@opengsd/gsd-core 1.2.0-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (503) hide show
  1. package/LICENSE +21 -0
  2. package/README.ja-JP.md +870 -0
  3. package/README.ko-KR.md +861 -0
  4. package/README.md +301 -0
  5. package/README.pt-BR.md +492 -0
  6. package/README.zh-CN.md +842 -0
  7. package/agents/gsd-advisor-researcher.md +127 -0
  8. package/agents/gsd-ai-researcher.md +133 -0
  9. package/agents/gsd-assumptions-analyzer.md +105 -0
  10. package/agents/gsd-code-fixer.md +668 -0
  11. package/agents/gsd-code-reviewer.md +387 -0
  12. package/agents/gsd-codebase-mapper.md +853 -0
  13. package/agents/gsd-debug-session-manager.md +314 -0
  14. package/agents/gsd-debugger.md +1452 -0
  15. package/agents/gsd-doc-classifier.md +168 -0
  16. package/agents/gsd-doc-synthesizer.md +204 -0
  17. package/agents/gsd-doc-verifier.md +217 -0
  18. package/agents/gsd-doc-writer.md +615 -0
  19. package/agents/gsd-domain-researcher.md +153 -0
  20. package/agents/gsd-eval-auditor.md +191 -0
  21. package/agents/gsd-eval-planner.md +154 -0
  22. package/agents/gsd-executor.md +772 -0
  23. package/agents/gsd-framework-selector.md +160 -0
  24. package/agents/gsd-integration-checker.md +470 -0
  25. package/agents/gsd-intel-updater.md +342 -0
  26. package/agents/gsd-nyquist-auditor.md +203 -0
  27. package/agents/gsd-pattern-mapper.md +335 -0
  28. package/agents/gsd-phase-researcher.md +928 -0
  29. package/agents/gsd-plan-checker.md +978 -0
  30. package/agents/gsd-planner.md +1218 -0
  31. package/agents/gsd-project-researcher.md +677 -0
  32. package/agents/gsd-research-synthesizer.md +255 -0
  33. package/agents/gsd-roadmapper.md +688 -0
  34. package/agents/gsd-security-auditor.md +155 -0
  35. package/agents/gsd-ui-auditor.md +495 -0
  36. package/agents/gsd-ui-checker.md +309 -0
  37. package/agents/gsd-ui-researcher.md +380 -0
  38. package/agents/gsd-user-profiler.md +171 -0
  39. package/agents/gsd-verifier.md +917 -0
  40. package/bin/install.js +10936 -0
  41. package/bin/lib/ui-safety-gate.cjs +107 -0
  42. package/commands/gsd/add-tests.md +42 -0
  43. package/commands/gsd/ai-integration-phase.md +37 -0
  44. package/commands/gsd/audit-fix.md +34 -0
  45. package/commands/gsd/audit-milestone.md +37 -0
  46. package/commands/gsd/audit-uat.md +24 -0
  47. package/commands/gsd/autonomous.md +46 -0
  48. package/commands/gsd/capture.md +62 -0
  49. package/commands/gsd/cleanup.md +24 -0
  50. package/commands/gsd/code-review.md +59 -0
  51. package/commands/gsd/complete-milestone.md +143 -0
  52. package/commands/gsd/config.md +56 -0
  53. package/commands/gsd/debug.md +52 -0
  54. package/commands/gsd/discuss-phase.md +76 -0
  55. package/commands/gsd/docs-update.md +49 -0
  56. package/commands/gsd/eval-review.md +33 -0
  57. package/commands/gsd/execute-phase.md +64 -0
  58. package/commands/gsd/explore.md +27 -0
  59. package/commands/gsd/extract-learnings.md +23 -0
  60. package/commands/gsd/fast.md +31 -0
  61. package/commands/gsd/forensics.md +57 -0
  62. package/commands/gsd/graphify.md +199 -0
  63. package/commands/gsd/health.md +31 -0
  64. package/commands/gsd/help.md +28 -0
  65. package/commands/gsd/import.md +41 -0
  66. package/commands/gsd/inbox.md +39 -0
  67. package/commands/gsd/ingest-docs.md +42 -0
  68. package/commands/gsd/manager.md +45 -0
  69. package/commands/gsd/map-codebase.md +83 -0
  70. package/commands/gsd/milestone-summary.md +51 -0
  71. package/commands/gsd/mvp-phase.md +45 -0
  72. package/commands/gsd/new-milestone.md +45 -0
  73. package/commands/gsd/new-project.md +47 -0
  74. package/commands/gsd/ns-context.md +23 -0
  75. package/commands/gsd/ns-ideate.md +24 -0
  76. package/commands/gsd/ns-manage.md +29 -0
  77. package/commands/gsd/ns-project.md +22 -0
  78. package/commands/gsd/ns-review.md +26 -0
  79. package/commands/gsd/ns-workflow.md +28 -0
  80. package/commands/gsd/pause-work.md +43 -0
  81. package/commands/gsd/phase.md +56 -0
  82. package/commands/gsd/plan-phase.md +62 -0
  83. package/commands/gsd/plan-review-convergence.md +59 -0
  84. package/commands/gsd/pr-branch.md +26 -0
  85. package/commands/gsd/profile-user.md +46 -0
  86. package/commands/gsd/progress.md +47 -0
  87. package/commands/gsd/quick.md +174 -0
  88. package/commands/gsd/resume-work.md +30 -0
  89. package/commands/gsd/review-backlog.md +63 -0
  90. package/commands/gsd/review.md +41 -0
  91. package/commands/gsd/secure-phase.md +36 -0
  92. package/commands/gsd/settings.md +29 -0
  93. package/commands/gsd/ship.md +24 -0
  94. package/commands/gsd/sketch.md +60 -0
  95. package/commands/gsd/spec-phase.md +63 -0
  96. package/commands/gsd/spike.md +57 -0
  97. package/commands/gsd/stats.md +19 -0
  98. package/commands/gsd/surface.md +155 -0
  99. package/commands/gsd/thread.md +24 -0
  100. package/commands/gsd/ui-phase.md +35 -0
  101. package/commands/gsd/ui-review.md +33 -0
  102. package/commands/gsd/ultraplan-phase.md +34 -0
  103. package/commands/gsd/undo.md +35 -0
  104. package/commands/gsd/update.md +48 -0
  105. package/commands/gsd/validate-phase.md +36 -0
  106. package/commands/gsd/verify-work.md +39 -0
  107. package/commands/gsd/workspace.md +52 -0
  108. package/commands/gsd/workstreams.md +70 -0
  109. package/get-shit-done/bin/check-latest-version.cjs +106 -0
  110. package/get-shit-done/bin/gsd-tools.cjs +1676 -0
  111. package/get-shit-done/bin/lib/active-workstream-store.cjs +302 -0
  112. package/get-shit-done/bin/lib/adr-parser.cjs +394 -0
  113. package/get-shit-done/bin/lib/agent-command-router.cjs +65 -0
  114. package/get-shit-done/bin/lib/artifacts.cjs +53 -0
  115. package/get-shit-done/bin/lib/audit.cjs +755 -0
  116. package/get-shit-done/bin/lib/check-command-router.cjs +333 -0
  117. package/get-shit-done/bin/lib/cjs-command-router-adapter.cjs +118 -0
  118. package/get-shit-done/bin/lib/clock.cjs +96 -0
  119. package/get-shit-done/bin/lib/clusters.cjs +135 -0
  120. package/get-shit-done/bin/lib/code-review-flags.cjs +74 -0
  121. package/get-shit-done/bin/lib/command-aliases.cjs +815 -0
  122. package/get-shit-done/bin/lib/command-arg-projection.cjs +62 -0
  123. package/get-shit-done/bin/lib/command-routing-hub.cjs +388 -0
  124. package/get-shit-done/bin/lib/commands.cjs +1188 -0
  125. package/get-shit-done/bin/lib/config-schema.cjs +31 -0
  126. package/get-shit-done/bin/lib/config.cjs +728 -0
  127. package/get-shit-done/bin/lib/configuration.cjs +248 -0
  128. package/get-shit-done/bin/lib/context-utilization.cjs +47 -0
  129. package/get-shit-done/bin/lib/core.cjs +2121 -0
  130. package/get-shit-done/bin/lib/decisions.cjs +116 -0
  131. package/get-shit-done/bin/lib/docs.cjs +270 -0
  132. package/get-shit-done/bin/lib/drift.cjs +388 -0
  133. package/get-shit-done/bin/lib/fallow-runner.cjs +109 -0
  134. package/get-shit-done/bin/lib/frontmatter.cjs +389 -0
  135. package/get-shit-done/bin/lib/gap-checker.cjs +205 -0
  136. package/get-shit-done/bin/lib/graphify.cjs +592 -0
  137. package/get-shit-done/bin/lib/gsd2-import.cjs +514 -0
  138. package/get-shit-done/bin/lib/init-command-router.cjs +58 -0
  139. package/get-shit-done/bin/lib/init.cjs +2112 -0
  140. package/get-shit-done/bin/lib/install-profiles.cjs +603 -0
  141. package/get-shit-done/bin/lib/installer-migration-authoring.cjs +117 -0
  142. package/get-shit-done/bin/lib/installer-migration-report.cjs +354 -0
  143. package/get-shit-done/bin/lib/installer-migrations/000-first-time-baseline.cjs +220 -0
  144. package/get-shit-done/bin/lib/installer-migrations/001-legacy-orphan-files.cjs +41 -0
  145. package/get-shit-done/bin/lib/installer-migrations/002-codex-legacy-hooks-json.cjs +80 -0
  146. package/get-shit-done/bin/lib/installer-migrations.cjs +778 -0
  147. package/get-shit-done/bin/lib/intel.cjs +708 -0
  148. package/get-shit-done/bin/lib/learnings.cjs +421 -0
  149. package/get-shit-done/bin/lib/milestone.cjs +314 -0
  150. package/get-shit-done/bin/lib/model-catalog.cjs +212 -0
  151. package/get-shit-done/bin/lib/model-profiles.cjs +31 -0
  152. package/get-shit-done/bin/lib/observability/event.cjs +82 -0
  153. package/get-shit-done/bin/lib/observability/logger.cjs +174 -0
  154. package/get-shit-done/bin/lib/observability/redaction.cjs +50 -0
  155. package/get-shit-done/bin/lib/package-identity.cjs +31 -0
  156. package/get-shit-done/bin/lib/phase-command-router.cjs +191 -0
  157. package/get-shit-done/bin/lib/phase-lifecycle.cjs +80 -0
  158. package/get-shit-done/bin/lib/phase.cjs +1607 -0
  159. package/get-shit-done/bin/lib/phases-command-router.cjs +39 -0
  160. package/get-shit-done/bin/lib/plan-scan.cjs +97 -0
  161. package/get-shit-done/bin/lib/planning-workspace.cjs +238 -0
  162. package/get-shit-done/bin/lib/profile-output.cjs +1141 -0
  163. package/get-shit-done/bin/lib/profile-pipeline.cjs +539 -0
  164. package/get-shit-done/bin/lib/project-root.cjs +112 -0
  165. package/get-shit-done/bin/lib/prompt-budget.cjs +399 -0
  166. package/get-shit-done/bin/lib/review-reviewer-selection.cjs +125 -0
  167. package/get-shit-done/bin/lib/roadmap-command-router.cjs +28 -0
  168. package/get-shit-done/bin/lib/roadmap.cjs +650 -0
  169. package/get-shit-done/bin/lib/runtime-artifact-layout.cjs +301 -0
  170. package/get-shit-done/bin/lib/runtime-homes.cjs +222 -0
  171. package/get-shit-done/bin/lib/runtime-name-policy.cjs +83 -0
  172. package/get-shit-done/bin/lib/runtime-slash.cjs +112 -0
  173. package/get-shit-done/bin/lib/schema-detect.cjs +165 -0
  174. package/get-shit-done/bin/lib/secrets.cjs +32 -0
  175. package/get-shit-done/bin/lib/security.cjs +600 -0
  176. package/get-shit-done/bin/lib/semver-compare.cjs +35 -0
  177. package/get-shit-done/bin/lib/shell-command-projection.cjs +500 -0
  178. package/get-shit-done/bin/lib/state-command-router.cjs +252 -0
  179. package/get-shit-done/bin/lib/state-document.cjs +263 -0
  180. package/get-shit-done/bin/lib/state.cjs +2038 -0
  181. package/get-shit-done/bin/lib/surface.cjs +470 -0
  182. package/get-shit-done/bin/lib/task-command-router.cjs +81 -0
  183. package/get-shit-done/bin/lib/template.cjs +228 -0
  184. package/get-shit-done/bin/lib/uat.cjs +289 -0
  185. package/get-shit-done/bin/lib/update-context.cjs +209 -0
  186. package/get-shit-done/bin/lib/validate-command-router.cjs +83 -0
  187. package/get-shit-done/bin/lib/validate.cjs +92 -0
  188. package/get-shit-done/bin/lib/verify-command-router.cjs +40 -0
  189. package/get-shit-done/bin/lib/verify.cjs +1511 -0
  190. package/get-shit-done/bin/lib/workstream-inventory-builder.cjs +74 -0
  191. package/get-shit-done/bin/lib/workstream-inventory.cjs +146 -0
  192. package/get-shit-done/bin/lib/workstream-name-policy.cjs +94 -0
  193. package/get-shit-done/bin/lib/workstream.cjs +389 -0
  194. package/get-shit-done/bin/lib/worktree-safety.cjs +985 -0
  195. package/get-shit-done/bin/shared/config-defaults.manifest.json +97 -0
  196. package/get-shit-done/bin/shared/config-schema.manifest.json +175 -0
  197. package/get-shit-done/bin/shared/model-catalog.json +122 -0
  198. package/get-shit-done/bin/shared/runtime-aliases.manifest.json +75 -0
  199. package/get-shit-done/bin/verify-reapply-patches.cjs +352 -0
  200. package/get-shit-done/contexts/dev.md +21 -0
  201. package/get-shit-done/contexts/research.md +22 -0
  202. package/get-shit-done/contexts/review.md +23 -0
  203. package/get-shit-done/references/agent-contracts.md +79 -0
  204. package/get-shit-done/references/ai-evals.md +156 -0
  205. package/get-shit-done/references/ai-frameworks.md +186 -0
  206. package/get-shit-done/references/artifact-types.md +131 -0
  207. package/get-shit-done/references/autonomous-smart-discuss.md +277 -0
  208. package/get-shit-done/references/checkpoints.md +814 -0
  209. package/get-shit-done/references/common-bug-patterns.md +114 -0
  210. package/get-shit-done/references/context-budget.md +85 -0
  211. package/get-shit-done/references/continuation-format.md +253 -0
  212. package/get-shit-done/references/debugger-philosophy.md +76 -0
  213. package/get-shit-done/references/decimal-phase-calculation.md +64 -0
  214. package/get-shit-done/references/doc-conflict-engine.md +91 -0
  215. package/get-shit-done/references/domain-probes.md +125 -0
  216. package/get-shit-done/references/execute-mvp-tdd.md +81 -0
  217. package/get-shit-done/references/executor-examples.md +110 -0
  218. package/get-shit-done/references/few-shot-examples/plan-checker.md +73 -0
  219. package/get-shit-done/references/few-shot-examples/verifier.md +109 -0
  220. package/get-shit-done/references/gate-prompts.md +100 -0
  221. package/get-shit-done/references/gates.md +70 -0
  222. package/get-shit-done/references/git-integration.md +298 -0
  223. package/get-shit-done/references/git-planning-commit.md +40 -0
  224. package/get-shit-done/references/ios-scaffold.md +123 -0
  225. package/get-shit-done/references/mandatory-initial-read.md +2 -0
  226. package/get-shit-done/references/model-profile-resolution.md +38 -0
  227. package/get-shit-done/references/model-profiles.md +245 -0
  228. package/get-shit-done/references/mvp-concepts.md +49 -0
  229. package/get-shit-done/references/phase-argument-parsing.md +61 -0
  230. package/get-shit-done/references/planner-antipatterns.md +89 -0
  231. package/get-shit-done/references/planner-chunked.md +49 -0
  232. package/get-shit-done/references/planner-gap-closure.md +62 -0
  233. package/get-shit-done/references/planner-graphify-auto-update.md +67 -0
  234. package/get-shit-done/references/planner-human-verify-mode.md +57 -0
  235. package/get-shit-done/references/planner-interface-context.md +62 -0
  236. package/get-shit-done/references/planner-mvp-mode.md +53 -0
  237. package/get-shit-done/references/planner-reviews.md +39 -0
  238. package/get-shit-done/references/planner-revision.md +87 -0
  239. package/get-shit-done/references/planner-source-audit.md +73 -0
  240. package/get-shit-done/references/planning-config.md +471 -0
  241. package/get-shit-done/references/project-skills-discovery.md +19 -0
  242. package/get-shit-done/references/questioning.md +162 -0
  243. package/get-shit-done/references/revision-loop.md +97 -0
  244. package/get-shit-done/references/scout-codebase.md +51 -0
  245. package/get-shit-done/references/skeleton-template.md +48 -0
  246. package/get-shit-done/references/sketch-interactivity.md +41 -0
  247. package/get-shit-done/references/sketch-theme-system.md +94 -0
  248. package/get-shit-done/references/sketch-tooling.md +45 -0
  249. package/get-shit-done/references/sketch-variant-patterns.md +81 -0
  250. package/get-shit-done/references/spidr-splitting.md +69 -0
  251. package/get-shit-done/references/tdd.md +330 -0
  252. package/get-shit-done/references/thinking-models-debug.md +44 -0
  253. package/get-shit-done/references/thinking-models-execution.md +50 -0
  254. package/get-shit-done/references/thinking-models-planning.md +62 -0
  255. package/get-shit-done/references/thinking-models-research.md +50 -0
  256. package/get-shit-done/references/thinking-models-verification.md +55 -0
  257. package/get-shit-done/references/thinking-partner.md +96 -0
  258. package/get-shit-done/references/ui-brand.md +160 -0
  259. package/get-shit-done/references/universal-anti-patterns.md +63 -0
  260. package/get-shit-done/references/user-profiling.md +681 -0
  261. package/get-shit-done/references/user-story-template.md +58 -0
  262. package/get-shit-done/references/verification-overrides.md +227 -0
  263. package/get-shit-done/references/verification-patterns.md +612 -0
  264. package/get-shit-done/references/verify-mvp-mode.md +85 -0
  265. package/get-shit-done/references/workstream-flag.md +111 -0
  266. package/get-shit-done/references/worktree-path-safety.md +89 -0
  267. package/get-shit-done/templates/AI-SPEC.md +246 -0
  268. package/get-shit-done/templates/DEBUG.md +169 -0
  269. package/get-shit-done/templates/README.md +77 -0
  270. package/get-shit-done/templates/SECURITY.md +61 -0
  271. package/get-shit-done/templates/UAT.md +265 -0
  272. package/get-shit-done/templates/UI-SPEC.md +100 -0
  273. package/get-shit-done/templates/VALIDATION.md +76 -0
  274. package/get-shit-done/templates/claude-md.md +145 -0
  275. package/get-shit-done/templates/codebase/architecture.md +255 -0
  276. package/get-shit-done/templates/codebase/concerns.md +310 -0
  277. package/get-shit-done/templates/codebase/conventions.md +307 -0
  278. package/get-shit-done/templates/codebase/integrations.md +280 -0
  279. package/get-shit-done/templates/codebase/stack.md +186 -0
  280. package/get-shit-done/templates/codebase/structure.md +285 -0
  281. package/get-shit-done/templates/codebase/testing.md +480 -0
  282. package/get-shit-done/templates/config.json +62 -0
  283. package/get-shit-done/templates/context.md +352 -0
  284. package/get-shit-done/templates/continue-here.md +78 -0
  285. package/get-shit-done/templates/copilot-instructions.md +7 -0
  286. package/get-shit-done/templates/debug-subagent-prompt.md +91 -0
  287. package/get-shit-done/templates/dev-preferences.md +21 -0
  288. package/get-shit-done/templates/discovery.md +146 -0
  289. package/get-shit-done/templates/discussion-log.md +63 -0
  290. package/get-shit-done/templates/milestone-archive.md +123 -0
  291. package/get-shit-done/templates/milestone.md +115 -0
  292. package/get-shit-done/templates/phase-prompt.md +610 -0
  293. package/get-shit-done/templates/planner-subagent-prompt.md +117 -0
  294. package/get-shit-done/templates/project.md +186 -0
  295. package/get-shit-done/templates/requirements.md +231 -0
  296. package/get-shit-done/templates/research-project/ARCHITECTURE.md +204 -0
  297. package/get-shit-done/templates/research-project/FEATURES.md +147 -0
  298. package/get-shit-done/templates/research-project/PITFALLS.md +200 -0
  299. package/get-shit-done/templates/research-project/STACK.md +120 -0
  300. package/get-shit-done/templates/research-project/SUMMARY.md +170 -0
  301. package/get-shit-done/templates/research.md +592 -0
  302. package/get-shit-done/templates/retrospective.md +54 -0
  303. package/get-shit-done/templates/roadmap.md +202 -0
  304. package/get-shit-done/templates/spec.md +307 -0
  305. package/get-shit-done/templates/state.md +195 -0
  306. package/get-shit-done/templates/summary-complex.md +59 -0
  307. package/get-shit-done/templates/summary-minimal.md +41 -0
  308. package/get-shit-done/templates/summary-standard.md +48 -0
  309. package/get-shit-done/templates/summary.md +248 -0
  310. package/get-shit-done/templates/user-profile.md +146 -0
  311. package/get-shit-done/templates/user-setup.md +311 -0
  312. package/get-shit-done/templates/verification-report.md +322 -0
  313. package/get-shit-done/workflows/_runtime-launcher.snippet.sh +1 -0
  314. package/get-shit-done/workflows/add-backlog.md +91 -0
  315. package/get-shit-done/workflows/add-phase.md +113 -0
  316. package/get-shit-done/workflows/add-tests.md +355 -0
  317. package/get-shit-done/workflows/add-todo.md +161 -0
  318. package/get-shit-done/workflows/ai-integration-phase.md +295 -0
  319. package/get-shit-done/workflows/analyze-dependencies.md +96 -0
  320. package/get-shit-done/workflows/audit-fix.md +178 -0
  321. package/get-shit-done/workflows/audit-milestone.md +358 -0
  322. package/get-shit-done/workflows/audit-uat.md +110 -0
  323. package/get-shit-done/workflows/autonomous.md +795 -0
  324. package/get-shit-done/workflows/check-todos.md +180 -0
  325. package/get-shit-done/workflows/cleanup.md +155 -0
  326. package/get-shit-done/workflows/code-review-fix.md +502 -0
  327. package/get-shit-done/workflows/code-review.md +656 -0
  328. package/get-shit-done/workflows/complete-milestone.md +855 -0
  329. package/get-shit-done/workflows/debug.md +232 -0
  330. package/get-shit-done/workflows/diagnose-issues.md +241 -0
  331. package/get-shit-done/workflows/discovery-phase.md +291 -0
  332. package/get-shit-done/workflows/discuss-phase/modes/advisor.md +176 -0
  333. package/get-shit-done/workflows/discuss-phase/modes/all.md +28 -0
  334. package/get-shit-done/workflows/discuss-phase/modes/analyze.md +44 -0
  335. package/get-shit-done/workflows/discuss-phase/modes/auto.md +57 -0
  336. package/get-shit-done/workflows/discuss-phase/modes/batch.md +52 -0
  337. package/get-shit-done/workflows/discuss-phase/modes/chain.md +98 -0
  338. package/get-shit-done/workflows/discuss-phase/modes/default.md +141 -0
  339. package/get-shit-done/workflows/discuss-phase/modes/power.md +44 -0
  340. package/get-shit-done/workflows/discuss-phase/modes/text.md +55 -0
  341. package/get-shit-done/workflows/discuss-phase/templates/checkpoint.json +18 -0
  342. package/get-shit-done/workflows/discuss-phase/templates/context.md +136 -0
  343. package/get-shit-done/workflows/discuss-phase/templates/discussion-log.md +50 -0
  344. package/get-shit-done/workflows/discuss-phase-assumptions.md +675 -0
  345. package/get-shit-done/workflows/discuss-phase-power.md +291 -0
  346. package/get-shit-done/workflows/discuss-phase.md +499 -0
  347. package/get-shit-done/workflows/do.md +111 -0
  348. package/get-shit-done/workflows/docs-update.md +1162 -0
  349. package/get-shit-done/workflows/edit-phase.md +295 -0
  350. package/get-shit-done/workflows/eval-review.md +156 -0
  351. package/get-shit-done/workflows/execute-phase/steps/codebase-drift-gate.md +82 -0
  352. package/get-shit-done/workflows/execute-phase/steps/per-plan-worktree-gate.md +94 -0
  353. package/get-shit-done/workflows/execute-phase/steps/post-merge-gate.md +117 -0
  354. package/get-shit-done/workflows/execute-phase.md +1709 -0
  355. package/get-shit-done/workflows/execute-plan.md +526 -0
  356. package/get-shit-done/workflows/explore.md +144 -0
  357. package/get-shit-done/workflows/extract-learnings.md +243 -0
  358. package/get-shit-done/workflows/fast.md +124 -0
  359. package/get-shit-done/workflows/forensics.md +279 -0
  360. package/get-shit-done/workflows/graduation.md +196 -0
  361. package/get-shit-done/workflows/health.md +224 -0
  362. package/get-shit-done/workflows/help/modes/brief.md +22 -0
  363. package/get-shit-done/workflows/help/modes/default.md +50 -0
  364. package/get-shit-done/workflows/help/modes/full.md +784 -0
  365. package/get-shit-done/workflows/help/modes/topic.md +74 -0
  366. package/get-shit-done/workflows/help.md +24 -0
  367. package/get-shit-done/workflows/import.md +254 -0
  368. package/get-shit-done/workflows/inbox.md +387 -0
  369. package/get-shit-done/workflows/ingest-docs.md +339 -0
  370. package/get-shit-done/workflows/insert-phase.md +152 -0
  371. package/get-shit-done/workflows/list-phase-assumptions.md +178 -0
  372. package/get-shit-done/workflows/list-workspaces.md +57 -0
  373. package/get-shit-done/workflows/manager.md +393 -0
  374. package/get-shit-done/workflows/map-codebase.md +444 -0
  375. package/get-shit-done/workflows/milestone-summary.md +224 -0
  376. package/get-shit-done/workflows/mvp-phase.md +222 -0
  377. package/get-shit-done/workflows/new-milestone.md +635 -0
  378. package/get-shit-done/workflows/new-project.md +1555 -0
  379. package/get-shit-done/workflows/new-workspace.md +240 -0
  380. package/get-shit-done/workflows/next.md +299 -0
  381. package/get-shit-done/workflows/node-repair.md +92 -0
  382. package/get-shit-done/workflows/note.md +158 -0
  383. package/get-shit-done/workflows/pause-work.md +244 -0
  384. package/get-shit-done/workflows/plan-milestone-gaps.md +281 -0
  385. package/get-shit-done/workflows/plan-phase.md +1809 -0
  386. package/get-shit-done/workflows/plan-review-convergence.md +346 -0
  387. package/get-shit-done/workflows/plant-seed.md +230 -0
  388. package/get-shit-done/workflows/pr-branch.md +157 -0
  389. package/get-shit-done/workflows/profile-user.md +453 -0
  390. package/get-shit-done/workflows/progress.md +699 -0
  391. package/get-shit-done/workflows/quick.md +1039 -0
  392. package/get-shit-done/workflows/reapply-patches.md +426 -0
  393. package/get-shit-done/workflows/remove-phase.md +156 -0
  394. package/get-shit-done/workflows/remove-workspace.md +108 -0
  395. package/get-shit-done/workflows/resume-project.md +332 -0
  396. package/get-shit-done/workflows/review.md +623 -0
  397. package/get-shit-done/workflows/scan.md +105 -0
  398. package/get-shit-done/workflows/secure-phase.md +180 -0
  399. package/get-shit-done/workflows/session-report.md +146 -0
  400. package/get-shit-done/workflows/settings-advanced.md +620 -0
  401. package/get-shit-done/workflows/settings-integrations.md +312 -0
  402. package/get-shit-done/workflows/settings.md +552 -0
  403. package/get-shit-done/workflows/ship.md +356 -0
  404. package/get-shit-done/workflows/sketch-wrap-up.md +286 -0
  405. package/get-shit-done/workflows/sketch.md +361 -0
  406. package/get-shit-done/workflows/spec-phase.md +262 -0
  407. package/get-shit-done/workflows/spike-wrap-up.md +307 -0
  408. package/get-shit-done/workflows/spike.md +453 -0
  409. package/get-shit-done/workflows/stats.md +80 -0
  410. package/get-shit-done/workflows/sync-skills.md +182 -0
  411. package/get-shit-done/workflows/thread.md +222 -0
  412. package/get-shit-done/workflows/transition.md +694 -0
  413. package/get-shit-done/workflows/ui-phase.md +328 -0
  414. package/get-shit-done/workflows/ui-review.md +193 -0
  415. package/get-shit-done/workflows/ultraplan-phase.md +199 -0
  416. package/get-shit-done/workflows/undo.md +314 -0
  417. package/get-shit-done/workflows/update.md +443 -0
  418. package/get-shit-done/workflows/validate-phase.md +179 -0
  419. package/get-shit-done/workflows/verify-phase.md +544 -0
  420. package/get-shit-done/workflows/verify-work.md +781 -0
  421. package/hooks/dist/gsd-check-update-worker.js +95 -0
  422. package/hooks/dist/gsd-check-update.js +64 -0
  423. package/hooks/dist/gsd-context-monitor.js +195 -0
  424. package/hooks/dist/gsd-graphify-update.sh +158 -0
  425. package/hooks/dist/gsd-phase-boundary.sh +47 -0
  426. package/hooks/dist/gsd-prompt-guard.js +97 -0
  427. package/hooks/dist/gsd-read-guard.js +101 -0
  428. package/hooks/dist/gsd-read-injection-scanner.js +203 -0
  429. package/hooks/dist/gsd-session-state.sh +59 -0
  430. package/hooks/dist/gsd-statusline.js +548 -0
  431. package/hooks/dist/gsd-update-banner.js +134 -0
  432. package/hooks/dist/gsd-validate-commit.sh +57 -0
  433. package/hooks/dist/gsd-workflow-guard.js +166 -0
  434. package/hooks/dist/lib/git-cmd.js +150 -0
  435. package/hooks/dist/lib/gsd-graphify-rebuild.sh +65 -0
  436. package/hooks/gsd-check-update-worker.js +95 -0
  437. package/hooks/gsd-check-update.js +64 -0
  438. package/hooks/gsd-context-monitor.js +195 -0
  439. package/hooks/gsd-graphify-update.sh +158 -0
  440. package/hooks/gsd-phase-boundary.sh +47 -0
  441. package/hooks/gsd-prompt-guard.js +97 -0
  442. package/hooks/gsd-read-guard.js +101 -0
  443. package/hooks/gsd-read-injection-scanner.js +203 -0
  444. package/hooks/gsd-session-state.sh +59 -0
  445. package/hooks/gsd-statusline.js +548 -0
  446. package/hooks/gsd-update-banner.js +134 -0
  447. package/hooks/gsd-validate-commit.sh +57 -0
  448. package/hooks/gsd-workflow-guard.js +166 -0
  449. package/hooks/lib/git-cmd.js +150 -0
  450. package/hooks/lib/gsd-graphify-rebuild.sh +65 -0
  451. package/hooks/managed-hooks-registry.cjs +34 -0
  452. package/package.json +102 -0
  453. package/scripts/affected-tests-lib.cjs +541 -0
  454. package/scripts/audit-workflow-script-paths.cjs +73 -0
  455. package/scripts/base64-scan.sh +339 -0
  456. package/scripts/build-hooks.js +236 -0
  457. package/scripts/changeset/README.md +129 -0
  458. package/scripts/changeset/cli.cjs +392 -0
  459. package/scripts/changeset/github-release-notes.cjs +199 -0
  460. package/scripts/changeset/lint.cjs +110 -0
  461. package/scripts/changeset/new.cjs +137 -0
  462. package/scripts/changeset/parse.cjs +114 -0
  463. package/scripts/changeset/render.cjs +34 -0
  464. package/scripts/changeset/serialize.cjs +130 -0
  465. package/scripts/check-alias-drift.cjs +108 -0
  466. package/scripts/check-env.cjs +302 -0
  467. package/scripts/check-npm-integrity.cjs +209 -0
  468. package/scripts/ci-guard-runner.cjs +16 -0
  469. package/scripts/ci-prepare-test-scope.cjs +46 -0
  470. package/scripts/ci-rebase-check.cjs +85 -0
  471. package/scripts/ci-test-scope.cjs +302 -0
  472. package/scripts/command-contract-helpers.cjs +64 -0
  473. package/scripts/diff-touches-shipped-paths.cjs +147 -0
  474. package/scripts/fix-slash-commands.cjs +147 -0
  475. package/scripts/gen-inventory-manifest.cjs +109 -0
  476. package/scripts/generate-package-identity.cjs +104 -0
  477. package/scripts/lint-command-contract.cjs +108 -0
  478. package/scripts/lint-descriptions.cjs +83 -0
  479. package/scripts/lint-docs-required.cjs +222 -0
  480. package/scripts/lint-no-source-grep-extras.cjs +81 -0
  481. package/scripts/lint-no-source-grep.cjs +174 -0
  482. package/scripts/lint-package-identity-drift.cjs +141 -0
  483. package/scripts/lint-pr-check-project-dir.cjs +98 -0
  484. package/scripts/lint-shared-module-handsync.cjs +388 -0
  485. package/scripts/lint-shell-command-projection-drift.cjs +57 -0
  486. package/scripts/lint-skill-deps.cjs +180 -0
  487. package/scripts/lint-test-file-count.allowlist.json +36 -0
  488. package/scripts/lint-test-file-count.cjs +190 -0
  489. package/scripts/pr-template-policy.cjs +268 -0
  490. package/scripts/prompt-injection-scan.sh +203 -0
  491. package/scripts/release-tarball-smoke.cjs +627 -0
  492. package/scripts/run-affected-tests.cjs +6 -0
  493. package/scripts/run-cross-platform-tests.cjs +63 -0
  494. package/scripts/run-tests.cjs +282 -0
  495. package/scripts/secret-scan-lint.sh +231 -0
  496. package/scripts/secret-scan.sh +358 -0
  497. package/scripts/setup-branch-protection.sh +236 -0
  498. package/scripts/shared-module-handsync-allowlist.json +183 -0
  499. package/scripts/strip-prose-atrefs.cjs +106 -0
  500. package/scripts/sync-rulesets.sh +34 -0
  501. package/scripts/sync-runtime-launcher.cjs +402 -0
  502. package/scripts/test-failure-reasons.cjs +34 -0
  503. package/scripts/workflow-policy.cjs +450 -0
@@ -0,0 +1,389 @@
1
+ /**
2
+ * Frontmatter — YAML frontmatter parsing, serialization, and CRUD commands
3
+ */
4
+
5
+ const fs = require('fs');
6
+ const path = require('path');
7
+ const { output, error } = require('./core.cjs');
8
+ const { platformReadSync: safeReadFile, platformWriteSync } = require('./shell-command-projection.cjs');
9
+
10
+ // ─── Parsing engine ───────────────────────────────────────────────────────────
11
+
12
+ /**
13
+ * Split a YAML inline array body on commas, respecting quoted strings.
14
+ * e.g. '"a, b", c' → ['a, b', 'c']
15
+ */
16
+ function splitInlineArray(body) {
17
+ const items = [];
18
+ let current = '';
19
+ let inQuote = null; // null | '"' | "'"
20
+
21
+ for (let i = 0; i < body.length; i++) {
22
+ const ch = body[i];
23
+ if (inQuote) {
24
+ if (ch === inQuote) {
25
+ inQuote = null;
26
+ } else {
27
+ current += ch;
28
+ }
29
+ } else if (ch === '"' || ch === "'") {
30
+ inQuote = ch;
31
+ } else if (ch === ',') {
32
+ const trimmed = current.trim();
33
+ if (trimmed) items.push(trimmed);
34
+ current = '';
35
+ } else {
36
+ current += ch;
37
+ }
38
+ }
39
+ const trimmed = current.trim();
40
+ if (trimmed) items.push(trimmed);
41
+ return items;
42
+ }
43
+
44
+ function extractFrontmatter(content) {
45
+ const frontmatter = {};
46
+ // Match frontmatter only at byte 0 — a `---` block later in the document
47
+ // body (YAML examples, horizontal rules) must never be treated as frontmatter.
48
+ const match = content.match(/^---\r?\n([\s\S]+?)\r?\n---/);
49
+ if (!match) return frontmatter;
50
+
51
+ const yaml = match[1];
52
+ const lines = yaml.split(/\r?\n/);
53
+
54
+ // Stack to track nested objects: [{obj, key, indent}]
55
+ // obj = object to write to, key = current key collecting array items, indent = indentation level
56
+ const stack = [{ obj: frontmatter, key: null, indent: -1 }];
57
+
58
+ for (const line of lines) {
59
+ // Skip empty lines
60
+ if (line.trim() === '') continue;
61
+
62
+ // Calculate indentation (number of leading spaces)
63
+ const indentMatch = line.match(/^(\s*)/);
64
+ const indent = indentMatch ? indentMatch[1].length : 0;
65
+
66
+ // Pop stack back to appropriate level
67
+ while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
68
+ stack.pop();
69
+ }
70
+
71
+ const current = stack[stack.length - 1];
72
+
73
+ // Check for key: value pattern
74
+ const keyMatch = line.match(/^(\s*)([a-zA-Z0-9_-]+):\s*(.*)/);
75
+ if (keyMatch) {
76
+ const key = keyMatch[2];
77
+ const value = keyMatch[3].trim();
78
+
79
+ if (value === '' || value === '[') {
80
+ // Key with no value or opening bracket — could be nested object or array
81
+ // We'll determine based on next lines, for now create placeholder
82
+ current.obj[key] = value === '[' ? [] : {};
83
+ current.key = null;
84
+ // Push new context for potential nested content
85
+ stack.push({ obj: current.obj[key], key: null, indent });
86
+ } else if (value.startsWith('[') && value.endsWith(']')) {
87
+ // Inline array: key: [a, b, c] — quote-aware split (REG-04 fix)
88
+ current.obj[key] = splitInlineArray(value.slice(1, -1));
89
+ current.key = null;
90
+ } else {
91
+ // Simple key: value
92
+ current.obj[key] = value.replace(/^["']|["']$/g, '');
93
+ current.key = null;
94
+ }
95
+ } else if (line.trim().startsWith('- ')) {
96
+ // Array item
97
+ const itemValue = line.trim().slice(2).replace(/^["']|["']$/g, '');
98
+
99
+ // If current context is an empty object, convert to array
100
+ if (typeof current.obj === 'object' && !Array.isArray(current.obj) && Object.keys(current.obj).length === 0) {
101
+ // Find the key in parent that points to this object and convert it
102
+ const parent = stack.length > 1 ? stack[stack.length - 2] : null;
103
+ if (parent) {
104
+ for (const k of Object.keys(parent.obj)) {
105
+ if (parent.obj[k] === current.obj) {
106
+ parent.obj[k] = [itemValue];
107
+ current.obj = parent.obj[k];
108
+ break;
109
+ }
110
+ }
111
+ }
112
+ } else if (Array.isArray(current.obj)) {
113
+ current.obj.push(itemValue);
114
+ }
115
+ }
116
+ }
117
+
118
+ return frontmatter;
119
+ }
120
+
121
+ function reconstructFrontmatter(obj) {
122
+ const lines = [];
123
+ for (const [key, value] of Object.entries(obj)) {
124
+ if (value === null || value === undefined) continue;
125
+ if (Array.isArray(value)) {
126
+ if (value.length === 0) {
127
+ lines.push(`${key}: []`);
128
+ } else if (value.every(v => typeof v === 'string') && value.length <= 3 && value.join(', ').length < 60) {
129
+ lines.push(`${key}: [${value.join(', ')}]`);
130
+ } else {
131
+ lines.push(`${key}:`);
132
+ for (const item of value) {
133
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
134
+ }
135
+ }
136
+ } else if (typeof value === 'object') {
137
+ lines.push(`${key}:`);
138
+ for (const [subkey, subval] of Object.entries(value)) {
139
+ if (subval === null || subval === undefined) continue;
140
+ if (Array.isArray(subval)) {
141
+ if (subval.length === 0) {
142
+ lines.push(` ${subkey}: []`);
143
+ } else if (subval.every(v => typeof v === 'string') && subval.length <= 3 && subval.join(', ').length < 60) {
144
+ lines.push(` ${subkey}: [${subval.join(', ')}]`);
145
+ } else {
146
+ lines.push(` ${subkey}:`);
147
+ for (const item of subval) {
148
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
149
+ }
150
+ }
151
+ } else if (typeof subval === 'object') {
152
+ lines.push(` ${subkey}:`);
153
+ for (const [subsubkey, subsubval] of Object.entries(subval)) {
154
+ if (subsubval === null || subsubval === undefined) continue;
155
+ if (Array.isArray(subsubval)) {
156
+ if (subsubval.length === 0) {
157
+ lines.push(` ${subsubkey}: []`);
158
+ } else {
159
+ lines.push(` ${subsubkey}:`);
160
+ for (const item of subsubval) {
161
+ lines.push(` - ${item}`);
162
+ }
163
+ }
164
+ } else {
165
+ lines.push(` ${subsubkey}: ${subsubval}`);
166
+ }
167
+ }
168
+ } else {
169
+ const sv = String(subval);
170
+ lines.push(` ${subkey}: ${sv.includes(':') || sv.includes('#') ? `"${sv}"` : sv}`);
171
+ }
172
+ }
173
+ } else {
174
+ const sv = String(value);
175
+ if (sv.includes(':') || sv.includes('#') || sv.startsWith('[') || sv.startsWith('{')) {
176
+ lines.push(`${key}: "${sv}"`);
177
+ } else {
178
+ lines.push(`${key}: ${sv}`);
179
+ }
180
+ }
181
+ }
182
+ return lines.join('\n');
183
+ }
184
+
185
+ function spliceFrontmatter(content, newObj) {
186
+ const yamlStr = reconstructFrontmatter(newObj);
187
+ const match = content.match(/^---\r?\n[\s\S]+?\r?\n---/);
188
+ if (match) {
189
+ return `---\n${yamlStr}\n---` + content.slice(match[0].length);
190
+ }
191
+ return `---\n${yamlStr}\n---\n\n` + content;
192
+ }
193
+
194
+ function parseMustHavesBlock(content, blockName) {
195
+ // Extract a specific block from must_haves in raw frontmatter YAML
196
+ // Handles 3-level nesting: must_haves > artifacts/key_links > [{path, provides, ...}]
197
+ const fmMatch = content.match(/^---\r?\n([\s\S]+?)\r?\n---/);
198
+ if (!fmMatch) return [];
199
+
200
+ const yaml = fmMatch[1];
201
+
202
+ // Find must_haves: first to detect its indentation level
203
+ const mustHavesMatch = yaml.match(/^(\s*)must_haves:\s*$/m);
204
+ if (!mustHavesMatch) return [];
205
+ const mustHavesIndent = mustHavesMatch[1].length;
206
+
207
+ // Find the block (e.g., "truths:", "artifacts:", "key_links:") under must_haves
208
+ // It must be indented more than must_haves but we detect the actual indent dynamically
209
+ const blockPattern = new RegExp(`^(\\s+)${blockName}:\\s*$`, 'm');
210
+ const blockMatch = yaml.match(blockPattern);
211
+ if (!blockMatch) return [];
212
+
213
+ const blockIndent = blockMatch[1].length;
214
+ // The block must be nested under must_haves (more indented)
215
+ if (blockIndent <= mustHavesIndent) return [];
216
+
217
+ // Find where the block starts in the yaml string
218
+ const blockStart = yaml.indexOf(blockMatch[0]);
219
+ if (blockStart === -1) return [];
220
+
221
+ const afterBlock = yaml.slice(blockStart);
222
+ const blockLines = afterBlock.split(/\r?\n/).slice(1); // skip the header line
223
+
224
+ // List items are indented one level deeper than blockIndent
225
+ // Continuation KVs are indented one level deeper than list items
226
+ const items = [];
227
+ let current = null;
228
+ let listItemIndent = -1; // detected from first "- " line
229
+
230
+ for (const line of blockLines) {
231
+ // Skip empty lines
232
+ if (line.trim() === '') continue;
233
+ const indent = line.match(/^(\s*)/)[1].length;
234
+ // Stop at same or lower indent level than the block header
235
+ if (indent <= blockIndent && line.trim() !== '') break;
236
+
237
+ const trimmed = line.trim();
238
+
239
+ if (trimmed.startsWith('- ')) {
240
+ // Detect list item indent from the first occurrence
241
+ if (listItemIndent === -1) listItemIndent = indent;
242
+
243
+ // Only treat as a top-level list item if at the expected indent
244
+ if (indent === listItemIndent) {
245
+ if (current) items.push(current);
246
+ const afterDash = trimmed.slice(2);
247
+ const trimmedAfterDash = afterDash.trim();
248
+ // Check if it's a fully-quoted string (may contain ':' inside the quotes)
249
+ if ((trimmedAfterDash.startsWith('"') && trimmedAfterDash.endsWith('"')) ||
250
+ (trimmedAfterDash.startsWith("'") && trimmedAfterDash.endsWith("'"))) {
251
+ current = trimmedAfterDash.slice(1, -1);
252
+ // Check if it's a simple string item (no colon means not a key-value)
253
+ } else if (!afterDash.includes(':')) {
254
+ current = afterDash.replace(/^["']|["']$/g, '');
255
+ } else {
256
+ // Key-value on same line as dash: "- path: value"
257
+ // YAML KV always has at least one space after the colon: "key: value"
258
+ // Requiring \s+ rejects "Class::Method" and "db:seed" (no space after colon)
259
+ const kvMatch = afterDash.match(/^(\w+):\s+"?([^"]*)"?\s*$/);
260
+ if (kvMatch) {
261
+ current = {};
262
+ current[kvMatch[1]] = kvMatch[2];
263
+ } else {
264
+ // Looks like KV but doesn't match — treat as plain string (#2757)
265
+ current = afterDash.replace(/^["']|["']$/g, '');
266
+ }
267
+ }
268
+ continue;
269
+ }
270
+ }
271
+
272
+ if (current && typeof current === 'object' && indent > listItemIndent) {
273
+ // Continuation key-value or nested array item
274
+ if (trimmed.startsWith('- ')) {
275
+ // Array item under a key
276
+ const arrVal = trimmed.slice(2).replace(/^["']|["']$/g, '');
277
+ const keys = Object.keys(current);
278
+ const lastKey = keys[keys.length - 1];
279
+ if (lastKey && !Array.isArray(current[lastKey])) {
280
+ current[lastKey] = current[lastKey] ? [current[lastKey]] : [];
281
+ }
282
+ if (lastKey) current[lastKey].push(arrVal);
283
+ } else {
284
+ const kvMatch = trimmed.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
285
+ if (kvMatch) {
286
+ const val = kvMatch[2];
287
+ // Try to parse as number
288
+ current[kvMatch[1]] = /^\d+$/.test(val) ? parseInt(val, 10) : val;
289
+ }
290
+ }
291
+ }
292
+ }
293
+ if (current) items.push(current);
294
+
295
+ // Warn when must_haves block exists but parsed as empty -- likely YAML formatting issue.
296
+ // This is a critical diagnostic: empty must_haves causes verification to silently degrade
297
+ // to Option C (LLM-derived truths) instead of checking documented contracts.
298
+ if (items.length === 0 && blockLines.length > 0) {
299
+ const nonEmptyLines = blockLines.filter(l => l.trim() !== '').length;
300
+ if (nonEmptyLines > 0) {
301
+ process.stderr.write(
302
+ `[gsd-tools] WARNING: must_haves.${blockName} block has ${nonEmptyLines} content lines but parsed 0 items. ` +
303
+ `Possible YAML formatting issue — verification will fall back to LLM-derived truths.\n`
304
+ );
305
+ }
306
+ }
307
+
308
+ return items;
309
+ }
310
+
311
+ // ─── Frontmatter CRUD commands ────────────────────────────────────────────────
312
+
313
+ const FRONTMATTER_SCHEMAS = {
314
+ plan: { required: ['phase', 'plan', 'type', 'wave', 'depends_on', 'files_modified', 'autonomous', 'must_haves'] },
315
+ summary: { required: ['phase', 'plan', 'subsystem', 'tags', 'duration', 'completed'] },
316
+ verification: { required: ['phase', 'verified', 'status', 'score'] },
317
+ };
318
+
319
+ function cmdFrontmatterGet(cwd, filePath, field, raw) {
320
+ if (!filePath) { error('file path required'); }
321
+ // Path traversal guard: reject null bytes
322
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
323
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
324
+ const content = safeReadFile(fullPath);
325
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
326
+ const fm = extractFrontmatter(content);
327
+ if (field) {
328
+ const value = fm[field];
329
+ if (value === undefined) { output({ error: 'Field not found', field }, raw); return; }
330
+ output({ [field]: value }, raw, JSON.stringify(value));
331
+ } else {
332
+ output(fm, raw);
333
+ }
334
+ }
335
+
336
+ function cmdFrontmatterSet(cwd, filePath, field, value, raw) {
337
+ if (!filePath || !field || value === undefined) { error('file, field, and value required'); }
338
+ // Path traversal guard: reject null bytes
339
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
340
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
341
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
342
+ const content = fs.readFileSync(fullPath, 'utf-8');
343
+ const fm = extractFrontmatter(content);
344
+ let parsedValue;
345
+ try { parsedValue = JSON.parse(value); } catch { parsedValue = value; }
346
+ fm[field] = parsedValue;
347
+ const newContent = spliceFrontmatter(content, fm);
348
+ platformWriteSync(fullPath, newContent);
349
+ output({ updated: true, field, value: parsedValue }, raw, 'true');
350
+ }
351
+
352
+ function cmdFrontmatterMerge(cwd, filePath, data, raw) {
353
+ if (!filePath || !data) { error('file and data required'); }
354
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
355
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
356
+ const content = fs.readFileSync(fullPath, 'utf-8');
357
+ const fm = extractFrontmatter(content);
358
+ let mergeData;
359
+ try { mergeData = JSON.parse(data); } catch { error('Invalid JSON for --data'); return; }
360
+ Object.assign(fm, mergeData);
361
+ const newContent = spliceFrontmatter(content, fm);
362
+ platformWriteSync(fullPath, newContent);
363
+ output({ merged: true, fields: Object.keys(mergeData) }, raw, 'true');
364
+ }
365
+
366
+ function cmdFrontmatterValidate(cwd, filePath, schemaName, raw) {
367
+ if (!filePath || !schemaName) { error('file and schema required'); }
368
+ const schema = FRONTMATTER_SCHEMAS[schemaName];
369
+ if (!schema) { error(`Unknown schema: ${schemaName}. Available: ${Object.keys(FRONTMATTER_SCHEMAS).join(', ')}`); }
370
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
371
+ const content = safeReadFile(fullPath);
372
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
373
+ const fm = extractFrontmatter(content);
374
+ const missing = schema.required.filter(f => fm[f] === undefined);
375
+ const present = schema.required.filter(f => fm[f] !== undefined);
376
+ output({ valid: missing.length === 0, missing, present, schema: schemaName }, raw, missing.length === 0 ? 'valid' : 'invalid');
377
+ }
378
+
379
+ module.exports = {
380
+ extractFrontmatter,
381
+ reconstructFrontmatter,
382
+ spliceFrontmatter,
383
+ parseMustHavesBlock,
384
+ FRONTMATTER_SCHEMAS,
385
+ cmdFrontmatterGet,
386
+ cmdFrontmatterSet,
387
+ cmdFrontmatterMerge,
388
+ cmdFrontmatterValidate,
389
+ };
@@ -0,0 +1,205 @@
1
+ 'use strict';
2
+
3
+ /**
4
+ * Post-planning gap analysis (#2493).
5
+ *
6
+ * Reads REQUIREMENTS.md (planning-root) and CONTEXT.md (per-phase) and compares
7
+ * each REQ-ID and D-ID against the concatenated text of all PLAN.md files in
8
+ * the phase directory. Emits a unified `Source | Item | Status` report.
9
+ *
10
+ * Gated on workflow.post_planning_gaps (default true). When false, returns
11
+ * { enabled: false } and does not scan.
12
+ *
13
+ * Coverage detection uses word-boundary regex matching to avoid false positives
14
+ * (REQ-1 must not match REQ-10).
15
+ */
16
+
17
+ const fs = require('fs');
18
+ const path = require('path');
19
+ const { escapeRegex, output, error } = require('./core.cjs');
20
+ const { planningPaths, planningDir, findContextMdIn } = require('./planning-workspace.cjs');
21
+ const { parseDecisions } = require('./decisions.cjs');
22
+
23
+ /**
24
+ * Parse REQ-IDs from REQUIREMENTS.md content.
25
+ *
26
+ * Supports both checkbox (`- [ ] **REQ-NN** ...`) and traceability table
27
+ * (`| REQ-NN | ... |`) formats.
28
+ */
29
+ function parseRequirements(reqMd) {
30
+ if (!reqMd || typeof reqMd !== 'string') return [];
31
+ const out = [];
32
+ const seen = new Set();
33
+
34
+ // Prefix-agnostic ID format: REQ-01, TST-01, BACK-07, INSP-04, etc.
35
+ const ID_PATTERN = '[A-Z][A-Z0-9]*-[A-Za-z0-9_-]+';
36
+
37
+ const checkboxRe = new RegExp(`^\\s*-\\s*\\[[x ]\\]\\s*\\*\\*(${ID_PATTERN})\\*\\*\\s*(.*)$`, 'gm');
38
+ let cm = checkboxRe.exec(reqMd);
39
+ while (cm !== null) {
40
+ const id = cm[1];
41
+ if (!seen.has(id)) {
42
+ seen.add(id);
43
+ out.push({ id, text: (cm[2] || '').trim() });
44
+ }
45
+ cm = checkboxRe.exec(reqMd);
46
+ }
47
+
48
+ const tableFirstCellRe = new RegExp(`^\\s*\\|\\s*(${ID_PATTERN})\\s*\\|`);
49
+ const separatorRowRe = /^\s*\|[\s:|-]+\|\s*$/;
50
+ const lines = reqMd.split(/\r?\n/);
51
+
52
+ for (let i = 0; i < lines.length; i += 1) {
53
+ const line = lines[i];
54
+ if (!line.includes('|')) continue;
55
+
56
+ // Skip markdown table separator rows and header rows immediately preceding them.
57
+ if (separatorRowRe.test(line)) continue;
58
+ if (i + 1 < lines.length && separatorRowRe.test(lines[i + 1])) continue;
59
+
60
+ const tm = tableFirstCellRe.exec(line);
61
+ if (!tm) continue;
62
+ const id = tm[1];
63
+ if (!seen.has(id)) {
64
+ seen.add(id);
65
+ out.push({ id, text: '' });
66
+ }
67
+ }
68
+
69
+ return out;
70
+ }
71
+
72
+ function detectCoverage(items, planText) {
73
+ return items.map(it => {
74
+ const re = new RegExp('\\b' + escapeRegex(it.id) + '\\b');
75
+ return {
76
+ source: it.source,
77
+ item: it.id,
78
+ status: re.test(planText) ? 'Covered' : 'Not covered',
79
+ };
80
+ });
81
+ }
82
+
83
+ function naturalKey(s) {
84
+ return String(s).replace(/(\d+)/g, (_, n) => n.padStart(8, '0'));
85
+ }
86
+
87
+ function sortRows(rows) {
88
+ const sourceOrder = { 'REQUIREMENTS.md': 0, 'CONTEXT.md': 1 };
89
+ return rows.slice().sort((a, b) => {
90
+ const so = (sourceOrder[a.source] ?? 99) - (sourceOrder[b.source] ?? 99);
91
+ if (so !== 0) return so;
92
+ return naturalKey(a.item).localeCompare(naturalKey(b.item));
93
+ });
94
+ }
95
+
96
+ function formatGapTable(rows) {
97
+ if (rows.length === 0) {
98
+ return '## Post-Planning Gap Analysis\n\nNo requirements or decisions to check.\n';
99
+ }
100
+ const header = '| Source | Item | Status |\n|--------|------|--------|';
101
+ const body = rows.map(r => {
102
+ const tick = r.status === 'Covered' ? '\u2713 Covered' : '\u2717 Not covered';
103
+ return `| ${r.source} | ${r.item} | ${tick} |`;
104
+ }).join('\n');
105
+ return `## Post-Planning Gap Analysis\n\n${header}\n${body}\n`;
106
+ }
107
+
108
+ function readGate(cwd) {
109
+ const cfgPath = path.join(planningDir(cwd), 'config.json');
110
+ try {
111
+ const raw = JSON.parse(fs.readFileSync(cfgPath, 'utf-8'));
112
+ if (raw && raw.workflow && typeof raw.workflow.post_planning_gaps === 'boolean') {
113
+ return raw.workflow.post_planning_gaps;
114
+ }
115
+ } catch { /* fall through */ }
116
+ return true;
117
+ }
118
+
119
+ function runGapAnalysis(cwd, phaseDir) {
120
+ if (!readGate(cwd)) {
121
+ return {
122
+ enabled: false,
123
+ rows: [],
124
+ table: '',
125
+ summary: 'workflow.post_planning_gaps disabled — skipping post-planning gap analysis',
126
+ counts: { total: 0, covered: 0, uncovered: 0 },
127
+ };
128
+ }
129
+
130
+ const absPhaseDir = path.isAbsolute(phaseDir) ? phaseDir : path.join(cwd, phaseDir);
131
+
132
+ const reqPath = planningPaths(cwd).requirements;
133
+ const reqMd = fs.existsSync(reqPath) ? fs.readFileSync(reqPath, 'utf-8') : '';
134
+ const reqItems = parseRequirements(reqMd).map(r => ({ ...r, source: 'REQUIREMENTS.md' }));
135
+
136
+ // Read the phase directory once; reuse the listing for both context detection
137
+ // and plan-file enumeration (avoids redundant readdirSync calls).
138
+ let phaseDirFiles = [];
139
+ try {
140
+ if (fs.existsSync(absPhaseDir)) phaseDirFiles = fs.readdirSync(absPhaseDir);
141
+ } catch { /* unreadable */ }
142
+
143
+ const ctxFile = findContextMdIn(phaseDirFiles);
144
+ const ctxPath = ctxFile ? path.join(absPhaseDir, ctxFile) : null;
145
+ const ctxMd = ctxPath ? fs.readFileSync(ctxPath, 'utf-8') : '';
146
+ const dItems = parseDecisions(ctxMd).map(d => ({ ...d, source: 'CONTEXT.md' }));
147
+
148
+ const items = [...reqItems, ...dItems];
149
+
150
+ let planText = '';
151
+ try {
152
+ if (phaseDirFiles.length > 0) {
153
+ const files = phaseDirFiles.filter(f => /-PLAN\.md$/.test(f));
154
+ planText = files.map(f => {
155
+ try { return fs.readFileSync(path.join(absPhaseDir, f), 'utf-8'); }
156
+ catch { return ''; }
157
+ }).join('\n');
158
+ }
159
+ } catch { /* unreadable */ }
160
+
161
+ if (items.length === 0) {
162
+ return {
163
+ enabled: true,
164
+ rows: [],
165
+ table: '## Post-Planning Gap Analysis\n\nNo requirements or decisions to check.\n',
166
+ summary: 'no requirements or decisions to check',
167
+ counts: { total: 0, covered: 0, uncovered: 0 },
168
+ };
169
+ }
170
+
171
+ const rows = sortRows(detectCoverage(items, planText));
172
+ const uncovered = rows.filter(r => r.status === 'Not covered').length;
173
+ const covered = rows.length - uncovered;
174
+
175
+ const summary = uncovered === 0
176
+ ? `\u2713 All ${rows.length} items covered by plans`
177
+ : `\u26A0 ${uncovered} of ${rows.length} items not covered by any plan`;
178
+
179
+ return {
180
+ enabled: true,
181
+ rows,
182
+ table: formatGapTable(rows) + '\n' + summary + '\n',
183
+ summary,
184
+ counts: { total: rows.length, covered, uncovered },
185
+ };
186
+ }
187
+
188
+ function cmdGapAnalysis(cwd, args, raw) {
189
+ const idx = args.indexOf('--phase-dir');
190
+ if (idx === -1 || !args[idx + 1]) {
191
+ error('Usage: gap-analysis --phase-dir <path-to-phase-directory>');
192
+ }
193
+ const phaseDir = args[idx + 1];
194
+ const result = runGapAnalysis(cwd, phaseDir);
195
+ output(result, raw, result.table || result.summary);
196
+ }
197
+
198
+ module.exports = {
199
+ parseRequirements,
200
+ detectCoverage,
201
+ formatGapTable,
202
+ sortRows,
203
+ runGapAnalysis,
204
+ cmdGapAnalysis,
205
+ };