trackfw 6.5.0 → 6.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trackfw",
-  "version": "6.5.0",
+  "version": "6.6.0",
   "description": "Governance CLI for AI-native software delivery and AI coding agents. Enforces traceability: ADR → REQ → ROADMAP → kanban. Native support for Codex, Claude Code, Gemini CLI, Cursor, Copilot, Windsurf, Amazon Q, OpenCode, and Kiro.",
   "keywords": [
     "cli",

package/src/commands/adr.js

@@ -1,5 +1,7 @@
 'use strict'
 
+const path = require('path')
+const os = require('os')
 const { Command } = require('commander')
 const { input } = require('@inquirer/prompts')
 const generators = require('../generators/adr')
@@ -8,9 +10,29 @@ const { t } = require('../i18n')
 const cmd = new Command('adr')
 cmd.description(t('adr.description'))
 
+/**
+ * Resolve o diretório de ADRs conforme --scope.
+ * 'project' (default) preserva o comportamento atual (adrDirs[0] do trackfw.yaml).
+ * 'global' escreve/lista em ~/.trackfw/adr, sem exigir trackfw.yaml no cwd.
+ * @param {string} scope
+ * @returns {string}
+ */
+function resolveAdrDir(scope) {
+  if (scope === 'global') {
+    return path.join(os.homedir(), '.trackfw', 'adr')
+  }
+  if (scope === 'project') {
+    return require('../config').load().adrDirs[0]
+  }
+  console.error(`Invalid --scope value: "${scope}". Expected "project" or "global".`)
+  process.exit(1)
+}
+
 cmd.command('new <title>')
   .description(t('adr.new.description'))
-  .action(async (title) => {
+  .option('--scope <scope>', 'ADR scope: project (default) or global (~/.trackfw/adr)', 'project')
+  .action(async (title, options) => {
+    const adrDir = resolveAdrDir(options.scope)
     const content = { title }
     // wizard interativo se TTY
     if (process.stdin.isTTY) {
@@ -19,13 +41,15 @@ cmd.command('new <title>')
       content.consequences = await input({ message: t('adr.new.prompt.consequences'), default: '' })
       content.alternatives = await input({ message: t('adr.new.prompt.alternatives'), default: '' })
     }
-    await generators.newADR(content)
+    await generators.newADR(content, adrDir)
   })
 
 cmd.command('list')
   .description(t('adr.list.description'))
-  .action(async () => {
-    await generators.listADRs(require('../config').load().adrDirs[0])
+  .option('--scope <scope>', 'ADR scope: project (default) or global (~/.trackfw/adr)', 'project')
+  .action(async (options) => {
+    const adrDir = resolveAdrDir(options.scope)
+    await generators.listADRs(adrDir)
   })
 
 module.exports = cmd

package/src/commands/req.js

@@ -1,4 +1,6 @@
 'use strict'
+const path = require('path')
+const os = require('os')
 const { Command } = require('commander')
 const { listREQs, moveREQ } = require('../generators/req')
 const { t } = require('../i18n')
@@ -26,6 +28,19 @@ cmd.command('new <title>')
       // Form 2 — critérios de aceite
       content.criteria = await input({ message: t('req.new.prompt.criteria'), default: '- [ ]\n- [ ]' })
 
+      // Escopo dos ADR drafts desta sessão (uma única pergunta, vale para todos)
+      const adrScope = await select({
+        message: t('req.new.prompt.adrScope'),
+        choices: [
+          { name: t('req.new.prompt.adrScopeLocal'), value: 'local' },
+          { name: t('req.new.prompt.adrScopeGlobal'), value: 'global' },
+        ],
+        default: 'local',
+      })
+      const adrDir = adrScope === 'global'
+        ? path.join(os.homedir(), '.trackfw', 'adr')
+        : require('../config').load().adrDirs[0]
+
       // Perguntas dinâmicas por probe
       const generatedADRs = []
       for (const probe of probes) {
@@ -40,7 +55,7 @@ cmd.command('new <title>')
           })
           if (answer) {
             try {
-              const basename = await adrGenerators.newADRDraft(answer)
+              const basename = await adrGenerators.newADRDraft(answer, adrDir)
               if (basename) generatedADRs.push(basename)
             } catch (e) {
               console.warn(t('req.new.adrWarning', { slug: answer, message: e.message }))

package/src/commands/update-harness.js

@@ -6,7 +6,7 @@ const path = require('path')
 const identityStore = require('../identity')
 const { catalog, buildPlans, IntegrationManager, globalGroupPath } = require('../integrations')
 const { tildeify, validateTargets, buildDocument, humanReport, silenceConsole } = require('../lib/update-engine')
-const { mergeClaudeHookArray, mergeSimpleCommandArray, mergeCopilotHookArray } = require('../generators/hooks')
+const { mergeClaudeHookArray, mergeSimpleCommandArray, mergeCopilotHookArray, generateGlobalCredentialGuardScript } = require('../generators/hooks')
 
 // `trackfw update harness` is the global counterpart to `trackfw update` —
 // see docs/cli-parity.md, "`trackfw update` vs `trackfw update harness`".
@@ -581,6 +581,19 @@ function run(options) {
   const dryRun = Boolean(options.dryRun)
   const installMissing = Boolean(options.installMissing)
 
+  // The per-CLI *-credential-guard targets below only wire hook entries that
+  // point at ~/.trackfw/scripts/trackfw-credential-guard.sh — none of them
+  // write the script itself (ADR-2026-08-06, decision #2/#3). Without this
+  // call the wiring is installed but every hook invocation fails with
+  // "No such file or directory" because the script never exists.
+  if (!dryRun) {
+    if (options.json) {
+      silenceConsole(() => generateGlobalCredentialGuardScript(homeRoot))
+    } else {
+      generateGlobalCredentialGuardScript(homeRoot)
+    }
+  }
+
   // Identidade resolvida do disco antes de buildPlans — pular esta etapa
   // reverteria silenciosamente os nomes customizados para os defaults
   // neutros (mesma justificativa de npm/src/integrations/index.js:execute).

package/src/commands/update.js

@@ -29,6 +29,83 @@ function loadUpdateConfig(rootDir) {
   };
 }
 
+// ensureGlobalAdrDirRegistered — mirrors internal/generators/update.go's
+// ensureGlobalADRDirRegistered (Go implementation, same REQ, ML-1A). Registers
+// ~/.trackfw/adr in the project's trackfw.yaml `adr_dirs` list, but ONLY when
+// that directory exists AND contains at least one `ADR-*.md` file — an empty
+// or absent global ADR dir is a no-op, never written. The edit is surgical
+// (line-based text splice, not a YAML parse+reserialize) to preserve 100% of
+// the user's existing trackfw.yaml content (comments, key order, formatting).
+function ensureGlobalAdrDirRegistered(cwd) {
+  const home = os.homedir();
+  const globalDir = path.join(home, '.trackfw', 'adr');
+  if (!fs.existsSync(globalDir)) return;
+
+  let hasAdr = false;
+  try {
+    hasAdr = fs.readdirSync(globalDir).some((f) => /^ADR-.*\.md$/.test(f));
+  } catch (_) {
+    return;
+  }
+  if (!hasAdr) return;
+
+  const yamlPath = path.join(cwd, 'trackfw.yaml');
+  let content;
+  try {
+    content = fs.readFileSync(yamlPath, 'utf8');
+  } catch (_) {
+    return;
+  }
+
+  const resolvesToGlobal = (entry) => {
+    const trimmed = entry.trim();
+    if (trimmed === '~/.trackfw/adr') return true;
+    const expanded = trimmed.startsWith('~') ? path.join(home, trimmed.slice(1)) : trimmed;
+    return path.resolve(expanded) === path.resolve(globalDir);
+  };
+
+  const lines = content.split('\n');
+  let adrDirsIndex = -1;
+  for (let i = 0; i < lines.length; i++) {
+    if (/^adr_dirs:\s*$/.test(lines[i])) {
+      adrDirsIndex = i;
+      break;
+    }
+  }
+
+  if (adrDirsIndex === -1) {
+    // No adr_dirs key at all — the implicit default is `docs/adr`; append a
+    // new block preserving that default explicitly, plus the global entry.
+    let newContent = content;
+    if (newContent.length && !newContent.endsWith('\n')) newContent += '\n';
+    newContent += 'adr_dirs:\n  - docs/adr\n  - ~/.trackfw/adr\n';
+    fs.writeFileSync(yamlPath, newContent, 'utf8');
+    console.log('  ✓ adr_dirs: ~/.trackfw/adr registrado');
+    return;
+  }
+
+  const itemRe = /^(\s*)-\s*(.+?)\s*$/;
+  let end = adrDirsIndex + 1;
+  let lastItemIndex = -1;
+  let indent = '  ';
+  while (end < lines.length) {
+    const m = lines[end].match(itemRe);
+    if (!m) break;
+    indent = m[1] || indent;
+    if (resolvesToGlobal(m[2])) {
+      // Already registered under this or an equivalent path form — no-op.
+      return;
+    }
+    lastItemIndex = end;
+    end++;
+  }
+
+  const insertAt = lastItemIndex === -1 ? adrDirsIndex + 1 : lastItemIndex + 1;
+  lines.splice(insertAt, 0, `${indent}- ~/.trackfw/adr`);
+  fs.writeFileSync(yamlPath, lines.join('\n'), 'utf8');
+  console.log('  ✓ adr_dirs: ~/.trackfw/adr registrado');
+}
+
 function updateHooksSurgical(cfg, rootDir) {
   const hooks = cfg.hooks || '';
   if (hooks === 'husky') {
@@ -243,6 +320,8 @@ cmd.action((mode, options) => {
     process.exit(1);
   }
 
+  ensureGlobalAdrDirRegistered(cwd);
+
   let wanted;
   try {
     const requested = options.targets ? String(options.targets).split(',').map((s) => s.trim()).filter(Boolean) : [];

package/src/generators/adr.js

@@ -43,13 +43,13 @@ function today() {
 }
 
 /**
- * Cria um novo ADR em docs/adr/ADR-YYYY-MM-DD-<slug>.md.
+ * Cria um novo ADR em <adrDir>/ADR-YYYY-MM-DD-<slug>.md.
  * Campos vazios recebem placeholder HTML.
  * @param {{ title: string, context?: string, decision?: string, consequences?: string, alternatives?: string }} content
+ * @param {string} adrDir Diretório de destino (resolvido pelo chamador conforme --scope)
  * @returns {Promise<void>}
  */
-async function newADR(content) {
-  const adrDir = require('../config').load().adrDirs[0]
+async function newADR(content, adrDir) {
   fs.mkdirSync(adrDir, { recursive: true })
 
   const slug = toSlug(content.title)
@@ -142,10 +142,14 @@ function parseADRStatus(filepath) {
  * Cria um ADR com Status: Draft a partir de um slug.
  * Idempotente: se já existe ADR-*-<slug>.md, pula e imprime mensagem.
  * @param {string} slug
+ * @param {string} [adrDir] Diretório de destino (resolvido pelo chamador conforme escopo).
+ *   Se omitido, preserva o comportamento anterior (adrDirs[0] do trackfw.yaml).
  * @returns {Promise<string>} basename do arquivo criado
  */
-async function newADRDraft(slug) {
-  const adrDir = require('../config').load().adrDirs[0]
+async function newADRDraft(slug, adrDir) {
+  if (!adrDir) {
+    adrDir = require('../config').load().adrDirs[0]
+  }
   fs.mkdirSync(adrDir, { recursive: true })
 
   // Verificar idempotência: buscar arquivo existente com o mesmo slug

package/src/generators/codex.js

@@ -1,10 +1,5 @@
 'use strict'
 
-const fs = require('fs')
-const path = require('path')
-const { injectCodexHooks } = require('./hooks')
-const { injectRulesForTool } = require('./init')
-
 const skills = {
   'trackfw-governance': `---
 name: trackfw-governance
@@ -81,23 +76,4 @@ Review the branch as an owner. Return findings first, ordered by severity, with
 `,
 }
 
-function installCodex(cwd) {
-  const root = cwd || process.cwd()
-  const { execute } = require('../integrations')
-  execute('agents', 'install', { targets: ['codex'], scope: 'project' }, { projectRoot: root })
-  execute('skills', 'install', { targets: ['codex'], scope: 'project' }, { projectRoot: root })
-  injectRulesForTool('codex', root)
-
-  const configPath = path.join(root, '.codex', 'config.toml')
-  fs.mkdirSync(path.dirname(configPath), { recursive: true })
-  let config = fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : ''
-  if (!/^\[agents\]\s*$/m.test(config)) {
-    config = config.replace(/\s*$/, '') + '\n\n[agents]\nmax_threads = 6\nmax_depth = 1\n'
-    fs.writeFileSync(configPath, config, 'utf8')
-  }
-
-  injectCodexHooks(root)
-  console.log('  ✓ Codex: AGENTS.md, skills, custom agents and hooks')
-}
-
-module.exports = { installCodex, legacyCodexFixtures: { skills, agents } }
+module.exports = { legacyCodexFixtures: { skills, agents } }

package/src/i18n/locales/en-US.json

@@ -63,7 +63,10 @@
         "domainQuestion_persistence": "Which database engine will be used?",
         "domainQuestion_api": "Which API protocol will be used?",
         "domainQuestion_deploy": "What is the deployment target?",
-        "domainQuestion_events": "Which event broker will be used?"
+        "domainQuestion_events": "Which event broker will be used?",
+        "adrScope": "Scope of ADRs for this REQ",
+        "adrScopeLocal": "Local (default)",
+        "adrScopeGlobal": "Global (~/.trackfw/adr, cross-project)"
       },
       "detectedDomains": "Detected domains: {{domains}}",
       "created": "✓ REQ created: {{path}}",

package/src/i18n/locales/es-ES.json

@@ -63,7 +63,10 @@
         "domainQuestion_persistence": "¿Qué motor de base de datos se usará?",
         "domainQuestion_api": "¿Qué protocolo de API se usará?",
         "domainQuestion_deploy": "¿Cuál es el destino de despliegue?",
-        "domainQuestion_events": "¿Qué message broker se usará?"
+        "domainQuestion_events": "¿Qué message broker se usará?",
+        "adrScope": "Alcance de los ADRs de este REQ",
+        "adrScopeLocal": "Local (predeterminado)",
+        "adrScopeGlobal": "Global (~/.trackfw/adr, entre proyectos)"
       },
       "detectedDomains": "Dominios detectados: {{domains}}",
       "created": "✓ REQ creado: {{path}}",

package/src/i18n/locales/pt-BR.json

@@ -63,7 +63,10 @@
         "domainQuestion_persistence": "Qual engine de banco de dados será usada?",
         "domainQuestion_api": "Qual protocolo de API será usado?",
         "domainQuestion_deploy": "Qual é o destino de deploy?",
-        "domainQuestion_events": "Qual message broker será usado?"
+        "domainQuestion_events": "Qual message broker será usado?",
+        "adrScope": "Escopo dos ADRs desta REQ",
+        "adrScopeLocal": "Local (padrão)",
+        "adrScopeGlobal": "Global (~/.trackfw/adr, entre projetos)"
       },
       "detectedDomains": "Domínios detectados: {{domains}}",
       "created": "✓ REQ criado: {{path}}",