specweave 1.0.32 → 1.0.33

package/plugins/specweave/hooks/project-folder-guard.sh

@@ -1,274 +0,0 @@
-#!/usr/bin/env bash
-# Project Folder Guard (Pre-tool-use Hook)
-# Prevents creation of project folders unless project exists in config.json
-#
-# Triggers: Write tool creating files in .specweave/docs/internal/specs/{project}/
-# Blocks: Project folders not in config.json multiProject.projects
-# Version: 0.35.1+ (Enhanced with example project detection)
-#
-# CRITICAL v0.35.1: Added detection of common example project names
-# These are NEVER allowed unless explicitly configured:
-# - frontend-app, backend-api, mobile-app, shared-lib (common examples)
-# - acme-corp, my-app, myapp (placeholder names)
-# - Comma-separated values like "frontend-app, backend-api"
-# - Placeholder patterns like {{PROJECT_ID}}
-
-set -euo pipefail
-
-# Read stdin for tool input (Claude Code passes JSON via stdin)
-INPUT=$(cat)
-
-# Extract tool name - Claude Code passes it at top level
-TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null || echo "")
-
-# Only check Write tool operations to specs/ folder
-if [ "$TOOL_NAME" != "Write" ]; then
-  exit 0
-fi
-
-# Extract file_path from tool_input (correct structure for Claude Code hooks)
-FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null || echo "")
-
-if [ -z "$FILE_PATH" ]; then
-  exit 0
-fi
-
-# Check if writing to specs folder
-if [[ ! "$FILE_PATH" =~ \.specweave/docs/internal/specs/([^/]+)/ ]]; then
-  exit 0
-fi
-
-# Extract project name from path
-PROJECT_NAME="${BASH_REMATCH[1]}"
-
-# Skip validation for README.md in specs root
-if [ "$PROJECT_NAME" = "README.md" ]; then
-  exit 0
-fi
-
-# CRITICAL v0.35.1: Check for template placeholders like {{PROJECT_ID}}
-if [[ "$PROJECT_NAME" =~ \{\{.*\}\} ]]; then
-  echo "❌ BLOCKED: Unresolved placeholder detected: '$PROJECT_NAME'"
-  echo ""
-  echo "   Project name contains template placeholder syntax: {{ ... }}"
-  echo "   This is NOT a valid project name."
-  echo ""
-  echo "   🔧 Edit spec.md and replace {{...}} with your actual project name"
-  exit 1
-fi
-
-# CRITICAL v0.35.1: Check for comma-separated values (invalid format)
-if [[ "$PROJECT_NAME" =~ , ]]; then
-  echo "❌ BLOCKED: Comma-separated project names detected: '$PROJECT_NAME'"
-  echo ""
-  echo "   Each User Story must have exactly ONE project."
-  echo "   Multiple comma-separated projects are NOT allowed."
-  echo ""
-  echo "   🔧 Split into separate User Stories, one per project"
-  exit 1
-fi
-
-# CRITICAL v0.35.1: Check for parentheses (often seen in examples)
-if [[ "$PROJECT_NAME" =~ \( || "$PROJECT_NAME" =~ \) ]]; then
-  echo "❌ BLOCKED: Invalid characters in project name: '$PROJECT_NAME'"
-  echo ""
-  echo "   Project names cannot contain parentheses."
-  echo "   This looks like an example/documentation string."
-  echo ""
-  echo "   🔧 Use a valid kebab-case project name (e.g., my-project)"
-  exit 1
-fi
-
-# CRITICAL v0.35.1: Check ProjectRegistry FIRST (.specweave/state/projects.json)
-# This is the single source of truth for projects (v0.35.0+)
-REGISTRY_FILE=".specweave/state/projects.json"
-CONFIG_FILE=".specweave/config.json"
-
-# CRITICAL v0.35.1: List of known example project names
-# These are blocked UNLESS explicitly registered
-EXAMPLE_PROJECTS="frontend-app backend-api mobile-app shared-lib acme-corp my-app myapp example-project sample-project test-project demo placeholder per default"
-
-# Check if project is in example list (case-insensitive)
-PROJECT_NAME_LOWER=$(echo "$PROJECT_NAME" | tr '[:upper:]' '[:lower:]')
-IS_EXAMPLE="false"
-for EXAMPLE in $EXAMPLE_PROJECTS; do
-  if [ "$PROJECT_NAME_LOWER" = "$EXAMPLE" ]; then
-    IS_EXAMPLE="true"
-    break
-  fi
-done
-
-# PRIMARY: Check ProjectRegistry (projects.json)
-if [ -f "$REGISTRY_FILE" ]; then
-  # Get all project IDs from registry
-  REGISTRY_PROJECTS=$(jq -r '.projects | keys[]' "$REGISTRY_FILE" 2>/dev/null || echo "")
-
-  if [ -n "$REGISTRY_PROJECTS" ]; then
-    # Check if project exists in registry (case-insensitive)
-    PROJECT_IN_REGISTRY="false"
-    for REG_PROJECT in $REGISTRY_PROJECTS; do
-      REG_PROJECT_LOWER=$(echo "$REG_PROJECT" | tr '[:upper:]' '[:lower:]')
-      if [ "$PROJECT_NAME_LOWER" = "$REG_PROJECT_LOWER" ]; then
-        PROJECT_IN_REGISTRY="true"
-        break
-      fi
-    done
-
-    if [ "$PROJECT_IN_REGISTRY" = "true" ]; then
-      # Project exists in registry - ALLOW
-      exit 0
-    fi
-
-    # Project NOT in registry
-    VALID_PROJECTS=$(echo "$REGISTRY_PROJECTS" | tr '\n' ', ' | sed 's/,$//')
-
-    if [ "$IS_EXAMPLE" = "true" ]; then
-      echo "❌ BLOCKED: Example project name detected: '$PROJECT_NAME'"
-      echo ""
-      echo "   '$PROJECT_NAME' is a common example/placeholder name used in documentation."
-      echo "   It was likely extracted from example User Stories in spec.md."
-      echo ""
-      echo "   ⚠️  This is NOT a real project - it's a documentation example!"
-      echo ""
-      echo "   Registered projects: $VALID_PROJECTS"
-      echo ""
-      echo "   🔧 How to fix:"
-      echo "   1. Edit the spec.md file and update **Project**: fields"
-      echo "   2. Replace example names with a registered project"
-      echo "   3. Re-run the sync command"
-    else
-      echo "❌ BLOCKED: Project '$PROJECT_NAME' not in registry"
-      echo ""
-      echo "   Project '$PROJECT_NAME' is NOT registered in .specweave/state/projects.json"
-      echo ""
-      echo "   Registered projects: $VALID_PROJECTS"
-      echo ""
-      echo "   🔧 To add this project:"
-      echo "   specweave project add $PROJECT_NAME --name \"Project Display Name\""
-    fi
-    exit 1
-  fi
-fi
-
-# FALLBACK: Check config.json if registry doesn't exist or is empty
-if [ ! -f "$CONFIG_FILE" ]; then
-  echo "❌ ERROR: Neither projects.json nor config.json found"
-  echo "   Cannot validate project folder creation without configuration"
-  exit 1
-fi
-
-# Check if multi-project mode is enabled
-MULTI_PROJECT_ENABLED=$(jq -r '.multiProject.enabled // false' "$CONFIG_FILE")
-
-if [ "$MULTI_PROJECT_ENABLED" != "true" ]; then
-  # Single-project mode - only allow configured project name
-  ALLOWED_PROJECT=$(jq -r '.project.name // "specweave"' "$CONFIG_FILE")
-
-  if [ "$PROJECT_NAME" != "$ALLOWED_PROJECT" ]; then
-    # Special message for example projects
-    if [ "$IS_EXAMPLE" = "true" ]; then
-      echo "❌ BLOCKED: Example project name detected: '$PROJECT_NAME'"
-      echo ""
-      echo "   '$PROJECT_NAME' is a common example/placeholder name used in documentation."
-      echo "   It was likely extracted from example User Stories in spec.md."
-      echo ""
-      echo "   ⚠️  This is NOT a real project - it's a documentation example!"
-      echo ""
-      echo "   🔧 How to fix:"
-      echo "   1. Edit the spec.md file and update **Project**: fields"
-      echo "   2. Replace example names with: $ALLOWED_PROJECT"
-      echo "   3. Re-run the sync command"
-      echo ""
-      echo "   📋 Example fix in spec.md:"
-      echo "   BEFORE: **Project**: $PROJECT_NAME  ← EXAMPLE (WRONG)"
-      echo "   AFTER:  **Project**: $ALLOWED_PROJECT  ← Your actual project"
-      echo ""
-    else
-      echo "❌ BLOCKED: Project folder creation for '$PROJECT_NAME'"
-      echo ""
-      echo "   This repository is in SINGLE-PROJECT mode."
-      echo "   Only folder allowed: $ALLOWED_PROJECT"
-      echo ""
-      echo "   Current config (.specweave/config.json):"
-      echo "   {"
-      echo "     \"project\": { \"name\": \"$ALLOWED_PROJECT\" },"
-      echo "     \"multiProject\": { \"enabled\": false }"
-      echo "   }"
-      echo ""
-      echo "   ⚠️  If '$PROJECT_NAME' is an example/placeholder in spec.md, update it to:"
-      echo "   **Project**: $ALLOWED_PROJECT"
-      echo ""
-      echo "   💡 To add new projects:"
-      echo "   1. Run: specweave config set multiProject.enabled true"
-      echo "   2. Run: specweave config set multiProject.projects.$PROJECT_NAME.id \"$PROJECT_NAME\""
-      echo "   3. Re-run your command"
-    fi
-    exit 1
-  fi
-
-  exit 0
-fi
-
-# Multi-project mode - check if project exists in config
-if jq -e ".multiProject.projects.\"$PROJECT_NAME\"" "$CONFIG_FILE" &>/dev/null; then
-  PROJECT_EXISTS="true"
-else
-  PROJECT_EXISTS="false"
-fi
-
-if [ "$PROJECT_EXISTS" = "false" ]; then
-  # Get list of valid projects
-  VALID_PROJECTS=$(jq -r '.multiProject.projects | keys[]' "$CONFIG_FILE" 2>/dev/null | tr '\n' ', ' | sed 's/,$//' || echo "")
-
-  # Special message for example projects
-  if [ "$IS_EXAMPLE" = "true" ]; then
-    echo "❌ BLOCKED: Example project name detected: '$PROJECT_NAME'"
-    echo ""
-    echo "   '$PROJECT_NAME' is a common example/placeholder name used in documentation."
-    echo "   It was likely extracted from example User Stories in spec.md."
-    echo ""
-    echo "   ⚠️  This is NOT a real project - it's a documentation example!"
-    echo ""
-    if [ -n "$VALID_PROJECTS" ]; then
-      echo "   Valid projects: $VALID_PROJECTS"
-      echo ""
-    fi
-    echo "   🔧 How to fix:"
-    echo "   1. Edit the spec.md file and update **Project**: fields"
-    echo "   2. Replace example names with a configured project"
-    echo "   3. Re-run the sync command"
-    echo ""
-  else
-    echo "❌ BLOCKED: Project folder creation for '$PROJECT_NAME'"
-    echo ""
-    echo "   Project '$PROJECT_NAME' is NOT configured in .specweave/config.json"
-    echo ""
-    if [ -n "$VALID_PROJECTS" ]; then
-      echo "   Valid projects: $VALID_PROJECTS"
-      echo ""
-    fi
-    echo "   ⚠️  Common causes:"
-    echo "   1. Example/placeholder project in spec.md User Stories"
-    echo "   2. Typo in **Project**: field (e.g., 'MyApp (3 repos)' instead of real project)"
-    echo "   3. Missing project configuration"
-    echo ""
-    echo "   🔧 How to fix:"
-    if [ -n "$VALID_PROJECTS" ]; then
-      echo "   • If this is an EXAMPLE in spec.md, update to a real project:"
-      echo "     **Project**: ${VALID_PROJECTS%%,*}  # Use first valid project"
-      echo ""
-    fi
-    echo "   • If this is a NEW project, add it to config:"
-    echo "     specweave config set multiProject.projects.$PROJECT_NAME.id \"$PROJECT_NAME\""
-    echo "     specweave config set multiProject.projects.$PROJECT_NAME.name \"Project Display Name\""
-    echo ""
-    echo "   • Check spec.md for placeholder User Stories like:"
-    echo "     **Project**: frontend-app, backend-api  ← FORBIDDEN (comma-separated)"
-    echo "     **Project**: MyApp (3 repos)  ← FORBIDDEN (parentheses not allowed)"
-    echo ""
-  fi
-  exit 1
-fi
-
-# Project exists - allow creation
-exit 0

package/plugins/specweave/hooks/spec-project-validator.sh

@@ -1,210 +0,0 @@
-#!/bin/bash
-#
-# spec-project-validator.sh
-#
-# Pre-tool-use hook that validates spec.md project/board configuration
-# before allowing Write tool to create/update spec.md files.
-#
-# Activation:
-# - tool_name: Write
-# - file_path matches: .specweave/increments/*/spec.md
-#
-# Rules (ADR-0140 v0.35.0+):
-# - Frontmatter `project:` and `board:` fields are OPTIONAL (deprecated)
-# - Per-US `**Project**:` and `**Board**:` fields are the PRIMARY source
-# - Validates no unresolved {{...}} placeholders exist
-# - Single-project mode: frontmatter project must match config if present
-# - Multi-project mode: validates projects exist in config if referenced
-#
-# Returns exit code 1 (block) if validation fails, 0 (allow) otherwise.
-#
-# Bypass: Set SPECWEAVE_FORCE_PROJECT=1 to skip validation
-
-set -e
-
-# Check for force bypass
-if [ "$SPECWEAVE_FORCE_PROJECT" = "1" ]; then
-  echo '{"decision": "allow", "message": "⚠️  Project validation bypassed (SPECWEAVE_FORCE_PROJECT=1)"}'
-  exit 0
-fi
-
-# Read tool input from stdin
-INPUT=$(cat)
-
-# Extract tool name
-TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // ""')
-
-# Only validate Write tool calls
-if [ "$TOOL_NAME" != "Write" ]; then
-  echo '{"decision": "allow"}'
-  exit 0
-fi
-
-# Extract file path
-FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // ""')
-
-# Only validate spec.md files in increments folder
-# Match: 3-4 digits, optional E suffix, kebab-case name, spec.md
-if [[ ! "$FILE_PATH" =~ \.specweave/increments/[0-9]{3,4}E?-[^/]+/spec\.md$ ]]; then
-  echo '{"decision": "allow"}'
-  exit 0
-fi
-
-# Extract file content
-CONTENT=$(echo "$INPUT" | jq -r '.tool_input.content // ""')
-
-# Check if content has YAML frontmatter
-if [[ ! "$CONTENT" =~ ^---$'\n' ]]; then
-  echo '{"decision": "block", "reason": "spec.md must have YAML frontmatter (starting with ---)"}'
-  exit 0
-fi
-
-# Extract YAML frontmatter
-FRONTMATTER=$(echo "$CONTENT" | sed -n '/^---$/,/^---$/p' | tail -n +2 | head -n -1)
-
-# Check for unresolved project placeholder (legacy {{PROJECT_ID}})
-if echo "$FRONTMATTER" | grep -q 'project:\s*{{PROJECT_ID}}'; then
-  echo '{"decision": "block", "reason": "spec.md has unresolved placeholder {{PROJECT_ID}}. Run '\''specweave context projects'\'' to get available projects, then select one."}'
-  exit 0
-fi
-
-# Check for unresolved board placeholder (legacy {{BOARD_ID}})
-if echo "$FRONTMATTER" | grep -q 'board:\s*{{BOARD_ID}}'; then
-  echo '{"decision": "block", "reason": "spec.md has unresolved placeholder {{BOARD_ID}}. Run '\''specweave context boards --project=<id>'\'' to get available boards, then select one."}'
-  exit 0
-fi
-
-# Check for ANY unresolved {{...}} placeholder in frontmatter (v0.34.0+)
-# This catches {{RESOLVED_PROJECT}}, {{RESOLVED_BOARD}}, and any other placeholders
-if echo "$FRONTMATTER" | grep -qE '\{\{[A-Z_]+\}\}'; then
-  FOUND_PLACEHOLDERS=$(echo "$FRONTMATTER" | grep -oE '\{\{[A-Z_]+\}\}' | tr '\n' ', ' | sed 's/,$//')
-  echo "{\"decision\": \"block\", \"reason\": \"spec.md has unresolved placeholders: ${FOUND_PLACEHOLDERS}\\n\\nYOU MUST RESOLVE these BEFORE creating spec.md:\\n1. Run: specweave context projects\\n2. Parse the JSON output to get valid project/board IDs\\n3. Replace placeholders with actual values from step 2\\n\\n❌ FORBIDDEN: Using placeholder templates directly\\n✅ REQUIRED: Resolve ALL placeholders to actual values\"}"
-  exit 0
-fi
-
-# Check for ANY unresolved {{...}} placeholder in full content (catches per-US **Project**: {{...}})
-if echo "$CONTENT" | grep -qE '\*\*Project\*\*:\s*\{\{[A-Z_]+\}\}'; then
-  FOUND_PLACEHOLDERS=$(echo "$CONTENT" | grep -oE '\*\*Project\*\*:\s*\{\{[A-Z_]+\}\}' | head -1)
-  echo "{\"decision\": \"block\", \"reason\": \"spec.md has unresolved **Project**: placeholder\\n\\nFound: ${FOUND_PLACEHOLDERS}\\n\\nEach user story MUST have a resolved **Project**: field.\\n\\n1. Run: specweave context projects\\n2. Get valid project IDs from the JSON output\\n3. Replace the placeholder with an actual project ID\"}"
-  exit 0
-fi
-
-# Check for unresolved **Board**: placeholders in full content (2-level structures)
-if echo "$CONTENT" | grep -qE '\*\*Board\*\*:\s*\{\{[A-Z_]+\}\}'; then
-  FOUND_PLACEHOLDERS=$(echo "$CONTENT" | grep -oE '\*\*Board\*\*:\s*\{\{[A-Z_]+\}\}' | head -1)
-  echo "{\"decision\": \"block\", \"reason\": \"spec.md has unresolved **Board**: placeholder\\n\\nFound: ${FOUND_PLACEHOLDERS}\\n\\nEach user story MUST have a resolved **Board**: field (for 2-level structures).\\n\\n1. Run: specweave context projects\\n2. Get valid board IDs from boardsByProject in the JSON output\\n3. Replace the placeholder with an actual board ID\"}"
-  exit 0
-fi
-
-# Extract project and board from frontmatter
-PROJECT=$(echo "$FRONTMATTER" | grep -E '^project:\s*' | sed 's/^project:\s*//' | tr -d '"'"'" | tr -d '[:space:]')
-BOARD=$(echo "$FRONTMATTER" | grep -E '^board:\s*' | sed 's/^board:\s*//' | tr -d '"'"'" | tr -d '[:space:]')
-
-# Get project root from file path
-PROJECT_ROOT="${FILE_PATH%%/.specweave/*}"
-
-# Change to project root for specweave command
-cd "$PROJECT_ROOT" 2>/dev/null || true
-
-# Check if single-project or multi-project mode (NEW - v0.34.0+)
-CONFIG_FILE="$PROJECT_ROOT/.specweave/config.json"
-MULTI_PROJECT_ENABLED=$(jq -r '.multiProject.enabled // false' "$CONFIG_FILE" 2>/dev/null || echo "false")
-
-# Get project context via CLI command
-CONTEXT_OUTPUT=$(specweave context projects 2>/dev/null || echo '{"level": 1, "projects": []}')
-
-# Parse structure level
-STRUCTURE_LEVEL=$(echo "$CONTEXT_OUTPUT" | jq -r '.level // 1')
-
-# Parse available projects
-AVAILABLE_PROJECTS=$(echo "$CONTEXT_OUTPUT" | jq -r '.projects[].id // empty' | tr '\n' ', ' | sed 's/,$//')
-
-# NEW (v0.34.0+): Single-project mode validation
-if [ "$MULTI_PROJECT_ENABLED" = "false" ]; then
-  # Single-project mode: project field is OPTIONAL
-  # If provided, validate it matches config.project.name
-  CONFIGURED_PROJECT=$(jq -r '.project.name // "specweave"' "$CONFIG_FILE" 2>/dev/null)
-
-  if [ -n "$PROJECT" ] && [ "$PROJECT" != "null" ] && [ "$PROJECT" != "$CONFIGURED_PROJECT" ]; then
-    echo "{\"decision\": \"block\", \"reason\": \"spec.md has project: '${PROJECT}' but config has project.name: '${CONFIGURED_PROJECT}'.\\n\\nIn single-project mode, the project: field MUST match config.project.name OR be omitted.\\n\\nFix:\\n1. Remove project: field (recommended for single-project mode)\\n2. OR change to: project: ${CONFIGURED_PROJECT}\\n3. OR enable multi-project mode: /sw:enable-multiproject\"}"
-    exit 0
-  fi
-
-  # ALWAYS block board: field in single-project mode
-  if [ -n "$BOARD" ] && [ "$BOARD" != "null" ]; then
-    echo "{\"decision\": \"block\", \"reason\": \"spec.md has board: field but this is a SINGLE-PROJECT repository.\\n\\nThe board: field is ONLY for multi-project mode.\\n\\nFix:\\n1. Remove the board: field\\n2. OR enable multi-project mode: /sw:enable-multiproject\"}"
-    exit 0
-  fi
-
-  # All validations passed for single-project mode
-  echo '{"decision": "allow"}'
-  exit 0
-fi
-
-# Multi-project mode validation continues below
-# ADR-0140 (v0.35.0+): Frontmatter project/board fields are OPTIONAL
-# Per-US fields are the PRIMARY source of truth
-
-# Validation based on structure level
-if [ "$STRUCTURE_LEVEL" = "2" ]; then
-  # 2-level: Frontmatter project/board are OPTIONAL (per-US fields are primary)
-
-  # If project is provided in frontmatter, validate it exists
-  if [ -n "$PROJECT" ] && [ "$PROJECT" != "null" ]; then
-    PROJECT_EXISTS=$(echo "$CONTEXT_OUTPUT" | jq --arg proj "$PROJECT" '.projects[] | select(.id == $proj)' 2>/dev/null)
-    if [ -z "$PROJECT_EXISTS" ]; then
-      # Try case-insensitive match
-      PROJECT_EXISTS=$(echo "$CONTEXT_OUTPUT" | jq --arg proj "$PROJECT" '.projects[] | select(.id | ascii_downcase == ($proj | ascii_downcase))' 2>/dev/null)
-    fi
-
-    if [ -z "$PROJECT_EXISTS" ] && [ -n "$AVAILABLE_PROJECTS" ]; then
-      echo "{\"decision\": \"block\", \"reason\": \"Frontmatter project '${PROJECT}' not found in configuration.\\n\\nAvailable projects: ${AVAILABLE_PROJECTS}\\n\\nFix:\\n1. Remove project: field (recommended - use per-US **Project**: instead)\\n2. OR update to a valid project\\n3. OR set SPECWEAVE_FORCE_PROJECT=1 to bypass\"}"
-      exit 0
-    fi
-  fi
-
-  # If board is provided in frontmatter, validate it exists under project
-  if [ -n "$BOARD" ] && [ "$BOARD" != "null" ]; then
-    # Need project to validate board
-    if [ -z "$PROJECT" ] || [ "$PROJECT" = "null" ]; then
-      echo "{\"decision\": \"block\", \"reason\": \"Frontmatter has board: '${BOARD}' but no project: field.\\n\\nIf using board: you must also specify project:.\\n\\nRecommended: Remove both and use per-US **Project**: and **Board**: fields instead.\"}"
-      exit 0
-    fi
-
-    BOARDS_OUTPUT=$(specweave context boards --project="$PROJECT" 2>/dev/null || echo '{"boards": []}')
-    BOARD_EXISTS=$(echo "$BOARDS_OUTPUT" | jq --arg board "$BOARD" '.boards[] | select(.id == $board)' 2>/dev/null)
-
-    if [ -z "$BOARD_EXISTS" ]; then
-      # Try case-insensitive match
-      BOARD_EXISTS=$(echo "$BOARDS_OUTPUT" | jq --arg board "$BOARD" '.boards[] | select(.id | ascii_downcase == ($board | ascii_downcase))' 2>/dev/null)
-    fi
-
-    AVAILABLE_BOARDS=$(echo "$BOARDS_OUTPUT" | jq -r '.boards[].id // empty' | tr '\n' ', ' | sed 's/,$//')
-
-    if [ -z "$BOARD_EXISTS" ] && [ -n "$AVAILABLE_BOARDS" ]; then
-      echo "{\"decision\": \"block\", \"reason\": \"Frontmatter board '${BOARD}' not found under project '${PROJECT}'.\\n\\nAvailable boards: ${AVAILABLE_BOARDS}\\n\\nFix:\\n1. Remove board: field (recommended - use per-US **Board**: instead)\\n2. OR update to a valid board\\n3. OR set SPECWEAVE_FORCE_PROJECT=1 to bypass\"}"
-      exit 0
-    fi
-  fi
-
-else
-  # 1-level multi-project: Frontmatter project is OPTIONAL (per-US fields are primary)
-
-  # If project is provided in frontmatter, validate it exists
-  if [ -n "$PROJECT" ] && [ "$PROJECT" != "null" ] && [ -n "$AVAILABLE_PROJECTS" ]; then
-    PROJECT_EXISTS=$(echo "$CONTEXT_OUTPUT" | jq --arg proj "$PROJECT" '.projects[] | select(.id == $proj)' 2>/dev/null)
-    if [ -z "$PROJECT_EXISTS" ]; then
-      # Try case-insensitive match
-      PROJECT_EXISTS=$(echo "$CONTEXT_OUTPUT" | jq --arg proj "$PROJECT" '.projects[] | select(.id | ascii_downcase == ($proj | ascii_downcase))' 2>/dev/null)
-    fi
-
-    if [ -z "$PROJECT_EXISTS" ]; then
-      echo "{\"decision\": \"block\", \"reason\": \"Frontmatter project '${PROJECT}' not found in configuration.\\n\\nAvailable projects: ${AVAILABLE_PROJECTS}\\n\\nFix:\\n1. Remove project: field (recommended - use per-US **Project**: instead)\\n2. OR update to a valid project\\n3. OR set SPECWEAVE_FORCE_PROJECT=1 to bypass\"}"
-      exit 0
-    fi
-  fi
-fi
-
-# All validations passed
-echo '{"decision": "allow"}'
-exit 0