@gregiteen/ssss-cli 0.9.5 → 0.9.7

package/CHANGELOG.md

@@ -7,6 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.7] - 2026-09-27
+### Fixed
+- Frontmatter kept number-like strings as text only until the next patch. The
+  serializer wrote `"07003"` unquoted and the parser read any all-digit value
+  as an integer, so a zip code or license number with a leading zero lost it
+  (`07003` became `7003`) once any other field of the document was patched,
+  and YAML 1.1 readers such as PyYAML read the unquoted value as octal
+  (`07003` → 3587).
+
+### Behavior changes hosts should check
+- Strings that would read back as a number, boolean or null (`"07003"`,
+  `"00123"`, `"1.10"`, `"true"`, `"null"`) are now written double-quoted.
+- An unquoted scalar with a leading zero (`zip: 07003`) now parses as the
+  string `"07003"`, not an integer; plain integers (`0`, `42`, `-5`) are
+  unchanged. Documents already rewritten without the zero cannot be recovered
+  by the library.
+- New conformance check: number-like strings survive repeated patches.
+
+## [0.9.6] - 2026-09-25
+### Changed
+- The push skill describes this repo's real release path. `/push` is always a
+  full release (bump, preflight, commit, push, tag, npm publish, verify),
+  including for docs-only changes. The droplet and `production`-branch deploy
+  section, which came from another repo, is gone, and files are staged by name
+  instead of `git add .`.
+
+### Added
+- `skills/push/scripts/verify-publish.mjs` waits out npm's propagation delay,
+  then confirms the published `gitHead` matches the release tag and that
+  `latest` points at the new version.
+
 ## [0.9.5] - 2026-09-25
 ### Changed
 - The packaged CHANGELOG now lists the 0.9.4 behavior changes that hosts should

package/VERSION

@@ -1 +1 @@
-0.9.5
+0.9.7

package/conformance/reference-bundle.ucw.json

@@ -106,7 +106,7 @@
     "file_count": 14,
     "provenance": {
       "content_hash": "sha256:7febd673938a3dc04c068e0bf08097a9783c09e612606d2df9a4db8dcb8907f5",
-      "exporter": "@gregiteen/ssss-cli@0.9.5"
+      "exporter": "@gregiteen/ssss-cli@0.9.7"
     }
   },
   "files": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gregiteen/ssss-cli",
-  "version": "0.9.5",
+  "version": "0.9.7",
   "description": "CLI tools and the reference engine for the Structured Semantic Syntax System",
   "main": "src/engine.mjs",
   "exports": {

package/scripts/cmd-new.mjs

@@ -121,7 +121,9 @@ export async function run(argv) {
     }
     if (withTR) {
       log('\nInitializing Total Recall memory vault…');
-      tryRun('npx', ['-p', 'total-recall-brain', 'total-recall', 'init'], root);
+      if (!tryRun('npx', ['-p', 'total-recall-brain', 'total-recall', 'init', '--project'], root)) {
+        die('scaffolded and installed, but project Total Recall init failed. Run `npx total-recall init --project` in the new directory.', 1);
+      }
     }
     log('\nVerifying the toolchain (npm test)…');
     if (!tryRun('npm', ['test'], root)) {
@@ -135,7 +137,7 @@ export async function run(argv) {
   console.log(`  cd ${path.relative(process.cwd(), root) || '.'}`);
   if (!flags.install) {
     console.log('  npm install');
-    if (withTR) console.log('  npx -p total-recall-brain total-recall init   # seed the memory vault');
+    if (withTR) console.log('  npx -p total-recall-brain total-recall init --project   # seed this project memory vault');
   }
   console.log('  npm test                       # replays the canonical fixtures + round-trips the vault');
   console.log('  npx ssss export vault --profile sale --out dist/bundle.ucw.json');
@@ -226,7 +228,7 @@ ${withTR ? `
 This project is also wired for [Total Recall](https://github.com/gregiteen/total-recall):
 
 \`\`\`bash
-npx -p total-recall-brain total-recall init      # seed .agent/skills/total-recall
+npx -p total-recall-brain total-recall init --project   # seed this project memory vault
 npx total-recall remember fact "..."             # persist a fact
 npx total-recall recall "..."                    # semantic recall
 \`\`\`

package/scripts/cmd-registry.mjs

@@ -6,7 +6,7 @@ import { parseArgs, die, wantsHelp } from './lib/cli.mjs';
 
 const HELP = 'Usage: ssss registry compose|lock|verify [--extension <file> ...] [--lock <file>] [--out <file>]';
 const read = (file) => JSON.parse(fs.readFileSync(path.resolve(file), 'utf8'));
-function serializable(set) { return { primitives: Object.fromEntries(set.primitives), aliases: Object.fromEntries(set.aliases), extension_versions: Object.fromEntries(set.extensionVersions) }; }
+function serializable(set) { return { primitives: Object.fromEntries(set.types), aliases: Object.fromEntries(set.aliases), extension_versions: Object.fromEntries(set.extensionVersions) }; }
 export async function run(argv) {
   if (wantsHelp(argv)) { console.log(HELP); return; }
   const verb = argv[0];

package/scripts/conformance.mjs

@@ -404,6 +404,29 @@ async function runOperationContractRegressionConformance() {
       patchRes.success === true && Array.isArray(patchedData.triggers) && patchedData.triggers[0]?.cron === '0 8 * * *',
       patched);
 
+    const codeRes = await engine.processOperation({
+      type: 'patch',
+      idempotency_key: 'leading-zero-patch',
+      workspace_id: 'ws-reg',
+      path: workflowPath,
+      actor: { role: 'system' },
+      patches: { zip: '07003', license: '00123', flag: 'true' },
+    }, vault);
+    await engine.processOperation({
+      type: 'patch',
+      idempotency_key: 'leading-zero-repatch',
+      workspace_id: 'ws-reg',
+      path: workflowPath,
+      actor: { role: 'system' },
+      patches: { description: 'A later, unrelated patch.' },
+    }, vault);
+    const codeText = fs.readFileSync(path.join(vault, workflowPath), 'utf8');
+    const codeData = parseDocument(codeText).data;
+    check('number-like strings (zip 07003, license 00123, "true") survive repeated patches',
+      codeRes.success === true && codeData.zip === '07003' && codeData.license === '00123'
+        && codeData.flag === 'true' && codeText.includes('zip: "07003"'),
+      codeText);
+
     const leaseTarget = 'rules/leased.md';
     const leasePathKey = crypto.createHash('sha256').update(leaseTarget).digest('hex');
     const leaseDir = path.join(leaseStore, 'ws-reg');
@@ -728,6 +751,42 @@ async function runCliSmokeConformance() {
       typeof lockOut.integrity === 'string' && lockOut.integrity.startsWith('sha256:'),
       JSON.stringify(lockOut));
 
+    const composed = JSON.parse(execFileSync('node', [
+      path.join(__dirname, 'ssss.mjs'),
+      'registry', 'compose',
+      '--extension', extensionPath,
+    ], { encoding: 'utf8' }));
+    check('ssss registry compose includes core and extension primitives',
+      !!composed.primitives.rule && composed.aliases['ssss:rule'] === 'rule' &&
+      composed.primitives[primitiveOut.primitive_id]?.registry === 'acme',
+      JSON.stringify(composed));
+
+    const fakeBin = path.join(tmp, 'bin');
+    const calls = path.join(tmp, 'install-calls.txt');
+    fs.mkdirSync(fakeBin);
+    for (const command of ['npm', 'npx']) {
+      const executable = path.join(fakeBin, command);
+      fs.writeFileSync(executable, '#!/bin/sh\nprintf "%s|%s|%s\\n" "$PWD" "$0" "$*" >> "$SSSS_TEST_CALLS"\n');
+      fs.chmodSync(executable, 0o755);
+    }
+    const trStarter = path.join(tmp, 'with-total-recall');
+    execFileSync('node', [path.join(__dirname, 'ssss.mjs'), 'new', trStarter,
+      '--with-total-recall', '--install', '--no-git'], {
+      stdio: 'ignore',
+      env: { ...process.env, PATH: `${fakeBin}${path.delimiter}${process.env.PATH}`, SSSS_TEST_CALLS: calls },
+    });
+    const installCalls = fs.readFileSync(calls, 'utf8').trim().split('\n');
+    const normalizedCalls = installCalls.map((line) => {
+      const [cwd, executable, args] = line.split('|');
+      return `${fs.realpathSync(cwd)}|${path.basename(executable)}|${args}`;
+    });
+    const realStarter = fs.realpathSync(trStarter);
+    check('ssss new initializes only the new project Total Recall brain',
+      normalizedCalls.some((line) => line === `${realStarter}|npx|-p total-recall-brain total-recall init --project`) &&
+      normalizedCalls.some((line) => line === `${realStarter}|npm|install --no-audit --no-fund`) &&
+      normalizedCalls.some((line) => line === `${realStarter}|npm|test`),
+      JSON.stringify(installCalls));
+
     const adapterOut = JSON.parse(execFileSync('node', [
       path.join(__dirname, 'ssss.mjs'),
       'adapter', 'conformance',

package/src/frontmatter.mjs

@@ -36,7 +36,8 @@ function coerce(raw) {
   if (v === 'true') return true;
   if (v === 'false') return false;
   if (v === 'null' || v === '~') return null;
-  if (/^-?\d+$/.test(v)) return parseInt(v, 10);
+  // A leading zero (zip 07003, license 00123) marks a code, not a number.
+  if (/^-?(0|[1-9]\d*)$/.test(v)) return parseInt(v, 10);
   if (/^-?\d*\.\d+$/.test(v)) return parseFloat(v);
   if (v.startsWith('[') && v.endsWith(']')) {
     const inner = v.slice(1, -1).trim();
@@ -200,12 +201,18 @@ export function parseDocument(content) {
   return { data: parseFrontmatter(fm), body };
 }
 
+const LOOKS_TYPED =
+  /^(?:[-+]?\d+(?:\.\d*)?(?:[eE][-+]?\d+)?|[-+]?\.\d+|0[xXoObB][0-9a-fA-F_]+|true|false|yes|no|on|off|null|~|\.inf|\.nan)$/i;
+
 function serializeValue(v) {
   if (v === null) return 'null';
   if (typeof v === 'boolean' || typeof v === 'number') return String(v);
   if (Array.isArray(v)) return `[${v.map((x) => serializeValue(x)).join(', ')}]`;
   const s = String(v);
   if (s === '' || /[:#\[\]{}"'\\\n\r\t|>]/.test(s) || /^\s|\s$/.test(s)) return JSON.stringify(s);
+  // A string that would read back as a number, boolean or null stays quoted,
+  // so "07003" and "true" survive a round trip (here and in YAML 1.1 readers).
+  if (LOOKS_TYPED.test(s)) return JSON.stringify(s);
   return s;
 }