@wrongstack/cli 0.9.0 → 0.9.1

package/dist/index.js

@@ -5,8 +5,8 @@ import * as fsp3 from 'fs/promises';
 import { readdir, readFile } from 'fs/promises';
 import { color, DefaultPathResolver, TOKENS, DefaultSystemPromptBuilder, makeAutonomyPromptContributor, ToolRegistry, createContextManagerTool, EventBus, SlashCommandRegistry, createDelegateTool, FLEET_ROSTER, createMcpControlTool, EternalAutonomyEngine, DefaultLogger, DefaultModelsRegistry, ProviderRegistry, InMemoryMetricsSink, wireMetricsToEvents, DefaultHealthRegistry, startMetricsServer, RecoveryLock, DefaultAttachmentStore, QueueStore, Context, loadTodosCheckpoint, attachTodosCheckpoint, loadDirectorState, loadPlan, createDefaultPipelines, AutoCompactionMiddleware, estimateRequestTokens, Agent, loadPlugins, FleetManager, makeDirectorSessionFactory, Director, AutoApprovePermissionPolicy, PhaseStore, AutoPhasePlanner, PhaseGraphBuilder, WorktreeManager, PhaseOrchestrator, makeLLMClassifier, resolveWstackPaths, DefaultSecretVault, migratePlaintextSecrets, DefaultConfigLoader, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, atomicWrite, DefaultPluginAPI, makeAgentSubagentRunner, NULL_FLEET_BUS, buildChildEnv, formatContextWindowModeList, repairToolUseAdjacency, getContextWindowMode, resolveContextWindowPolicy, AGENTS_BY_PHASE, dispatchAgent, formatTodosList, emptyPlan, clearPlan, savePlan, formatPlanTemplates, getPlanTemplate, addPlanItem, formatPlan, deriveTodosFromPlanItem, removePlanItem, setPlanItemStatus, SpecStore, TaskGraphStore, analyzeCriticalPath, getTemplate, listTemplates, templateToMarkdown, SpecParser, renderSpecAnalysis, AISpecBuilder, DefaultTaskStore, TaskTracker, renderProgress, renderTaskGraph, loadGoal, goalFilePath, summarizeUsage, saveGoal, emptyGoal, buildGoalPreamble, formatGoal, pendingBtwCount, setBtwNote, InputBuilder, FsError, ERROR_CODES, projectHash, WrongStackError, defaultOrchestrator, decryptConfigSecrets, encryptConfigSecrets as encryptConfigSecrets$1, SpecVersioning, ParallelEternalEngine, allServers as allServers$1 } from '@wrongstack/core';
 import { createRequire } from 'module';
-import * as os6 from 'os';
-import os6__default from 'os';
+import * as os4 from 'os';
+import os4__default from 'os';
 import * as crypto2 from 'crypto';
 import { randomUUID } from 'crypto';
 import { DefaultSecretVault as DefaultSecretVault$1, encryptConfigSecrets, isSecretField, decryptConfigSecrets as decryptConfigSecrets$1 } from '@wrongstack/core/security';
@@ -18,7 +18,7 @@ import { builtinToolsPack, rememberTool, forgetTool } from '@wrongstack/tools';
 import { spawn } from 'child_process';
 import { SkillInstaller } from '@wrongstack/core/skills';
 import * as readline from 'readline';
-import * as fs9 from 'fs';
+import * as fs10 from 'fs';
 import { writeFileSync } from 'fs';
 import { WrongStackACPServer } from '@wrongstack/acp/agent';
 import { ACP_AGENT_COMMANDS, makeACPSubagentRunner, makeACPSubagentRunnerWithStop } from '@wrongstack/acp';
@@ -1686,7 +1686,7 @@ async function getUpdateNotification(signal, homeFn) {
 var defaultHomeDir2, CACHE_TTL_MS;
 var init_update_check = __esm({
   "src/update-check.ts"() {
-    defaultHomeDir2 = () => os6.homedir();
+    defaultHomeDir2 = () => os4.homedir();
     CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
   }
 });
@@ -5824,7 +5824,7 @@ When the error confidence is low (< 0.85) or the problem spans multiple files,
   };
 }
 function makeInstaller(opts, projectRoot, global) {
-  const globalRoot = path25.join(os6.homedir(), ".wrongstack");
+  const globalRoot = path25.join(os4.homedir(), ".wrongstack");
   return new SkillInstaller({
     manifestPath: path25.join(globalRoot, "installed-skills.json"),
     projectSkillsDir: path25.join(projectRoot, ".wrongstack", "skills"),
@@ -6185,6 +6185,207 @@ function buildWorktreeCommand(opts) {
     }
   };
 }
+async function runSettingsMenu(deps) {
+  for (; ; ) {
+    const config = deps.configStore.get();
+    renderSettingsTopMenu(deps.renderer, config);
+    const choice = (await deps.reader.readLine(`
+${color.amber("?")} Pick setting to edit: `)).trim().toLowerCase();
+    if (!choice || choice === "q" || choice === "quit" || choice === "exit") {
+      deps.renderer.write(color.dim("Done.\n"));
+      return 0;
+    }
+    switch (choice) {
+      case "1":
+        await editAutoProceedDelay(deps);
+        break;
+      case "2":
+        await editDefaultAutonomy(deps);
+        break;
+      case "d":
+        await showDefaults(deps);
+        break;
+      default:
+        deps.renderer.writeError(`Unknown selection: "${choice}". Try 1, 2, or q to quit.`);
+    }
+  }
+}
+function renderSettingsTopMenu(renderer, config) {
+  const delay = config.autonomy?.autoProceedDelayMs ?? 45e3;
+  const defMode = config.autonomy?.defaultMode ?? "off";
+  renderer.write(`
+${color.bold("WrongStack")} ${color.dim("\u2014 Settings")}
+
+`);
+  renderer.write(`  ${color.bold("1.")} auto-proceed delay:    ${color.cyan(formatDelay(delay))} (in auto mode, wait before continuing)
+`);
+  renderer.write(`  ${color.bold("2.")} default autonomy mode: ${color.cyan(defMode)}
+`);
+  renderer.write(`
+  ${color.dim("Actions:")}
+`);
+  renderer.write(`    ${color.bold("1")}       Edit auto-proceed delay
+`);
+  renderer.write(`    ${color.bold("2")}       Edit default autonomy mode
+`);
+  renderer.write(`    ${color.bold("d")}       Show all defaults
+`);
+  renderer.write(`    ${color.bold("q")}       Quit
+`);
+}
+async function editAutoProceedDelay(deps) {
+  deps.renderer.write(`
+${color.bold("Auto-proceed delay")} ${color.dim("\u2014 wait time before auto-continuing in auto mode")}
+`);
+  deps.renderer.write(color.dim(`  Current: ${formatDelay(deps.configStore.get().autonomy?.autoProceedDelayMs ?? 45e3)}
+`));
+  deps.renderer.write(color.dim(`  Enter value in SECONDS (e.g. 30 for 30 seconds, 0 to disable)
+`));
+  const raw = (await deps.reader.readLine(`  ${color.amber("?")} Delay (seconds): `)).trim();
+  if (!raw || raw === "q") return;
+  const seconds = Number.parseFloat(raw);
+  if (Number.isNaN(seconds) || seconds < 0) {
+    deps.renderer.writeError(`Invalid number: "${raw}"`);
+    return;
+  }
+  const ms = Math.round(seconds * 1e3);
+  await mutateAutonomyConfig(deps, (autonomy) => {
+    autonomy.autoProceedDelayMs = ms;
+  });
+  deps.renderer.write(`  ${color.green("\u2713")} auto-proceed delay \u2192 ${formatDelay(ms)}
+`);
+}
+async function editDefaultAutonomy(deps) {
+  deps.renderer.write(`
+${color.bold("Default Autonomy Mode")}
+
+`);
+  deps.renderer.write(`  ${color.bold("1.")} off     \u2014 agent stops after each turn (normal)
+`);
+  deps.renderer.write(`  ${color.bold("2.")} suggest \u2014 shows next-step suggestions
+`);
+  deps.renderer.write(`  ${color.bold("3.")} auto    \u2014 self-driving, agent continues automatically
+`);
+  deps.renderer.write(`  ${color.bold("q")}  Quit without changing
+`);
+  const raw = (await deps.reader.readLine(`  ${color.amber("?")} Default mode: `)).trim().toLowerCase();
+  if (!raw || raw === "q") return;
+  const modes = ["off", "suggest", "auto"];
+  let selected = null;
+  if (raw === "1") selected = "off";
+  else if (raw === "2") selected = "suggest";
+  else if (raw === "3") selected = "auto";
+  else if (modes.includes(raw)) selected = raw;
+  if (!selected) {
+    deps.renderer.writeError(`Invalid mode: "${raw}". Use off, suggest, or auto.`);
+    return;
+  }
+  await mutateAutonomyConfig(deps, (autonomy) => {
+    autonomy.defaultMode = selected;
+  });
+  deps.renderer.write(`  ${color.green("\u2713")} default autonomy \u2192 ${color.bold(selected)}
+`);
+}
+async function showDefaults(deps) {
+  deps.renderer.write(`
+${color.bold("Default Values")}
+
+`);
+  deps.renderer.write(`  auto-proceed delay:    ${color.cyan("45s")} (WRONGSTACK_AUTO_PROCEED_DELAY_MS env)
+`);
+  deps.renderer.write(`  default autonomy mode:  ${color.cyan("off")}
+`);
+  deps.renderer.write(`  iteration timeout:      ${color.cyan("5 min")}
+`);
+  deps.renderer.write(`  session timeout:        ${color.cyan("30 min")}
+`);
+  deps.renderer.write(`  max iterations:         ${color.cyan("100")}
+`);
+  deps.renderer.write(`
+${color.dim("  Press Enter to continue...")}`);
+  await deps.reader.readLine("");
+}
+async function mutateAutonomyConfig(deps, mutator) {
+  let raw;
+  let fileExists = true;
+  try {
+    raw = await fsp3.readFile(deps.globalConfigPath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      throw new Error(`Could not read ${deps.globalConfigPath}: ${err.message}`);
+    }
+    fileExists = false;
+    raw = "{}";
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    if (fileExists) {
+      throw new Error(`Config at ${deps.globalConfigPath} is not valid JSON: ${err.message}`);
+    }
+    parsed = {};
+  }
+  const decrypted = decryptConfigSecrets(parsed, deps.vault);
+  const autonomy = decrypted.autonomy ?? {};
+  mutator(autonomy);
+  decrypted.autonomy = autonomy;
+  const encrypted = encryptConfigSecrets$1(decrypted, deps.vault);
+  await atomicWrite(deps.globalConfigPath, JSON.stringify(encrypted, null, 2), { mode: 384 });
+  deps.configStore.update({ autonomy: decrypted.autonomy });
+}
+function formatDelay(ms) {
+  if (ms >= 6e4) return `${Math.round(ms / 6e4)}m`;
+  if (ms === 0) return "disabled";
+  return `${Math.round(ms / 1e3)}s`;
+}
+
+// src/slash-commands/settings.ts
+var noOpVault = {
+  encrypt: (v) => v,
+  decrypt: (v) => v,
+  isEncrypted: () => false
+};
+function buildSettingsCommand(opts) {
+  return {
+    name: "settings",
+    description: "Open interactive settings menu (auto-proceed delay, defaults, etc.).",
+    help: [
+      "Usage:",
+      "  /settings          Open interactive settings menu",
+      "",
+      "Configurable settings:",
+      "  auto-proceed delay \u2014 wait time before auto-continuing in auto mode",
+      "  default autonomy mode \u2014 startup autonomy mode",
+      "",
+      "Settings are persisted to ~/.wrongstack/config.json."
+    ].join("\n"),
+    async run(args) {
+      const trimmed = args.trim().toLowerCase();
+      if (trimmed === "help" || trimmed === "--help") {
+        return { message: this.help ?? "" };
+      }
+      if (!opts.configStore || !opts.paths) {
+        return { message: `${color.red("Error")} config store not available.` };
+      }
+      if (!opts.reader || !opts.renderer) {
+        return { message: `${color.red("Error")} settings menu requires a terminal (not available in headless mode).` };
+      }
+      try {
+        await runSettingsMenu({
+          renderer: opts.renderer,
+          reader: opts.reader,
+          configStore: opts.configStore,
+          globalConfigPath: opts.paths.globalConfig,
+          vault: noOpVault
+        });
+        return { message: `${color.green("Settings saved.")}` };
+      } catch (err) {
+        return { message: `${color.red("Settings error")}: ${err instanceof Error ? err.message : String(err)}` };
+      }
+    }
+  };
+}
 
 // src/slash-commands/index.ts
 function buildBuiltinSlashCommands(opts) {
@@ -6229,6 +6430,7 @@ function buildBuiltinSlashCommands(opts) {
     buildFixCommand(opts),
     buildAutoPhaseCommand(opts),
     buildWorktreeCommand(opts),
+    buildSettingsCommand(opts),
     buildStatuslineCommand({
       cwd: opts.cwd,
       hiddenItems: opts.statuslineHiddenItems ?? [],
@@ -6443,7 +6645,7 @@ async function bootConfig(flags) {
   const cwd = typeof flags["cwd"] === "string" ? path25.resolve(flags["cwd"]) : process.cwd();
   const pathResolver = new DefaultPathResolver(cwd);
   const projectRoot = pathResolver.projectRoot;
-  const userHome = os6.homedir();
+  const userHome = os4.homedir();
   const wpaths = resolveWstackPaths({ projectRoot, userHome });
   await ensureProjectMeta(wpaths, projectRoot);
   const vault = new DefaultSecretVault({ keyFile: wpaths.secretsKey });
@@ -6507,7 +6709,7 @@ var ReadlineInputReader = class {
   history = [];
   pending = false;
   constructor(opts = {}) {
-    this.historyFile = opts.historyFile ?? path25.join(os6.homedir(), ".wrongstack", "history");
+    this.historyFile = opts.historyFile ?? path25.join(os4.homedir(), ".wrongstack", "history");
   }
   async loadHistory() {
     try {
@@ -6737,6 +6939,24 @@ async function buildPickableProviders(modelsRegistry, config) {
   }
   return out;
 }
+var defaultUidFn = () => os4__default.userInfo().uid;
+async function getFileUid(filePath) {
+  try {
+    const stat4 = await fsp3.stat(filePath);
+    return stat4.uid;
+  } catch {
+    return void 0;
+  }
+}
+async function checkConfigOwnership(homeFn, uidFn = defaultUidFn) {
+  if (os4__default.platform() === "win32") return true;
+  const cfg = configPath(homeFn);
+  const fileUid = await getFileUid(cfg);
+  if (fileUid === void 0) return true;
+  const callerUid = uidFn();
+  if (callerUid === void 0) return true;
+  return fileUid === callerUid;
+}
 var PROTECTED_BASENAMES = /* @__PURE__ */ new Set([
   "config.json",
   ".key",
@@ -6802,7 +7022,7 @@ function diffSummary(oldCfg, newCfg) {
   }
   return changes.length > 0 ? changes.slice(0, 5).join(", ") : "no changes";
 }
-var defaultHomeDir = () => os6__default.homedir();
+var defaultHomeDir = () => os4__default.homedir();
 function historyDir(homeFn = defaultHomeDir) {
   return path25.join(homeFn(), ".wrongstack", "config.history", "entries");
 }
@@ -6928,6 +7148,9 @@ async function getHistoryEntry(id, homeFn = defaultHomeDir) {
 async function restoreFromHistory(id, homeFn = defaultHomeDir) {
   const entry = await getHistoryEntry(id, homeFn);
   if (!entry) return { ok: false, backupId: null, error: "History entry not found" };
+  if (!await checkConfigOwnership(homeFn)) {
+    return { ok: false, backupId: null, error: "Operation denied: config file is not owned by current user" };
+  }
   await backupCurrent(homeFn);
   let oldCfg = {};
   try {
@@ -6964,6 +7187,9 @@ async function restoreLast(homeFn = defaultHomeDir) {
   } catch {
     return { ok: false, error: "No prior backup found" };
   }
+  if (!await checkConfigOwnership(homeFn)) {
+    return { ok: false, error: "Operation denied: config file is not owned by current user" };
+  }
   await backupCurrent(homeFn);
   try {
     await atomicWrite(cfg, JSON.stringify(lastCfg, null, 2));
@@ -6978,11 +7204,11 @@ async function restoreLast(homeFn = defaultHomeDir) {
 var theme = { primary: color.amber };
 async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => process.env.HOME ?? __require("os").homedir()) {
   try {
-    const { atomicWrite: atomicWrite8 } = await import('@wrongstack/core');
-    const fs21 = await import('fs/promises');
+    const { atomicWrite: atomicWrite9 } = await import('@wrongstack/core');
+    const fs22 = await import('fs/promises');
     let existing = {};
     try {
-      const raw = await fs21.readFile(configPath2, "utf8");
+      const raw = await fs22.readFile(configPath2, "utf8");
       existing = JSON.parse(raw);
     } catch {
     }
@@ -6990,7 +7216,7 @@ async function saveToGlobalConfig(configPath2, provider, model, homeFn = () => p
     existing.provider = provider;
     existing.model = model;
     await backupCurrent(homeFn);
-    await atomicWrite8(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
+    await atomicWrite9(configPath2, JSON.stringify(existing, null, 2), { mode: 384 });
     try {
       await appendHistory(
         oldCfg,
@@ -7313,12 +7539,12 @@ function pickGroupIndex(opts) {
     try {
       let current = 0;
       try {
-        const parsed = Number.parseInt(fs9.readFileSync(opts.cursorFile, "utf8").trim(), 10);
+        const parsed = Number.parseInt(fs10.readFileSync(opts.cursorFile, "utf8").trim(), 10);
         if (Number.isFinite(parsed)) current = wrap(parsed);
       } catch {
       }
-      fs9.mkdirSync(path25.dirname(opts.cursorFile), { recursive: true });
-      fs9.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
+      fs10.mkdirSync(path25.dirname(opts.cursorFile), { recursive: true });
+      fs10.writeFileSync(opts.cursorFile, String(wrap(current + 1)));
       return current;
     } catch {
     }
@@ -8591,7 +8817,7 @@ var diagCmd = async (_args, deps) => {
     `  modelsCache:   ${deps.paths.modelsCache}`,
     `  cacheAge:      ${isFinite(age) ? `${Math.round(age / 60)}m` : "never"}`,
     `  node:          ${process.version}`,
-    `  os:            ${os6.platform()} ${os6.release()}`,
+    `  os:            ${os4.platform()} ${os4.release()}`,
     `  provider:      ${cfg.provider ?? "<unset>"}`,
     `  model:         ${cfg.model ?? "<unset>"}`,
     `  tools:         ${deps.toolRegistry?.list().length ?? 0}`,
@@ -9324,13 +9550,13 @@ async function listFleetRuns(deps) {
   const runs = [];
   for (const id of entries) {
     const runDir = path25.join(deps.paths.projectSessions, id);
-    let stat3;
+    let stat4;
     try {
-      stat3 = await fsp3.stat(runDir);
+      stat4 = await fsp3.stat(runDir);
     } catch {
       continue;
     }
-    if (!stat3.isDirectory()) continue;
+    if (!stat4.isDirectory()) continue;
     let manifest = false;
     let checkpoint = false;
     let subagentCount = 0;
@@ -9376,15 +9602,15 @@ async function listFleetRuns(deps) {
 }
 async function showFleetRun(runId, deps) {
   const runDir = path25.join(deps.paths.projectSessions, runId);
-  let stat3;
+  let stat4;
   try {
-    stat3 = await fsp3.stat(runDir);
+    stat4 = await fsp3.stat(runDir);
   } catch {
     deps.renderer.writeError(`Fleet run not found: ${runId}
 `);
     return 1;
   }
-  if (!stat3.isDirectory()) {
+  if (!stat4.isDirectory()) {
     deps.renderer.writeError(`Not a directory: ${runId}
 `);
     return 1;
@@ -9783,7 +10009,7 @@ var skillsCmd = async (_args, deps) => {
 };
 var versionCmd = async (_args, deps) => {
   deps.renderer.write(
-    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os6.platform()})
+    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, node ${process.version}, ${os4.platform()})
 `
   );
   return 0;
@@ -9863,22 +10089,22 @@ function fmtDuration(ms) {
   const remMin = m - h * 60;
   return `${h}h${remMin}m`;
 }
-function fmtTaskResultLine(r, color39) {
+function fmtTaskResultLine(r, color41) {
   const stats = `${r.iterations}it ${r.toolCalls}tc ${fmtDuration(r.durationMs)}`;
   const errMsg = typeof r.error === "string" ? r.error : r.error?.message;
   const errKind = typeof r.error === "object" ? r.error?.kind : void 0;
   const errTail = errMsg ? ` \u2014 ${errMsg.replace(/\s+/g, " ").slice(0, 80)}${errMsg.length > 80 ? "\u2026" : ""}` : "";
-  const errKindChip = errKind ? color39.dim(` [${errKind}]`) : "";
-  const errSnip = errMsg || errKind ? `${errKindChip}${color39.dim(errTail)}` : "";
+  const errKindChip = errKind ? color41.dim(` [${errKind}]`) : "";
+  const errSnip = errMsg || errKind ? `${errKindChip}${color41.dim(errTail)}` : "";
   switch (r.status) {
     case "success":
-      return { mark: color39.green("\u2713"), stats, tail: "" };
+      return { mark: color41.green("\u2713"), stats, tail: "" };
     case "timeout":
-      return { mark: color39.yellow("\u23F1"), stats: `${color39.yellow("timeout")} ${stats}`, tail: errSnip };
+      return { mark: color41.yellow("\u23F1"), stats: `${color41.yellow("timeout")} ${stats}`, tail: errSnip };
     case "stopped":
-      return { mark: color39.dim("\u2298"), stats: `${color39.dim("stopped")} ${stats}`, tail: errSnip };
+      return { mark: color41.dim("\u2298"), stats: `${color41.dim("stopped")} ${stats}`, tail: errSnip };
     case "failed":
-      return { mark: color39.red("\u2717"), stats: `${color39.red("failed")} ${stats}`, tail: errSnip };
+      return { mark: color41.red("\u2717"), stats: `${color41.red("failed")} ${stats}`, tail: errSnip };
   }
 }
 
@@ -12988,6 +13214,8 @@ async function main(argv) {
     statuslineHiddenItems: [...currentHiddenItems],
     setStatuslineHiddenItems,
     agentsMonitorController,
+    configStore,
+    reader,
     confirm: async (question, defaultYes = true) => {
       if (!process.stdin.isTTY) return false;
       const hint = defaultYes ? "[Y/n/q]" : "[y/N/q]";
@@ -13218,12 +13446,12 @@ async function main(argv) {
           if (!f.endsWith(".jsonl")) continue;
           const full = path25.join(runDir, f);
           try {
-            const stat3 = await fsp3.stat(full);
+            const stat4 = await fsp3.stat(full);
             found.push({
               runId,
               subagentId: f.replace(/\.jsonl$/, ""),
               file: full,
-              size: stat3.size
+              size: stat4.size
             });
           } catch {
           }