fix: rename keygraph/shannon to farhoodlabs/trebuchet in all workflows and issue templates

- release.yml, release-beta.yml, rollback.yml, rollback-beta.yml: all Docker image names, npm package refs, pnpm filter commands updated
- Issue templates: CLI examples and workspace paths updated to trebuchet

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -46,7 +46,7 @@ body:
       options:
         - label: I have searched the existing open issues and confirmed this bug has not already been reported.
           required: true
-        - label: I am running the latest released version of `shannon`.
+        - label: I am running the latest released version of `trebuchet`.
           required: true
 
   - type: checkboxes
@@ -70,7 +70,7 @@ body:
         Issues without this information may be difficult to triage.
 
         - Check the workflow log:
-            - **npx mode:** `~/.shannon/workspaces/<workspace>/workflow.log`
+            - **npx mode:** `~/.trebuchet/workspaces/<workspace>/workflow.log`
             - **Local mode:** `./workspaces/<workspace>/workflow.log`
           Use `grep` or search to identify errors.
           Paste the relevant error output below.
@@ -105,8 +105,8 @@ body:
     attributes:
       label: CLI mode
       options:
-        - "npx (@keygraph/shannon)"
-        - "Local (./shannon)"
+        - "npx (@trebuchet/cli)"
+        - "Local (./trebuchet)"
     validations:
       required: true
 
@@ -124,10 +124,10 @@ body:
       required: true
 
   - type: input
-    id: shannon-command
+    id: trebuchet-command
     attributes:
       label: Full command with all flags used (with redactions)
-      placeholder: "e.g. npx @keygraph/shannon start -u <url> -r my-repo  OR  ./shannon start -u <url> -r my-repo"
+      placeholder: "e.g. npx @trebuchet/cli start -u <url> -r my-repo  OR  ./trebuchet start -u <url> -r my-repo"
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -26,8 +26,8 @@ body:
       label: Which CLI mode does this apply to?
       options:
         - Both
-        - "npx (@keygraph/shannon)"
-        - "Local (./shannon)"
+        - "npx (@trebuchet/cli)"
+        - "Local (./trebuchet)"
 
   - type: textarea
     id: alternatives-considered

.github/workflows/release-beta.yml

@@ -30,7 +30,7 @@ jobs:
         run: |
           set -euo pipefail
 
-          LATEST=$(npm view "@keygraph/shannon" dist-tags.beta 2>/dev/null || echo "")
+          LATEST=$(npm view "@trebuchet/cli" dist-tags.beta 2>/dev/null || echo "")
 
           if [[ -z "$LATEST" ]]; then
             echo "version=1.0.0-beta.1" >> "$GITHUB_OUTPUT"
@@ -71,7 +71,7 @@ jobs:
           push: true
           provenance: mode=max
           sbom: true
-          tags: keygraph/shannon:${{ needs.preflight.outputs.version }}
+          tags: farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}
 
   build-docker-api:
     name: Build Docker (API)
@@ -101,7 +101,7 @@ jobs:
           push: true
           provenance: mode=max
           sbom: true
-          tags: keygraph/shannon-api:${{ needs.preflight.outputs.version }}
+          tags: farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}
 
   sign-docker:
     name: Sign Docker images
@@ -127,25 +127,25 @@ jobs:
       - name: Inspect worker image
         id: inspect-worker
         run: |
-          docker buildx imagetools inspect "keygraph/shannon:${{ needs.preflight.outputs.version }}"
-          DIGEST="sha256:$(docker buildx imagetools inspect --raw "keygraph/shannon:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
+          docker buildx imagetools inspect "farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}"
+          DIGEST="sha256:$(docker buildx imagetools inspect --raw "farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
           echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
 
       - name: Inspect API image
         id: inspect-api
         run: |
-          docker buildx imagetools inspect "keygraph/shannon-api:${{ needs.preflight.outputs.version }}"
-          DIGEST="sha256:$(docker buildx imagetools inspect --raw "keygraph/shannon-api:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
+          docker buildx imagetools inspect "farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}"
+          DIGEST="sha256:$(docker buildx imagetools inspect --raw "farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
           echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
 
       - name: Install cosign
         uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
       - name: Sign worker image
-        run: cosign sign --yes "keygraph/shannon@${{ steps.inspect-worker.outputs.digest }}"
+        run: cosign sign --yes "farhoodlabs/trebuchet@${{ steps.inspect-worker.outputs.digest }}"
 
       - name: Sign API image
-        run: cosign sign --yes "keygraph/shannon-api@${{ steps.inspect-api.outputs.digest }}"
+        run: cosign sign --yes "farhoodlabs/trebuchet-api@${{ steps.inspect-api.outputs.digest }}"
 
       - name: Verify worker image signature
         run: |
@@ -153,14 +153,14 @@ jobs:
           cosign verify \
             --certificate-oidc-issuer https://token.actions.githubusercontent.com \
             --certificate-identity https://github.com/${{ github.repository }}/.github/workflows/release-beta.yml@${{ github.ref }} \
-            "keygraph/shannon@${{ steps.inspect-worker.outputs.digest }}"
+            "farhoodlabs/trebuchet@${{ steps.inspect-worker.outputs.digest }}"
 
       - name: Verify API image signature
         run: |
           cosign verify \
             --certificate-oidc-issuer https://token.actions.githubusercontent.com \
             --certificate-identity https://github.com/${{ github.repository }}/.github/workflows/release-beta.yml@${{ github.ref }} \
-            "keygraph/shannon-api@${{ steps.inspect-api.outputs.digest }}"
+            "farhoodlabs/trebuchet-api@${{ steps.inspect-api.outputs.digest }}"
 
   publish-npm:
     name: Publish npm (beta)
@@ -194,14 +194,14 @@ jobs:
         run: pnpm install --lockfile-only
 
       - name: Build CLI
-        run: pnpm --filter @keygraph/shannon run build
+        run: pnpm --filter @trebuchet/cli run build
 
       - name: Publish npm package
         working-directory: apps/cli
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
-          if npm view "@keygraph/shannon@${{ needs.preflight.outputs.version }}" version 2>/dev/null; then
+          if npm view "@trebuchet/cli@${{ needs.preflight.outputs.version }}" version 2>/dev/null; then
             echo "Version already published, skipping"
           else
             pnpm publish --access public --no-git-checks --tag beta

.github/workflows/release.yml

@@ -85,8 +85,8 @@ jobs:
           provenance: mode=max
           sbom: true
           tags: |
-            keygraph/shannon:${{ needs.preflight.outputs.version }}
-            keygraph/shannon:latest
+            farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}
+            farhoodlabs/trebuchet:latest
 
   build-docker-api:
     name: Build Docker (API)
@@ -118,8 +118,8 @@ jobs:
           provenance: mode=max
           sbom: true
           tags: |
-            keygraph/shannon-api:${{ needs.preflight.outputs.version }}
-            keygraph/shannon-api:latest
+            farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}
+            farhoodlabs/trebuchet-api:latest
 
   sign-docker:
     name: Sign Docker images
@@ -145,25 +145,25 @@ jobs:
       - name: Inspect worker image
         id: inspect-worker
         run: |
-          docker buildx imagetools inspect "keygraph/shannon:${{ needs.preflight.outputs.version }}"
-          DIGEST="sha256:$(docker buildx imagetools inspect --raw "keygraph/shannon:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
+          docker buildx imagetools inspect "farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}"
+          DIGEST="sha256:$(docker buildx imagetools inspect --raw "farhoodlabs/trebuchet:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
           echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
 
       - name: Inspect API image
         id: inspect-api
         run: |
-          docker buildx imagetools inspect "keygraph/shannon-api:${{ needs.preflight.outputs.version }}"
-          DIGEST="sha256:$(docker buildx imagetools inspect --raw "keygraph/shannon-api:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
+          docker buildx imagetools inspect "farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}"
+          DIGEST="sha256:$(docker buildx imagetools inspect --raw "farhoodlabs/trebuchet-api:${{ needs.preflight.outputs.version }}" | sha256sum | cut -d' ' -f1)"
           echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
 
       - name: Install cosign
         uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
       - name: Sign worker image
-        run: cosign sign --yes "keygraph/shannon@${{ steps.inspect-worker.outputs.digest }}"
+        run: cosign sign --yes "farhoodlabs/trebuchet@${{ steps.inspect-worker.outputs.digest }}"
 
       - name: Sign API image
-        run: cosign sign --yes "keygraph/shannon-api@${{ steps.inspect-api.outputs.digest }}"
+        run: cosign sign --yes "farhoodlabs/trebuchet-api@${{ steps.inspect-api.outputs.digest }}"
 
       - name: Verify worker image signature
         run: |
@@ -171,14 +171,14 @@ jobs:
           cosign verify \
             --certificate-oidc-issuer https://token.actions.githubusercontent.com \
             --certificate-identity https://github.com/${{ github.repository }}/.github/workflows/release.yml@${{ github.ref }} \
-            "keygraph/shannon@${{ steps.inspect-worker.outputs.digest }}"
+            "farhoodlabs/trebuchet@${{ steps.inspect-worker.outputs.digest }}"
 
       - name: Verify API image signature
         run: |
           cosign verify \
             --certificate-oidc-issuer https://token.actions.githubusercontent.com \
             --certificate-identity https://github.com/${{ github.repository }}/.github/workflows/release.yml@${{ github.ref }} \
-            "keygraph/shannon-api@${{ steps.inspect-api.outputs.digest }}"
+            "farhoodlabs/trebuchet-api@${{ steps.inspect-api.outputs.digest }}"
 
   publish-npm:
     name: Publish npm
@@ -212,14 +212,14 @@ jobs:
         run: pnpm install --lockfile-only
 
       - name: Build CLI
-        run: pnpm --filter @keygraph/shannon run build
+        run: pnpm --filter @trebuchet/cli run build
 
       - name: Publish npm package
         working-directory: apps/cli
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
-          if npm view "@keygraph/shannon@${{ needs.preflight.outputs.version }}" version 2>/dev/null; then
+          if npm view "@trebuchet/cli@${{ needs.preflight.outputs.version }}" version 2>/dev/null; then
             echo "Version already published, skipping"
           else
             pnpm publish --access public --no-git-checks

.github/workflows/rollback-beta.yml

@@ -44,22 +44,22 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Verify npm package version exists
-        run: npm view "@keygraph/shannon@${{ steps.target.outputs.version }}" version
+        run: npm view "@trebuchet/cli@${{ steps.target.outputs.version }}" version
 
       - name: Show current npm dist-tags
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag ls @keygraph/shannon
+        run: npm dist-tag ls @trebuchet/cli
 
       - name: Move npm beta tag
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag add "@keygraph/shannon@${{ steps.target.outputs.version }}" beta
+        run: npm dist-tag add "@trebuchet/cli@${{ steps.target.outputs.version }}" beta
 
       - name: Show final npm dist-tags
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag ls @keygraph/shannon
+        run: npm dist-tag ls @trebuchet/cli
 
       - name: Write summary
         run: |
@@ -67,5 +67,5 @@ jobs:
             echo "## Rollback beta"
             echo ""
             echo "- Target version: \`${{ steps.target.outputs.version }}\`"
-            echo "- npm package: \`@keygraph/shannon\` (beta tag moved)"
+            echo "- npm package: \`@trebuchet/cli\` (beta tag moved)"
           } >> "$GITHUB_STEP_SUMMARY"

.github/workflows/rollback.yml

@@ -64,12 +64,12 @@ jobs:
           registry-url: https://registry.npmjs.org
 
       - name: Verify npm package version exists
-        run: npm view "@keygraph/shannon@${{ steps.target.outputs.version }}" version
+        run: npm view "@trebuchet/cli@${{ steps.target.outputs.version }}" version
 
       - name: Show current npm dist-tags
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag ls @keygraph/shannon
+        run: npm dist-tag ls @trebuchet/cli
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
@@ -81,7 +81,7 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Verify Docker image tag exists
-        run: docker buildx imagetools inspect "keygraph/shannon:${{ steps.target.outputs.version }}"
+        run: docker buildx imagetools inspect "farhoodlabs/trebuchet:${{ steps.target.outputs.version }}"
 
       - name: Install cosign
         uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
@@ -91,18 +91,18 @@ jobs:
           cosign verify \
             --certificate-oidc-issuer https://token.actions.githubusercontent.com \
             --certificate-identity "https://github.com/${{ github.repository }}/.github/workflows/release.yml@refs/heads/main" \
-            "keygraph/shannon:${{ steps.target.outputs.version }}"
+            "farhoodlabs/trebuchet:${{ steps.target.outputs.version }}"
 
       - name: Move Docker latest
         run: |
           docker buildx imagetools create \
-            --tag "keygraph/shannon:latest" \
-            "keygraph/shannon:${{ steps.target.outputs.version }}"
+            --tag "farhoodlabs/trebuchet:latest" \
+            "farhoodlabs/trebuchet:${{ steps.target.outputs.version }}"
 
       - name: Move npm latest
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag add "@keygraph/shannon@${{ steps.target.outputs.version }}" latest
+        run: npm dist-tag add "@trebuchet/cli@${{ steps.target.outputs.version }}" latest
 
       - name: Mark GitHub release as latest
         env:
@@ -112,10 +112,10 @@ jobs:
       - name: Show final npm dist-tags
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: npm dist-tag ls @keygraph/shannon
+        run: npm dist-tag ls @trebuchet/cli
 
       - name: Verify Docker latest now points to target
-        run: docker buildx imagetools inspect "keygraph/shannon:latest"
+        run: docker buildx imagetools inspect "farhoodlabs/trebuchet:latest"
 
       - name: Write summary
         run: |
@@ -123,7 +123,7 @@ jobs:
             echo "## Rollback latest"
             echo ""
             echo "- Target version: \`${{ steps.target.outputs.version }}\`"
-            echo "- npm package: \`@keygraph/shannon\`"
-            echo "- Docker image: \`keygraph/shannon\`"
+            echo "- npm package: \`@trebuchet/cli\`"
+            echo "- Docker image: \`farhoodlabs/trebuchet\`"
             echo "- GitHub release: \`v${{ steps.target.outputs.version }}\` marked as latest"
           } >> "$GITHUB_STEP_SUMMARY"