontract / @beartype on touched public APIs unchanged in intent; existing contract layers apply.

Type of Change

Please check all that apply:

  • 🐛 Bug fix (non-breaking change which fixes an issue)
  • ✨ New feature (non-breaking change which adds functionality)
  • 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • 📚 Documentation update
  • 🔒 Contract enforcement (adding/updating @icontract decorators)
  • 🧪 Test enhancement (scenario tests, property-based tests)
  • 🔧 Refactoring (code improvement without functionality change)

Contract-First Testing Evidence

Required for all changes affecting CLI commands or public APIs:

Contract Validation

  • Runtime contracts added/updated (@icontract decorators on public APIs) — as applicable on merged branch
  • Type checking enforced (@beartype decorators applied)
  • CrossHair exploration completed: hatch run contract-test-exploration — contributor path via pip install -e ".[contracts]" / CI repro job
  • Contract violations reviewed and addressed on dev (PR docs & tooling: new user onboarding + smart-test and pre-commit review fixes #477 CI green)

Test Execution

  • Contract validation: hatch run contract-test-contracts — verified on dev via CI / pre-merge gates
  • Contract exploration: hatch run contract-test-exploration — optional extra; not required for minimal wheel
  • Scenario tests: hatch run contract-test-scenarios — covered in CI where configured
  • Full test suite: hatch run contract-test-full / PR checks green on merge to dev

Test Quality

  • CLI commands tested with typer test client
  • Edge cases covered with Hypothesis property tests — in [contracts] / dev environments
  • Error handling tested with invalid inputs
  • Rich console output verified manually or with snapshots

How Has This Been Tested?

Contract-First Approach: dev was validated through PR #477 checks; core-only install smoke-tested in a clean venv (pip install without extras): specfact --version, help, init, module search, imports of registry/installer paths — OK; pip check — no broken requirements.

Manual Testing

  • Tested CLI commands manually
  • Verified rich console output
  • Tested with different input scenarios
  • Checked error messages for clarity

Automated Testing

  • Contract validation passes
  • Property-based tests cover edge cases (dev/CI)
  • Scenario tests cover user workflows
  • All existing tests still pass

Test Environment

  • Python version: 3.11–3.13 (per requires-python and CI matrix)
  • OS: Linux (CI); local smoke: Linux tmp venv

Checklist

  • My code follows the style guidelines (PEP 8, ruff format, isort)
  • I have performed a self-review of my code
  • I have added/updated contracts (@icontract, @beartype) where required on dev
  • I have added/updated docstrings (Google style)
  • I have made corresponding changes to documentation
  • My changes generate no new warnings (basedpyright, ruff, pylint) — per dev CI
  • All tests pass locally / on dev
  • I have added tests that prove my fix/feature works
  • Any dependent changes have been merged (PR docs & tooling: new user onboarding + smart-test and pre-commit review fixes #477 to dev)

Quality Gates Status

  • Type checking ✅ (hatch run type-check)
  • Linting ✅ (hatch run lint)
  • Contract validation ✅ (hatch run contract-test-contracts)
  • Contract exploration ✅ (hatch run contract-test-exploration) — optional; [contracts] extra
  • Scenario tests ✅ (hatch run contract-test-scenarios)

Screenshots/Recordings (if applicable)

n/a — release merge; see docs site after publish.

djm81 and others added 30 commits February 15, 2026 00:42
)

The LICENSE body had two non-standard edits that pushed it below
GitHub licensee's ~95% similarity threshold, causing "Other" instead
of "Apache License 2.0". Restored the canonical text; only the
copyright line in the appendix is customized (as intended by the
Apache template).

Signed-off-by: Dom <39115308+djm81@users.noreply.github.com>
Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Dom <39115308+djm81@users.noreply.github.com>
…#262)

* feat(ci): attach test and repro log artifacts to PR orchestrator runs

- Tests job: run smart-test-full, upload logs/tests/ as test-logs artifact
- Contract-first-ci: capture repro to logs/repro/, upload repro-logs and repro-reports
- Docs: CI and GitHub Actions section in troubleshooting (artifact names, usage)
- Version 0.31.1, CHANGELOG entry

Implements OpenSpec change ci-01-pr-orchestrator-log-artifacts. Fixes #260.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Fix workflow and test

* ci(pr-orchestrator): add log artifacts for all pipeline jobs

- type-check: capture output to logs/type-check/, upload type-check-logs
- lint: capture to logs/lint/, upload lint-logs
- compat-py311: capture to logs/compat-py311/, upload compat-py311-logs
- quality-gates: capture to logs/quality-gates/, upload quality-gates-logs
- compat-py311: use hatch -e ENV run run (not hatch test) for pytest
- docs: list all CI artifact names and jobs in troubleshooting

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
* feat: enhanced module manifest security and integrity (arch-06)

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: remove duplicate ModulePackageMetadata import (ruff F811)

* Fix failed tests

* Fix type-check errors

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…rch-07) (#265)

* feat: add schema extension system for modular ProjectBundle extensions
  Enables modules to extend Feature and ProjectBundle with namespaced custom
  fields without modifying core models, supporting marketplace-ready
  interoperability.
  - Add extensions dict field to Feature and ProjectBundle models
  - Implement type-safe get/set extension accessors with namespace enforcement
  - Extend module manifest schema with schema_extensions declaration
  - Add ExtensionRegistry for collision detection and introspection
  - Extend module lifecycle registration to load and validate extensions
  OpenSpec Change: arch-07-schema-extension-system
  Resolves #213

* feat: schema extension system (arch-07) and quality gate fixes

- Add extensions field and get_extension/set_extension to Feature and ProjectBundle
- Add SchemaExtension model and schema_extensions to ModulePackageMetadata
- Add ExtensionRegistry with collision detection; integrate in module registration
- Parse schema_extensions in discover_package_metadata
- Docs: extending-projectbundle guide, architecture section, sidebar
- Version 0.32.0, CHANGELOG entry, TDD_EVIDENCE
- Format: E402 (imports at top in project.py), UP042 (StrEnum in backlog-core),
  RUF043/B017 in schema extension tests
- Type-check: pass schema_metadata/project_metadata in BundleManifest test calls

OpenSpec Change: arch-07-schema-extension-system
Resolves #213

Co-authored-by: Cursor <cursoragent@cursor.com>

* Update change progress

* Add docs guides and update changes

* Use v0.32.0 as version and combine arch-06/arch-07

* Update change order plan

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Dom <39115308+djm81@users.noreply.github.com>
* feat(workflow): standardize worktree-first development flow

* docs(openspec): mark workflow-01 delivery tasks complete

* Apply review finding

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
* feat(policy-engine): implement unified policy framework

* docs(openspec): mark policy-engine-01 implemented in change order

* fix(policy-engine): make module io contract compliant

* feat(policy-engine): add policy init templates and docs coverage

* fix: refine grouped policy limit semantics and outputs

* docs: clarify policy engine value for new users

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
…1) (#275)

- Use discover_all_package_metadata() in init so list-modules/enable/disable
  use same roots as registry (built-in + workspace modules + SPECFACT_MODULES_ROOTS)
- Extend backlog-core-01 OpenSpec: init-module-discovery-alignment spec,
  tasks 0.5.x, TDD evidence
- Bump version to 0.34.0; CHANGELOG

Fixes #116

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
* feat: add thorough codebase validation (validation-01)
  - Add --crosshair-per-path-timeout to specfact repro and ReproChecker
  - Add docs/reference/thorough-codebase-validation.md (quick check, contract-full, sidecar, dogfooding)
  - Unit test and TDD evidence for CrossHair per-path timeout
  - OpenSpec validation-01-deep-validation tasks and TDD_EVIDENCE updated

* fix: reject non-positive CrossHair per-path timeout (review)

* docs: CHANGELOG v0.34.0 and doc updates for thorough codebase validation

---------

Signed-off-by: Dom <39115308+djm81@users.noreply.github.com>
Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
* feat(patch-mode): add patch apply (local + --write with confirmation) [#177]

- Add patch_mode module: pipeline (generator, applier, idempotency), patch apply command
- specfact patch apply <file> (local + preflight), patch apply --write --yes (upstream, idempotent)
- OpenSpec patch-mode-01-preview-apply: proposal Source Tracking, tasks, TDD_EVIDENCE
- CHANGELOG [Unreleased] entry for v0.34.0 merge

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(patch-mode): sanitize idempotency keys, derive key from patch content [PR review]

* Fix errors and ensure module compatibility

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
* feat: add bundle-mapper module with confidence-based spec-to-bundle mapping

- BundleMapping model and BundleMapper engine (explicit label, historical, content similarity)
- Mapping history persistence and MappingRule (save_user_confirmed_mapping, load_bundle_mapping_config)
- Interactive UI (ask_bundle_mapping) with Rich confidence visualization
- Unit tests and TDD_EVIDENCE for bundle-mapper-01 (OpenSpec #121)

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(bundle-mapper): address PR review findings (P1/P2)

- P1 interactive: no default accept for low-confidence; use default only when conf >= 0.5
- P1 history: ignore empty key fields in item_keys_similar (only count non-empty matches)
- P2 engine: add historical weight only when hist_bundle == primary_bundle_id
- Add test_item_keys_similar_empty_fields_not_counted to lock empty-key behavior

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix: implement verification-01 delta for bundle mapping, patch apply, and docs parity

* test: fix patch write yes scenario for real diff apply

* fix: keep bundle mapping history out of bundle manifest

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
Signed-off-by: Dom <39115308+djm81@users.noreply.github.com>
djm81 and others added 11 commits March 30, 2026 15:08
* fix: harden trustworthy green checks

* fix: restore contract-first ci repro command

* fix: apply CodeRabbit auto-fixes

Fixed 3 file(s) based on 3 unresolved review comments.

Co-authored-by: CodeRabbit <noreply@coderabbit.ai>

* fix: resolve CI failures for trustworthy green checks PR

- Use hatch run contract-test instead of specfact code repro in CI
  (CLI bundle not available in CI environment)
- Allow test_bundle_import.py in migration cleanup legacy-import check
  (_bundle_import is an internal helper, not a removed module package)
- Fix formatting in test_trustworthy_green_checks.py (CodeRabbit commit
  was unformatted)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address CodeRabbit review findings

- Add trailing newline to TDD_EVIDENCE.md (MD047)
- Make _load_hooks() search for repo: local instead of assuming index 0
- Replace fragile multi-line string assertion in actionlint test with
  semantic line-by-line checks

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
- Widen workflow_changed filter to include scripts/run_actionlint.sh
  and scripts/yaml-tools.sh so Workflow Lint triggers on script changes
- Pin actionlint default to v1.7.11 (matches CI) instead of latest
- Fix run_actionlint.sh conflating "not installed" with "lint failures"
  by separating availability check from execution
- Restore sys.path after test_bundle_import to avoid cross-test leakage
- Normalize CHANGE_ORDER.md status format to semicolon convention

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
#472)

Simplify run_actionlint.sh control flow so both local and docker
execution paths propagate actionlint's exit code via `exit $?`. Previously
the docker path used `if run_with_docker; then exit 0; fi` which treated
lint errors as "docker unavailable" and fell through to install guidance.

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
#473)

- Assert hook id == "specfact-smart-checks" to prevent silent renames
- cd to REPO_ROOT before running local actionlint so it finds workflows
  regardless of caller's cwd

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
…4.0 (#474)

* feat: clean-code-01-principle-gates — 7-principle charter gates, v0.44.0

Implements openspec/changes/clean-code-01-principle-gates:

- Rewrote .cursor/rules/clean-code-principles.mdc as a canonical alias
  surface for the 7-principle clean-code charter (naming, kiss, yagni,
  dry, solid) defined in nold-ai/specfact-cli-modules. Documents Phase A
  KISS thresholds (>80 warning / >120 error LOC), nesting-depth and
  parameter-count checks active, and Phase B (>40/80) explicitly deferred.
- Added Clean-Code Review Gate sections to AGENTS.md and CLAUDE.md listing
  all 5 expanded review categories and the Phase A thresholds.
- Created .github/copilot-instructions.md as a lightweight alias (< 30 lines)
  referencing the canonical charter without duplicating it inline.
- Added unit tests (test_clean_code_principle_gates.py) covering all three
  spec scenarios: charter references, compliance gate, LOC/nesting thresholds.
- TDD evidence recorded in openspec/changes/clean-code-01-principle-gates/TDD_EVIDENCE.md.
- Bumped version 0.43.3 → 0.44.0 (minor — feature branch).
- Updated CHANGELOG.md and openspec/CHANGE_ORDER.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix: clean-code-01-principle-gates review findings and broad exception handling\n\n- Fix coderabbitai review findings:\n  - Clarify T20 and W0718 are aspirational in clean-code-principles.mdc\n  - Add language specifier to TDD_EVIDENCE.md fenced code block\n  - Update test to check all 7 canonical principles\n  - Make LOC threshold assertion more specific\n- Improve exception handling throughout codebase:\n  - Replace broad except Exception with specific exceptions\n  - Apply SOLID principle for better error handling\n- Update tasks.md to reflect completion status\n\nFixes #434\n\nGenerated by Mistral Vibe.\nCo-Authored-By: Mistral Vibe <vibe@mistral.ai>

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Archive 11 completed OpenSpec changes:
- bugfix-02-ado-import-payload-slugging
- ci-02-trustworthy-green-checks
- clean-code-01-principle-gates
- code-review-zero-findings
- docs-04-docs-review-gate-and-link-integrity
- docs-05-core-site-ia-restructure
- docs-07-core-handoff-conversion
- docs-12-docs-validation-ci
- docs-13-core-nav-search-theme-roles
- docs-14-first-contact-story-and-onboarding
- init-ide-prompt-source-selection
- packaging-02-cross-platform-runtime-and-module-resources
- speckit-02-v04-adapter-alignment

Fix spec validation errors:
- Add proper delta headers (ADDED/MODIFIED/REMOVED/RENAMED)
- Use correct scenario format with GIVEN/WHEN/THEN bullets
- Ensure requirement headers match between delta and main specs
- Use correct operation type based on existing requirements

Update main specs with archived changes:
- backlog-adapter: various updates
- bridge-adapter: Spec-Kit v0.4.x capabilities
- bridge-registry: BridgeConfig preset updates
- code-review-module: new requirements
- debug-logging: enhancements
- devops-sync: improvements
- documentation-alignment: core vs modules separation
- review-cli-contracts: new contracts
- review-run-command: command updates

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
…w fixes (#477)

* Fix content for install, sync, uninstallä

* test(docs): align first-contact contracts and stabilize module CLI tests

- docs/index: restore Why does it exist?, tagline, OpenSpec, canonical core CLI story
- Update init profile tests for solo-developer + install all (code-review, six bundles)
- Lean help test accepts uvx init hint; upgrade/core_compatibility tests match runtime
- Autouse fixture re-bootstraps CommandRegistry after category-group tests
- Rebase tasks conflict resolved; TDD_EVIDENCE + tasks for gates 7.1/7.2/12.1/12.2

Made-with: Cursor

* fix(tools): smart-test baseline and pre-commit single code-review run

- Run full suite when smart-test cache has no last_full_run; force+auto falls back to full when incremental is a no-op
- Pre-commit: invoke pre_commit_code_review.py once (no xargs split) so .specfact/code-review.json is not clobbered
- Tests and OpenSpec tasks for docs-new-user-onboarding

Made-with: Cursor

* test: fix CI backlog copy assertions and module install test isolation

- Align backlog not-installed tests with solo-developer init guidance (no <profile> placeholder)
- Autouse: reset CommandRegistry, register_builtin_commands, rebuild_root_app_from_registry so module install tests work after registry-only clears

Made-with: Cursor

* docs: README wow path + tests locking entrypoint with docs

- README leads with uvx init + code review run --scope full; pip install secondary
- Unit contract tests: README and docs/index.md share canonical uvx strings and order
- E2E: init --profile solo-developer in temp git repo; registry ready for step two with mock bundles

Made-with: Cursor

* feat(init): solo-developer includes code-review bundle and marketplace install

- Add specfact-code-review to canonical bundles and solo-developer preset
- Install marketplace module nold-ai/specfact-code-review via install_bundles_for_init
- Docs index: core CLI story and default starting point copy for parity tests
- CLI: missing-module hint references solo-developer profile
- smart_test_coverage: icontract requires use (self, test_level) for method contracts
- Re-sign init and module_registry manifests; tests and registry updates

Made-with: Cursor

* fix(tools): align _run_changed_only with tuple return and baseline full run

- Return (success, ran_any) from _run_changed_only; run full suite when no last_full_run
- run_smart_tests(auto, force): fall back to full tests when incremental ran nothing
- Fix wow e2e fixture typing (Iterator[None]) for basedpyright

Unblocks PR #477 CI: type-check, tests, lint job.

Made-with: Cursor

* chore(release): bump to 0.45.1 and update OpenSpec tasks status

- Sync version across pyproject.toml, setup.py, and __init__ modules
- Changelog: 0.45.1 entry for dependency profiles, smart-test baseline, CI, UX
- openspec: rolling status snapshot and task checkboxes for PR verification
- Includes prior branch work: init/profile, module registry, docs entry path, workflows

Made-with: Cursor

---------

Co-authored-by: Dominikus Nold <djm81@users.noreply.github.com>
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Apr 2, 2026

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

Reworks new-user onboarding to a uvx two-command fast path and implements profile/bundle plumbing, pip-free dependency resolution, multi-module install/upgrade/uninstall, improved module-not-found guidance, Jinja/workflow template updates, smart-test baseline fixes, numerous docs/spec additions, and wide-reaching tests and CI/workflow adjustments.

Changes

Cohort / File(s) Summary
Docs & Quickstart
README.md, docs/index.md, docs/getting-started/*, docs/examples/*, docs/guides/*
Rewrote onboarding to foreground uvx specfact-cli init --profile solo-developer + uvx specfact-cli code review run --path . --scope full; updated examples to insert code subcommand and reorganized install flows.
OpenSpec & Onboarding Specs
openspec/CHANGE_ORDER.md, openspec/changes/docs-new-user-onboarding/...
Added design, proposal, TDD evidence, tasks, and many specs enforcing onboarding, profile presets, dependency resolution, and entrypoint contract requirements.
Package Metadata
pyproject.toml, setup.py, src/__init__.py, src/specfact_cli/__init__.py, CHANGELOG.md
Bumped version to 0.45.1; slimmed core deps, moved contract tools into contracts/dev extras, added packaging/setuptools constraints, updated changelog.
CLI Core & UX
src/specfact_cli/cli.py, src/specfact_cli/generators/*, resources/templates/*
Refactored root callback, patched Typer param generation, added mapping for invocation→marketplace module, added bundle_name to workflow generator and template context, switched Jinja newline trimming settings.
Init & Profiles
src/specfact_cli/modules/init/...
Added specfact-code-review to solo-developer, added progress gating and user-visible init steps, marketplace-only bundle handling, and show_progress flag for installs.
Module Registry & Module Commands
src/specfact_cli/modules/module_registry/src/commands.py, module-package.yaml
Made install/uninstall/upgrade accept multiple module names, added --yes for upgrades, improved version handling (packaging), added interactive/CI bump semantics and per-module failure aggregation.
Dependency Resolver & Installer
src/specfact_cli/registry/dependency_resolver.py, src/specfact_cli/registry/module_installer.py
Added pip-availability detection, allow_unvalidated path for uvx, new install_resolved_pip_requirements, new exceptions for pip validation/install failures, and versioned bundle_dependencies parsing and error messaging improvements.
Pre-commit / Smart Checks
scripts/pre-commit-smart-checks.sh, scripts/pre_commit_code_review.py (tests)
Changed staged Python file handling to use a bash array and single command invocation; adjusted tests to assert single-invocation behavior.
Smart Test Coverage
tools/smart_test_coverage.py, related tests
Refactored incremental run return shape, baseline/full-run behavior when cache absent, nullable coverage handling, fallback coverage reporting, and cache update semantics.
CI / Workflows / Templates
.github/workflows/*, resources/templates/github-action.yml.j2, pr-template.md.j2
Made CI installs use extras (.[dev] / .[contracts]), added specfact init --profile solo-developer --repo . bootstrap to templates, added bundle_name input, improved repro/version-check steps and GitHub expression quoting.
Tests: New & Updated
tests/** (many files; new units/e2e/integration)
Added many unit/e2e/integration tests for wow entrypoint, profile presets, multi-module install/uninstall, upgrade behavior, pip-free resolver, versioned bundle deps, and updated expectations across numerous tests to match new UX and behavior.
Module package & registry internals
src/specfact_cli/registry/module_packages.py, src/specfact_cli/modules/module_registry/...
Refactored package scanning/registration internals, added dataclasses for scanning/registration context, and adjusted command mounting/registration flows.
Misc tooling
tools/contract_first_smart_test.py, tools/semgrep/README.md, skills/*
Minor type/signature adjustments, semgrep invocation guidance, and new SKILL.md house rules for code-review context.

Sequence Diagram(s)

sequenceDiagram
    participant User as Vibe Coder
    participant UVX as uvx CLI
    participant Init as specfact init
    participant Installer as Bundle Installer
    participant Resolver as Dependency Resolver
    participant Registry as Module Registry
    participant CodeReview as code review run

    User->>UVX: uvx specfact-cli init --profile solo-developer
    UVX->>Init: run init (profile)
    Init->>Registry: check installed bundles
    Registry-->>Init: no bundles
    Init->>Installer: install canonical bundles
    Installer->>Resolver: resolve bundle dependencies (allow_unvalidated=True)
    Resolver-->>Installer: resolved constraints (or empty if pip unavailable)
    Installer->>Installer: install modules (install_resolved_pip_requirements may be skipped)
    Installer->>Registry: register/mount commands
    Registry-->>Init: registration complete
    Init-->>User: init success (Installed: ...)
    User->>UVX: uvx specfact-cli code review run --path . --scope full
    UVX->>CodeReview: run code review
    CodeReview->>Registry: locate mounted code/code-review commands
    CodeReview->>CodeReview: execute analysis
    CodeReview-->>User: Verdict + Score + findings
Loading

Estimated code review effort

🎯 5 (Critical) | ⏱️ ~120 minutes

Possibly related issues

Possibly related PRs

Suggested labels

dependencies, openspec, QA

Architectural Insights

  • Contract-first surfaces: New exceptions (pip validation/install) and the keyword-only allow_unvalidated flag make pip-free uvx behavior explicit—preserving a clear contract boundary between dependency resolution and callers. This reduces silent degradations and aids testability.
  • Typer/Rich CLI boundaries: Variadic install/uninstall/upgrade signatures plus Typer param-patching centralize root/command signature composition; review the Typer patching to ensure future imports preserve merged signatures and that CLI help texts are generated deterministically.
  • OpenSpec traceability: The added specs, TDD evidence, and tasks create an auditable requirements→implementation trail; use these artifacts to drive acceptance tests and to validate wording-sensitive UX (module-not-found messaging, hero commands).
  • Scalability & CI ergonomics: pip-free resolver fallback and the smart-test baseline behavior address ephemeral CI runners and uvx-based installs. The allow_unvalidated opt-in and explicit install step in workflows ensure CI is deterministic while allowing local uvx users a smoother first-run.
  • Cross-repo/module impact: Versioned bundle_dependencies and the installer’s transitive install behavior create stronger contracts for marketplace module manifests; module publishers must adopt the expected "id"/"version" shapes and core_compatibility hints for seamless installs.
  • Maintainability: Centralized mapping from invoked command groups to marketplace module IDs standardizes user-facing guidance and eases future onboarding for new bundles; ensure tests guarding exact phrasing remain resilient (consider tokenized/templated assertions).
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dev

@djm81 djm81 self-assigned this Apr 2, 2026
@djm81 djm81 added documentation Improvements or additions to documentation enhancement New feature or request module-system Module system and registry marketplace Module marketplace features labels Apr 2, 2026
@djm81 djm81 linked an issue Apr 2, 2026 that may be closed by this pull request
3 tasks
@djm81 djm81 moved this from Todo to In Progress in SpecFact CLI Apr 2, 2026
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b4a7ecf579

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/specfact_cli/cli.py Outdated
Comment thread src/specfact_cli/modules/module_registry/src/commands.py Outdated
…pgrade tests (#479)

* fix: code-review gate (Typer params), typer<0.24 vs semgrep, module upgrade tests

- Split root/install Typer callbacks into merged param stubs (KISS param count).
- Patch typer.main via importlib; merge install param specs in module_registry.
- Cap typer<0.24 to stay compatible with semgrep click~=8.1.8.
- Invoke module_registry app directly in upgrade CLI tests (root app may lack module group).
- Refactors for first_run_selection, module_packages, registry tests, semgrep README.

Worktree: specfact-cli-worktrees/bugfix/code-review-cli-tests
Made-with: Cursor

* docs: use code import in examples (flat import removed from CLI)

Replace specfact [--flags] import from-code with specfact [--flags] code import
from-code so check-docs-commands matches the nested Typer path after removing
the flat import shim.

Made-with: Cursor

* Fix review findings

---------

Co-authored-by: Dom <djm81@users.noreply.github.com>
Comment thread src/specfact_cli/cli.py
runtime.refresh_loaded_module_consoles()

# Set banner flag based on --banner option
_show_banner = flags.banner
@djm81 djm81 merged commit 8085a80 into main Apr 3, 2026
41 of 42 checks passed
@github-project-automation github-project-automation bot moved this from In Progress to Done in SpecFact CLI Apr 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation enhancement New feature or request marketplace Module marketplace features module-system Module system and registry

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

[Change] docs-new-user-onboarding: vibe-coder uvx entry path + wow-path CLI fixes

1 participant