Merge remote-tracking branch 'origin/main' into feature/ci-pipeline-generation

Author: mitanuriel

.claude-plugin/marketplace.json

@@ -6,22 +6,30 @@
   },
   "metadata": {
     "description": "Syncable CLI skills for AI coding agents — project analysis, security, vulnerabilities, dependencies, IaC validation, and cloud deployment.",
-    "version": "0.1.0"
+    "version": "0.1.15"
   },
   "plugins": [
     {
       "name": "syncable-cli-skills",
       "source": "./installer/plugins/syncable-cli-skills",
       "description": "Syncable CLI skills for project analysis, security scanning, vulnerability detection, dependency auditing, IaC validation, Kubernetes optimization, and cloud deployment.",
-      "version": "0.1.0",
+      "version": "0.1.15",
       "author": {
         "name": "Syncable",
         "email": "support@syncable.dev"
       },
       "homepage": "https://syncable.dev",
       "repository": "https://github.com/syncable-dev/syncable-cli",
       "license": "MIT",
-      "keywords": ["syncable", "devops", "security", "deployment", "kubernetes", "docker", "iac"]
+      "keywords": [
+        "syncable",
+        "devops",
+        "security",
+        "deployment",
+        "kubernetes",
+        "docker",
+        "iac"
+      ]
     }
   ]
 }

CHANGELOG.md

@@ -6,6 +6,97 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
+## [0.37.1](https://github.com/syncable-dev/syncable-cli/compare/v0.37.0...v0.37.1) - 2026-03-29
+
+### Added
+
+- deprecate chat/agent commands, rebrand CLI as DevOps toolbox
+- updated codex/gemini skill path
+
+### Fixed
+
+- install Codex skills to ~/.agents/skills/ per official docs
+- rewrite Gemini CLI skill installer to use proper SKILL.md directory format
+- rewrite skill descriptions for semantic matching, skip CI for non-Rust changes
+
+### Other
+
+- release v0.37.0
+- *(installer)* update README with correct install paths for Claude, Codex, Gemini
+
+## [0.37.1](https://github.com/syncable-dev/syncable-cli/compare/v0.37.0...v0.37.1) - 2026-03-29
+
+### Added
+
+- deprecate chat/agent commands, rebrand CLI as DevOps toolbox
+- updated codex/gemini skill path
+
+### Fixed
+
+- install Codex skills to ~/.agents/skills/ per official docs
+- rewrite Gemini CLI skill installer to use proper SKILL.md directory format
+- rewrite skill descriptions for semantic matching, skip CI for non-Rust changes
+
+### Other
+
+- *(installer)* update README with correct install paths for Claude, Codex, Gemini
+
+## [0.37.0](https://github.com/syncable-dev/syncable-cli/compare/v0.36.0...v0.37.0) - 2026-03-28
+
+### Added
+
+- wire validate command, fix per-directory vuln/dep scanning, add deploy preview/run, and pagination
+- updating test cases
+- removed .env
+- claude skills feature
+- rewrite command skills to use --agent flag
+- rewrite workflow skills with --agent and cross-step retrieval
+- wire --agent flag in command handlers and add Retrieve command
+- add --agent flag to 5 scan commands and Retrieve subcommand
+- add CLI variants of compression functions
+- add resolve_latest() for cross-process ref_id resolution
+- *(installer)* add CLI entrypoint with commander, inquirer, ora, chalk
+- *(installer)* add update command (re-exports uninstall + install)
+- *(installer)* add status command with per-agent skill counting
+- *(installer)* add uninstall command with glob removal and Gemini marker cleanup
+- *(installer)* add install command with skill writers for all 5 agents
+- *(installer)* add prerequisite check and installation modules
+- *(installer)* add Cursor, Windsurf, and Gemini format transformers
+- *(installer)* add Claude and Codex format transformers
+- *(installer)* add agent detection for 5 AI coding agents
+- *(installer)* add skill loader with frontmatter parsing
+- *(installer)* add constants and utils module with version parsing
+- *(skills)* add syncable-deploy-pipeline workflow skill
+- *(skills)* add syncable-iac-pipeline workflow skill
+- *(skills)* add syncable-security-audit workflow skill
+- *(skills)* add syncable-project-assessment workflow skill
+- *(skills)* add syncable-platform command skill
+- *(skills)* add syncable-optimize command skill
+- *(skills)* add syncable-validate command skill
+- *(skills)* add syncable-dependencies command skill
+- *(skills)* add syncable-vulnerabilities command skill
+- *(skills)* add syncable-security command skill
+- *(skills)* add syncable-analyze command skill
+- early agu-ui protocol added
+
+### Fixed
+
+- add failures/diagnostics fields to find_issues_array
+- *(installer)* add verbose logging, forward all flags in update command
+
+### Other
+
+- ignore 6 new transitive dependency advisories (aws-lc-sys, rustls-webpki)
+- agent output pipeline implementation plan (10 tasks)
+- agent output pipeline design spec
+- *(installer)* add professional npm README with logo and metadata
+- *(installer)* scaffold npx installer project
+- add npx installer implementation plan
+- add npx installer design spec
+- scaffold skills directory structure
+- add syncable CLI skills implementation plan
+- add syncable CLI skills design spec
+
 ## [0.36.0](https://github.com/syncable-dev/syncable-cli/compare/v0.35.1...v0.36.0) - 2026-03-15
 
 ### Fixed

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "syncable-cli"
-version = "0.36.0"
+version = "0.37.1"
 edition = "2024"
 rust-version = "1.88"  # MSRV - AWS SDK requires 1.88
 authors = ["Syncable Team"]

Cargo.toml

@@ -0,0 +1,58 @@
+trigger:
+  branches:
+    include:
+    - main
+  tags:
+    include:
+    - v*
+pr:
+  branches:
+    include:
+    - main
+schedules:
+- cron: '{{CRON_SCHEDULE}}'
+  displayName: Scheduled build
+  branches:
+    include:
+    - main
+  always: true
+pool:
+  vmImage: ubuntu-latest
+steps:
+- script: rustup default stable
+  displayName: Set up runtime
+- task: Cache@2
+  displayName: Cache dependencies
+  inputs:
+    key: cargo | $(Agent.OS) | **/Cargo.lock
+    path: |-
+      ~/.cargo/registry/index
+      ~/.cargo/registry/cache
+      ~/.cargo/git/db
+      target/
+    restoreKeys: cargo | $(Agent.OS)
+- script: cargo fetch
+  displayName: Install dependencies
+- script: cargo clippy -- -D warnings
+  displayName: Lint
+- script: cargo test
+  displayName: Test
+- script: cargo build --release
+  displayName: Build
+- script: docker build -t {{REGISTRY_URL}}/{{IMAGE_NAME}}:$(Build.SourceVersion) .
+  displayName: Build Docker image
+- script: |-
+    curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
+    trivy image --exit-code 1 --severity CRITICAL,HIGH --format sarif --output trivy-results.sarif {{REGISTRY_URL}}/{{IMAGE_NAME}}:$(Build.SourceVersion)
+  displayName: Scan image (Trivy)
+- script: |-
+    curl -sSfL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_linux_x64.tar.gz | tar xz -C /usr/local/bin
+    gitleaks detect --source . --exit-code 1
+  displayName: Secret scan (Gitleaks)
+  env:
+    GITHUB_TOKEN: $(GITHUB_TOKEN)
+- task: PublishBuildArtifacts@1
+  displayName: Upload artifact
+  inputs:
+    artifactName: syncable-cli
+    pathToPublish: target/release/

azure-pipelines.yml

@@ -1,3 +1,4 @@
 node_modules/
 dist/
 skills/
+!plugins/syncable-cli-skills/skills/

installer/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "syncable-cli-skills",
-  "version": "0.1.5",
+  "version": "0.1.15",
   "type": "module",
   "description": "Install Syncable CLI skills for AI coding agents (Claude Code, Cursor, Windsurf, Codex, Gemini CLI)",
   "license": "GPL-3.0",

installer/.gitignore

@@ -1,12 +1,20 @@
 {
   "name": "syncable-cli-skills",
   "description": "Syncable CLI skills for project analysis, security scanning, vulnerability detection, dependency auditing, IaC validation, Kubernetes optimization, and cloud deployment.",
-  "version": "0.1.0",
+  "version": "0.1.15",
   "author": {
     "name": "Syncable",
     "email": "support@syncable.dev"
   },
   "homepage": "https://syncable.dev",
   "license": "MIT",
-  "keywords": ["syncable", "devops", "security", "deployment", "kubernetes", "docker", "iac"]
+  "keywords": [
+    "syncable",
+    "devops",
+    "security",
+    "deployment",
+    "kubernetes",
+    "docker",
+    "iac"
+  ]
 }

installer/package.json

@@ -0,0 +1,51 @@
+---
+description: "Use when the user asks to analyze a project, understand the tech stack, detect frameworks, check what languages are used, identify runtimes or package managers, or as a first step before security/vulnerability scans"
+---
+
+## Overview
+
+Detect a project's tech stack — languages, frameworks, runtimes, package managers, dependencies, Docker presence, monorepo structure. Foundation command; most workflows start here.
+
+## Quick Reference
+
+| Flag | Purpose |
+|------|---------|
+| `--agent` | Compressed output for agent consumption (always use) |
+| `--display {matrix\|detailed\|summary}` | Human-readable format |
+| `--only <filters>` | Comma-separated: `languages`, `frameworks`, `dependencies` |
+
+## Steps
+
+### 1. Run analysis
+
+```bash
+sync-ctl analyze <PATH> --agent
+```
+
+**Success criteria:** JSON output with `summary` and `full_data_ref` fields present.
+
+### 2. Report to user
+
+Prioritize: primary language, main framework, runtime version, Docker/K8s presence.
+
+### 3. Drill into details (if needed)
+
+Save the `full_data_ref`. Use `sync-ctl retrieve` — do NOT re-run analyze:
+
+```bash
+sync-ctl retrieve <ref_id> --query "section:frameworks"
+sync-ctl retrieve <ref_id> --query "section:languages"
+sync-ctl retrieve <ref_id> --query "project:<name>"    # monorepos
+sync-ctl retrieve <ref_id> --query "language:Go"
+sync-ctl retrieve <ref_id> --query "framework:React"
+```
+
+**Available queries:** `section:summary`, `section:frameworks`, `section:languages`, `language:<name>`, `framework:<name>`, `project:<name>`, `compact:true`
+
+## Error Handling
+
+| Error | Action |
+|-------|--------|
+| `No such file or directory` | Ask user to verify path |
+| Empty output | No supported project files. Run `sync-ctl support` |
+| Timeout on large monorepo | Try `--only languages` for partial scan |