@luanpdd/kit-mcp 1.29.0 → 1.30.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (331) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +168 -168
  3. package/gates/agent-no-recursive-dispatch.md +82 -82
  4. package/kit/COMANDOS.md +138 -138
  5. package/kit/README.md +76 -76
  6. package/kit/agents/advisor-researcher.md +106 -106
  7. package/kit/agents/assumptions-analyzer.md +107 -107
  8. package/kit/agents/audit-log-implementer.md +313 -313
  9. package/kit/agents/auditor-consistencia-isolamento.md +413 -413
  10. package/kit/agents/b2b-saas-architect.md +156 -156
  11. package/kit/agents/cascading-failures-auditor.md +298 -298
  12. package/kit/agents/codebase-mapper.md +768 -768
  13. package/kit/agents/crm-pipeline-implementer.md +256 -256
  14. package/kit/agents/debugger.md +813 -813
  15. package/kit/agents/detector-tenant-quente.md +337 -337
  16. package/kit/agents/evolution-go-integrator.md +200 -200
  17. package/kit/agents/example-reviewer.md +21 -21
  18. package/kit/agents/executor.md +564 -564
  19. package/kit/agents/integration-checker.md +200 -200
  20. package/kit/agents/invite-flow-implementer.md +189 -189
  21. package/kit/agents/legacy-characterizer.md +368 -368
  22. package/kit/agents/lgpd-compliance-auditor.md +295 -295
  23. package/kit/agents/multi-tenant-isolation-auditor.md +253 -253
  24. package/kit/agents/multi-tenant-rls-writer.md +340 -340
  25. package/kit/agents/nyquist-auditor.md +178 -178
  26. package/kit/agents/observability-coverage-auditor.md +315 -315
  27. package/kit/agents/org-onboarding-implementer.md +223 -223
  28. package/kit/agents/payload-capture-instrumenter.md +273 -273
  29. package/kit/agents/phase-researcher.md +696 -696
  30. package/kit/agents/plan-checker.md +272 -272
  31. package/kit/agents/planner.md +922 -922
  32. package/kit/agents/project-researcher.md +652 -652
  33. package/kit/agents/refactor-safety-auditor.md +404 -404
  34. package/kit/agents/research-synthesizer.md +245 -245
  35. package/kit/agents/roadmapper.md +677 -677
  36. package/kit/agents/seam-finder.md +359 -359
  37. package/kit/agents/shotgun-surgery-detector.md +349 -349
  38. package/kit/agents/supabase-branching-architect.md +562 -562
  39. package/kit/agents/supabase-cicd-pipeline-implementer.md +777 -777
  40. package/kit/agents/supabase-column-privileges-writer.md +399 -399
  41. package/kit/agents/supabase-edge-fn-tester.md +287 -0
  42. package/kit/agents/supabase-edge-fn-writer.md +239 -210
  43. package/kit/agents/supabase-migration-writer.md +385 -385
  44. package/kit/agents/supabase-rbac-implementer.md +392 -392
  45. package/kit/agents/supabase-realtime-implementer.md +363 -267
  46. package/kit/agents/supabase-rls-hardener.md +521 -521
  47. package/kit/agents/supabase-rls-writer.md +323 -323
  48. package/kit/agents/supabase-roles-implementer.md +355 -355
  49. package/kit/agents/super-admin-implementer.md +281 -281
  50. package/kit/agents/ui-auditor.md +437 -437
  51. package/kit/agents/ui-checker.md +302 -302
  52. package/kit/agents/ui-researcher.md +355 -355
  53. package/kit/agents/user-profiler.md +175 -175
  54. package/kit/agents/validador-evolucao-schema.md +335 -335
  55. package/kit/agents/verifier.md +728 -728
  56. package/kit/commands/adicionar-backlog.md +75 -75
  57. package/kit/commands/adicionar-fase.md +42 -42
  58. package/kit/commands/adicionar-tarefa.md +45 -45
  59. package/kit/commands/adicionar-testes.md +41 -41
  60. package/kit/commands/ajuda.md +21 -21
  61. package/kit/commands/atualizar.md +37 -37
  62. package/kit/commands/auditar-cascading.md +111 -111
  63. package/kit/commands/auditar-marco.md +179 -179
  64. package/kit/commands/auditar-observabilidade-cobertura.md +183 -183
  65. package/kit/commands/auditar-refactor.md +219 -219
  66. package/kit/commands/auditar-release.md +109 -109
  67. package/kit/commands/auditar-uat.md +23 -23
  68. package/kit/commands/autonomo.md +40 -40
  69. package/kit/commands/branch-pr.md +24 -24
  70. package/kit/commands/burn-rate-status.md +408 -408
  71. package/kit/commands/capturar-payloads.md +193 -193
  72. package/kit/commands/caracterizar.md +212 -212
  73. package/kit/commands/concluir-marco.md +247 -247
  74. package/kit/commands/configuracoes.md +36 -36
  75. package/kit/commands/dados-distribuidos.md +188 -188
  76. package/kit/commands/definir-perfil.md +10 -10
  77. package/kit/commands/depurar.md +190 -190
  78. package/kit/commands/detectar-duplicacao.md +197 -197
  79. package/kit/commands/discutir-fase.md +131 -131
  80. package/kit/commands/encontrar-seams.md +136 -136
  81. package/kit/commands/entrar-discord.md +17 -17
  82. package/kit/commands/estatisticas.md +18 -18
  83. package/kit/commands/example-greeting.md +33 -33
  84. package/kit/commands/executar-fase.md +58 -58
  85. package/kit/commands/expresso.md +56 -56
  86. package/kit/commands/fase-ui.md +34 -34
  87. package/kit/commands/fazer.md +57 -57
  88. package/kit/commands/fio.md +125 -125
  89. package/kit/commands/fluxos-trabalho.md +64 -64
  90. package/kit/commands/forense.md +176 -176
  91. package/kit/commands/gerenciador.md +38 -38
  92. package/kit/commands/inserir-fase.md +31 -31
  93. package/kit/commands/legacy.md +263 -263
  94. package/kit/commands/limpeza.md +17 -17
  95. package/kit/commands/listar-hipoteses-fase.md +45 -45
  96. package/kit/commands/listar-workspaces.md +18 -18
  97. package/kit/commands/load-shedding.md +117 -117
  98. package/kit/commands/mapear-codebase.md +70 -70
  99. package/kit/commands/multi-tenant.md +163 -163
  100. package/kit/commands/nota.md +33 -33
  101. package/kit/commands/novo-marco.md +43 -43
  102. package/kit/commands/novo-projeto.md +41 -41
  103. package/kit/commands/novo-workspace.md +43 -43
  104. package/kit/commands/pausar-trabalho.md +37 -37
  105. package/kit/commands/perfil-usuario.md +45 -45
  106. package/kit/commands/pesquisar-fase.md +195 -195
  107. package/kit/commands/planejar-fase.md +67 -67
  108. package/kit/commands/planejar-lacunas.md +33 -33
  109. package/kit/commands/plantar-ideia.md +25 -25
  110. package/kit/commands/progresso.md +24 -24
  111. package/kit/commands/proximo.md +30 -30
  112. package/kit/commands/publicar.md +490 -490
  113. package/kit/commands/rapido.md +35 -35
  114. package/kit/commands/reaplicar-patches.md +124 -124
  115. package/kit/commands/refactor-seguro.md +321 -321
  116. package/kit/commands/relatorio-sessao.md +19 -19
  117. package/kit/commands/remover-fase.md +31 -31
  118. package/kit/commands/remover-workspace.md +26 -26
  119. package/kit/commands/resumo-marco.md +50 -50
  120. package/kit/commands/retomar-trabalho.md +40 -40
  121. package/kit/commands/revisar-backlog.md +60 -60
  122. package/kit/commands/revisar-ui.md +32 -32
  123. package/kit/commands/revisar.md +37 -37
  124. package/kit/commands/saude.md +21 -21
  125. package/kit/commands/setup-notion.md +93 -93
  126. package/kit/commands/storytelling.md +179 -179
  127. package/kit/commands/supabase.md +30 -7
  128. package/kit/commands/sync-main.md +68 -68
  129. package/kit/commands/validar-fase.md +35 -35
  130. package/kit/commands/verificar-tarefas.md +44 -44
  131. package/kit/commands/verificar-trabalho.md +64 -64
  132. package/kit/file-manifest.json +15 -8
  133. package/kit/framework/bin/lib/commands.cjs +959 -959
  134. package/kit/framework/bin/lib/config.cjs +442 -442
  135. package/kit/framework/bin/lib/core.cjs +1230 -1230
  136. package/kit/framework/bin/lib/frontmatter.cjs +336 -336
  137. package/kit/framework/bin/lib/init.cjs +1442 -1442
  138. package/kit/framework/bin/lib/milestone.cjs +252 -252
  139. package/kit/framework/bin/lib/model-profiles.cjs +68 -68
  140. package/kit/framework/bin/lib/phase.cjs +888 -888
  141. package/kit/framework/bin/lib/profile-output.cjs +952 -952
  142. package/kit/framework/bin/lib/profile-pipeline.cjs +539 -539
  143. package/kit/framework/bin/lib/roadmap.cjs +329 -329
  144. package/kit/framework/bin/lib/security.cjs +382 -382
  145. package/kit/framework/bin/lib/state.cjs +1031 -1031
  146. package/kit/framework/bin/lib/template.cjs +222 -222
  147. package/kit/framework/bin/lib/uat.cjs +282 -282
  148. package/kit/framework/bin/lib/verify.cjs +888 -888
  149. package/kit/framework/bin/lib/workstream.cjs +491 -491
  150. package/kit/framework/bin/tools.cjs +918 -918
  151. package/kit/framework/commands/workstreams.md +63 -63
  152. package/kit/framework/references/checkpoints.md +778 -778
  153. package/kit/framework/references/continuation-format.md +249 -249
  154. package/kit/framework/references/decimal-phase-calculation.md +64 -64
  155. package/kit/framework/references/git-integration.md +295 -295
  156. package/kit/framework/references/git-planning-commit.md +38 -38
  157. package/kit/framework/references/model-profile-resolution.md +36 -36
  158. package/kit/framework/references/model-profiles.md +139 -139
  159. package/kit/framework/references/phase-argument-parsing.md +61 -61
  160. package/kit/framework/references/planning-config.md +202 -202
  161. package/kit/framework/references/questioning.md +162 -162
  162. package/kit/framework/references/tdd.md +263 -263
  163. package/kit/framework/references/ui-brand.md +160 -160
  164. package/kit/framework/references/user-profiling.md +657 -657
  165. package/kit/framework/references/verification-patterns.md +612 -612
  166. package/kit/framework/references/workstream-flag.md +58 -58
  167. package/kit/framework/templates/DEBUG.md +164 -164
  168. package/kit/framework/templates/UAT.md +265 -265
  169. package/kit/framework/templates/UI-SPEC.md +100 -100
  170. package/kit/framework/templates/VALIDATION.md +76 -76
  171. package/kit/framework/templates/claude-md.md +122 -122
  172. package/kit/framework/templates/codebase/architecture.md +185 -185
  173. package/kit/framework/templates/codebase/concerns.md +205 -205
  174. package/kit/framework/templates/codebase/conventions.md +204 -204
  175. package/kit/framework/templates/codebase/integrations.md +192 -192
  176. package/kit/framework/templates/codebase/stack.md +158 -158
  177. package/kit/framework/templates/codebase/structure.md +199 -199
  178. package/kit/framework/templates/codebase/testing.md +301 -301
  179. package/kit/framework/templates/config.json +44 -44
  180. package/kit/framework/templates/context.md +352 -352
  181. package/kit/framework/templates/continue-here.md +78 -78
  182. package/kit/framework/templates/copilot-instructions.md +7 -7
  183. package/kit/framework/templates/debug-subagent-prompt.md +91 -91
  184. package/kit/framework/templates/dev-preferences.md +20 -20
  185. package/kit/framework/templates/discovery.md +146 -146
  186. package/kit/framework/templates/discussion-log.md +63 -63
  187. package/kit/framework/templates/milestone-archive.md +123 -123
  188. package/kit/framework/templates/milestone.md +115 -115
  189. package/kit/framework/templates/phase-prompt.md +610 -610
  190. package/kit/framework/templates/planner-subagent-prompt.md +117 -117
  191. package/kit/framework/templates/project.md +186 -186
  192. package/kit/framework/templates/requirements.md +231 -231
  193. package/kit/framework/templates/research-project/ARCHITECTURE.md +204 -204
  194. package/kit/framework/templates/research-project/FEATURES.md +147 -147
  195. package/kit/framework/templates/research-project/PITFALLS.md +200 -200
  196. package/kit/framework/templates/research-project/STACK.md +120 -120
  197. package/kit/framework/templates/research-project/SUMMARY.md +170 -170
  198. package/kit/framework/templates/research.md +419 -419
  199. package/kit/framework/templates/retrospective.md +54 -54
  200. package/kit/framework/templates/roadmap.md +202 -202
  201. package/kit/framework/templates/state.md +176 -176
  202. package/kit/framework/templates/summary-complex.md +59 -59
  203. package/kit/framework/templates/summary-minimal.md +41 -41
  204. package/kit/framework/templates/summary-standard.md +48 -48
  205. package/kit/framework/templates/summary.md +209 -209
  206. package/kit/framework/templates/user-profile.md +146 -146
  207. package/kit/framework/templates/user-setup.md +256 -256
  208. package/kit/framework/templates/verification-report.md +258 -258
  209. package/kit/framework/workflows/add-phase.md +112 -112
  210. package/kit/framework/workflows/add-tests.md +351 -351
  211. package/kit/framework/workflows/add-todo.md +158 -158
  212. package/kit/framework/workflows/audit-milestone.md +340 -340
  213. package/kit/framework/workflows/audit-uat.md +109 -109
  214. package/kit/framework/workflows/autonomous.md +891 -891
  215. package/kit/framework/workflows/check-todos.md +177 -177
  216. package/kit/framework/workflows/cleanup.md +152 -152
  217. package/kit/framework/workflows/complete-milestone.md +696 -696
  218. package/kit/framework/workflows/diagnose-issues.md +231 -231
  219. package/kit/framework/workflows/discovery-phase.md +289 -289
  220. package/kit/framework/workflows/discuss-phase-assumptions.md +653 -653
  221. package/kit/framework/workflows/discuss-phase.md +784 -784
  222. package/kit/framework/workflows/do.md +104 -104
  223. package/kit/framework/workflows/execute-phase.md +838 -838
  224. package/kit/framework/workflows/execute-plan.md +510 -510
  225. package/kit/framework/workflows/fast.md +102 -102
  226. package/kit/framework/workflows/forensics.md +265 -265
  227. package/kit/framework/workflows/health.md +181 -181
  228. package/kit/framework/workflows/help.md +619 -619
  229. package/kit/framework/workflows/insert-phase.md +130 -130
  230. package/kit/framework/workflows/list-phase-assumptions.md +178 -178
  231. package/kit/framework/workflows/list-workspaces.md +56 -56
  232. package/kit/framework/workflows/manager.md +362 -362
  233. package/kit/framework/workflows/map-codebase.md +377 -377
  234. package/kit/framework/workflows/milestone-summary.md +223 -223
  235. package/kit/framework/workflows/new-milestone.md +486 -486
  236. package/kit/framework/workflows/new-project.md +1159 -1159
  237. package/kit/framework/workflows/new-workspace.md +237 -237
  238. package/kit/framework/workflows/next.md +97 -97
  239. package/kit/framework/workflows/node-repair.md +92 -92
  240. package/kit/framework/workflows/note.md +156 -156
  241. package/kit/framework/workflows/pause-work.md +176 -176
  242. package/kit/framework/workflows/plan-milestone-gaps.md +273 -273
  243. package/kit/framework/workflows/plan-phase.md +765 -765
  244. package/kit/framework/workflows/plant-seed.md +169 -169
  245. package/kit/framework/workflows/pr-branch.md +129 -129
  246. package/kit/framework/workflows/profile-user.md +450 -450
  247. package/kit/framework/workflows/progress.md +507 -507
  248. package/kit/framework/workflows/quick.md +757 -757
  249. package/kit/framework/workflows/remove-phase.md +155 -155
  250. package/kit/framework/workflows/remove-workspace.md +90 -90
  251. package/kit/framework/workflows/research-phase.md +82 -82
  252. package/kit/framework/workflows/resume-project.md +326 -326
  253. package/kit/framework/workflows/review.md +228 -228
  254. package/kit/framework/workflows/session-report.md +146 -146
  255. package/kit/framework/workflows/settings.md +283 -283
  256. package/kit/framework/workflows/ship.md +228 -228
  257. package/kit/framework/workflows/stats.md +60 -60
  258. package/kit/framework/workflows/transition.md +671 -671
  259. package/kit/framework/workflows/ui-phase.md +302 -302
  260. package/kit/framework/workflows/ui-review.md +165 -165
  261. package/kit/framework/workflows/update.md +323 -323
  262. package/kit/framework/workflows/validate-phase.md +174 -174
  263. package/kit/framework/workflows/verify-phase.md +252 -252
  264. package/kit/framework/workflows/verify-work.md +637 -637
  265. package/kit/hooks/check-update.js +118 -118
  266. package/kit/hooks/context-monitor.js +163 -163
  267. package/kit/hooks/kit-attribution-reminder.cjs +98 -0
  268. package/kit/hooks/prompt-guard.js +103 -103
  269. package/kit/hooks/statusline.js +125 -125
  270. package/kit/hooks/workflow-guard.js +101 -101
  271. package/kit/settings.json +45 -45
  272. package/kit/skills/_shared-supabase/glossary.md +17 -0
  273. package/kit/skills/ai-prompt-characterization/SKILL.md +335 -335
  274. package/kit/skills/armadilhas-sistemas-distribuidos/SKILL.md +447 -447
  275. package/kit/skills/audit-log-multi-tenant/SKILL.md +340 -340
  276. package/kit/skills/b2b-saas-architecture/SKILL.md +300 -300
  277. package/kit/skills/consistencia-leitura-replica/SKILL.md +385 -385
  278. package/kit/skills/crm-lead-pipeline-patterns/SKILL.md +343 -343
  279. package/kit/skills/escolha-modelo-consistencia/SKILL.md +494 -494
  280. package/kit/skills/evolucao-schema-compativel/SKILL.md +448 -448
  281. package/kit/skills/evolution-go-whatsapp-integration/SKILL.md +322 -322
  282. package/kit/skills/example-skill/SKILL.md +42 -42
  283. package/kit/skills/legacy-api-only-applications/SKILL.md +358 -358
  284. package/kit/skills/legacy-characterization-tests/SKILL.md +330 -330
  285. package/kit/skills/legacy-effect-analysis/SKILL.md +331 -331
  286. package/kit/skills/legacy-extract-class/SKILL.md +203 -203
  287. package/kit/skills/legacy-programming-by-difference/SKILL.md +252 -252
  288. package/kit/skills/legacy-seams-and-test-harness/SKILL.md +460 -460
  289. package/kit/skills/legacy-shotgun-surgery/SKILL.md +286 -286
  290. package/kit/skills/legacy-sprout-wrap-techniques/SKILL.md +434 -434
  291. package/kit/skills/legacy-storytelling-naked-crc/SKILL.md +270 -270
  292. package/kit/skills/lgpd-multi-tenant-compliance/SKILL.md +340 -340
  293. package/kit/skills/member-invite-flow/SKILL.md +305 -305
  294. package/kit/skills/member-management-react-shadcn/SKILL.md +328 -328
  295. package/kit/skills/multi-tenant-performance-scaling/SKILL.md +316 -316
  296. package/kit/skills/multi-tenant-rls-hierarchy/SKILL.md +342 -342
  297. package/kit/skills/org-onboarding-flow/SKILL.md +257 -257
  298. package/kit/skills/org-switcher-react-pattern/SKILL.md +349 -349
  299. package/kit/skills/permission-gate-react-pattern/SKILL.md +271 -271
  300. package/kit/skills/postgres-isolamento-concorrencia/SKILL.md +552 -552
  301. package/kit/skills/pre-refactor-characterization/SKILL.md +421 -421
  302. package/kit/skills/rbac-permissions-matrix-supabase/SKILL.md +338 -338
  303. package/kit/skills/streams-eventos-cdc/SKILL.md +711 -711
  304. package/kit/skills/supabase-branching-workflow/SKILL.md +544 -544
  305. package/kit/skills/supabase-ci-cd-github-actions/SKILL.md +880 -880
  306. package/kit/skills/supabase-column-level-security/SKILL.md +426 -426
  307. package/kit/skills/supabase-config-toml-remotes/SKILL.md +807 -807
  308. package/kit/skills/supabase-custom-claims-rbac/SKILL.md +472 -472
  309. package/kit/skills/supabase-edge-functions/SKILL.md +229 -141
  310. package/kit/skills/supabase-edge-functions-auth/SKILL.md +309 -0
  311. package/kit/skills/supabase-edge-functions-limits/SKILL.md +302 -0
  312. package/kit/skills/supabase-edge-functions-mcp-server/SKILL.md +279 -0
  313. package/kit/skills/supabase-edge-functions-testing/SKILL.md +277 -0
  314. package/kit/skills/supabase-edge-runtime-builtins/SKILL.md +357 -0
  315. package/kit/skills/supabase-migration-repair/SKILL.md +823 -823
  316. package/kit/skills/supabase-migrations/SKILL.md +297 -297
  317. package/kit/skills/supabase-pgtap-testing/SKILL.md +1053 -1053
  318. package/kit/skills/supabase-postgres-roles/SKILL.md +392 -392
  319. package/kit/skills/supabase-realtime/SKILL.md +460 -236
  320. package/kit/skills/supabase-rls-defense-in-depth/SKILL.md +418 -418
  321. package/kit/skills/supabase-rls-policies/SKILL.md +635 -635
  322. package/kit/skills/super-admin-platform-pattern/SKILL.md +326 -326
  323. package/kit/skills/tenant-quente-mitigacao/SKILL.md +605 -605
  324. package/kit/skills/whatsapp-conversation-state-machine/SKILL.md +287 -287
  325. package/package.json +1 -1
  326. package/src/core/kit.js +216 -216
  327. package/src/core/reflect.js +247 -247
  328. package/src/core/reverse-sync.js +372 -372
  329. package/src/core/sync.js +418 -418
  330. package/src/core/watch.js +121 -121
  331. package/src/mcp-server/index.js +715 -693
@@ -1,336 +1,336 @@
1
- /**
2
- * Frontmatter — YAML frontmatter parsing, serialization, and CRUD commands
3
- */
4
-
5
- const fs = require('fs');
6
- const path = require('path');
7
- const { safeReadFile, normalizeMd, output, error } = require('./core.cjs');
8
-
9
- // ─── Parsing engine ───────────────────────────────────────────────────────────
10
-
11
- function extractFrontmatter(content) {
12
- const frontmatter = {};
13
- // Find ALL frontmatter blocks at the start of the file.
14
- // If multiple blocks exist (corruption from CRLF mismatch), use the LAST one
15
- // since it represents the most recent state sync.
16
- const allBlocks = [...content.matchAll(/(?:^|\n)\s*---\r?\n([\s\S]+?)\r?\n---/g)];
17
- const match = allBlocks.length > 0 ? allBlocks[allBlocks.length - 1] : null;
18
- if (!match) return frontmatter;
19
-
20
- const yaml = match[1];
21
- const lines = yaml.split(/\r?\n/);
22
-
23
- // Stack to track nested objects: [{obj, key, indent}]
24
- // obj = object to write to, key = current key collecting array items, indent = indentation level
25
- let stack = [{ obj: frontmatter, key: null, indent: -1 }];
26
-
27
- for (const line of lines) {
28
- // Skip empty lines
29
- if (line.trim() === '') continue;
30
-
31
- // Calculate indentation (number of leading spaces)
32
- const indentMatch = line.match(/^(\s*)/);
33
- const indent = indentMatch ? indentMatch[1].length : 0;
34
-
35
- // Pop stack back to appropriate level
36
- while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
37
- stack.pop();
38
- }
39
-
40
- const current = stack[stack.length - 1];
41
-
42
- // Check for key: value pattern
43
- const keyMatch = line.match(/^(\s*)([a-zA-Z0-9_-]+):\s*(.*)/);
44
- if (keyMatch) {
45
- const key = keyMatch[2];
46
- const value = keyMatch[3].trim();
47
-
48
- if (value === '' || value === '[') {
49
- // Key with no value or opening bracket — could be nested object or array
50
- // We'll determine based on next lines, for now create placeholder
51
- current.obj[key] = value === '[' ? [] : {};
52
- current.key = null;
53
- // Push new context for potential nested content
54
- stack.push({ obj: current.obj[key], key: null, indent });
55
- } else if (value.startsWith('[') && value.endsWith(']')) {
56
- // Inline array: key: [a, b, c]
57
- current.obj[key] = value.slice(1, -1).split(',').map(s => s.trim().replace(/^["']|["']$/g, '')).filter(Boolean);
58
- current.key = null;
59
- } else {
60
- // Simple key: value
61
- current.obj[key] = value.replace(/^["']|["']$/g, '');
62
- current.key = null;
63
- }
64
- } else if (line.trim().startsWith('- ')) {
65
- // Array item
66
- const itemValue = line.trim().slice(2).replace(/^["']|["']$/g, '');
67
-
68
- // If current context is an empty object, convert to array
69
- if (typeof current.obj === 'object' && !Array.isArray(current.obj) && Object.keys(current.obj).length === 0) {
70
- // Find the key in parent that points to this object and convert it
71
- const parent = stack.length > 1 ? stack[stack.length - 2] : null;
72
- if (parent) {
73
- for (const k of Object.keys(parent.obj)) {
74
- if (parent.obj[k] === current.obj) {
75
- parent.obj[k] = [itemValue];
76
- current.obj = parent.obj[k];
77
- break;
78
- }
79
- }
80
- }
81
- } else if (Array.isArray(current.obj)) {
82
- current.obj.push(itemValue);
83
- }
84
- }
85
- }
86
-
87
- return frontmatter;
88
- }
89
-
90
- function reconstructFrontmatter(obj) {
91
- const lines = [];
92
- for (const [key, value] of Object.entries(obj)) {
93
- if (value === null || value === undefined) continue;
94
- if (Array.isArray(value)) {
95
- if (value.length === 0) {
96
- lines.push(`${key}: []`);
97
- } else if (value.every(v => typeof v === 'string') && value.length <= 3 && value.join(', ').length < 60) {
98
- lines.push(`${key}: [${value.join(', ')}]`);
99
- } else {
100
- lines.push(`${key}:`);
101
- for (const item of value) {
102
- lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
103
- }
104
- }
105
- } else if (typeof value === 'object') {
106
- lines.push(`${key}:`);
107
- for (const [subkey, subval] of Object.entries(value)) {
108
- if (subval === null || subval === undefined) continue;
109
- if (Array.isArray(subval)) {
110
- if (subval.length === 0) {
111
- lines.push(` ${subkey}: []`);
112
- } else if (subval.every(v => typeof v === 'string') && subval.length <= 3 && subval.join(', ').length < 60) {
113
- lines.push(` ${subkey}: [${subval.join(', ')}]`);
114
- } else {
115
- lines.push(` ${subkey}:`);
116
- for (const item of subval) {
117
- lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
118
- }
119
- }
120
- } else if (typeof subval === 'object') {
121
- lines.push(` ${subkey}:`);
122
- for (const [subsubkey, subsubval] of Object.entries(subval)) {
123
- if (subsubval === null || subsubval === undefined) continue;
124
- if (Array.isArray(subsubval)) {
125
- if (subsubval.length === 0) {
126
- lines.push(` ${subsubkey}: []`);
127
- } else {
128
- lines.push(` ${subsubkey}:`);
129
- for (const item of subsubval) {
130
- lines.push(` - ${item}`);
131
- }
132
- }
133
- } else {
134
- lines.push(` ${subsubkey}: ${subsubval}`);
135
- }
136
- }
137
- } else {
138
- const sv = String(subval);
139
- lines.push(` ${subkey}: ${sv.includes(':') || sv.includes('#') ? `"${sv}"` : sv}`);
140
- }
141
- }
142
- } else {
143
- const sv = String(value);
144
- if (sv.includes(':') || sv.includes('#') || sv.startsWith('[') || sv.startsWith('{')) {
145
- lines.push(`${key}: "${sv}"`);
146
- } else {
147
- lines.push(`${key}: ${sv}`);
148
- }
149
- }
150
- }
151
- return lines.join('\n');
152
- }
153
-
154
- function spliceFrontmatter(content, newObj) {
155
- const yamlStr = reconstructFrontmatter(newObj);
156
- const match = content.match(/^---\r?\n[\s\S]+?\r?\n---/);
157
- if (match) {
158
- return `---\n${yamlStr}\n---` + content.slice(match[0].length);
159
- }
160
- return `---\n${yamlStr}\n---\n\n` + content;
161
- }
162
-
163
- function parseMustHavesBlock(content, blockName) {
164
- // Extract a specific block from must_haves in raw frontmatter YAML
165
- // Handles 3-level nesting: must_haves > artifacts/key_links > [{path, provides, ...}]
166
- const fmMatch = content.match(/^---\r?\n([\s\S]+?)\r?\n---/);
167
- if (!fmMatch) return [];
168
-
169
- const yaml = fmMatch[1];
170
-
171
- // Find must_haves: first to detect its indentation level
172
- const mustHavesMatch = yaml.match(/^(\s*)must_haves:\s*$/m);
173
- if (!mustHavesMatch) return [];
174
- const mustHavesIndent = mustHavesMatch[1].length;
175
-
176
- // Find the block (e.g., "truths:", "artifacts:", "key_links:") under must_haves
177
- // It must be indented more than must_haves but we detect the actual indent dynamically
178
- const blockPattern = new RegExp(`^(\\s+)${blockName}:\\s*$`, 'm');
179
- const blockMatch = yaml.match(blockPattern);
180
- if (!blockMatch) return [];
181
-
182
- const blockIndent = blockMatch[1].length;
183
- // The block must be nested under must_haves (more indented)
184
- if (blockIndent <= mustHavesIndent) return [];
185
-
186
- // Find where the block starts in the yaml string
187
- const blockStart = yaml.indexOf(blockMatch[0]);
188
- if (blockStart === -1) return [];
189
-
190
- const afterBlock = yaml.slice(blockStart);
191
- const blockLines = afterBlock.split(/\r?\n/).slice(1); // skip the header line
192
-
193
- // List items are indented one level deeper than blockIndent
194
- // Continuation KVs are indented one level deeper than list items
195
- const items = [];
196
- let current = null;
197
- let listItemIndent = -1; // detected from first "- " line
198
-
199
- for (const line of blockLines) {
200
- // Skip empty lines
201
- if (line.trim() === '') continue;
202
- const indent = line.match(/^(\s*)/)[1].length;
203
- // Stop at same or lower indent level than the block header
204
- if (indent <= blockIndent && line.trim() !== '') break;
205
-
206
- const trimmed = line.trim();
207
-
208
- if (trimmed.startsWith('- ')) {
209
- // Detect list item indent from the first occurrence
210
- if (listItemIndent === -1) listItemIndent = indent;
211
-
212
- // Only treat as a top-level list item if at the expected indent
213
- if (indent === listItemIndent) {
214
- if (current) items.push(current);
215
- current = {};
216
- const afterDash = trimmed.slice(2);
217
- // Check if it's a simple string item (no colon means not a key-value)
218
- if (!afterDash.includes(':')) {
219
- current = afterDash.replace(/^["']|["']$/g, '');
220
- } else {
221
- // Key-value on same line as dash: "- path: value"
222
- const kvMatch = afterDash.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
223
- if (kvMatch) {
224
- current = {};
225
- current[kvMatch[1]] = kvMatch[2];
226
- }
227
- }
228
- continue;
229
- }
230
- }
231
-
232
- if (current && typeof current === 'object' && indent > listItemIndent) {
233
- // Continuation key-value or nested array item
234
- if (trimmed.startsWith('- ')) {
235
- // Array item under a key
236
- const arrVal = trimmed.slice(2).replace(/^["']|["']$/g, '');
237
- const keys = Object.keys(current);
238
- const lastKey = keys[keys.length - 1];
239
- if (lastKey && !Array.isArray(current[lastKey])) {
240
- current[lastKey] = current[lastKey] ? [current[lastKey]] : [];
241
- }
242
- if (lastKey) current[lastKey].push(arrVal);
243
- } else {
244
- const kvMatch = trimmed.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
245
- if (kvMatch) {
246
- const val = kvMatch[2];
247
- // Try to parse as number
248
- current[kvMatch[1]] = /^\d+$/.test(val) ? parseInt(val, 10) : val;
249
- }
250
- }
251
- }
252
- }
253
- if (current) items.push(current);
254
-
255
- return items;
256
- }
257
-
258
- // ─── Frontmatter CRUD commands ────────────────────────────────────────────────
259
-
260
- const FRONTMATTER_SCHEMAS = {
261
- plan: { required: ['phase', 'plan', 'type', 'wave', 'depends_on', 'files_modified', 'autonomous', 'must_haves'] },
262
- summary: { required: ['phase', 'plan', 'subsystem', 'tags', 'duration', 'completed'] },
263
- verification: { required: ['phase', 'verified', 'status', 'score'] },
264
- };
265
-
266
- function cmdFrontmatterGet(cwd, filePath, field, raw) {
267
- if (!filePath) { error('file path required'); }
268
- // Path traversal guard: reject null bytes
269
- if (filePath.includes('\0')) { error('file path contains null bytes'); }
270
- const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
271
- const content = safeReadFile(fullPath);
272
- if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
273
- const fm = extractFrontmatter(content);
274
- if (field) {
275
- const value = fm[field];
276
- if (value === undefined) { output({ error: 'Field not found', field }, raw); return; }
277
- output({ [field]: value }, raw, JSON.stringify(value));
278
- } else {
279
- output(fm, raw);
280
- }
281
- }
282
-
283
- function cmdFrontmatterSet(cwd, filePath, field, value, raw) {
284
- if (!filePath || !field || value === undefined) { error('file, field, and value required'); }
285
- // Path traversal guard: reject null bytes
286
- if (filePath.includes('\0')) { error('file path contains null bytes'); }
287
- const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
288
- if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
289
- const content = fs.readFileSync(fullPath, 'utf-8');
290
- const fm = extractFrontmatter(content);
291
- let parsedValue;
292
- try { parsedValue = JSON.parse(value); } catch { parsedValue = value; }
293
- fm[field] = parsedValue;
294
- const newContent = spliceFrontmatter(content, fm);
295
- fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
296
- output({ updated: true, field, value: parsedValue }, raw, 'true');
297
- }
298
-
299
- function cmdFrontmatterMerge(cwd, filePath, data, raw) {
300
- if (!filePath || !data) { error('file and data required'); }
301
- const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
302
- if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
303
- const content = fs.readFileSync(fullPath, 'utf-8');
304
- const fm = extractFrontmatter(content);
305
- let mergeData;
306
- try { mergeData = JSON.parse(data); } catch { error('Invalid JSON for --data'); return; }
307
- Object.assign(fm, mergeData);
308
- const newContent = spliceFrontmatter(content, fm);
309
- fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
310
- output({ merged: true, fields: Object.keys(mergeData) }, raw, 'true');
311
- }
312
-
313
- function cmdFrontmatterValidate(cwd, filePath, schemaName, raw) {
314
- if (!filePath || !schemaName) { error('file and schema required'); }
315
- const schema = FRONTMATTER_SCHEMAS[schemaName];
316
- if (!schema) { error(`Unknown schema: ${schemaName}. Available: ${Object.keys(FRONTMATTER_SCHEMAS).join(', ')}`); }
317
- const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
318
- const content = safeReadFile(fullPath);
319
- if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
320
- const fm = extractFrontmatter(content);
321
- const missing = schema.required.filter(f => fm[f] === undefined);
322
- const present = schema.required.filter(f => fm[f] !== undefined);
323
- output({ valid: missing.length === 0, missing, present, schema: schemaName }, raw, missing.length === 0 ? 'valid' : 'invalid');
324
- }
325
-
326
- module.exports = {
327
- extractFrontmatter,
328
- reconstructFrontmatter,
329
- spliceFrontmatter,
330
- parseMustHavesBlock,
331
- FRONTMATTER_SCHEMAS,
332
- cmdFrontmatterGet,
333
- cmdFrontmatterSet,
334
- cmdFrontmatterMerge,
335
- cmdFrontmatterValidate,
336
- };
1
+ /**
2
+ * Frontmatter — YAML frontmatter parsing, serialization, and CRUD commands
3
+ */
4
+
5
+ const fs = require('fs');
6
+ const path = require('path');
7
+ const { safeReadFile, normalizeMd, output, error } = require('./core.cjs');
8
+
9
+ // ─── Parsing engine ───────────────────────────────────────────────────────────
10
+
11
+ function extractFrontmatter(content) {
12
+ const frontmatter = {};
13
+ // Find ALL frontmatter blocks at the start of the file.
14
+ // If multiple blocks exist (corruption from CRLF mismatch), use the LAST one
15
+ // since it represents the most recent state sync.
16
+ const allBlocks = [...content.matchAll(/(?:^|\n)\s*---\r?\n([\s\S]+?)\r?\n---/g)];
17
+ const match = allBlocks.length > 0 ? allBlocks[allBlocks.length - 1] : null;
18
+ if (!match) return frontmatter;
19
+
20
+ const yaml = match[1];
21
+ const lines = yaml.split(/\r?\n/);
22
+
23
+ // Stack to track nested objects: [{obj, key, indent}]
24
+ // obj = object to write to, key = current key collecting array items, indent = indentation level
25
+ let stack = [{ obj: frontmatter, key: null, indent: -1 }];
26
+
27
+ for (const line of lines) {
28
+ // Skip empty lines
29
+ if (line.trim() === '') continue;
30
+
31
+ // Calculate indentation (number of leading spaces)
32
+ const indentMatch = line.match(/^(\s*)/);
33
+ const indent = indentMatch ? indentMatch[1].length : 0;
34
+
35
+ // Pop stack back to appropriate level
36
+ while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
37
+ stack.pop();
38
+ }
39
+
40
+ const current = stack[stack.length - 1];
41
+
42
+ // Check for key: value pattern
43
+ const keyMatch = line.match(/^(\s*)([a-zA-Z0-9_-]+):\s*(.*)/);
44
+ if (keyMatch) {
45
+ const key = keyMatch[2];
46
+ const value = keyMatch[3].trim();
47
+
48
+ if (value === '' || value === '[') {
49
+ // Key with no value or opening bracket — could be nested object or array
50
+ // We'll determine based on next lines, for now create placeholder
51
+ current.obj[key] = value === '[' ? [] : {};
52
+ current.key = null;
53
+ // Push new context for potential nested content
54
+ stack.push({ obj: current.obj[key], key: null, indent });
55
+ } else if (value.startsWith('[') && value.endsWith(']')) {
56
+ // Inline array: key: [a, b, c]
57
+ current.obj[key] = value.slice(1, -1).split(',').map(s => s.trim().replace(/^["']|["']$/g, '')).filter(Boolean);
58
+ current.key = null;
59
+ } else {
60
+ // Simple key: value
61
+ current.obj[key] = value.replace(/^["']|["']$/g, '');
62
+ current.key = null;
63
+ }
64
+ } else if (line.trim().startsWith('- ')) {
65
+ // Array item
66
+ const itemValue = line.trim().slice(2).replace(/^["']|["']$/g, '');
67
+
68
+ // If current context is an empty object, convert to array
69
+ if (typeof current.obj === 'object' && !Array.isArray(current.obj) && Object.keys(current.obj).length === 0) {
70
+ // Find the key in parent that points to this object and convert it
71
+ const parent = stack.length > 1 ? stack[stack.length - 2] : null;
72
+ if (parent) {
73
+ for (const k of Object.keys(parent.obj)) {
74
+ if (parent.obj[k] === current.obj) {
75
+ parent.obj[k] = [itemValue];
76
+ current.obj = parent.obj[k];
77
+ break;
78
+ }
79
+ }
80
+ }
81
+ } else if (Array.isArray(current.obj)) {
82
+ current.obj.push(itemValue);
83
+ }
84
+ }
85
+ }
86
+
87
+ return frontmatter;
88
+ }
89
+
90
+ function reconstructFrontmatter(obj) {
91
+ const lines = [];
92
+ for (const [key, value] of Object.entries(obj)) {
93
+ if (value === null || value === undefined) continue;
94
+ if (Array.isArray(value)) {
95
+ if (value.length === 0) {
96
+ lines.push(`${key}: []`);
97
+ } else if (value.every(v => typeof v === 'string') && value.length <= 3 && value.join(', ').length < 60) {
98
+ lines.push(`${key}: [${value.join(', ')}]`);
99
+ } else {
100
+ lines.push(`${key}:`);
101
+ for (const item of value) {
102
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
103
+ }
104
+ }
105
+ } else if (typeof value === 'object') {
106
+ lines.push(`${key}:`);
107
+ for (const [subkey, subval] of Object.entries(value)) {
108
+ if (subval === null || subval === undefined) continue;
109
+ if (Array.isArray(subval)) {
110
+ if (subval.length === 0) {
111
+ lines.push(` ${subkey}: []`);
112
+ } else if (subval.every(v => typeof v === 'string') && subval.length <= 3 && subval.join(', ').length < 60) {
113
+ lines.push(` ${subkey}: [${subval.join(', ')}]`);
114
+ } else {
115
+ lines.push(` ${subkey}:`);
116
+ for (const item of subval) {
117
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
118
+ }
119
+ }
120
+ } else if (typeof subval === 'object') {
121
+ lines.push(` ${subkey}:`);
122
+ for (const [subsubkey, subsubval] of Object.entries(subval)) {
123
+ if (subsubval === null || subsubval === undefined) continue;
124
+ if (Array.isArray(subsubval)) {
125
+ if (subsubval.length === 0) {
126
+ lines.push(` ${subsubkey}: []`);
127
+ } else {
128
+ lines.push(` ${subsubkey}:`);
129
+ for (const item of subsubval) {
130
+ lines.push(` - ${item}`);
131
+ }
132
+ }
133
+ } else {
134
+ lines.push(` ${subsubkey}: ${subsubval}`);
135
+ }
136
+ }
137
+ } else {
138
+ const sv = String(subval);
139
+ lines.push(` ${subkey}: ${sv.includes(':') || sv.includes('#') ? `"${sv}"` : sv}`);
140
+ }
141
+ }
142
+ } else {
143
+ const sv = String(value);
144
+ if (sv.includes(':') || sv.includes('#') || sv.startsWith('[') || sv.startsWith('{')) {
145
+ lines.push(`${key}: "${sv}"`);
146
+ } else {
147
+ lines.push(`${key}: ${sv}`);
148
+ }
149
+ }
150
+ }
151
+ return lines.join('\n');
152
+ }
153
+
154
+ function spliceFrontmatter(content, newObj) {
155
+ const yamlStr = reconstructFrontmatter(newObj);
156
+ const match = content.match(/^---\r?\n[\s\S]+?\r?\n---/);
157
+ if (match) {
158
+ return `---\n${yamlStr}\n---` + content.slice(match[0].length);
159
+ }
160
+ return `---\n${yamlStr}\n---\n\n` + content;
161
+ }
162
+
163
+ function parseMustHavesBlock(content, blockName) {
164
+ // Extract a specific block from must_haves in raw frontmatter YAML
165
+ // Handles 3-level nesting: must_haves > artifacts/key_links > [{path, provides, ...}]
166
+ const fmMatch = content.match(/^---\r?\n([\s\S]+?)\r?\n---/);
167
+ if (!fmMatch) return [];
168
+
169
+ const yaml = fmMatch[1];
170
+
171
+ // Find must_haves: first to detect its indentation level
172
+ const mustHavesMatch = yaml.match(/^(\s*)must_haves:\s*$/m);
173
+ if (!mustHavesMatch) return [];
174
+ const mustHavesIndent = mustHavesMatch[1].length;
175
+
176
+ // Find the block (e.g., "truths:", "artifacts:", "key_links:") under must_haves
177
+ // It must be indented more than must_haves but we detect the actual indent dynamically
178
+ const blockPattern = new RegExp(`^(\\s+)${blockName}:\\s*$`, 'm');
179
+ const blockMatch = yaml.match(blockPattern);
180
+ if (!blockMatch) return [];
181
+
182
+ const blockIndent = blockMatch[1].length;
183
+ // The block must be nested under must_haves (more indented)
184
+ if (blockIndent <= mustHavesIndent) return [];
185
+
186
+ // Find where the block starts in the yaml string
187
+ const blockStart = yaml.indexOf(blockMatch[0]);
188
+ if (blockStart === -1) return [];
189
+
190
+ const afterBlock = yaml.slice(blockStart);
191
+ const blockLines = afterBlock.split(/\r?\n/).slice(1); // skip the header line
192
+
193
+ // List items are indented one level deeper than blockIndent
194
+ // Continuation KVs are indented one level deeper than list items
195
+ const items = [];
196
+ let current = null;
197
+ let listItemIndent = -1; // detected from first "- " line
198
+
199
+ for (const line of blockLines) {
200
+ // Skip empty lines
201
+ if (line.trim() === '') continue;
202
+ const indent = line.match(/^(\s*)/)[1].length;
203
+ // Stop at same or lower indent level than the block header
204
+ if (indent <= blockIndent && line.trim() !== '') break;
205
+
206
+ const trimmed = line.trim();
207
+
208
+ if (trimmed.startsWith('- ')) {
209
+ // Detect list item indent from the first occurrence
210
+ if (listItemIndent === -1) listItemIndent = indent;
211
+
212
+ // Only treat as a top-level list item if at the expected indent
213
+ if (indent === listItemIndent) {
214
+ if (current) items.push(current);
215
+ current = {};
216
+ const afterDash = trimmed.slice(2);
217
+ // Check if it's a simple string item (no colon means not a key-value)
218
+ if (!afterDash.includes(':')) {
219
+ current = afterDash.replace(/^["']|["']$/g, '');
220
+ } else {
221
+ // Key-value on same line as dash: "- path: value"
222
+ const kvMatch = afterDash.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
223
+ if (kvMatch) {
224
+ current = {};
225
+ current[kvMatch[1]] = kvMatch[2];
226
+ }
227
+ }
228
+ continue;
229
+ }
230
+ }
231
+
232
+ if (current && typeof current === 'object' && indent > listItemIndent) {
233
+ // Continuation key-value or nested array item
234
+ if (trimmed.startsWith('- ')) {
235
+ // Array item under a key
236
+ const arrVal = trimmed.slice(2).replace(/^["']|["']$/g, '');
237
+ const keys = Object.keys(current);
238
+ const lastKey = keys[keys.length - 1];
239
+ if (lastKey && !Array.isArray(current[lastKey])) {
240
+ current[lastKey] = current[lastKey] ? [current[lastKey]] : [];
241
+ }
242
+ if (lastKey) current[lastKey].push(arrVal);
243
+ } else {
244
+ const kvMatch = trimmed.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
245
+ if (kvMatch) {
246
+ const val = kvMatch[2];
247
+ // Try to parse as number
248
+ current[kvMatch[1]] = /^\d+$/.test(val) ? parseInt(val, 10) : val;
249
+ }
250
+ }
251
+ }
252
+ }
253
+ if (current) items.push(current);
254
+
255
+ return items;
256
+ }
257
+
258
+ // ─── Frontmatter CRUD commands ────────────────────────────────────────────────
259
+
260
+ const FRONTMATTER_SCHEMAS = {
261
+ plan: { required: ['phase', 'plan', 'type', 'wave', 'depends_on', 'files_modified', 'autonomous', 'must_haves'] },
262
+ summary: { required: ['phase', 'plan', 'subsystem', 'tags', 'duration', 'completed'] },
263
+ verification: { required: ['phase', 'verified', 'status', 'score'] },
264
+ };
265
+
266
+ function cmdFrontmatterGet(cwd, filePath, field, raw) {
267
+ if (!filePath) { error('file path required'); }
268
+ // Path traversal guard: reject null bytes
269
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
270
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
271
+ const content = safeReadFile(fullPath);
272
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
273
+ const fm = extractFrontmatter(content);
274
+ if (field) {
275
+ const value = fm[field];
276
+ if (value === undefined) { output({ error: 'Field not found', field }, raw); return; }
277
+ output({ [field]: value }, raw, JSON.stringify(value));
278
+ } else {
279
+ output(fm, raw);
280
+ }
281
+ }
282
+
283
+ function cmdFrontmatterSet(cwd, filePath, field, value, raw) {
284
+ if (!filePath || !field || value === undefined) { error('file, field, and value required'); }
285
+ // Path traversal guard: reject null bytes
286
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
287
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
288
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
289
+ const content = fs.readFileSync(fullPath, 'utf-8');
290
+ const fm = extractFrontmatter(content);
291
+ let parsedValue;
292
+ try { parsedValue = JSON.parse(value); } catch { parsedValue = value; }
293
+ fm[field] = parsedValue;
294
+ const newContent = spliceFrontmatter(content, fm);
295
+ fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
296
+ output({ updated: true, field, value: parsedValue }, raw, 'true');
297
+ }
298
+
299
+ function cmdFrontmatterMerge(cwd, filePath, data, raw) {
300
+ if (!filePath || !data) { error('file and data required'); }
301
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
302
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
303
+ const content = fs.readFileSync(fullPath, 'utf-8');
304
+ const fm = extractFrontmatter(content);
305
+ let mergeData;
306
+ try { mergeData = JSON.parse(data); } catch { error('Invalid JSON for --data'); return; }
307
+ Object.assign(fm, mergeData);
308
+ const newContent = spliceFrontmatter(content, fm);
309
+ fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
310
+ output({ merged: true, fields: Object.keys(mergeData) }, raw, 'true');
311
+ }
312
+
313
+ function cmdFrontmatterValidate(cwd, filePath, schemaName, raw) {
314
+ if (!filePath || !schemaName) { error('file and schema required'); }
315
+ const schema = FRONTMATTER_SCHEMAS[schemaName];
316
+ if (!schema) { error(`Unknown schema: ${schemaName}. Available: ${Object.keys(FRONTMATTER_SCHEMAS).join(', ')}`); }
317
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
318
+ const content = safeReadFile(fullPath);
319
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
320
+ const fm = extractFrontmatter(content);
321
+ const missing = schema.required.filter(f => fm[f] === undefined);
322
+ const present = schema.required.filter(f => fm[f] !== undefined);
323
+ output({ valid: missing.length === 0, missing, present, schema: schemaName }, raw, missing.length === 0 ? 'valid' : 'invalid');
324
+ }
325
+
326
+ module.exports = {
327
+ extractFrontmatter,
328
+ reconstructFrontmatter,
329
+ spliceFrontmatter,
330
+ parseMustHavesBlock,
331
+ FRONTMATTER_SCHEMAS,
332
+ cmdFrontmatterGet,
333
+ cmdFrontmatterSet,
334
+ cmdFrontmatterMerge,
335
+ cmdFrontmatterValidate,
336
+ };