pm-orchestrator-runner 1.0.4 → 1.0.6

package/dist/executor/recovery-executor.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * Recovery Executor for E2E Recovery Testing
+ *
+ * Purpose: Simulate TIMEOUT, BLOCKED, and FAIL_CLOSED scenarios
+ * to verify wrapper recovery behavior.
+ *
+ * ========================================
+ * SAFETY: TEST-ONLY COMPONENT
+ * ========================================
+ * This executor is designed ONLY for E2E testing.
+ * Production safety mechanisms:
+ *   1. Requires explicit PM_EXECUTOR_MODE=recovery-stub
+ *   2. Rejects activation when NODE_ENV=production
+ *   3. Prints warning to stdout on activation
+ *   4. All output contains mode=recovery-stub marker
+ *
+ * Activation:
+ *   PM_EXECUTOR_MODE=recovery-stub
+ *   PM_RECOVERY_SCENARIO=timeout|blocked|fail-closed
+ *
+ * Behaviors:
+ *   TIMEOUT: Block indefinitely until watchdog kills (hard timeout)
+ *   BLOCKED: Return output with interactive prompt patterns
+ *   FAIL_CLOSED: Return ERROR status immediately
+ *
+ * E2E Verification Criteria:
+ *   - Wrapper must recover from all scenarios
+ *   - Exit code must be 0, 1, or 2 (graceful termination)
+ *   - Immediate Summary must be visible (RESULT/TASK/HINT)
+ *   - No RUNNING residue in session state
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecoveryExecutor = void 0;
+exports.isProductionEnvironment = isProductionEnvironment;
+exports.isRecoveryMode = isRecoveryMode;
+exports.assertRecoveryModeAllowed = assertRecoveryModeAllowed;
+exports.printRecoveryModeWarning = printRecoveryModeWarning;
+exports.getRecoveryScenario = getRecoveryScenario;
+exports.createRecoveryExecutor = createRecoveryExecutor;
+/**
+ * Check if running in production environment
+ */
+function isProductionEnvironment() {
+    return process.env.NODE_ENV === 'production';
+}
+/**
+ * Check if recovery mode is enabled
+ *
+ * SAFETY: Returns false if NODE_ENV=production
+ */
+function isRecoveryMode() {
+    // Production safety: reject recovery-stub in production
+    if (isProductionEnvironment()) {
+        return false;
+    }
+    return process.env.PM_EXECUTOR_MODE === 'recovery-stub';
+}
+/**
+ * Attempt to enable recovery mode in production
+ * This will fail-closed with process.exit(1) if attempted
+ *
+ * Call this early in the process to catch production misuse
+ */
+function assertRecoveryModeAllowed() {
+    if (process.env.PM_EXECUTOR_MODE === 'recovery-stub' && isProductionEnvironment()) {
+        console.error('[FATAL] recovery-stub is forbidden in production (NODE_ENV=production)');
+        console.error('[FATAL] mode=recovery-stub rejected');
+        process.exit(1);
+    }
+}
+/**
+ * Print warning when recovery mode is activated
+ * This MUST be visible in stdout for E2E verification
+ */
+function printRecoveryModeWarning() {
+    console.log('WARNING: recovery-stub enabled (test-only)');
+    console.log('mode=recovery-stub');
+}
+/**
+ * Get the current recovery scenario
+ */
+function getRecoveryScenario() {
+    const scenario = process.env.PM_RECOVERY_SCENARIO;
+    if (scenario === 'timeout' || scenario === 'blocked' || scenario === 'fail-closed') {
+        return scenario;
+    }
+    return null;
+}
+/**
+ * RecoveryExecutor - For E2E recovery testing
+ *
+ * Simulates failure scenarios that require wrapper recovery.
+ * Each scenario tests a different recovery path.
+ *
+ * SAFETY: Constructor prints warning to stdout
+ */
+class RecoveryExecutor {
+    scenario;
+    constructor(scenario) {
+        // Print warning on construction (visible in stdout)
+        printRecoveryModeWarning();
+        this.scenario = scenario || getRecoveryScenario() || 'timeout';
+    }
+    async isClaudeCodeAvailable() {
+        // In recovery mode, we simulate Claude Code availability
+        return true;
+    }
+    async execute(task) {
+        const startTime = Date.now();
+        const cwd = task.workingDir;
+        // Evidence marker for E2E verification
+        console.log(`[RecoveryExecutor] mode=recovery-stub`);
+        console.log(`[RecoveryExecutor] Scenario: ${this.scenario}, task: ${task.id}`);
+        switch (this.scenario) {
+            case 'timeout':
+                return this.simulateTimeout(task, startTime, cwd);
+            case 'blocked':
+                return this.simulateBlocked(task, startTime, cwd);
+            case 'fail-closed':
+                return this.simulateFailClosed(task, startTime, cwd);
+            default:
+                // Should never happen, but fail-closed for safety
+                return this.simulateFailClosed(task, startTime, cwd);
+        }
+    }
+    /**
+     * TIMEOUT scenario:
+     * Block for a long time to trigger hard timeout in the wrapper.
+     * The wrapper should detect no output and terminate.
+     */
+    async simulateTimeout(task, startTime, cwd) {
+        console.log('[RecoveryExecutor] Simulating TIMEOUT - blocking for extended period');
+        // Block for a very long time (the wrapper should kill us before this completes)
+        // Using a reasonable time that exceeds hard timeout (default 120s)
+        // For testing, we use a shorter time but longer than the test's configured timeout
+        const blockDuration = parseInt(process.env.RECOVERY_TIMEOUT_BLOCK_MS || '150000', 10);
+        await new Promise((resolve) => {
+            const timeout = setTimeout(resolve, blockDuration);
+            // Allow the timeout to be unrefd so the process can be killed
+            timeout.unref();
+        });
+        // If we reach here, the wrapper failed to terminate us (test failure case)
+        return {
+            executed: false,
+            output: '',
+            error: 'TIMEOUT simulation - wrapper failed to terminate',
+            files_modified: [],
+            duration_ms: Date.now() - startTime,
+            status: 'ERROR',
+            cwd,
+            verified_files: [],
+            unverified_files: [],
+            executor_blocked: true,
+            blocked_reason: 'TIMEOUT',
+            timeout_ms: Date.now() - startTime,
+            terminated_by: 'TIMEOUT',
+        };
+    }
+    /**
+     * BLOCKED scenario:
+     * Return output containing interactive prompt patterns.
+     * The wrapper should detect BLOCKED status and recover.
+     */
+    async simulateBlocked(task, startTime, cwd) {
+        console.log('[RecoveryExecutor] Simulating BLOCKED - returning interactive prompt output');
+        // Small delay to simulate some processing
+        await new Promise((resolve) => setTimeout(resolve, 100));
+        // Return result indicating blocked status
+        // This simulates what happens when Claude Code CLI hits an interactive prompt
+        return {
+            executed: false,
+            output: 'Would you like to continue? [Y/n]',
+            error: 'Executor blocked: INTERACTIVE_PROMPT',
+            files_modified: [],
+            duration_ms: Date.now() - startTime,
+            status: 'BLOCKED',
+            cwd,
+            verified_files: [],
+            unverified_files: [],
+            executor_blocked: true,
+            blocked_reason: 'INTERACTIVE_PROMPT',
+            timeout_ms: Date.now() - startTime,
+            terminated_by: 'REPL_FAIL_CLOSED',
+        };
+    }
+    /**
+     * FAIL_CLOSED scenario:
+     * Return ERROR status immediately.
+     * Simulates executor crash or unexpected termination.
+     */
+    async simulateFailClosed(task, startTime, cwd) {
+        console.log('[RecoveryExecutor] Simulating FAIL_CLOSED - returning error immediately');
+        // Small delay to simulate some processing
+        await new Promise((resolve) => setTimeout(resolve, 50));
+        // Return error result (simulates non-zero exit code)
+        return {
+            executed: false,
+            output: 'Fatal error: simulated crash',
+            error: 'Executor terminated unexpectedly (simulated FAIL_CLOSED)',
+            files_modified: [],
+            duration_ms: Date.now() - startTime,
+            status: 'ERROR',
+            cwd,
+            verified_files: [],
+            unverified_files: [],
+            executor_blocked: false,
+        };
+    }
+}
+exports.RecoveryExecutor = RecoveryExecutor;
+/**
+ * Create recovery executor if in recovery mode
+ *
+ * SAFETY: Calls assertRecoveryModeAllowed() to reject production usage
+ */
+function createRecoveryExecutor() {
+    // Early fail-closed for production misuse
+    assertRecoveryModeAllowed();
+    if (isRecoveryMode()) {
+        const scenario = getRecoveryScenario();
+        if (scenario) {
+            return new RecoveryExecutor(scenario);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=recovery-executor.js.map

package/dist/executor/recovery-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-executor.js","sourceRoot":"","sources":["../../src/executor/recovery-executor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAiBH,0DAEC;AAOD,wCAMC;AAQD,8DAMC;AAMD,4DAGC;AAKD,kDAMC;AA4JD,wDAWC;AA3ND;;GAEG;AACH,SAAgB,uBAAuB;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc;IAC5B,wDAAwD;IACxD,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,eAAe,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,eAAe,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAClF,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB;IACtC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAa,gBAAgB;IACnB,QAAQ,CAAmB;IAEnC,YAAY,QAA2B;QACrC,oDAAoD;QACpD,wBAAwB,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,mBAAmB,EAAE,IAAI,SAAS,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,yDAAyD;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAkB;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QAE5B,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,QAAQ,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE/E,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACpD,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACpD,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACvD;gBACE,kDAAkD;gBAClD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAC3B,IAAkB,EAClB,SAAiB,EACjB,GAAW;QAEX,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QAEpF,gFAAgF;QAChF,mEAAmE;QACnE,mFAAmF;QACnF,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEtF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACnD,8DAA8D;YAC9D,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,kDAAkD;YACzD,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,MAAM,EAAE,OAAO;YACf,GAAG;YACH,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,SAA0B;YAC1C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,aAAa,EAAE,SAAyB;SACzC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAC3B,IAAkB,EAClB,SAAiB,EACjB,GAAW;QAEX,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAE3F,0CAA0C;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzD,0CAA0C;QAC1C,8EAA8E;QAC9E,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,mCAAmC;YAC3C,KAAK,EAAE,sCAAsC;YAC7C,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,MAAM,EAAE,SAAS;YACjB,GAAG;YACH,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,oBAAqC;YACrD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,aAAa,EAAE,kBAAkC;SAClD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,kBAAkB,CAC9B,IAAkB,EAClB,SAAiB,EACjB,GAAW;QAEX,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;QAEvF,0CAA0C;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAExD,qDAAqD;QACrD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,8BAA8B;YACtC,KAAK,EAAE,0DAA0D;YACjE,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,MAAM,EAAE,OAAO;YACf,GAAG;YACH,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,KAAK;SACxB,CAAC;IACJ,CAAC;CACF;AA3ID,4CA2IC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB;IACpC,0CAA0C;IAC1C,yBAAyB,EAAE,CAAC;IAE5B,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/repl/commands/keys.d.ts

@@ -3,11 +3,14 @@
  *
  * Per spec 10_REPL_UX.md Section 2.3:
  * - /keys: show status of all API keys (SET/NOT SET)
+ * - /keys set <provider> <key>: set API key in global config
  * - /keys check: validate API key format
  *
  * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
  * - API keys must NEVER appear in logs or evidence
  * - Only "SET" or "NOT SET" status is allowed
+ *
+ * API keys are stored in global config file (~/.pm-orchestrator-runner/config.json)
  */
 /**
  * Key status result
@@ -39,9 +42,23 @@ export declare class KeysCommand {
      * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
      * - Only show SET/NOT SET, never the actual key value
      *
+     * Checks both:
+     * - Global config file (~/.pm-orchestrator-runner/config.json)
+     * - Environment variables (legacy support)
+     *
      * @returns Keys result
      */
     getKeyStatus(): Promise<KeysResult>;
+    /**
+     * Set API key in global config
+     * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
+     * - API key value is stored but NEVER displayed
+     *
+     * @param provider - Provider ID (openai or anthropic)
+     * @param key - API key value
+     * @returns Keys result
+     */
+    setKey(provider: string, key: string): Promise<KeysResult>;
     /**
      * Check if a specific provider's API key is configured
      *

package/dist/repl/commands/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/repl/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,cAAc,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB;;;;;;OAMG;IACG,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;IAsBzC;;;;;OAKG;IACG,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAgC/D;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM;CA0B3C"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/repl/commands/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAeH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,cAAc,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;IAoCzC;;;;;;;;OAQG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAyChE;;;;;OAKG;IACG,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAgC/D;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM;CA+B3C"}

package/dist/repl/commands/keys.js

@@ -4,17 +4,21 @@
  *
  * Per spec 10_REPL_UX.md Section 2.3:
  * - /keys: show status of all API keys (SET/NOT SET)
+ * - /keys set <provider> <key>: set API key in global config
  * - /keys check: validate API key format
  *
  * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
  * - API keys must NEVER appear in logs or evidence
  * - Only "SET" or "NOT SET" status is allowed
+ *
+ * API keys are stored in global config file (~/.pm-orchestrator-runner/config.json)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KeysCommand = void 0;
 const sensitive_data_masker_1 = require("../../logging/sensitive-data-masker");
 const repl_1 = require("../../models/repl");
 const model_registry_1 = require("../../models/repl/model-registry");
+const global_config_1 = require("../../config/global-config");
 /**
  * Keys Command class
  */
@@ -24,18 +28,35 @@ class KeysCommand {
      * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
      * - Only show SET/NOT SET, never the actual key value
      *
+     * Checks both:
+     * - Global config file (~/.pm-orchestrator-runner/config.json)
+     * - Environment variables (legacy support)
+     *
      * @returns Keys result
      */
     async getKeyStatus() {
         const providers = (0, model_registry_1.getAllProviders)();
         const keys = [];
         for (const provider of providers) {
+            // Check global config first
+            const globalKey = (0, global_config_1.getApiKey)(provider.id);
+            // Then check environment variables (legacy)
             const keyCheck = (0, sensitive_data_masker_1.checkApiKeyForProvider)(provider.id);
+            // Use global config if set, otherwise fall back to env var
+            const isSet = !!globalKey || keyCheck.status === 'SET';
+            // Determine status: NOT_REQUIRED for providers that don't need keys
+            let status;
+            if (!keyCheck.required) {
+                status = 'NOT_REQUIRED';
+            }
+            else {
+                status = isSet ? 'SET' : 'NOT SET';
+            }
             keys.push({
                 provider: provider.displayName,
                 envVar: keyCheck.envVar,
                 required: keyCheck.required,
-                status: keyCheck.status,
+                status,
             });
         }
         return {
@@ -44,6 +65,52 @@ class KeysCommand {
             keys,
         };
     }
+    /**
+     * Set API key in global config
+     * Per spec 06_CORRECTNESS_PROPERTIES.md Property 24:
+     * - API key value is stored but NEVER displayed
+     *
+     * @param provider - Provider ID (openai or anthropic)
+     * @param key - API key value
+     * @returns Keys result
+     */
+    async setKey(provider, key) {
+        // Validate provider
+        const validProviders = ['openai', 'anthropic'];
+        if (!validProviders.includes(provider.toLowerCase())) {
+            return {
+                success: false,
+                message: 'Invalid provider',
+                error: {
+                    code: 'E102',
+                    message: 'Invalid provider: ' + provider + '. Valid providers: openai, anthropic',
+                },
+            };
+        }
+        // Validate key format
+        if (!key || key.length < 10) {
+            return {
+                success: false,
+                message: 'Invalid API key',
+                error: {
+                    code: 'E108',
+                    message: 'API key appears to be invalid (too short)',
+                },
+            };
+        }
+        // Set the key in global config
+        (0, global_config_1.setApiKey)(provider.toLowerCase(), key);
+        return {
+            success: true,
+            message: 'API key set successfully for ' + provider,
+            keys: [{
+                    provider: provider,
+                    envVar: null,
+                    required: true,
+                    status: 'SET',
+                }],
+        };
+    }
     /**
      * Check if a specific provider's API key is configured
      *
@@ -97,14 +164,18 @@ class KeysCommand {
             else {
                 const statusIcon = key.status === 'SET' ? '[OK]' : '[MISSING]';
                 output += '    Status: ' + statusIcon + ' ' + key.status + '\n';
-                output += '    Env Var: ' + key.envVar + '\n';
+                if (key.envVar) {
+                    output += '    Legacy Env Var: ' + key.envVar + '\n';
+                }
             }
             output += '\n';
         }
+        // Add config file info
+        output += 'Config file: ' + (0, global_config_1.getConfigFilePath)() + '\n\n';
         // Add help text
-        output += 'To set an API key, export the environment variable:\n';
-        output += '  export OPENAI_API_KEY=sk-...\n';
-        output += '  export ANTHROPIC_API_KEY=sk-ant-...\n';
+        output += 'To set an API key:\n';
+        output += '  /keys set openai <your-api-key>\n';
+        output += '  /keys set anthropic <your-api-key>\n';
         output += '\n';
         output += 'Note: API keys are NEVER displayed for security reasons.';
         return output;

package/dist/repl/commands/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/repl/commands/keys.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAEH,+EAG6C;AAC7C,4CAA8D;AAC9D,qEAAiF;AAyBjF;;GAEG;AACH,MAAa,WAAW;IACtB;;;;;;OAMG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,SAAS,GAAG,IAAA,gCAAe,GAAE,CAAC;QACpC,MAAM,IAAI,GAAgB,EAAE,CAAC;QAE7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAA,8CAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAErD,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,gBAAgB;YACzB,IAAI;SACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACvC,oBAAoB;QACpB,IAAI,CAAC,sBAAe,CAAC,QAAQ,CAAC,UAAsB,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,sBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kBAAkB;gBAC3B,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,oBAAoB,GAAG,UAAU,GAAG,qBAAqB,GAAG,SAAS;iBAC/E;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,8CAAsB,EAAC,UAAU,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,gCAAe,GAAE,CAAC;QACpC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAgB,CAAC;gBACzB,QAAQ,EAAE,YAAY,EAAE,WAAW,IAAI,UAAU;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,qBAAqB,GAAG,UAAU;YAC3C,IAAI;SACL,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAiB;QAC/B,IAAI,MAAM,GAAG,qBAAqB,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YAErC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,mDAAmD,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/D,MAAM,IAAI,cAAc,GAAG,UAAU,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;gBAChE,MAAM,IAAI,eAAe,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,uDAAuD,CAAC;QAClE,MAAM,IAAI,kCAAkC,CAAC;QAC7C,MAAM,IAAI,yCAAyC,CAAC;QACpD,MAAM,IAAI,IAAI,CAAC;QACf,MAAM,IAAI,0DAA0D,CAAC;QAErE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAvGD,kCAuGC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/repl/commands/keys.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,+EAG6C;AAC7C,4CAA8D;AAC9D,qEAAiF;AACjF,8DAKoC;AAyBpC;;GAEG;AACH,MAAa,WAAW;IACtB;;;;;;;;;;OAUG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,SAAS,GAAG,IAAA,gCAAe,GAAE,CAAC;QACpC,MAAM,IAAI,GAAgB,EAAE,CAAC;QAE7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,4BAA4B;YAC5B,MAAM,SAAS,GAAG,IAAA,yBAAS,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACzC,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,IAAA,8CAAsB,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAErD,2DAA2D;YAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC;YAEvD,oEAAoE;YACpE,IAAI,MAA0C,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,GAAG,cAAc,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACrC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,gBAAgB;YACzB,IAAI;SACL,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,GAAW;QACxC,oBAAoB;QACpB,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kBAAkB;gBAC3B,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,oBAAoB,GAAG,QAAQ,GAAG,sCAAsC;iBAClF;aACF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,2CAA2C;iBACrD;aACF,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAA,yBAAS,EAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,+BAA+B,GAAG,QAAQ;YACnD,IAAI,EAAE,CAAC;oBACL,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,KAAK;iBACd,CAAC;SACH,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACvC,oBAAoB;QACpB,IAAI,CAAC,sBAAe,CAAC,QAAQ,CAAC,UAAsB,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,sBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kBAAkB;gBAC3B,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,oBAAoB,GAAG,UAAU,GAAG,qBAAqB,GAAG,SAAS;iBAC/E;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,8CAAsB,EAAC,UAAU,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,gCAAe,GAAE,CAAC;QACpC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAgB,CAAC;gBACzB,QAAQ,EAAE,YAAY,EAAE,WAAW,IAAI,UAAU;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,qBAAqB,GAAG,UAAU;YAC3C,IAAI;SACL,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAiB;QAC/B,IAAI,MAAM,GAAG,qBAAqB,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YAErC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,mDAAmD,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC/D,MAAM,IAAI,cAAc,GAAG,UAAU,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;gBAChE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,IAAI,sBAAsB,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,eAAe,GAAG,IAAA,iCAAiB,GAAE,GAAG,MAAM,CAAC;QAEzD,gBAAgB;QAChB,MAAM,IAAI,sBAAsB,CAAC;QACjC,MAAM,IAAI,qCAAqC,CAAC;QAChD,MAAM,IAAI,wCAAwC,CAAC;QACnD,MAAM,IAAI,IAAI,CAAC;QACf,MAAM,IAAI,0DAA0D,CAAC;QAErE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAhLD,kCAgLC"}

package/dist/repl/commands/status.d.ts

@@ -1,8 +1,22 @@
 /**
  * Status Commands Handler
  * Manages /status and /tasks commands
+ *
+ * UX Improvements (v2):
+ * - Tasks are categorized into Active/Completed/Failed/Pending sections
+ * - ERROR tasks no longer shown as "Current Tasks"
+ * - Human-readable error messages with guidance
+ * - Alert banners for failed tasks
  */
 import { RunnerCore } from '../../core/runner-core';
+/**
+ * Translate technical error messages to human-readable form
+ */
+export declare function getHumanReadableError(errorMessage: string): string;
+/**
+ * Get guidance for specific error types
+ */
+export declare function getErrorGuidance(status: string): string[];
 /**
  * REPL session state (shared with repl-interface)
  */
@@ -24,9 +38,13 @@ export declare class StatusCommands {
      */
     getStatus(): Promise<string>;
     /**
-     * Get current tasks
+     * Get current tasks - with improved categorization
      */
     getTasks(): Promise<string>;
+    /**
+     * Categorize tasks by status
+     */
+    private categorizeTasks;
     /**
      * Format no session message
      */
@@ -44,9 +62,9 @@ export declare class StatusCommands {
      */
     private formatStatus;
     /**
-     * Format tasks list
+     * Format tasks list - IMPROVED with categorization and guidance
      */
-    private formatTasks;
+    private formatTasksImproved;
     /**
      * Get status icon
      */

package/dist/repl/commands/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/repl/commands/status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWpD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;CACvC;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAc;gBAEjB,OAAO,EAAE,WAAW;IAIhC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAwBlC;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAsBjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAWtB;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;IACH,OAAO,CAAC,YAAY;IA8BpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAoCnB;;OAEG;IACH,OAAO,CAAC,aAAa;CActB"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/repl/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWpD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAqBlE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAqCzD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,GAAG,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;CACvC;AAYD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAc;gBAEjB,OAAO,EAAE,WAAW;IAIhC;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IAwBlC;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAsBjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAiCvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAavB;;OAEG;IACH,OAAO,CAAC,cAAc;IAUtB;;OAEG;IACH,OAAO,CAAC,aAAa;IAUrB;;OAEG;IACH,OAAO,CAAC,YAAY;IA4BpB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAkF3B;;OAEG;IACH,OAAO,CAAC,aAAa;CActB"}