wogiflow 1.0.42 → 1.0.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "1.0.42",
+  "version": "1.0.44",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {

package/scripts/flow-bug.js

@@ -22,6 +22,7 @@ const {
   fileExists,
   dirExists,
   writeFile,
+  writeJson,
   generateTaskId,
   parseFlags,
   outputJson,
@@ -56,7 +57,10 @@ function getCurrentTask() {
   try {
     const sessionState = loadSessionState();
     return sessionState.currentTask || null;
-  } catch {
+  } catch (err) {
+    if (process.env.DEBUG) {
+      console.error(`[DEBUG] getCurrentTask error: ${err.message}`);
+    }
     return null;
   }
 }
@@ -77,7 +81,7 @@ function createBugContent(bug) {
 
   const date = createdAt.split('T')[0];
   const discoveredSection = discoveredFrom
-    ? `**Discovered From**: ${discoveredFrom}\n**Discovered During**: ${discoveredDuring}\n`
+    ? `**Discovered From**: ${discoveredFrom}\n**Discovered During**: ${discoveredDuring || 'implementation'}\n`
     : '';
 
   return `# ${id}: ${title}
@@ -88,30 +92,120 @@ function createBugContent(bug) {
 **Priority**: ${priority}
 **Tags**: #bug
 ${discoveredSection}
-## Description
-[Clear description of the bug]
+## Bug Summary
+[1-2 sentences: What is broken and what is the impact?]
 
-## Steps to Reproduce
+## Reproduction
+
+### Steps to Reproduce
 1. [Step 1]
 2. [Step 2]
 3. [Step 3]
 
-## Expected Behavior
+### Expected Behavior
 [What should happen]
 
-## Actual Behavior
+### Actual Behavior
 [What actually happens]
 
-## Environment
-- Browser:
-- OS:
-- Version:
+### Environment
+- Browser: [if applicable]
+- OS: [if applicable]
+- Version: [app version]
+- Node/Runtime: [if applicable]
+
+### Screenshots/Logs
+[Attach screenshots, error logs, or stack traces]
+
+---
+
+## Root Cause Analysis
+
+### What Went Wrong?
+[Technical explanation of the bug - what part of the code/logic is failing and why]
+
+### Why Did This Happen?
+[Choose one or more]
+- [ ] Logic error in implementation
+- [ ] Missing edge case handling
+- [ ] Incorrect assumption about inputs/state
+- [ ] Race condition / timing issue
+- [ ] External dependency failure
+- [ ] Configuration/environment issue
+- [ ] Prompt/instruction unclear or ambiguous
+- [ ] Other: [explain]
+
+### Source of the Problem
+<!-- For AI-assisted development, this helps us learn -->
+- **Prompt issue**: [Was the original request ambiguous or missing context?]
+- **Logic gap**: [What reasoning led to the bug?]
+- **Missing context**: [What information would have prevented this?]
+
+---
+
+## Fix Approaches
+
+### Approach 1: [Name] (Recommended)
+**Description**: [How this approach fixes the bug]
+**Pros**: [Benefits]
+**Cons**: [Drawbacks]
+**Files affected**: [List files]
+
+### Approach 2: [Name] (Alternative)
+**Description**: [How this approach fixes the bug]
+**Pros**: [Benefits]
+**Cons**: [Drawbacks]
+**Files affected**: [List files]
+
+### Chosen Approach
+[Which approach and why]
+
+---
+
+## Acceptance Criteria
+
+### Scenario 1: Bug is fixed
+**Given** [the conditions that previously triggered the bug]
+**When** [the action that caused the bug]
+**Then** [the expected correct behavior]
+
+### Scenario 2: No regression
+**Given** [related functionality]
+**When** [normal usage]
+**Then** [existing behavior is preserved]
+
+### Scenario 3: Edge case handling
+**Given** [edge case conditions]
+**When** [edge case action]
+**Then** [graceful handling]
+
+---
+
+## Test Strategy
+- [ ] Unit test: [What to test]
+- [ ] Integration test: [What to test]
+- [ ] Manual verification: [Steps to verify fix]
+
+## Verification Checklist
+<!-- Quick steps to confirm the bug is fixed -->
+1. [ ] [Step to verify the bug no longer occurs]
+2. [ ] [Step to verify no regression]
+3. [ ] [Step to verify edge cases]
+
+---
+
+## Prevention & Learning
+
+### How to Prevent Similar Bugs
+[What changes to process, prompts, or code patterns would prevent this?]
 
-## Screenshots
-[If applicable]
+### Learnings to Capture
+<!-- These should be added to decisions.md or skill learnings -->
+- [ ] Pattern to add to decisions.md: [describe]
+- [ ] Skill learning to record: [describe]
+- [ ] Prompt improvement: [describe]
 
-## Possible Fix
-[If you have ideas about what's causing it or how to fix]
+---
 
 ## Related
 - [Related request-log entries]
@@ -119,9 +213,11 @@ ${discoveredSection}
 ${discoveredFrom ? `- Discovered while working on: ${discoveredFrom}` : ''}
 
 ## Resolution
-[Fill in when fixed]
-- Fixed in: [commit/PR]
-- Root cause: [explanation]
+<!-- Fill in when fixed -->
+- **Fixed in**: [commit hash or PR]
+- **Root cause confirmed**: [yes/no - was initial analysis correct?]
+- **Learnings applied**: [what was added to decisions.md/skills?]
+- **Tests added**: [what tests were added?]
 `;
 }
 
@@ -245,14 +341,14 @@ Examples:
           specPath: bugPath
         });
 
-        fs.writeFileSync(PATHS.ready, JSON.stringify(ready, null, 2), 'utf-8');
+        writeJson(PATHS.ready, ready);
         addedToReady = true;
       }
     });
-  } catch (lockErr) {
+  } catch (err) {
     // Non-fatal: bug file was created, just couldn't add to ready.json
     if (process.env.DEBUG) {
-      console.error(`[DEBUG] Could not add to ready.json: ${lockErr.message}`);
+      console.error(`[DEBUG] Could not add to ready.json: ${err.message}`);
     }
   }
 

package/scripts/flow-start.js

@@ -16,7 +16,8 @@ const {
   findTask,
   color,
   error,
-  getConfig
+  getConfig,
+  safeJsonParse
 } = require('./flow-utils');
 // Auto-context module (optional - graceful degradation)
 let autoContext = null;
@@ -49,7 +50,7 @@ try {
 const assessTaskComplexity = complexityModule?.assessTaskComplexity || (() => ({ level: 'unknown' }));
 
 // v1.7.0 context memory management
-const { warnIfContextHigh, checkContextHealth } = require('./flow-context-monitor');
+const { warnIfContextHigh } = require('./flow-context-monitor');
 const { setCurrentTask } = require('./flow-memory-blocks');
 const { trackTaskStart, checkAndDisplayResumeContext } = require('./flow-session-state');
 
@@ -137,20 +138,22 @@ function getRegistrySummary(registryPath, type) {
   try {
     if (!fs.existsSync(registryPath)) return null;
 
-    const content = fs.readFileSync(registryPath, 'utf-8');
+    // Use safeJsonParse for prototype pollution protection
+    const registry = safeJsonParse(registryPath, null);
+    if (!registry) return null;
+
     if (type === 'function') {
-      const registry = JSON.parse(content);
       const count = registry.functions?.length || 0;
       const categories = Object.keys(registry.categories || {});
       return { count, categories };
     } else if (type === 'api') {
-      const registry = JSON.parse(content);
       const funcCount = registry.clientFunctions?.length || 0;
       const endpointCount = registry.endpoints?.length || 0;
       const services = Object.keys(registry.services || {});
       return { funcCount, endpointCount, services };
     }
-  } catch {
+  } catch (err) {
+    if (process.env.DEBUG) console.error(`[DEBUG] Registry read error: ${err.message}`);
     return null;
   }
   return null;

package/scripts/hooks/core/implementation-gate.js

@@ -113,12 +113,11 @@ function isImplementationGateEnabled() {
   return true;
 }
 
-/**
- * Check if soft mode is enabled (warn instead of block)
- * @returns {boolean}
- */
+// NOTE: softMode is deprecated. Use hooks.rules.implementationGate.mode = 'warn' instead.
+// Kept for backwards compatibility - maps to mode='warn'
 function isSoftModeEnabled() {
   const config = getConfig();
+  // Check legacy softMode, map to mode='warn'
   return config.hooks?.rules?.implementationGate?.softMode === true ||
          config.enforcement?.softMode === true;
 }
@@ -264,25 +263,16 @@ function checkImplementationGate(options = {}) {
   }
 
   // No active task and implementation intent detected
-  const softMode = isSoftModeEnabled();
+  // v4.2: Use 'mode' config as canonical control (softMode is deprecated fallback)
+  const config = getConfig();
+  let mode = config.hooks?.rules?.implementationGate?.mode;
 
-  if (softMode) {
-    return {
-      allowed: true,
-      blocked: false,
-      message: generateWarningMessage(prompt),
-      reason: 'warn_only',
-      confidence,
-      suggestedAction: 'create-story',
-      matches
-    };
+  // Backward compatibility: if mode not set, check legacy softMode
+  if (!mode) {
+    const softMode = isSoftModeEnabled();
+    mode = softMode ? 'warn' : 'block';
   }
 
-  // v4.2: Block and route through /wogi-start
-  // /wogi-start will triage: operational (execute directly), small fix (execute + log), or implementation (create task)
-  const config = getConfig();
-  const mode = config.hooks?.rules?.implementationGate?.mode || 'block';
-
   if (mode === 'off') {
     return {
       allowed: true,
@@ -343,10 +333,10 @@ Use: /wogi-start "${truncatePrompt(prompt)}"
 }
 
 /**
- * Generate block message (hard mode) - kept for backwards compatibility
+ * @deprecated Use generateBlockingMessage instead. Kept for backwards compatibility.
  */
 function generateBlockMessage(prompt) {
-  return generateRoutingMessage(prompt);
+  return generateBlockingMessage(prompt);
 }
 
 /**

package/templates/bug-report.md

@@ -1,43 +1,136 @@
-# wf-XXXXXXXX: [Title]
+# [wf-XXXXXXXX] [Title]
 
 **Created**: [date]
-**Status**: Open / In Progress / Fixed / Closed
-**Severity**: Critical / High / Medium / Low
+**Status**: Open | In Progress | Fixed | Closed
+**Severity**: Critical | High | Medium | Low
 **Priority**: P0-P4
 **Tags**: #bug #component:[name] #screen:[name]
 **Discovered From**: [wf-XXXXXXXX or empty if not during task]
-**Discovered During**: implementation / testing / review
+**Discovered During**: implementation | testing | review | production
 
-## Description
-[Clear description of the bug]
+## Bug Summary
+[1-2 sentences: What is broken and what is the impact?]
 
-## Steps to Reproduce
+## Reproduction
+
+### Steps to Reproduce
 1. [Step 1]
 2. [Step 2]
 3. [Step 3]
 
-## Expected Behavior
+### Expected Behavior
 [What should happen]
 
-## Actual Behavior
+### Actual Behavior
 [What actually happens]
 
-## Environment
-- Browser: 
-- OS: 
-- Version: 
+### Environment
+- Browser: [if applicable]
+- OS: [if applicable]
+- Version: [app version]
+- Node/Runtime: [if applicable]
+
+### Screenshots/Logs
+[Attach screenshots, error logs, or stack traces]
+
+---
+
+## Root Cause Analysis
+
+### What Went Wrong?
+[Technical explanation of the bug - what part of the code/logic is failing and why]
+
+### Why Did This Happen?
+[Choose one or more]
+- [ ] Logic error in implementation
+- [ ] Missing edge case handling
+- [ ] Incorrect assumption about inputs/state
+- [ ] Race condition / timing issue
+- [ ] External dependency failure
+- [ ] Configuration/environment issue
+- [ ] Prompt/instruction unclear or ambiguous
+- [ ] Other: [explain]
+
+### Source of the Problem
+<!-- For AI-assisted development, this helps us learn -->
+- **Prompt issue**: [Was the original request ambiguous or missing context?]
+- **Logic gap**: [What reasoning led to the bug?]
+- **Missing context**: [What information would have prevented this?]
+
+---
+
+## Fix Approaches
+
+### Approach 1: [Name] (Recommended)
+**Description**: [How this approach fixes the bug]
+**Pros**: [Benefits]
+**Cons**: [Drawbacks]
+**Files affected**: [List files]
+
+### Approach 2: [Name] (Alternative)
+**Description**: [How this approach fixes the bug]
+**Pros**: [Benefits]
+**Cons**: [Drawbacks]
+**Files affected**: [List files]
+
+### Chosen Approach
+[Which approach and why]
+
+---
+
+## Acceptance Criteria
+
+### Scenario 1: Bug is fixed
+**Given** [the conditions that previously triggered the bug]
+**When** [the action that caused the bug]
+**Then** [the expected correct behavior]
+
+### Scenario 2: No regression
+**Given** [related functionality]
+**When** [normal usage]
+**Then** [existing behavior is preserved]
+
+### Scenario 3: Edge case handling
+**Given** [edge case conditions]
+**When** [edge case action]
+**Then** [graceful handling]
+
+---
+
+## Test Strategy
+- [ ] Unit test: [What to test]
+- [ ] Integration test: [What to test]
+- [ ] Manual verification: [Steps to verify fix]
+
+## Verification Checklist
+<!-- Quick steps to confirm the bug is fixed -->
+1. [ ] [Step to verify the bug no longer occurs]
+2. [ ] [Step to verify no regression]
+3. [ ] [Step to verify edge cases]
+
+---
+
+## Prevention & Learning
+
+### How to Prevent Similar Bugs
+[What changes to process, prompts, or code patterns would prevent this?]
 
-## Screenshots
-[If applicable]
+### Learnings to Capture
+<!-- These should be added to decisions.md or skill learnings -->
+- [ ] Pattern to add to decisions.md: [describe]
+- [ ] Skill learning to record: [describe]
+- [ ] Prompt improvement: [describe]
 
-## Possible Fix
-[If you have ideas about what's causing it or how to fix]
+---
 
 ## Related
 - [Related request-log entries]
 - [Related components from app-map]
+- [Related tasks/stories]
 
 ## Resolution
-[Fill in when fixed]
-- Fixed in: [commit/PR]
-- Root cause: [explanation]
+<!-- Fill in when fixed -->
+- **Fixed in**: [commit hash or PR]
+- **Root cause confirmed**: [yes/no - was initial analysis correct?]
+- **Learnings applied**: [what was added to decisions.md/skills?]
+- **Tests added**: [what tests were added?]