@codewalla_india/openspec 1.3.1 → 1.3.2

package/dist/core/artifact-graph/resolver.d.ts

@@ -1,3 +1,4 @@
+import * as fs from 'node:fs';
 import type { SchemaYaml } from './types.js';
 /**
  * Error thrown when loading a schema fails.
@@ -22,6 +23,19 @@ export declare function getUserSchemasDir(): string;
  * @returns The path to the project's schemas directory
  */
 export declare function getProjectSchemasDir(projectRoot: string): string;
+/**
+ * Determines whether a directory entry represents a schema directory candidate.
+ *
+ * Returns true for real directories and for symlinks whose target is a
+ * directory. `fs.Dirent.isDirectory()` reports the raw entry type, so a symlink
+ * (even one pointing at a directory) has `isDirectory() === false`; we
+ * dereference such entries via `fs.statSync` to admit symlinked schema dirs
+ * while still rejecting symlinks-to-files and broken/dangling symlinks.
+ *
+ * @param parentDir - The directory containing the entry
+ * @param entry - The directory entry from `fs.readdirSync(..., { withFileTypes: true })`
+ */
+export declare function isSchemaDir(parentDir: string, entry: fs.Dirent): boolean;
 /**
  * Resolves a schema name to its directory path.
  *

package/dist/core/artifact-graph/resolver.js

@@ -2,6 +2,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getGlobalDataDir } from '../global-config.js';
+import { FileSystemUtils } from '../../utils/file-system.js';
 import { parseSchema, SchemaValidationError } from './schema.js';
 /**
  * Error thrown when loading a schema fails.
@@ -39,6 +40,53 @@ export function getUserSchemasDir() {
 export function getProjectSchemasDir(projectRoot) {
     return path.join(projectRoot, 'openspec', 'schemas');
 }
+/**
+ * Determines whether a directory entry represents a schema directory candidate.
+ *
+ * Returns true for real directories and for symlinks whose target is a
+ * directory. `fs.Dirent.isDirectory()` reports the raw entry type, so a symlink
+ * (even one pointing at a directory) has `isDirectory() === false`; we
+ * dereference such entries via `fs.statSync` to admit symlinked schema dirs
+ * while still rejecting symlinks-to-files and broken/dangling symlinks.
+ *
+ * @param parentDir - The directory containing the entry
+ * @param entry - The directory entry from `fs.readdirSync(..., { withFileTypes: true })`
+ */
+export function isSchemaDir(parentDir, entry) {
+    if (entry.isDirectory()) {
+        return true;
+    }
+    if (entry.isSymbolicLink()) {
+        try {
+            // statSync follows the link; isDirectory() reflects the target type.
+            return fs.statSync(path.join(parentDir, entry.name)).isDirectory();
+        }
+        catch {
+            // Broken symlink (dangling target) — statSync throws; treat as non-dir.
+            return false;
+        }
+    }
+    return false;
+}
+/**
+ * Returns a schema directory only when its schema file stays within that
+ * directory's canonical trust boundary. The directory itself may be a symlink;
+ * external user schema links are an intentionally supported workflow.
+ */
+function getSchemaCandidateDir(schemasDir, name) {
+    const schemaDir = path.join(schemasDir, name);
+    const schemaPath = path.join(schemaDir, 'schema.yaml');
+    if (!fs.existsSync(schemaPath)) {
+        return null;
+    }
+    try {
+        FileSystemUtils.assertPathWithin(schemaDir, schemaPath);
+        return schemaDir;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Resolves a schema name to its directory path.
  *
@@ -55,24 +103,30 @@ export function getProjectSchemasDir(projectRoot) {
  * @returns The path to the schema directory, or null if not found
  */
 export function getSchemaDir(name, projectRoot) {
+    if (name.length === 0 ||
+        name === '.' ||
+        name === '..' ||
+        /[\\/]/u.test(name) ||
+        /^[A-Za-z]:/u.test(name) ||
+        path.posix.isAbsolute(name) ||
+        path.win32.isAbsolute(name)) {
+        return null;
+    }
     // 1. Check project-local directory (if projectRoot provided)
     if (projectRoot) {
-        const projectDir = path.join(getProjectSchemasDir(projectRoot), name);
-        const projectSchemaPath = path.join(projectDir, 'schema.yaml');
-        if (fs.existsSync(projectSchemaPath)) {
+        const projectDir = getSchemaCandidateDir(getProjectSchemasDir(projectRoot), name);
+        if (projectDir) {
             return projectDir;
         }
     }
     // 2. Check user override directory
-    const userDir = path.join(getUserSchemasDir(), name);
-    const userSchemaPath = path.join(userDir, 'schema.yaml');
-    if (fs.existsSync(userSchemaPath)) {
+    const userDir = getSchemaCandidateDir(getUserSchemasDir(), name);
+    if (userDir) {
         return userDir;
     }
     // 3. Check package built-in directory
-    const packageDir = path.join(getPackageSchemasDir(), name);
-    const packageSchemaPath = path.join(packageDir, 'schema.yaml');
-    if (fs.existsSync(packageSchemaPath)) {
+    const packageDir = getSchemaCandidateDir(getPackageSchemasDir(), name);
+    if (packageDir) {
         return packageDir;
     }
     return null;
@@ -134,7 +188,7 @@ export function listSchemas(projectRoot) {
     const packageDir = getPackageSchemasDir();
     if (fs.existsSync(packageDir)) {
         for (const entry of fs.readdirSync(packageDir, { withFileTypes: true })) {
-            if (entry.isDirectory()) {
+            if (isSchemaDir(packageDir, entry)) {
                 const schemaPath = path.join(packageDir, entry.name, 'schema.yaml');
                 if (fs.existsSync(schemaPath)) {
                     schemas.add(entry.name);
@@ -146,7 +200,7 @@ export function listSchemas(projectRoot) {
     const userDir = getUserSchemasDir();
     if (fs.existsSync(userDir)) {
         for (const entry of fs.readdirSync(userDir, { withFileTypes: true })) {
-            if (entry.isDirectory()) {
+            if (isSchemaDir(userDir, entry)) {
                 const schemaPath = path.join(userDir, entry.name, 'schema.yaml');
                 if (fs.existsSync(schemaPath)) {
                     schemas.add(entry.name);
@@ -159,7 +213,7 @@ export function listSchemas(projectRoot) {
         const projectDir = getProjectSchemasDir(projectRoot);
         if (fs.existsSync(projectDir)) {
             for (const entry of fs.readdirSync(projectDir, { withFileTypes: true })) {
-                if (entry.isDirectory()) {
+                if (isSchemaDir(projectDir, entry)) {
                     const schemaPath = path.join(projectDir, entry.name, 'schema.yaml');
                     if (fs.existsSync(schemaPath)) {
                         schemas.add(entry.name);
@@ -184,7 +238,7 @@ export function listSchemasWithInfo(projectRoot) {
         const projectDir = getProjectSchemasDir(projectRoot);
         if (fs.existsSync(projectDir)) {
             for (const entry of fs.readdirSync(projectDir, { withFileTypes: true })) {
-                if (entry.isDirectory()) {
+                if (isSchemaDir(projectDir, entry)) {
                     const schemaPath = path.join(projectDir, entry.name, 'schema.yaml');
                     if (fs.existsSync(schemaPath)) {
                         try {
@@ -209,7 +263,7 @@ export function listSchemasWithInfo(projectRoot) {
     const userDir = getUserSchemasDir();
     if (fs.existsSync(userDir)) {
         for (const entry of fs.readdirSync(userDir, { withFileTypes: true })) {
-            if (entry.isDirectory() && !seenNames.has(entry.name)) {
+            if (isSchemaDir(userDir, entry) && !seenNames.has(entry.name)) {
                 const schemaPath = path.join(userDir, entry.name, 'schema.yaml');
                 if (fs.existsSync(schemaPath)) {
                     try {
@@ -233,7 +287,7 @@ export function listSchemasWithInfo(projectRoot) {
     const packageDir = getPackageSchemasDir();
     if (fs.existsSync(packageDir)) {
         for (const entry of fs.readdirSync(packageDir, { withFileTypes: true })) {
-            if (entry.isDirectory() && !seenNames.has(entry.name)) {
+            if (isSchemaDir(packageDir, entry) && !seenNames.has(entry.name)) {
                 const schemaPath = path.join(packageDir, entry.name, 'schema.yaml');
                 if (fs.existsSync(schemaPath)) {
                     try {

package/dist/core/artifact-graph/types.js

@@ -1,10 +1,28 @@
+import * as path from 'node:path';
 import { z } from 'zod';
+function relativePathSchema(fieldName) {
+    return z
+        .string()
+        .min(1, { error: `${fieldName} is required` })
+        .superRefine((value, ctx) => {
+        const segments = value.split(/[\\/]+/u);
+        const isDrivePath = /^[A-Za-z]:/u.test(value);
+        const isAbsolute = path.posix.isAbsolute(value) || path.win32.isAbsolute(value) || isDrivePath;
+        const escapes = segments.includes('..');
+        if (isAbsolute || escapes || value.includes('\0')) {
+            ctx.addIssue({
+                code: 'custom',
+                message: `${fieldName} must be a relative path inside its allowed directory`,
+            });
+        }
+    });
+}
 // Artifact definition schema
 export const ArtifactSchema = z.object({
     id: z.string().min(1, { error: 'Artifact ID is required' }),
-    generates: z.string().min(1, { error: 'generates field is required' }),
+    generates: relativePathSchema('generates field'),
     description: z.string(),
-    template: z.string().min(1, { error: 'template field is required' }),
+    template: relativePathSchema('template field'),
     instruction: z.string().optional(),
     requires: z.array(z.string()).default([]),
 });
@@ -13,7 +31,7 @@ export const ApplyPhaseSchema = z.object({
     // Artifact IDs that must exist before apply is available
     requires: z.array(z.string()).min(1, { error: 'At least one required artifact' }),
     // Path to file with checkboxes for progress (relative to change dir), or null if no tracking
-    tracks: z.string().nullable().optional(),
+    tracks: relativePathSchema('apply.tracks').nullable().optional(),
     // Custom guidance for the apply phase
     instruction: z.string().optional(),
 });

package/dist/core/available-tools.d.ts

@@ -10,8 +10,8 @@ import { type AIToolOption } from './config.js';
  * the tools that are present.
  *
  * For tools with `detectionPaths`, checks those specific paths (files or
- * directories). Otherwise checks for the tool's `skillsDir` directory at
- * the project root. Only tools with a `skillsDir` property are considered.
+ * directories). Otherwise checks the project's `skillsDir`, or managed skill
+ * files in the user's home directory for a global skill target.
  */
 export declare function getAvailableTools(projectPath: string): AIToolOption[];
 //# sourceMappingURL=available-tools.d.ts.map

package/dist/core/available-tools.js

@@ -7,16 +7,25 @@
 import path from 'path';
 import * as fs from 'fs';
 import { AI_TOOLS } from './config.js';
+import { reconcileSharedSkillTargets } from './shared-skill-target.js';
+import { SKILL_NAMES } from './shared/tool-detection.js';
+import { resolveToolSkillsDir, toolSupportsSkills } from './shared/skill-paths.js';
 /**
  * Scans the project path for AI tool configuration directories and returns
  * the tools that are present.
  *
  * For tools with `detectionPaths`, checks those specific paths (files or
- * directories). Otherwise checks for the tool's `skillsDir` directory at
- * the project root. Only tools with a `skillsDir` property are considered.
+ * directories). Otherwise checks the project's `skillsDir`, or managed skill
+ * files in the user's home directory for a global skill target.
  */
 export function getAvailableTools(projectPath) {
-    return AI_TOOLS.filter((tool) => {
+    const available = AI_TOOLS.filter((tool) => {
+        if (!toolSupportsSkills(tool))
+            return false;
+        if (tool.globalSkillsDir) {
+            const skillsDir = resolveToolSkillsDir(projectPath, tool);
+            return SKILL_NAMES.some((skillName) => fs.existsSync(path.join(skillsDir, skillName, 'SKILL.md')));
+        }
         if (!tool.skillsDir)
             return false;
         if (tool.detectionPaths && tool.detectionPaths.length > 0) {
@@ -39,5 +48,7 @@ export function getAvailableTools(projectPath) {
             return false;
         }
     });
+    const activeProjectTools = new Set(reconcileSharedSkillTargets(projectPath, available.filter((tool) => tool.skillsDir)).map((tool) => tool.value));
+    return available.filter((tool) => tool.globalSkillsDir || activeProjectTools.has(tool.value));
 }
 //# sourceMappingURL=available-tools.js.map

package/dist/core/change-metadata/schema.d.ts

@@ -14,6 +14,8 @@ export declare const ChangeMetadataSchema: z.ZodObject<{
         store: z.ZodString;
         id: z.ZodString;
     }, z.core.$strict>>;
+    skip_specs: z.ZodOptional<z.ZodBoolean>;
+    retire_capabilities: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ChangeMetadata = z.infer<typeof ChangeMetadataSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/core/change-metadata/schema.js

@@ -26,5 +26,18 @@ export const ChangeMetadataSchema = z.object({
     goal: z.string().min(1).optional(),
     affected_areas: z.array(z.string().min(1)).optional(),
     initiative: InitiativeLinkSchema.optional(),
+    // Declares that this change intentionally has no spec deltas (pure refactor,
+    // tooling, or docs work). Validation accepts zero deltas, and the artifact
+    // graph counts artifacts whose `generates` path lives under specs/ as
+    // complete - that path prefix, not the artifact id, is the contract custom
+    // schemas inherit.
+    skip_specs: z.boolean().optional(),
+    // Declares that this change may retire a capability: when its REMOVED entries
+    // take the last requirement a capability has, archive deletes that
+    // capability's main spec instead of aborting on a spec it could not write
+    // (#1302). Required because the deletion is not recoverable from the working
+    // tree - only from git - so it is the author's call, not an inference from the
+    // shape of a delta.
+    retire_capabilities: z.boolean().optional(),
 });
 //# sourceMappingURL=schema.js.map

package/dist/core/change-status-policy.d.ts

@@ -18,7 +18,7 @@ export interface ActionContext {
 }
 export interface ChangeStatusPolicyArtifact {
     id: string;
-    status: 'done' | 'ready' | 'blocked';
+    status: 'done' | 'skipped' | 'ready' | 'blocked';
 }
 export interface ChangeNextStepsInput {
     changeName: string;
@@ -31,7 +31,16 @@ export interface ActionContextInput {
     projectRoot: string;
     artifactIds: string[];
 }
+export interface CanModifyResult {
+    canModify: boolean;
+    reason?: string;
+}
 export declare function summarizePlanningHome(planningHome: PlanningHome | undefined): PlanningHomeSummary | undefined;
 export declare function buildActionContext(input: ActionContextInput): ActionContext;
 export declare function buildNextSteps(input: ChangeNextStepsInput): string[];
+/**
+ * Checks if a change can be modified (pre-apply validation).
+ * Returns false if implementation has started (any tasks are checked off).
+ */
+export declare function canModify(changeName: string, changesDir: string): Promise<CanModifyResult>;
 //# sourceMappingURL=change-status-policy.d.ts.map

package/dist/core/change-status-policy.js

@@ -1,3 +1,5 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
 export function summarizePlanningHome(planningHome) {
     if (!planningHome) {
         return undefined;
@@ -23,13 +25,39 @@ export function buildActionContext(input) {
 export function buildNextSteps(input) {
     const readyArtifact = input.artifactStatuses.find((artifact) => artifact.status === 'ready');
     const steps = [];
+    const storeFlag = input.storeId ? ` --store ${input.storeId}` : '';
     if (readyArtifact) {
-        const storeFlag = input.storeId ? ` --store ${input.storeId}` : '';
         steps.push(`Run openspec instructions ${readyArtifact.id} --change "${input.changeName}"${storeFlag} --json before writing that artifact.`);
     }
     else if (input.allArtifactsComplete) {
-        steps.push('Review planning artifacts; use /opsx:modify to revise or /opsx:apply to implement.');
+        steps.push(`All planning artifacts are complete. Run openspec instructions apply --change "${input.changeName}"${storeFlag} --json to inspect implementation progress.`);
     }
     return steps;
 }
+/**
+ * Checks if a change can be modified (pre-apply validation).
+ * Returns false if implementation has started (any tasks are checked off).
+ */
+export async function canModify(changeName, changesDir) {
+    const tasksPath = join(changesDir, changeName, 'tasks.md');
+    try {
+        const tasksContent = await readFile(tasksPath, 'utf-8');
+        // Check if any tasks are checked off (marked with - [x])
+        const hasCompletedTasks = /- \[x\]/.test(tasksContent);
+        if (hasCompletedTasks) {
+            return {
+                canModify: false,
+                reason: 'Modification is blocked because implementation has started (tasks have been completed). Use /opsx:modify only before /opsx:apply begins.',
+            };
+        }
+        return { canModify: true };
+    }
+    catch (error) {
+        // If tasks.md doesn't exist, allow modification (change hasn't been fully set up yet)
+        if (error.code === 'ENOENT') {
+            return { canModify: true };
+        }
+        throw error;
+    }
+}
 //# sourceMappingURL=change-status-policy.js.map

package/dist/core/command-generation/adapters/amazon-q.d.ts

@@ -8,6 +8,10 @@ import type { ToolCommandAdapter } from '../types.js';
  * Amazon Q adapter for command generation.
  * File path: .amazonq/prompts/opsx-<id>.md
  * Frontmatter: description
+ *
+ * Amazon Q surfaces these files as its prompt library rather than as slash
+ * commands: the user types `@opsx-propose`, not `/opsx-propose`.
+ * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/command-line-prompts.html
  */
 export declare const amazonQAdapter: ToolCommandAdapter;
 //# sourceMappingURL=amazon-q.d.ts.map

package/dist/core/command-generation/adapters/amazon-q.js

@@ -4,22 +4,28 @@
  * Formats commands for Amazon Q Developer following its frontmatter specification.
  */
 import path from 'path';
+import { escapeYamlValue } from '../yaml.js';
 /**
  * Amazon Q adapter for command generation.
  * File path: .amazonq/prompts/opsx-<id>.md
  * Frontmatter: description
+ *
+ * Amazon Q surfaces these files as its prompt library rather than as slash
+ * commands: the user types `@opsx-propose`, not `/opsx-propose`.
+ * https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/command-line-prompts.html
  */
 export const amazonQAdapter = {
     toolId: 'amazon-q',
     getFilePath(commandId) {
         return path.join('.amazonq', 'prompts', `opsx-${commandId}.md`);
     },
+    invocationPrefix: '@',
     formatFile(content) {
-        return `---
-description: ${content.description}
----
-
-${content.body}
+        return `---
+description: ${escapeYamlValue(content.description)}
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/antigravity.js

@@ -4,6 +4,7 @@
  * Formats commands for Antigravity following its frontmatter specification.
  */
 import path from 'path';
+import { escapeYamlValue } from '../yaml.js';
 /**
  * Antigravity adapter for command generation.
  * File path: .agent/workflows/opsx-<id>.md
@@ -15,11 +16,11 @@ export const antigravityAdapter = {
         return path.join('.agent', 'workflows', `opsx-${commandId}.md`);
     },
     formatFile(content) {
-        return `---
-description: ${content.description}
----
-
-${content.body}
+        return `---
+description: ${escapeYamlValue(content.description)}
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/auggie.js

@@ -4,6 +4,7 @@
  * Formats commands for Auggie following its frontmatter specification.
  */
 import path from 'path';
+import { escapeYamlValue } from '../yaml.js';
 /**
  * Auggie adapter for command generation.
  * File path: .augment/commands/opsx-<id>.md
@@ -15,12 +16,12 @@ export const auggieAdapter = {
         return path.join('.augment', 'commands', `opsx-${commandId}.md`);
     },
     formatFile(content) {
-        return `---
-description: ${content.description}
-argument-hint: command arguments
----
-
-${content.body}
+        return `---
+description: ${escapeYamlValue(content.description)}
+argument-hint: command arguments
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/bob.d.ts

@@ -8,7 +8,11 @@ import type { ToolCommandAdapter } from '../types.js';
 /**
  * Bob Shell adapter for command generation.
  * File path: .bob/commands/opsx-<id>.md
- * Frontmatter: description, argument-hint
+ * Frontmatter: description
+ *
+ * Bob uses the filename (minus .md) as the slash command name, so
+ * opsx-propose.md → /opsx-propose. generateCommand rewrites the body's
+ * command references to that form before this adapter formats it.
  */
 export declare const bobAdapter: ToolCommandAdapter;
 //# sourceMappingURL=bob.d.ts.map

package/dist/core/command-generation/adapters/bob.js

@@ -5,12 +5,15 @@
  * Commands are stored in .bob/commands/ directory.
  */
 import path from 'path';
-import { transformToHyphenCommands } from '../../../utils/command-references.js';
 import { escapeYamlValue } from '../yaml.js';
 /**
  * Bob Shell adapter for command generation.
  * File path: .bob/commands/opsx-<id>.md
- * Frontmatter: description, argument-hint
+ * Frontmatter: description
+ *
+ * Bob uses the filename (minus .md) as the slash command name, so
+ * opsx-propose.md → /opsx-propose. generateCommand rewrites the body's
+ * command references to that form before this adapter formats it.
  */
 export const bobAdapter = {
     toolId: 'bob',
@@ -18,14 +21,12 @@ export const bobAdapter = {
         return path.join('.bob', 'commands', `opsx-${commandId}.md`);
     },
     formatFile(content) {
-        // Transform command references from colon to hyphen format for Bob
-        const transformedBody = transformToHyphenCommands(content.body);
-        return `---
-description: ${escapeYamlValue(content.description)}
-argument-hint: command arguments
----
-
-${transformedBody}
+        return `---
+description: ${escapeYamlValue(content.description)}
+argument-hint: command arguments
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/claude.d.ts

@@ -7,7 +7,7 @@ import type { ToolCommandAdapter } from '../types.js';
 /**
  * Claude Code adapter for command generation.
  * File path: .claude/commands/opsx/<id>.md
- * Frontmatter: name, description, category, tags
+ * Frontmatter: name, description, allowed-tools, category, tags
  */
 export declare const claudeAdapter: ToolCommandAdapter;
 //# sourceMappingURL=claude.d.ts.map

package/dist/core/command-generation/adapters/claude.js

@@ -4,18 +4,12 @@
  * Formats commands for Claude Code following its frontmatter specification.
  */
 import path from 'path';
-import { escapeYamlValue } from '../yaml.js';
-/**
- * Formats a tags array as a YAML array with proper escaping.
- */
-function formatTagsArray(tags) {
-    const escapedTags = tags.map((tag) => escapeYamlValue(tag));
-    return `[${escapedTags.join(', ')}]`;
-}
+import { escapeYamlValue, formatTagsArray } from '../yaml.js';
+import { OPENSPEC_CLI_ALLOWED_TOOLS } from '../../shared/allowed-tools.js';
 /**
  * Claude Code adapter for command generation.
  * File path: .claude/commands/opsx/<id>.md
- * Frontmatter: name, description, category, tags
+ * Frontmatter: name, description, allowed-tools, category, tags
  */
 export const claudeAdapter = {
     toolId: 'claude',
@@ -23,14 +17,15 @@ export const claudeAdapter = {
         return path.join('.claude', 'commands', 'opsx', `${commandId}.md`);
     },
     formatFile(content) {
-        return `---
-name: ${escapeYamlValue(content.name)}
-description: ${escapeYamlValue(content.description)}
-category: ${escapeYamlValue(content.category)}
-tags: ${formatTagsArray(content.tags)}
----
-
-${content.body}
+        return `---
+name: ${escapeYamlValue(content.name)}
+description: ${escapeYamlValue(content.description)}
+allowed-tools: ${OPENSPEC_CLI_ALLOWED_TOOLS}
+category: ${escapeYamlValue(content.category)}
+tags: ${formatTagsArray(content.tags)}
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/cline.js

@@ -16,11 +16,11 @@ export const clineAdapter = {
         return path.join('.clinerules', 'workflows', `opsx-${commandId}.md`);
     },
     formatFile(content) {
-        return `# ${content.name}
-
-${content.description}
-
-${content.body}
+        return `# ${content.name}
+
+${content.description}
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/codebuddy.js

@@ -4,6 +4,7 @@
  * Formats commands for CodeBuddy following its frontmatter specification.
  */
 import path from 'path';
+import { escapeYamlValue } from '../yaml.js';
 /**
  * CodeBuddy adapter for command generation.
  * File path: .codebuddy/commands/opsx/<id>.md
@@ -15,13 +16,13 @@ export const codebuddyAdapter = {
         return path.join('.codebuddy', 'commands', 'opsx', `${commandId}.md`);
     },
     formatFile(content) {
-        return `---
-name: ${content.name}
-description: "${content.description}"
-argument-hint: "[command arguments]"
----
-
-${content.body}
+        return `---
+name: ${escapeYamlValue(content.name)}
+description: ${escapeYamlValue(content.description)}
+argument-hint: "[command arguments]"
+---
+
+${content.body}
 `;
     },
 };

package/dist/core/command-generation/adapters/continue.js

@@ -4,6 +4,7 @@
  * Formats commands for Continue following its .prompt specification.
  */
 import path from 'path';
+import { escapeYamlValue } from '../yaml.js';
 /**
  * Continue adapter for command generation.
  * File path: .continue/prompts/opsx-<id>.prompt
@@ -15,13 +16,13 @@ export const continueAdapter = {
         return path.join('.continue', 'prompts', `opsx-${commandId}.prompt`);
     },
     formatFile(content) {
-        return `---
-name: opsx-${content.id}
-description: ${content.description}
-invokable: true
----
-
-${content.body}
+        return `---
+name: ${escapeYamlValue(`opsx-${content.id}`)}
+description: ${escapeYamlValue(content.description)}
+invokable: true
+---
+
+${content.body}
 `;
     },
 };