Obsidian Vault

2026.08.02.1

Test backfill to the STANDARD.md five-suite quality bar (ext-quality-bf-obsidian-vault, the LAST entry on quality-allowlist.txt — this backfill took the Phase D compliance program to 100%), followed by a real fix for all eight latent bugs the backfill's adversarial/coverage suites found and originally pinned: CRLF-frontmatter data loss, a ReDoS alternation guard gap, backslash path traversal, unbounded digest/search memory and per-file reads, digest silently ignoring an explicit CLI backend, impossible calendar dates, a trash-overwrite race, and hardcoded write-action reporting. obsidian_vault.ts and manifest.yaml both move version from 2026.07.27.1 to 2026.08.02.1.

• Added extensions/models/obsidian_vault_methods_test.ts (methods — all 24 methods exercised at least once, mechanically verified by a final method-coverage assertion; the 11 CLI-only methods driven through a stubbed Deno.Command asserting argv plus response parsing; properties and propertyRemove get their first-ever .execute() coverage), obsidian_vault_adversarial_test.ts (adversarial — organized by the seven review-adversarial dimensions plus a dedicated filesystem-attack-surface section: path-confinement and symlink-refusal hold across all 13 fs methods, YAML/frontmatter-injection is prevented, the maxBodyChars=0 privacy default holds), obsidian_vault_coverage_test.ts (coverage — digest name-filter branches, a dotfile extension edge, propertyRemove's no-frontmatter/no-op paths, empty-query search, the path folder alias, selectBackend's no-headless-alternative message shape, propertyTypeHint(0)), obsidian_vault_property_test.ts (property-invariant-flow — npm:fast-check@4.8.0, gated by FC_NUM_RUNS, with domain-restricted arbitraries so merge-idempotence, readback fidelity, splitFrontmatter round-trip, a multi-step setProperties flow, and list-determinism all hold without flaking against the CRLF/YAML-escaping-needing domains; verified convergent at FC_NUM_RUNS=5000) — 0 tests before this change across these four files, 188 total across all five suites after (179 from the backfill, 9 net added by the real-fix pass below).
• Added extensions/models/fixtures/PROVENANCE.md (synthetic-only banner covering all nine fixtures, six pre-existing plus three new) and three new adversarial fixtures: crlf-frontmatter.md (real CRLF byte pairs, written via printf so they survive Git unmodified — this repo has no .gitattributes line-ending rule), malformed-frontmatter.md (a tab character used for frontmatter indentation — invalid YAML), and unterminated-frontmatter.md (an opening --- fence that is never closed). No live vault was read to author any fixture — every value is an invented placeholder (see PROVENANCE.md for the full accounting).
• deno.json: added fmt.exclude: ["extensions/models/fixtures/"] so deno fmt cannot silently corrupt the three byte-precise adversarial fixtures above (verified: without the exclude, deno fmt normalized the CRLF fixture's line endings and merged the unterminated fixture's two property lines into one paragraph). deno.lock gained the npm:fast-check@4.8.0 entry the property suite resolves.

Eight latent bugs found by the backfill's adversarial/coverage suites, filed in the LOCAL obsidian-vault-latent-bugs issue-lifecycle model (never the swamp.club Lab — this is our own extension), are now real-fixed:

• #1 HIGH — CRLF frontmatter data loss. splitFrontmatter's opening-fence check only recognized ---\n; a CRLF-line-ended note's real frontmatter was silently invisible to readProperties, and setProperties/mergeProperties corrupted it by prepending a second frontmatter block. Fixed by also accepting ---\r\n — the existing closing-fence scan and body/raw slicing were already CRLF-tolerant. Added a non-vacuous end-to-end regression: write a CRLF note to a real temp vault, setProperties, read it back, and assert the original title survives alongside the new/changed properties, with exactly one frontmatter block (no duplication).
• #2 MED — ReDoS alternation guard gap. The nested-quantifier guard only matched a quantifier inside a parenthesized group ((a+)+); an alternation-based group carrying its own quantifier ((a|a)+, (a|ab)*) passed through uncaught. Added a second guard, ALTERNATION_QUANTIFIER, rejecting any quantified alternation group. Accepted tradeoff: a non-catastrophic pattern like (cat|dog)+ is now also conservatively

Notes trimmed at a line boundary to fit the registry's 4900-byte per-version cap. Full section: https://github.com/umag/swamp-workspace/blob/d850d8e8372d4c0008c9245959a090b37095de7a/obsidian-vault/CHANGELOG.md

Merge pull request #56 from umag/feat/obsidian-vault-fs-backend

obsidian-vault: headless filesystem backend, bulk frontmatter merge, and corpus digest

Release 2026.07.16.2 — align model versions with manifests

Maintenance release across the @magistr extensions. For most packages this carries no functional change: the only edit is the model's version: field, brought back in line with its manifest version so the published model type version and the package version no longer drift.

Functional changes in this release are limited to:

• anime-cron: normalizeTitle now strips a ": subtitle" suffix and a trailing parenthesized year before comparison, fixing dedup false-misses where the torrent title carries a subtitle or year that the AniList romaji does not.

• arckit: first publish. Standalone ArcKit port — a 12-phase architecture governance state machine with 65 bundled templates, driven by a bundled skill.

Also tracks three extensions (kaiten, observability-agent, music-library) that previously existed only as untracked working-tree directories, recovered from stashes.

Merge pull request #4 from umag/extensions/magistr-grade-a-workspace

extensions: stage 15 @magistr extensions as Grade A workspace dirs + wire CI