Merge pull request kavinsood#10 from kavinsood/frontmatter-integrity-guard

fix: squash infinite frontmatter duplication loop and add YAML guardrails

Author: kavinsood

engineering/frontmatter-integrity-rfc.md

@@ -9,7 +9,7 @@
 		"build": "tsc -noEmit -skipLibCheck && node esbuild.config.mjs production",
 		"build:server-release": "node build-server-release.mjs",
 		"test:server-update-local": "npm run build:server-release && node tests/server-update-local.mjs",
-		"test:regressions": "node --import jiti/register tests/diff-regressions.mjs && node tests/disk-mirror-regressions.mjs && node tests/markdown-ingest-regressions.mjs && node --import jiti/register tests/closed-file-mirror.ts && node --import jiti/register tests/folder-rename.ts && node --import jiti/register tests/chunked-doc-store.ts && node --import jiti/register tests/trace-store.ts && node --import jiti/register tests/server-hardening.ts && node --import jiti/register tests/v2-offline-rename-regressions.mjs",
+		"test:regressions": "node --import jiti/register tests/diff-regressions.mjs && node --import jiti/register tests/bound-recovery-regressions.mjs && node --import jiti/register tests/frontmatter-guard-regressions.mjs && node --import jiti/register tests/frontmatter-quarantine-regressions.mjs && node tests/disk-mirror-regressions.mjs && node tests/markdown-ingest-regressions.mjs && node --import jiti/register tests/closed-file-mirror.ts && node --import jiti/register tests/folder-rename.ts && node --import jiti/register tests/chunked-doc-store.ts && node --import jiti/register tests/trace-store.ts && node --import jiti/register tests/server-hardening.ts && node --import jiti/register tests/v2-offline-rename-regressions.mjs",
 		"test:integration:worker": "node tests/worker-integration.mjs",
 		"test:e2e:obsidian": "wdio run wdio.conf.mts",
 		"test:ci": "npm run test:regressions && npm run test:integration:worker",
@@ -35,6 +35,7 @@
 	"dependencies": {
 		"fast-diff": "^1.3.0",
 		"fflate": "^0.8.2",
+		"js-yaml": "^4.1.1",
 		"obsidian": "1.8.7",
 		"partyserver": "0.3.2",
 		"qrcode": "^1.5.4",

package-lock.json

@@ -0,0 +1,9 @@
+declare module "js-yaml" {
+	export function load(yaml: string): unknown;
+
+	const yaml: {
+		load: typeof load;
+	};
+
+	export default yaml;
+}