@swarmcraftai/cli 0.3.0 → 0.4.1

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to the SwarmCraft CLI are documented in this file.
 
+## 0.4.1
+
+- Conceals passwords, authenticator codes, and recovery codes during interactive login instead of echoing secret input in the terminal.
+- Completes enrolled MFA in the same login attempt, with an explicit recovery-code fallback that does not require placing credentials in command arguments.
+- Refreshes the generated Deep Discovery guidance for exception-first review, coverage-based prototyping, source gathering, product disposition, and temporary replacement integrations.
+
+## 0.4.0
+
+- Seeds a collaborative plan-first workflow that turns approved phases into SwarmCraft tasks while keeping planning and implementation as explicit, reviewable steps.
+- Adds risk-based security, technical-and-human change management, and high-level testing-posture report contracts to generated SwarmCraft guidance.
+- Guides Deep Discovery users into the expanded report workflow and carries the new report lifecycle through generated repository files.
+- Hardens run and support artifacts with contained workspace paths, atomic resume manifests, shell-free process execution, and recursive secret redaction.
+- Refactors command parsing, workflow execution, and one-shot board synchronization into focused modules without changing the documented command surface.
+
 ## 0.3.0
 
 - Completes the clean cutover to tasks across API requests, local run manifests, packet metadata, and sync behavior.

package/README.md

@@ -4,7 +4,7 @@ SwarmCraft CLI prepares a local repository for a SwarmCraft project board and ru
 
 Use it to authenticate with SwarmCraft, list available projects, seed workspace guidance files, materialize task packets, run one-shot implementation passes, resume or inspect runs, and create support bundles.
 
-Deep Discovery uses the provider-neutral `@swarmcraft/discovery-package-contract` for exact-text packaging, canonical hashing, and local validation. The CLI never asks an AI provider to generate transport JSON or tasks and never contains SwarmCraft's private seven-slice compiler.
+Deep Discovery uses the provider-neutral `@swarmcraft/discovery-package-contract` for exact-text packaging, canonical hashing, and local validation. The CLI never asks an AI provider to generate transport JSON or tasks and never contains SwarmCraft's private server-side catalogue compiler.
 
 ## Package Shape
 
@@ -15,6 +15,19 @@ Deep Discovery uses the provider-neutral `@swarmcraft/discovery-package-contract
 - Public package contents: bundled CLI runtime, README, package metadata, and license
 - Shared workspace packages are bundled into the CLI artifact; customers do not install `@swarmcraft/packet-workflow` or `@swarmcraft/repo-seed` directly.
 
+## Implemented Module Ownership
+
+- `src/main.ts` is the executable composition root: it dispatches parsed commands, prompts where compatibility requires it, prints outcomes, and selects exit behavior.
+- `src/commands/command-catalog.ts` owns stable command names, usage text, and help lookup; `src/commands/arguments.ts` owns syntax-only argument parsing and repeated option access.
+- `src/apiClient.ts` maps API transport contracts; `src/sessionStore.ts` is the only owner of the owner-only local credential file.
+- `src/workspace.ts` owns workspace validation and contained file/git operations. `src/runtime/workspace-paths.ts` rejects absolute, traversal, escaped run, manifest, log, and support-artifact targets.
+- `src/runtime/process.ts` provides shell-free argument-array execution. Only `runTrustedShellAgentCommand` may invoke a shell for a deliberately supplied custom-agent template; API content and credentials must never be interpolated into it.
+- `src/bootstrap.ts`, `src/discovery.ts`, and `src/oneShot.ts` compose the seed, immutable discovery-package, and packet execution workflows.
+- `src/workflows/agent-execution.ts` owns approved credential injection, trusted template quoting, and optional cost capture. `src/artifacts/run-manifest.ts` owns contained paths and atomic resume-manifest persistence.
+- `src/supportBundle.ts` exposes only allow-listed delegation facts and recursively redacts secret-bearing keys.
+
+All customer run artifacts remain below `.swarmcraft/runs/<run-id>`. Workspace-relative reads, writes, removals, packet paths, discovery sources, logs, manifests, diagnostics, and support bundles are resolved through the containment boundary before access.
+
 ## Distribution
 
 The first public distribution channel is npm:
@@ -53,6 +66,8 @@ pnpm check
 pnpm release:smoke
 ```
 
+`pnpm check` is the package ready-for-review gate and includes lint, type checking, unit tests, a production bundle, and the bundled help smoke. Before release, also run `pnpm release:smoke`; the root `pnpm standards:cli` alias runs both.
+
 ## Current Commands
 
 Core commands:
@@ -72,6 +87,8 @@ swarmcraft status --run <run-id> --workspace <path> --delegation <delegation-id>
 swarmcraft delegation end --delegation <delegation-id>
 ```
 
+Interactive login conceals password input. When MFA is enrolled, the same command securely prompts for the current authenticator code and offers a recovery-code fallback; secrets do not need to be placed in the command line.
+
 `swarmcraft init` validates the workspace git state, seeds the shared SwarmCraft repo guidance files, materializes non-done task packets, links those packets back to SwarmCraft, and prints the next commands.
 
 The task contract is a clean cutover from the earlier project-ticket format. Upgrade the API, CLI, and VS Code extension together; old `ticketId` packet files and `--ticket` flags are not accepted. Preserve any owner-authored notes, remove the retired generated packet files, and run `swarmcraft init` again to materialize current `taskId` packets from the board.