@devtrack-solution/codesdd 1.2.2 → 1.2.4-rc3

package/dist/core/completions/installers/zsh-installer.js

@@ -12,8 +12,12 @@ export class ZshInstaller {
      * Markers for .zshrc configuration management
      */
     ZSHRC_MARKERS = {
-        start: '# OPENSPEC:START',
-        end: '# OPENSPEC:END',
+        start: '# CODESDD:START',
+        end: '# CODESDD:END',
+    };
+    ENV_SOURCE_MARKERS = {
+        start: '# CODESDD:ENV:START',
+        end: '# CODESDD:ENV:END',
     };
     constructor(homeDir = os.homedir()) {
         this.homeDir = homeDir;
@@ -51,14 +55,14 @@ export class ZshInstaller {
         if (isOhMyZsh) {
             // Oh My Zsh custom completions directory
             return {
-                path: path.join(this.homeDir, '.oh-my-zsh', 'custom', 'completions', '_openspec'),
+                path: path.join(this.homeDir, '.oh-my-zsh', 'custom', 'completions', '_codesdd'),
                 isOhMyZsh: true,
             };
         }
         else {
             // Standard Zsh completions directory
             return {
-                path: path.join(this.homeDir, '.zsh', 'completions', '_openspec'),
+                path: path.join(this.homeDir, '.zsh', 'completions', '_codesdd'),
                 isOhMyZsh: false,
             };
         }
@@ -99,7 +103,7 @@ export class ZshInstaller {
      */
     generateZshrcConfig(completionsDir) {
         return [
-            '# OpenSpec shell completions configuration',
+            '# CodeSDD shell completions configuration',
             `fpath=("${completionsDir}" $fpath)`,
             'autoload -Uz compinit',
             'compinit',
@@ -114,7 +118,7 @@ export class ZshInstaller {
      */
     async configureZshrc(completionsDir) {
         // Check if auto-configuration is disabled
-        if (process.env.OPENSPEC_NO_AUTO_CONFIG === '1') {
+        if (process.env.CODESDD_NO_AUTO_CONFIG === '1') {
             return false;
         }
         try {
@@ -136,7 +140,31 @@ export class ZshInstaller {
         }
     }
     /**
-     * Check if .zshrc has OpenSpec configuration markers
+     * Ensure ~/.zshrc sources ~/.codesdd/env.zsh through an idempotent marker block.
+     * This block contains only non-secret shell wiring.
+     */
+    async ensureCodesddEnvSource(envFilePath) {
+        if (process.env.CODESDD_NO_AUTO_CONFIG === '1') {
+            return false;
+        }
+        const targetEnvPath = envFilePath ?? path.join(this.homeDir, '.codesdd', 'env.zsh');
+        const zshrcPath = this.getZshrcPath();
+        const canWrite = await FileSystemUtils.canWriteFile(zshrcPath);
+        if (!canWrite) {
+            return false;
+        }
+        const sourceLine = `[[ -f "${targetEnvPath}" ]] && source "${targetEnvPath}"`;
+        try {
+            await FileSystemUtils.updateFileWithMarkers(zshrcPath, sourceLine, this.ENV_SOURCE_MARKERS.start, this.ENV_SOURCE_MARKERS.end);
+            return true;
+        }
+        catch (error) {
+            console.debug(`Unable to configure .zshrc env source block: ${error.message}`);
+            return false;
+        }
+    }
+    /**
+     * Check if .zshrc has CodeSDD configuration markers
      *
      * @returns true if .zshrc exists and has markers
      */
@@ -402,7 +430,7 @@ export class ZshInstaller {
                 messages.push(`Completion script removed from ${targetPath}`);
             }
             if (zshrcCleaned && !isOhMyZsh) {
-                messages.push('Removed OpenSpec configuration from ~/.zshrc');
+                messages.push('Removed CodeSDD configuration from ~/.zshrc');
             }
             return {
                 success: true,

package/dist/core/completions/templates/bash-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for Bash completion scripts.
  * These are Bash-specific helper functions that never change.
  */
-export declare const BASH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n_openspec_complete_changes() {\n  local changes\n  changes=$(opensdd __complete changes 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$changes\" -- \"$cur\"))\n}\n\n_openspec_complete_specs() {\n  local specs\n  specs=$(opensdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$specs\" -- \"$cur\"))\n}\n\n_openspec_complete_items() {\n  local items\n  items=$(opensdd __complete changes 2>/dev/null | cut -f1; opensdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$items\" -- \"$cur\"))\n}";
+export declare const BASH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n_codesdd_complete_changes() {\n  local changes\n  changes=$(codesdd __complete changes 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$changes\" -- \"$cur\"))\n}\n\n_codesdd_complete_specs() {\n  local specs\n  specs=$(codesdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$specs\" -- \"$cur\"))\n}\n\n_codesdd_complete_items() {\n  local items\n  items=$(codesdd __complete changes 2>/dev/null | cut -f1; codesdd __complete specs 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$items\" -- \"$cur\"))\n}\n\n_codesdd_complete_schemas() {\n  local schemas\n  schemas=$(codesdd __complete schemas 2>/dev/null | cut -f1)\n  COMPREPLY=($(compgen -W \"$schemas\" -- \"$cur\"))\n}";
 //# sourceMappingURL=bash-templates.d.ts.map

package/dist/core/completions/templates/bash-templates.js

@@ -4,21 +4,27 @@
  */
 export const BASH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-_openspec_complete_changes() {
+_codesdd_complete_changes() {
   local changes
-  changes=$(opensdd __complete changes 2>/dev/null | cut -f1)
+  changes=$(codesdd __complete changes 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$changes" -- "$cur"))
 }
 
-_openspec_complete_specs() {
+_codesdd_complete_specs() {
   local specs
-  specs=$(opensdd __complete specs 2>/dev/null | cut -f1)
+  specs=$(codesdd __complete specs 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$specs" -- "$cur"))
 }
 
-_openspec_complete_items() {
+_codesdd_complete_items() {
   local items
-  items=$(opensdd __complete changes 2>/dev/null | cut -f1; opensdd __complete specs 2>/dev/null | cut -f1)
+  items=$(codesdd __complete changes 2>/dev/null | cut -f1; codesdd __complete specs 2>/dev/null | cut -f1)
   COMPREPLY=($(compgen -W "$items" -- "$cur"))
+}
+
+_codesdd_complete_schemas() {
+  local schemas
+  schemas=$(codesdd __complete schemas 2>/dev/null | cut -f1)
+  COMPREPLY=($(compgen -W "$schemas" -- "$cur"))
 }`;
 //# sourceMappingURL=bash-templates.js.map

package/dist/core/completions/templates/fish-templates.d.ts

@@ -2,6 +2,6 @@
  * Static template strings for Fish completion scripts.
  * These are Fish-specific helper functions that never change.
  */
-export declare const FISH_STATIC_HELPERS = "# Helper function to check if a subcommand is present\nfunction __fish_openspec_using_subcommand\n    set -l cmd (commandline -opc)\n    set -e cmd[1]\n    for i in $argv\n        if contains -- $i $cmd\n            return 0\n        end\n    end\n    return 1\nend\n\nfunction __fish_openspec_no_subcommand\n    set -l cmd (commandline -opc)\n    test (count $cmd) -eq 1\nend";
-export declare const FISH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction __fish_openspec_changes\n    opensdd __complete changes 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_openspec_specs\n    opensdd __complete specs 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_openspec_items\n    __fish_openspec_changes\n    __fish_openspec_specs\nend";
+export declare const FISH_STATIC_HELPERS = "# Helper function to check if a subcommand is present\nfunction __fish_codesdd_using_subcommand\n    set -l cmd (commandline -opc)\n    set -e cmd[1]\n    for i in $argv\n        if contains -- $i $cmd\n            return 0\n        end\n    end\n    return 1\nend\n\nfunction __fish_codesdd_no_subcommand\n    set -l cmd (commandline -opc)\n    test (count $cmd) -eq 1\nend\n\nfunction __fish_codesdd_command_count\n    set -l cmd (commandline -opc)\n    count $cmd\nend";
+export declare const FISH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction __fish_codesdd_changes\n    codesdd __complete changes 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_codesdd_specs\n    codesdd __complete specs 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend\n\nfunction __fish_codesdd_items\n    __fish_codesdd_changes\n    __fish_codesdd_specs\nend\n\nfunction __fish_codesdd_schemas\n    codesdd __complete schemas 2>/dev/null | while read -l id desc\n        printf '%s\\t%s\\n' \"$id\" \"$desc\"\n    end\nend";
 //# sourceMappingURL=fish-templates.d.ts.map

package/dist/core/completions/templates/fish-templates.js

@@ -3,7 +3,7 @@
  * These are Fish-specific helper functions that never change.
  */
 export const FISH_STATIC_HELPERS = `# Helper function to check if a subcommand is present
-function __fish_openspec_using_subcommand
+function __fish_codesdd_using_subcommand
     set -l cmd (commandline -opc)
     set -e cmd[1]
     for i in $argv
@@ -14,26 +14,37 @@ function __fish_openspec_using_subcommand
     return 1
 end
 
-function __fish_openspec_no_subcommand
+function __fish_codesdd_no_subcommand
     set -l cmd (commandline -opc)
     test (count $cmd) -eq 1
+end
+
+function __fish_codesdd_command_count
+    set -l cmd (commandline -opc)
+    count $cmd
 end`;
 export const FISH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-function __fish_openspec_changes
-    opensdd __complete changes 2>/dev/null | while read -l id desc
+function __fish_codesdd_changes
+    codesdd __complete changes 2>/dev/null | while read -l id desc
         printf '%s\\t%s\\n' "$id" "$desc"
     end
 end
 
-function __fish_openspec_specs
-    opensdd __complete specs 2>/dev/null | while read -l id desc
+function __fish_codesdd_specs
+    codesdd __complete specs 2>/dev/null | while read -l id desc
         printf '%s\\t%s\\n' "$id" "$desc"
     end
 end
 
-function __fish_openspec_items
-    __fish_openspec_changes
-    __fish_openspec_specs
+function __fish_codesdd_items
+    __fish_codesdd_changes
+    __fish_codesdd_specs
+end
+
+function __fish_codesdd_schemas
+    codesdd __complete schemas 2>/dev/null | while read -l id desc
+        printf '%s\\t%s\\n' "$id" "$desc"
+    end
 end`;
 //# sourceMappingURL=fish-templates.js.map

package/dist/core/completions/templates/powershell-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for PowerShell completion scripts.
  * These are PowerShell-specific helper functions that never change.
  */
-export declare const POWERSHELL_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction Get-OpenSpecChanges {\n    $output = opensdd __complete changes 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-OpenSpecSpecs {\n    $output = opensdd __complete specs 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n";
+export declare const POWERSHELL_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\nfunction Get-CodeSDDChanges {\n    $output = codesdd __complete changes 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-CodeSDDSpecs {\n    $output = codesdd __complete specs 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n\nfunction Get-CodeSDDSchemas {\n    $output = codesdd __complete schemas 2>$null\n    if ($output) {\n        $output | ForEach-Object {\n            ($_ -split \"\\t\")[0]\n        }\n    }\n}\n";
 //# sourceMappingURL=powershell-templates.d.ts.map

package/dist/core/completions/templates/powershell-templates.js

@@ -4,8 +4,8 @@
  */
 export const POWERSHELL_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-function Get-OpenSpecChanges {
-    $output = opensdd __complete changes 2>$null
+function Get-CodeSDDChanges {
+    $output = codesdd __complete changes 2>$null
     if ($output) {
         $output | ForEach-Object {
             ($_ -split "\\t")[0]
@@ -13,8 +13,17 @@ function Get-OpenSpecChanges {
     }
 }
 
-function Get-OpenSpecSpecs {
-    $output = opensdd __complete specs 2>$null
+function Get-CodeSDDSpecs {
+    $output = codesdd __complete specs 2>$null
+    if ($output) {
+        $output | ForEach-Object {
+            ($_ -split "\\t")[0]
+        }
+    }
+}
+
+function Get-CodeSDDSchemas {
+    $output = codesdd __complete schemas 2>$null
     if ($output) {
         $output | ForEach-Object {
             ($_ -split "\\t")[0]

package/dist/core/completions/templates/zsh-templates.d.ts

@@ -2,5 +2,5 @@
  * Static template strings for Zsh completion scripts.
  * These are Zsh-specific helper functions that never change.
  */
-export declare const ZSH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n# Use opensdd __complete to get available changes\n_openspec_complete_changes() {\n  local -a changes\n  while IFS=$'\\t' read -r id desc; do\n    changes+=(\"$id:$desc\")\n  done < <(opensdd __complete changes 2>/dev/null)\n  _describe \"change\" changes\n}\n\n# Use opensdd __complete to get available specs\n_openspec_complete_specs() {\n  local -a specs\n  while IFS=$'\\t' read -r id desc; do\n    specs+=(\"$id:$desc\")\n  done < <(opensdd __complete specs 2>/dev/null)\n  _describe \"spec\" specs\n}\n\n# Get both changes and specs\n_openspec_complete_items() {\n  local -a items\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(opensdd __complete changes 2>/dev/null)\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(opensdd __complete specs 2>/dev/null)\n  _describe \"item\" items\n}";
+export declare const ZSH_DYNAMIC_HELPERS = "# Dynamic completion helpers\n\n# Use codesdd __complete to get available changes\n_codesdd_complete_changes() {\n  local -a changes\n  while IFS=$'\\t' read -r id desc; do\n    changes+=(\"$id:$desc\")\n  done < <(codesdd __complete changes 2>/dev/null)\n  _describe \"change\" changes\n}\n\n# Use codesdd __complete to get available specs\n_codesdd_complete_specs() {\n  local -a specs\n  while IFS=$'\\t' read -r id desc; do\n    specs+=(\"$id:$desc\")\n  done < <(codesdd __complete specs 2>/dev/null)\n  _describe \"spec\" specs\n}\n\n# Get both changes and specs\n_codesdd_complete_items() {\n  local -a items\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(codesdd __complete changes 2>/dev/null)\n  while IFS=$'\\t' read -r id desc; do\n    items+=(\"$id:$desc\")\n  done < <(codesdd __complete specs 2>/dev/null)\n  _describe \"item\" items\n}\n\n# Use codesdd __complete to get available workflow schemas\n_codesdd_complete_schemas() {\n  local -a schemas\n  while IFS=$'\\t' read -r id desc; do\n    schemas+=(\"$id:$desc\")\n  done < <(codesdd __complete schemas 2>/dev/null)\n  _describe \"schema\" schemas\n}";
 //# sourceMappingURL=zsh-templates.d.ts.map

package/dist/core/completions/templates/zsh-templates.js

@@ -4,33 +4,42 @@
  */
 export const ZSH_DYNAMIC_HELPERS = `# Dynamic completion helpers
 
-# Use opensdd __complete to get available changes
-_openspec_complete_changes() {
+# Use codesdd __complete to get available changes
+_codesdd_complete_changes() {
   local -a changes
   while IFS=$'\\t' read -r id desc; do
     changes+=("$id:$desc")
-  done < <(opensdd __complete changes 2>/dev/null)
+  done < <(codesdd __complete changes 2>/dev/null)
   _describe "change" changes
 }
 
-# Use opensdd __complete to get available specs
-_openspec_complete_specs() {
+# Use codesdd __complete to get available specs
+_codesdd_complete_specs() {
   local -a specs
   while IFS=$'\\t' read -r id desc; do
     specs+=("$id:$desc")
-  done < <(opensdd __complete specs 2>/dev/null)
+  done < <(codesdd __complete specs 2>/dev/null)
   _describe "spec" specs
 }
 
 # Get both changes and specs
-_openspec_complete_items() {
+_codesdd_complete_items() {
   local -a items
   while IFS=$'\\t' read -r id desc; do
     items+=("$id:$desc")
-  done < <(opensdd __complete changes 2>/dev/null)
+  done < <(codesdd __complete changes 2>/dev/null)
   while IFS=$'\\t' read -r id desc; do
     items+=("$id:$desc")
-  done < <(opensdd __complete specs 2>/dev/null)
+  done < <(codesdd __complete specs 2>/dev/null)
   _describe "item" items
+}
+
+# Use codesdd __complete to get available workflow schemas
+_codesdd_complete_schemas() {
+  local -a schemas
+  while IFS=$'\\t' read -r id desc; do
+    schemas+=("$id:$desc")
+  done < <(codesdd __complete schemas 2>/dev/null)
+  _describe "schema" schemas
 }`;
 //# sourceMappingURL=zsh-templates.js.map

package/dist/core/config-schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 /**
- * Zod schema for global OpenSpec configuration.
+ * Zod schema for global CodeSDD configuration.
  * Uses passthrough() to preserve unknown fields for forward compatibility.
  */
 export declare const GlobalConfigSchema: z.ZodObject<{
@@ -15,6 +15,23 @@ export declare const GlobalConfigSchema: z.ZodObject<{
         both: "both";
     }>>>;
     workflows: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    redis: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        url: z.ZodOptional<z.ZodString>;
+        url_env: z.ZodOptional<z.ZodString>;
+        namespace: z.ZodOptional<z.ZodString>;
+        tls: z.ZodOptional<z.ZodBoolean>;
+        connect_timeout_ms: z.ZodOptional<z.ZodNumber>;
+        command_timeout_ms: z.ZodOptional<z.ZodNumber>;
+        max_retries: z.ZodOptional<z.ZodNumber>;
+        fallback: z.ZodOptional<z.ZodEnum<{
+            filesystem: "filesystem";
+            none: "none";
+        }>>;
+        cache_default_ttl_ms: z.ZodOptional<z.ZodNumber>;
+        lock_ttl_ms: z.ZodOptional<z.ZodNumber>;
+        stream_max_len: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$loose>;
 export type GlobalConfigType = z.infer<typeof GlobalConfigSchema>;
 /**
@@ -83,4 +100,6 @@ export declare function validateConfig(config: unknown): {
     success: boolean;
     error?: string;
 };
+export declare function isSensitiveConfigPath(path: string): boolean;
+export declare function redactConfigSecrets(value: unknown, parentPath?: string): unknown;
 //# sourceMappingURL=config-schema.d.ts.map

package/dist/core/config-schema.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 /**
- * Zod schema for global OpenSpec configuration.
+ * Zod schema for global CodeSDD configuration.
  * Uses passthrough() to preserve unknown fields for forward compatibility.
  */
 export const GlobalConfigSchema = z
@@ -20,6 +20,22 @@ export const GlobalConfigSchema = z
     workflows: z
         .array(z.string())
         .optional(),
+    redis: z
+        .object({
+        enabled: z.boolean().optional(),
+        url: z.string().min(1).optional(),
+        url_env: z.string().min(1).optional(),
+        namespace: z.string().min(1).optional(),
+        tls: z.boolean().optional(),
+        connect_timeout_ms: z.number().int().positive().optional(),
+        command_timeout_ms: z.number().int().positive().optional(),
+        max_retries: z.number().int().min(0).optional(),
+        fallback: z.enum(['filesystem', 'none']).optional(),
+        cache_default_ttl_ms: z.number().int().positive().optional(),
+        lock_ttl_ms: z.number().int().positive().optional(),
+        stream_max_len: z.number().int().positive().optional(),
+    })
+        .optional(),
 })
     .passthrough();
 /**
@@ -30,7 +46,8 @@ export const DEFAULT_CONFIG = {
     profile: 'core',
     delivery: 'both',
 };
-const KNOWN_TOP_LEVEL_KEYS = new Set([...Object.keys(DEFAULT_CONFIG), 'workflows']);
+const KNOWN_TOP_LEVEL_KEYS = new Set([...Object.keys(DEFAULT_CONFIG), 'workflows', 'redis']);
+const SENSITIVE_KEY_TOKENS = ['key', 'secret', 'token', 'password', 'credential', 'private', 'auth'];
 /**
  * Validate a config key path for CLI set operations.
  * Unknown top-level keys are rejected unless explicitly allowed by the caller.
@@ -50,6 +67,29 @@ export function validateConfigKeyPath(path) {
         }
         return { valid: true };
     }
+    if (rootKey === 'redis') {
+        if (rawKeys.length !== 2) {
+            return { valid: false, reason: 'redis settings support one nested key' };
+        }
+        const redisKeys = new Set([
+            'enabled',
+            'url',
+            'url_env',
+            'namespace',
+            'tls',
+            'connect_timeout_ms',
+            'command_timeout_ms',
+            'max_retries',
+            'fallback',
+            'cache_default_ttl_ms',
+            'lock_ttl_ms',
+            'stream_max_len',
+        ]);
+        if (!redisKeys.has(rawKeys[1])) {
+            return { valid: false, reason: `Unknown redis key "${rawKeys[1]}"` };
+        }
+        return { valid: true };
+    }
     if (rawKeys.length > 1) {
         return { valid: false, reason: `"${rootKey}" does not support nested keys` };
     }
@@ -210,4 +250,32 @@ export function validateConfig(config) {
         return { success: false, error: 'Unknown validation error' };
     }
 }
+export function isSensitiveConfigPath(path) {
+    const segments = path
+        .split('.')
+        .map((segment) => segment.trim().toLowerCase())
+        .filter(Boolean);
+    if (segments.length >= 2 && segments[0] === 'redis' && segments[segments.length - 1] === 'url') {
+        return true;
+    }
+    return segments.some((segment) => SENSITIVE_KEY_TOKENS.some((token) => segment.includes(token)));
+}
+export function redactConfigSecrets(value, parentPath = '') {
+    if (Array.isArray(value)) {
+        return value.map((entry) => redactConfigSecrets(entry, parentPath));
+    }
+    if (!value || typeof value !== 'object') {
+        return value;
+    }
+    const redacted = {};
+    for (const [key, entryValue] of Object.entries(value)) {
+        const path = parentPath ? `${parentPath}.${key}` : key;
+        if (isSensitiveConfigPath(path)) {
+            redacted[key] = '[REDACTED]';
+            continue;
+        }
+        redacted[key] = redactConfigSecrets(entryValue, path);
+    }
+    return redacted;
+}
 //# sourceMappingURL=config-schema.js.map

package/dist/core/config.d.ts

@@ -1,9 +1,9 @@
-export declare const OPENSPEC_DIR_NAME = "openspec";
-export declare const OPENSPEC_MARKERS: {
+export declare const LEGACY_SPEC_DIR_NAME = "legacy-spec";
+export declare const CODESDD_MARKERS: {
     start: string;
     end: string;
 };
-export interface OpenSpecConfig {
+export interface LegacySpecConfig {
     aiTools: string[];
 }
 export interface AIToolOption {

package/dist/core/config.js

@@ -1,7 +1,7 @@
-export const OPENSPEC_DIR_NAME = 'openspec';
-export const OPENSPEC_MARKERS = {
-    start: '<!-- OPENSPEC:START -->',
-    end: '<!-- OPENSPEC:END -->'
+export const LEGACY_SPEC_DIR_NAME = 'legacy-spec';
+export const CODESDD_MARKERS = {
+    start: '<!-- CODESDD:START -->',
+    end: '<!-- CODESDD:END -->'
 };
 export const AI_TOOLS = [
     { name: 'Amazon Q Developer', value: 'amazon-q', available: true, successLabel: 'Amazon Q Developer', skillsDir: '.amazonq' },

package/dist/core/global-config.d.ts

@@ -1,35 +1,80 @@
-export declare const GLOBAL_CONFIG_DIR_NAME = "openspec";
-export declare const GLOBAL_CONFIG_FILE_NAME = "config.json";
-export declare const GLOBAL_DATA_DIR_NAME = "openspec";
+export declare const GLOBAL_CONFIG_DIR_NAME = ".codesdd";
+export declare const GLOBAL_CONFIG_FILE_NAME = "config.toml";
+export declare const GLOBAL_DATA_DIR_NAME = "codesdd";
+export declare const GLOBAL_CACHE_DIR_NAME = "cache";
+export declare const GLOBAL_CACHE_TIERS: readonly ["providers", "projects", "schemas", "deepagents", "plugins"];
+export declare const LEGACY_GLOBAL_CONFIG_DIR_NAME = "codesdd";
+export declare const LEGACY_GLOBAL_CONFIG_FILE_NAME = "config.json";
 export type Profile = 'core' | 'custom';
 export type Delivery = 'both' | 'skills' | 'commands';
+export type RedisFallbackMode = 'filesystem' | 'none';
+export interface RedisGlobalConfig {
+    enabled?: boolean;
+    url?: string;
+    url_env?: string;
+    namespace?: string;
+    tls?: boolean;
+    connect_timeout_ms?: number;
+    command_timeout_ms?: number;
+    max_retries?: number;
+    fallback?: RedisFallbackMode;
+    cache_default_ttl_ms?: number;
+    lock_ttl_ms?: number;
+    stream_max_len?: number;
+}
 export interface GlobalConfig {
     featureFlags?: Record<string, boolean>;
     profile?: Profile;
     delivery?: Delivery;
     workflows?: string[];
+    redis?: RedisGlobalConfig;
 }
+export declare function parseTomlContent(content: string): Record<string, unknown>;
+export declare function stringifyTomlContent(value: Record<string, unknown>): string;
 /**
- * Gets the global configuration directory path following XDG Base Directory Specification.
- *
- * - All platforms: $XDG_CONFIG_HOME/openspec/ if XDG_CONFIG_HOME is set
- * - Unix/macOS fallback: ~/.config/openspec/
- * - Windows fallback: %APPDATA%/openspec/
+ * Gets the canonical global runtime/configuration directory.
+ * This repository standardizes global runtime state under ~/.codesdd.
  */
 export declare function getGlobalConfigDir(): string;
+/**
+ * Gets the legacy XDG-compatible JSON config directory.
+ * This path is kept only for read compatibility with pre-~/.codesdd installs.
+ */
+export declare function getLegacyGlobalConfigDir(): string;
 /**
  * Gets the global data directory path following XDG Base Directory Specification.
  * Used for user data like schema overrides.
  *
- * - All platforms: $XDG_DATA_HOME/openspec/ if XDG_DATA_HOME is set
- * - Unix/macOS fallback: ~/.local/share/openspec/
- * - Windows fallback: %LOCALAPPDATA%/openspec/
+ * - All platforms: $XDG_DATA_HOME/legacy-spec/ if XDG_DATA_HOME is set
+ * - Unix/macOS fallback: ~/.local/share/legacy-spec/
+ * - Windows fallback: %LOCALAPPDATA%/legacy-spec/
  */
 export declare function getGlobalDataDir(): string;
 /**
- * Gets the path to the global config file.
+ * Gets the path to the canonical global config TOML file.
  */
 export declare function getGlobalConfigPath(): string;
+/**
+ * Gets the global cache directory path under ~/.codesdd/cache.
+ */
+export declare function getGlobalCacheDir(): string;
+/**
+ * Gets all tier directory paths for the global cache layout.
+ */
+export declare function getGlobalCacheTierDirs(): Record<(typeof GLOBAL_CACHE_TIERS)[number], string>;
+/**
+ * Ensures ~/.codesdd/cache and all known tier directories exist.
+ */
+export declare function ensureGlobalCacheLayout(): Record<(typeof GLOBAL_CACHE_TIERS)[number], string>;
+/**
+ * Creates a stable project fingerprint for cache partitioning.
+ */
+export declare function createProjectFingerprint(projectRoot: string): string;
+/**
+ * Gets the path to the legacy global config JSON file.
+ */
+export declare function getLegacyGlobalConfigPath(): string;
+export declare function readGlobalConfigRaw(): Record<string, unknown>;
 /**
  * Loads the global configuration from disk.
  * Returns default configuration if file doesn't exist or is invalid.