deps: update pytest-xdist requirement from >=3.0 to >=3.8.0

.dockerignore

@@ -0,0 +1,17 @@
+.git
+.github
+.pytest_cache
+.venv
+__pycache__
+*.pyc
+*.pyo
+*.pyd
+.mypy_cache
+.ruff_cache
+.roam
+benchmarks
+docs
+reports
+tests
+dist
+build

.editorconfig

@@ -0,0 +1,23 @@
+# .editorconfig - IDE-level consistency mirroring .gitattributes (W689)
+root = true
+
+[*]
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+indent_style = space
+
+[*.py]
+indent_size = 4
+
+[*.{js,ts,jsx,tsx,json,yaml,yml,html,css,scss,md}]
+indent_size = 2
+
+[Makefile]
+indent_style = tab
+
+[*.{png,jpg,gif,ico,woff,woff2,pdf,zip,gz}]
+# Binary - no normalization
+trim_trailing_whitespace = false
+insert_final_newline = false

.gitattributes

@@ -0,0 +1,49 @@
+# Normalize line endings: auto-detect text files, force LF on commit.
+# Silences "warning: CRLF will be replaced by LF" on Windows checkouts
+# (W683; surfaced repeatedly by doc-sync runs — W672 / W557 / W563).
+* text=auto eol=lf
+
+# Ensure key text formats always use LF (explicit beats implicit).
+*.py text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.md text eol=lf
+*.toml text eol=lf
+*.json text eol=lf
+*.html text eol=lf
+*.css text eol=lf
+*.js text eol=lf
+*.ts text eol=lf
+*.tsx text eol=lf
+*.sh text eol=lf
+*.cfg text eol=lf
+*.ini text eol=lf
+*.txt text eol=lf
+
+# Binary files (explicit; preserve as-is, no EOL normalization).
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.webp binary
+*.woff binary
+*.woff2 binary
+*.ttf binary
+*.otf binary
+*.eot binary
+*.pdf binary
+*.zip binary
+*.gz binary
+*.tar binary
+*.tgz binary
+*.bz2 binary
+*.7z binary
+*.db binary
+*.sqlite binary
+*.sqlite3 binary
+*.so binary
+*.dll binary
+*.dylib binary
+*.pyc binary
+*.pyo binary

.githooks/commit-msg

@@ -0,0 +1,48 @@
+#!/bin/sh
+# commit-msg hook — reject any Co-Authored-By trailer or AI attribution.
+#
+# Enforces: commits on this repo are authored solely by Cranot.
+# No "Co-Authored-By:" trailers, no Anthropic/Claude attribution, no
+# AI-tool credits. This is intentional and load-bearing for the
+# public-facing git history.
+#
+# To install on a fresh clone:
+#   git config core.hooksPath .githooks
+#
+# To bypass for a one-off legitimate commit (rare): --no-verify, but
+# audit the commit message manually first.
+
+set -e
+
+MSG_FILE="$1"
+
+# Case-insensitive: catch Co-Authored-By, Co-authored-by, CO-AUTHORED-BY, etc.
+if grep -iE '^[[:space:]]*Co-Authored-By:' "$MSG_FILE" > /dev/null; then
+    echo "ERROR: commit-msg hook (.githooks/commit-msg)" >&2
+    echo "" >&2
+    echo "  This repo does NOT accept Co-Authored-By: trailers." >&2
+    echo "  All commits are authored solely by Cranot." >&2
+    echo "" >&2
+    echo "  Offending line(s):" >&2
+    grep -iE '^[[:space:]]*Co-Authored-By:' "$MSG_FILE" | sed 's/^/    /' >&2
+    echo "" >&2
+    echo "  Fix: remove the Co-Authored-By line from your commit message." >&2
+    echo "  If you used 'git commit -m', re-run without it." >&2
+    echo "  If your tooling auto-adds it, update the tool config or template." >&2
+    exit 1
+fi
+
+# Also reject explicit AI / Anthropic attribution patterns in the message body.
+if grep -iE '(anthropic\.com|noreply@anthropic|claude (opus|sonnet|haiku|code))' "$MSG_FILE" > /dev/null; then
+    echo "ERROR: commit-msg hook (.githooks/commit-msg)" >&2
+    echo "" >&2
+    echo "  This repo does NOT accept AI attribution in commit messages." >&2
+    echo "" >&2
+    echo "  Offending line(s):" >&2
+    grep -iE '(anthropic\.com|noreply@anthropic|claude (opus|sonnet|haiku|code))' "$MSG_FILE" | sed 's/^/    /' >&2
+    echo "" >&2
+    echo "  Fix: remove the AI-attribution line from your commit message." >&2
+    exit 1
+fi
+
+exit 0

.githooks/pre-commit

@@ -0,0 +1,68 @@
+#!/bin/sh
+# pre-commit hook -- doc-hygiene drift gate (W250 / Wave30.1).
+#
+# Re-runs the same two doc-hygiene checks that gate the `doc-hygiene` job
+# in .github/workflows/roam-ci.yml, so a developer catches count drift
+# locally before the PR fails in CI.
+#
+# Checks:
+#   1. python dev/build_readme_counts.py --check
+#        Marker-protected blocks in README.md / CLAUDE.md /
+#        llms-install.md and both mcp-server-card.json files.
+#        Exits non-zero on drift.
+#   2. python scripts/sync_surface_counts.py
+#        Free-form prose surfaces (landing-page HTML, llms.txt,
+#        server.json, skills/roam/SKILL.md, etc). Defaults to dry-run
+#        and exits non-zero on drift.
+#
+# To install on a fresh clone (same one-liner as the commit-msg hook):
+#   git config core.hooksPath .githooks
+#
+# To bypass for a one-off legitimate commit (rare): commit with
+# --no-verify, then run the counts script with --apply / --write
+# and commit the regenerated counts as a follow-up.
+
+set -e
+
+# Resolve the repo root so the hook works no matter where git invokes it.
+REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
+
+PY="${PYTHON:-python}"
+if ! command -v "$PY" >/dev/null 2>&1; then
+    if command -v python3 >/dev/null 2>&1; then
+        PY=python3
+    else
+        echo "ERROR: pre-commit hook (.githooks/pre-commit)" >&2
+        echo "  No 'python' or 'python3' on PATH; skipping doc-hygiene check." >&2
+        echo "  Install Python or run 'git commit --no-verify' to bypass." >&2
+        exit 1
+    fi
+fi
+
+# --- 1. Marker-protected count blocks (README/CLAUDE/llms-install/cards) ----
+if ! "$PY" "$REPO_ROOT/dev/build_readme_counts.py" --check; then
+    echo "" >&2
+    echo "ERROR: pre-commit hook (.githooks/pre-commit)" >&2
+    echo "" >&2
+    echo "  README / CLAUDE / llms-install count drift detected." >&2
+    echo "" >&2
+    echo "  Fix: run" >&2
+    echo "    python dev/build_readme_counts.py --apply" >&2
+    echo "  then re-stage the updated files and commit again." >&2
+    exit 1
+fi
+
+# --- 2. Free-form prose surface counts (landing page, server.json, ...) -----
+if ! "$PY" "$REPO_ROOT/scripts/sync_surface_counts.py"; then
+    echo "" >&2
+    echo "ERROR: pre-commit hook (.githooks/pre-commit)" >&2
+    echo "" >&2
+    echo "  Free-form surface count drift detected." >&2
+    echo "" >&2
+    echo "  Fix: run" >&2
+    echo "    python scripts/sync_surface_counts.py --write" >&2
+    echo "  then re-stage the updated files and commit again." >&2
+    exit 1
+fi
+
+exit 0

.github/CODEOWNERS

@@ -0,0 +1,29 @@
+# CODEOWNERS — auto-request reviews for matching paths.
+# Syntax: <pattern> <owner> [<owner> ...]
+# Reference: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Default owner for the entire repo
+* @Cranot
+
+# Workflows / CI / release pipeline — explicit owner
+/.github/workflows/         @Cranot
+/.github/                   @Cranot
+
+# Source code — owner reviews all
+/src/                       @Cranot
+
+# Public-facing documentation
+/docs/                      @Cranot
+/templates/distribution/    @Cranot
+/CHANGELOG.md               @Cranot
+/README.md                  @Cranot
+
+# Security-sensitive surface
+/src/roam/output/sarif.py   @Cranot
+/src/roam/attest/           @Cranot
+/src/roam/security/         @Cranot
+/src/roam/audit/            @Cranot
+
+# Build + packaging
+/pyproject.toml             @Cranot
+/.github/workflows/publish.yml  @Cranot

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,53 @@
+# Contributor Covenant Code of Conduct
+
+## Our pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity
+and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the
+  overall community
+
+Examples of unacceptable behavior include:
+
+- The use of sexualized language or imagery, and sexual attention or advances
+  of any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email
+  address, without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the maintainer at **hello@roam-code.com**. All complaints will be
+reviewed and investigated promptly and fairly.
+
+The maintainer is obligated to respect the privacy and security of the reporter
+of any incident.
+
+## Attribution
+
+This Code of Conduct is adapted from the
+[Contributor Covenant](https://www.contributor-covenant.org), version 2.1,
+available at
+[contributor-covenant.org/version/2/1/code_of_conduct.html](https://www.contributor-covenant.org/version/2/1/code_of_conduct.html).

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Report a defect in roam-code
+title: '[bug] '
+labels: bug
+assignees: Cranot
+---
+
+## What happened
+
+<!-- Briefly describe what's wrong. -->
+
+## Reproduction
+
+```bash
+# Exact commands you ran (e.g., roam health --json)
+```
+
+## Expected vs actual
+
+- **Expected:** what you thought should happen
+- **Actual:** what actually happened
+
+## Environment
+
+- **roam-code version:** `roam --version`
+- **Python version:** `python --version`
+- **OS:** macOS 14 / Ubuntu 22.04 / Windows 11
+- **Indexed repo size:** approx. # files / # symbols
+
+## Additional context
+
+<!-- Logs, screenshots, related commands. Trim to the minimum needed. -->