@wrongstack/cli 0.5.3 → 0.5.5

package/dist/index.js

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 import * as path20 from 'path';
-import { color, allServers, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, ToolRegistry, createContextManagerTool, EventBus, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, SlashCommandRegistry, loadPlugins, createDelegateTool, FLEET_ROSTER, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, makeDirectorSessionFactory, Director, DefaultMultiAgentCoordinator, makeAgentSubagentRunner, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, AutoApprovePermissionPolicy, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, formatTodosList, emptyPlan, clearPlan, savePlan, removePlanItem, formatPlan, setPlanItemStatus, addPlanItem, SpecStore, TaskGraphStore, SpecVersioning, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, InputBuilder, projectHash, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, DefaultPluginAPI } from '@wrongstack/core';
-import { createRequire } from 'module';
+import { join } from 'path';
 import * as fs3 from 'fs/promises';
+import { readdir, readFile } from 'fs/promises';
+import { color, allServers, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, ToolRegistry, createContextManagerTool, EventBus, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, SlashCommandRegistry, loadPlugins, createDelegateTool, FLEET_ROSTER, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, makeDirectorSessionFactory, Director, DefaultMultiAgentCoordinator, makeAgentSubagentRunner, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, AutoApprovePermissionPolicy, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, formatTodosList, emptyPlan, clearPlan, savePlan, removePlanItem, formatPlan, setPlanItemStatus, addPlanItem, SpecStore, TaskGraphStore, SpecVersioning, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, InputBuilder, projectHash, defaultOrchestrator, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, DefaultPluginAPI } from '@wrongstack/core';
+import { createRequire } from 'module';
 import * as os6 from 'os';
 import os6__default from 'os';
 import * as crypto from 'crypto';
@@ -61,28 +63,37 @@ __export(sdd_exports, {
   trySaveSpecFromAIOutput: () => trySaveSpecFromAIOutput,
   trySaveTasksFromAIOutput: () => trySaveTasksFromAIOutput
 });
+function getSessionState(ctx) {
+  if (!ctx) {
+    return sddState;
+  }
+  let state = ctx.meta[SDD_META_KEY];
+  if (!state) {
+    state = new SDDState();
+    ctx.meta[SDD_META_KEY] = state;
+  }
+  return state;
+}
 function getActiveSDDContext() {
-  if (!activeBuilder) return null;
-  const session = activeBuilder.getSession();
-  if (session.phase === "done") return null;
-  return activeBuilder.getAIPrompt();
+  return sddState.getContext();
 }
 function getActiveSDDPhase() {
-  if (!activeBuilder) return null;
-  return activeBuilder.getPhase();
+  return sddState.getPhase();
 }
 async function trySaveSpecFromAIOutput(aiOutput) {
-  if (!activeBuilder) return false;
-  const spec = activeBuilder.tryParseSpecFromOutput(aiOutput);
+  const builder = sddState.getBuilder();
+  if (!builder) return false;
+  const spec = builder.tryParseSpecFromOutput(aiOutput);
   if (!spec) return false;
-  activeBuilder.setSpec(spec);
+  builder.setSpec(spec);
   return true;
 }
 async function trySaveTasksFromAIOutput(aiOutput) {
-  if (!activeBuilder) return false;
-  const session = activeBuilder.getSession();
+  const builder = sddState.getBuilder();
+  if (!builder) return false;
+  const session = builder.getSession();
   if (!session.spec) return false;
-  const json = activeBuilder.extractJSONArray(aiOutput);
+  const json = builder.extractJSONArray(aiOutput);
   if (!json) return false;
   let tasks;
   try {
@@ -113,15 +124,16 @@ async function trySaveTasksFromAIOutput(aiOutput) {
       tags
     });
   }
-  activeTaskStore = store;
-  activeTaskTracker = tracker;
-  activeTaskGraphId = graph.id;
-  activeBuilder.setTaskGraphId(graph.id);
+  sddState.setTaskStore(store);
+  sddState.setTaskTracker(tracker);
+  sddState.setTaskGraphId(graph.id);
+  builder.setTaskGraphId(graph.id);
   return true;
 }
 function getTaskProgress() {
-  if (!activeTaskTracker) return null;
-  const progress = activeTaskTracker.getProgress();
+  const tracker = sddState.getTaskTracker();
+  if (!tracker) return null;
+  const progress = tracker.getProgress();
   return {
     total: progress.total,
     completed: progress.completed,
@@ -130,8 +142,9 @@ function getTaskProgress() {
   };
 }
 function getTaskListText() {
-  if (!activeTaskTracker) return null;
-  const nodes = activeTaskTracker.getAllNodes();
+  const tracker = sddState.getTaskTracker();
+  if (!tracker) return null;
+  const nodes = tracker.getAllNodes();
   if (nodes.length === 0) return null;
   const lines = nodes.map((n, i) => {
     const status = n.status === "completed" ? "\u2705" : n.status === "in_progress" ? "\u{1F504}" : "\u23F3";
@@ -140,18 +153,20 @@ function getTaskListText() {
   return lines.join("\n");
 }
 function markTaskCompleted(taskTitle) {
-  if (!activeTaskTracker) return false;
-  const nodes = activeTaskTracker.getAllNodes({ status: ["pending", "in_progress"] });
+  const tracker = sddState.getTaskTracker();
+  if (!tracker) return false;
+  const nodes = tracker.getAllNodes({ status: ["pending", "in_progress"] });
   const match = nodes.find(
     (n) => n.title.toLowerCase().includes(taskTitle.toLowerCase()) || taskTitle.toLowerCase().includes(n.title.toLowerCase())
   );
   if (!match) return false;
-  activeTaskTracker.updateNodeStatus(match.id, "completed");
+  tracker.updateNodeStatus(match.id, "completed");
   return true;
 }
 function autoDetectTaskCompletion(aiOutput) {
-  if (!activeTaskTracker) return 0;
-  const pending = activeTaskTracker.getAllNodes({ status: ["pending", "in_progress"] });
+  const tracker = sddState.getTaskTracker();
+  if (!tracker) return 0;
+  const pending = tracker.getAllNodes({ status: ["pending", "in_progress"] });
   if (pending.length === 0) return 0;
   let completed = 0;
   const lines = aiOutput.split("\n");
@@ -164,7 +179,7 @@ function autoDetectTaskCompletion(aiOutput) {
       if (!Number.isNaN(num) && num >= 1 && num <= pending.length) {
         const node = pending[num - 1];
         if (node && node.status !== "completed") {
-          activeTaskTracker.updateNodeStatus(node.id, "completed");
+          tracker.updateNodeStatus(node.id, "completed");
           completed++;
         }
       } else {
@@ -172,7 +187,7 @@ function autoDetectTaskCompletion(aiOutput) {
           (n) => n.title.toLowerCase().includes(target.toLowerCase()) || target.toLowerCase().includes(n.title.toLowerCase())
         );
         if (match && match.status !== "completed") {
-          activeTaskTracker.updateNodeStatus(match.id, "completed");
+          tracker.updateNodeStatus(match.id, "completed");
           completed++;
         }
       }
@@ -185,7 +200,7 @@ function autoDetectTaskCompletion(aiOutput) {
         (n) => n.title.toLowerCase().includes(title.toLowerCase()) || title.toLowerCase().includes(n.title.toLowerCase())
       );
       if (match && match.status !== "completed") {
-        activeTaskTracker.updateNodeStatus(match.id, "completed");
+        tracker.updateNodeStatus(match.id, "completed");
         completed++;
       }
       continue;
@@ -196,7 +211,7 @@ function autoDetectTaskCompletion(aiOutput) {
       if (num >= 1 && num <= pending.length) {
         const node = pending[num - 1];
         if (node && node.status !== "completed") {
-          activeTaskTracker.updateNodeStatus(node.id, "completed");
+          tracker.updateNodeStatus(node.id, "completed");
           completed++;
         }
       }
@@ -209,7 +224,7 @@ function autoDetectTaskCompletion(aiOutput) {
         (n) => n.title.toLowerCase().includes(title.toLowerCase()) || title.toLowerCase().includes(n.title.toLowerCase())
       );
       if (match && match.status !== "completed") {
-        activeTaskTracker.updateNodeStatus(match.id, "completed");
+        tracker.updateNodeStatus(match.id, "completed");
         completed++;
       }
     }
@@ -217,27 +232,29 @@ function autoDetectTaskCompletion(aiOutput) {
   return completed;
 }
 function trySaveImplementationPlan(aiOutput) {
-  if (!activeBuilder) return false;
-  const session = activeBuilder.getSession();
+  const builder = sddState.getBuilder();
+  if (!builder) return false;
+  const session = builder.getSession();
   if (session.phase !== "implementation") return false;
   const jsonMatch = aiOutput.match(/```json\s*\[/);
   if (jsonMatch?.index && jsonMatch.index > 0) {
     const plan = aiOutput.substring(0, jsonMatch.index).trim();
     if (plan.length > 50) {
-      activeBuilder.setImplementation(plan);
+      builder.setImplementation(plan);
       return true;
     }
   }
   if (aiOutput.length > 100 && !aiOutput.includes("```json")) {
-    activeBuilder.setImplementation(aiOutput.trim());
+    builder.setImplementation(aiOutput.trim());
     return true;
   }
   return false;
 }
 function getActiveBuilder() {
-  return activeBuilder;
+  return sddState.getBuilder();
 }
 function buildSddCommand(opts) {
+  getSessionState(opts.context);
   return {
     name: "sdd",
     description: "AI-driven SDD: /sdd [new|approve|execute|cancel|status|list|show|templates]",
@@ -260,11 +277,10 @@ function buildSddCommand(opts) {
         case "create": {
           const forceFlag = rest.includes("--force") || rest.includes("-f");
           const title = rest.filter((a) => !a.startsWith("-")).join(" ").trim() || "Untitled Feature";
-          if (!activeBuilder && !forceFlag) {
+          if (!sddState.getBuilder() && !forceFlag) {
             const sessionPath = path20.join(projectRoot, ".wrongstack", "sdd-session.json");
             try {
-              const fsp = await import('fs/promises');
-              await fsp.access(sessionPath);
+              await fs3.access(sessionPath);
               const projectContext2 = await gatherProjectContext(projectRoot);
               const tempBuilder = new AISpecBuilder({
                 store: specStore,
@@ -290,19 +306,18 @@ function buildSddCommand(opts) {
             } catch {
             }
           }
-          activeTaskStore = null;
-          activeTaskTracker = null;
-          activeTaskGraphId = null;
+          sddState.clearTaskState();
           const projectContext = await gatherProjectContext(projectRoot);
-          activeBuilder = new AISpecBuilder({
+          sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
             minQuestions: 2,
             maxQuestions: 10,
             sessionPath: path20.join(projectRoot, ".wrongstack", "sdd-session.json")
-          });
-          activeBuilder.startSession(title);
-          const aiPrompt = activeBuilder.getAIPrompt();
+          }));
+          const builder = sddState.getBuilder();
+          builder.startSession(title);
+          const aiPrompt = builder.getAIPrompt();
           return {
             message: [
               `\u2554\u2550\u2550\u2550 SDD: AI Spec Builder \u2550\u2550\u2550\u2557`,
@@ -326,14 +341,15 @@ Start the specification interview for "${title}". Ask your first contextual ques
         case "approve":
         case "ok":
         case "confirm": {
-          if (!activeBuilder) {
+          const builder = sddState.getBuilder();
+          if (!builder) {
             return {
               message: "No active SDD session. Use /sdd new to start one."
             };
           }
-          const phase = activeBuilder.getSession().phase;
+          const phase = builder.getSession().phase;
           if (phase === "questioning") {
-            const sddCtx = activeBuilder.getAIPrompt();
+            const sddCtx = builder.getAIPrompt();
             return {
               message: "No spec generated yet. Generating now...",
               runText: `[SDD SESSION ACTIVE]
@@ -345,14 +361,14 @@ Generate the complete specification now based on the conversation so far.`
             };
           }
           if (phase === "spec_review") {
-            const spec = activeBuilder.getSession().spec;
+            const spec = builder.getSession().spec;
             if (!spec) {
               return { message: "No spec to approve." };
             }
-            await activeBuilder.saveSpec();
+            await builder.saveSpec();
             versioning.recordVersion(spec, "Initial spec approved");
-            activeBuilder.approve();
-            const implPrompt = activeBuilder.getAIPrompt();
+            builder.approve();
+            const implPrompt = builder.getAIPrompt();
             return {
               message: [
                 `\u2705 Spec "${spec.title}" approved and saved!`,
@@ -370,8 +386,8 @@ Generate the implementation plan and tasks for the approved spec.`
             };
           }
           if (phase === "task_review") {
-            activeBuilder.approve();
-            const execPrompt = activeBuilder.getAIPrompt();
+            builder.approve();
+            const execPrompt = builder.getAIPrompt();
             return {
               message: "\u2705 Tasks approved! The AI will now execute them one by one.",
               runText: `[SDD SESSION ACTIVE]
@@ -389,18 +405,19 @@ Start executing the tasks one by one.`
         // ── Task Execution ─────────────────────────────────────────────────
         case "execute":
         case "run": {
-          if (!activeBuilder) {
+          const runBuilder = sddState.getBuilder();
+          if (!runBuilder) {
             return {
               message: "No active SDD session. Use /sdd new to start one."
             };
           }
-          const session = activeBuilder.getSession();
+          const session = runBuilder.getSession();
           if (session.phase !== "executing" && session.phase !== "task_review") {
             return {
               message: `Cannot execute in phase "${session.phase}". Use /sdd approve first.`
             };
           }
-          const execPrompt = activeBuilder.getAIPrompt();
+          const execPrompt = runBuilder.getAIPrompt();
           return {
             message: "\u26A1 Starting task execution. The AI will execute tasks one by one.",
             runText: `[SDD SESSION ACTIVE]
@@ -413,34 +430,36 @@ Start executing the tasks one by one.`
         }
         case "plan":
         case "impl": {
-          if (!activeBuilder) {
+          const planBuilder = sddState.getBuilder();
+          if (!planBuilder) {
             return { message: "No active SDD session. Use /sdd new to start one." };
           }
-          const session = activeBuilder.getSession();
-          if (!session.implementation) {
+          const planSession = planBuilder.getSession();
+          if (!planSession.implementation) {
             return {
-              message: session.phase === "implementation" ? "No implementation plan yet. The AI will generate it after /sdd approve." : "No implementation plan in this session."
+              message: planSession.phase === "implementation" ? "No implementation plan yet. The AI will generate it after /sdd approve." : "No implementation plan in this session."
             };
           }
           return {
             message: [
               "\u2550\u2550\u2550 Implementation Plan \u2550\u2550\u2550",
               "",
-              session.implementation
+              planSession.implementation
             ].join("\n")
           };
         }
         case "spec": {
-          if (!activeBuilder) {
+          const specBuilder = sddState.getBuilder();
+          if (!specBuilder) {
             return { message: "No active SDD session. Use /sdd new to start one." };
           }
-          const session = activeBuilder.getSession();
-          if (!session.spec) {
+          const specSession = specBuilder.getSession();
+          if (!specSession.spec) {
             return {
-              message: session.phase === "questioning" ? "No spec generated yet. Keep answering the AI's questions." : "No spec in this session."
+              message: specSession.phase === "questioning" ? "No spec generated yet. Keep answering the AI's questions." : "No spec in this session."
             };
           }
-          const spec = session.spec;
+          const spec = specSession.spec;
           const lines = [
             `\u2550\u2550\u2550 Current Spec \u2550\u2550\u2550`,
             "",
@@ -462,14 +481,15 @@ Start executing the tasks one by one.`
         }
         case "tasks":
         case "task": {
-          if (!activeTaskTracker) {
+          const taskTracker = sddState.getTaskTracker();
+          if (!taskTracker) {
             return { message: "No tasks generated yet. Use /sdd new to start." };
           }
-          const nodes = activeTaskTracker.getAllNodes();
+          const nodes = taskTracker.getAllNodes();
           if (nodes.length === 0) {
             return { message: "No tasks in the current graph." };
           }
-          const progress = activeTaskTracker.getProgress();
+          const progress = taskTracker.getProgress();
           const lines = [
             `\u2550\u2550\u2550 Task List (${progress.completed}/${progress.total} done) \u2550\u2550\u2550`,
             ""
@@ -486,19 +506,20 @@ Start executing the tasks one by one.`
         }
         case "done":
         case "complete": {
-          if (!activeTaskTracker) {
+          const doneTracker = sddState.getTaskTracker();
+          if (!doneTracker) {
             return { message: "No tasks to complete." };
           }
           if (!restJoined) {
             return { message: "Usage: /sdd done <task title or number>" };
           }
-          const nodes = activeTaskTracker.getAllNodes({ status: ["pending", "in_progress"] });
+          const nodes = doneTracker.getAllNodes({ status: ["pending", "in_progress"] });
           const num = Number(restJoined);
           let matched = false;
           if (!Number.isNaN(num) && num >= 1 && num <= nodes.length) {
             const node = nodes[num - 1];
             if (node) {
-              activeTaskTracker.updateNodeStatus(node.id, "completed");
+              doneTracker.updateNodeStatus(node.id, "completed");
               matched = true;
             }
           }
@@ -507,24 +528,25 @@ Start executing the tasks one by one.`
               (n) => n.title.toLowerCase().includes(restJoined.toLowerCase()) || restJoined.toLowerCase().includes(n.title.toLowerCase())
             );
             if (match) {
-              activeTaskTracker.updateNodeStatus(match.id, "completed");
+              doneTracker.updateNodeStatus(match.id, "completed");
               matched = true;
             }
           }
           if (!matched) {
             return { message: `No pending task matching "${restJoined}".` };
           }
-          const remaining = activeTaskTracker.getProgress();
+          const remaining = doneTracker.getProgress();
           return {
             message: `\u2705 Task completed! ${remaining.completed}/${remaining.total} done (${remaining.percentComplete}%)`
           };
         }
         // ── Session Management ─────────────────────────────────────────────
         case "status": {
-          if (!activeBuilder) {
+          const statusBuilder = sddState.getBuilder();
+          if (!statusBuilder) {
             return { message: "No active SDD session." };
           }
-          const session = activeBuilder.getSession();
+          const session = statusBuilder.getSession();
           const phaseEmoji = {
             questioning: "\u2753",
             spec_review: "\u{1F4CB}",
@@ -562,18 +584,16 @@ Start executing the tasks one by one.`
           const sessionPath = path20.join(projectRoot, ".wrongstack", "sdd-session.json");
           let deletedFromDisk = false;
           try {
-            const fsp = await import('fs/promises');
-            await fsp.unlink(sessionPath);
+            await fs3.unlink(sessionPath);
             deletedFromDisk = true;
           } catch {
           }
-          if (activeBuilder) {
-            const title = activeBuilder.getSession().title;
-            await activeBuilder.deleteSession();
-            activeBuilder = null;
-            activeTaskStore = null;
-            activeTaskTracker = null;
-            activeTaskGraphId = null;
+          const cancelBuilder = sddState.getBuilder();
+          if (cancelBuilder) {
+            const title = cancelBuilder.getSession().title;
+            await cancelBuilder.deleteSession();
+            sddState.setBuilder(null);
+            sddState.clearTaskState();
             return { message: `SDD session for "${title}" cancelled.` };
           }
           if (deletedFromDisk) {
@@ -582,36 +602,37 @@ Start executing the tasks one by one.`
           return { message: "No active SDD session." };
         }
         case "resume": {
-          if (activeBuilder) {
+          if (sddState.getBuilder()) {
             return { message: "An SDD session is already active. Use /sdd cancel first." };
           }
           const sessionPath = path20.join(projectRoot, ".wrongstack", "sdd-session.json");
           const projectContext = await gatherProjectContext(projectRoot);
-          activeBuilder = new AISpecBuilder({
+          sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
             minQuestions: 2,
             maxQuestions: 10,
             sessionPath
-          });
-          const loaded = await activeBuilder.loadSession();
+          }));
+          const resumeBuilder = sddState.getBuilder();
+          const loaded = await resumeBuilder.loadSession();
           if (!loaded) {
-            activeBuilder = null;
+            sddState.setBuilder(null);
             return { message: "No saved SDD session found. Use /sdd new to start one." };
           }
-          const session = activeBuilder.getSession();
+          const session = resumeBuilder.getSession();
           let taskCount = 0;
           let completedCount = 0;
-          const taskGraphId = activeBuilder.getTaskGraphId();
+          const taskGraphId = resumeBuilder.getTaskGraphId();
           if (taskGraphId) {
             try {
               const store = new DefaultTaskStore();
               const tracker = new TaskTracker({ store });
               const graph = await tracker.loadGraph(taskGraphId);
               if (graph) {
-                activeTaskStore = store;
-                activeTaskTracker = tracker;
-                activeTaskGraphId = taskGraphId;
+                sddState.setTaskStore(store);
+                sddState.setTaskTracker(tracker);
+                sddState.setTaskGraphId(taskGraphId);
                 const progress = tracker.getProgress();
                 taskCount = progress.total;
                 completedCount = progress.completed;
@@ -619,7 +640,7 @@ Start executing the tasks one by one.`
             } catch {
             }
           }
-          const resumePrompt = activeBuilder.getAIPrompt();
+          const resumePrompt = resumeBuilder.getAIPrompt();
           return {
             message: [
               `\u2554\u2550\u2550\u2550 SDD Session Resumed \u2550\u2550\u2550\u2557`,
@@ -810,9 +831,8 @@ function sddHelp() {
 async function gatherProjectContext(projectRoot) {
   const parts = [];
   try {
-    const fsp = await import('fs/promises');
     const pkgPath = path20.join(projectRoot, "package.json");
-    const pkgRaw = await fsp.readFile(pkgPath, "utf8");
+    const pkgRaw = await fs3.readFile(pkgPath, "utf8");
     const pkg = JSON.parse(pkgRaw);
     parts.push(`Project: ${String(pkg.name ?? "unknown")}`);
     parts.push(`Description: ${String(pkg.description ?? "none")}`);
@@ -827,16 +847,14 @@ async function gatherProjectContext(projectRoot) {
   } catch {
   }
   try {
-    const fsp = await import('fs/promises');
     const tsconfigPath = path20.join(projectRoot, "tsconfig.json");
-    await fsp.access(tsconfigPath);
+    await fs3.access(tsconfigPath);
     parts.push("Language: TypeScript");
   } catch {
   }
   try {
-    const fsp = await import('fs/promises');
     const srcDir = path20.join(projectRoot, "src");
-    const entries = await fsp.readdir(srcDir, { withFileTypes: true });
+    const entries = await fs3.readdir(srcDir, { withFileTypes: true });
     const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
     if (dirs.length > 0) {
       parts.push(`Source structure: src/${dirs.join(", src/")}`);
@@ -856,13 +874,55 @@ async function findSpec(store, idOrTitle) {
   if (match) return store.load(match.id);
   return null;
 }
-var activeBuilder, activeTaskStore, activeTaskTracker, activeTaskGraphId;
+var SDD_META_KEY, SDDState, sddState;
 var init_sdd = __esm({
   "src/slash-commands/sdd.ts"() {
-    activeBuilder = null;
-    activeTaskStore = null;
-    activeTaskTracker = null;
-    activeTaskGraphId = null;
+    SDD_META_KEY = "sdd.state";
+    SDDState = class {
+      builder = null;
+      taskStore = null;
+      taskTracker = null;
+      taskGraphId = null;
+      getBuilder() {
+        return this.builder;
+      }
+      setBuilder(b) {
+        this.builder = b;
+      }
+      getTaskStore() {
+        return this.taskStore;
+      }
+      setTaskStore(s) {
+        this.taskStore = s;
+      }
+      getTaskTracker() {
+        return this.taskTracker;
+      }
+      setTaskTracker(t) {
+        this.taskTracker = t;
+      }
+      getTaskGraphId() {
+        return this.taskGraphId;
+      }
+      setTaskGraphId(id) {
+        this.taskGraphId = id;
+      }
+      clearTaskState() {
+        this.taskStore = null;
+        this.taskTracker = null;
+        this.taskGraphId = null;
+      }
+      getContext() {
+        if (!this.builder) return null;
+        const session = this.builder.getSession();
+        if (session.phase === "done") return null;
+        return this.builder.getAIPrompt();
+      }
+      getPhase() {
+        return this.builder?.getPhase() ?? null;
+      }
+    };
+    sddState = new SDDState();
   }
 });
 function normalizeKeys(cfg) {
@@ -3827,6 +3887,225 @@ ${lines.join("\n\n")}
     }
   };
 }
+function buildSecurityCommand(opts) {
+  return {
+    name: "security",
+    description: "Security scanning: scan, audit, report",
+    argsHint: "[scan|audit|report] [options]",
+    help: `
+# /security \u2014 Security Scanner
+
+Automated security scanning with tech stack detection.
+
+## Commands
+
+### /security scan [options]
+Run a full security scan on the current project.
+Options:
+  --depth quick|standard|deep  Scan depth (default: standard)
+  --format markdown|json|html  Report format (default: markdown)
+
+### /security audit
+Run dependency audit + security scan.
+
+### /security report [id]
+List or view security reports.
+
+## Examples
+
+/security scan
+/security scan --depth deep --format html
+/security audit
+/security report
+`,
+    async run(args, ctx) {
+      const parts = args.trim().split(/\s+/);
+      const subcommand = parts[0] || "";
+      switch (subcommand) {
+        case "scan":
+          return handleScan(parts.slice(1).join(" "), ctx, opts);
+        case "audit":
+          return handleAudit(ctx, opts);
+        case "report":
+          return handleReport(parts[1] || "");
+        default:
+          return { message: getHelpMessage() };
+      }
+    }
+  };
+}
+async function handleScan(args, ctx, opts) {
+  const options = parseArgs2(args);
+  const projectRoot = ctx.projectRoot || opts.projectRoot;
+  try {
+    const orchestratorContext = ctx.provider ? ctx : { provider: opts.llmProvider, model: opts.llmModel };
+    if (!orchestratorContext.provider) {
+      return { message: "\u274C Security scan requires an active LLM provider. No provider configured." };
+    }
+    const result = await defaultOrchestrator.run(orchestratorContext, {
+      projectRoot,
+      scanOptions: {
+        depth: options.depth || "standard",
+        includeSecrets: true,
+        includeInjection: true,
+        includeConfig: true
+      },
+      reportOptions: {
+        format: options.format || "markdown"
+      }
+    });
+    const summary = result.scanResult.summary;
+    const status = summary.total === 0 ? "\u2705 No issues found" : `\u26A0\uFE0F Found ${summary.total} issues`;
+    const reportContent = result.synthesizedReport || `# Security Scan Complete
+
+**Project:** ${projectRoot}
+**Tech Stack:** ${result.detectionResult.detectedStacks[0]?.stack || "unknown"}
+**Scanned Files:** ${result.scanResult.scannedFiles}
+**Duration:** ${result.scanResult.scanDurationMs}ms
+
+## Summary
+
+| Severity | Count |
+|----------|-------|
+| \u{1F534} Critical | ${summary.critical} |
+| \u{1F7E0} High | ${summary.high} |
+| \u{1F7E1} Medium | ${summary.medium} |
+| \u{1F7E2} Low | ${summary.low} |
+
+**Status:** ${status}
+
+**Report:** ${result.reportPath}
+`;
+    return {
+      message: reportContent,
+      metadata: {
+        scanResult: result.scanResult,
+        reportPath: result.reportPath,
+        techStack: result.detectionResult.detectedStacks[0]
+      }
+    };
+  } catch (error) {
+    return { message: `\u274C Scan failed: ${error}` };
+  }
+}
+async function handleAudit(ctx, opts) {
+  const projectRoot = ctx.projectRoot || opts.projectRoot;
+  try {
+    const orchestratorContext = ctx.provider ? ctx : { provider: opts.llmProvider, model: opts.llmModel };
+    if (!orchestratorContext.provider) {
+      return { message: "\u274C Security audit requires an active LLM provider. No provider configured." };
+    }
+    const result = await defaultOrchestrator.run(orchestratorContext, {
+      projectRoot,
+      reportOptions: { format: "markdown" }
+    });
+    const summary = result.scanResult.summary;
+    const depIssues = summary.critical + summary.high;
+    const reportContent = result.synthesizedReport || `# Security Audit Complete
+
+**Project:** ${projectRoot}
+**Tech Stack:** ${result.detectionResult.detectedStacks[0]?.stack || "unknown"}
+
+## Dependency Health
+
+| Status | Count |
+|--------|-------|
+| Critical Issues | ${summary.critical} |
+| High Priority | ${summary.high} |
+| Medium Priority | ${summary.medium} |
+| Low Priority | ${summary.low} |
+
+${depIssues === 0 ? "\u2705 No known vulnerabilities detected" : `\u26A0\uFE0F ${depIssues} vulnerabilities need attention`}
+
+**Full Report:** ${result.reportPath}
+`;
+    return {
+      message: reportContent,
+      metadata: {
+        scanResult: result.scanResult,
+        reportPath: result.reportPath
+      }
+    };
+  } catch (error) {
+    return { message: `\u274C Audit failed: ${error}` };
+  }
+}
+async function handleReport(reportId) {
+  const reportsDir = "security-reports";
+  try {
+    const files = await readdir(reportsDir);
+    const reports = files.filter((f) => f.startsWith("security-report-") && (f.endsWith(".md") || f.endsWith(".json"))).sort().reverse();
+    if (!reportId) {
+      if (reports.length === 0) {
+        return { message: "\u{1F4ED} No security reports found. Run `/security scan` first." };
+      }
+      const list = reports.map((r, i) => {
+        const date = r.replace("security-report-", "").replace(/\.(md|json)$/, "");
+        return `  ${i + 1}. ${date}`;
+      }).join("\n");
+      return { message: `# Available Security Reports
+
+${list}
+
+Use \`/security report <number>\` to view a specific report.` };
+    }
+    const index = parseInt(reportId, 10) - 1;
+    if (!isNaN(index) && reports[index]) {
+      const content = await readFile(join(reportsDir, reports[index]), "utf-8");
+      return { message: `# Security Report
+
+${content}` };
+    }
+    const match = reports.find((r) => r.includes(reportId));
+    if (match) {
+      const content = await readFile(join(reportsDir, match), "utf-8");
+      return { message: `# Security Report
+
+${content}` };
+    }
+    return { message: `\u274C Report "${reportId}" not found. Use \`/security report\` to see available reports.` };
+  } catch {
+    return { message: "\u{1F4ED} No security reports found. Run `/security scan` first." };
+  }
+}
+function parseArgs2(args) {
+  const result = {};
+  const parts = args.split(/\s+/);
+  for (let i = 0; i < parts.length; i++) {
+    const part = parts[i];
+    if (!part || !part.startsWith("--")) continue;
+    const key = part.slice(2);
+    const next = parts[i + 1];
+    if (next && !next.startsWith("--")) {
+      result[key] = next;
+      i++;
+    } else {
+      result[key] = "true";
+    }
+  }
+  return result;
+}
+function getHelpMessage() {
+  return `# /security \u2014 Security Scanner
+
+**Available Commands:**
+
+1. **/security scan** \u2014 Run full security scan
+   \`/security scan --depth deep --format html\`
+
+2. **/security audit** \u2014 Run dependency audit + security scan
+
+3. **/security report** \u2014 List available reports
+
+**Features:**
+- Automatic tech stack detection
+- Dynamic security skill generation
+- Secrets, injection, and config vulnerability scanning
+- Markdown/JSON/HTML reports
+- .gitignore auto-update
+
+Run \`/security scan\` to start.`;
+}
 function makeInstaller(opts, projectRoot, global) {
   const globalRoot = path20.join(os6.homedir(), ".wrongstack");
   return new SkillInstaller({
@@ -4024,7 +4303,8 @@ function buildBuiltinSlashCommands(opts) {
     buildExitCommand(opts),
     buildCommitCommand(),
     buildGitcheckCommand(),
-    buildPushCommand()
+    buildPushCommand(),
+    buildSecurityCommand(opts)
   ];
 }
 
@@ -8364,11 +8644,15 @@ async function main(argv) {
     renderer,
     memoryStore,
     context,
+    cwd,
+    projectRoot,
     metricsSink,
     healthRegistry,
     planPath,
     modeStore,
     fleetStreamController,
+    llmProvider: provider,
+    llmModel: config.model,
     onSpawn: async (description, spawnOpts) => {
       const { subagentId, taskId } = await multiAgentHost.spawn(description, spawnOpts);
       const tags = [];