feat: update changelog for version 1.3.0 and enhance site-audit and PR review scripts with new sampling and inventory options

Author: markhazleton

CHANGELOG.md

@@ -7,6 +7,17 @@ All notable changes to the Specify CLI and templates are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0] - 2026-03-19
+
+### Fixed
+
+- **`/speckit.site-audit` performance on large repositories**: Reduced default PowerShell pre-scan JSON payload size by returning sampled file inventories and sampled pattern findings with full counts, while keeping full inventories available via an explicit opt-in switch (`--full-inventory` / `--include-full-inventory`).
+- **JSON rendering overhead in chat surfaces**: Switched site-audit pre-scan JSON output from compressed single-line output to multiline JSON to reduce UI/context processing pressure.
+- **Unbounded audit expansion risk**: Added explicit execution guardrails in the site-audit command template to limit findings, search breadth, and per-finding file reads, and to stop once high-signal evidence is sufficient.
+- **`/speckit.pr-review` large PR payload risk**: Added bounded file list output in PowerShell PR context pre-scan (`files_changed_total`, `files_changed_truncated`, sample limit) with an opt-in switch for full file inventory, and added prompt-level scope limits for deep file inspection.
+- **`/speckit.archive` large candidate-set expansion risk**: Added sampled candidate arrays with full counts and opt-in full inventory in PowerShell archive context output, plus prompt guardrails to avoid unbounded candidate reading in a single pass.
+- **Defensive JSON output standardization**: Converted remaining PowerShell context scripts from compressed single-line JSON to multiline JSON to reduce chat/UI rendering pressure and improve diagnostics readability.
+
 ## [1.2.4] - 2026-03-07
 
 ### Added

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "specify-cli"
-version = "1.2.4"
+version = "1.3.0"
 description = "Specify CLI, part of Spec Kit Spark. A community extension with constitution-powered commands for Spec-Driven Development (SDD)."
 requires-python = ">=3.11"
 dependencies = [

scripts/powershell/archive-context.ps1

@@ -6,7 +6,9 @@
 param(
     [Parameter(Position = 0, ValueFromRemainingArguments)]
     [string[]]$Arguments,
-    [switch]$Json
+    [switch]$Json,
+    [switch]$IncludeFullInventory,
+    [int]$SampleLimit = 50
 )
 
 . (Join-Path $PSScriptRoot 'common.ps1')
@@ -31,6 +33,23 @@ function Get-RelativeMdFiles {
         Sort-Object
 }
 
+function Get-SampledItems {
+    param(
+        [array]$Items,
+        [int]$Limit
+    )
+
+    if (-not $Items) {
+        return @()
+    }
+
+    return @($Items | Select-Object -First $Limit)
+}
+
+if ($SampleLimit -lt 1) {
+    $SampleLimit = 50
+}
+
 # Candidate categories
 $drafts           = Get-RelativeMdFiles '.documentation/drafts'
 $sessionDocs      = Get-RelativeMdFiles '.documentation/copilot'
@@ -68,26 +87,59 @@ $guideExists     = Test-Path (Join-Path $repoRoot $guidePath)
 $changelogExists = Test-Path (Join-Path $repoRoot $changelogPath)
 
 if ($Json) {
+    $candidateCounts = @{
+        drafts = $drafts.Count
+        session_docs = $sessionDocs.Count
+        implementation_plans = $implPlans.Count
+        release_docs = $releaseDocs.Count
+        quickfix_records = $quickfixRecords.Count
+        pr_reviews = $prReviews.Count
+    }
+
+    $currentDocsCount = $currentDocs.Count
+
     @{
         REPO_ROOT          = $repoRoot
         TIMESTAMP          = $timestamp
         ARCHIVE_DIR        = $archiveDir
         ARCHIVE_EXISTS     = $archiveExists
-        EXISTING_ARCHIVES  = $existingArchives
+        EXISTING_ARCHIVES  = Get-SampledItems -Items $existingArchives -Limit $SampleLimit
+        EXISTING_ARCHIVES_COUNT = $existingArchives.Count
         GUIDE_PATH         = $guidePath
         GUIDE_EXISTS       = $guideExists
         CHANGELOG_PATH     = $changelogPath
         CHANGELOG_EXISTS   = $changelogExists
+        SAMPLE_LIMIT       = $SampleLimit
+        INCLUDE_FULL_INVENTORY = [bool]$IncludeFullInventory
+        CANDIDATE_COUNTS   = $candidateCounts
         CANDIDATES         = @{
-            drafts               = $drafts
-            session_docs         = $sessionDocs
-            implementation_plans = $implPlans
-            release_docs         = $releaseDocs
-            quickfix_records     = $quickfixRecords
-            pr_reviews           = $prReviews
+            drafts               = Get-SampledItems -Items $drafts -Limit $SampleLimit
+            session_docs         = Get-SampledItems -Items $sessionDocs -Limit $SampleLimit
+            implementation_plans = Get-SampledItems -Items $implPlans -Limit $SampleLimit
+            release_docs         = Get-SampledItems -Items $releaseDocs -Limit $SampleLimit
+            quickfix_records     = Get-SampledItems -Items $quickfixRecords -Limit $SampleLimit
+            pr_reviews           = Get-SampledItems -Items $prReviews -Limit $SampleLimit
         }
-        CURRENT_DOCS       = $currentDocs
-    } | ConvertTo-Json -Depth 5 -Compress
+        CURRENT_DOCS       = Get-SampledItems -Items $currentDocs -Limit $SampleLimit
+        CURRENT_DOCS_COUNT = $currentDocsCount
+    
+        FULL_INVENTORY = $(if ($IncludeFullInventory) {
+            @{
+                existing_archives = $existingArchives
+                candidates = @{
+                    drafts = $drafts
+                    session_docs = $sessionDocs
+                    implementation_plans = $implPlans
+                    release_docs = $releaseDocs
+                    quickfix_records = $quickfixRecords
+                    pr_reviews = $prReviews
+                }
+                current_docs = $currentDocs
+            }
+        } else {
+            $null
+        })
+    } | ConvertTo-Json -Depth 8
 }
 else {
     Write-Output "Archive Context"

scripts/powershell/check-prerequisites.ps1

@@ -73,7 +73,7 @@ if ($PathsOnly) {
             FEATURE_SPEC = $paths.FEATURE_SPEC
             IMPL_PLAN    = $paths.IMPL_PLAN
             TASKS        = $paths.TASKS
-        } | ConvertTo-Json -Compress
+        } | ConvertTo-Json
     } else {
         Write-Output "REPO_ROOT: $($paths.REPO_ROOT)"
         Write-Output "BRANCH: $($paths.CURRENT_BRANCH)"
@@ -130,7 +130,7 @@ if ($Json) {
     [PSCustomObject]@{ 
         FEATURE_DIR = $paths.FEATURE_DIR
         AVAILABLE_DOCS = $docs 
-    } | ConvertTo-Json -Compress
+    } | ConvertTo-Json
 } else {
     # Text output
     Write-Output "FEATURE_DIR:$($paths.FEATURE_DIR)"

scripts/powershell/create-new-feature.ps1

@@ -272,7 +272,7 @@ if ($Json) {
         FEATURE_NUM = $featureNum
         HAS_GIT = $hasGit
     }
-    $obj | ConvertTo-Json -Compress
+    $obj | ConvertTo-Json
 } else {
     Write-Output "BRANCH_NAME: $branchName"
     Write-Output "SPEC_FILE: $specFile"

scripts/powershell/evolution-context.ps1

@@ -145,7 +145,7 @@ if ($Json) {
         FROM_AUDIT               = $fromAudit
         SUGGESTION               = $suggestion
         TIMESTAMP                = $timestamp
-    } | ConvertTo-Json -Compress
+    } | ConvertTo-Json
 }
 else {
     Write-Output "Constitution Evolution Context"

scripts/powershell/get-pr-context.ps1

@@ -8,13 +8,20 @@
 #        ./get-pr-context.ps1 -Json           # Auto-detect PR from current branch
 #        ./get-pr-context.ps1 123 -Json       # Specific PR number
 #        ./get-pr-context.ps1 "#123" -Json    # Also accepts # prefix
+#        ./get-pr-context.ps1 123 -Json -IncludeAllFiles
 
 param(
     [Parameter(Position=0)]
     [string]$PrNumber,
 
     [Parameter()]
-    [switch]$Json
+    [switch]$Json,
+
+    [Parameter()]
+    [switch]$IncludeAllFiles,
+
+    [Parameter()]
+    [int]$FileSampleLimit = 200
 )
 
 $ErrorActionPreference = "Stop"
@@ -41,7 +48,7 @@ function Write-JsonError {
             error = $true
             message = $Message
             details = $Details
-        } | ConvertTo-Json -Compress
+        } | ConvertTo-Json
         Write-Output $errorObj
     } else {
         Write-Error $Message
@@ -51,6 +58,10 @@ function Write-JsonError {
     }
 }
 
+if ($FileSampleLimit -lt 1) {
+    $FileSampleLimit = 200
+}
+
 #==============================================================================
 # PR Number Detection
 #==============================================================================
@@ -148,7 +159,14 @@ try {
 }
 
 # Extract file list
-$filesChanged = $prData.files | ForEach-Object { $_.path }
+$allFilesChanged = @($prData.files | ForEach-Object { $_.path })
+$filesChangedTotal = $allFilesChanged.Count
+$filesChangedTruncated = $false
+$filesChanged = $allFilesChanged
+if (-not $IncludeAllFiles -and $filesChangedTotal -gt $FileSampleLimit) {
+    $filesChanged = @($allFilesChanged | Select-Object -First $FileSampleLimit)
+    $filesChangedTruncated = $true
+}
 
 # Check for constitution
 $constitutionPath = Join-Path $repoRoot.Path ".documentation\memory\constitution.md"
@@ -173,16 +191,20 @@ if ($Json) {
             commit_sha = $commitSha
             commit_count = $prData.commits.Count
             files_changed = $filesChanged
+            files_changed_total = $filesChangedTotal
+            files_changed_truncated = $filesChangedTruncated
             lines_added = $prData.additions ?? 0
             lines_deleted = $prData.deletions ?? 0
             created_at = $prData.createdAt
             updated_at = $prData.updatedAt
             diff_available = $diffAvailable
+            file_sample_limit = $FileSampleLimit
+            include_all_files = [bool]$IncludeAllFiles
         }
         CONSTITUTION_PATH = $constitutionPath
         CONSTITUTION_EXISTS = $constitutionExists
         REVIEW_DIR = $reviewDir
-    } | ConvertTo-Json -Depth 10 -Compress
+    } | ConvertTo-Json -Depth 10
 
     Write-Output $output
 } else {

scripts/powershell/quickfix-context.ps1

@@ -121,7 +121,7 @@ if ($Json) {
         RISK_LEVEL          = $riskLevel
         MAX_EFFORT          = $maxEffort
         QUICKFIXES          = $quickfixes
-    } | ConvertTo-Json -Compress
+    } | ConvertTo-Json
 }
 else {
     Write-Output "Quickfix Context"

scripts/powershell/release-context.ps1

@@ -196,7 +196,7 @@ if ($Json) {
         DRY_RUN                = [bool]$DryRun
         SPECKIT_VERSION_PATH   = $specKitVersionPath
         INSTALLED_VERSION      = $installedVersion
-    } | ConvertTo-Json -Compress
+    } | ConvertTo-Json
 }
 else {
     Write-Output "Release Context"

scripts/powershell/setup-plan.ps1

@@ -51,7 +51,7 @@ if ($Json) {
         BRANCH = $paths.CURRENT_BRANCH
         HAS_GIT = $paths.HAS_GIT
     }
-    $result | ConvertTo-Json -Compress
+    $result | ConvertTo-Json
 } else {
     Write-Output "FEATURE_SPEC: $($paths.FEATURE_SPEC)"
     Write-Output "IMPL_PLAN: $($paths.IMPL_PLAN)"