wdi-method 0.6.19 → 0.6.25

package/lib/identity.mjs

@@ -1,117 +1,246 @@
-// index.yaml editing. Every regex here is anchored on `\n`, and a Windows checkout hands us `\r\n` —
-// so every function normalises before matching and restores the file's own ending before writing.
-//
-// Skipping that is not a cosmetic bug. It silently returns "" for a name that IS set, which makes
-// `identityIsPlaceholder` true, which makes `setProductIdentity` return early: the installer reports
-// nothing and writes nothing, on every CRLF repo. Found 2026-08-18 on the first real install into a
-// Windows product repo, where `policy.doc_language` printed empty while the file plainly said `id`.
-
-const PRODUCT_BLOCK = /(?:^|\n)product:\n(?:  .*\n)*/;
-const POLICY_BLOCK = /(?:^|\n)policy:\n(?:  .*\n)*/;
-
-// FREE TEXT, not an enum. The consumer is a model, and a model does not need a list: "English",
-// "Bahasa Indonesia", "id", "Indonesia" all read the same to it. Fencing this into two values would
-// force the owner to translate their intent into the installer's vocabulary first, and nothing is
-// bought with that.
-export const DEFAULT_DOC_LANGUAGE = "English";
-
-/** LF view of the text, plus how to put the original endings back. */
-function lf(text) {
-  const crlf = text.includes("\r\n");
-  return { body: crlf ? text.replaceAll("\r\n", "\n") : text, crlf };
-}
-
-function restore(body, crlf) {
-  return crlf ? body.replaceAll("\n", "\r\n") : body;
-}
-
-export function yamlQuote(value) {
-  return `"${String(value).replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
-}
-
-export function readProductIdentity(text) {
-  const { body } = lf(text);
-  const name = body.match(/product:\n(?:  .*\n)*?  name:\s*"([^"]*)"/);
-  const client = body.match(/product:\n(?:  .*\n)*?  client:\s*"([^"]*)"/);
-  return {
-    name: name ? name[1] : "",
-    client: client ? client[1] : "",
-  };
-}
-
-export function writeProductIdentity(text, { name, client }) {
-  const { body, crlf } = lf(text);
-  const block =
-    `product:\n  name: ${yamlQuote(name)}\n  client: ${yamlQuote(client ?? "")}\n`;
-  if (/^product:/m.test(body)) {
-    return restore(
-      body.replace(PRODUCT_BLOCK, (m) => (m.startsWith("\n") ? `\n${block}` : block)), crlf);
-  }
-  return restore(`${block}\n${body.replace(/^/, "")}`, crlf);
-}
-
-export function identityIsPlaceholder(name) {
-  return !name || name === "{product}";
-}
-
-// ---------------------------------------------------------------------- language policy
-//
-// Two settings, and only two. Everything else about language is NOT a choice: method terminology,
-// document code prefixes, machine-facing markers, and code identifiers are always English —
-// `language-guide.md` owns that, and a caller MUST NOT ask about them.
-//
-//   doc_language           the PROSE of working documents in .what/ .how/ .control/
-//   doc_filename_language  the SLUG part of a document filename
-//
-// A corpus written before these existed is NOT migrated for them: the readers in validate.py accept
-// more than one language, so an existing document keeps working and only new writing follows the value.
-
-function readPolicyValue(body, key) {
-  const quoted = body.match(new RegExp(`policy:\\n(?:  .*\\n)*?  ${key}:[ \\t]*"([^"]*)"`));
-  if (quoted) return quoted[1].trim();
-  // Bare scalars are accepted because early repos wrote `doc_language: id` unquoted. Stops at a
-  // comment so a trailing `# note` never becomes part of the value.
-  const bare = body.match(new RegExp(`policy:\\n(?:  .*\\n)*?  ${key}:[ \\t]*([^\\n#]*)`));
-  return bare ? bare[1].trim() : "";
-}
-
-export function readLanguagePolicy(text) {
-  const { body } = lf(text);
-  return {
-    docLanguage: readPolicyValue(body, "doc_language"),
-    docFilenameLanguage: readPolicyValue(body, "doc_filename_language"),
-  };
-}
-
-export function writeLanguagePolicy(text, { docLanguage, docFilenameLanguage }) {
-  const { body, crlf } = lf(text);
-  // Always quoted: free text MAY carry a space or a colon, and a bare YAML scalar breaks on both.
-  const block =
-    `policy:\n  doc_language: ${yamlQuote(docLanguage)}\n` +
-    `  doc_filename_language: ${yamlQuote(docFilenameLanguage)}\n`;
-  if (/^policy:/m.test(body)) {
-    return restore(
-      body.replace(POLICY_BLOCK, (m) => (m.startsWith("\n") ? `\n${block}` : block)), crlf);
-  }
-  // Sits right after `product:` when that block exists — the two answer the same kind of question,
-  // so a reader who finds one finds the other.
-  if (/^product:/m.test(body)) {
-    return restore(body.replace(/^product:\n(?:  .*\n)*/m, (m) => `${m}\n${block}`), crlf);
-  }
-  return restore(`${block}\n${body.replace(/^/, "")}`, crlf);
-}
-
-// A first install has nowhere to read a product name from, so the folder is the best guess available —
-// and a guess the owner can accept with Enter beats a field they must type. `worship-presenter-web`
-// becomes `Worship Presenter Web`; camelCase splits too. It is a SUGGESTION: G1 confirms the real name.
-export function humaniseFolderName(name) {
-  return String(name || "")
-    .replace(/[._-]+/g, " ")
-    .replace(/([a-z\d])([A-Z])/g, "$1 $2")
-    .replace(/\s+/g, " ")
-    .trim()
-    .split(" ")
-    .filter(Boolean)
-    .map((w) => (w === w.toUpperCase() && w.length <= 4 ? w : w[0].toUpperCase() + w.slice(1)))
-    .join(" ");
-}
+// index.yaml editing. Every regex here is anchored on `\n`, and a Windows checkout hands us `\r\n` —
+// so every function normalises before matching and restores the file's own ending before writing.
+//
+// Skipping that is not a cosmetic bug. It silently returns "" for a name that IS set, which makes
+// `identityIsPlaceholder` true, which makes `setProductIdentity` return early: the installer reports
+// nothing and writes nothing, on every CRLF repo. Found 2026-08-18 on the first real install into a
+// Windows product repo, where `policy.doc_language` printed empty while the file plainly said `id`.
+
+// FREE TEXT, not an enum. The consumer is a model, and a model does not need a list: "English",
+// "Bahasa Indonesia", "id", "Indonesia" all read the same to it. Fencing this into two values would
+// force the owner to translate their intent into the installer's vocabulary first, and nothing is
+// bought with that.
+export const DEFAULT_DOC_LANGUAGE = "English";
+
+/** LF view of the text, plus how to put the original endings back. */
+function lf(text) {
+  const crlf = text.includes("\r\n");
+  return { body: crlf ? text.replaceAll("\r\n", "\n") : text, crlf };
+}
+
+function restore(body, crlf) {
+  return crlf ? body.replaceAll("\n", "\r\n") : body;
+}
+
+export function yamlQuote(value) {
+  return `"${String(value).replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+}
+
+/**
+ * Generic block-level key upsert that preserves comments, indentations, and existing sibling keys.
+ */
+export function upsertBlockKeys(body, blockName, pairs) {
+  const entries = Array.isArray(pairs) ? pairs : Object.entries(pairs);
+  const validEntries = entries.filter(([_, v]) => v !== undefined);
+  if (validEntries.length === 0) {
+    return body;
+  }
+
+  const lines = body.split("\n");
+  // Header must start at column 0 to prevent matching nested keys
+  const headerRegex = new RegExp(`^${blockName}:[ \\t]*(?:#.*)?$`);
+  const headerIndex = lines.findIndex((l) => headerRegex.test(l));
+
+  if (headerIndex === -1) {
+    const blockContent = validEntries.map(([k, v]) => `  ${k}: ${v}`).join("\n");
+    const newBlockLines = [`${blockName}:`, ...validEntries.map(([k, v]) => `  ${k}: ${v}`)];
+
+    // If adding policy and product exists, place policy right after product block
+    if (blockName === "policy") {
+      const productHeaderRegex = /^product:[ \t]*(?:#.*)?$/;
+      const productHeaderIndex = lines.findIndex((l) => productHeaderRegex.test(l));
+      if (productHeaderIndex !== -1) {
+        let nextIndex = lines.length;
+        for (let i = productHeaderIndex + 1; i < lines.length; i++) {
+          if (/^[a-zA-Z0-9_-]+:|^---/.test(lines[i])) {
+            nextIndex = i;
+            break;
+          }
+        }
+        let lastIndented = productHeaderIndex;
+        for (let i = nextIndex - 1; i > productHeaderIndex; i--) {
+          if (/^\s/.test(lines[i])) {
+            lastIndented = i;
+            break;
+          }
+        }
+        if (lines[lastIndented + 1] === "") {
+          const insertLines = nextIndex < lines.length ? [...newBlockLines, ""] : newBlockLines;
+          lines.splice(lastIndented + 2, 0, ...insertLines);
+        } else {
+          const insertLines = nextIndex < lines.length ? ["", ...newBlockLines, ""] : ["", ...newBlockLines];
+          lines.splice(lastIndented + 1, 0, ...insertLines);
+        }
+        return lines.join("\n");
+      }
+    }
+
+    const cleanBody = body.replace(/^\uFEFF/, "");
+    return cleanBody ? `${blockName}:\n${blockContent}\n\n${cleanBody}` : `${blockName}:\n${blockContent}\n`;
+  }
+
+  // End of block is reached at the next top-level mapping key or document separator
+  let nextBlockIndex = lines.length;
+  for (let i = headerIndex + 1; i < lines.length; i++) {
+    if (/^[a-zA-Z0-9_-]+:|^---/.test(lines[i])) {
+      nextBlockIndex = i;
+      break;
+    }
+  }
+
+  let lastIndentedIndex = headerIndex;
+  for (let i = nextBlockIndex - 1; i > headerIndex; i--) {
+    if (/^\s/.test(lines[i])) {
+      lastIndentedIndex = i;
+      break;
+    }
+  }
+
+  const toAppend = [];
+  for (const [key, value] of validEntries) {
+    // Only match direct children at 2 spaces indentation
+    const keyRegex = new RegExp(`^  ${key}:[ \\t]*`);
+    let foundIndex = -1;
+    for (let i = headerIndex + 1; i < nextBlockIndex; i++) {
+      if (keyRegex.test(lines[i])) {
+        foundIndex = i;
+        break;
+      }
+    }
+
+    if (foundIndex !== -1) {
+      // Preserve any trailing inline comment
+      const commentMatch = lines[foundIndex].match(/(?:[ \t]+#.*)$/);
+      const inlineComment = commentMatch ? commentMatch[0] : "";
+      lines[foundIndex] = `  ${key}: ${value}${inlineComment}`;
+    } else {
+      toAppend.push(`  ${key}: ${value}`);
+    }
+  }
+
+  if (toAppend.length > 0) {
+    lines.splice(lastIndentedIndex + 1, 0, ...toAppend);
+  }
+
+  return lines.join("\n");
+}
+
+function readBlockValue(body, blockName, key) {
+  const lines = body.split("\n");
+  const headerRegex = new RegExp(`^${blockName}:[ \\t]*(?:#.*)?$`);
+  const headerIndex = lines.findIndex((l) => headerRegex.test(l));
+  if (headerIndex === -1) return "";
+
+  let nextBlockIndex = lines.length;
+  for (let i = headerIndex + 1; i < lines.length; i++) {
+    if (/^[a-zA-Z0-9_-]+:|^---/.test(lines[i])) {
+      nextBlockIndex = i;
+      break;
+    }
+  }
+
+  const doubleQuotedRegex = new RegExp(`^  ${key}:[ \\t]*"((?:[^"\\\\]|\\\\.)*)"`);
+  const singleQuotedRegex = new RegExp(`^  ${key}:[ \\t]*'((?:[^'\\\\]|\\\\.)*)'`);
+  const bareRegex = new RegExp(`^  ${key}:[ \\t]*([^\\n#]*)`);
+
+  for (let i = headerIndex + 1; i < nextBlockIndex; i++) {
+    const dQuoted = lines[i].match(doubleQuotedRegex);
+    if (dQuoted) {
+      return dQuoted[1].replaceAll('\\"', '"').replaceAll('\\\\', '\\').trim();
+    }
+    const sQuoted = lines[i].match(singleQuotedRegex);
+    if (sQuoted) {
+      return sQuoted[1].replaceAll("''", "'").trim();
+    }
+    const bare = lines[i].match(bareRegex);
+    if (bare) return bare[1].trim();
+  }
+  return "";
+}
+
+export function readProductIdentity(text) {
+  const { body } = lf(text);
+  return {
+    name: readBlockValue(body, "product", "name"),
+    client: readBlockValue(body, "product", "client"),
+  };
+}
+
+export function writeProductIdentity(text, { name, client }) {
+  const { body, crlf } = lf(text);
+  const pairs = [
+    ["name", yamlQuote(name)],
+    ["client", yamlQuote(client ?? "")],
+  ];
+  const nextBody = upsertBlockKeys(body, "product", pairs);
+  return restore(nextBody, crlf);
+}
+
+export function identityIsPlaceholder(name) {
+  return !name || name === "{product}";
+}
+
+// ---------------------------------------------------------------------- policy (language & branches)
+//
+// Language settings:
+//   doc_language           the PROSE of working documents in .what/ .how/ .control/
+//   doc_filename_language  the SLUG part of a document filename
+//
+// Branch settings:
+//   primary_branch         trunk / production branch (defaults to "main")
+//   development_branch     active development branch (defaults to "main")
+
+function readPolicyValue(body, key) {
+  return readBlockValue(body, "policy", key);
+}
+
+export function readLanguagePolicy(text) {
+  const { body } = lf(text);
+  return {
+    docLanguage: readPolicyValue(body, "doc_language"),
+    docFilenameLanguage: readPolicyValue(body, "doc_filename_language"),
+  };
+}
+
+export function writeLanguagePolicy(text, { docLanguage, docFilenameLanguage }) {
+  const { body, crlf } = lf(text);
+  const pairs = [];
+  if (docLanguage !== undefined) pairs.push(["doc_language", yamlQuote(docLanguage)]);
+  if (docFilenameLanguage !== undefined) pairs.push(["doc_filename_language", yamlQuote(docFilenameLanguage)]);
+  const nextBody = upsertBlockKeys(body, "policy", pairs);
+  return restore(nextBody, crlf);
+}
+
+export function readBranchPolicy(text) {
+  const { body } = lf(text);
+  const primary = readPolicyValue(body, "primary_branch");
+  const development = readPolicyValue(body, "development_branch");
+  return {
+    primaryBranch: primary || "main",
+    developmentBranch: development || "main",
+  };
+}
+
+export function writeBranchPolicy(text, { primaryBranch, developmentBranch }) {
+  const { body, crlf } = lf(text);
+  const pairs = [];
+  if (primaryBranch !== undefined) pairs.push(["primary_branch", yamlQuote(primaryBranch)]);
+  if (developmentBranch !== undefined) pairs.push(["development_branch", yamlQuote(developmentBranch)]);
+  const nextBody = upsertBlockKeys(body, "policy", pairs);
+  return restore(nextBody, crlf);
+}
+
+// A first install has nowhere to read a product name from, so the folder is the best guess available —
+// and a guess the owner can accept with Enter beats a field they must type. `acme-billing-portal`
+// becomes `Acme Billing Portal`; camelCase splits too. It is a SUGGESTION: G1 confirms the real name.
+export function humaniseFolderName(name) {
+  return String(name || "")
+    .replace(/[._-]+/g, " ")
+    .replace(/([a-z\d])([A-Z])/g, "$1 $2")
+    .replace(/\s+/g, " ")
+    .trim()
+    .split(" ")
+    .filter(Boolean)
+    .map((w) => (w === w.toUpperCase() && w.length <= 4 ? w : w[0].toUpperCase() + w.slice(1)))
+    .join(" ");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wdi-method",
-  "version": "0.6.19",
+  "version": "0.6.25",
   "description": "WDI Method — software delivery method that wraps BMad",
   "type": "module",
   "bin": {
@@ -13,8 +13,12 @@
     "kit-overlay/",
     "scaffold/",
     "README.md",
+    "README.id.md",
+    "README.ja.md",
+    "README.zh.md",
     "CHANGELOG.md",
     "LICENSE",
+    "NOTICE",
     "!**/__pycache__",
     "!**/*.pyc"
   ],
@@ -35,10 +39,10 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/wiradigitalid/wdi-method.git"
+    "url": "git+https://github.com/wiradeltaid/wdi-method.git"
   },
   "bugs": {
-    "url": "https://github.com/wiradigitalid/wdi-method/issues"
+    "url": "https://github.com/wiradeltaid/wdi-method/issues"
   },
-  "homepage": "https://github.com/wiradigitalid/wdi-method#readme"
+  "homepage": "https://github.com/wiradeltaid/wdi-method#readme"
 }

package/scaffold/.control/custom-dispatch.yaml.example

@@ -0,0 +1,65 @@
+# .control/custom-dispatch.yaml.example
+# Optional machine-local runner and dispatch configuration for autonomous daily tier skills.
+# When seeded to `.control/custom-dispatch.yaml`, it remains local and gitignored.
+schema: 1
+
+runners: {}
+# Uncomment and customize runners on this machine:
+#
+# Auto runners (dispatches in-session if model is reachable from active session;
+# otherwise executes shell-out command):
+# sonnet:
+#   type: auto
+#   model: sonnet
+#   command: 'claude --model claude-sonnet-5 --effort high --dangerously-skip-permissions -p'
+#
+# opus:
+#   type: auto
+#   model: opus
+#   command: 'claude --model claude-opus-5 --effort high --dangerously-skip-permissions -p'
+#
+# External CLI runners (always shell-out):
+# NOTE: For roles.reviewer, runner commands MUST enforce read-only execution where supported
+# (e.g. `--trust-tools=fs_read` for kiro-cli, `--mode plan` for cursor-agent).
+#
+# terra:
+#   type: shell-out
+#   command: 'kiro-cli chat --model gpt-5.6-terra --effort high --trust-tools=fs_read --no-interactive'
+#   timeout_s: 600   # Hard wall-clock timeout in seconds for backgrounded dispatch (default: 600s)
+#
+# composer:
+#   type: shell-out
+#   command: 'cursor-agent --mode plan --model "composer-2.5"'
+#   timeout_s: 600
+#
+# sol:
+#   type: shell-out
+#   command: 'cursor-agent --mode plan --model "gpt-5.6-sol-high"'
+#   timeout_s: 600
+
+roles:
+  # Builder configuration:
+  #   builder is fixed to 'coordinator' (mandatory). The coordinating session implements code
+  #   directly in the active run worktree (tight TDD cycles, direct verification). Coding delegation
+  #   (in-session subagent or external builder runner) is prohibited in the daily routine to eliminate
+  #   handoff latency and delegation hallucinations.
+  #   Guardrail: builder: coordinator MUST NOT be paired with reviewer: none unless all touched
+  #   components have risk_accepted: low and the decision is recorded. A builder cannot be its own sole judge.
+  builder: coordinator
+
+  # Reviewer options:
+  #   - default: Resolves peer review via caller's active session / global agent rules
+  #   - <runner-id>: Dispatches peer review to the named runner
+  #   - none: Disables peer review pass (coordinator self-review only)
+  # NOTE: Reviewer runners in daily triage (wdi-daily-what-to-build) operate strictly as advisory /
+  # read-only critics. The coordinator alone applies edits to the spec/tickets and writes registry traces.
+  reviewer: default
+
+  # Deep analyst options (for architecture spine, complex debugging, or hard decisions):
+  #   - default: Uses reviewer runner or coordinator for deep analysis
+  #   - <runner-id>: Dispatches deep analysis to a dedicated high-reasoning runner
+  #   - none: Disables separate deep analyst dispatch (handled by reviewer/coordinator)
+  deep_analyst: default
+
+review_policy:
+  peer_review: true        # Set to false (or set reviewer: none) to bypass peer review pass

package/scaffold/.control/registry/index.yaml

@@ -9,6 +9,15 @@ product:
   name: "{product}"
   client: ""
 
+# POLICY SETTINGS. Language and branching rules for the repository.
+# Branch settings default to `main` if omitted. Set `development_branch` to match
+# `primary_branch` for single-branch workflows.
+policy:
+  doc_language: "English"
+  doc_filename_language: "English"
+  # primary_branch: main
+  # development_branch: development # Set equal to primary_branch for single-branch workflow
+
 # GLOBAL DEPTH. The only document-depth knob, and it MUST NOT also govern review intensity —
 # that is `risk_accepted` per component in components.yaml.
 #   catalog  UC list + three inventories + C4; zero extra files per component. G4 is skipped

package/scaffold/.control/test-targets/desktop.md

@@ -0,0 +1,15 @@
+# Desktop Smoke Test Target
+
+## Target Configuration
+# Optional build and process settings for this repository:
+# build_command: <build command from codebase-stack-guide.md>
+# profile: debug | release (default: release for visual/performance, debug for fast logic loops)
+# artifact_path: <path to compiled binary artifact>
+# process_name: <application process name>
+
+## Verification Checklist Template
+
+- [ ] Application launches cleanly without crashes or uncaught runtime panics
+- [ ] Primary window displays expected initial view and layout
+- [ ] User input, navigation, and window controls respond as expected
+- [ ] Application logs are free from unexpected warnings or errors

package/scaffold/.control/test-targets/mobile.md

@@ -0,0 +1,6 @@
+# Mobile Smoke Test Checklist Template
+
+- [ ] Application installs and launches on target device or emulator
+- [ ] Initial view displays cleanly without crashing
+- [ ] Touch gestures and primary navigation respond as expected
+- [ ] Device runtime log displays no unhandled exceptions

package/scaffold/.control/test-targets/web.md

@@ -0,0 +1,6 @@
+# Web Smoke Test Checklist Template
+
+- [ ] Application server starts and responds to HTTP requests
+- [ ] Initial route renders without 404 or 500 status codes
+- [ ] Interactive UI controls respond to user interaction
+- [ ] Browser console log shows no uncaught exceptions