devrites 3.0.2 → 3.0.4

package/engine/tests/migrate_cli_test.go

@@ -58,25 +58,26 @@ func TestMigrateNormalizesCanonicalWorkSchema(t *testing.T) {
 	}
 
 	feat := filepath.Join(root, "work", slug)
-	// evidence.md → proof.md, state.md → status.md, plus a generated feature.md.
-	for _, want := range []string{"feature.md", "spec.md", "plan.md", "decisions.md", "tasks.md", "proof.md", "status.md"} {
+	// Current canonical files stay canonical; migration adds only the missing map.
+	for _, want := range []string{"README.md", "state.md", "spec.md", "plan.md", "decisions.md", "tasks.md", "evidence.md"} {
 		if _, err := os.Stat(filepath.Join(feat, want)); err != nil {
 			t.Errorf("missing new-schema file %s: %v", want, err)
 		}
 	}
-	fm, err := os.ReadFile(filepath.Join(feat, "feature.md"))
+	readme, err := os.ReadFile(filepath.Join(feat, "README.md"))
 	if err != nil {
 		t.Fatal(err)
 	}
-	if !strings.Contains(string(fm), "phase: temper") {
-		t.Errorf("feature.md phase not derived from state.md\n%s", fm)
+	if !strings.Contains(string(readme), "phase: temper") {
+		t.Errorf("README.md phase not derived from state.md\n%s", readme)
 	}
-	if !strings.Contains(string(fm), "schemaVersion: 1") {
-		t.Errorf("feature.md missing schemaVersion\n%s", fm)
+	if !strings.Contains(string(readme), "schemaVersion: 1") {
+		t.Errorf("README.md missing schemaVersion\n%s", readme)
 	}
-	proof, _ := os.ReadFile(filepath.Join(feat, "proof.md"))
-	if !strings.Contains(string(proof), "Tests green") {
-		t.Errorf("proof.md did not carry evidence.md content\n%s", proof)
+	for _, unwanted := range []string{"feature.md", "proof.md", "status.md"} {
+		if _, err := os.Stat(filepath.Join(feat, unwanted)); !os.IsNotExist(err) {
+			t.Errorf("migration created legacy alias %s: %v", unwanted, err)
+		}
 	}
 
 	// A backup of the pre-migration state must exist.
@@ -127,11 +128,12 @@ func TestMigrateNormalizesLiveFeatureInPlace(t *testing.T) {
 		t.Fatal(err)
 	}
 	files := map[string]string{
-		"state.md":     "# State\n\n- Phase: prove\n- Status: running\n",
+		"feature.md":   "# Legacy feature map\n",
+		"status.md":    "# State\n\n- Phase: prove\n- Status: running\n",
 		"spec.md":      "# Spec\n\nRotate tokens.\n",
 		"plan.md":      "# Plan\n\nStep 1, step 2.\n",
 		"tasks.md":     "# Tasks\n\n- [x] one\n",
-		"evidence.md":  "# Evidence\n\nTests green.\n",
+		"proof.md":     "# Evidence\n\nTests green.\n",
 		"decisions.md": "# Decisions\n\nUse HMAC.\n",
 	}
 	for name, body := range files {
@@ -147,25 +149,25 @@ func TestMigrateNormalizesLiveFeatureInPlace(t *testing.T) {
 	if !strings.Contains(out, "migrated 1 feature(s)") {
 		t.Errorf("unexpected migrate output\n%s", out)
 	}
-	for _, want := range []string{"feature.md", "proof.md", "status.md", "state.md", "evidence.md"} {
+	for _, want := range []string{"README.md", "feature.md", "proof.md", "status.md", "state.md", "evidence.md"} {
 		if _, err := os.Stat(filepath.Join(feat, want)); err != nil {
 			t.Errorf("missing normalized file %s: %v", want, err)
 		}
 	}
-	fm, err := os.ReadFile(filepath.Join(feat, "feature.md"))
+	readme, err := os.ReadFile(filepath.Join(feat, "README.md"))
 	if err != nil {
 		t.Fatal(err)
 	}
-	if !strings.Contains(string(fm), "phase: prove") {
-		t.Errorf("feature.md phase not derived from ledger\n%s", fm)
+	if !strings.Contains(string(readme), "Legacy feature map") {
+		t.Errorf("README.md did not carry feature.md content\n%s", readme)
 	}
-	status, _ := os.ReadFile(filepath.Join(feat, "status.md"))
-	if !strings.Contains(string(status), "running") {
-		t.Errorf("status.md did not carry state.md content\n%s", status)
+	stateFile, _ := os.ReadFile(filepath.Join(feat, "state.md"))
+	if !strings.Contains(string(stateFile), "running") {
+		t.Errorf("state.md did not carry status.md content\n%s", stateFile)
 	}
-	proof, _ := os.ReadFile(filepath.Join(feat, "proof.md"))
-	if !strings.Contains(string(proof), "Tests green") {
-		t.Errorf("proof.md did not carry evidence.md content\n%s", proof)
+	evidence, _ := os.ReadFile(filepath.Join(feat, "evidence.md"))
+	if !strings.Contains(string(evidence), "Tests green") {
+		t.Errorf("evidence.md did not carry proof.md content\n%s", evidence)
 	}
 	if got := backupDirs(t, root); len(got) != 1 {
 		t.Errorf("want exactly one backup dir, got %v", got)

package/pack/.claude/skills/devrites-lib/reference/workspace-artifact-schema.md

@@ -9,9 +9,11 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 
 | Phase | Required artifacts |
 | --- | --- |
+| frame | `state.md` |
 | spec | `README.md`/`index.md`/`feature.md`, `brief.md`, `spec.md`, `state.md`, `decisions.md`, `assumptions.md`, `questions.md` |
-| define/plan/vet/build | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
-| prove/polish/review/seal/ship | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
+| temper | spec artifacts |
+| define/plan/vet/build/converge | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
+| prove/polish/review/seal/ship/done | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
 | conditional | `flows.md` when diagrams clarify; `design-brief.md` and `browser-evidence.md` for UI; `drift.md` for drift; `handoff.md` only when requested; `references.md` + `references/` when references exist |
 
 ## What each file owns
@@ -33,7 +35,7 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 | `evidence.md` / `proof.md` | `EVID-###` command/action, result, timestamp if available, related AC/slice IDs, limitation | 280 lines |
 | `browser-evidence.md` | UI route/viewports/screenshots/console/network/interactions and Visual Verdict | 220 lines |
 | `drift.md` | `DRIFT-###` spec/plan drift and resolution | 160 lines |
-| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 180 lines |
+| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 160 lines |
 | `design-brief.md` | UI design direction, states, interaction model | 160 lines |
 | `handoff.md` | cold-resume guide: current objective, last completed slice, next action, blockers, read-next links | 120 lines |
 

package/pack/generated/claude/skills/devrites-lib/reference/workspace-artifact-schema.md

@@ -9,9 +9,11 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 
 | Phase | Required artifacts |
 | --- | --- |
+| frame | `state.md` |
 | spec | `README.md`/`index.md`/`feature.md`, `brief.md`, `spec.md`, `state.md`, `decisions.md`, `assumptions.md`, `questions.md` |
-| define/plan/vet/build | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
-| prove/polish/review/seal/ship | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
+| temper | spec artifacts |
+| define/plan/vet/build/converge | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
+| prove/polish/review/seal/ship/done | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
 | conditional | `flows.md` when diagrams clarify; `design-brief.md` and `browser-evidence.md` for UI; `drift.md` for drift; `handoff.md` only when requested; `references.md` + `references/` when references exist |
 
 ## What each file owns
@@ -33,7 +35,7 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 | `evidence.md` / `proof.md` | `EVID-###` command/action, result, timestamp if available, related AC/slice IDs, limitation | 280 lines |
 | `browser-evidence.md` | UI route/viewports/screenshots/console/network/interactions and Visual Verdict | 220 lines |
 | `drift.md` | `DRIFT-###` spec/plan drift and resolution | 160 lines |
-| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 180 lines |
+| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 160 lines |
 | `design-brief.md` | UI design direction, states, interaction model | 160 lines |
 | `handoff.md` | cold-resume guide: current objective, last completed slice, next action, blockers, read-next links | 120 lines |
 

package/pack/generated/codex/AGENTS.md

@@ -18,6 +18,6 @@ This project has DevRites installed for both Claude Code and Codex.
 ## Workflow contract
 
 - Keep all feature state in `.devrites/work/<slug>/` and preserve `.devrites/ACTIVE`.
-- Follow the DevRites lifecycle: spec -> define -> build -> prove -> polish -> review -> seal -> ship.
+- Follow the DevRites lifecycle: frame -> spec -> temper -> define -> plan -> vet -> build -> converge -> prove -> polish -> review -> seal -> ship -> done.
 - Claims of completion need recorded evidence in the feature workspace, not confidence alone.
 <!-- END DEVRITES CODEX -->

package/pack/generated/codex/skills/devrites-lib/reference/workspace-artifact-schema.md

@@ -9,9 +9,11 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 
 | Phase | Required artifacts |
 | --- | --- |
+| frame | `state.md` |
 | spec | `README.md`/`index.md`/`feature.md`, `brief.md`, `spec.md`, `state.md`, `decisions.md`, `assumptions.md`, `questions.md` |
-| define/plan/vet/build | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
-| prove/polish/review/seal/ship | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
+| temper | spec artifacts |
+| define/plan/vet/build/converge | spec artifacts plus `architecture.md`, `plan.md`, `tasks.md`, `traceability.md` |
+| prove/polish/review/seal/ship/done | plan artifacts plus `evidence.md`/`proof.md`, `touched-files.md` |
 | conditional | `flows.md` when diagrams clarify; `design-brief.md` and `browser-evidence.md` for UI; `drift.md` for drift; `handoff.md` only when requested; `references.md` + `references/` when references exist |
 
 ## What each file owns
@@ -33,7 +35,7 @@ workspace map; `proof.md` may stand in for `evidence.md`.
 | `evidence.md` / `proof.md` | `EVID-###` command/action, result, timestamp if available, related AC/slice IDs, limitation | 280 lines |
 | `browser-evidence.md` | UI route/viewports/screenshots/console/network/interactions and Visual Verdict | 220 lines |
 | `drift.md` | `DRIFT-###` spec/plan drift and resolution | 160 lines |
-| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 180 lines |
+| `touched-files.md` | implementation files, slice ownership, reason, and a concern-ordered `## Review trail` of `path:line` stops for human review | 160 lines |
 | `design-brief.md` | UI design direction, states, interaction model | 160 lines |
 | `handoff.md` | cold-resume guide: current objective, last completed slice, next action, blockers, read-next links | 120 lines |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "3.0.2",
+  "version": "3.0.4",
   "description": "DevRites — disciplined senior-engineer workflow skills pack for Claude Code and Codex",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",
@@ -54,6 +54,7 @@
     "test:fast": "node scripts/run-tests.mjs --fast",
     "test:parallel": "node scripts/run-tests.mjs",
     "test:serial": "node scripts/run-tests.mjs --serial",
+    "audit": "npm audit --audit-level=moderate",
     "size:baseline": "node scripts/check-instruction-size-baseline.mjs --write",
     "release": "semantic-release",
     "release:dry": "semantic-release --dry-run --no-ci"

package/scripts/codex-generate.sh

@@ -132,7 +132,7 @@ This project has DevRites installed for both Claude Code and Codex.
 ## Workflow contract
 
 - Keep all feature state in `.devrites/work/<slug>/` and preserve `.devrites/ACTIVE`.
-- Follow the DevRites lifecycle: spec -> define -> build -> prove -> polish -> review -> seal -> ship.
+- Follow the DevRites lifecycle: frame -> spec -> temper -> define -> plan -> vet -> build -> converge -> prove -> polish -> review -> seal -> ship -> done.
 - Claims of completion need recorded evidence in the feature workspace, not confidence alone.
 <!-- END DEVRITES CODEX -->
 EOF

package/scripts/grade-feature.sh

@@ -77,9 +77,11 @@ fi
 
 # 7 — state phase / status
 if [ -f "$st" ]; then
-  sfield() { awk -v k="$1" 'match($0,"^[[:space:]]*-?[[:space:]]*" k ":[[:space:]]*"){r=substr($0,RLENGTH+1); sub(/[[:space:]]*(#|\|).*$/,"",r); sub(/[[:space:]]+$/,"",r); print r; exit}' "$st"; }
-  ph="$(sfield Phase)"; stt="$(sfield Status)"
-  case "$ph" in seal|ship|done) ;; *) problems+=("state.md Phase='${ph}' (expected seal/ship/done)") ;; esac
+  ph="$(python3 "$ROOT/scripts/workflow_schema.py" field "$st" phase 2>/dev/null || true)"
+  stt="$(python3 "$ROOT/scripts/workflow_schema.py" field "$st" status 2>/dev/null || true)"
+  if ! python3 "$ROOT/scripts/workflow_schema.py" phase-property "$ph" shippable; then
+    problems+=("state.md Phase='${ph}' (expected a shippable phase)")
+  fi
   case "$stt" in awaiting_human|blocked) problems+=("state.md Status='${stt}' (not shippable)") ;; esac
 else
   problems+=("state.md missing")

package/scripts/run-outcome-evals.sh

@@ -23,6 +23,27 @@ else
   echo "  FAIL — a known-shippable workspace should grade GO"; fail=1
 fi
 
+echo
+echo "== grade synthetic/canonical-cursor (expect GO) =="
+canonical="$tmp/canonical-cursor"
+mkdir -p "$canonical"
+cp -R "$good/." "$canonical/"
+cat > "$canonical/state.md" <<'MD'
+# State
+
+## Cursor
+| Key | Value |
+| --- | --- |
+| phase | done |
+| status | done |
+| next_action | archived |
+MD
+if bash "$GRADER" "$canonical"; then
+  echo "  PASS — canonical cursor graded GO"
+else
+  echo "  FAIL — canonical cursor should grade GO"; fail=1
+fi
+
 echo
 echo "== grade golden/blocked-feature (expect NO-GO) =="
 if bash "$GRADER" "$bad"; then

package/scripts/validate-workflow-security.py

@@ -4,9 +4,8 @@
 DevRites' publish (release.yml) and auto-merge paths are high-value targets, so this
 gate fails CI when a workflow:
 
-  - uses a THIRD-PARTY action not pinned to a full 40-char commit SHA — a moving tag
-    like `@v2` lets a compromised upstream inject code into the pipeline (GitHub-owned
-    `actions/*` and `github/*` tags are tolerated);
+  - uses any non-local action not pinned to a full 40-char commit SHA — a moving
+    tag like `@v2` lets a compromised upstream inject code into the pipeline;
   - declares no `permissions:` scope anywhere — the default token is broad;
   - uses `permissions: write-all` (over-broad);
   - uses `pull_request_target`, except for a Dependabot-only workflow that never
@@ -19,7 +18,6 @@ import os
 import re
 import sys
 
-FIRST_PARTY = {"actions", "github"}   # GitHub-owned; major-tag refs tolerated
 SHA_RE = re.compile(r"^[0-9a-f]{40}$")
 USES_RE = re.compile(r"^\s*-?\s*uses:\s*([^\s#]+)")
 DEPENDABOT_ONLY_RE = re.compile(
@@ -61,13 +59,10 @@ def scan_text(path, text):
         ref = m.group(1)
         if ref.startswith("./") or ref.startswith("."):
             continue  # local action
-        owner = ref.split("/", 1)[0]
-        if owner in FIRST_PARTY:
-            continue
         at = ref.rsplit("@", 1)
         pin = at[1] if len(at) == 2 else ""
         if not SHA_RE.match(pin):
-            findings.append("%s:%d: third-party action '%s' not pinned to a full commit "
+            findings.append("%s:%d: action '%s' not pinned to a full commit "
                             "SHA — pin it (a moving tag is a supply-chain risk)"
                             % (path, i, ref))
     return findings

package/scripts/validate-workspace-schema.py

@@ -12,6 +12,8 @@ import re
 import sys
 from pathlib import Path
 
+from workflow_schema import PHASES, cursor_field
+
 
 ID_PATTERNS = {
     "AC": re.compile(r"\bAC-\d{3}\b"),
@@ -112,68 +114,6 @@ SLICE_REQUIRED_FIELDS = (
     "Done condition",
 )
 
-PHASE_REQUIRED = {
-    "frame": ["state.md"],
-    "spec": ["brief.md", "spec.md", "state.md", "decisions.md", "assumptions.md", "questions.md"],
-    "temper": ["brief.md", "spec.md", "state.md", "decisions.md", "assumptions.md", "questions.md"],
-    "plan": [
-        "brief.md",
-        "spec.md",
-        "architecture.md",
-        "plan.md",
-        "tasks.md",
-        "traceability.md",
-        "state.md",
-        "decisions.md",
-        "assumptions.md",
-        "questions.md",
-    ],
-    "vet": [
-        "brief.md",
-        "spec.md",
-        "architecture.md",
-        "plan.md",
-        "tasks.md",
-        "traceability.md",
-        "state.md",
-        "decisions.md",
-        "assumptions.md",
-        "questions.md",
-    ],
-    "build": [
-        "brief.md",
-        "spec.md",
-        "architecture.md",
-        "plan.md",
-        "tasks.md",
-        "traceability.md",
-        "state.md",
-        "decisions.md",
-        "assumptions.md",
-        "questions.md",
-    ],
-    "prove": [
-        "brief.md",
-        "spec.md",
-        "architecture.md",
-        "plan.md",
-        "tasks.md",
-        "traceability.md",
-        "state.md",
-        "decisions.md",
-        "assumptions.md",
-        "questions.md",
-    ],
-    "polish": [],
-    "review": [],
-    "seal": [],
-    "ship": [],
-    "done": [],
-}
-for phase in ("polish", "review", "seal", "ship", "done"):
-    PHASE_REQUIRED[phase] = PHASE_REQUIRED["prove"]
-
-
 def read(path: Path) -> str:
     return path.read_text(encoding="utf-8")
 
@@ -198,12 +138,9 @@ def has_budget_override(text: str) -> bool:
 def phase_for(workspace: Path) -> str:
     for name in ("state.md", "status.md", "README.md", "index.md", "feature.md"):
         p = workspace / name
-        if not p.exists():
-            continue
-        text = read(p)
-        m = re.search(r"(?im)^\s*-?\s*phase\s*:\s*([a-z-]+)", text)
-        if m:
-            return m.group(1).lower()
+        value = cursor_field(p, "phase")
+        if value:
+            return value.split()[0].lower()
     return "spec"
 
 
@@ -374,9 +311,8 @@ def validate_workspace(workspace: Path) -> list[str]:
     if not workspace_index_present(workspace):
         errors.append(f"{workspace}: missing README.md/index.md/feature.md workspace map")
 
-    required = PHASE_REQUIRED.get(phase, PHASE_REQUIRED["spec"])
-    if phase in {"prove", "polish", "review", "seal", "ship", "done"}:
-        required = [*required, "evidence.md", "touched-files.md"]
+    metadata = PHASES.get(phase, PHASES["spec"])
+    required = list(metadata["workspaceRequired"])
     for name in required:
         if not existing_or_alias(workspace, name):
             errors.append(f"{workspace}: phase {phase} requires {name}")
@@ -456,7 +392,7 @@ def validate_workspace(workspace: Path) -> list[str]:
         for ac in sorted(ac_ids):
             if ac not in rows:
                 errors.append(f"{workspace / 'traceability.md'}: {ac} absent from coverage matrix")
-        if phase in {"prove", "polish", "review", "seal", "ship", "done"}:
+        if bool(metadata.get("proofRequired")):
             for eid in sorted(evid_ids):
                 if eid not in trace:
                     errors.append(f"{workspace / 'traceability.md'}: evidence ID {eid} from evidence/browser proof is not mapped")
@@ -467,7 +403,7 @@ def validate_workspace(workspace: Path) -> list[str]:
         elif slice_id not in evidence:
             errors.append(f"{evidence_path}: completed {slice_id} is not referenced by evidence")
 
-    if phase in {"plan", "vet", "build", "prove", "polish", "review", "seal", "ship", "done"}:
+    if bool(metadata.get("blocksOpenQuestions")):
         qfile = workspace / "questions.md"
         if qfile.exists():
             for qid in blocking_questions(read(qfile)):

package/scripts/validate.sh

@@ -219,6 +219,16 @@ fi
 
 # ---- 11b. generated workspace schema fixtures ----------------------------
 section "workspace artifact schema"
+if command -v go >/dev/null 2>&1; then
+  if (cd "$ROOT/engine" && go run ./internal/state/cmd/workflowmanifest -check -out internal/state/workflow_manifest.json) >/tmp/dr_workflow_manifest 2>&1; then
+    good "workflow manifest is fresh"
+  else
+    cat /tmp/dr_workflow_manifest
+    bad "workflow manifest drifted from the typed state registry"
+  fi
+else
+  echo "skip: go not found; workflow manifest freshness not checked"
+fi
 if command -v python3 >/dev/null 2>&1; then
   if python3 "$ROOT/scripts/validate-workspace-schema.py" "$ROOT/tests/fixtures/workspace-schema" >/tmp/dr_workspace_schema 2>&1; then
     cat /tmp/dr_workspace_schema

package/scripts/workflow_schema.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Read generated workflow metadata and canonical/legacy cursor fields."""
+
+from __future__ import annotations
+
+import json
+import re
+import sys
+from pathlib import Path
+
+
+MANIFEST = Path(__file__).resolve().parents[1] / "engine" / "internal" / "state" / "workflow_manifest.json"
+
+
+DOCUMENT = json.loads(MANIFEST.read_text(encoding="utf-8"))
+
+
+PHASES = {str(phase["id"]): phase for phase in DOCUMENT["phases"]}
+CURSOR_KEY_ALIASES = {
+    str(entry["alias"]): str(entry["canonical"])
+    for entry in DOCUMENT["cursorKeyAliases"]
+}
+
+
+def normalize_cursor_key(key: str) -> str:
+    normalized = "".join(char for char in key.lower() if char.isalnum())
+    canonical = CURSOR_KEY_ALIASES.get(normalized, normalized)
+    return "".join(char for char in canonical.lower() if char.isalnum())
+
+
+def cursor_field_text(text: str, key: str) -> str | None:
+    wanted = normalize_cursor_key(key)
+    for line in text.splitlines():
+        stripped = line.strip()
+        if stripped.startswith("|") and stripped.endswith("|"):
+            cells = [cell.strip() for cell in stripped[1:-1].split("|")]
+            if len(cells) >= 2 and normalize_cursor_key(cells[0]) == wanted:
+                return cells[1]
+        legacy = re.match(r"^\s*[-*+]?\s*([^:]+):\s*(.*?)\s*$", line)
+        if legacy and normalize_cursor_key(legacy.group(1)) == wanted:
+            return re.sub(r"\s*(?:#|\|).*?$", "", legacy.group(2)).rstrip()
+    return None
+
+
+def cursor_field(path: Path, key: str) -> str | None:
+    if not path.is_file():
+        return None
+    return cursor_field_text(path.read_text(encoding="utf-8"), key)
+
+
+def phase_property(phase: str, name: str) -> bool:
+    return bool(PHASES.get(phase.lower(), {}).get(name, False))
+
+
+def main(argv: list[str]) -> int:
+    if len(argv) == 4 and argv[1] == "field":
+        value = cursor_field(Path(argv[2]), argv[3])
+        if value is None:
+            return 1
+        print(value)
+        return 0
+    if len(argv) == 4 and argv[1] == "phase-property":
+        return 0 if phase_property(argv[2], argv[3]) else 1
+    print("usage: workflow_schema.py field <state.md> <key> | phase-property <phase> <property>", file=sys.stderr)
+    return 2
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv))