An open API service indexing awesome lists of open source software.

https://github.com/nold-ai/specfact-cli-modules

Official SpecFact workflow modules and deep docs for backlog, project, code, spec, and governance workflows built on the core CLI.
https://github.com/nold-ai/specfact-cli-modules

ai backlog backlog-refinement brownfield code-review code2spec context-engineering contract-testing contracts copilot intent-driven-development kanban legacy-modernization python requirements-engineering scrum spec-driven-development tdd testing

Last synced: 21 days ago
JSON representation

Official SpecFact workflow modules and deep docs for backlog, project, code, spec, and governance workflows built on the core CLI.

Awesome Lists containing this project

README

          

# specfact-cli-modules

Central module registry for SpecFact CLI. This repository hosts official **nold-ai** bundles and their documentation.

## Highlight: AI-shaped bloat detection

The Code Review bundle now surfaces `ai_bloat` findings: advisory, score-neutral signals tuned for the bloated shapes AI-assisted code commonly produces, such as identity `try/except`, one-call wrappers, passthrough lambdas, redundant intermediates, and long linear functions. A dry run on this change's affected package sources found 144 advisory candidates and applied 0 automatic rewrites; use `specfact code review run --json --out .specfact/code-review.json`, then run `/specfact.08-simplify` in your AI IDE to review each simplification with per-change confirmation. See the [AI bloat quickstart](./docs/quickstart-ai-bloat.md).

## Repository layout

| Path | Purpose |
|------|---------|
| `packages/` | Bundle source packages (one directory per bundle) |
| `registry/` | Published registry index and tarballs |
| `docs/` | Bundle and module documentation (published to GitHub Pages) |
| `scripts/` | CI helpers, signing scripts, quality gates |
| `tests/` | Contract and unit tests for all bundles |
| `openspec/` | OpenSpec change artifacts (proposals, specs, tasks) |

Third-party bundles are published from their own repositories and are not hosted here.

## First-time setup

Prerequisites: Python 3.11+, [Hatch](https://hatch.pypa.io).

```bash
# 1. Create the shared Hatch environment
hatch env create

# 2. Install specfact-cli as an editable dependency
# (prefers $SPECFACT_CLI_REPO, then a matching worktree branch, then ../specfact-cli)
hatch run dev-deps

# 3. Install pre-commit hooks (runs quality gates and code review on every commit)
pre-commit install
```

In Cursor / VS Code, select the interpreter at `specfact-cli-modules/.venv/bin/python`.

## Quality gates

Run the full gate sequence from the repo root before opening a PR:

```bash
hatch run format
hatch run type-check
hatch run lint
hatch run yaml-lint
hatch run check-bundle-imports
hatch run verify-modules-signature --payload-from-filesystem --enforce-version-bump
hatch run contract-test
hatch run smart-test
hatch run test
hatch run specfact code review run --bug-hunt --json --out .specfact/code-review.json
```

The pre-commit hooks run the same sequence automatically on every `git commit` (Blocks 1 and 2). To run them manually against all files:

```bash
pre-commit run --all-files
```

### Gate details

- **format / lint / type-check** — Ruff, basedpyright, and pylint. `basedpyright` and `pylint` are scoped to `src/`, `tests/`, and `tools/`; Ruff runs on the full repo.
- **check-bundle-imports** — Enforces import boundary policy (`ALLOWED_IMPORTS.md`). `TYPE_CHECKING`-only imports are excluded from the check.
- **contract-test** — Contract-first test suite; must pass before running `smart-test` / `test`.
- **code review gate** — Runs `specfact code review run` on staged `.py`/`.pyi` files under `packages/`, `registry/`, `scripts/`, `tools/`, `tests/`, and `openspec/changes/`. The pre-commit hook blocks on the report `ci_exit_code`; warnings and `ai_bloat` info findings are advisory and must be remediated before merge unless a documented exception exists. Full options (`--mode`, `--focus`, `--bug-hunt`, etc.) are documented in [Code review module](./docs/modules/code-review.md).

## Module signatures and versioning

Bump the `version` field in `packages//module-package.yaml` whenever you change a bundle's source payload, then refresh the checksum:

```bash
python scripts/sign-modules.py --allow-unsigned --payload-from-filesystem packages//module-package.yaml
```

The pre-commit hook auto-runs this step and re-stages updated manifests on non-`main` branches.

### When signatures are required

| Context | Requirement |
|---------|------------|
| PRs targeting `dev` | Checksum + version bump; no cryptographic signature required |
| PRs targeting `main` | Cryptographic signature required (`--require-signature`) |
| Push to `dev` / `main` | CI auto-signs via `sign-modules.yml` after merge |
| Approved same-repo PRs | `sign-modules-on-approval.yml` signs before merge using repo secrets |

`registry/index.json` and published tarballs are **not** updated locally — they are updated by `publish-modules` after merge to `dev`/`main`. For rare manual registry repair, use `hatch run sync-registry-from-package --bundle ` (not wired into pre-commit).

See [Module signing](./docs/authoring/module-signing.md) for the full signing workflow.

## Documentation

- GitHub Pages: `https://nold-ai.github.io/specfact-cli-modules/`
- URL contract (core → modules handoffs): `docs/reference/documentation-url-contract.md`