CRITICAL FIX: CLI sync and update commands were using hardcoded mock data
instead of fetching from GitHub, breaking the fundamental purpose of the tool.
Changes:
- NEW: CLI/utils/github-fetch.js - Centralized GitHub fetching utility
* fetchSkills() - Fetch from META/skill-registry.json
* fetchMCPs() - Fetch from META/registry.json
* fetchVersion() - Fetch from package.json
* fetchCursorrules() - Fetch .cursorrules
* fetchGitignore() - Fetch .gitignore
* fetchAllStandards() - Fetch everything in parallel
- FIXED: CLI/commands/update.js
* fetchAvailableSkills() now fetches from GitHub (was 3 hardcoded skills)
* fetchAvailableMcps() now fetches from GitHub (was 2 hardcoded MCPs)
* Removed TODO on line 353
- REFACTORED: CLI/commands/sync.js
* fetchLatestStandards() now uses github-fetch utility (DRY)
* getLatestVersion() now uses github-fetch utility (DRY)
* Removed duplicate GitHub fetching code
- ADDED: scripts/validate-all.cjs - CLI validation checks
* Check #23: No TODOs in critical CLI paths (commands, generators, utils)
* Check #24: GitHub fetch utility exists and is configured
* Check #25: Critical commands (sync, update) use GitHub fetch utility
- DOCS: CLI-CRITICAL-ISSUES.md, FIX-ALL-CLI-ISSUES.md
* Documents the pattern of failures
* Explains validation gap (structure vs function)
* Lists all remaining TODOs in generators (lower priority)
Impact:
- ai-dev sync now correctly fetches all 37 skills and 7 MCPs from GitHub
- ai-dev update now shows all available skills/MCPs, not just 3 hardcoded ones
- Validation suite now catches CLI mock data issues
- Future CLI commands must use github-fetch utility to pass validation
This fixes the third major gap found in the automation system.