wogiflow 2.17.0 → 2.18.0

package/lib/workspace-messages.js

@@ -10,6 +10,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { safeReadJson } = require('./utils');
 const crypto = require('node:crypto');
 
 // ============================================================
@@ -122,7 +123,7 @@ function readMessages(workspaceRoot, filter = {}) {
 
   for (const file of files) {
     try {
-      const content = JSON.parse(fs.readFileSync(path.join(messagesDir, file), 'utf-8'));
+      const content = safeReadJson(path.join(messagesDir, file));
       if (!content.id) continue;
 
       // Apply filters
@@ -162,7 +163,7 @@ function updateMessageStatus(workspaceRoot, messageId, newStatus, extra = {}) {
   if (!fs.existsSync(filePath)) return null;
 
   try {
-    const message = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+    const message = safeReadJson(filePath);
     message.status = newStatus;
     message.updatedAt = new Date().toISOString();
     // Safe merge: filter dangerous keys to prevent prototype pollution
@@ -260,7 +261,7 @@ function processSuggestedTask(workspaceRoot, message) {
   if (!fs.existsSync(readyPath)) return null;
 
   try {
-    const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+    const ready = safeReadJson(readyPath);
     // Use generateTaskId when available, fallback to random (finding-008)
     let taskId;
     try {
@@ -395,7 +396,7 @@ function answerQuestion(workspaceRoot, originalMessageId, fromRepo, answer) {
   const filePath = path.join(workspaceRoot, '.workspace', 'messages', `${originalMessageId}.json`);
   let originalFrom = 'unknown';
   try {
-    const original = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+    const original = safeReadJson(filePath);
     originalFrom = original.from;
   } catch (_err) {
     // Non-critical
@@ -424,7 +425,7 @@ function answerQuestion(workspaceRoot, originalMessageId, fromRepo, answer) {
 function readWorkspaceConfig(workspaceRoot) {
   const configPath = path.join(workspaceRoot, 'wogi-workspace.json');
   try {
-    return JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    return safeReadJson(configPath);
   } catch (_err) {
     return null;
   }
@@ -501,7 +502,7 @@ function respondToImpactQuery(workspaceRoot, originalMessageId, fromRepo, respon
   const filePath = path.join(workspaceRoot, '.workspace', 'messages', `${originalMessageId}.json`);
   let originalFrom = 'unknown';
   try {
-    const original = JSON.parse(fs.readFileSync(filePath, 'utf-8'));
+    const original = safeReadJson(filePath);
     originalFrom = original.from;
   } catch (_err) {
     // Non-critical

package/lib/workspace-routing.js

@@ -10,6 +10,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { safeReadJson, safeJsonParseContent } = require('./utils');
 const crypto = require('node:crypto');
 const http = require('node:http');
 
@@ -399,14 +400,8 @@ Be specific about file names, line numbers, and error messages.`,
  */
 function decomposeToRepoTasks(workspaceRoot, workspaceTask, plan) {
   const configPath = path.join(workspaceRoot, 'wogi-workspace.json');
-  let config;
-  try {
-    const raw = fs.readFileSync(configPath, 'utf-8');
-    config = JSON.parse(raw);
-    if (!config || typeof config !== 'object') return [];
-  } catch (_err) {
-    return []; // Graceful fallback — config missing or malformed
-  }
+  const config = safeReadJson(configPath);
+  if (!config || typeof config !== 'object') return [];
   const createdTasks = [];
 
   for (const step of plan.executionOrder) {
@@ -421,7 +416,7 @@ function decomposeToRepoTasks(workspaceRoot, workspaceTask, plan) {
     if (!fs.existsSync(readyPath)) continue;
 
     try {
-      const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+      const ready = safeReadJson(readyPath);
       const taskId = 'wf-' + crypto.randomBytes(4).toString('hex');
 
       const repoTask = {
@@ -499,7 +494,7 @@ function updateCrossRepoBlocking(workspaceRoot, manifest) {
   const configPath = path.join(workspaceRoot, 'wogi-workspace.json');
   let config;
   try {
-    config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    config = safeReadJson(configPath);
   } catch (_err) {
     return { blockedTasks: [], unblockedTasks: [] };
   }
@@ -514,7 +509,7 @@ function updateCrossRepoBlocking(workspaceRoot, manifest) {
     const readyPath = path.join(memberPath, '.workflow', 'state', 'ready.json');
     try {
       if (fs.existsSync(readyPath)) {
-        const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+        const ready = safeReadJson(readyPath);
         memberTasks[name] = {
           path: memberPath,
           readyPath,
@@ -581,7 +576,7 @@ function formatDependencyTree(workspaceRoot, manifest) {
   const configPath = path.join(workspaceRoot, 'wogi-workspace.json');
   let config;
   try {
-    config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    config = safeReadJson(configPath);
   } catch (_err) {
     return 'No workspace config found.';
   }
@@ -598,7 +593,7 @@ function formatDependencyTree(workspaceRoot, manifest) {
 
     try {
       if (!fs.existsSync(readyPath)) continue;
-      const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+      const ready = safeReadJson(readyPath);
       const wsTasks = [...(ready.inProgress || []), ...(ready.ready || []), ...(ready.blocked || [])]
         .filter(t => t.source?.startsWith('workspace:'));
 
@@ -685,12 +680,9 @@ function checkWorkerHealth(port) {
       let body = '';
       res.on('data', chunk => { body += chunk; });
       res.on('end', () => {
-        try {
-          const data = JSON.parse(body);
-          resolve({ up: data.status === 'ok', repo: data.repo || 'unknown' });
-        } catch (_err) {
-          resolve({ up: false, repo: 'unknown' });
-        }
+        const data = safeJsonParseContent(body);
+        if (data) resolve({ up: data.status === 'ok', repo: data.repo || 'unknown' });
+        else resolve({ up: false, repo: 'unknown' });
       });
     });
 
@@ -717,13 +709,9 @@ async function dispatchToChannel(workspaceRoot, repoName, taskId, opts = {}) {
   }
 
   const configPath = path.join(workspaceRoot, 'wogi-workspace.json');
-  let config;
-  try {
-    const raw = fs.readFileSync(configPath, 'utf-8');
-    config = JSON.parse(raw);
-    if (!config || typeof config !== 'object') throw new Error('Invalid config format');
-  } catch (err) {
-    return { ok: false, message: `Cannot read workspace config: ${err.message}` };
+  const config = safeReadJson(configPath);
+  if (!config || typeof config !== 'object') {
+    return { ok: false, message: `Cannot read workspace config at ${configPath}` };
   }
 
   const channelConfig = config.channels?.members?.[repoName];

package/lib/workspace-session.js

@@ -23,6 +23,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { safeReadJson } = require('./utils');
 
 const { WORKSPACE_CONFIG_FILE, WORKSPACE_DIR } = require('./workspace');
 
@@ -84,7 +85,7 @@ function saveManagerHandoff(workspaceRoot, options = {}) {
   // Read workspace config
   const configPath = path.join(workspaceRoot, WORKSPACE_CONFIG_FILE);
   try {
-    const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    const config = safeReadJson(configPath);
     handoff.workspaceName = config.name || '';
 
     // Read each member's task status
@@ -101,7 +102,7 @@ function saveManagerHandoff(workspaceRoot, options = {}) {
 
       try {
         if (fs.existsSync(readyPath)) {
-          const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+          const ready = safeReadJson(readyPath);
           memberStatus.inProgress = (ready.inProgress || []).map(t => ({ id: t.id, title: t.title }));
           memberStatus.ready = (ready.ready || []).map(t => ({ id: t.id, title: t.title }));
           memberStatus.recentlyCompleted = (ready.recentlyCompleted || []).slice(0, 5).map(t => ({ id: t.id, title: t.title }));
@@ -120,7 +121,7 @@ function saveManagerHandoff(workspaceRoot, options = {}) {
   const wsReadyPath = path.join(workspaceRoot, WORKSPACE_DIR, 'state', 'ready.json');
   try {
     if (fs.existsSync(wsReadyPath)) {
-      const wsReady = JSON.parse(fs.readFileSync(wsReadyPath, 'utf-8'));
+      const wsReady = safeReadJson(wsReadyPath);
       handoff.pendingTasks = (wsReady.ready || []).map(t => ({ id: t.id, title: t.title }));
       handoff.completedTasks = (wsReady.recentlyCompleted || []).slice(0, 10).map(t => ({ id: t.id, title: t.title }));
     }
@@ -135,7 +136,7 @@ function saveManagerHandoff(workspaceRoot, options = {}) {
       const files = fs.readdirSync(messagesDir).filter(f => f.endsWith('.json'));
       for (const file of files) {
         try {
-          const msg = JSON.parse(fs.readFileSync(path.join(messagesDir, file), 'utf-8'));
+          const msg = safeReadJson(path.join(messagesDir, file));
           if (msg.status === 'pending') {
             handoff.unreadMessages.push({
               id: msg.id,
@@ -162,7 +163,7 @@ function saveManagerHandoff(workspaceRoot, options = {}) {
       const files = fs.readdirSync(locksDir).filter(f => f.endsWith('.json'));
       for (const file of files) {
         try {
-          const lock = JSON.parse(fs.readFileSync(path.join(locksDir, file), 'utf-8'));
+          const lock = safeReadJson(path.join(locksDir, file));
           if (new Date(lock.expiresAt).getTime() > now) {
             handoff.activeLocks.push({
               interface: lock.interface,
@@ -214,7 +215,7 @@ function loadManagerHandoff(workspaceRoot) {
 
   try {
     if (fs.existsSync(handoffPath)) {
-      return JSON.parse(fs.readFileSync(handoffPath, 'utf-8'));
+      return safeReadJson(handoffPath);
     }
   } catch (_err) {
     // Non-critical

package/lib/workspace-sync.js

@@ -9,6 +9,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { safeReadJson } = require('./utils');
 
 const { readMemberMetadata, extractCapabilities, extractEndpoints, detectStack, generateManifest, WORKSPACE_CONFIG_FILE, WORKSPACE_DIR } = require('./workspace');
 const { buildIntegrationMap, detectTypeDrift } = require('./workspace-contracts');
@@ -32,7 +33,7 @@ function syncWorkspace(workspaceRoot, options = {}) {
     throw new Error('No wogi-workspace.json found. Run `flow workspace init` first.');
   }
 
-  const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+  const config = safeReadJson(configPath);
   const result = {
     success: true,
     membersUpdated: 0,
@@ -45,7 +46,7 @@ function syncWorkspace(workspaceRoot, options = {}) {
   let oldManifest = null;
   try {
     if (fs.existsSync(manifestPath)) {
-      oldManifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+      oldManifest = safeReadJson(manifestPath);
     }
   } catch (_err) {
     // Will regenerate from scratch
@@ -156,10 +157,10 @@ function getWorkspaceStatus(workspaceRoot) {
   const configPath = path.join(workspaceRoot, WORKSPACE_CONFIG_FILE);
   if (!fs.existsSync(configPath)) return 'No workspace found. Run `flow workspace init` first.';
 
-  const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+  const config = safeReadJson(configPath);
   const manifestPath = path.join(workspaceRoot, WORKSPACE_DIR, 'state', 'workspace-manifest.json');
   const manifest = fs.existsSync(manifestPath)
-    ? JSON.parse(fs.readFileSync(manifestPath, 'utf-8'))
+    ? safeReadJson(manifestPath)
     : null;
 
   const lines = [];
@@ -176,7 +177,7 @@ function getWorkspaceStatus(workspaceRoot) {
     let taskSummary = 'no .workflow/';
     try {
       if (fs.existsSync(readyPath)) {
-        const ready = JSON.parse(fs.readFileSync(readyPath, 'utf-8'));
+        const ready = safeReadJson(readyPath);
         const inProgress = (ready.inProgress || []).length;
         const readyCount = (ready.ready || []).length;
         taskSummary = `${inProgress} in progress, ${readyCount} ready`;
@@ -234,7 +235,7 @@ function getWorkspaceStatus(workspaceRoot) {
   const wsReadyPath = path.join(workspaceRoot, WORKSPACE_DIR, 'state', 'ready.json');
   if (fs.existsSync(wsReadyPath)) {
     try {
-      const wsReady = JSON.parse(fs.readFileSync(wsReadyPath, 'utf-8'));
+      const wsReady = safeReadJson(wsReadyPath);
       const wsInProgress = (wsReady.inProgress || []).length;
       const wsReadyCount = (wsReady.ready || []).length;
       if (wsInProgress > 0 || wsReadyCount > 0) {
@@ -272,7 +273,7 @@ function formatAge(date) {
  */
 function addMember(workspaceRoot, memberPath, role) {
   const configPath = path.join(workspaceRoot, WORKSPACE_CONFIG_FILE);
-  const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+  const config = safeReadJson(configPath);
 
   const absPath = path.resolve(workspaceRoot, memberPath);
   const name = path.basename(absPath);
@@ -312,7 +313,7 @@ function addMember(workspaceRoot, memberPath, role) {
  */
 function removeMember(workspaceRoot, memberName) {
   const configPath = path.join(workspaceRoot, WORKSPACE_CONFIG_FILE);
-  const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+  const config = safeReadJson(configPath);
 
   if (!config.members[memberName]) {
     throw new Error(`Member '${memberName}' not found in workspace.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "2.17.0",
+  "version": "2.18.0",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {
@@ -10,8 +10,10 @@
   },
   "scripts": {
     "flow": "./scripts/flow",
-    "test": "NODE_ENV=test node --test tests/auto-compact-prompt.test.js tests/flow-paths.test.js tests/flow-io.test.js tests/flow-config-loader.test.js tests/flow-damage-control.test.js tests/flow-output.test.js tests/flow-constants.test.js tests/flow-session-state.test.js tests/flow-hooks-integration.test.js tests/flow-utils.test.js tests/flow-security.test.js tests/flow-memory-db.test.js tests/flow-durable-session.test.js tests/flow-skill-matcher.test.js tests/flow-bridge.test.js tests/flow-proactive-compact.test.js tests/flow-cascade-completion.test.js && NODE_ENV=test node tests/run-quality-gates.test.js",
+    "test": "NODE_ENV=test node --test tests/auto-compact-prompt.test.js tests/flow-paths.test.js tests/flow-io.test.js tests/flow-config-loader.test.js tests/flow-damage-control.test.js tests/flow-output.test.js tests/flow-constants.test.js tests/flow-session-state.test.js tests/flow-hooks-integration.test.js tests/flow-utils.test.js tests/flow-security.test.js tests/flow-memory-db.test.js tests/flow-durable-session.test.js tests/flow-skill-matcher.test.js tests/flow-bridge.test.js tests/flow-proactive-compact.test.js tests/flow-cascade-completion.test.js tests/flow-capture-gate.test.js tests/flow-correction-detector-hybrid.test.js tests/flow-promote.test.js tests/flow-archive-runs.test.js tests/flow-memory.test.js tests/flow-hooks-pre-tool-helpers.test.js tests/flow-hooks-bugfix-scope-gate.test.js tests/flow-hooks-routing-gate.test.js tests/flow-hooks-phase-read-gate.test.js tests/flow-hooks-commit-log-gate.test.js tests/flow-hooks-deploy-gate.test.js tests/flow-hooks-todowrite-gate.test.js tests/flow-hooks-git-safety-gate.test.js tests/flow-hooks-scope-mutation-gate.test.js tests/flow-hooks-strike-gate.test.js tests/flow-hooks-component-check.test.js tests/flow-hooks-scope-gate.test.js tests/flow-hooks-implementation-gate.test.js tests/flow-hooks-research-gate.test.js tests/flow-hooks-loop-check.test.js tests/flow-hooks-manager-boundary-gate.test.js tests/flow-hooks-phase-gate.test.js tests/flow-hooks-pre-tool-orchestrator.test.js tests/flow-hooks-observation-capture.test.js tests/flow-hooks-task-gate.test.js tests/flow-durable-session-suspension.test.js && NODE_ENV=test node tests/run-quality-gates.test.js",
     "test:syntax": "find scripts/ lib/ -name '*.js' -not -path '*/node_modules/*' -exec node --check {} +",
+    "lint": "eslint scripts/ lib/ tests/",
+    "lint:ci": "eslint scripts/ lib/ tests/ --max-warnings 0",
     "postinstall": "node scripts/postinstall.js",
     "preuninstall": "node scripts/preuninstall.js"
   },

package/scripts/base-workflow-step.js

@@ -29,7 +29,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
-const { PATHS } = require('./flow-utils');
+const { PATHS, getTodayDate } = require('./flow-utils');
 
 class BaseWorkflowStep {
   /**

package/scripts/flow

@@ -128,6 +128,16 @@ show_help() {
     echo "  correct list         List recent corrections"
     echo "  aggregate            Aggregate learnings across skills"
     echo "  aggregate --promote  Interactive promotion wizard"
+    echo "  promote              Scan adversary-runs + correction-patterns for promotions (writes pending-promotions.json)"
+    echo "  promote apply        Apply pending promotions to feedback-patterns.md"
+    echo "  promote status       Show pending promotions"
+    echo "  archive              Archive old adversary-runs + rotate gate-telemetry log"
+    echo "  archive --dry-run    Preview what would be archived"
+    echo "  archive status       Show what is eligible for archival"
+    echo "  memory query ...     Search state files (tasks, corrections, rules, adversary runs, request-log)"
+    echo "  memory fetch <ref>   Fetch a single ref (wf-ID, R-N, CORR-N) with related entries"
+    echo "  memory stats         Show counts across all memory surfaces"
+    echo "  memory tag <ref> #t  Annotate a ref with a tag (sidecar storage, non-mutating)"
     echo "  pattern-enforce      Enforce patterns from decisions/app-map"
     echo ""
     echo "Code Analysis:"
@@ -522,6 +532,15 @@ case "${1:-}" in
     aggregate)
         node "$SCRIPT_DIR/flow-aggregate.js" "${@:2}"
         ;;
+    promote)
+        node "$SCRIPT_DIR/flow-promote.js" "${@:2}"
+        ;;
+    archive)
+        node "$SCRIPT_DIR/flow-archive-runs.js" "${@:2}"
+        ;;
+    memory)
+        node "$SCRIPT_DIR/flow-memory.js" "${@:2}"
+        ;;
     skill-create)
         node "$SCRIPT_DIR/flow-skill-create.js" "${@:2}"
         ;;

package/scripts/flow-adaptive-learning.js

@@ -15,7 +15,7 @@
 const fs = require('node:fs');
 const path = require('node:path');
 const { execFileSync } = require('node:child_process');
-const { getProjectRoot, colors, PATHS } = require('./flow-utils');
+const { getProjectRoot, colors, PATHS, getTodayDate } = require('./flow-utils');
 const { error: errorMsg } = require('./flow-output');
 const { readJson } = require('./flow-io');
 const { storeSingleLearning, getAdapterPath } = require('./flow-model-adapter');

package/scripts/flow-aggregate.js

@@ -27,7 +27,8 @@ const {
   listDirs,
   color,
   success,
-  warn
+  warn,
+  getTodayDate
 } = require('./flow-utils');
 const { syncDecisionsToRules } = require('./flow-rules-sync');
 

package/scripts/flow-architect-pass.js

@@ -106,7 +106,7 @@ function isArchitectDisabled() {
  * @param {string} [opts.framing] - Framing artifact content. If absent, attempts to load via loadFramingArtifact.
  * @param {string} [opts.exploreFindings] - Consolidated explore-phase findings.
  * @param {string} [opts.scopeConfidenceAudit] - Optional per spec §2.2; degraded mode if absent.
- * @param {string} [opts.constitutionVersion='logic-constitution-v2']
+ * @param {string} [opts.constitutionVersion='logic-constitution-v3']
  * @returns {Promise<{ systemPrompt:string, userPrompt:string, metadata:Object }>}
  */
 async function buildArchitectPrompt(opts) {
@@ -114,7 +114,7 @@ async function buildArchitectPrompt(opts) {
     throw new TypeError('buildArchitectPrompt: opts.taskId required');
   }
   const taskId = opts.taskId;
-  const constitutionVersion = opts.constitutionVersion || 'logic-constitution-v2';
+  const constitutionVersion = opts.constitutionVersion || 'logic-constitution-v3';
 
   const dis = isArchitectDisabled();
   if (dis.disabled) {
@@ -537,7 +537,7 @@ async function cliPrompt(argv) {
   const built = await buildArchitectPrompt({
     taskId: args.task || path.basename(inputFile, path.extname(inputFile)),
     taskInput,
-    constitutionVersion: args.rubric || 'logic-constitution-v2',
+    constitutionVersion: args.rubric || 'logic-constitution-v3',
   });
   console.log('===== SYSTEM PROMPT =====');
   console.log(built.systemPrompt);