@wrongstack/cli 0.7.5 → 0.7.6

package/dist/index.js

@@ -9,7 +9,7 @@ import * as os6 from 'os';
 import os6__default from 'os';
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
-import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
+import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, isSecretField, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
 import { WebSocketServer, WebSocket } from 'ws';
 import { MCPRegistry } from '@wrongstack/mcp';
 import { buildProviderFactoriesFromRegistry, makeProviderFromConfig, capabilitiesFor } from '@wrongstack/providers';
@@ -64,8 +64,10 @@ __export(sdd_exports, {
   getActiveSDDPhase: () => getActiveSDDPhase,
   getCurrentExecutingContext: () => getCurrentExecutingContext,
   getCurrentTask: () => getCurrentTask,
+  getTaskGraphId: () => getTaskGraphId,
   getTaskListText: () => getTaskListText,
   getTaskProgress: () => getTaskProgress,
+  getTaskTracker: () => getTaskTracker,
   markTaskCompleted: () => markTaskCompleted,
   renderTaskListWithProgress: () => renderTaskListWithProgress,
   trySaveImplementationPlan: () => trySaveImplementationPlan,
@@ -380,10 +382,9 @@ function buildSddCommand(opts) {
     name: "sdd",
     description: "AI-driven SDD: /sdd [new|approve|execute|cancel|status|list|show|templates]",
     async run(args) {
-      const ctx = opts.context;
-      const projectRoot = ctx?.projectRoot ?? process.cwd();
-      const specsDir = path23.join(projectRoot, ".wrongstack", "specs");
-      const graphsDir = path23.join(projectRoot, ".wrongstack", "task-graphs");
+      opts.context;
+      const specsDir = opts.paths.projectSpecs;
+      const graphsDir = opts.paths.projectTaskGraphs;
       const specStore = new SpecStore({ baseDir: specsDir });
       new TaskGraphStore({ baseDir: graphsDir });
       const versioning = sddState.getVersioning();
@@ -399,10 +400,10 @@ function buildSddCommand(opts) {
           const forceFlag = rest.includes("--force") || rest.includes("-f");
           const title = rest.filter((a) => !a.startsWith("-")).join(" ").trim() || "Untitled Feature";
           if (!sessionState.getBuilder() && !forceFlag) {
-            const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
+            const sessionPath = opts.paths.projectSddSession;
             try {
               await fsp2.access(sessionPath);
-              const projectContext2 = await gatherProjectContext(projectRoot);
+              const projectContext2 = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
               const tempBuilder = new AISpecBuilder({
                 store: specStore,
                 projectContext: projectContext2,
@@ -428,13 +429,13 @@ function buildSddCommand(opts) {
             }
           }
           sddState.clearTaskState();
-          const projectContext = await gatherProjectContext(projectRoot);
+          const projectContext = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
           sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
             minQuestions: 2,
             maxQuestions: 10,
-            sessionPath: path23.join(projectRoot, ".wrongstack", "sdd-session.json")
+            sessionPath: opts.paths.projectSddSession
           }));
           sddState.setSessionStartTime(Date.now());
           sddState.setPhaseStartTime(Date.now());
@@ -547,8 +548,16 @@ Start executing the tasks one by one.`
           };
         }
         // ── Task Execution ─────────────────────────────────────────────────
-        case "execute":
-        case "run": {
+        case "run":
+        case "execute": {
+          if (opts.onSddParallelRun) {
+            const slotsArg = restJoined.trim();
+            const slots = slotsArg ? Number.parseInt(slotsArg, 10) : void 0;
+            const message = await opts.onSddParallelRun(
+              slots && Number.isFinite(slots) ? { parallelSlots: Math.min(16, Math.max(1, slots)) } : {}
+            );
+            return { message };
+          }
           const runBuilder = sddState.getBuilder();
           if (!runBuilder) {
             return {
@@ -572,6 +581,21 @@ User message:
 Start executing the tasks one by one.`
           };
         }
+        case "parallel": {
+          if (!opts.onSddParallelRun) {
+            return { message: "SDD parallel run is not available in this session." };
+          }
+          const slotsArg = restJoined.trim();
+          const slots = slotsArg ? Number.parseInt(slotsArg, 10) : void 0;
+          const message = await opts.onSddParallelRun(
+            slots && Number.isFinite(slots) ? { parallelSlots: Math.min(16, Math.max(1, slots)) } : {}
+          );
+          return { message };
+        }
+        case "stop": {
+          opts.onSddParallelStop?.();
+          return { message: "SDD parallel run stopped." };
+        }
         case "plan":
         case "impl": {
           const planBuilder = sddState.getBuilder();
@@ -1001,7 +1025,7 @@ Start executing the tasks one by one.`
             return { message: lines2.join("\n") };
           }
           try {
-            const graphStore2 = new TaskGraphStore({ baseDir: path23.join(projectRoot, ".wrongstack", "task-graphs") });
+            const graphStore2 = new TaskGraphStore({ baseDir: opts.paths.projectTaskGraphs });
             const stored = await graphStore2.load(graphId);
             if (stored) {
               return { message: renderTaskGraph(stored, { compact: false }) };
@@ -1026,7 +1050,7 @@ Start executing the tasks one by one.`
           return { message: lines.join("\n") };
         }
         case "cancel": {
-          const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
+          const sessionPath = opts.paths.projectSddSession;
           let deletedFromDisk = false;
           try {
             await fsp2.unlink(sessionPath);
@@ -1034,11 +1058,11 @@ Start executing the tasks one by one.`
           } catch {
           }
           try {
-            await fsp2.rm(path23.join(projectRoot, ".wrongstack", "specs"), { recursive: true, force: true });
+            await fsp2.rm(opts.paths.projectSpecs, { recursive: true, force: true });
           } catch {
           }
           try {
-            await fsp2.rm(path23.join(projectRoot, ".wrongstack", "task-graphs"), { recursive: true, force: true });
+            await fsp2.rm(opts.paths.projectTaskGraphs, { recursive: true, force: true });
           } catch {
           }
           const cancelBuilder = sddState.getBuilder();
@@ -1058,8 +1082,8 @@ Start executing the tasks one by one.`
           if (sddState.getBuilder()) {
             return { message: "An SDD session is already active. Use /sdd cancel first." };
           }
-          const sessionPath = path23.join(projectRoot, ".wrongstack", "sdd-session.json");
-          const projectContext = await gatherProjectContext(projectRoot);
+          const sessionPath = opts.paths.projectSddSession;
+          const projectContext = await gatherProjectContext(opts.context?.projectRoot ?? process.cwd());
           sddState.setBuilder(new AISpecBuilder({
             store: specStore,
             projectContext,
@@ -1222,7 +1246,7 @@ ${lines.join("\n")}`
             return { message: "No task graph found. Generate tasks first." };
           }
           try {
-            const graphStore2 = new TaskGraphStore({ baseDir: path23.join(projectRoot, ".wrongstack", "task-graphs") });
+            const graphStore2 = new TaskGraphStore({ baseDir: opts.paths.projectTaskGraphs });
             const graph = await graphStore2.load(graphId);
             if (!graph) {
               return { message: "Could not load task graph." };
@@ -1416,6 +1440,12 @@ async function findSpec(store, idOrTitle) {
   if (match) return store.load(match.id);
   return null;
 }
+function getTaskGraphId() {
+  return sddState.getTaskGraphId();
+}
+function getTaskTracker() {
+  return sddState.getTaskTracker();
+}
 var SDD_META_KEY, SDDState, sddState;
 var init_sdd = __esm({
   "src/slash-commands/sdd.ts"() {
@@ -1821,7 +1851,21 @@ async function runWebUI(opts) {
       const client = { ws, sessionId: opts.session.id };
       clients.set(ws, client);
       console.log("[WebUI] Client connected");
+      let msgCount = 0;
+      let windowResetAt = Date.now() + 6e4;
       ws.on("message", async (data) => {
+        const now = Date.now();
+        if (now > windowResetAt) {
+          msgCount = 0;
+          windowResetAt = now + 6e4;
+        }
+        if (++msgCount > 60) {
+          send(ws, {
+            type: "error",
+            payload: { phase: "rate_limit", message: "Too many messages. Please wait." }
+          });
+          return;
+        }
         try {
           const msg = JSON.parse(data.toString());
           await handleMessage(ws, client, msg);
@@ -2743,7 +2787,7 @@ function maskConfigSecrets(cfg) {
   if (typeof cfg !== "object" || cfg === null) return {};
   const out = {};
   for (const [k, v] of Object.entries(cfg)) {
-    if (k === "apiKey" || k === "apiKeys" || k === "secret" || k === "secrets") {
+    if (isSecretField(k)) {
       out[k] = "[REDACTED]";
     } else if (typeof v === "object" && v !== null && !Array.isArray(v)) {
       out[k] = maskConfigSecrets(v);
@@ -2760,7 +2804,7 @@ function diffSummary(oldCfg, newCfg) {
     const o = JSON.stringify(oldCfg[k]);
     const n = JSON.stringify(newCfg[k]);
     if (o !== n) {
-      if (k === "apiKey" || k === "apiKeys" || k === "secret") {
+      if (isSecretField(k)) {
         changes.push(`${k}: [CHANGED]`);
       } else if (typeof newCfg[k] !== "object") {
         changes.push(`${k}: ${oldCfg[k] ?? "(unset)"} \u2192 ${newCfg[k]}`);
@@ -4583,7 +4627,7 @@ function buildPlanCommand(opts) {
     name: "plan",
     description: "Strategic plan board: /plan [show|add <title>|start <id|#>|done <id|#>|remove <id|#>|promote <id|#> [subtask ...]|derive <id|#>|template [list|use <name>]|clear]",
     async run(args) {
-      const planPath = opts.planPath;
+      const planPath = opts.paths?.projectPlan ?? opts.planPath;
       if (!planPath) return { message: "Plan storage is not configured for this session." };
       const ctx = opts.context;
       const sessionId = ctx?.session.id ?? "unknown";
@@ -5180,7 +5224,7 @@ function buildGoalCommand(opts) {
       "Stage flow: decide \u2192 execute \u2192 reflect \u2192 sleep | paused | stopped",
       "Pausing stops after current iteration completes. Resume continues from next iteration.",
       "",
-      "Goals live in <projectRoot>/.wrongstack/goal.json and persist across sessions.",
+      "Goals live in ~/.wrongstack/projects/<hash>/goal.json and persist across sessions.",
       "A goal is the prerequisite for /autonomy eternal \u2014 the engine consults it on",
       "every iteration to decide what to do next."
     ].join("\n"),
@@ -5189,7 +5233,7 @@ function buildGoalCommand(opts) {
       const [verbRaw, ...rest] = trimmed.split(/\s+/);
       const verb = (verbRaw ?? "").toLowerCase();
       const restJoined = rest.join(" ").trim();
-      const goalPath = goalFilePath(opts.projectRoot);
+      const goalPath = opts.paths.projectGoal;
       const verbForDispatch = verb && !KNOWN_VERBS.has(verb) ? "set" : verb;
       const setText = verbForDispatch === "set" && !KNOWN_VERBS.has(verb) ? trimmed : restJoined;
       switch (verbForDispatch) {
@@ -8445,8 +8489,7 @@ var initCmd = async (_args, deps) => {
   await fsp2.mkdir(deps.paths.globalRoot, { recursive: true });
   const config = { version: 1, provider: providerId, model: modelId };
   if (apiKey) config.apiKey = apiKey;
-  const keyFile = path23.join(path23.dirname(deps.paths.globalConfig), ".key");
-  const vault = new DefaultSecretVault$1({ keyFile });
+  const vault = new DefaultSecretVault$1({ keyFile: deps.paths.secretsKey });
   const encrypted = encryptConfigSecrets(config, vault);
   await atomicWrite(deps.paths.globalConfig, JSON.stringify(encrypted, null, 2));
   await fsp2.mkdir(path23.join(deps.projectRoot, ".wrongstack"), { recursive: true });
@@ -8896,14 +8939,12 @@ Cache age: ${isFinite(age) ? `${Math.round(age / 60)}m` : "never fetched"}. Run
   );
   return 0;
 };
-
-// src/subcommands/handlers/helpers.ts
 function redactKeys(obj) {
   if (!obj || typeof obj !== "object") return obj;
   if (Array.isArray(obj)) return obj.map(redactKeys);
   const out = {};
   for (const [k, v] of Object.entries(obj)) {
-    if (/api.?key|secret|token|pass/i.test(k) && typeof v === "string" && v.length > 0)
+    if (isSecretField(k) && typeof v === "string" && v.length > 0)
       out[k] = "[REDACTED]";
     else out[k] = redactKeys(v);
   }
@@ -11963,7 +12004,7 @@ async function main(argv) {
   const skillLoader = container.resolve(TOKENS.SkillLoader);
   const sessionRef = {};
   const autonomyModeRef = { current: "off" };
-  const goalPathForPrompt = path23.join(projectRoot, ".wrongstack", "goal.json");
+  const goalPathForPrompt = wpaths.projectGoal;
   container.bind(
     TOKENS.SystemPromptBuilder,
     () => new DefaultSystemPromptBuilder({
@@ -12269,6 +12310,7 @@ async function main(argv) {
   const slashCmds = buildBuiltinSlashCommands({
     registry: slashRegistry,
     toolRegistry,
+    paths: wpaths,
     compactor: container.resolve(TOKENS.Compactor),
     sessionStore,
     skillLoader,
@@ -12828,13 +12870,62 @@ Restart WrongStack to load or unload plugin code in this session.`;
     onDispatchClassify: makeProviderClassifier(
       context.provider,
       context.model
-    )
+    ),
+    onSddParallelRun: async (opts) => {
+      const { SddParallelRun } = await import('@wrongstack/core');
+      const sdd = await Promise.resolve().then(() => (init_sdd(), sdd_exports));
+      const tracker = sdd.getTaskTracker();
+      const builder = sdd.getActiveBuilder();
+      if (!tracker || !builder) {
+        return "No active SDD session with tasks. Use /sdd new to start one.";
+      }
+      const session2 = builder.getSession();
+      if (session2.phase !== "executing" && session2.phase !== "task_review") {
+        return `Cannot run parallel in phase "${session2.phase}". Use /sdd approve first.`;
+      }
+      const graphId = sdd.getTaskGraphId();
+      const graphStore = new (await import('@wrongstack/core')).TaskGraphStore({
+        baseDir: wpaths.projectTaskGraphs
+      });
+      const graph = graphId ? await graphStore.load(graphId) : null;
+      if (!graph) {
+        return "No task graph found for the current SDD session.";
+      }
+      const subagentFactory = multiAgentHost.makeSubagentFactory(config);
+      const run = new SddParallelRun({
+        tracker,
+        graph,
+        agent,
+        projectRoot,
+        parallelSlots: opts?.parallelSlots,
+        subagentFactory,
+        onProgress: (p) => {
+          renderer.write(`  \u2591 wave ${p.wave + 1} \xB7 ${p.completed}/${p.total} tasks \xB7 ${p.percent}% done
+`);
+        }
+      });
+      globalThis.__sddParallelRun = run;
+      const result = await run.run();
+      delete globalThis.__sddParallelRun;
+      const lines = [
+        `SDD parallel run complete:`,
+        `  ${result.totalWaves} waves \xB7 ${result.totalCompleted} done \xB7 ${result.totalFailed} failed`,
+        `  ${(result.totalDurationMs / 1e3).toFixed(1)}s total`
+      ];
+      if (result.deadlocked) lines.push(color.red("  \u26A0 deadlock \u2014 tasks blocked by failed tasks."));
+      if (result.stopRequested) lines.push(color.yellow("  \u26A1 stopped by user."));
+      return lines.join("\n");
+    },
+    onSddParallelStop: () => {
+      const run = globalThis.__sddParallelRun;
+      run?.stop();
+    }
   });
   for (const cmd of slashCmds) slashRegistry.register(cmd);
   const eternalFlag = typeof flags["eternal"] === "string" ? flags["eternal"].trim() : "";
   if (eternalFlag.length > 0) {
-    const { saveGoal: saveGoal2, emptyGoal: emptyGoal2, goalFilePath: goalFilePath4, loadGoal: loadGoal4 } = await import('@wrongstack/core');
-    const goalPath = goalFilePath4(projectRoot);
+    const { saveGoal: saveGoal2, emptyGoal: emptyGoal2, goalFilePath: goalFilePath3, loadGoal: loadGoal4 } = await import('@wrongstack/core');
+    const goalPath = goalFilePath3(projectRoot);
     const prior = await loadGoal4(goalPath);
     const next = prior ? { ...prior, goal: eternalFlag, setAt: (/* @__PURE__ */ new Date()).toISOString(), lastActivityAt: (/* @__PURE__ */ new Date()).toISOString() } : emptyGoal2(eternalFlag);
     await saveGoal2(goalPath, next);