dev

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @jamesjohnsdev

.github/dependabot.yml

@@ -0,0 +1,31 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "saturday"
+      time: "03:00"
+      timezone: "UTC"
+    cooldown:
+      default-days: 7
+    groups:
+      go-dependencies:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 3
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "saturday"
+      time: "03:00"
+      timezone: "UTC"
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 3

.github/workflows/ci.yml

@@ -0,0 +1,46 @@
+name: CI
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Set up Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        with:
+          go-version-file: go.mod
+          cache-dependency-path: go.sum
+
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9
+
+      - name: govulncheck
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.3.0 ./...
+
+      - name: Go Tidy
+        run: go mod tidy && git diff --exit-code
+
+      - name: Go Mod Verify
+        run: go mod verify
+
+      - name: Build
+        run: go build -o /dev/null ./...
+
+      - name: Test
+        run: go test -v -count=1 -race -shuffle=on -coverprofile=coverage.txt ./...
+
+      - name: Coverage summary
+        run: go tool cover -func=coverage.txt >> "$GITHUB_STEP_SUMMARY"

.github/workflows/fuzz.yml

@@ -0,0 +1,79 @@
+name: Go fuzz tests
+
+on:
+  schedule:
+    - cron: "0 3 * * 0" # Every Sunday at 03:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  discover:
+    name: Discover fuzz tests
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    outputs:
+      matrix: ${{ steps.set-matrix.outputs.matrix }}
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+      - name: Find all fuzz tests
+        id: set-matrix
+        run: |
+          matrix=$(
+            { grep -rl "^func Fuzz" transpiler --include="*_test.go" || true; } | sort | while read -r file; do
+              pkg_dir=$(dirname "$file")
+              go_pkg="./${pkg_dir#transpiler}"
+              grep "^func Fuzz" "$file" | sed 's/func \(Fuzz[^(]*\).*/\1/' | while read -r fn; do
+                printf '{"function":"%s","go_package":"%s","corpus_path":"%s/testdata/fuzz"}\n' \
+                  "$fn" "$go_pkg" "$pkg_dir"
+              done
+            done | jq -sc '.'
+          )
+          echo "matrix=$matrix" >> "$GITHUB_OUTPUT"
+
+  fuzz:
+    name: ${{ matrix.function }}
+    needs: discover
+    if: needs.discover.outputs.matrix != '[]'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        include: ${{ fromJson(needs.discover.outputs.matrix) }}
+    defaults:
+      run:
+        working-directory: transpiler
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        with:
+          go-version-file: transpiler/go.mod
+          cache: false
+      - name: Run ${{ matrix.function }}
+        env:
+          GO_PKG: ${{ matrix.go_package }}
+          FUZZ_FN: ${{ matrix.function }}
+        run: go test "$GO_PKG" "-fuzz=$FUZZ_FN" -fuzztime=5m
+      - name: Upload fuzz failure seed corpus
+        if: failure()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: fuzz-corpus-${{ matrix.function }}
+          path: ${{ matrix.corpus_path }}/${{ matrix.function }}
+      - name: Output troubleshooting message
+        if: failure()
+        env:
+          FUZZ_FN: ${{ matrix.function }}
+          RUN_ID: ${{ github.run_id }}
+          SHA: ${{ github.sha }}
+        shell: bash
+        run: |
+          echo -e "Fuzz test $FUZZ_FN failed on commit $SHA. To troubleshoot locally, use the GitHub CLI to download the seed corpus with\n\ngh run download $RUN_ID -n fuzz-corpus-$FUZZ_FN\n"

.github/workflows/semgrep.yml

@@ -0,0 +1,23 @@
+name: Semgrep
+
+on:
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "0 4 * * 0" # Every Sunday at 04:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  semgrep:
+    name: Semgrep scan
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+      - name: Run Semgrep
+        run: pipx run semgrep scan --config=p/golang --config=p/secrets --error

.github/workflows/workflow-lint.yml

@@ -0,0 +1,44 @@
+name: Workflow Lint
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - ".github/workflows/**"
+  push:
+    branches: [main]
+    paths:
+      - ".github/workflows/**"
+
+permissions:
+  contents: read
+
+jobs:
+  zizmor:
+    name: zizmor
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+        with:
+          advanced-security: false
+          inputs: .github/workflows/
+
+  actionlint:
+    name: actionlint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+      - uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2

README.md

@@ -11,23 +11,26 @@ also for AI augmented workflows, where agents can have a source for development.
 
 ### Core
 
-- `issue init` - creates a new `.issues` directory in the current directory.
-- `issue list` - lists all issues in the current directory.
-- `issue create` - creates a new issue in the current directory.
-- `issue sync` - syncs all issues in the current directory using the GitHub CLI.
-- `issue help`` - shows help for the `issue` command.
+- `issues init` - creates a new `.issues` directory in the current directory.
+- `issues list` - lists all issues in the current directory.
+- `issues create <title>` - creates a new issue in the current directory.
+- `issues create -e` - opens a blank issue in the editor without requiring a title upfront (discarded if saved with no title).
+- `issues view <number>` - opens an issue by number in the default editor.
+- `issues close <number>` - marks an issue as closed.
+- `issues sync` - syncs all issues in the current directory using the GitHub CLI.
+- `issues help` - shows help for the `issues` command.
 
 ### Agentic
 
 These are planned commnads. The idea is that you will define a preferred agent in a config file.
 
-- `issue agent` - sends the current issue to the agent.
-- `issue agent list` - sends the list of issues to the agent.
+- `issues agent` - sends the current issue to the agent.
+- `issues agent list` - sends the list of issues to the agent.
 
 There will be a agent skill created as as well down the line.
 
 ## How it works
 
-The `.issue` directory is stored in the project root. It contains a `config.yaml` file. It contains an `issues` directory, which contains current local versions of the issues.
+The `.issues` directory is stored in the project root. It contains a `config.yaml` file. It contains an `issues` directory, which contains current local versions of the issues.
 
 There is a `.remote_issues` directory, which contains the remote versions of the issues. During synchronisation, the local versions are updated to match the remote versions.

cmd/close.go

@@ -0,0 +1,49 @@
+package cmd
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	"github.com/fatih/color"
+	"github.com/jamesjohnsdev/issues/internal/issue"
+	"github.com/spf13/cobra"
+)
+
+var closeCmd = &cobra.Command{
+	Use:   "close <number>",
+	Short: "Mark an issue as closed",
+	Args:  cobra.ExactArgs(1),
+	RunE: func(cmd *cobra.Command, args []string) error {
+		root, err := issuesRoot()
+		if err != nil {
+			return err
+		}
+
+		iss, err := findLocalByID(root, args[0])
+		if err != nil {
+			return err
+		}
+
+		if iss.State == "closed" {
+			fmt.Printf("Issue %s is already closed.\n", args[0])
+			return nil
+		}
+
+		iss.State = "closed"
+
+		newPath := filepath.Join(closedDir(root), filepath.Base(iss.Path))
+		if err := os.MkdirAll(closedDir(root), 0755); err != nil {
+			return err
+		}
+		if err := issue.Write(newPath, iss); err != nil {
+			return err
+		}
+		if err := os.Remove(iss.Path); err != nil {
+			return err
+		}
+
+		fmt.Printf("%s %s: %s\n", color.GreenString("Closed"), args[0], iss.Title)
+		return nil
+	},
+}