changelog · canonical source

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Spec version (separate cadence from binary): see SPEC.md Changelog §19. The spec and the binary version independently — the binary tracks SemVer over the implemented surface; the spec tracks decisions and architecture.

[Unreleased]

Spec — v0.10: GitHub Actions trinity

  • workflow-atoms.com (introduced v0.9) splits into three sibling registries (action-atoms.com, workflow-atoms.com, pipeline-atoms.com) matching how GitHub layers actions / workflows / pipelines. Seven atom registries total; eight Convergent Systems Astro sites (SPEC §14.1).
  • Canonical-identity vs consumption-form (SPEC §7.11.1): atoms.com URLs are the canonical identity humans/CLI/docs use; GHA’s uses: accepts only owner/repo@ref; the CLI translates atoms.com URLs to the GH-grammar form at file-write time. Each atom version corresponds to exactly one git tag on the backing repo; ai doctor surfaces drift.
  • New CLI verbs: ai action and ai pipeline (same shape as ai workflow). All three accept the canonical atoms.com URL form as the install argument.
  • Wizard adds Q36d/e/f/g in Phase 8 (one per layer plus the install-mode prompt).
  • settings.toml v0.4: adds actionRegistry, pipelineRegistry, [action], [pipeline], [atoms.cache.action], [atoms.cache.pipeline]; the v0.9 [workflow] install moves to [atoms] install (cross-layer setting).
  • The v0.9 atom-action data-fetcher idea is dropped — it conflated runtime data-atom fetching (still useful, but a separate concern) with workflow-atom consumption (which can’t be runtime-fetched because GHA parses YAML at workflow-init time).

Changed — refactor: single-binary distribution

  • Hook library is now embedded into the ai binary via //go:embed (see src/cmd/ai/embed/). Repo-root hooks/ and bin/ directories removed. The 15 hook files + wrapper templates + patterns.json
    • command-wrappers.toml live at src/cmd/ai/embed/{hooks,wrappers}/. Extracted onto disk at install time via ai setup or ai hooks install --all / ai hooks install command-wrappers.
  • ai clone <url> subcommand replaces bin/clone shell script. Identity-routing against metadata/projects.json is stubbed for v0.8; the v0.8 implementation runs git clone and installs the pre-commit secret hook into the clone.
  • ai audit rotate subcommand replaces bin/audit-rotate.sh. Same behavior (gzip prior-month JSONLs); --dry-run flag honored.
  • ai hooks install is now the canonical surface for materializing the embedded library: --all, <name>, or command-wrappers. Idempotent; --force to overwrite.
  • bin/ai PATH-shim removed. A misconfigured PATH already yields a clear “command not found”; the stub provided no signal beyond that.
  • .goreleaser.yaml ldflags fixed. Previously targeted main.version (no such var); now stamps .../internal/buildinfo.{version,commit,date} correctly. ai version output: v0.8.0 (commit abc1234, built 2026-05-23T08:00:00Z).

Added

  • SPEC.md v0.8 — authoritative implementation specification.
  • questions.yaml v0.8 — wizard question taxonomy.
  • settings.toml.example — canonical defaults for ~/.config/aiConstitution/settings.toml.
  • GOALS.md — G1-G7 goals, non-goals, anti-goals.
  • ARCHITECTURE.md — navigational architecture overview, indexed to SPEC.md sections.
  • docs/adr/ — ADR-0001 through ADR-0004 backfilled from spec decisions:
    • ADR-0001 Atoms architecture (versioned immutable units).
    • ADR-0002 Command Wrapper Facade for cross-tool enforcement.
    • ADR-0003 No trufflehog; patterns.json + optional gitleaks.
    • ADR-0004 Markdown issue templates in v0.8; YAML Issue Forms deferred.
  • .github/ISSUE_TEMPLATE/ — six Markdown templates per SPEC.md §9.5 and §14.3: epic, feature, story, task, hook, finding.
  • hooks/ — Python stdlib-only hook library: patterns.json, audit.py, secret-block.py, secret-precommit.py, branch-guard.py, worktree-guard.py, no-verify-strip.py, destructive-gh-guard.py, destructive-terraform-guard.py, destructive-kubectl-guard.py, audit-command.py, checkpoint-tick.py, command-wrappers.toml.
  • bin/ — helper scripts: clone, audit-rotate.sh, git.template, gh.template, ai (PATH-shim error stub).
  • governance/policy/branch-guard.json — canonical protected branch set.
  • governance/wizard/ — pointer to questions.yaml.
  • governance/seed/answers.example.yaml — wizard answer template.
  • src/cmd/ai/ — cobra-based CLI scaffold; every verb from SPEC.md §3 is registered (stubs for v0.8).
  • src/internal/ — packages: config, paths, audit, state, hooks, atoms (all skeletal).
  • src/pkg/patterns/ — Go bindings for patterns.json (consumes the same canonical pattern set as the Python hooks).
  • src/pkg/version/ — build-time version stamping (-ldflags "-X .../version.Version=…").
  • web/ai-constitution/ — Astro scaffold for the methodology site. No live brand-atoms fetch (deferred); inline brand tokens from [email protected] per SPEC.md §14.4.

Changed

  • .github/workflows/secret-scan.yml — replaced trufflehog with a diff scan against hooks/patterns.json. SPEC.md §10.4 forbids trufflehog; the canonical CI net is gitleaks (opt-in) and the patterns.json set is authoritative for what gets blocked.

Spec corrections (v0.8 → see SPEC.md §19)

  • Fixed typo: itsx own → its own (header status line).
  • Fixed section numbering: §13.1–13.4 (Settings.toml Schema) and §14.1–14.4 (Brand Integration) had subsections labeled with the previous section’s number; now consistent with their parent.

Companion documents