winter-super-cli 2026.5.24 → 2026.5.26

package/src/cli/commands.js

@@ -10,6 +10,25 @@ import { DesignCommands } from '../design/commands.js';
 import { SkillManager } from '../skills/manager.js';
 import { PluginManager } from '../plugins/manager.js';
 
+const SECRET_KEY_PATTERN = /(api[-_]?key|auth[-_]?token|access[-_]?token|refresh[-_]?token|secret|password)/i;
+
+export function redactSecrets(value) {
+  if (Array.isArray(value)) {
+    return value.map(item => redactSecrets(item));
+  }
+
+  if (!value || typeof value !== 'object') {
+    return value;
+  }
+
+  return Object.fromEntries(
+    Object.entries(value).map(([key, entry]) => [
+      key,
+      SECRET_KEY_PATTERN.test(key) ? '[redacted]' : redactSecrets(entry),
+    ])
+  );
+}
+
 export class CommandParser {
   constructor({ session, ai, config }) {
     this.session = session;
@@ -67,6 +86,8 @@ export class CommandParser {
       '/memories': () => this.showMemories(),
       '/plans': () => this.showPlans(),
       '/cache': () => this.handleCache(args),
+      '/provider': () => this.handleProvider(args),
+      '/providers': () => this.showProviders(),
       '/exit': () => process.exit(0),
     };
 
@@ -177,6 +198,7 @@ export class CommandParser {
     const [action, ...rest] = args;
 
     switch (action) {
+      case undefined:
       case 'list':
         const skills = await this.skills.listSkills();
         console.log(`\n${colors.cyan}Available Skills:${colors.reset}`);
@@ -199,16 +221,17 @@ export class CommandParser {
     const [action, ...rest] = args;
 
     switch (action) {
+      case undefined:
       case 'list':
         const plugins = await this.plugins.listPlugins();
         console.log(`\n${colors.cyan}Installed Plugins:${colors.reset}`);
         plugins.forEach(p => console.log(`  ${p.icon} ${p.name} v${p.version}`));
         break;
       case 'install':
-        console.log(`${statusIcons.success} Installing plugin: ${rest[0]}`);
+        await this.plugins.installPlugin(rest[0]);
         break;
       case 'remove':
-        console.log(`${statusIcons.success} Removed plugin: ${rest[0]}`);
+        await this.plugins.removePlugin(rest[0]);
         break;
       default:
         console.log(`${colors.yellow}Usage: winter plugin <list|install|remove>${colors.reset}`);
@@ -231,7 +254,7 @@ export class CommandParser {
   async handleConfig(args) {
     const config = await this.config.load();
     console.log(`\n${colors.cyan}Current Configuration:${colors.reset}`);
-    console.log(JSON.stringify(config, null, 2));
+    console.log(JSON.stringify(redactSecrets(config), null, 2));
   }
 
   async handleInit(args) {
@@ -259,6 +282,41 @@ export class CommandParser {
     }
   }
 
+  async handleProvider(args) {
+    const providerName = args[0]?.trim().toLowerCase();
+
+    if (!providerName) {
+      await this.ai.init?.();
+      console.log(`${colors.cyan}Provider: ${this.ai.getActiveProvider()}${colors.reset}`);
+      return;
+    }
+
+    const switched = typeof this.ai.switchProvider === 'function'
+      ? await this.ai.switchProvider(providerName)
+      : (this.ai.setProvider(providerName) ? providerName : null);
+
+    if (switched) {
+      await this.config.setDefaultProvider(switched);
+      console.log(`${statusIcons.success} Provider: ${switched}`);
+      return;
+    }
+
+    const available = this.ai.listProviders?.().map(p => p.name).join(', ') || 'none';
+    console.log(`${colors.red}${statusIcons.error} Unknown provider: ${providerName}${colors.reset}`);
+    console.log(`${colors.dim}Available providers: ${available}${colors.reset}`);
+  }
+
+  async showProviders() {
+    await this.ai.init?.();
+    const providers = this.ai.listProviders?.() || [];
+    console.log(`\n${colors.cyan}Providers:${colors.reset}`);
+    providers.forEach(p => {
+      const status = p.ready ? statusIcons.online : statusIcons.offline;
+      const active = p.name === this.ai.getActiveProvider?.() ? ` ${colors.green}< active${colors.reset}` : '';
+      console.log(`  ${status} ${p.name} (${p.model})${active}`);
+    });
+  }
+
   async showMemories() {
     const memories = this.session.getMemory();
     console.log(`\n${colors.cyan}Memories:${colors.reset}`);

package/src/cli/commands.test.js

@@ -0,0 +1,179 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+
+import { CommandParser, redactSecrets } from './commands.js';
+import { PluginManager } from '../plugins/manager.js';
+
+function createParser() {
+  const session = {
+    getSessionId: () => '12345678-1234-1234-1234-123456789abc',
+    updateContext: async () => {},
+    addToMemory: async () => {},
+    getMemory: () => [],
+    getPlans: () => [],
+    newSession: async () => ({ id: '12345678-1234-1234-1234-123456789abc' }),
+    saveSession: async () => {},
+    listSessions: async () => [],
+    switchSession: async () => true,
+  };
+
+  const ai = {
+    chat: async () => ({ content: 'ok' }),
+    callAllProviders: async () => ({}),
+    clearCache: () => {},
+    getCacheStats: () => ({ size: 0, activeProvider: 'ollama' }),
+  };
+
+  const config = { load: async () => ({}) };
+  const parser = new CommandParser({ session, ai, config });
+
+  parser.skills = {
+    listSkills: async () => [
+      { icon: '💻', name: 'coding', description: 'Code analysis, generation, and review' },
+    ],
+    enableSkill: async () => true,
+    createSkill: async () => {},
+  };
+
+  parser.plugins = {
+    listPlugins: async () => [
+      { icon: '❄️', name: 'winter-core', version: '1.0.0' },
+    ],
+    installPlugin: async () => {},
+    removePlugin: async () => {},
+  };
+
+  return parser;
+}
+
+test('config output redacts provider secrets recursively', async () => {
+  const config = {
+    defaultProvider: 'custom',
+    custom: {
+      baseURL: 'http://localhost:4000/v1',
+      apiKey: 'sk-live-secret',
+      nested: {
+        authToken: 'npm-secret-token',
+      },
+    },
+    project: {
+      current: 'E:\\dev\\app\\winter',
+    },
+  };
+
+  const redacted = redactSecrets(config);
+
+  assert.equal(redacted.custom.apiKey, '[redacted]');
+  assert.equal(redacted.custom.nested.authToken, '[redacted]');
+  assert.equal(redacted.custom.baseURL, config.custom.baseURL);
+  assert.equal(redacted.project.current, config.project.current);
+  assert.equal(config.custom.apiKey, 'sk-live-secret');
+});
+
+test('skill and plugin commands default to list output', async () => {
+  const parser = createParser();
+  const logs = [];
+  const originalLog = console.log;
+
+  console.log = (...args) => {
+    logs.push(args.join(' '));
+  };
+
+  try {
+    await parser.parse(['skill']);
+    await parser.parse(['plugin']);
+  } finally {
+    console.log = originalLog;
+  }
+
+  assert(logs.some(line => line.includes('Available Skills')));
+  assert(logs.some(line => line.includes('Installed Plugins')));
+});
+
+test('slash provider command switches and persists provider', async () => {
+  const session = {
+    getSessionId: () => '12345678-1234-1234-1234-123456789abc',
+    addToMemory: async () => {},
+    getMemory: () => [],
+    getPlans: () => [],
+  };
+  const saved = [];
+  const ai = {
+    active: 'ollama',
+    providers: {
+      custom: { model: 'custom-model', ready: true },
+      ollama: { model: 'llama3', ready: true },
+    },
+    async switchProvider(name) {
+      if (!this.providers[name]) return null;
+      this.active = name;
+      return name;
+    },
+    getActiveProvider() {
+      return this.active;
+    },
+    listProviders() {
+      return Object.entries(this.providers).map(([name, provider]) => ({ name, ...provider }));
+    },
+  };
+  const parser = new CommandParser({
+    session,
+    ai,
+    config: {
+      setDefaultProvider: async provider => saved.push(provider),
+    },
+  });
+
+  await parser.parse(['/provider', 'custom']);
+
+  assert.equal(ai.getActiveProvider(), 'custom');
+  assert.deepEqual(saved, ['custom']);
+});
+
+test('slash providers command lists available providers', async () => {
+  const parser = createParser();
+  parser.ai = {
+    init: async () => {},
+    getActiveProvider: () => 'custom',
+    listProviders: () => [
+      { name: 'custom', ready: true, model: 'custom-model' },
+    ],
+  };
+  const logs = [];
+  const originalLog = console.log;
+
+  console.log = (...args) => logs.push(args.join(' '));
+  try {
+    await parser.parse(['/providers']);
+  } finally {
+    console.log = originalLog;
+  }
+
+  assert(logs.some(line => line.includes('custom')));
+  assert(logs.some(line => line.includes('custom-model')));
+});
+
+test('plugin manager loads local plugin files via file URLs', async () => {
+  const root = await mkdtemp(path.join(tmpdir(), 'winter-plugin-load-'));
+  const pluginsDir = path.join(root, '.winter', 'plugins');
+  await mkdir(pluginsDir, { recursive: true });
+  await writeFile(
+    path.join(pluginsDir, 'example.js'),
+    'export default { name: "example", version: "2.0.0", icon: "✨", description: "Example plugin" };\n'
+  );
+
+  const manager = new PluginManager({
+    addToMemory: async () => {},
+  });
+  manager.pluginsDir = pluginsDir;
+
+  const plugins = await manager.listPlugins();
+  const loaded = plugins.find(plugin => plugin.name === 'example');
+
+  assert(loaded);
+  assert.equal(loaded.version, '2.0.0');
+  assert.equal(loaded.icon, '✨');
+});

package/src/cli/config.js

@@ -27,6 +27,10 @@ export class ConfigLoader {
   getDefaults() {
     return {
       defaultProvider: 'ollama',
+      project: {
+        current: '',
+        lastOpenedAt: '',
+      },
       anthropic: {
         apiKey: '',
         model: 'claude-sonnet-4-20250514',
@@ -91,4 +95,12 @@ export class ConfigLoader {
     config[provider].model = model;
     await this.save(config);
   }
+
+  async setProjectCurrent(projectPath) {
+    const config = await this.load();
+    config.project = config.project || {};
+    config.project.current = projectPath;
+    config.project.lastOpenedAt = new Date().toISOString();
+    await this.save(config);
+  }
 }