wogiflow 2.20.0 → 2.20.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "2.20.0",
+  "version": "2.20.1",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {
@@ -10,7 +10,7 @@
   },
   "scripts": {
     "flow": "./scripts/flow",
-    "test": "NODE_ENV=test node --test tests/auto-compact-prompt.test.js tests/flow-paths.test.js tests/flow-io.test.js tests/flow-config-loader.test.js tests/flow-damage-control.test.js tests/flow-output.test.js tests/flow-constants.test.js tests/flow-session-state.test.js tests/flow-hooks-integration.test.js tests/flow-utils.test.js tests/flow-security.test.js tests/flow-memory-db.test.js tests/flow-durable-session.test.js tests/flow-skill-matcher.test.js tests/flow-bridge.test.js tests/flow-proactive-compact.test.js tests/flow-cascade-completion.test.js tests/flow-capture-gate.test.js tests/flow-correction-detector-hybrid.test.js tests/flow-promote.test.js tests/flow-archive-runs.test.js tests/flow-memory.test.js tests/flow-hooks-pre-tool-helpers.test.js tests/flow-hooks-bugfix-scope-gate.test.js tests/flow-hooks-routing-gate.test.js tests/flow-hooks-phase-read-gate.test.js tests/flow-hooks-commit-log-gate.test.js tests/flow-hooks-deploy-gate.test.js tests/flow-hooks-todowrite-gate.test.js tests/flow-hooks-git-safety-gate.test.js tests/flow-hooks-scope-mutation-gate.test.js tests/flow-hooks-strike-gate.test.js tests/flow-hooks-component-check.test.js tests/flow-hooks-scope-gate.test.js tests/flow-hooks-implementation-gate.test.js tests/flow-hooks-research-gate.test.js tests/flow-hooks-loop-check.test.js tests/flow-hooks-manager-boundary-gate.test.js tests/flow-hooks-phase-gate.test.js tests/flow-hooks-pre-tool-orchestrator.test.js tests/flow-hooks-observation-capture.test.js tests/flow-hooks-task-gate.test.js tests/flow-durable-session-suspension.test.js tests/flow-health-mcp-scopes.test.js tests/flow-lean-config.test.js tests/flow-workspace-autopickup.test.js && NODE_ENV=test node tests/run-quality-gates.test.js",
+    "test": "NODE_ENV=test node --test tests/auto-compact-prompt.test.js tests/flow-paths.test.js tests/flow-io.test.js tests/flow-config-loader.test.js tests/flow-damage-control.test.js tests/flow-output.test.js tests/flow-constants.test.js tests/flow-session-state.test.js tests/flow-hooks-integration.test.js tests/flow-utils.test.js tests/flow-security.test.js tests/flow-memory-db.test.js tests/flow-durable-session.test.js tests/flow-skill-matcher.test.js tests/flow-bridge.test.js tests/flow-proactive-compact.test.js tests/flow-cascade-completion.test.js tests/flow-capture-gate.test.js tests/flow-correction-detector-hybrid.test.js tests/flow-promote.test.js tests/flow-archive-runs.test.js tests/flow-memory.test.js tests/flow-hooks-pre-tool-helpers.test.js tests/flow-hooks-bugfix-scope-gate.test.js tests/flow-hooks-routing-gate.test.js tests/flow-hooks-phase-read-gate.test.js tests/flow-hooks-commit-log-gate.test.js tests/flow-hooks-deploy-gate.test.js tests/flow-hooks-todowrite-gate.test.js tests/flow-hooks-git-safety-gate.test.js tests/flow-hooks-scope-mutation-gate.test.js tests/flow-hooks-strike-gate.test.js tests/flow-hooks-component-check.test.js tests/flow-hooks-scope-gate.test.js tests/flow-hooks-implementation-gate.test.js tests/flow-hooks-research-gate.test.js tests/flow-hooks-loop-check.test.js tests/flow-hooks-manager-boundary-gate.test.js tests/flow-hooks-phase-gate.test.js tests/flow-hooks-pre-tool-orchestrator.test.js tests/flow-hooks-observation-capture.test.js tests/flow-hooks-task-gate.test.js tests/flow-durable-session-suspension.test.js tests/flow-health-mcp-scopes.test.js tests/flow-lean-config.test.js tests/flow-workspace-autopickup.test.js tests/flow-worker-boundary-gate.test.js && NODE_ENV=test node tests/run-quality-gates.test.js",
     "test:syntax": "find scripts/ lib/ -name '*.js' -not -path '*/node_modules/*' -exec node --check {} +",
     "lint": "eslint scripts/ lib/ tests/",
     "lint:ci": "eslint scripts/ lib/ tests/ --max-warnings 0",

package/scripts/flow-config-defaults.js

@@ -400,7 +400,9 @@ const CONFIG_DEFAULTS = {
     _comment_autoPickupChannelDispatches: 'v2.20.0+: After task completion, if channel-dispatched tasks are queued in ready.json, the task-completed hook injects additionalContext instructing the AI to auto-invoke /wogi-start on the next queued task in the same turn. Prevents "Sauteed worker" silent stalls between queued dispatches. The Stop hook also blocks end-of-turn when queued dispatches exist but no task is in progress — making "awaiting signal" language mechanically impossible as a terminal state.',
     autoPickupChannelDispatches: true,
     _comment_diagnosticCurlBypass: 'v2.20.0+: When true, PreToolUse routing gate allows narrow curl-to-manager-port when replying to channel messages tagged INTROSPECTION or DIAGNOSTIC, with body starting "## ". Unblocks diagnostic round-trips without forcing fake task creation. Scope: localhost:8800 only.',
-    diagnosticCurlBypass: true
+    diagnosticCurlBypass: true,
+    _comment_blockAskUserQuestionInWorker: 'v2.20.1+: When true, PreToolUse blocks AskUserQuestion in workspace worker mode. The user only sees the manager terminal, so direct prompts from workers stall silently. Block message instructs channel-dispatch "## QUESTION:" to the manager. Closes the v2.20.0 gap where workers could still prompt the user directly when their queue was empty.',
+    blockAskUserQuestionInWorker: true
   },
   checkpoint: { enabled: false },
   regressionTesting: { enabled: false },

package/scripts/hooks/core/pre-tool-orchestrator.js

@@ -215,6 +215,28 @@ function runPreToolGates(ctx, deps) {
     }
   }
 
+  // Worker boundary (v2.20.1) — parallel to manager boundary.
+  // Blocks tools that prompt the user directly (AskUserQuestion) in worker
+  // mode, since the user only sees the manager terminal. Forces workers to
+  // channel-dispatch ## QUESTION: to the manager instead.
+  if (process.env.WOGI_WORKSPACE_ROOT && process.env.WOGI_REPO_NAME && process.env.WOGI_REPO_NAME !== 'manager') {
+    try {
+      if (typeof deps.checkWorkerBoundary === 'function') {
+        const workerResult = deps.checkWorkerBoundary(toolName, toolInput, config);
+        if (workerResult.blocked) {
+          return {
+            allowed: false,
+            blocked: true,
+            reason: workerResult.reason,
+            message: workerResult.message,
+          };
+        }
+      }
+    } catch (err) {
+      if (process.env.DEBUG) console.error(`[Hook] Worker boundary gate error (fail-open): ${err.message}`);
+    }
+  }
+
   // Commit log gate
   if (toolName === 'Bash' && toolInput.command) {
     try {

package/scripts/hooks/core/worker-boundary-gate.js

@@ -0,0 +1,105 @@
+'use strict';
+
+/**
+ * Wogi Flow - Worker Boundary Gate (v2.20.1+)
+ *
+ * Mirror of manager-boundary-gate, but for workspace WORKERS.
+ *
+ * Problem this solves: a worker running in workspace mode cannot prompt the
+ * user directly — the user only sees the manager terminal. When a worker
+ * calls AskUserQuestion, its terminal shows a prompt nobody will ever type
+ * into. The worker stalls silently.
+ *
+ * Contract: in workspace worker mode, questions to the user MUST be
+ * channel-dispatched to the manager via `## QUESTION:`. The manager relays
+ * to the user, gets the answer, and channel-dispatches back.
+ *
+ * This gate blocks the `AskUserQuestion` tool in worker mode with a message
+ * giving the exact curl command to escalate properly.
+ *
+ * Scope:
+ *   - Only fires in workspace worker mode (WOGI_WORKSPACE_ROOT +
+ *     WOGI_REPO_NAME !== 'manager').
+ *   - No-op in single-repo mode (no WOGI_WORKSPACE_ROOT).
+ *   - No-op for the manager (manager SHOULD prompt the user — that is the
+ *     manager's job).
+ *   - Respects `config.workspace.blockAskUserQuestionInWorker` (default true).
+ *
+ * This is the missing piece after v2.20.0: v2.20.0 blocked hedging BETWEEN
+ * queued tasks but not worker-asks-user-directly when the queue is empty.
+ */
+
+/**
+ * Check if a tool call violates worker-role boundaries.
+ *
+ * @param {string} toolName - Tool being called
+ * @param {Object} toolInput - Tool input parameters (unused for AskUserQuestion)
+ * @param {Object} [config] - Loaded config (optional)
+ * @returns {{ blocked: boolean, reason?: string, message?: string }}
+ */
+function checkWorkerBoundary(toolName, toolInput, config) {
+  // Only active in workspace worker mode.
+  if (!isWorkspaceWorker()) {
+    return { blocked: false };
+  }
+
+  // Config toggle — default on.
+  if (config?.workspace?.blockAskUserQuestionInWorker === false) {
+    return { blocked: false };
+  }
+
+  // Block list: tools that prompt the user directly.
+  // `AskUserQuestion` is the primary case — Claude Code's built-in
+  // interactive-question tool. If more user-prompting tools emerge, add them
+  // here (be surgical — only tools that actually expect a user reply).
+  const USER_PROMPT_TOOLS = new Set(['AskUserQuestion']);
+
+  if (!USER_PROMPT_TOOLS.has(toolName)) {
+    return { blocked: false };
+  }
+
+  const repoName = process.env.WOGI_REPO_NAME || 'worker';
+  const managerPort = process.env.WOGI_MANAGER_PORT || '8800';
+
+  return {
+    blocked: true,
+    reason: 'worker-boundary-askuser',
+    message: [
+      `WORKER BOUNDARY: Cannot use ${toolName} in workspace worker mode.`,
+      '',
+      'The user ONLY sees the manager terminal. If you prompt the user here,',
+      'nobody will see it — your session will stall silently.',
+      '',
+      'Channel-dispatch the question to the manager instead:',
+      '',
+      `  curl -s -X POST http://127.0.0.1:${managerPort} \\`,
+      `    -H "X-Wogi-From: ${repoName}" \\`,
+      `    --data-binary "## QUESTION: <your question for the user>"`,
+      '',
+      'The manager will relay to the user, capture the answer, and',
+      'channel-dispatch a follow-up task to you with the resolved context.',
+      '',
+      'If you genuinely do NOT need the user — make a reasonable decision',
+      'and note it in your reply to the manager (autonomous mode contract).'
+    ].join('\n')
+  };
+}
+
+/**
+ * Detect workspace worker mode. Requires both env vars:
+ *   WOGI_WORKSPACE_ROOT — set by the worker spawn path
+ *   WOGI_REPO_NAME     — must NOT be 'manager'
+ *
+ * @returns {boolean}
+ */
+function isWorkspaceWorker() {
+  if (!process.env.WOGI_WORKSPACE_ROOT) return false;
+  const repo = process.env.WOGI_REPO_NAME;
+  if (!repo || repo === 'manager') return false;
+  return true;
+}
+
+module.exports = {
+  checkWorkerBoundary,
+  isWorkspaceWorker
+};

package/scripts/hooks/entry/claude-code/pre-tool-use.js

@@ -48,6 +48,8 @@ let checkGitSafety = _noop;
 try { checkGitSafety = require('../../core/git-safety-gate').checkGitSafety; } catch (_err) { if (process.env.DEBUG) console.error(`[Hook] Git safety gate not loaded: ${_err.message}`); }
 let checkManagerBoundary = _noop;
 try { checkManagerBoundary = require('../../core/manager-boundary-gate').checkManagerBoundary; } catch (_err) { if (process.env.DEBUG) console.error(`[Hook] Manager boundary gate not loaded: ${_err.message}`); }
+let checkWorkerBoundary = _noop;
+try { checkWorkerBoundary = require('../../core/worker-boundary-gate').checkWorkerBoundary; } catch (_err) { if (process.env.DEBUG) console.error(`[Hook] Worker boundary gate not loaded: ${_err.message}`); }
 
 const { claudeCodeAdapter } = require('../../adapters/claude-code');
 const { markSkillPending } = require('../../../flow-durable-session');
@@ -84,7 +86,7 @@ runHook('PreToolUse', async ({ input, parsedInput }) => {
     recordPhaseRead, checkPhaseReadGate, clearPhaseReads,
     checkDeployGate, checkWriteBlock,
     checkStrikeGate, checkBugfixScope, checkScopeMutation,
-    checkGitSafety, checkManagerBoundary,
+    checkGitSafety, checkManagerBoundary, checkWorkerBoundary,
     // Side-effect helpers
     markSkillPending,
     // Config + runtime