@pareto4/pp-core 1.21.0 → 1.21.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pp-core",
   "displayName": "PP Core",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "PP Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.",
   "author": {
     "name": "pareto4",

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "pp-core",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "PP Core — a meta-prompting, context engineering, and spec-driven development system for AI coding agents. Loads pp-core's operating context into every Gemini CLI session.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pareto4/pp-core",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "Pareto pp-core — The Pareto Project's AI-assisted engineering framework: meta-prompting, context engineering, and spec-driven development for AI coding agents.",
   "bin": {
     "pp-core": "bin/install.js",

package/pp-core/bin/lib/phase.cjs

@@ -58,7 +58,7 @@ const uatPredicate = require("./uat-predicate.cjs");
 const { evaluateUatPassed } = uatPredicate;
 const { planningDir, withPlanningLock, milestonePathsFor } = planningWorkspace;
 const { extractFrontmatter } = frontmatterMod;
-const { readModifyWriteStateMd, stateExtractField, stateReplaceField, stateReplaceFieldWithFallback, syncStateFrontmatter, withStateLock, updatePerformanceMetricsSection, } = stateMod;
+const { readModifyWriteStateMd, stateExtractField, stateReplaceField, stateReplaceFieldWithFallback, syncStateFrontmatter, stripFrontmatter, withStateLock, updatePerformanceMetricsSection, } = stateMod;
 // #2893 — strict canonical filter: `{padded_phase}-{NN}-PLAN.md` or `PLAN.md`.
 const isCanonicalPlanFile = (f) => f.endsWith('-PLAN.md') || f === 'PLAN.md';
 // Any .md file with PLAN anywhere in the basename — diagnostic net
@@ -1355,7 +1355,13 @@ function cmdPhaseComplete(cwd, phaseNum, raw) {
             }
             if (node_fs_1.default.existsSync(statePath)) {
                 const originalStateContent = (0, shell_command_projection_cjs_1.platformReadSync)(statePath) || '';
-                let stateContent = originalStateContent;
+                // #1257 class: the body-field patterns are case-insensitive and line-anchored, so
+                // run over the whole file they hit the YAML keys first (`status:`, `progress:`)
+                // and the body Status line never moved. Edit the body only; syncStateFrontmatter
+                // below re-derives the frontmatter from it.
+                const strippedBody = stripFrontmatter(originalStateContent);
+                let frontmatterPrefix = originalStateContent.slice(0, originalStateContent.length - strippedBody.length);
+                let stateContent = strippedBody;
                 const phaseValue = nextPhaseNum || phaseNum;
                 const nextPhaseDisplayName = phaseDisplayNameFromRoadmap(roadmapContent, nextPhaseNum) ??
                     phaseDisplayNameFromSlug(nextPhaseName);
@@ -1420,7 +1426,7 @@ function cmdPhaseComplete(cwd, phaseNum, raw) {
                         const newPercent = (0, phase_lifecycle_cjs_1.clampPercent)(newCompleted, totalPhases);
                         stateContent =
                             stateReplaceField(stateContent, 'Progress', `${newPercent}%`) || stateContent;
-                        stateContent = stateContent.replace(/(percent:\s*)\d+/, `$1${newPercent}`);
+                        frontmatterPrefix = frontmatterPrefix.replace(/(percent:\s*)\d+/, `$1${newPercent}`);
                     }
                 }
                 stateContent = updatePerformanceMetricsSection(stateContent, cwd, phaseNum, planCount, summaryCount);
@@ -1430,14 +1436,14 @@ function cmdPhaseComplete(cwd, phaseNum, raw) {
                 // one still on disk.
                 // D-10: this transaction sets Last activity itself; that explicit date flows.
                 const activityFieldSet = (0, state_document_cjs_1.extractPositionalField)(stateContent, 'Last Activity', 'Last activity') !==
-                    (0, state_document_cjs_1.extractPositionalField)(originalStateContent, 'Last Activity', 'Last activity');
+                    (0, state_document_cjs_1.extractPositionalField)(strippedBody, 'Last Activity', 'Last activity');
                 // 261007-rly D-11: phase complete opts OUT of the stopped_at hold and keeps
                 // re-deriving the key from the Session line, as it did before the hold moved
                 // into syncStateFrontmatter: bug #3517's pin (tests/phase.test.cjs) needs a
                 // newer Session line to replace a stale stored value here, the opposite of
                 // the operator-note shape the hold protects. Filed, not decided here:
                 // todos/pending/phase-complete-rederives-stopped-at-from-the-session-line.md.
-                stateContent = syncStateFrontmatter(stateContent, cwd, roadmapContent, activityFieldSet, true);
+                stateContent = syncStateFrontmatter(frontmatterPrefix + stateContent, cwd, roadmapContent, activityFieldSet, true);
                 stateFrontmatterUpdated = (0, state_document_cjs_1.diffFrontmatterFields)(extractFrontmatter(originalStateContent), extractFrontmatter(stateContent));
                 writes.push({ filePath: statePath, before: originalStateContent, after: stateContent });
             }

package/pp-core/bin/lib/state.cjs

@@ -3011,6 +3011,7 @@ module.exports = {
     writeStateMd,
     readModifyWriteStateMd,
     syncStateFrontmatter,
+    stripFrontmatter,
     matchSessionSection,
     withStateLock,
     updatePerformanceMetricsSection,

package/pp-core/workflows/code-review.md

@@ -53,8 +53,9 @@ Parse optional flags from $ARGUMENTS using the typed flag parser:
 # This is the canonical flag-parsing surface — do not replicate inline bash parsing
 # for --fix/--all/--auto here; the module handles all flag extraction and implication
 # logic (e.g., --all and --auto imply --fix).
+PP_LIB=$(printf '%s\n' "${PP_TOOLS:+${PP_TOOLS%/*}:}$PATH" | tr : '\n' | while IFS= read -r d; do if [ -r "$d/lib/code-review-flags.cjs" ]; then printf %s "$d/lib"; break; fi; done); export PP_LIB="${PP_LIB:-$PWD/pp-core/bin/lib}"
 FLAGS_JSON=$(node -e "
-  const { parseCodeReviewFlags } = require('./pp-core/bin/lib/code-review-flags.cjs');
+  const { parseCodeReviewFlags } = require(require('path').resolve(process.env.PP_LIB, 'code-review-flags.cjs'));
   const flags = parseCodeReviewFlags(process.argv.slice(1));
   process.stdout.write(JSON.stringify(flags));
 " -- "$@" 2>/dev/null)
@@ -373,8 +374,9 @@ When `FALLOW_ENABLED=true`:
 
 1) Resolve binary via PATH first, then `node_modules/.bin/fallow`.
 ```bash
+PP_LIB=$(printf '%s\n' "${PP_TOOLS:+${PP_TOOLS%/*}:}$PATH" | tr : '\n' | while IFS= read -r d; do if [ -r "$d/lib/fallow-runner.cjs" ]; then printf %s "$d/lib"; break; fi; done); export PP_LIB="${PP_LIB:-$PWD/pp-core/bin/lib}"
 FALLOW_BIN=$(FALLOW_CWD="$(pwd)" node -e "
-const { resolveFallowBinary } = require('./pp-core/bin/lib/fallow-runner.cjs');
+const { resolveFallowBinary } = require(require('path').resolve(process.env.PP_LIB, 'fallow-runner.cjs'));
 const resolved = resolveFallowBinary({ cwd: process.env.FALLOW_CWD });
 if (resolved) process.stdout.write(resolved);
 ")
@@ -497,9 +499,10 @@ if [ -n "$FALLOW_JSON_PATH" ] && [ -f "$FALLOW_JSON_PATH" ]; then
   # Normalize fallow's raw report into the compact {summary, findings[]} contract
   # the reviewer consumes (real fallow schema -> normalized findings).
   FALLOW_NORMALIZED_PATH="${PHASE_DIR}/FALLOW-normalized.json"
+  PP_LIB=$(printf '%s\n' "${PP_TOOLS:+${PP_TOOLS%/*}:}$PATH" | tr : '\n' | while IFS= read -r d; do if [ -r "$d/lib/fallow-runner.cjs" ]; then printf %s "$d/lib"; break; fi; done); export PP_LIB="${PP_LIB:-$PWD/pp-core/bin/lib}"
   FALLOW_SRC="$FALLOW_JSON_PATH" FALLOW_OUT="$FALLOW_NORMALIZED_PATH" node -e "
     const fs = require('fs');
-    const { normalizeFallowReportFile } = require('./pp-core/bin/lib/fallow-runner.cjs');
+    const { normalizeFallowReportFile } = require(require('path').resolve(process.env.PP_LIB, 'fallow-runner.cjs'));
     const n = normalizeFallowReportFile(process.env.FALLOW_SRC);
     fs.writeFileSync(process.env.FALLOW_OUT, JSON.stringify(n, null, 2));
   " 2>/dev/null && FALLOW_EMBED_PATH="$FALLOW_NORMALIZED_PATH" || FALLOW_EMBED_PATH="$FALLOW_JSON_PATH"

package/pp-core/workflows/execute-phase.md

@@ -549,7 +549,7 @@ increases monotonically across waves. `{status}` is `complete` (success),
    DISPATCH_TS=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
    EXPECTED_BRANCH=$(git rev-parse --abbrev-ref HEAD)
    if [ "${USE_WORKTREES_FOR_PLAN:-true}" != "false" ] && [ -z "${WAVE_WORKTREE_MANIFEST:-}" ]; then
-     WAVE_WORKTREE_MANIFEST=$(mktemp "${TMPDIR:-/tmp}/pp-worktree-wave-XXXXXX.json")
+     WAVE_WORKTREE_MANIFEST=$(mktemp "${TMPDIR:-/tmp}/pp-worktree-wave-XXXXXX")
      # Persist the dispatch-time orchestrator worktree root so wave-cleanup can pin back to the
      # orchestrator's OWN worktree — NOT `git worktree list`'s first entry (always the main
      # checkout), which pins a non-primary (per-phase lane) orchestrator off its branch (#630).

package/pp-core/workflows/init/steps/client-context-capture.md

@@ -67,7 +67,7 @@ if [ "$(pp_run query platform-bindings --pick present 2>/dev/null)" = "true" ];
   # multi-line values, embedded quotes, backslashes, and $(...) sequences are encoded
   # correctly (CR-02: an unquoted heredoc would produce invalid JSON for any multi-line
   # field, breaking cmdGenerateClientContext with "Failed to parse JSON input").
-  TMP_CTX=$(mktemp /tmp/pp-client-ctx-XXXXXX.json)
+  TMP_CTX=$(mktemp /tmp/pp-client-ctx-XXXXXX)
   CLIENT_NAME="$CLIENT_NAME" \
   CLIENT_SLUG="$CLIENT_SLUG" \
   CODING_STANDARDS="$CODING_STANDARDS" \

package/pp-core/workflows/profile-user.md

@@ -218,7 +218,7 @@ Collect all answers into an answers JSON object mapping dimension keys to select
 
 **Save answers to temp file:**
 ```bash
-ANSWERS_PATH=$(mktemp /tmp/pp-profile-answers-XXXXXX.json)
+ANSWERS_PATH=$(mktemp /tmp/pp-profile-answers-XXXXXX)
 ```
 
 Write the answers JSON to `$ANSWERS_PATH`.
@@ -232,7 +232,7 @@ Parse the analysis JSON from the result.
 
 Save analysis JSON to a temp file:
 ```bash
-ANALYSIS_PATH=$(mktemp /tmp/pp-profile-analysis-XXXXXX.json)
+ANALYSIS_PATH=$(mktemp /tmp/pp-profile-analysis-XXXXXX)
 ```
 
 Write the analysis JSON to `$ANALYSIS_PATH`.

package/pp-core/workflows/quick.md

@@ -758,7 +758,7 @@ Capture current HEAD before spawning (used for worktree branch check, and as the
 EXPECTED_BASE=$(git rev-parse HEAD)
 pp_run vault anchor start "${QUICK_DIR}" --raw
 if [ "${USE_WORKTREES:-true}" != "false" ]; then
-  QUICK_WORKTREE_MANIFEST=$(mktemp "${TMPDIR:-/tmp}/pp-quick-worktree-XXXXXX.json")
+  QUICK_WORKTREE_MANIFEST=$(mktemp "${TMPDIR:-/tmp}/pp-quick-worktree-XXXXXX")
   printf '{"worktrees":[]}\n' > "$QUICK_WORKTREE_MANIFEST"
   export QUICK_WORKTREE_MANIFEST
 fi

package/pp-core/workflows/ship.md

@@ -344,7 +344,7 @@ Use the exact key order `skill=`, `fallback=`, `exempt=`, `missing=` so downstre
 Create the PR using the generated body. Write the body to a temp file first so large generated PRD sections do not hit shell argument limits:
 
 ```bash
-PR_BODY_FILE=$(mktemp "${TMPDIR:-/tmp}/pp-pr-body.XXXXXX.md")
+PR_BODY_FILE=$(mktemp "${TMPDIR:-/tmp}/pp-pr-body.XXXXXX")
 trap 'rm -f "${PR_BODY_FILE:-}"' EXIT
 printf '%s\n' "${PR_BODY}" > "${PR_BODY_FILE}"
 

package/pp-core/workflows/spec-phase.md

@@ -236,7 +236,7 @@ fi
 # canonical coverage compute. Populate the heredoc from the SPEC's Requirements — one object
 # per requirement: {"id","text","shapes"?}. This is the load-bearing step: an empty file makes
 # the probe a no-op, so the guard below fails loud rather than silently skipping (RR-04).
-REQS_JSON=$(mktemp "${TMPDIR:-/tmp}/edge-probe-reqs-XXXXXX.json")
+REQS_JSON=$(mktemp "${TMPDIR:-/tmp}/edge-probe-reqs-XXXXXX")
 cat > "$REQS_JSON" <<'JSON'
 [
   { "id": "R1", "text": "<replace: requirement text from the SPEC>" }
@@ -245,7 +245,7 @@ JSON
 # Guard — never invoke on an empty/invalid array, OR one still holding the heredoc
 # `<replace: …>` placeholder (a forgotten substitution would otherwise yield a
 # meaningful-looking but bogus coverage report). Fail loud, not silent no-op.
-if ! node -e 'const a=require(process.argv[1]);if(!Array.isArray(a)||a.length===0)process.exit(1);if(a.some(r=>typeof r.text!=="string"||!r.text.trim()||r.text.includes("<replace:")))process.exit(1)' "$REQS_JSON" 2>/dev/null; then
+if ! node -e 'const a=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));if(!Array.isArray(a)||a.length===0)process.exit(1);if(a.some(r=>typeof r.text!=="string"||!r.text.trim()||r.text.includes("<replace:")))process.exit(1)' "$REQS_JSON" 2>/dev/null; then
   echo "ERROR: edge-probe requirements JSON is empty/invalid or still holds the <replace: …> placeholder — populate \$REQS_JSON from the SPEC Requirements before Step 5.5 runs." >&2
   exit 1
 fi