@programinglive/dev-workflow-mcp-server 1.12.1 → 1.13.0

package/tools/handler-modules/factory-handlers.js

@@ -6,6 +6,7 @@ import {
   findTask,
   claimTask,
   updateTaskStatus,
+  updateTaskDetails,
   createTask,
   listProjects,
   formatTaskList,
@@ -149,6 +150,7 @@ export async function handleClaimFactoryTask(args = {}, { workflowState } = {})
           : "",
         `Factory status is now running (work session ${session.id}).`,
         task.projectName ? `Project: ${task.projectName}` : "",
+        task.definitionOfDone ? `Definition of done:\n${task.definitionOfDone}` : "",
         "",
         "Local workflow started for this task.",
         "Use 'sync_task_status' with review, blocked or paused to close the session, or done to approve the task once it is in review.",
@@ -199,10 +201,23 @@ export async function handleSyncTaskStatus(args = {}) {
     // ditolak server dan hanya mengaburkan keadaan papan.
     stopKeeping();
 
+    // Checklist dibaca lagi setelah status berubah: DoD bisa saja dilengkapi
+    // sejak claim, dan agen perlu kriteria terbaru saat melaporkan selesai.
+    // Kegagalan bacaan tambahan ini tidak boleh membuat laporan status yang
+    // sudah berhasil terlihat gagal.
+    let definitionOfDone = "";
+    try {
+      const task = await findTask(config, recordId);
+      definitionOfDone = String(task?.definitionOfDone || "").trim();
+    } catch {
+      definitionOfDone = "";
+    }
+
     return textResponse(
       [
         `Updated ${recordId} to ${result.status}.`,
         result.session?.summary ? `Summary: ${result.session.summary}` : "",
+        definitionOfDone ? `Definition of done:\n${definitionOfDone}` : "",
         result.status === "review" ? "Waiting for human approval in Factory." : "",
       ]
         .filter(Boolean)
@@ -241,6 +256,7 @@ export async function handleCreateFactoryTask(args = {}) {
 
   const title = typeof args.title === "string" ? args.title.trim() : "";
   const acceptance = typeof args.acceptance === "string" ? args.acceptance.trim() : "";
+  const definitionOfDone = typeof args.definitionOfDone === "string" ? args.definitionOfDone.trim() : "";
 
   if (!title) {
     return textResponse("Provide 'title' for the task (3-140 characters).");
@@ -253,6 +269,17 @@ export async function handleCreateFactoryTask(args = {}) {
       ].join("\n"),
     );
   }
+  if (!definitionOfDone) {
+    return textResponse(
+      [
+        "Provide 'definitionOfDone': the checklist that must be true before this task can be marked done.",
+        "Use one condition per line, for example:",
+        "- [ ] build lulus",
+        "- [ ] halaman login terverifikasi",
+        "It is stored separately from 'acceptance', which also carries the ```run block for the worker.",
+      ].join("\n"),
+    );
+  }
   if (!args.projectId) {
     return textResponse(
       "Provide 'projectId'. Run 'list_factory_projects' first - Factory needs a real project UUID.",
@@ -265,6 +292,7 @@ export async function handleCreateFactoryTask(args = {}) {
       title,
       description: args.description,
       acceptance,
+      definitionOfDone,
       priority: args.priority,
       status: args.status,
     });
@@ -286,3 +314,59 @@ export async function handleCreateFactoryTask(args = {}) {
     return textResponse(`Could not create the task: ${error.message}`);
   }
 }
+
+/**
+ * Edits an existing task, mainly to fill the definition of done of a task that
+ * was created before Factory required it.
+ *
+ * Local validation runs first so an empty request never reaches the network.
+ */
+export async function handleUpdateFactoryTask(args = {}) {
+  const { config, response } = requireConfig();
+  if (!config) return response;
+
+  const recordId = typeof args.recordId === "string" ? args.recordId.trim() : "";
+  if (!recordId) {
+    return textResponse("Provide the 'recordId' of the task to update (see list_factory_tasks).");
+  }
+
+  const hasField = ["title", "description", "acceptance", "definitionOfDone"].some(
+    (field) => typeof args[field] === "string",
+  );
+  if (!hasField) {
+    return textResponse(
+      [
+        "Provide at least one field to update: title, description, acceptance or definitionOfDone.",
+        "To fill a missing definition of done, pass definitionOfDone as a checklist, one condition per line.",
+      ].join("\n"),
+    );
+  }
+
+  try {
+    const result = await updateTaskDetails(config, {
+      recordId,
+      title: args.title,
+      description: args.description,
+      acceptance: args.acceptance,
+      definitionOfDone: args.definitionOfDone,
+    });
+
+    return textResponse(
+      [
+        `Updated ${recordId}.`,
+        result.updatedAt ? `Task version is now ${result.updatedAt}.` : "",
+      ]
+        .filter(Boolean)
+        .join("\n"),
+    );
+  } catch (error) {
+    // Factory menjawab 409 kalau task berubah sejak dibaca. Menyebut ulang
+    // langkah yang harus diambil lebih berguna daripada kode HTTP saja.
+    if (error?.status === 409) {
+      return textResponse(
+        `Could not update the task: ${error.message}\nReload the task with list_factory_tasks and try again with the current version.`,
+      );
+    }
+    return textResponse(`Could not update the task: ${error.message}`);
+  }
+}

package/tools/handler-modules/index.js

@@ -1,10 +1,16 @@
 import { textResponse, isReleaseSatisfied, isErrorResponse } from "./shared.js";
+import { assertSafeKnowledge } from '../../security/policy.js';
+import { safeLog, securityOutputFilter } from '../../security/sanitizer.js';
+import { securityAudit } from '../../security/audit.js';
+import path from 'node:path';
+import { assertSafeToolCommand } from '../../security/commands.js';
+import { sessionKeyFromRequest } from "../../workflow-state.js";
 import { handleStartTask, handleMarkBugFixed, handleCreateTests, handleSkipTests, handleRunTests, handleCreateDocumentation, handleCreateFeatureFlow } from "./workflow-handlers.js";
 import { handleSkipRelease, handlePerformRelease } from "./release-handlers.js";
 import { handleCommitAndPush, handleCompleteTask, handleForceCompleteTask, handleDropTask } from "./commit-handlers.js";
 import { handleProjectSummary, handleProjectSummaryData, handleProjectSummaryDb, handleViewHistory } from "./summary-handlers.js";
 import { handleGetWorkflowStatus, handleReadyCheck, handleContinueWorkflow, handleRerunWorkflow } from "./status-handlers.js";
-import { handleListFactoryTasks, handleClaimFactoryTask, handleSyncTaskStatus, handleListFactoryProjects, handleCreateFactoryTask } from "./factory-handlers.js";
+import { handleListFactoryTasks, handleClaimFactoryTask, handleSyncTaskStatus, handleListFactoryProjects, handleCreateFactoryTask, handleUpdateFactoryTask } from "./factory-handlers.js";
 
 function summarizeResponse(label, response) {
   const text = response?.content?.[0]?.text || "";
@@ -156,7 +162,7 @@ async function handleRunFullWorkflow(args, { workflowState, exec, git, utils })
   return textResponse(message);
 }
 
-export async function handleToolCall({
+async function dispatchToolCall({
   request,
   normalizeRequestArgs,
   workflowState,
@@ -166,6 +172,14 @@ export async function handleToolCall({
 }) {
   try {
     const { name } = request.params;
+
+    // Identitas sesi datang dari request metadata, bukan dari environment.
+    // Tanpa ini, satu proses MCP yang dipakai bergantian oleh beberapa sesi
+    // akan berbagi satu state dan saling menimpa task.
+    const sessionId = sessionKeyFromRequest(request);
+    if (sessionId && workflowState?.useSession) {
+      await workflowState.useSession(sessionId);
+    }
     const { args, error: argumentsError } = normalizeRequestArgs(request.params.arguments);
 
     if (argumentsError) {
@@ -173,6 +187,14 @@ export async function handleToolCall({
     }
 
     switch (name) {
+      case 'security_audit': {
+        const file=workflowState?.stateFile;
+        const marker=file?.replaceAll('\\','/').lastIndexOf('/.state/');
+        const root=marker>=0 ? file.slice(0,marker) : file ? path.dirname(file) : process.cwd();
+        const userId=process.env.DEV_WORKFLOW_USER_ID || (marker>=0?path.basename(path.dirname(file)):'default');
+        const report=await securityAudit({root,state:workflowState?.state,stateFile:file,userId});
+        return textResponse(JSON.stringify(report));
+      }
       case "start_task":
         return handleStartTask(args, workflowState);
       case "mark_bug_fixed":
@@ -223,6 +245,8 @@ export async function handleToolCall({
         return handleListFactoryProjects(args);
       case "create_factory_task":
         return handleCreateFactoryTask(args);
+      case "update_factory_task":
+        return handleUpdateFactoryTask(args);
       case "claim_factory_task":
         return handleClaimFactoryTask(args, { workflowState });
       case "sync_task_status":
@@ -231,9 +255,27 @@ export async function handleToolCall({
         throw new Error(`Unknown tool: ${name}`);
     }
   } catch (error) {
-    console.error("Tool handler error:", error);
+    safeLog('error', "Tool handler error:", error);
     return textResponse(
       "⚠️ Internal server error while processing the tool request. Please try again."
     );
   }
 }
+
+// Await every handler here so asynchronous rejections cannot bypass egress checks.
+export async function handleToolCall(context) {
+  try {
+    const {args,error}=context.normalizeRequestArgs(context.request.params.arguments);
+    if(error) return securityOutputFilter(textResponse(error));
+    assertSafeKnowledge({tool:context.request.params.name,args});
+    assertSafeToolCommand(context.request.params.name,args);
+    const response=await dispatchToolCall({...context,request:{...context.request,params:{...context.request.params,arguments:args}}});
+    return securityOutputFilter(response);
+  } catch(error) {
+    if(['SECRET_CONTENT_DENIED','UNSAFE_COMMAND_DENIED'].includes(error.code)) {
+      return {isError:true,content:[{type:'text',text:JSON.stringify({error:error.code,message:error.message,findings:error.findings})}]};
+    }
+    safeLog('error','Tool request failed',error);
+    return {isError:true,content:[{type:'text',text:'⚠️ Internal server error while processing the tool request.'}]};
+  }
+}

package/tools/handler-modules/shared.js

@@ -2,6 +2,7 @@ import fs from "fs/promises";
 import { existsSync } from "fs";
 import path from "path";
 import { fileURLToPath } from "url";
+import { sanitize } from '../../security/sanitizer.js';
 
 export const PROJECT_SUMMARY_FILENAME = "project-summary.json";
 
@@ -12,7 +13,7 @@ export const textResponse = (text) => ({
   content: [
     {
       type: "text",
-      text,
+      text: sanitize(text),
     },
   ],
 });
@@ -54,6 +55,7 @@ export function formatChecklist(checks) {
 }
 
 export function summarizeHistory(history, limit) {
+  history = sanitize(history);
   const recent = history.slice(-limit).reverse();
   if (recent.length === 0) {
     return null;
@@ -70,6 +72,7 @@ export function summarizeHistory(history, limit) {
 }
 
 export function generateProjectSummary(history) {
+  history = sanitize(history);
   if (!history || history.length === 0) {
     return "No workflow history available.";
   }
@@ -137,7 +140,7 @@ export async function loadProjectSummary(workflowState) {
   const summaryPath = path.join(path.dirname(workflowState.stateFile), PROJECT_SUMMARY_FILENAME);
   try {
     const data = await fs.readFile(summaryPath, "utf-8");
-    return JSON.parse(data);
+    return sanitize(JSON.parse(data));
   } catch (error) {
     if (error?.code === "ENOENT") {
       return null;

package/tools/handler-modules/status-handlers.js

@@ -14,7 +14,7 @@ export async function handleGetWorkflowStatus(workflowState) {
       const owner = disk.owner || {};
       sharedWarning =
         `\n\n⚠️ PERINGATAN: berkas state ini terakhir ditulis proses MCP LAIN ` +
-        `(${owner.token || "tanpa-token"}, pid ${owner.pid ?? "?"}).\n` +
+        `(${owner.processMarker || "tanpa-token"}, pid ${owner.pid ?? "?"}).\n` +
         `   State workflow dipakai bersama antar sesi di mesin ini.\n` +
         `   Periksa apakah "Task:" di atas benar-benar milik Anda SEBELUM commit_and_push.`;
       if (disk.currentPhase && disk.currentPhase !== "idle" && disk.taskDescription) {

package/tools/handler-modules/summary-handlers.js

@@ -1,5 +1,6 @@
 import fs from "fs/promises";
 import path from "path";
+import { sanitize } from '../../security/sanitizer.js';
 import { textResponse, generateProjectSummary, summarizeHistory, PROJECT_SUMMARY_FILENAME } from "./shared.js";
 
 export function handleProjectSummary(workflowState) {
@@ -11,7 +12,7 @@ export async function handleProjectSummaryData(workflowState) {
   const summaryPath = path.join(path.dirname(workflowState.stateFile), PROJECT_SUMMARY_FILENAME);
   try {
     const data = await fs.readFile(summaryPath, "utf-8");
-    const parsed = JSON.parse(data);
+    const parsed = sanitize(JSON.parse(data));
     const formatted = `🧠 Project Knowledge Summary (from persisted data)\n\n📊 Stats\n- Total tasks completed: ${parsed.totalTasks}\n- Recent task mix: ${Object.entries(parsed.taskTypes).map(([t, c]) => `${t}: ${c}`).join(", ")}\n- Last active: ${parsed.lastActive ? new Date(parsed.lastActive).toLocaleDateString() : "Never"}\n- Updated: ${new Date(parsed.updatedAt).toLocaleString()}\n\n📝 Recent tasks (last 5)\n${parsed.recentTasks.map((e, i) => `${i + 1}. ${e.description} (${e.type})`).join("\n")}`;
     return textResponse(formatted);
   } catch (error) {

package/tools/handler-modules/workflow-handlers.js

@@ -1,3 +1,4 @@
+import { classify } from '../../security/policy.js';
 import { textResponse, isReleaseSatisfied, isErrorResponse, ensurePrdExists } from "./shared.js";
 
 export async function handleStartTask(args, workflowState) {
@@ -8,6 +9,7 @@ export async function handleStartTask(args, workflowState) {
   const { archivedTask } = workflowState.reset({ archive: true });
 
   workflowState.state.currentPhase = "coding";
+  workflowState.state.classification = classify(args);
   workflowState.state.taskDescription = args.description;
   workflowState.state.taskType = args.type;
   workflowState.state.testsSkipped = false;

package/utils.js

@@ -3,6 +3,7 @@ const isWindows = process.platform === "win32";
 export function shellEscape(value) {
   const stringValue = String(value);
   if (isWindows) {
+    if(/["%!\r\n]/.test(stringValue)) throw new Error('Unsafe Windows shell argument denied; use a trusted operator session for complex messages.');
     // Windows cmd.exe requires double quotes for arguments with spaces.
     // Escape existing double quotes with backslash.
     return `"${stringValue.replace(/"/g, '\\"')}"`;

package/verify-build.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { safeLog } from './security/sanitizer.js';
 
 /**
  * Build Verification Script
@@ -22,16 +23,16 @@ let failedTests = 0;
 function test(name, fn) {
   try {
     fn();
-    console.log(`✓ ${name}`);
+    safeLog('info', `✓ ${name}`);
     passedTests++;
   } catch (error) {
-    console.error(`✗ ${name}`);
-    console.error(`  Error: ${error.message}`);
+    safeLog('error', `✗ ${name}`);
+    safeLog('error', `  Error: ${error.message}`);
     failedTests++;
   }
 }
 
-console.log('\n🧪 Running Build Verification Tests...\n');
+safeLog('info', '\n🧪 Running Build Verification Tests...\n');
 
 // Test 1: Build succeeds
 test('Build completes successfully', () => {
@@ -166,11 +167,11 @@ test('Vertical monitor responsive design', () => {
   }
 });
 
-console.log(`\n📊 Test Results: ${passedTests} passed, ${failedTests} failed\n`);
+safeLog('info', `\n📊 Test Results: ${passedTests} passed, ${failedTests} failed\n`);
 
 if (failedTests > 0) {
   process.exit(1);
 } else {
-  console.log('✅ All tests passed!\n');
+  safeLog('info', '✅ All tests passed!\n');
   process.exit(0);
 }

package/vite.config.js

@@ -1,6 +1,7 @@
 import { defineConfig } from 'vite';
 import { fileURLToPath } from 'url';
 import path from 'path';
+import { builtinModules } from 'node:module';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -17,6 +18,9 @@ export default defineConfig({
         format: 'es',
       },
       external: [
+        ...builtinModules,
+        ...builtinModules.map(name=>`node:${name}`),
+        'pg','mysql2','mysql2/promise','better-sqlite3',
         '@modelcontextprotocol/sdk',
         // dotenv ships CommonJS only (dist/index.cjs). Bundling it into an ES
         // module leaks its `require.main === module` guard, which throws

package/workflow-state.js

@@ -1,6 +1,9 @@
+import { safeLog } from './security/sanitizer.js';
 import fs from "fs/promises";
 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync } from "fs";
 import path from "path";
+import { assertSafeKnowledge } from './security/policy.js';
+import { sanitize } from './security/sanitizer.js';
 import { fileURLToPath } from "url";
 
 const __filename = fileURLToPath(import.meta.url);
@@ -30,6 +33,14 @@ let cachedUserStateDir = null;
  */
 const PROCESS_TOKEN = `proc-${process.pid}-${Math.random().toString(16).slice(2, 10)}`;
 
+function migrateOwnerMetadata(value) {
+  if(value?.owner && !value.owner.processMarker && /^proc-[A-Za-z0-9-]+$/.test(value.owner.token || '')) {
+    value.owner.processMarker=value.owner.token;
+    delete value.owner.token;
+  }
+  return value;
+}
+
 function generateUserId() {
   const timestamp = Date.now().toString(16);
   const randomSuffix = Math.random().toString(16).slice(2, 10);
@@ -249,6 +260,8 @@ async function migrateLegacyStateFile(targetPath) {
   }
 
   await fs.mkdir(stateDir, { recursive: true });
+  const migrated = migrateOwnerMetadata(JSON.parse(await fs.readFile(legacyPath, 'utf8')));
+  assertSafeKnowledge(migrated);
 
   try {
     await fs.access(targetPath);
@@ -258,7 +271,8 @@ async function migrateLegacyStateFile(targetPath) {
     // New state file doesn't exist yet; fall through to migrate.
   }
 
-  await fs.rename(legacyPath, targetPath);
+  await fs.writeFile(targetPath, JSON.stringify(migrated, null, 2), { flag: 'wx' });
+  await fs.unlink(legacyPath);
 }
 
 function isRootPath(candidate) {
@@ -338,6 +352,7 @@ async function ensureCompatibilityLinks(primaryPath) {
   if (!(await pathExists(resolvedPrimary))) {
     return;
   }
+  assertSafeKnowledge(JSON.parse(await fs.readFile(resolvedPrimary, 'utf8')));
 
   const compatibilityPaths = getCompatibilityPaths(resolvedPrimary);
 
@@ -413,18 +428,38 @@ async function ensureCompatibilityLinks(primaryPath) {
  *
  * MENGAPA ADA
  * -----------
- * Berkas state dulu disimpan per USER, jadi empat proses MCP berbagi satu
+ * Berkas state dulu disimpan per USER, jadi beberapa proses MCP berbagi satu
  * `workflow-state.json`. Akibatnya `start_task` di satu sesi mengganti task
  * sesi lain di tengah jalan, dan gerbang kualitas (ready check, tests, docs)
  * ikut dibagi sehingga sesi B bisa memakai hasil sesi A untuk commit.
  *
  * Sekarang task dan gerbangnya milik SESI; `history` tetap milik PROYEK.
  *
- * Urutannya sengaja: env eksplisit dulu (untuk tes dan pemanggil lain), lalu
- * id sesi editor, lalu proses. Jatuh ke proses membuat identitas tetap stabil
- * walau modul di-reload dalam proses yang sama.
+ * MENGAPA BUKAN ENV SAJA
+ * ----------------------
+ * Percobaan pertama membaca `OPENCODE_SESSION_ID` dari environment. OpenCode
+ * tidak men-set variabel itu, sehingga hampir semua berkas jatuh ke
+ * `pid-<pid>`; karena satu proses MCP dipakai bergantian oleh beberapa sesi,
+ * sesi-sesi itu tetap berbagi satu berkas dan saling menimpa.
+ *
+ * OpenCode v2 mengirim identitas sesi per panggilan di
+ * `CallToolRequest.params._meta["ai.opencode/sessionID"]`. Itu sumber utama
+ * sekarang; env tetap dibaca sebagai cadangan untuk tes dan pemanggil lain.
  */
-export function resolveSessionKey(env = process.env) {
+export const SESSION_META_KEY = "ai.opencode/sessionID";
+
+/** Mengambil identitas sesi dari request metadata MCP, atau null. */
+export function sessionKeyFromRequest(request) {
+  const value = request?.params?._meta?.[SESSION_META_KEY];
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed === "" ? null : trimmed;
+}
+
+export function resolveSessionKey(env = process.env, explicitSessionId = null) {
+  const fromRequest = typeof explicitSessionId === "string" ? explicitSessionId.trim() : "";
+  if (fromRequest) return sanitizeSessionKey(fromRequest);
+
   for (const candidate of [env.DEV_WORKFLOW_SESSION_ID, env.OPENCODE_SESSION_ID, env.CLIENT_SESSION_ID]) {
     const value = typeof candidate === "string" ? candidate.trim() : "";
     if (value) return sanitizeSessionKey(value);
@@ -438,8 +473,8 @@ function sanitizeSessionKey(value) {
 }
 
 /** Nama berkas state untuk sesi ini, di direktori user yang sama. */
-function sessionStateFilename(env = process.env) {
-  return `workflow-state.${resolveSessionKey(env)}.json`;
+function sessionStateFilename(env = process.env, explicitSessionId = null) {
+  return `workflow-state.${resolveSessionKey(env, explicitSessionId)}.json`;
 }
 
 /**
@@ -486,7 +521,7 @@ export function resolveProjectRootForState(stateFilePath) {
   return path.dirname(resolved);
 }
 
-export function resolveStateFile() {
+export function resolveStateFile({ sessionId = null } = {}) {
   const customPath = process.env.DEV_WORKFLOW_STATE_FILE;
   if (customPath) {
     return path.resolve(customPath);
@@ -516,7 +551,7 @@ export function resolveStateFile() {
 
   const stateDir = path.join(projectRoot, STATE_DIR);
   const userDir = getUserScopedDir(stateDir);
-  return path.join(userDir, sessionStateFilename());
+  return path.join(userDir, sessionStateFilename(process.env, sessionId));
 }
 
 export class WorkflowState {
@@ -525,6 +560,48 @@ export class WorkflowState {
     // History milik proyek, state milik sesi. Dalam tata letak nyata keduanya
     // berkas berbeda; untuk path eksplisit keduanya menunjuk berkas yang sama.
     this.historyFile = resolveHistoryFile(stateFilePath);
+    this.state = {
+      currentPhase: "idle",
+      classification: "INTERNAL",
+      taskDescription: "",
+      bugFixed: false,
+      testsCreated: false,
+      testsPassed: false,
+      testsSkipped: false,
+      testsSkippedReason: "",
+      documentationCreated: false,
+      readyToCommit: false,
+      readyCheckCompleted: false,
+      released: false,
+      releaseSkipped: false,
+      releaseSkippedReason: "",
+      releaseCommand: "",
+      releaseNotes: "",
+      commitAndPushCompleted: false,
+      lastCommitMessage: "",
+      lastPushBranch: "",
+      featureFlowCreated: false,
+      featureFlowDescription: "",
+      history: [],
+      taskType: "",
+    };
+  }
+
+  /**
+   * Berpindah ke state milik sesi tertentu.
+   *
+   * Satu proses MCP bisa melayani beberapa sesi bergantian, jadi state harus
+   * ditentukan per panggilan - bukan sekali saat proses start. Mengembalikan
+   * true bila berkas benar-benar berpindah.
+   */
+  async useSession(sessionId) {
+    const target = resolveStateFile({ sessionId });
+    if (target === this.stateFile) return false;
+
+    this.stateFile = target;
+    this.historyFile = resolveHistoryFile(target);
+    // Mulai dari state bersih, lalu muat milik sesi itu. Menyalin state sesi
+    // sebelumnya akan membuat sesi baru mewarisi gerbang kualitas sesi lain.
     this.state = {
       currentPhase: "idle",
       taskDescription: "",
@@ -549,13 +626,15 @@ export class WorkflowState {
       history: [],
       taskType: "",
     };
+    await this.load();
+    return true;
   }
 
   async load() {
     await migrateLegacyStateFile(this.stateFile);
     try {
       const data = await fs.readFile(this.stateFile, "utf-8");
-      const parsed = JSON.parse(data);
+      const parsed = sanitize(migrateOwnerMetadata(JSON.parse(data)));
       this.state = {
         ...this.state,
         ...parsed,
@@ -663,11 +742,14 @@ export class WorkflowState {
       }
     }
 
+    const payload = { ...shared, history: merged };
+    assertSafeKnowledge(payload);
     await fs.mkdir(path.dirname(this.historyFile), { recursive: true });
-    await fs.writeFile(this.historyFile, JSON.stringify({ ...shared, history: merged }, null, 2));
+    await fs.writeFile(this.historyFile, JSON.stringify(payload, null, 2));
   }
 
   async ensurePrimaryFile() {
+    assertSafeKnowledge(this.state);
     let created = false;
     try {
       await fs.access(this.stateFile);
@@ -685,9 +767,11 @@ export class WorkflowState {
   }
 
   async save() {
+    assertSafeKnowledge(this.state);
     const reconciled = await this.reconcileWithDisk();
+    assertSafeKnowledge(this.state);
     this.state.owner = {
-      token: PROCESS_TOKEN,
+      processMarker: PROCESS_TOKEN,
       pid: process.pid,
       updatedAt: new Date().toISOString(),
     };
@@ -709,7 +793,7 @@ export class WorkflowState {
   async readDiskState() {
     try {
       const data = await fs.readFile(this.stateFile, "utf-8");
-      return JSON.parse(data);
+      return sanitize(migrateOwnerMetadata(JSON.parse(data)));
     } catch {
       return null;
     }
@@ -717,7 +801,7 @@ export class WorkflowState {
 
   /** True kalau berkas di disk terakhir ditulis proses MCP lain. */
   isForeignWrite(diskState) {
-    const token = diskState?.owner?.token;
+    const token = diskState?.owner?.processMarker;
     return typeof token === "string" && token.length > 0 && token !== PROCESS_TOKEN;
   }
 
@@ -768,7 +852,7 @@ export class WorkflowState {
       return result;
     }
 
-    result.foreignToken = disk.owner.token;
+    result.foreignToken = disk.owner.processMarker;
 
     const hasRunningTask =
       typeof disk.taskDescription === "string" &&
@@ -788,6 +872,7 @@ export class WorkflowState {
     }
 
     this.state.history.push({
+      classification: disk.classification || "INTERNAL",
       taskDescription: disk.taskDescription,
       taskType: disk.taskType || "other",
       commitMessage: disk.lastCommitMessage || "",
@@ -796,7 +881,7 @@ export class WorkflowState {
       dropReason:
         "Ditimpa proses agen lain: state workflow dipakai bersama antar sesi di mesin ini",
       interruptedAtPhase: disk.currentPhase,
-      interruptedBy: disk.owner.token,
+      interruptedBy: disk.owner.processMarker,
       timestamp: new Date().toISOString(),
     });
     result.preservedTask = disk.taskDescription;
@@ -804,13 +889,16 @@ export class WorkflowState {
   }
 
   async updateProjectSummary() {
+    assertSafeKnowledge(this.state);
     const summaryPath = path.join(path.dirname(this.stateFile), PROJECT_SUMMARY_FILENAME);
     const summary = this.generateProjectSummaryData();
+    assertSafeKnowledge(summary);
     await fs.mkdir(path.dirname(summaryPath), { recursive: true });
     await fs.writeFile(summaryPath, JSON.stringify(summary, null, 2));
   }
 
   async syncToDatabase() {
+    assertSafeKnowledge(this.state);
     try {
       const { insertHistoryEntry, updateSummaryForUser, saveState } = await import("./db/index.js");
       const userId = getCurrentUserId();
@@ -826,7 +914,7 @@ export class WorkflowState {
       await saveState(userId, projectRoot, this.state);
     } catch (error) {
       // Database sync failed; log it but don't crash
-      console.error("Database sync failed:", error.message);
+      safeLog('error', "Database sync failed:", error.message);
     }
   }
 
@@ -892,6 +980,7 @@ export class WorkflowState {
     if (archive && hasRunningTask) {
       archivedTask = previous.taskDescription;
       history.push({
+        classification: previous.classification || "INTERNAL",
         taskDescription: previous.taskDescription,
         taskType: previous.taskType || "other",
         commitMessage: previous.lastCommitMessage || "",
@@ -906,6 +995,7 @@ export class WorkflowState {
 
     this.state = {
       currentPhase: "idle",
+      classification: "INTERNAL",
       taskDescription: "",
       bugFixed: false,
       testsCreated: false,
@@ -934,6 +1024,7 @@ export class WorkflowState {
 
   addToHistory(entry) {
     this.state.history.push({
+      classification: this.state.classification || "INTERNAL",
       ...entry,
       timestamp: new Date().toISOString(),
     });