@golden-frijoles/kit 0.33.0 → 0.34.0

package/dist/lib/cross-agent-cli.mjs

@@ -54,10 +54,10 @@ export const AGENT_BIN = {
 // Harmless here since AGY_MODEL/AGY_FALLBACK_MODEL below are always valid, listed model names (checked via
 // `agy models`), but it means a future typo in either constant would silently review with the WRONG model
 // instead of failing loud — watch for that if either constant is ever edited.
-// agy-doctor: last verified 2026-10-06 against 1.3.0.
+// agy-doctor: last verified 2026-10-07 against 1.3.1.
 //   ^ machine-managed marker — `node scripts/cross-agent-doctor.mjs agy --fix` rewrites it (with the constant
 //   below) after a green live contract probe. Don't hand-edit the marker's shape.
-export const AGY_PINNED = '1.3.0';
+export const AGY_PINNED = '1.3.1';
 
 // agy's `--print` mode prints NOTHING unless `--model` names a model — and, crucially, it ALSO prints
 // nothing (exit 0, empty stdout — the error lands only in agy's log, see --log-file) when the model is

package/dist/lib/roadmap-contract.mjs

@@ -140,6 +140,25 @@ export function validateResultFields(fm) {
   return offenses;
 }
 
+// one-epic-page D11 — the epic's flag, decided at groom Stage 6b and copied into the README by the scaffold. The SDK's
+// flag-key grammar (`FLAG_KEY` in apps/web/lib/flag-admin-operation.ts). Optional: `flag_key: null` (no flag) is the
+// default and never an error; a value that is not a key is named, never pushed (the extract sends null for it).
+export const FLAG_KEY_RE = /^[a-z][a-z0-9_.-]{0,127}$/;
+
+/** `flag_key:` → offenses (`contract-flag-key-invalid`). Absent or null is fine. */
+export function validateFlagKey(fm) {
+  const v = fm.flag_key;
+  if (v === undefined || v === null) return [];
+  // The string "null" fits the grammar but means "no flag": named here as the push schema refuses it (codex, #297).
+  if (typeof v === 'string' && v !== 'null' && FLAG_KEY_RE.test(v)) return [];
+  return [
+    {
+      rule: 'contract-flag-key-invalid',
+      detail: `flag_key: "${v}" is not a flag key (a lowercase letter, then a-z 0-9 _ . -; at most 128) — or null`,
+    },
+  ];
+}
+
 // live-build-view D10 — `locked_at:` is stamped by `scripts/epic-phase.mjs lock` when the architecture lock is written;
 // the build view reads its absence as "Locking architecture". Optional (no epic before it has one), an ISO date-time
 // string when present: the command writes `"2026-10-03T20:34:34Z"` (quoted, so the frontmatter parser keeps the colons).
@@ -355,6 +374,7 @@ export function validateEpicFrontmatter(parsed, ctx = {}) {
   }
   offenses.push(...validateFinopsFields(fm));
   offenses.push(...validateResultFields(fm));
+  offenses.push(...validateFlagKey(fm));
   offenses.push(...validateLockedAt(fm));
   if (isInt(fm.sprints_total) && isInt(ctx.sprintCount) && fm.sprints_total !== ctx.sprintCount)
     offenses.push({

package/dist/roadmap-extract.mjs

@@ -73,6 +73,7 @@ import {
   FINOPS_NUMERIC_FIELDS,
   RESULT_DAY_FIELDS,
   RESULT_FIELDS,
+  FLAG_KEY_RE,
   RESULT_NUMERIC_FIELDS,
   VERDICTS,
 } from './lib/roadmap-contract.mjs';
@@ -161,6 +162,21 @@ export function resultFields(fm, shippedAt) {
   return out;
 }
 
+/**
+ * one-epic-page D11 — an epic's flag: `flag_key` off its README frontmatter (the SDK's key grammar, else null — the
+ * contract names a bad one) and `flag_note`, the README's own `**Flag:** …` line, which is where an epic with no flag
+ * says why. Both null when absent; nothing is inferred from prose about a flag the frontmatter does not name.
+ */
+export function flagFields(fm, readme) {
+  const raw = typeof fm.flag_key === 'string' ? fm.flag_key.trim() : '';
+  // A QUOTED `flag_key: "null"` (or `~`) arrives as a string, and "null" fits the key grammar — so the blank
+  // spellings are refused before the pattern is asked. (Unquoted `null` is already null from this file's reader.)
+  const blank = raw === '' || raw === 'null' || raw === '~';
+  const line = /^\*\*Flag:\*\*[ \t]*(.+)$/m.exec(readme ?? '');
+  const note = line ? line[1].replace(/[*`]/g, '').trim().slice(0, 280) : '';
+  return { flag_key: !blank && FLAG_KEY_RE.test(raw) ? raw : null, flag_note: note || null };
+}
+
 function parseFrontmatter(md) {
   if (!md.startsWith('---')) return {};
   const end = md.indexOf('\n---', 3);
@@ -583,6 +599,7 @@ export function buildRows({
       }
     }
 
+    const readme = readFileSync(join(e.path, 'README.md'), 'utf8');
     // Epic row
     rows.push({
       name: epicTitle(e.path, e.slug),
@@ -605,7 +622,7 @@ export function buildRows({
       build_order_num: buildOrderNum(buildOrder),
       doc_link: readmePath,
       epic_slug: null,
-      goal: firstParagraph(readFileSync(join(e.path, 'README.md'), 'utf8'), ['Why', 'Goal', 'Problem']),
+      goal: firstParagraph(readme, ['Why', 'Goal', 'Problem']),
       sprints: boardSprints.map((sp) => ({ n: sp.n, title: sp.title, done: sp.done, total: sp.total })),
       links: {
         readme: readmePath,
@@ -618,6 +635,7 @@ export function buildRows({
       shipped_at: stage === 'Shipped' ? statusDay : null,
       ...finopsFields(epicFm),
       ...resultFields(epicFm, stage === 'Shipped' ? statusDay : null),
+      ...flagFields(epicFm, readme),
     });
 
     // Sprint rows (one per sprint-N.md), related to the Epic by slug. boardSprints already carries

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@golden-frijoles/kit",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "description": "The scripts the Golden Frijoles skills run, packaged so they work in any repo: planning, build-order, reporting and verification rails. Zero dependencies.",
   "type": "module",
   "bin": {