@devtrack-solution/codesdd 1.2.2 → 1.2.3

package/dist/core/completions/installers/powershell-installer.js

@@ -11,8 +11,8 @@ export class PowerShellInstaller {
      * Markers for PowerShell profile configuration management
      */
     PROFILE_MARKERS = {
-        start: '# OPENSPEC:START',
-        end: '# OPENSPEC:END',
+        start: '# CODESDD:START',
+        end: '# CODESDD:END',
     };
     constructor(homeDir = os.homedir()) {
         this.homeDir = homeDir;
@@ -69,7 +69,7 @@ export class PowerShellInstaller {
     getInstallationPath() {
         const profilePath = this.getProfilePath();
         const profileDir = path.dirname(profilePath);
-        return path.join(profileDir, 'OpenSpecCompletion.ps1');
+        return path.join(profileDir, 'CodeSDDCompletion.ps1');
     }
     /**
      * Backup an existing completion file if it exists
@@ -99,7 +99,7 @@ export class PowerShellInstaller {
      */
     generateProfileConfig(scriptPath) {
         return [
-            '# OpenSpec shell completions configuration',
+            '# CodeSDD shell completions configuration',
             `if (Test-Path "${scriptPath}") {`,
             `    . "${scriptPath}"`,
             '}',
@@ -131,15 +131,15 @@ export class PowerShellInstaller {
                 if (profileContent.includes(scriptLine)) {
                     continue; // Already configured, skip
                 }
-                // Add OpenSpec completion configuration with markers
-                const openspecBlock = [
+                // Add CodeSDD completion configuration with markers
+                const codesddBlock = [
                     '',
-                    '# OPENSPEC:START - OpenSpec completion (managed block, do not edit manually)',
+                    '# CODESDD:START - CodeSDD completion (managed block, do not edit manually)',
                     scriptLine,
-                    '# OPENSPEC:END',
+                    '# CODESDD:END',
                     '',
                 ].join('\n');
-                const newContent = profileContent + openspecBlock;
+                const newContent = profileContent + codesddBlock;
                 await fs.writeFile(profilePath, newContent, 'utf-8');
                 anyConfigured = true;
             }
@@ -169,12 +169,12 @@ export class PowerShellInstaller {
                 catch {
                     continue; // Profile doesn't exist, nothing to remove
                 }
-                // Remove OPENSPEC:START -> OPENSPEC:END block
-                const startMarker = '# OPENSPEC:START';
-                const endMarker = '# OPENSPEC:END';
+                // Remove CODESDD:START -> CODESDD:END block
+                const startMarker = '# CODESDD:START';
+                const endMarker = '# CODESDD:END';
                 const startIndex = profileContent.indexOf(startMarker);
                 if (startIndex === -1) {
-                    continue; // No OpenSpec block found
+                    continue; // No CodeSDD block found
                 }
                 const endIndex = profileContent.indexOf(endMarker, startIndex);
                 if (endIndex === -1) {
@@ -279,7 +279,7 @@ export class PowerShellInstaller {
             '',
             `To enable completions, add the following to your PowerShell profile (${profilePath}):`,
             '',
-            '  # Source OpenSpec completions',
+            '  # Source CodeSDD completions',
             `  if (Test-Path "${installedPath}") {`,
             `      . "${installedPath}"`,
             '  }',

package/dist/core/completions/installers/zsh-installer.d.ts

@@ -9,6 +9,7 @@ export declare class ZshInstaller {
      * Markers for .zshrc configuration management
      */
     private readonly ZSHRC_MARKERS;
+    private readonly ENV_SOURCE_MARKERS;
     constructor(homeDir?: string);
     /**
      * Check if Oh My Zsh is installed
@@ -54,7 +55,12 @@ export declare class ZshInstaller {
      */
     configureZshrc(completionsDir: string): Promise<boolean>;
     /**
-     * Check if .zshrc has OpenSpec configuration markers
+     * Ensure ~/.zshrc sources ~/.codesdd/env.zsh through an idempotent marker block.
+     * This block contains only non-secret shell wiring.
+     */
+    ensureCodesddEnvSource(envFilePath?: string): Promise<boolean>;
+    /**
+     * Check if .zshrc has CodeSDD configuration markers
      *
      * @returns true if .zshrc exists and has markers
      */

package/dist/core/completions/installers/zsh-installer.js

@@ -12,8 +12,12 @@ export class ZshInstaller {
      * Markers for .zshrc configuration management
      */
     ZSHRC_MARKERS = {
-        start: '# OPENSPEC:START',
-        end: '# OPENSPEC:END',
+        start: '# CODESDD:START',
+        end: '# CODESDD:END',
+    };
+    ENV_SOURCE_MARKERS = {
+        start: '# CODESDD:ENV:START',
+        end: '# CODESDD:ENV:END',
     };
     constructor(homeDir = os.homedir()) {
         this.homeDir = homeDir;
@@ -51,14 +55,14 @@ export class ZshInstaller {
         if (isOhMyZsh) {
             // Oh My Zsh custom completions directory
             return {
-                path: path.join(this.homeDir, '.oh-my-zsh', 'custom', 'completions', '_openspec'),
+                path: path.join(this.homeDir, '.oh-my-zsh', 'custom', 'completions', '_codesdd'),
                 isOhMyZsh: true,
             };
         }
         else {
             // Standard Zsh completions directory
             return {
-                path: path.join(this.homeDir, '.zsh', 'completions', '_openspec'),
+                path: path.join(this.homeDir, '.zsh', 'completions', '_codesdd'),
                 isOhMyZsh: false,
             };
         }
@@ -99,7 +103,7 @@ export class ZshInstaller {
      */
     generateZshrcConfig(completionsDir) {
         return [
-            '# OpenSpec shell completions configuration',
+            '# CodeSDD shell completions configuration',
             `fpath=("${completionsDir}" $fpath)`,
             'autoload -Uz compinit',
             'compinit',
@@ -114,7 +118,7 @@ export class ZshInstaller {
      */
     async configureZshrc(completionsDir) {
         // Check if auto-configuration is disabled
-        if (process.env.OPENSPEC_NO_AUTO_CONFIG === '1') {
+        if (process.env.CODESDD_NO_AUTO_CONFIG === '1') {
             return false;
         }
         try {
@@ -136,7 +140,31 @@ export class ZshInstaller {
         }
     }
     /**
-     * Check if .zshrc has OpenSpec configuration markers
+     * Ensure ~/.zshrc sources ~/.codesdd/env.zsh through an idempotent marker block.
+     * This block contains only non-secret shell wiring.
+     */
+    async ensureCodesddEnvSource(envFilePath) {
+        if (process.env.CODESDD_NO_AUTO_CONFIG === '1') {
+            return false;
+        }
+        const targetEnvPath = envFilePath ?? path.join(this.homeDir, '.codesdd', 'env.zsh');
+        const zshrcPath = this.getZshrcPath();
+        const canWrite = await FileSystemUtils.canWriteFile(zshrcPath);
+        if (!canWrite) {
+            return false;
+        }
+        const sourceLine = `[[ -f "${targetEnvPath}" ]] && source "${targetEnvPath}"`;
+        try {
+            await FileSystemUtils.updateFileWithMarkers(zshrcPath, sourceLine, this.ENV_SOURCE_MARKERS.start, this.ENV_SOURCE_MARKERS.end);
+            return true;
+        }
+        catch (error) {
+            console.debug(`Unable to configure .zshrc env source block: ${error.message}`);
+            return false;
+        }
+    }
+    /**
+     * Check if .zshrc has CodeSDD configuration markers
      *
      * @returns true if .zshrc exists and has markers
      */
@@ -402,7 +430,7 @@ export class ZshInstaller {
                 messages.push(`Completion script removed from ${targetPath}`);
             }
             if (zshrcCleaned && !isOhMyZsh) {
-                messages.push('Removed OpenSpec configuration from ~/.zshrc');
+                messages.push('Removed CodeSDD configuration from ~/.zshrc');
             }
             return {
                 success: true,

package/dist/core/completions/templates/bash-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for Bash completion scripts.
  * These are Bash-specific helper functions that never change.
  */
-export declare const BASH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n_openspec_complete_changes() {\n  local changes\n  changes=$(opensdd __complete changes 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$changes\" -- \"$cur\"))\n}\n\n_openspec_complete_specs() {\n  local specs\n  specs=$(opensdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$specs\" -- \"$cur\"))\n}\n\n_openspec_complete_items() {\n  local items\n  items=$(opensdd __complete changes 2>/dev/null | cut -f1; opensdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$items\" -- \"$cur\"))\n}";
+export declare const BASH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n_codesdd_complete_changes() {\n  local changes\n  changes=$(codesdd __complete changes 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$changes\" -- \"$cur\"))\n}\n\n_codesdd_complete_specs() {\n  local specs\n  specs=$(codesdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$specs\" -- \"$cur\"))\n}\n\n_codesdd_complete_items() {\n  local items\n  items=$(codesdd __complete changes 2>/dev/null | cut -f1; codesdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$items\" -- \"$cur\"))\n}\n\n_codesdd_complete_schemas() {\n  local schemas\n  schemas=$(codesdd __complete schemas 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$schemas\" -- \"$cur\"))\n}";
 //# sourceMappingURL=bash-templates.d.ts.map

package/dist/core/completions/templates/bash-templates.js

@@ -4,21 +4,27 @@
  */
 export const BASH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-_openspec_complete_changes() {
+_codesdd_complete_changes() {
   local changes
-  changes=$(opensdd __complete changes 2>/dev/null | cut -f1)
+  changes=$(codesdd __complete changes 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$changes" -- "$cur"))
 }
 
-_openspec_complete_specs() {
+_codesdd_complete_specs() {
   local specs
-  specs=$(opensdd __complete specs 2>/dev/null | cut -f1)
+  specs=$(codesdd __complete specs 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$specs" -- "$cur"))
 }
 
-_openspec_complete_items() {
+_codesdd_complete_items() {
   local items
-  items=$(opensdd __complete changes 2>/dev/null | cut -f1; opensdd __complete specs 2>/dev/null | cut -f1)
+  items=$(codesdd __complete changes 2>/dev/null | cut -f1; codesdd __complete specs 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$items" -- "$cur"))
+}
+
+_codesdd_complete_schemas() {
+  local schemas
+  schemas=$(codesdd __complete schemas 2>/dev/null | cut -f1)
+  COMPREPLY=($(compgen -W "$schemas" -- "$cur"))
 }`;
 //# sourceMappingURL=bash-templates.js.map

package/dist/core/completions/templates/fish-templates.d.ts

@@ -2,6 +2,6 @@
  * Static template strings for Fish completion scripts.
  * These are Fish-specific helper functions that never change.
  */
-export declare const FISH_STATIC_HELPERS = "# Helper function to check if a subcommand is present\nfunction __fish_openspec_using_subcommand\n    set -l cmd (commandline -opc)\n    set -e cmd[1]\n    for i in $argv\n        if contains -- $i $cmd\n            return 0\n        end\n    end\n    return 1\nend\n\nfunction __fish_openspec_no_subcommand\n    set -l cmd (commandline -opc)\n    test (count $cmd) -eq 1\nend";
-export declare const FISH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction __fish_openspec_changes\n    opensdd __complete changes 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_openspec_specs\n    opensdd __complete specs 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_openspec_items\n    __fish_openspec_changes\n    __fish_openspec_specs\nend";
+export declare const FISH_STATIC_HELPERS = "# Helper function to check if a subcommand is present\nfunction __fish_codesdd_using_subcommand\n    set -l cmd (commandline -opc)\n    set -e cmd[1]\n    for i in $argv\n        if contains -- $i $cmd\n            return 0\n        end\n    end\n    return 1\nend\n\nfunction __fish_codesdd_no_subcommand\n    set -l cmd (commandline -opc)\n    test (count $cmd) -eq 1\nend\n\nfunction __fish_codesdd_command_count\n    set -l cmd (commandline -opc)\n    count $cmd\nend";
+export declare const FISH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction __fish_codesdd_changes\n    codesdd __complete changes 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_codesdd_specs\n    codesdd __complete specs 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_codesdd_items\n    __fish_codesdd_changes\n    __fish_codesdd_specs\nend\n\nfunction __fish_codesdd_schemas\n    codesdd __complete schemas 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend";
 //# sourceMappingURL=fish-templates.d.ts.map

package/dist/core/completions/templates/fish-templates.js

@@ -3,7 +3,7 @@
  * These are Fish-specific helper functions that never change.
  */
 export const FISH_STATIC_HELPERS = `# Helper function to check if a subcommand is present
-function __fish_openspec_using_subcommand
+function __fish_codesdd_using_subcommand
     set -l cmd (commandline -opc)
     set -e cmd[1]
     for i in $argv
@@ -14,26 +14,37 @@ function __fish_openspec_using_subcommand
     return 1
 end
 
-function __fish_openspec_no_subcommand
+function __fish_codesdd_no_subcommand
     set -l cmd (commandline -opc)
     test (count $cmd) -eq 1
+end
+
+function __fish_codesdd_command_count
+    set -l cmd (commandline -opc)
+    count $cmd
 end`;
 export const FISH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-function __fish_openspec_changes
-    opensdd __complete changes 2>/dev/null | while read -l id desc
+function __fish_codesdd_changes
+    codesdd __complete changes 2>/dev/null | while read -l id desc
         printf '%s\\t%s\\n' "$id" "$desc"
     end
 end
 
-function __fish_openspec_specs
-    opensdd __complete specs 2>/dev/null | while read -l id desc
+function __fish_codesdd_specs
+    codesdd __complete specs 2>/dev/null | while read -l id desc
         printf '%s\\t%s\\n' "$id" "$desc"
     end
 end
 
-function __fish_openspec_items
-    __fish_openspec_changes
-    __fish_openspec_specs
+function __fish_codesdd_items
+    __fish_codesdd_changes
+    __fish_codesdd_specs
+end
+
+function __fish_codesdd_schemas
+    codesdd __complete schemas 2>/dev/null | while read -l id desc
+        printf '%s\\t%s\\n' "$id" "$desc"
+    end
 end`;
 //# sourceMappingURL=fish-templates.js.map

package/dist/core/completions/templates/powershell-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for PowerShell completion scripts.
  * These are PowerShell-specific helper functions that never change.
  */
-export declare const POWERSHELL_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction Get-OpenSpecChanges {\n    $output = opensdd __complete changes 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-OpenSpecSpecs {\n    $output = opensdd __complete specs 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n";
+export declare const POWERSHELL_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction Get-CodeSDDChanges {\n    $output = codesdd __complete changes 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-CodeSDDSpecs {\n    $output = codesdd __complete specs 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-CodeSDDSchemas {\n    $output = codesdd __complete schemas 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n";
 //# sourceMappingURL=powershell-templates.d.ts.map

package/dist/core/completions/templates/powershell-templates.js

@@ -4,8 +4,8 @@
  */
 export const POWERSHELL_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-function Get-OpenSpecChanges {
-    $output = opensdd __complete changes 2>$null
+function Get-CodeSDDChanges {
+    $output = codesdd __complete changes 2>$null
     if ($output) {
         $output | ForEach-Object {
             ($_ -split "\\t")[0]
@@ -13,8 +13,17 @@ function Get-OpenSpecChanges {
     }
 }
 
-function Get-OpenSpecSpecs {
-    $output = opensdd __complete specs 2>$null
+function Get-CodeSDDSpecs {
+    $output = codesdd __complete specs 2>$null
+    if ($output) {
+        $output | ForEach-Object {
+            ($_ -split "\\t")[0]
+        }
+    }
+}
+
+function Get-CodeSDDSchemas {
+    $output = codesdd __complete schemas 2>$null
     if ($output) {
         $output | ForEach-Object {
             ($_ -split "\\t")[0]

package/dist/core/completions/templates/zsh-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for Zsh completion scripts.
  * These are Zsh-specific helper functions that never change.
  */
-export declare const ZSH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n# Use opensdd __complete to get available changes\n_openspec_complete_changes() {\n  local -a changes\n  while IFS=$'\\t' read -r id desc; do\n    changes+=(\"$id:$desc\")\n  done < <(opensdd __complete changes 2>/dev/null)\n  _describe \"change\" changes\n}\n\n# Use opensdd __complete to get available specs\n_openspec_complete_specs() {\n  local -a specs\n  while IFS=$'\\t' read -r id desc; do\n    specs+=(\"$id:$desc\")\n  done < <(opensdd __complete specs 2>/dev/null)\n  _describe \"spec\" specs\n}\n\n# Get both changes and specs\n_openspec_complete_items() {\n  local -a items\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(opensdd __complete changes 2>/dev/null)\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(opensdd __complete specs 2>/dev/null)\n  _describe \"item\" items\n}";
+export declare const ZSH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n# Use codesdd __complete to get available changes\n_codesdd_complete_changes() {\n  local -a changes\n  while IFS=$'\\t' read -r id desc; do\n    changes+=(\"$id:$desc\")\n  done < <(codesdd __complete changes 2>/dev/null)\n  _describe \"change\" changes\n}\n\n# Use codesdd __complete to get available specs\n_codesdd_complete_specs() {\n  local -a specs\n  while IFS=$'\\t' read -r id desc; do\n    specs+=(\"$id:$desc\")\n  done < <(codesdd __complete specs 2>/dev/null)\n  _describe \"spec\" specs\n}\n\n# Get both changes and specs\n_codesdd_complete_items() {\n  local -a items\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(codesdd __complete changes 2>/dev/null)\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(codesdd __complete specs 2>/dev/null)\n  _describe \"item\" items\n}\n\n# Use codesdd __complete to get available workflow schemas\n_codesdd_complete_schemas() {\n  local -a schemas\n  while IFS=$'\\t' read -r id desc; do\n    schemas+=(\"$id:$desc\")\n  done < <(codesdd __complete schemas 2>/dev/null)\n  _describe \"schema\" schemas\n}";
 //# sourceMappingURL=zsh-templates.d.ts.map

package/dist/core/completions/templates/zsh-templates.js

@@ -4,33 +4,42 @@
  */
 export const ZSH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-# Use opensdd __complete to get available changes
-_openspec_complete_changes() {
+# Use codesdd __complete to get available changes
+_codesdd_complete_changes() {
   local -a changes
   while IFS=$'\\t' read -r id desc; do
     changes+=("$id:$desc")
-  done < <(opensdd __complete changes 2>/dev/null)
+  done < <(codesdd __complete changes 2>/dev/null)
   _describe "change" changes
 }
 
-# Use opensdd __complete to get available specs
-_openspec_complete_specs() {
+# Use codesdd __complete to get available specs
+_codesdd_complete_specs() {
   local -a specs
   while IFS=$'\\t' read -r id desc; do
     specs+=("$id:$desc")
-  done < <(opensdd __complete specs 2>/dev/null)
+  done < <(codesdd __complete specs 2>/dev/null)
   _describe "spec" specs
 }
 
 # Get both changes and specs
-_openspec_complete_items() {
+_codesdd_complete_items() {
   local -a items
   while IFS=$'\\t' read -r id desc; do
     items+=("$id:$desc")
-  done < <(opensdd __complete changes 2>/dev/null)
+  done < <(codesdd __complete changes 2>/dev/null)
   while IFS=$'\\t' read -r id desc; do
     items+=("$id:$desc")
-  done < <(opensdd __complete specs 2>/dev/null)
+  done < <(codesdd __complete specs 2>/dev/null)
   _describe "item" items
+}
+
+# Use codesdd __complete to get available workflow schemas
+_codesdd_complete_schemas() {
+  local -a schemas
+  while IFS=$'\\t' read -r id desc; do
+    schemas+=("$id:$desc")
+  done < <(codesdd __complete schemas 2>/dev/null)
+  _describe "schema" schemas
 }`;
 //# sourceMappingURL=zsh-templates.js.map

package/dist/core/config-schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 /**
- * Zod schema for global OpenSpec configuration.
+ * Zod schema for global CodeSDD configuration.
  * Uses passthrough() to preserve unknown fields for forward compatibility.
  */
 export declare const GlobalConfigSchema: z.ZodObject<{
@@ -83,4 +83,6 @@ export declare function validateConfig(config: unknown): {
     success: boolean;
     error?: string;
 };
+export declare function isSensitiveConfigPath(path: string): boolean;
+export declare function redactConfigSecrets(value: unknown): unknown;
 //# sourceMappingURL=config-schema.d.ts.map

package/dist/core/config-schema.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 /**
- * Zod schema for global OpenSpec configuration.
+ * Zod schema for global CodeSDD configuration.
  * Uses passthrough() to preserve unknown fields for forward compatibility.
  */
 export const GlobalConfigSchema = z
@@ -31,6 +31,7 @@ export const DEFAULT_CONFIG = {
     delivery: 'both',
 };
 const KNOWN_TOP_LEVEL_KEYS = new Set([...Object.keys(DEFAULT_CONFIG), 'workflows']);
+const SENSITIVE_KEY_TOKENS = ['key', 'secret', 'token', 'password', 'credential', 'private', 'auth'];
 /**
  * Validate a config key path for CLI set operations.
  * Unknown top-level keys are rejected unless explicitly allowed by the caller.
@@ -210,4 +211,28 @@ export function validateConfig(config) {
         return { success: false, error: 'Unknown validation error' };
     }
 }
+export function isSensitiveConfigPath(path) {
+    const segments = path
+        .split('.')
+        .map((segment) => segment.trim().toLowerCase())
+        .filter(Boolean);
+    return segments.some((segment) => SENSITIVE_KEY_TOKENS.some((token) => segment.includes(token)));
+}
+export function redactConfigSecrets(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => redactConfigSecrets(entry));
+    }
+    if (!value || typeof value !== 'object') {
+        return value;
+    }
+    const redacted = {};
+    for (const [key, entryValue] of Object.entries(value)) {
+        if (isSensitiveConfigPath(key)) {
+            redacted[key] = '[REDACTED]';
+            continue;
+        }
+        redacted[key] = redactConfigSecrets(entryValue);
+    }
+    return redacted;
+}
 //# sourceMappingURL=config-schema.js.map

package/dist/core/config.d.ts

@@ -1,9 +1,9 @@
-export declare const OPENSPEC_DIR_NAME = "openspec";
-export declare const OPENSPEC_MARKERS: {
+export declare const LEGACY_SPEC_DIR_NAME = "legacy-spec";
+export declare const CODESDD_MARKERS: {
     start: string;
     end: string;
 };
-export interface OpenSpecConfig {
+export interface LegacySpecConfig {
     aiTools: string[];
 }
 export interface AIToolOption {

package/dist/core/config.js

@@ -1,7 +1,7 @@
-export const OPENSPEC_DIR_NAME = 'openspec';
-export const OPENSPEC_MARKERS = {
-    start: '<!-- OPENSPEC:START -->',
-    end: '<!-- OPENSPEC:END -->'
+export const LEGACY_SPEC_DIR_NAME = 'legacy-spec';
+export const CODESDD_MARKERS = {
+    start: '<!-- CODESDD:START -->',
+    end: '<!-- CODESDD:END -->'
 };
 export const AI_TOOLS = [
     { name: 'Amazon Q Developer', value: 'amazon-q', available: true, successLabel: 'Amazon Q Developer', skillsDir: '.amazonq' },

package/dist/core/global-config.d.ts

@@ -1,6 +1,10 @@
-export declare const GLOBAL_CONFIG_DIR_NAME = "openspec";
-export declare const GLOBAL_CONFIG_FILE_NAME = "config.json";
-export declare const GLOBAL_DATA_DIR_NAME = "openspec";
+export declare const GLOBAL_CONFIG_DIR_NAME = ".codesdd";
+export declare const GLOBAL_CONFIG_FILE_NAME = "config.toml";
+export declare const GLOBAL_DATA_DIR_NAME = "codesdd";
+export declare const GLOBAL_CACHE_DIR_NAME = "cache";
+export declare const GLOBAL_CACHE_TIERS: readonly ["providers", "projects", "schemas", "deepagents", "plugins"];
+export declare const LEGACY_GLOBAL_CONFIG_DIR_NAME = "codesdd";
+export declare const LEGACY_GLOBAL_CONFIG_FILE_NAME = "config.json";
 export type Profile = 'core' | 'custom';
 export type Delivery = 'both' | 'skills' | 'commands';
 export interface GlobalConfig {
@@ -9,27 +13,52 @@ export interface GlobalConfig {
     delivery?: Delivery;
     workflows?: string[];
 }
+export declare function parseTomlContent(content: string): Record<string, unknown>;
+export declare function stringifyTomlContent(value: Record<string, unknown>): string;
 /**
- * Gets the global configuration directory path following XDG Base Directory Specification.
- *
- * - All platforms: $XDG_CONFIG_HOME/openspec/ if XDG_CONFIG_HOME is set
- * - Unix/macOS fallback: ~/.config/openspec/
- * - Windows fallback: %APPDATA%/openspec/
+ * Gets the canonical global runtime/configuration directory.
+ * This repository standardizes global runtime state under ~/.codesdd.
  */
 export declare function getGlobalConfigDir(): string;
+/**
+ * Gets the legacy XDG-compatible JSON config directory.
+ * This path is kept only for read compatibility with pre-~/.codesdd installs.
+ */
+export declare function getLegacyGlobalConfigDir(): string;
 /**
  * Gets the global data directory path following XDG Base Directory Specification.
  * Used for user data like schema overrides.
  *
- * - All platforms: $XDG_DATA_HOME/openspec/ if XDG_DATA_HOME is set
- * - Unix/macOS fallback: ~/.local/share/openspec/
- * - Windows fallback: %LOCALAPPDATA%/openspec/
+ * - All platforms: $XDG_DATA_HOME/legacy-spec/ if XDG_DATA_HOME is set
+ * - Unix/macOS fallback: ~/.local/share/legacy-spec/
+ * - Windows fallback: %LOCALAPPDATA%/legacy-spec/
  */
 export declare function getGlobalDataDir(): string;
 /**
- * Gets the path to the global config file.
+ * Gets the path to the canonical global config TOML file.
  */
 export declare function getGlobalConfigPath(): string;
+/**
+ * Gets the global cache directory path under ~/.codesdd/cache.
+ */
+export declare function getGlobalCacheDir(): string;
+/**
+ * Gets all tier directory paths for the global cache layout.
+ */
+export declare function getGlobalCacheTierDirs(): Record<(typeof GLOBAL_CACHE_TIERS)[number], string>;
+/**
+ * Ensures ~/.codesdd/cache and all known tier directories exist.
+ */
+export declare function ensureGlobalCacheLayout(): Record<(typeof GLOBAL_CACHE_TIERS)[number], string>;
+/**
+ * Creates a stable project fingerprint for cache partitioning.
+ */
+export declare function createProjectFingerprint(projectRoot: string): string;
+/**
+ * Gets the path to the legacy global config JSON file.
+ */
+export declare function getLegacyGlobalConfigPath(): string;
+export declare function readGlobalConfigRaw(): Record<string, unknown>;
 /**
  * Loads the global configuration from disk.
  * Returns default configuration if file doesn't exist or is invalid.