@shahmarasy/prodo 0.1.2 → 0.1.3

package/dist/templates.js

@@ -343,6 +343,12 @@ Rules:
 - input files are read-only; never modify, summarize, or rewrite \`brief.md\` in-place
 - write normalized output as a new JSON object only`;
 function commandTemplate(command) {
+    const normalizeJsonGuard = command.cliSubcommand === "normalize"
+        ? `
+- Normalize output format check:
+  - \`.prodo/briefs/normalized-brief.json\` must be strict JSON object (no markdown fences).
+  - If invalid, rewrite file as pure JSON object only.`
+        : "";
     return `---
 description: ${command.description}
 handoffs:
@@ -365,6 +371,8 @@ Execution policy:
 - Never run \`prodo-${command.cliSubcommand}\`, \`prodo ${command.cliSubcommand}\`, or \`prodo ...\` in shell.
 - Do not inspect hooks or internals unless command execution fails.
 - Input files are read-only; never modify or rewrite \`brief.md\`.
+- Never print full artifact content in chat.
+- Write/update files first, then reply with short status + written file path(s).
 
 ## Execution
 
@@ -382,6 +390,7 @@ Execution policy:
 - Confirm command success state (exit code or validation status).
 - Confirm \`brief.md\` hash/content did not change.
 - Do NOT create manual fallback files under \`.prodo/artifact\` or any ad-hoc folder.
+${normalizeJsonGuard}
 
 4. Diagnose only on failure:
 - Inspect \`.prodo/hooks.yml\` only after execution failure.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shahmarasy/prodo",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "CLI-first, prompt-powered product artifact kit",
   "main": "dist/cli.js",
   "types": "dist/cli.d.ts",

package/src/templates.ts

@@ -353,6 +353,13 @@ Rules:
 - write normalized output as a new JSON object only`;
 
 export function commandTemplate(command: WorkflowCommand): string {
+  const normalizeJsonGuard =
+    command.cliSubcommand === "normalize"
+      ? `
+- Normalize output format check:
+  - \`.prodo/briefs/normalized-brief.json\` must be strict JSON object (no markdown fences).
+  - If invalid, rewrite file as pure JSON object only.`
+      : "";
   return `---
 description: ${command.description}
 handoffs:
@@ -375,6 +382,8 @@ Execution policy:
 - Never run \`prodo-${command.cliSubcommand}\`, \`prodo ${command.cliSubcommand}\`, or \`prodo ...\` in shell.
 - Do not inspect hooks or internals unless command execution fails.
 - Input files are read-only; never modify or rewrite \`brief.md\`.
+- Never print full artifact content in chat.
+- Write/update files first, then reply with short status + written file path(s).
 
 ## Execution
 
@@ -392,6 +401,7 @@ Execution policy:
 - Confirm command success state (exit code or validation status).
 - Confirm \`brief.md\` hash/content did not change.
 - Do NOT create manual fallback files under \`.prodo/artifact\` or any ad-hoc folder.
+${normalizeJsonGuard}
 
 4. Diagnose only on failure:
 - Inspect \`.prodo/hooks.yml\` only after execution failure.

package/templates/commands/prodo-normalize.md

@@ -13,12 +13,19 @@ Execution policy:
 - Do not run shell/CLI commands from inside the agent.
 - Never run `prodo-normalize`, `prodo normalize`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full normalized JSON in chat.
+- Write `.prodo/briefs/normalized-brief.json`, then reply with short status + file path.
 
 ## Execution
 
 1. Verify minimal prerequisites (`.prodo/`, `brief.md`).
 2. Read only `brief.md` and normalize it into `.prodo/briefs/normalized-brief.json`.
 3. Confirm `.prodo/briefs/normalized-brief.json` exists.
-4. Confirm `brief.md` content did not change.
-5. Do not create any manual files under `.prodo/` except expected runtime outputs.
-6. Diagnose internals only if command fails.
+4. Verify normalized file is strict JSON only:
+   - first non-space char is `{`
+   - no markdown fences like ```json or ```
+   - JSON parses successfully as an object
+5. If format is not strict JSON, rewrite the same file as pure JSON object only.
+6. Confirm `brief.md` content did not change.
+7. Do not create any manual files under `.prodo/` except expected runtime outputs.
+8. Diagnose internals only if command fails.

package/templates/commands/prodo-prd.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-prd`, `prodo prd`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-prd`, `prodo prd`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full artifact JSON/Markdown in chat.
+- Write outputs to files, then reply with short status + written file path(s).
 
 ## Execution
 

package/templates/commands/prodo-stories.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-stories`, `prodo stories`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-stories`, `prodo stories`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full artifact JSON/Markdown in chat.
+- Write outputs to files, then reply with short status + written file path(s).
 
 ## Execution
 

package/templates/commands/prodo-techspec.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-techspec`, `prodo techspec`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-techspec`, `prodo techspec`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full artifact JSON/Markdown in chat.
+- Write outputs to files, then reply with short status + written file path(s).
 
 ## Execution
 

package/templates/commands/prodo-validate.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-validate`, `prodo validate`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-validate`, `prodo validate`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full validation payload in chat.
+- Write/update validation report file, then reply with short status + report path.
 
 ## Execution
 

package/templates/commands/prodo-wireframe.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-wireframe`, `prodo wireframe`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-wireframe`, `prodo wireframe`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full artifact JSON/Markdown in chat.
+- Write outputs to files, then reply with short status + written file path(s).
 
 ## Execution
 

package/templates/commands/prodo-workflow.md

@@ -10,8 +10,11 @@ $ARGUMENTS
 
 Execution policy:
 - Execute-first, diagnose-second.
-- Do not run shell/CLI commands from inside the agent.`n- Never run `prodo-workflow`, `prodo workflow`, or `prodo ...` in shell.
+- Do not run shell/CLI commands from inside the agent.
+- Never run `prodo-workflow`, `prodo workflow`, or `prodo ...` in shell.
 - Input files are read-only; never modify or rewrite `brief.md`.
+- Never print full artifact JSON/Markdown in chat.
+- Write outputs to files, then reply with short status + written file path(s).
 
 ## Execution