cap-pro 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (275) hide show
  1. package/.claude-plugin/README.md +26 -0
  2. package/.claude-plugin/marketplace.json +24 -0
  3. package/.claude-plugin/plugin.json +24 -0
  4. package/LICENSE +21 -0
  5. package/README.ja-JP.md +834 -0
  6. package/README.ko-KR.md +823 -0
  7. package/README.md +806 -0
  8. package/README.pt-BR.md +452 -0
  9. package/README.zh-CN.md +800 -0
  10. package/agents/cap-architect.md +269 -0
  11. package/agents/cap-brainstormer.md +207 -0
  12. package/agents/cap-curator.md +276 -0
  13. package/agents/cap-debugger.md +365 -0
  14. package/agents/cap-designer.md +246 -0
  15. package/agents/cap-historian.md +464 -0
  16. package/agents/cap-migrator.md +291 -0
  17. package/agents/cap-prototyper.md +197 -0
  18. package/agents/cap-validator.md +308 -0
  19. package/bin/install.js +5433 -0
  20. package/cap/bin/cap-tools.cjs +853 -0
  21. package/cap/bin/lib/arc-scanner.cjs +344 -0
  22. package/cap/bin/lib/cap-affinity-engine.cjs +862 -0
  23. package/cap/bin/lib/cap-anchor.cjs +228 -0
  24. package/cap/bin/lib/cap-annotation-writer.cjs +340 -0
  25. package/cap/bin/lib/cap-checkpoint.cjs +434 -0
  26. package/cap/bin/lib/cap-cluster-detect.cjs +945 -0
  27. package/cap/bin/lib/cap-cluster-display.cjs +52 -0
  28. package/cap/bin/lib/cap-cluster-format.cjs +245 -0
  29. package/cap/bin/lib/cap-cluster-helpers.cjs +295 -0
  30. package/cap/bin/lib/cap-cluster-io.cjs +212 -0
  31. package/cap/bin/lib/cap-completeness.cjs +540 -0
  32. package/cap/bin/lib/cap-deps.cjs +583 -0
  33. package/cap/bin/lib/cap-design-families.cjs +332 -0
  34. package/cap/bin/lib/cap-design.cjs +966 -0
  35. package/cap/bin/lib/cap-divergence-detector.cjs +400 -0
  36. package/cap/bin/lib/cap-doctor.cjs +752 -0
  37. package/cap/bin/lib/cap-feature-map-internals.cjs +19 -0
  38. package/cap/bin/lib/cap-feature-map-migrate.cjs +335 -0
  39. package/cap/bin/lib/cap-feature-map-monorepo.cjs +885 -0
  40. package/cap/bin/lib/cap-feature-map-shard.cjs +315 -0
  41. package/cap/bin/lib/cap-feature-map.cjs +1943 -0
  42. package/cap/bin/lib/cap-fitness-score.cjs +1075 -0
  43. package/cap/bin/lib/cap-impact-analysis.cjs +652 -0
  44. package/cap/bin/lib/cap-learn-review.cjs +1072 -0
  45. package/cap/bin/lib/cap-learning-signals.cjs +627 -0
  46. package/cap/bin/lib/cap-loader.cjs +227 -0
  47. package/cap/bin/lib/cap-logger.cjs +57 -0
  48. package/cap/bin/lib/cap-memory-bridge.cjs +764 -0
  49. package/cap/bin/lib/cap-memory-confidence.cjs +452 -0
  50. package/cap/bin/lib/cap-memory-dir.cjs +987 -0
  51. package/cap/bin/lib/cap-memory-engine.cjs +698 -0
  52. package/cap/bin/lib/cap-memory-extends.cjs +398 -0
  53. package/cap/bin/lib/cap-memory-graph.cjs +790 -0
  54. package/cap/bin/lib/cap-memory-migrate.cjs +2015 -0
  55. package/cap/bin/lib/cap-memory-pin.cjs +183 -0
  56. package/cap/bin/lib/cap-memory-platform.cjs +490 -0
  57. package/cap/bin/lib/cap-memory-prune.cjs +707 -0
  58. package/cap/bin/lib/cap-memory-schema.cjs +812 -0
  59. package/cap/bin/lib/cap-migrate-tags.cjs +309 -0
  60. package/cap/bin/lib/cap-migrate.cjs +540 -0
  61. package/cap/bin/lib/cap-pattern-apply.cjs +1203 -0
  62. package/cap/bin/lib/cap-pattern-pipeline.cjs +1034 -0
  63. package/cap/bin/lib/cap-plugin-manifest.cjs +80 -0
  64. package/cap/bin/lib/cap-realtime-affinity.cjs +399 -0
  65. package/cap/bin/lib/cap-reconcile.cjs +570 -0
  66. package/cap/bin/lib/cap-research-gate.cjs +218 -0
  67. package/cap/bin/lib/cap-scope-filter.cjs +402 -0
  68. package/cap/bin/lib/cap-semantic-pipeline.cjs +1038 -0
  69. package/cap/bin/lib/cap-session-extract.cjs +987 -0
  70. package/cap/bin/lib/cap-session.cjs +445 -0
  71. package/cap/bin/lib/cap-snapshot-linkage.cjs +963 -0
  72. package/cap/bin/lib/cap-stack-docs.cjs +646 -0
  73. package/cap/bin/lib/cap-tag-observer.cjs +371 -0
  74. package/cap/bin/lib/cap-tag-scanner.cjs +1766 -0
  75. package/cap/bin/lib/cap-telemetry.cjs +466 -0
  76. package/cap/bin/lib/cap-test-audit.cjs +1438 -0
  77. package/cap/bin/lib/cap-thread-migrator.cjs +307 -0
  78. package/cap/bin/lib/cap-thread-synthesis.cjs +545 -0
  79. package/cap/bin/lib/cap-thread-tracker.cjs +519 -0
  80. package/cap/bin/lib/cap-trace.cjs +399 -0
  81. package/cap/bin/lib/cap-trust-mode.cjs +336 -0
  82. package/cap/bin/lib/cap-ui-design-editor.cjs +642 -0
  83. package/cap/bin/lib/cap-ui-mind-map.cjs +712 -0
  84. package/cap/bin/lib/cap-ui-thread-nav.cjs +693 -0
  85. package/cap/bin/lib/cap-ui.cjs +1245 -0
  86. package/cap/bin/lib/cap-upgrade.cjs +1028 -0
  87. package/cap/bin/lib/cli/arg-helpers.cjs +49 -0
  88. package/cap/bin/lib/cli/frontmatter-router.cjs +31 -0
  89. package/cap/bin/lib/cli/init-router.cjs +68 -0
  90. package/cap/bin/lib/cli/phase-router.cjs +102 -0
  91. package/cap/bin/lib/cli/state-router.cjs +61 -0
  92. package/cap/bin/lib/cli/template-router.cjs +37 -0
  93. package/cap/bin/lib/cli/uat-router.cjs +29 -0
  94. package/cap/bin/lib/cli/validation-router.cjs +26 -0
  95. package/cap/bin/lib/cli/verification-router.cjs +31 -0
  96. package/cap/bin/lib/cli/workstream-router.cjs +39 -0
  97. package/cap/bin/lib/commands.cjs +961 -0
  98. package/cap/bin/lib/config.cjs +467 -0
  99. package/cap/bin/lib/convention-reader.cjs +258 -0
  100. package/cap/bin/lib/core.cjs +1241 -0
  101. package/cap/bin/lib/feature-aggregator.cjs +423 -0
  102. package/cap/bin/lib/frontmatter.cjs +337 -0
  103. package/cap/bin/lib/init.cjs +1443 -0
  104. package/cap/bin/lib/manifest-generator.cjs +383 -0
  105. package/cap/bin/lib/milestone.cjs +253 -0
  106. package/cap/bin/lib/model-profiles.cjs +69 -0
  107. package/cap/bin/lib/monorepo-context.cjs +226 -0
  108. package/cap/bin/lib/monorepo-migrator.cjs +509 -0
  109. package/cap/bin/lib/phase.cjs +889 -0
  110. package/cap/bin/lib/profile-output.cjs +989 -0
  111. package/cap/bin/lib/profile-pipeline.cjs +540 -0
  112. package/cap/bin/lib/roadmap.cjs +330 -0
  113. package/cap/bin/lib/security.cjs +394 -0
  114. package/cap/bin/lib/session-manager.cjs +292 -0
  115. package/cap/bin/lib/skeleton-generator.cjs +179 -0
  116. package/cap/bin/lib/state.cjs +1032 -0
  117. package/cap/bin/lib/template.cjs +231 -0
  118. package/cap/bin/lib/test-detector.cjs +62 -0
  119. package/cap/bin/lib/uat.cjs +283 -0
  120. package/cap/bin/lib/verify.cjs +889 -0
  121. package/cap/bin/lib/workspace-detector.cjs +371 -0
  122. package/cap/bin/lib/workstream.cjs +492 -0
  123. package/cap/commands/gsd/workstreams.md +63 -0
  124. package/cap/references/arc-standard.md +315 -0
  125. package/cap/references/cap-agent-architecture.md +101 -0
  126. package/cap/references/cap-gitignore-template +9 -0
  127. package/cap/references/cap-zero-deps.md +158 -0
  128. package/cap/references/checkpoints.md +778 -0
  129. package/cap/references/continuation-format.md +249 -0
  130. package/cap/references/contract-test-templates.md +312 -0
  131. package/cap/references/feature-map-template.md +25 -0
  132. package/cap/references/git-integration.md +295 -0
  133. package/cap/references/git-planning-commit.md +38 -0
  134. package/cap/references/model-profiles.md +174 -0
  135. package/cap/references/phase-numbering.md +126 -0
  136. package/cap/references/planning-config.md +202 -0
  137. package/cap/references/property-test-templates.md +316 -0
  138. package/cap/references/security-test-templates.md +347 -0
  139. package/cap/references/session-template.json +8 -0
  140. package/cap/references/tdd.md +263 -0
  141. package/cap/references/user-profiling.md +681 -0
  142. package/cap/references/verification-patterns.md +612 -0
  143. package/cap/templates/UAT.md +265 -0
  144. package/cap/templates/claude-md.md +175 -0
  145. package/cap/templates/codebase/architecture.md +255 -0
  146. package/cap/templates/codebase/concerns.md +310 -0
  147. package/cap/templates/codebase/conventions.md +307 -0
  148. package/cap/templates/codebase/integrations.md +280 -0
  149. package/cap/templates/codebase/stack.md +186 -0
  150. package/cap/templates/codebase/structure.md +285 -0
  151. package/cap/templates/codebase/testing.md +480 -0
  152. package/cap/templates/config.json +44 -0
  153. package/cap/templates/context.md +352 -0
  154. package/cap/templates/continue-here.md +78 -0
  155. package/cap/templates/copilot-instructions.md +7 -0
  156. package/cap/templates/debug-subagent-prompt.md +91 -0
  157. package/cap/templates/discussion-log.md +63 -0
  158. package/cap/templates/milestone-archive.md +123 -0
  159. package/cap/templates/milestone.md +115 -0
  160. package/cap/templates/phase-prompt.md +610 -0
  161. package/cap/templates/planner-subagent-prompt.md +117 -0
  162. package/cap/templates/project.md +186 -0
  163. package/cap/templates/requirements.md +231 -0
  164. package/cap/templates/research-project/ARCHITECTURE.md +204 -0
  165. package/cap/templates/research-project/FEATURES.md +147 -0
  166. package/cap/templates/research-project/PITFALLS.md +200 -0
  167. package/cap/templates/research-project/STACK.md +120 -0
  168. package/cap/templates/research-project/SUMMARY.md +170 -0
  169. package/cap/templates/research.md +552 -0
  170. package/cap/templates/roadmap.md +202 -0
  171. package/cap/templates/state.md +176 -0
  172. package/cap/templates/summary.md +364 -0
  173. package/cap/templates/user-preferences.md +498 -0
  174. package/cap/templates/verification-report.md +322 -0
  175. package/cap/workflows/add-phase.md +112 -0
  176. package/cap/workflows/add-tests.md +351 -0
  177. package/cap/workflows/add-todo.md +158 -0
  178. package/cap/workflows/audit-milestone.md +340 -0
  179. package/cap/workflows/audit-uat.md +109 -0
  180. package/cap/workflows/autonomous.md +891 -0
  181. package/cap/workflows/check-todos.md +177 -0
  182. package/cap/workflows/cleanup.md +152 -0
  183. package/cap/workflows/complete-milestone.md +767 -0
  184. package/cap/workflows/diagnose-issues.md +231 -0
  185. package/cap/workflows/discovery-phase.md +289 -0
  186. package/cap/workflows/discuss-phase-assumptions.md +653 -0
  187. package/cap/workflows/discuss-phase.md +1049 -0
  188. package/cap/workflows/do.md +104 -0
  189. package/cap/workflows/execute-phase.md +846 -0
  190. package/cap/workflows/execute-plan.md +514 -0
  191. package/cap/workflows/fast.md +105 -0
  192. package/cap/workflows/forensics.md +265 -0
  193. package/cap/workflows/health.md +181 -0
  194. package/cap/workflows/help.md +660 -0
  195. package/cap/workflows/insert-phase.md +130 -0
  196. package/cap/workflows/list-phase-assumptions.md +178 -0
  197. package/cap/workflows/list-workspaces.md +56 -0
  198. package/cap/workflows/manager.md +362 -0
  199. package/cap/workflows/map-codebase.md +377 -0
  200. package/cap/workflows/milestone-summary.md +223 -0
  201. package/cap/workflows/new-milestone.md +486 -0
  202. package/cap/workflows/new-project.md +1250 -0
  203. package/cap/workflows/new-workspace.md +237 -0
  204. package/cap/workflows/next.md +97 -0
  205. package/cap/workflows/node-repair.md +92 -0
  206. package/cap/workflows/note.md +156 -0
  207. package/cap/workflows/pause-work.md +176 -0
  208. package/cap/workflows/plan-milestone-gaps.md +273 -0
  209. package/cap/workflows/plan-phase.md +857 -0
  210. package/cap/workflows/plant-seed.md +169 -0
  211. package/cap/workflows/pr-branch.md +129 -0
  212. package/cap/workflows/profile-user.md +449 -0
  213. package/cap/workflows/progress.md +507 -0
  214. package/cap/workflows/quick.md +757 -0
  215. package/cap/workflows/remove-phase.md +155 -0
  216. package/cap/workflows/remove-workspace.md +90 -0
  217. package/cap/workflows/research-phase.md +82 -0
  218. package/cap/workflows/resume-project.md +326 -0
  219. package/cap/workflows/review.md +228 -0
  220. package/cap/workflows/session-report.md +146 -0
  221. package/cap/workflows/settings.md +283 -0
  222. package/cap/workflows/ship.md +228 -0
  223. package/cap/workflows/stats.md +60 -0
  224. package/cap/workflows/transition.md +671 -0
  225. package/cap/workflows/ui-phase.md +298 -0
  226. package/cap/workflows/ui-review.md +161 -0
  227. package/cap/workflows/update.md +323 -0
  228. package/cap/workflows/validate-phase.md +170 -0
  229. package/cap/workflows/verify-phase.md +254 -0
  230. package/cap/workflows/verify-work.md +637 -0
  231. package/commands/cap/annotate.md +165 -0
  232. package/commands/cap/brainstorm.md +393 -0
  233. package/commands/cap/checkpoint.md +106 -0
  234. package/commands/cap/completeness.md +94 -0
  235. package/commands/cap/continue.md +72 -0
  236. package/commands/cap/debug.md +588 -0
  237. package/commands/cap/deps.md +169 -0
  238. package/commands/cap/design.md +479 -0
  239. package/commands/cap/init.md +354 -0
  240. package/commands/cap/iterate.md +249 -0
  241. package/commands/cap/learn.md +459 -0
  242. package/commands/cap/memory.md +275 -0
  243. package/commands/cap/migrate-feature-map.md +91 -0
  244. package/commands/cap/migrate-memory.md +108 -0
  245. package/commands/cap/migrate-tags.md +91 -0
  246. package/commands/cap/migrate.md +131 -0
  247. package/commands/cap/prototype.md +510 -0
  248. package/commands/cap/reconcile.md +121 -0
  249. package/commands/cap/review.md +360 -0
  250. package/commands/cap/save.md +72 -0
  251. package/commands/cap/scan.md +404 -0
  252. package/commands/cap/start.md +356 -0
  253. package/commands/cap/status.md +118 -0
  254. package/commands/cap/test-audit.md +262 -0
  255. package/commands/cap/test.md +394 -0
  256. package/commands/cap/trace.md +133 -0
  257. package/commands/cap/ui.md +167 -0
  258. package/hooks/dist/cap-check-update.js +115 -0
  259. package/hooks/dist/cap-context-monitor.js +185 -0
  260. package/hooks/dist/cap-learn-review-hook.js +114 -0
  261. package/hooks/dist/cap-learning-hook.js +192 -0
  262. package/hooks/dist/cap-memory.js +299 -0
  263. package/hooks/dist/cap-prompt-guard.js +97 -0
  264. package/hooks/dist/cap-statusline.js +157 -0
  265. package/hooks/dist/cap-tag-observer.js +115 -0
  266. package/hooks/dist/cap-version-check.js +112 -0
  267. package/hooks/dist/cap-workflow-guard.js +175 -0
  268. package/hooks/hooks.json +55 -0
  269. package/package.json +58 -0
  270. package/scripts/base64-scan.sh +262 -0
  271. package/scripts/build-hooks.js +93 -0
  272. package/scripts/cap-removal-checklist.md +202 -0
  273. package/scripts/prompt-injection-scan.sh +199 -0
  274. package/scripts/run-tests.cjs +181 -0
  275. package/scripts/secret-scan.sh +227 -0
@@ -0,0 +1,337 @@
1
+ /**
2
+ * Frontmatter — YAML frontmatter parsing, serialization, and CRUD commands
3
+ */
4
+ // @cap-feature(feature:F-011) Legacy GSD Modules — YAML frontmatter parsing and serialization
5
+
6
+ const fs = require('fs');
7
+ const path = require('path');
8
+ const { safeReadFile, normalizeMd, output, error } = require('./core.cjs');
9
+
10
+ // ─── Parsing engine ───────────────────────────────────────────────────────────
11
+
12
+ function extractFrontmatter(content) {
13
+ const frontmatter = {};
14
+ // Find ALL frontmatter blocks at the start of the file.
15
+ // If multiple blocks exist (corruption from CRLF mismatch), use the LAST one
16
+ // since it represents the most recent state sync.
17
+ const allBlocks = [...content.matchAll(/(?:^|\n)\s*---\r?\n([\s\S]+?)\r?\n---/g)];
18
+ const match = allBlocks.length > 0 ? allBlocks[allBlocks.length - 1] : null;
19
+ if (!match) return frontmatter;
20
+
21
+ const yaml = match[1];
22
+ const lines = yaml.split(/\r?\n/);
23
+
24
+ // Stack to track nested objects: [{obj, key, indent}]
25
+ // obj = object to write to, key = current key collecting array items, indent = indentation level
26
+ let stack = [{ obj: frontmatter, key: null, indent: -1 }];
27
+
28
+ for (const line of lines) {
29
+ // Skip empty lines
30
+ if (line.trim() === '') continue;
31
+
32
+ // Calculate indentation (number of leading spaces)
33
+ const indentMatch = line.match(/^(\s*)/);
34
+ const indent = indentMatch ? indentMatch[1].length : 0;
35
+
36
+ // Pop stack back to appropriate level
37
+ while (stack.length > 1 && indent <= stack[stack.length - 1].indent) {
38
+ stack.pop();
39
+ }
40
+
41
+ const current = stack[stack.length - 1];
42
+
43
+ // Check for key: value pattern
44
+ const keyMatch = line.match(/^(\s*)([a-zA-Z0-9_-]+):\s*(.*)/);
45
+ if (keyMatch) {
46
+ const key = keyMatch[2];
47
+ const value = keyMatch[3].trim();
48
+
49
+ if (value === '' || value === '[') {
50
+ // Key with no value or opening bracket — could be nested object or array
51
+ // We'll determine based on next lines, for now create placeholder
52
+ current.obj[key] = value === '[' ? [] : {};
53
+ current.key = null;
54
+ // Push new context for potential nested content
55
+ stack.push({ obj: current.obj[key], key: null, indent });
56
+ } else if (value.startsWith('[') && value.endsWith(']')) {
57
+ // Inline array: key: [a, b, c]
58
+ current.obj[key] = value.slice(1, -1).split(',').map(s => s.trim().replace(/^["']|["']$/g, '')).filter(Boolean);
59
+ current.key = null;
60
+ } else {
61
+ // Simple key: value
62
+ current.obj[key] = value.replace(/^["']|["']$/g, '');
63
+ current.key = null;
64
+ }
65
+ } else if (line.trim().startsWith('- ')) {
66
+ // Array item
67
+ const itemValue = line.trim().slice(2).replace(/^["']|["']$/g, '');
68
+
69
+ // If current context is an empty object, convert to array
70
+ if (typeof current.obj === 'object' && !Array.isArray(current.obj) && Object.keys(current.obj).length === 0) {
71
+ // Find the key in parent that points to this object and convert it
72
+ const parent = stack.length > 1 ? stack[stack.length - 2] : null;
73
+ if (parent) {
74
+ for (const k of Object.keys(parent.obj)) {
75
+ if (parent.obj[k] === current.obj) {
76
+ parent.obj[k] = [itemValue];
77
+ current.obj = parent.obj[k];
78
+ break;
79
+ }
80
+ }
81
+ }
82
+ } else if (Array.isArray(current.obj)) {
83
+ current.obj.push(itemValue);
84
+ }
85
+ }
86
+ }
87
+
88
+ return frontmatter;
89
+ }
90
+
91
+ function reconstructFrontmatter(obj) {
92
+ const lines = [];
93
+ for (const [key, value] of Object.entries(obj)) {
94
+ if (value === null || value === undefined) continue;
95
+ if (Array.isArray(value)) {
96
+ if (value.length === 0) {
97
+ lines.push(`${key}: []`);
98
+ } else if (value.every(v => typeof v === 'string') && value.length <= 3 && value.join(', ').length < 60) {
99
+ lines.push(`${key}: [${value.join(', ')}]`);
100
+ } else {
101
+ lines.push(`${key}:`);
102
+ for (const item of value) {
103
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
104
+ }
105
+ }
106
+ } else if (typeof value === 'object') {
107
+ lines.push(`${key}:`);
108
+ for (const [subkey, subval] of Object.entries(value)) {
109
+ if (subval === null || subval === undefined) continue;
110
+ if (Array.isArray(subval)) {
111
+ if (subval.length === 0) {
112
+ lines.push(` ${subkey}: []`);
113
+ } else if (subval.every(v => typeof v === 'string') && subval.length <= 3 && subval.join(', ').length < 60) {
114
+ lines.push(` ${subkey}: [${subval.join(', ')}]`);
115
+ } else {
116
+ lines.push(` ${subkey}:`);
117
+ for (const item of subval) {
118
+ lines.push(` - ${typeof item === 'string' && (item.includes(':') || item.includes('#')) ? `"${item}"` : item}`);
119
+ }
120
+ }
121
+ } else if (typeof subval === 'object') {
122
+ lines.push(` ${subkey}:`);
123
+ for (const [subsubkey, subsubval] of Object.entries(subval)) {
124
+ if (subsubval === null || subsubval === undefined) continue;
125
+ if (Array.isArray(subsubval)) {
126
+ if (subsubval.length === 0) {
127
+ lines.push(` ${subsubkey}: []`);
128
+ } else {
129
+ lines.push(` ${subsubkey}:`);
130
+ for (const item of subsubval) {
131
+ lines.push(` - ${item}`);
132
+ }
133
+ }
134
+ } else {
135
+ lines.push(` ${subsubkey}: ${subsubval}`);
136
+ }
137
+ }
138
+ } else {
139
+ const sv = String(subval);
140
+ lines.push(` ${subkey}: ${sv.includes(':') || sv.includes('#') ? `"${sv}"` : sv}`);
141
+ }
142
+ }
143
+ } else {
144
+ const sv = String(value);
145
+ if (sv.includes(':') || sv.includes('#') || sv.startsWith('[') || sv.startsWith('{')) {
146
+ lines.push(`${key}: "${sv}"`);
147
+ } else {
148
+ lines.push(`${key}: ${sv}`);
149
+ }
150
+ }
151
+ }
152
+ return lines.join('\n');
153
+ }
154
+
155
+ function spliceFrontmatter(content, newObj) {
156
+ const yamlStr = reconstructFrontmatter(newObj);
157
+ const match = content.match(/^---\r?\n[\s\S]+?\r?\n---/);
158
+ if (match) {
159
+ return `---\n${yamlStr}\n---` + content.slice(match[0].length);
160
+ }
161
+ return `---\n${yamlStr}\n---\n\n` + content;
162
+ }
163
+
164
+ function parseMustHavesBlock(content, blockName) {
165
+ // Extract a specific block from must_haves in raw frontmatter YAML
166
+ // Handles 3-level nesting: must_haves > artifacts/key_links > [{path, provides, ...}]
167
+ const fmMatch = content.match(/^---\r?\n([\s\S]+?)\r?\n---/);
168
+ if (!fmMatch) return [];
169
+
170
+ const yaml = fmMatch[1];
171
+
172
+ // Find must_haves: first to detect its indentation level
173
+ const mustHavesMatch = yaml.match(/^(\s*)must_haves:\s*$/m);
174
+ if (!mustHavesMatch) return [];
175
+ const mustHavesIndent = mustHavesMatch[1].length;
176
+
177
+ // Find the block (e.g., "truths:", "artifacts:", "key_links:") under must_haves
178
+ // It must be indented more than must_haves but we detect the actual indent dynamically
179
+ const blockPattern = new RegExp(`^(\\s+)${blockName}:\\s*$`, 'm');
180
+ const blockMatch = yaml.match(blockPattern);
181
+ if (!blockMatch) return [];
182
+
183
+ const blockIndent = blockMatch[1].length;
184
+ // The block must be nested under must_haves (more indented)
185
+ if (blockIndent <= mustHavesIndent) return [];
186
+
187
+ // Find where the block starts in the yaml string
188
+ const blockStart = yaml.indexOf(blockMatch[0]);
189
+ if (blockStart === -1) return [];
190
+
191
+ const afterBlock = yaml.slice(blockStart);
192
+ const blockLines = afterBlock.split(/\r?\n/).slice(1); // skip the header line
193
+
194
+ // List items are indented one level deeper than blockIndent
195
+ // Continuation KVs are indented one level deeper than list items
196
+ const items = [];
197
+ let current = null;
198
+ let listItemIndent = -1; // detected from first "- " line
199
+
200
+ for (const line of blockLines) {
201
+ // Skip empty lines
202
+ if (line.trim() === '') continue;
203
+ const indent = line.match(/^(\s*)/)[1].length;
204
+ // Stop at same or lower indent level than the block header
205
+ if (indent <= blockIndent && line.trim() !== '') break;
206
+
207
+ const trimmed = line.trim();
208
+
209
+ if (trimmed.startsWith('- ')) {
210
+ // Detect list item indent from the first occurrence
211
+ if (listItemIndent === -1) listItemIndent = indent;
212
+
213
+ // Only treat as a top-level list item if at the expected indent
214
+ if (indent === listItemIndent) {
215
+ if (current) items.push(current);
216
+ current = {};
217
+ const afterDash = trimmed.slice(2);
218
+ // Check if it's a simple string item (no colon means not a key-value)
219
+ if (!afterDash.includes(':')) {
220
+ current = afterDash.replace(/^["']|["']$/g, '');
221
+ } else {
222
+ // Key-value on same line as dash: "- path: value"
223
+ const kvMatch = afterDash.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
224
+ if (kvMatch) {
225
+ current = {};
226
+ current[kvMatch[1]] = kvMatch[2];
227
+ }
228
+ }
229
+ continue;
230
+ }
231
+ }
232
+
233
+ if (current && typeof current === 'object' && indent > listItemIndent) {
234
+ // Continuation key-value or nested array item
235
+ if (trimmed.startsWith('- ')) {
236
+ // Array item under a key
237
+ const arrVal = trimmed.slice(2).replace(/^["']|["']$/g, '');
238
+ const keys = Object.keys(current);
239
+ const lastKey = keys[keys.length - 1];
240
+ if (lastKey && !Array.isArray(current[lastKey])) {
241
+ current[lastKey] = current[lastKey] ? [current[lastKey]] : [];
242
+ }
243
+ if (lastKey) current[lastKey].push(arrVal);
244
+ } else {
245
+ const kvMatch = trimmed.match(/^(\w+):\s*"?([^"]*)"?\s*$/);
246
+ if (kvMatch) {
247
+ const val = kvMatch[2];
248
+ // Try to parse as number
249
+ current[kvMatch[1]] = /^\d+$/.test(val) ? parseInt(val, 10) : val;
250
+ }
251
+ }
252
+ }
253
+ }
254
+ if (current) items.push(current);
255
+
256
+ return items;
257
+ }
258
+
259
+ // ─── Frontmatter CRUD commands ────────────────────────────────────────────────
260
+
261
+ const FRONTMATTER_SCHEMAS = {
262
+ plan: { required: ['phase', 'plan', 'type', 'wave', 'depends_on', 'files_modified', 'autonomous', 'must_haves'] },
263
+ summary: { required: ['phase', 'plan', 'subsystem', 'tags', 'duration', 'completed'] },
264
+ verification: { required: ['phase', 'verified', 'status', 'score'] },
265
+ };
266
+
267
+ function cmdFrontmatterGet(cwd, filePath, field, raw) {
268
+ if (!filePath) { error('file path required'); }
269
+ // Path traversal guard: reject null bytes
270
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
271
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
272
+ const content = safeReadFile(fullPath);
273
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
274
+ const fm = extractFrontmatter(content);
275
+ if (field) {
276
+ const value = fm[field];
277
+ if (value === undefined) { output({ error: 'Field not found', field }, raw); return; }
278
+ output({ [field]: value }, raw, JSON.stringify(value));
279
+ } else {
280
+ output(fm, raw);
281
+ }
282
+ }
283
+
284
+ function cmdFrontmatterSet(cwd, filePath, field, value, raw) {
285
+ if (!filePath || !field || value === undefined) { error('file, field, and value required'); }
286
+ // Path traversal guard: reject null bytes
287
+ if (filePath.includes('\0')) { error('file path contains null bytes'); }
288
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
289
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
290
+ const content = fs.readFileSync(fullPath, 'utf-8');
291
+ const fm = extractFrontmatter(content);
292
+ let parsedValue;
293
+ try { parsedValue = JSON.parse(value); } catch { parsedValue = value; }
294
+ fm[field] = parsedValue;
295
+ const newContent = spliceFrontmatter(content, fm);
296
+ fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
297
+ output({ updated: true, field, value: parsedValue }, raw, 'true');
298
+ }
299
+
300
+ function cmdFrontmatterMerge(cwd, filePath, data, raw) {
301
+ if (!filePath || !data) { error('file and data required'); }
302
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
303
+ if (!fs.existsSync(fullPath)) { output({ error: 'File not found', path: filePath }, raw); return; }
304
+ const content = fs.readFileSync(fullPath, 'utf-8');
305
+ const fm = extractFrontmatter(content);
306
+ let mergeData;
307
+ try { mergeData = JSON.parse(data); } catch { error('Invalid JSON for --data'); return; }
308
+ Object.assign(fm, mergeData);
309
+ const newContent = spliceFrontmatter(content, fm);
310
+ fs.writeFileSync(fullPath, normalizeMd(newContent), 'utf-8');
311
+ output({ merged: true, fields: Object.keys(mergeData) }, raw, 'true');
312
+ }
313
+
314
+ function cmdFrontmatterValidate(cwd, filePath, schemaName, raw) {
315
+ if (!filePath || !schemaName) { error('file and schema required'); }
316
+ const schema = FRONTMATTER_SCHEMAS[schemaName];
317
+ if (!schema) { error(`Unknown schema: ${schemaName}. Available: ${Object.keys(FRONTMATTER_SCHEMAS).join(', ')}`); }
318
+ const fullPath = path.isAbsolute(filePath) ? filePath : path.join(cwd, filePath);
319
+ const content = safeReadFile(fullPath);
320
+ if (!content) { output({ error: 'File not found', path: filePath }, raw); return; }
321
+ const fm = extractFrontmatter(content);
322
+ const missing = schema.required.filter(f => fm[f] === undefined);
323
+ const present = schema.required.filter(f => fm[f] !== undefined);
324
+ output({ valid: missing.length === 0, missing, present, schema: schemaName }, raw, missing.length === 0 ? 'valid' : 'invalid');
325
+ }
326
+
327
+ module.exports = {
328
+ extractFrontmatter,
329
+ reconstructFrontmatter,
330
+ spliceFrontmatter,
331
+ parseMustHavesBlock,
332
+ FRONTMATTER_SCHEMAS,
333
+ cmdFrontmatterGet,
334
+ cmdFrontmatterSet,
335
+ cmdFrontmatterMerge,
336
+ cmdFrontmatterValidate,
337
+ };