@vibecompass/vibecompass 0.10.8 → 0.11.1

package/src/simple-yaml.js

@@ -1,4 +1,15 @@
 const KEY_VALUE_PATTERN = /^([A-Za-z_][A-Za-z0-9_-]*)\s*:(?:\s+(.*)|\s*)$/;
+const SAFE_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_-]*$/;
+
+/**
+ * Whether a value can appear as a block-map key in this subset. Writers that
+ * derive map keys from user-supplied identifiers (e.g. repo ids in lane
+ * metadata) must check this and fail closed instead of emitting a key the
+ * parser will reject — a parse throw degrades the whole document for readers.
+ */
+export function isSimpleYamlKeySafe(value) {
+  return typeof value === 'string' && SAFE_KEY_PATTERN.test(value);
+}
 
 export function parseSimpleYaml(source, options = {}) {
   // This intentionally supports only the YAML subset used by project.yaml and
@@ -208,10 +219,19 @@ function parseScalar(rawValue) {
     return Number(rawValue);
   }
 
-  if (
-    (rawValue.startsWith('"') && rawValue.endsWith('"')) ||
-    (rawValue.startsWith("'") && rawValue.endsWith("'"))
-  ) {
+  if (rawValue.startsWith('"') && rawValue.endsWith('"')) {
+    // Writers quote free-text values with JSON.stringify; parse the token
+    // back symmetrically so escaped quotes and backslashes (e.g. Windows
+    // paths) round-trip. Hand-authored quoting that is not valid JSON keeps
+    // the historical naive slice so legacy files stay readable.
+    try {
+      return JSON.parse(rawValue);
+    } catch {
+      return rawValue.slice(1, -1);
+    }
+  }
+
+  if (rawValue.startsWith("'") && rawValue.endsWith("'")) {
     return rawValue.slice(1, -1);
   }
 

package/src/status.js

@@ -2,17 +2,21 @@ import { readFile } from 'node:fs/promises';
 import path from 'node:path';
 import { inspectProjectCompatibility } from './compatibility.js';
 import { sha256Text } from './hash.js';
+import { resolveLaneMarkerContext } from './lane-marker.js';
 import { parseSimpleYaml } from './simple-yaml.js';
-import { listProjectSessions } from './session.js';
+import { inferToolingRootForMemoryRoot, listProjectSessions } from './session.js';
 import { syncAgentInstructionFiles } from './generators/agent-files/index.js';
 import { scanProjectMemory } from './project-memory.js';
 
 export async function getProjectStatus(options = {}) {
   const cwd = options.cwd ? path.resolve(options.cwd) : process.cwd();
-  const rootDir = path.resolve(cwd, options.rootDir ?? '.compass');
+  const rootContext = await resolveStatusRootContext(cwd, options.rootDir);
+  const rootDir = rootContext.rootDir;
   const toolingRootDir = options.toolingRootDir
     ? path.resolve(cwd, options.toolingRootDir)
-    : cwd;
+    : rootContext.rootSource === 'marker'
+      ? await inferToolingRootForMemoryRoot(rootDir)
+      : cwd;
 
   const compatibility = await inspectProjectCompatibility({
     rootDir,
@@ -36,7 +40,15 @@ export async function getProjectStatus(options = {}) {
       cliPackageVersion: compatibility.cliPackageVersion,
       package: compatibility.package,
       state: compatibility.state,
-      warnings: compatibility.warnings,
+      warnings: [
+        ...(rootContext.markerError
+          ? [{
+              code: 'lane-marker-unreadable',
+              message: `A lane marker near ${cwd} could not be resolved (${rootContext.markerError}); reporting on ${rootDir} instead. Lane-scoped commands will fail closed on it.`,
+            }]
+          : []),
+        ...compatibility.warnings,
+      ],
     },
     sessions,
     docsReview,
@@ -53,6 +65,30 @@ export async function getProjectStatus(options = {}) {
   };
 }
 
+/**
+ * D-280: status adopts the nearest valid marker's memory root when --root is
+ * omitted, matching lane-scoped commands, so `status` from a worktree cwd
+ * reports the bound root instead of a nonexistent `cwd/.compass`. Status is
+ * read-only and must not fail on a corrupt or foreign marker — resolution
+ * failures fall back to the cwd default.
+ */
+async function resolveStatusRootContext(cwd, explicitRootDir) {
+  if (explicitRootDir) {
+    return { rootDir: path.resolve(cwd, explicitRootDir), rootSource: 'flag', markerError: null };
+  }
+
+  try {
+    const context = await resolveLaneMarkerContext({ cwd });
+    return { rootDir: context.rootDir, rootSource: context.rootSource, markerError: null };
+  } catch (error) {
+    return {
+      rootDir: path.resolve(cwd, '.compass'),
+      rootSource: 'default',
+      markerError: error instanceof Error ? error.message : String(error),
+    };
+  }
+}
+
 export function renderStatusText(status) {
   if (status.project.status === 'unreadable') {
     return [
@@ -375,7 +411,9 @@ function buildRecommendations({ project, compatibility, sessions, docsReview, ag
     recommendations.push(
       sessions.status === 'ok' && sessions.current
         ? `vibecompass docs-update --session ${sessions.current}`
-        : 'vibecompass docs-review --guided',
+        : sessions.status === 'ok' && sessions.lanes.length >= 2
+          ? 'vibecompass list-sessions'
+          : 'vibecompass docs-review --guided',
     );
   }
 

package/src/sync.js

@@ -2,6 +2,7 @@ import { mkdir, readFile, unlink, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { sha256Text } from './hash.js';
 import { writeStateManifest } from './manifest.js';
+import { withMemoryRootLock } from './serialization.js';
 import { parseSimpleYaml } from './simple-yaml.js';
 import {
   buildSyncStateWithCursor,
@@ -143,6 +144,10 @@ export async function pullExportProjectMemory(options = {}, environment = {}) {
 export async function applyPullExport(options = {}, environment = {}) {
   const cwd = environment.cwd ? path.resolve(environment.cwd) : process.cwd();
   const rootDir = path.resolve(cwd, options.rootDir ?? '.compass');
+  return withMemoryRootLock(rootDir, 'apply-export', () => applyPullExportLocked(options, rootDir));
+}
+
+async function applyPullExportLocked(options, rootDir) {
   const outputPath = path.resolve(rootDir, options.outputPath ?? DEFAULT_EXPORT_PATH);
   const bundle = await readJsonRequired(outputPath, 'pull-export bundle');
   const operations = Array.isArray(bundle.operations) ? bundle.operations : [];

package/src/workflows/registry.js

@@ -10,7 +10,7 @@ export const WORKFLOW_REGISTRY = [
       { trigger: 'start session', summary: 'builder role trigger' },
       { trigger: 'join as reviewer', summary: 'reviewer role trigger' },
       { trigger: 'planning mode', summary: 'optional prompt-level mode for scoping work before implementation' },
-      { trigger: 'review handoff', summary: 'reviewer reads the selected lane handoff and appends findings' },
+      { trigger: 'review handoff', summary: 'reviewer reads the selected lane handoff and appends findings; with multiple active lanes name the lane explicitly: `review handoff <lane-id>`' },
       { trigger: 'address review', summary: 'builder critically resolves reviewer feedback from the selected lane scratch files' },
       { trigger: 'docs update', summary: 'builder runs a targeted session-delta documentation maintenance plan with `vibecompass docs-update --session <lane-id>`' },
       { trigger: 'close session', summary: 'builder runs the close-out checklist and ends with `vibecompass close-session --session <lane-id>` plus required document-maintenance checkpoint statuses; `end session` and `vibecompass end-session` are accepted aliases' },