prizmkit 1.1.58 → 1.1.61

package/bundled/templates/hooks/validate-prizm-docs.sh

@@ -4,6 +4,13 @@
 
 MODE="${1:---staged}"
 ERRORS=0
+TEMP_FILES=""
+
+cleanup() {
+    # shellcheck disable=SC2086
+    [ -z "$TEMP_FILES" ] || rm -f $TEMP_FILES
+}
+trap cleanup EXIT HUP INT TERM
 
 # Not a prizm project — exit silently
 [ -f ".prizmkit/prizm-docs/root.prizm" ] || exit 0
@@ -22,22 +29,70 @@ fi
 [ -z "$FILES" ] && exit 0
 
 for FILE in $FILES; do
-    [ -f "$FILE" ] || continue
+    CHECK_FILE="$FILE"
+    if [ "$MODE" = "--staged" ]; then
+        git cat-file -e ":$FILE" 2>/dev/null || continue
+        CHECK_FILE=$(mktemp "${TMPDIR:-/tmp}/prizm-doc.XXXXXX") || exit 1
+        TEMP_FILES="$TEMP_FILES $CHECK_FILE"
+        git show ":$FILE" > "$CHECK_FILE" 2>/dev/null || continue
+    else
+        [ -f "$FILE" ] || continue
+    fi
 
     # Check markdown headers
-    if grep -qE '^#{1,6} ' "$FILE"; then
+    if grep -qE '^#{1,6} ' "$CHECK_FILE"; then
         echo "ERROR: $FILE contains markdown headers (##). Use KEY: value format." >&2
         ERRORS=$((ERRORS + 1))
     fi
 
     # Check code blocks
-    if grep -q '^```' "$FILE"; then
+    if grep -q '^```' "$CHECK_FILE"; then
         echo "ERROR: $FILE contains code blocks. Use file_path:line_number reference." >&2
         ERRORS=$((ERRORS + 1))
     fi
 
+    # Check auxiliary history fields and files
+    BASE_NAME=$(basename "$FILE" | tr '[:upper:]' '[:lower:]')
+    case "$BASE_NAME" in
+        changelog.prizm|changelog-archive.prizm|*changelog*.prizm)
+            echo "ERROR: $FILE is auxiliary history. Use git history instead of changelog .prizm files." >&2
+            ERRORS=$((ERRORS + 1))
+            ;;
+    esac
+    if grep -qiE '^[[:space:]]*[-*]?[[:space:]]*(CHANGELOG|CREATED([ _-]?(AT|ON|DATE))?|UPDATED([ _-]?(AT|ON|DATE))?|MODIFIED([ _-]?(AT|ON|DATE))?|LAST[ _-]?(UPDATED|MODIFIED)([ _-]?(AT|ON|DATE))?|DATE|TIMESTAMP):' "$CHECK_FILE"; then
+        echo "ERROR: $FILE contains auxiliary history metadata. Use durable KEY: value sections only; git tracks history." >&2
+        ERRORS=$((ERRORS + 1))
+    fi
+
+    # Check workflow metadata leakage
+    if grep -qiE '(^|[^[:alnum:]_])([FBR]-[0-9]{3}|T-[0-9]{3})(-[A-Z])?([^[:alnum:]_]|$)' "$CHECK_FILE" \
+        || grep -qiE '^[[:space:]]*[-*]?[[:space:]]*((bug|feature|refactor|task)[ _-]?id|(session|run|pipeline|workflow)([ _-]?id)?)([[:space:]]*(:|=)|[[:space:]]+)' "$CHECK_FILE" \
+        || grep -qiE '^[[:space:]]*[-*]?[[:space:]]*(bug|feature|refactor|task|session|run|pipeline|workflow)([ _-](bug|feature|refactor|task|session|run|pipeline|workflow|id))+([[:space:]]*(:|=)|[[:space:]]+)' "$CHECK_FILE"; then
+        echo "ERROR: $FILE contains workflow metadata. Translate IDs, branch names, worktree paths, and pipeline artifacts into durable product/domain language." >&2
+        ERRORS=$((ERRORS + 1))
+    fi
+
+    if sed 's#\\#/#g' "$CHECK_FILE" | grep -qE '(^|[^[:alnum:]_.-])\.prizmkit/(specs|dev-pipeline)($|/|[^[:alnum:]_.-])'; then
+        echo "ERROR: $FILE contains PrizmKit artifact paths. Translate specs/dev-pipeline references into durable product/domain language." >&2
+        ERRORS=$((ERRORS + 1))
+    fi
+
+    if sed 's#\\#/#g' "$CHECK_FILE" | grep -qE '(^|[^[:alnum:]_./:-])(/Users/|/home/|/tmp/|/private/tmp/|/var/folders/|/workspace/|/workspaces/|/opt/|/srv/|/root/|/var/tmp/|/Volumes/|/mnt/[A-Za-z]/|[A-Za-z]:/)'; then
+        echo "ERROR: $FILE contains absolute worktree paths. Use repository-relative source paths only." >&2
+        ERRORS=$((ERRORS + 1))
+    fi
+
+    if grep -qE '^[[:space:]]*[-*]?[[:space:]]*(BRANCH|BRANCH_NAME|CURRENT_BRANCH|SOURCE_BRANCH|BASE_BRANCH|HEAD_BRANCH|GIT_BRANCH|TARGET_BRANCH)[[:space:]_-]*(:|=|[[:space:]])' "$CHECK_FILE" \
+        || grep -qE '^[[:space:]]*[-*]?[[:space:]]*[A-Z][A-Z0-9_]*_BRANCH[[:space:]_-]*(:|=|[[:space:]])[[:space:]]*(main|master|develop|development|trunk|[A-Za-z0-9._-]+/[A-Za-z0-9._/-]+|(feature|fix|bugfix|hotfix|release|chore|refactor|task|dev)[/_-][A-Za-z0-9._/-]+)[[:space:]]*(#.*)?$' "$CHECK_FILE" \
+        || grep -qiE '^[[:space:]]*[-*]?[[:space:]]*(branch[ _-]*name|current[ _-]*branch|source[ _-]*branch|base[ _-]*branch|head[ _-]*branch|git[ _-]*branch|target[ _-]*branch)[[:space:]_-]*(:|=|[[:space:]])' "$CHECK_FILE" \
+        || grep -qiE '^[[:space:]]*[-*]?[[:space:]]*([[:alnum:]]+[ _-]+)+branch([[:space:]]*(:|=)|[[:space:]]+)[[:space:]]*(main|master|develop|development|trunk|[A-Za-z0-9._-]+/[A-Za-z0-9._/-]+|(feature|fix|bugfix|hotfix|release|chore|refactor|task|dev)[/_-][A-Za-z0-9._/-]+)[[:space:]]*(#.*)?$' "$CHECK_FILE" \
+        || grep -qiE '^[[:space:]]*[-*]?[[:space:]]*branch[[:space:]_-]*(:|=|[[:space:]])[[:space:]]*(main|master|develop|development|trunk|[A-Za-z0-9._-]+/[A-Za-z0-9._/-]+|(feature|fix|bugfix|hotfix|release|chore|refactor|task|dev)[/_-][A-Za-z0-9._/-]+)[[:space:]]*(#.*)?$' "$CHECK_FILE"; then
+        echo "ERROR: $FILE contains branch names. Describe durable product/domain context instead." >&2
+        ERRORS=$((ERRORS + 1))
+    fi
+
     # Size limits — determine level by path depth
-    SIZE=$(wc -c < "$FILE" | tr -d ' ')
+    SIZE=$(wc -c < "$CHECK_FILE" | tr -d ' ')
     case "$FILE" in
         *root.prizm)
             LIMIT=4096; LEVEL="L0"
@@ -51,7 +106,7 @@ for FILE in $FILES; do
                 HINT="Move implementation details to L2."
             else
                 LIMIT=5120; LEVEL="L2"
-                HINT="Archive CHANGELOG entries older than 90 days."
+                HINT="Remove stale or trivially derivable entries."
             fi
             ;;
     esac
@@ -64,11 +119,11 @@ for FILE in $FILES; do
     # Required fields in root.prizm
     case "$FILE" in
         *root.prizm)
-            if ! grep -q 'PRIZM_VERSION:' "$FILE"; then
+            if ! grep -q 'PRIZM_VERSION:' "$CHECK_FILE"; then
                 echo "ERROR: $FILE missing required field PRIZM_VERSION:" >&2
                 ERRORS=$((ERRORS + 1))
             fi
-            if ! grep -q 'MODULE_INDEX:' "$FILE"; then
+            if ! grep -q 'MODULE_INDEX:' "$CHECK_FILE"; then
                 echo "ERROR: $FILE missing required field MODULE_INDEX:" >&2
                 ERRORS=$((ERRORS + 1))
             fi

package/bundled/templates/project-memory-template.md

@@ -19,7 +19,8 @@ This project uses PrizmKit with the Prizm documentation system for AI-optimized
 - All `.prizm` files use KEY: value format, not prose
 - Size limits: L0 = 4KB, L1 = 4KB, L2 = 5KB
 - Arrow notation (->) indicates load pointers to other .prizm docs
-- DECISIONS and CHANGELOG are append-only (never delete entries)
+- Memory files must not contain CHANGELOG sections/files, UPDATED/date metadata, feature/bug/refactor/task/session/run/pipeline/workflow IDs, branch names, absolute worktree paths, or `.prizmkit/specs` / `.prizmkit/dev-pipeline` artifact paths
+- Update durable sections in place; git history is the change log
 - No date/time fields — git is the authoritative source for temporal info
 
 ### Creating New L2 Docs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prizmkit",
-  "version": "1.1.58",
+  "version": "1.1.61",
   "description": "Create a new PrizmKit-powered project with clean initialization — no framework dev files, just what you need.",
   "type": "module",
   "bin": {
@@ -35,7 +35,8 @@
     "development",
     "framework",
     "codebuddy",
-    "claude-code"
+    "claude-code",
+    "codex"
   ],
   "author": "PrizmKit",
   "license": "MIT"

package/src/clean.js

@@ -70,6 +70,55 @@ async function cleanGitignore(projectRoot, dryRun) {
   return { updated: true };
 }
 
+async function cleanMarkedProjectMemory(projectRoot, fileName, dryRun) {
+  const filePath = path.join(projectRoot, fileName);
+  if (!await fs.pathExists(filePath)) {
+    return { path: filePath, removed: false, reason: 'not_found' };
+  }
+
+  const content = await fs.readFile(filePath, 'utf8');
+  const next = content.replace(
+    /<!-- PRIZMKIT:START[\s\S]*?<!-- PRIZMKIT:END -->\n?/g,
+    ''
+  );
+
+  if (next === content) {
+    return { path: filePath, removed: false, reason: 'no_prizmkit_section' };
+  }
+
+  if (dryRun) {
+    return { path: filePath, removed: false, reason: 'dry_run' };
+  }
+
+  const trimmed = next.trim();
+  if (!trimmed) {
+    await fs.remove(filePath);
+    return { path: filePath, removed: true };
+  }
+
+  await fs.writeFile(filePath, next.replace(/\n{3,}/g, '\n\n').trimEnd() + '\n');
+  return { path: filePath, removed: true, note: '(PrizmKit section)' };
+}
+
+async function removeGeneratedCodexConfig(projectRoot, dryRun) {
+  const configPath = path.join(projectRoot, '.codex', 'config.toml');
+  if (!await fs.pathExists(configPath)) {
+    return { path: configPath, removed: false, reason: 'not_found' };
+  }
+
+  const content = await fs.readFile(configPath, 'utf8');
+  if (!content.includes('Generated by PrizmKit for Codex CLI project configuration')) {
+    return { path: configPath, removed: false, reason: 'user_config' };
+  }
+
+  if (dryRun) {
+    return { path: configPath, removed: false, reason: 'dry_run' };
+  }
+
+  await fs.remove(configPath);
+  return { path: configPath, removed: true };
+}
+
 export async function runClean(directory, options = {}) {
   const projectRoot = path.resolve(directory || '.');
   const dryRun = Boolean(options.dryRun);
@@ -103,6 +152,7 @@ export async function runClean(directory, options = {}) {
   ];
   const manifestAgentFiles = manifest?.files?.agents || [];
   const agentFiles = [...new Set([...knownAgentFiles, ...manifestAgentFiles])];
+  const codexAgentFiles = [...new Set(agentFiles.flatMap(f => [f, f.replace(/\.md$/, '.toml')]))];
 
   // Rule file names installed by PrizmKit (union of metadata + manifest)
   const metadataRuleFileNames = Object.keys(metadata_rules_to_filenames(rulesMeta));
@@ -115,20 +165,21 @@ export async function runClean(directory, options = {}) {
   const fullRemoveTargets = [
     '.prizmkit',
     '.dev-team',
-    'CODEBUDDY.md',
-    'CLAUDE.md',
     path.join('.prizmkit', 'plans', 'feature-list.json'),          // feature-planner output
     path.join('.prizmkit', 'plans', 'bug-fix-list.json'),          // bug-planner output
     path.join('.prizmkit', 'plans', 'project-brief.md'),           // feature-planner project brief
     path.join('.codebuddy', 'settings.json'),
     path.join('.claude', 'settings.json'),
     path.join('.claude', 'team-info.json'),
+    path.join('.codex', 'prizmkit-settings.json'),                 // legacy Codex metadata
+    path.join('.codex', 'team-info.json'),
   ];
 
   for (const rel of fullRemoveTargets) {
     const abs = path.join(projectRoot, rel);
     results.push(await removePath(abs, dryRun));
   }
+  results.push(await removeGeneratedCodexConfig(projectRoot, dryRun));
 
   // ── Selective removes (shared dirs — only remove PrizmKit-known entries) ──
 
@@ -145,6 +196,10 @@ export async function runClean(directory, options = {}) {
   const cbSkillsDir = path.join(projectRoot, '.codebuddy', 'skills');
   results.push(...await removeKnownEntries(cbSkillsDir, allSkillNames, dryRun));
 
+  // .agents/skills/ — Codex repository skills
+  const codexSkillsDir = path.join(projectRoot, '.agents', 'skills');
+  results.push(...await removeKnownEntries(codexSkillsDir, allSkillNames, dryRun));
+
   // .claude/agents/ — PrizmKit agent files
   const claudeAgentsDir = path.join(projectRoot, '.claude', 'agents');
   results.push(...await removeKnownEntries(claudeAgentsDir, agentFiles, dryRun));
@@ -153,6 +208,10 @@ export async function runClean(directory, options = {}) {
   const cbAgentsDir = path.join(projectRoot, '.codebuddy', 'agents');
   results.push(...await removeKnownEntries(cbAgentsDir, agentFiles, dryRun));
 
+  // .codex/agents/ — same agent reference files
+  const codexAgentsDir = path.join(projectRoot, '.codex', 'agents');
+  results.push(...await removeKnownEntries(codexAgentsDir, codexAgentFiles, dryRun));
+
   // .claude/rules/ — PrizmKit rule .md files
   const claudeRulesDir = path.join(projectRoot, '.claude', 'rules');
   results.push(...await removeKnownEntries(claudeRulesDir, ruleFileNames.map(n => `${n}.md`), dryRun));
@@ -161,6 +220,18 @@ export async function runClean(directory, options = {}) {
   const cbRulesDir = path.join(projectRoot, '.codebuddy', 'rules');
   results.push(...await removeKnownEntries(cbRulesDir, ruleFileNames.map(n => `${n}.mdc`), dryRun));
 
+  // .agents/rules/ — Codex PrizmKit behavioral guidance Markdown files
+  const codexRulesDir = path.join(projectRoot, '.agents', 'rules');
+  results.push(...await removeKnownEntries(codexRulesDir, ruleFileNames.map(n => `${n}.md`), dryRun));
+
+  // .codex/rules/ — legacy PrizmKit-owned rule files from older Codex installs
+  const legacyCodexRulesDir = path.join(projectRoot, '.codex', 'rules');
+  results.push(...await removeKnownEntries(legacyCodexRulesDir, ruleFileNames.map(n => `${n}.md`), dryRun));
+
+  for (const memoryFile of ['CODEBUDDY.md', 'CLAUDE.md', 'AGENTS.md']) {
+    results.push(await cleanMarkedProjectMemory(projectRoot, memoryFile, dryRun));
+  }
+
   // ── .gitignore cleanup ────────────────────────────────────────────────────
   const gitignoreResult = await cleanGitignore(projectRoot, dryRun);