wogiflow 1.9.7 → 1.9.8

package/lib/utils.js

@@ -40,7 +40,7 @@ function findProjectRoot() {
 /**
  * Safely parse JSON content with prototype pollution protection
  *
- * Note: For parsing JSON files, use safeJsonParseFile from flow-file-ops.js
+ * Note: For parsing JSON files, use safeJsonParse from flow-utils.js
  * or safeReadJson from this module instead.
  *
  * @param {string} content - JSON string to parse

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "1.9.7",
+  "version": "1.9.8",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {
@@ -9,8 +9,6 @@
   },
   "scripts": {
     "flow": "./scripts/flow",
-    "test": "node mcp-memory-server/test.js",
-    "memory-server": "node mcp-memory-server/index.js",
     "postinstall": "node scripts/postinstall.js",
     "preuninstall": "node scripts/preuninstall.js"
   },
@@ -58,10 +56,9 @@
   },
   "homepage": "https://github.com/Tomer-Wogi/WogiFlow#readme",
   "dependencies": {
-    "sql.js": "^1.10.0"
+    "sql.js": "^1.14.1"
   },
   "optionalDependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
     "@xenova/transformers": "^2.15.0"
   },
   "engines": {

package/scripts/flow-consistency-check.js

@@ -511,10 +511,6 @@ function runConsistencyCheck(options = {}) {
     }
   }
 
-  // TODO: Implement crossMapConsistency check (config key exists but check is not yet implemented)
-  // This would verify that components referenced in one map exist in others
-  // (e.g., a function used by a component is also in function-map)
-
   // Determine overall status
   const mode = consistencyConfig.mode || 'warn';
   const orphanMode = consistencyConfig.orphanMode || 'warn';

package/scripts/flow-context-estimator.js

@@ -13,7 +13,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const { getConfig, PATHS, safeJsonParse } = require('./flow-utils');
+const { getConfig, PATHS, safeJsonParse, validateTaskId } = require('./flow-utils');
 
 /**
  * Default estimation config (can be overridden in config.json)
@@ -33,20 +33,6 @@ const DEFAULT_REFACTOR_KEYWORDS = [
   'restructure', 'rearchitect', 'modernize', 'upgrade'
 ];
 
-// Valid task ID pattern — enforces wf-[8 hex] format and prevents path traversal
-// Also accepts legacy TASK-NNN/BUG-NNN and sub-tasks wf-XXXXXXXX-NN
-const VALID_TASK_ID_PATTERN = /^(wf-[a-f0-9]{8}(-\d{2})?|(TASK|BUG)-\d{3,})$/i;
-
-/**
- * Validate task ID format — must be wf-[8 hex chars] or legacy TASK-NNN/BUG-NNN.
- * Also prevents path traversal attacks.
- * @param {string} taskId - Task ID to validate
- * @returns {boolean} True if valid
- */
-function isValidTaskId(taskId) {
-  return typeof taskId === 'string' && VALID_TASK_ID_PATTERN.test(taskId);
-}
-
 /**
  * Get smart compaction config from config.json
  * @returns {Object} Smart compaction configuration
@@ -90,7 +76,7 @@ function getSmartCompactionConfig() {
  */
 function readSpecFile(taskId) {
   // Validate taskId to prevent path traversal (Security Rule)
-  if (!isValidTaskId(taskId)) {
+  if (!validateTaskId(taskId).valid) {
     return null;
   }
 
@@ -476,7 +462,7 @@ if (require.main === module) {
     const taskId = args[1];
 
     // Validate taskId to prevent path traversal
-    if (!isValidTaskId(taskId)) {
+    if (!validateTaskId(taskId).valid) {
       console.error(`Invalid task ID format: ${taskId}`);
       console.error('Task IDs must contain only alphanumeric characters, hyphens, and underscores.');
       process.exit(1);
@@ -521,7 +507,7 @@ if (require.main === module) {
     const taskId = args[1];
 
     // Validate taskId to prevent path traversal
-    if (!isValidTaskId(taskId)) {
+    if (!validateTaskId(taskId).valid) {
       console.error(`Invalid task ID format: ${taskId}`);
       console.error('Task IDs must contain only alphanumeric characters, hyphens, and underscores.');
       process.exit(1);
@@ -775,8 +761,6 @@ module.exports = {
   formatEstimationResult,
   extractCriteriaCount,
   extractFileCount,
-  isValidTaskId,
-  VALID_TASK_ID_PATTERN,
   // Finding-level estimation (for review-fix sessions)
   estimateFindingContextCost,
   calculateDynamicBatchSize,

package/scripts/flow-correct.js

@@ -23,6 +23,7 @@ const {
   dirExists,
   readFile,
   writeFile,
+  getConfig,
   color,
   success,
   warn,
@@ -35,7 +36,7 @@ const {
 
 function getCorrectionsDir() {
   try {
-    const config = JSON.parse(fs.readFileSync(PATHS.config, 'utf-8'));
+    const config = getConfig();
     const detailPath = config?.corrections?.detailPath;
     if (detailPath) {
       return path.isAbsolute(detailPath) ? detailPath : path.join(PROJECT_ROOT, detailPath);

package/scripts/flow-decision-tracker.js

@@ -22,10 +22,10 @@
 
 const fs = require('fs');
 const path = require('path');
-const crypto = require('crypto');
 const {
   PATHS,
   getConfig,
+  generateHashId,
   success,
   warn,
   error,
@@ -163,7 +163,7 @@ function recordAmendment(params) {
   }
 
   // Generate amendment record
-  const id = `amend-${crypto.randomBytes(4).toString('hex')}`;
+  const id = generateHashId('amend', '', '');
   const amendment = {
     id,
     timestamp: new Date().toISOString(),

package/scripts/flow-done.js

@@ -210,7 +210,7 @@ function checkOutstandingFindings() {
  */
 function runQualityGates(taskId, taskType) {
   // Validate taskId before using in any path construction
-  if (taskId && !validateTaskId(taskId)) {
+  if (taskId && !validateTaskId(taskId).valid) {
     console.log(color('red', `Invalid task ID format: ${String(taskId).slice(0, 30)}`));
     return { passed: false, failed: ['invalidTaskId'], errors: { invalidTaskId: 'Task ID failed validation' } };
   }
@@ -670,7 +670,7 @@ function runQualityGates(taskId, taskType) {
       }
     } else if (gate === 'generatedTestsPass') {
       if (config.testing?.enabled && config.testing?.generation?.autoGenerate) {
-        if (!validateTaskId(taskId)) {
+        if (!validateTaskId(taskId).valid) {
           console.log(`  ${color('yellow', '⚠')} generatedTestsPass (invalid task ID)`);
         } else {
           const testDir = path.join(PATHS.workflow, 'tests', 'generated', taskId);
@@ -727,7 +727,7 @@ function runQualityGates(taskId, taskType) {
       const gateModes = isUI ? ['ui', 'full', 'auto'] : ['api', 'full', 'auto'];
       const testingMode = config.testing?.mode || 'off';
       if (config.testing?.enabled && gateModes.includes(testingMode)) {
-        if (!validateTaskId(taskId)) {
+        if (!validateTaskId(taskId).valid) {
           console.log(`  ${color('yellow', '⚠')} ${gate} (invalid task ID)`);
         } else {
           try {
@@ -778,7 +778,7 @@ function runQualityGates(taskId, taskType) {
           }
 
           // Also check scenario verification results if available
-          if (!isUI && validateTaskId(taskId)) {
+          if (!isUI && validateTaskId(taskId).valid) {
             const scenarioReportPath = path.join(PATHS.workflow, 'verifications', `${taskId}-scenarios.json`);
             if (fs.existsSync(scenarioReportPath)) {
               try {

package/scripts/flow-entropy-monitor.js

@@ -17,40 +17,19 @@
 const fs = require('fs');
 const path = require('path');
 const memoryDb = require('./flow-memory-db');
+const { getConfig } = require('./flow-config-loader');
+const { color } = require('./flow-output');
 
 // ============================================================
 // Configuration
 // ============================================================
 
 const PROJECT_ROOT = process.env.WOGI_PROJECT_ROOT || process.cwd();
-const CONFIG_PATH = path.join(PROJECT_ROOT, '.workflow', 'config.json');
-
-function loadConfig() {
-  try {
-    if (fs.existsSync(CONFIG_PATH)) {
-      return JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
-    }
-  } catch {}
-  return {};
-}
 
 // ============================================================
 // Output Formatting
 // ============================================================
 
-function color(c, text) {
-  const colors = {
-    red: '\x1b[31m',
-    green: '\x1b[32m',
-    yellow: '\x1b[33m',
-    blue: '\x1b[34m',
-    cyan: '\x1b[36m',
-    gray: '\x1b[90m',
-    reset: '\x1b[0m'
-  };
-  return `${colors[c] || ''}${text}${colors.reset}`;
-}
-
 function formatEntropy(entropy) {
   if (entropy < 0.4) return color('green', `${entropy} (healthy)`);
   if (entropy < 0.7) return color('yellow', `${entropy} (moderate)`);
@@ -299,7 +278,7 @@ async function showPromotionCandidates(config) {
 
 async function main() {
   const args = process.argv.slice(2);
-  const config = loadConfig();
+  const config = getConfig();
 
   try {
     if (args.includes('--auto')) {

package/scripts/flow-export-scanner.js

@@ -16,10 +16,10 @@
 
 const fs = require('fs');
 const path = require('path');
-const { getProjectRoot: getProjectRootFromUtils, getConfig } = require('./flow-utils');
+const { PATHS, getConfig } = require('./flow-utils');
 
-// Default to getProjectRoot from utils, can be overridden via setProjectRoot() or CLI arg
-let PROJECT_ROOT = getProjectRootFromUtils();
+// Default to PATHS.root from flow-utils, can be overridden via setProjectRoot() or CLI arg
+let PROJECT_ROOT = PATHS.root;
 let CONFIG_PATH = path.join(PROJECT_ROOT, '.workflow/config.json');
 let CACHE_PATH = path.join(PROJECT_ROOT, '.workflow/state/export-map.json');
 const CACHE_MAX_AGE_MS = 5 * 60 * 1000; // 5 minutes

package/scripts/flow-health.js

@@ -38,7 +38,8 @@ const {
   checkSpecMigration,
   safeJsonParse,
   meetsVersion,
-  getFdCommand
+  getFdCommand,
+  getConfig
 } = require('./flow-utils');
 
 const { execSync, execFileSync } = require('child_process');
@@ -128,7 +129,7 @@ function main() {
   let cliType = 'claude-code'; // default
   if (fileExists(PATHS.config)) {
     try {
-      const config = require(PATHS.config);
+      const config = getConfig();
       cliType = config.cli?.type || 'claude-code';
     } catch {}
   }

package/scripts/flow-hybrid-test.js

@@ -9,7 +9,7 @@
 const fs = require('fs');
 const path = require('path');
 const { spawnSync } = require('child_process');
-const { getProjectRoot } = require('./flow-utils');
+const { getProjectRoot, getConfig } = require('./flow-utils');
 
 const PROJECT_ROOT = getProjectRoot();
 const TESTS = [];
@@ -52,8 +52,7 @@ test('Config file exists', () => {
 });
 
 test('Config has hybrid section', () => {
-  const configPath = path.join(PROJECT_ROOT, '.workflow', 'config.json');
-  const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+  const config = getConfig();
   if (!config.hybrid) {
     throw new Error('hybrid section missing from config');
   }

package/scripts/flow-long-input-stories.js

@@ -13,10 +13,8 @@
 
 const fs = require('fs');
 const path = require('path');
-const crypto = require('crypto');
-
 // Import safe utilities
-const { safeJsonParse, writeJson, generateTaskId, withLock, PATHS } = require('./flow-utils');
+const { safeJsonParse, writeJson, generateTaskId, generateHashId, withLock, PATHS } = require('./flow-utils');
 
 // Utility: ISO timestamp
 function now() {
@@ -95,7 +93,7 @@ const SCENARIO_PATTERNS = [
  * Generate unique story ID
  */
 function generateStoryId() {
-  return 'story-' + crypto.randomBytes(4).toString('hex');
+  return generateHashId('story', '', '');
 }
 
 /**
@@ -1063,14 +1061,14 @@ function resetPresentation() {
  * Generate unique edit session ID
  */
 function generateEditSessionId() {
-  return 'edit-' + crypto.randomBytes(4).toString('hex');
+  return generateHashId('edit', '', '');
 }
 
 /**
  * Generate unique change ID
  */
 function generateChangeId() {
-  return 'change-' + crypto.randomBytes(3).toString('hex');
+  return generateHashId('change', '', '');
 }
 
 /**

package/scripts/flow-long-input.js

@@ -15,8 +15,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const crypto = require('crypto');
-const { estimateTokens } = require('./flow-utils');
+const { estimateTokens, generateHashId, getConfig } = require('./flow-utils');
 
 // Import extracted modules (renamed from transcript-* to long-input-*)
 const transcriptParsing = require('./flow-long-input-parsing');
@@ -106,8 +105,6 @@ const {
 const TMP_DIR = path.join(process.cwd(), '.workflow', 'tmp', 'long-input');
 const STATE_DIR = TMP_DIR; // Alias for backward compatibility during migration
 const ACTIVE_DIGEST_FILE = path.join(TMP_DIR, 'active-digest.json');
-const CONFIG_FILE = path.join(process.cwd(), '.workflow', 'config.json');
-
 // Colors for CLI output
 const c = {
   reset: '\x1b[0m',
@@ -124,7 +121,7 @@ const c = {
  */
 function loadConfig() {
   try {
-    const config = JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+    const config = getConfig();
     return config.longInputGate || config.transcriptDigestion || {};
   } catch (_err) {
     return {};
@@ -135,7 +132,7 @@ function loadConfig() {
  * Generate unique digest ID
  */
 function generateDigestId() {
-  return 'digest-' + crypto.randomBytes(4).toString('hex');
+  return generateHashId('digest', '', '');
 }
 
 /**
@@ -860,7 +857,7 @@ function resolveOrphan(orphan, topics) {
 function createTopicFromOrphans(orphans, _existingTopics) {
   // Guard against empty orphans array
   if (!orphans || orphans.length === 0) {
-    const topicId = 't-auto-' + crypto.randomBytes(3).toString('hex');
+    const topicId = generateHashId('t-auto', '', '');
     return {
       id: topicId,
       title: 'Miscellaneous',
@@ -875,7 +872,7 @@ function createTopicFromOrphans(orphans, _existingTopics) {
     };
   }
 
-  const topicId = 't-auto-' + crypto.randomBytes(3).toString('hex');
+  const topicId = generateHashId('t-auto', '', '');
 
   // Extract common keywords from orphans
   const allWords = orphans.flatMap(o =>

package/scripts/flow-memory-compactor.js

@@ -20,6 +20,7 @@ const fs = require('fs');
 const path = require('path');
 const memoryDb = require('./flow-memory-db');
 const { getConfig, PROJECT_ROOT } = require('./flow-config-loader');
+const { color } = require('./flow-output');
 
 // ============================================================
 // Configuration
@@ -37,19 +38,6 @@ function loadConfig() {
 // Output Formatting
 // ============================================================
 
-function color(c, text) {
-  const colors = {
-    red: '\x1b[31m',
-    green: '\x1b[32m',
-    yellow: '\x1b[33m',
-    blue: '\x1b[34m',
-    cyan: '\x1b[36m',
-    gray: '\x1b[90m',
-    reset: '\x1b[0m'
-  };
-  return `${colors[c] || ''}${text}${colors.reset}`;
-}
-
 function formatEntropy(entropy) {
   if (entropy < 0.4) return color('green', `${entropy}`);
   if (entropy < 0.7) return color('yellow', `${entropy}`);

package/scripts/flow-memory-db.js

@@ -141,7 +141,7 @@ let db = null;
 let embedder = null;
 let initPromise = null;
 
-// ensureDir imported from flow-file-ops
+// ensureDir imported from flow-io
 
 /**
  * Initialize database (singleton)

package/scripts/flow-memory-sync.js

@@ -21,6 +21,7 @@ const fs = require('fs');
 const path = require('path');
 const memoryDb = require('./flow-memory-db');
 const { getConfig, PROJECT_ROOT } = require('./flow-config-loader');
+const { color } = require('./flow-output');
 
 // Lazy-load to avoid circular dependency
 let _syncDecisionsToRules = null;
@@ -48,23 +49,6 @@ function loadConfig() {
   }
 }
 
-// ============================================================
-// Output Formatting
-// ============================================================
-
-function color(c, text) {
-  const colors = {
-    red: '\x1b[31m',
-    green: '\x1b[32m',
-    yellow: '\x1b[33m',
-    blue: '\x1b[34m',
-    cyan: '\x1b[36m',
-    gray: '\x1b[90m',
-    reset: '\x1b[0m'
-  };
-  return `${colors[c] || ''}${text}${colors.reset}`;
-}
-
 // ============================================================
 // Pattern Analysis
 // ============================================================

package/scripts/flow-orchestrate-llm.js

@@ -21,14 +21,10 @@ const {
 // Logging Helper
 // ============================================================
 
-const colors = {
-  reset: '\x1b[0m',
-  cyan: '\x1b[36m',
-  dim: '\x1b[2m'
-};
+const { colors } = require('./flow-output');
 
-function log(color, ...args) {
-  console.log(colors[color] + args.join(' ') + colors.reset);
+function log(colorName, ...args) {
+  console.log((colors[colorName] || '') + args.join(' ') + colors.reset);
 }
 
 // ============================================================

package/scripts/flow-orchestrate.js

@@ -6,14 +6,9 @@
  * Executes plans created by Claude using a local LLM.
  * Updates all Wogi Flow state files after each step.
  *
- * LIMITATION: The --resume flag is documented but not yet implemented.
- * Checkpoint data is saved but recovery logic needs completion.
- * TODO: Implement resume from checkpoint functionality.
- *
  * Usage:
- *   flow-orchestrate <plan.json>              # Execute a plan
- *   flow-orchestrate --resume                 # Resume from checkpoint (NOT YET IMPLEMENTED)
- *   flow-orchestrate --rollback               # Rollback last execution
+ *   flow-orchestrate <plan.json>    # Execute a plan
+ *   flow-orchestrate --rollback     # Rollback last execution
  */
 
 const fs = require('fs');
@@ -3146,7 +3141,6 @@ Wogi Flow Hybrid Orchestrator
 
 Usage:
   flow-orchestrate <plan.json>    Execute a plan file
-  flow-orchestrate --resume       Resume from checkpoint
   flow-orchestrate --rollback     Rollback last execution
   flow-orchestrate --help         Show this help
 
@@ -3167,11 +3161,6 @@ Examples:
     process.exit(0);
   }
 
-  if (args.includes('--resume')) {
-    log('yellow', 'Resume not yet implemented');
-    process.exit(1);
-  }
-
   const planPath = args[0];
   if (!planPath) {
     console.error('Usage: flow-orchestrate <plan.json>');

package/scripts/flow-pattern-extractor.js

@@ -37,8 +37,8 @@
 const fs = require('fs');
 const path = require('path');
 const { execSync, execFileSync } = require('child_process');
-const crypto = require('crypto');
 const { resolvePatterns } = require('./flow-framework-resolver');
+const { getProjectRoot, generateHashId } = require('./flow-utils');
 
 // ============================================================================
 // Constants
@@ -107,25 +107,11 @@ const c = {
 // Utility Functions
 // ============================================================================
 
-/**
- * Get project root directory
- */
-function getProjectRoot() {
-  try {
-    return execSync('git rev-parse --show-toplevel', {
-      encoding: 'utf-8',
-      stdio: ['pipe', 'pipe', 'pipe']
-    }).trim();
-  } catch {
-    return process.cwd();
-  }
-}
-
 /**
  * Generate unique pattern ID
  */
 function generatePatternId() {
-  return 'pat-' + crypto.randomBytes(4).toString('hex');
+  return generateHashId('pat', '', '');
 }
 
 /**
@@ -420,7 +406,7 @@ function createPattern(category, subcategory, name, options = {}) {
  */
 function createConflict(patternA, patternB, options = {}) {
   return {
-    id: 'conf-' + crypto.randomBytes(4).toString('hex'),
+    id: generateHashId('conf', '', ''),
     category: patternA.category,
     subcategory: patternA.subcategory,
     description: options.description || `Conflicting ${patternA.subcategory} patterns`,

package/scripts/flow-peer-review.js

@@ -22,7 +22,8 @@ const {
   success,
   warn,
   error,
-  info
+  info,
+  validateTaskId
 } = require('./flow-utils');
 
 const {
@@ -91,14 +92,6 @@ function getStagedChanges() {
   }
 }
 
-/**
- * Validate taskId format — must be wf-[8 hex chars] or legacy TASK-NNN/BUG-NNN.
- * Also prevents command injection and path traversal.
- */
-function isValidTaskId(taskId) {
-  return /^(wf-[a-f0-9]{8}(-\d{2})?|(TASK|BUG)-\d{3,})$/i.test(taskId);
-}
-
 /**
  * Validate commit hash format
  */
@@ -111,7 +104,7 @@ function isValidCommitHash(hash) {
  */
 function getTaskChanges(taskId) {
   // Validate taskId to prevent command injection
-  if (!isValidTaskId(taskId)) {
+  if (!validateTaskId(taskId).valid) {
     warn(`Invalid task ID format: ${taskId}`);
     return getStagedChanges();
   }
@@ -504,8 +497,7 @@ module.exports = {
   compareFindings,
   formatResults,
   IMPROVEMENT_PROMPT,
-  // Security validation functions
-  isValidTaskId,
+  // Security validation functions (validateTaskId imported from flow-utils)
   isValidCommitHash,
   isValidGlob,
   isValidFilePath

package/scripts/flow-plugin-registry.js

@@ -21,6 +21,7 @@ const path = require('path');
 const {
   getProjectRoot,
   safeJsonParse,
+  getConfig,
   writeJson,
   fileExists,
   isPathWithinProject,
@@ -47,8 +48,7 @@ const PROJECT_ROOT = getProjectRoot();
  * @returns {Object} Plugin configuration
  */
 function getPluginConfig() {
-  const configPath = path.join(PROJECT_ROOT, '.workflow', 'config.json');
-  const config = safeJsonParse(configPath, {});
+  const config = getConfig();
   return config.plugins || {
     enabled: true,
     registryPath: '.workflow/state/plugin-registry.json',

package/scripts/flow-project-analyzer.js

@@ -12,7 +12,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const { getProjectRoot, safeJsonParse } = require('./flow-utils');
+const { getProjectRoot, safeJsonParse, getConfig } = require('./flow-utils');
 
 const PROJECT_ROOT = process.argv[2] || getProjectRoot();
 
@@ -802,8 +802,8 @@ function updateConfig(analysis) {
   }
 
   try {
-    const config = safeJsonParse(CONFIG_PATH, null);
-    if (!config) return false;
+    const config = getConfig();
+    if (!config || Object.keys(config).length === 0) return false;
 
     // Ensure hybrid section exists
     if (!config.hybrid) config.hybrid = {};
@@ -1227,7 +1227,7 @@ if (require.main === module) {
   clearContextCache();
 
   // Also generate codebase insights during full analysis
-  const config = safeJsonParse(CONFIG_PATH, {});
+  const config = getConfig();
   if (config.codebaseInsights?.enabled !== false) {
     saveCodebaseInsights();
   }