safepropel 1.4.0 → 1.4.2

package/engine/workflow-executor.js

@@ -209,12 +209,15 @@ class WorkflowExecutor {
       const workflow = this.runtime.get(promptPath);
       
       // Extract template reference ONLY from Output section to avoid loading multiple templates
-      // Look for: "Generate the output using the `.propel/templates/xxx-template.md` template."
+      // Look for various patterns:
+      // - "Generate the output using the `.propel/templates/xxx-template.md` template"
+      // - "generate ... using `.propel/templates/xxx-template.md` template"
+      // - "using `.propel/templates/requirements-template.md` template"
       const outputSectionMatch = workflow.content.match(/## Output[\s\S]*?(?=##|$)/);
       const outputSection = outputSectionMatch ? outputSectionMatch[0] : workflow.content;
       
-      // Extract template reference from output section only
-      const templateMatch = outputSection.match(/Generate the output using the `(\.propel\/templates\/[a-z-]+\.md)` template/);
+      // Extract template reference from output section - flexible pattern
+      const templateMatch = outputSection.match(/using\s+`(\.propel\/templates\/[a-z-]+\.md)`\s+template/i);
       const templates = [];
       
       if (templateMatch) {
@@ -348,8 +351,13 @@ class WorkflowExecutor {
           
           prompt += `\n⚠️  CRITICAL TEMPLATE ENFORCEMENT for ${template.path}:\n`;
           prompt += `\n1. DOCUMENT TITLE:\n`;
-          prompt += `   ✅ MUST be exactly: "${title}"\n`;
-          prompt += `   ❌ DO NOT add prefixes, suffixes, or modify in any way\n`;
+          prompt += `   ✅ MUST be EXACTLY: "${title}"\n`;
+          prompt += `   ✅ Use NO project name, NO prefixes, NO suffixes, NO modifications\n`;
+          prompt += `   ❌ WRONG: "# Project Name - ${title}"\n`;
+          prompt += `   ❌ WRONG: "# ${title} - Project Name"\n`;
+          prompt += `   ❌ WRONG: "# ${title} for Project"\n`;
+          prompt += `   ✅ CORRECT: "# ${title}"\n`;
+          prompt += `   ⚠️  CRITICAL: The title "${title}" is the COMPLETE title - add NOTHING to it\n`;
           
           prompt += `\n2. REQUIRED SECTIONS (EXACT order and names):\n`;
           sectionList.forEach((section, idx) => {
@@ -386,14 +394,15 @@ class WorkflowExecutor {
           
           prompt += `\n6. MANDATORY ACTIONS:\n`;
           prompt += `   ✅ Use section names VERBATIM from list in step 2\n`;
+          prompt += `   ✅ Use document title VERBATIM from step 1 (no modifications)\n`;
           prompt += `   ✅ Fill bracketed placeholders [like this] with actual content\n`;
           prompt += `   ✅ Maintain exact heading levels (# ## ### ####)\n`;
           prompt += `   ✅ Include ONLY sections from template\n`;
           prompt += `   ✅ Skip [CONDITIONAL] sections if not applicable\n`;
           prompt += `   ✅ Follow requirement format patterns exactly\n`;
-          prompt += `   ⚠️  CRITICAL: DO NOT generate ${title.replace(' Template', '')} content - ONLY use template structure\n`;
-          prompt += `   ⚠️  CRITICAL: This is NOT a requirements document - this is a ${title}\n`;
-          prompt += `   ⚠️  CRITICAL: NEVER create sections like "Feature Goal", "Business Justification", etc.\n`;
+          prompt += `   ⚠️  CRITICAL: Template structure is MANDATORY - no additions, no changes\n`;
+          prompt += `   ⚠️  CRITICAL: Section names and order are FIXED - use them exactly\n`;
+          prompt += `   ⚠️  CRITICAL: Document title is COMPLETE - do not prepend project name\n`;
           
           prompt += `\n7. TEMPLATE TYPE VALIDATION:\n`;
           prompt += `   🔍 This is a "${title}" - NOT a requirements document\n`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safepropel",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "SafePropel Framework - Hybrid Security Model: Encrypted Workflows + Transparent Rules & Templates with Dynamic Loading",
   "main": "engine/workflow-executor.js",
   "scripts": {

package/safepropel.js

@@ -291,13 +291,16 @@ function main() {
       console.log(`     - Firewall enabled: ${result.metrics.firewallEnabled}`);
     }
     
-    // Output the constructed prompt for Cascade execution
-    if (constructedPrompt) {
+    // Output the constructed prompt for Cascade execution (only if authorized)
+    if (constructedPrompt && isAuthorizedCascade) {
       console.log(`\n` + '='.repeat(80));
       console.log('CONSTRUCTED PROMPT - Execute this in Cascade:');
       console.log('='.repeat(80));
       console.log(constructedPrompt);
       console.log('='.repeat(80));
+    } else if (constructedPrompt) {
+      console.log(`\n🔒 Workflow content is confidential and protected`);
+      console.log(`   Execution requires --cascade-internal flag and authorized IDE`);
     }
     
     // Clean up any workflow-output.json files (security measure)