wogiflow 2.26.2 → 2.29.1

package/scripts/flow-long-input.js

@@ -52,17 +52,17 @@ const {
 // Destructure parsing functions
 const {
   parseVTT: _parseVTT, parseSRT: _parseSRT, parseSubtitle: _parseSubtitle, mergeCues: _mergeCues, formatCuesAsText: _formatCuesAsText, getSubtitleStats: _getSubtitleStats,
-  parseZoom: _parseZoom, parseTeams: _parseTeams, parseMeeting: _parseMeeting, mergeMeetingEntries: _mergeMeetingEntries, formatMeetingAsText: _formatMeetingAsText, getMeetingStats
+  parseZoom: _parseZoom, parseTeams: _parseTeams, parseMeeting: _parseMeeting, mergeMeetingEntries: _mergeMeetingEntries, formatMeetingAsText: _formatMeetingAsText, _getMeetingStats
 } = transcriptParsing;
 
 // Destructure chunking functions
 const {
   loadDurableSessions: _loadDurableSessions, listDurableSessions: _listDurableSessions, getDurableSession: _getDurableSession, switchDurableSession: _switchDurableSession,
   archiveDurableSession: _archiveDurableSession, deleteDurableSession: _deleteDurableSession, generateRecoverySummaryForSession: _generateRecoverySummaryForSession,
-  getTimeSince: _getTimeSince, needsChunking: _needsChunking, planChunks: _planChunks, getChunkingStatus
+  getTimeSince: _getTimeSince, needsChunking: _needsChunking, planChunks: _planChunks, _getChunkingStatus
 } = transcriptChunking;
 
-const { listSupportedLanguages } = transcriptLanguage;
+const { _listSupportedLanguages } = transcriptLanguage;
 
 // Destructure story functions
 const {
@@ -72,7 +72,7 @@ const {
   formatActionsPrompt: _formatActionsPrompt, getCompletionSummary: _getCompletionSummary, resetPresentation: _resetPresentation,
   startEditSession: _startEditSession, editUserStory: _editUserStory, editCriterion: _editCriterion, addCriterion: _addCriterion, removeCriterion: _removeCriterion,
   getEditChanges: _getEditChanges, commitEditSession: _commitEditSession, cancelEditSession: _cancelEditSession, getEditHistory: _getEditHistory, listEditableStories: _listEditableStories,
-  previewExport: _previewExport, exportApprovedStories: _exportApprovedStories, finalizeDigestion
+  previewExport: _previewExport, exportApprovedStories: _exportApprovedStories, _finalizeDigestion
 } = transcriptStories;
 
 // Destructure constants
@@ -81,7 +81,7 @@ const {
   CORRECTION_PATTERNS: _CORRECTION_PATTERNS, ADDITIVE_PATTERNS: _ADDITIVE_PATTERNS,
   ENTITY_PATTERNS, VAGUE_PATTERNS, QUESTION_TEMPLATES,
   DETAIL_PATTERNS, QUESTION_TEMPLATES_BY_LANGUAGE, FOLLOWUP_TRIGGERS,
-  UI_PATTERNS: _UI_PATTERNS, DATA_PATTERNS: _DATA_PATTERNS, INTERACTION_PATTERNS: _INTERACTION_PATTERNS, COMPLEXITY_LEVELS
+  UI_PATTERNS: _UI_PATTERNS, DATA_PATTERNS: _DATA_PATTERNS, INTERACTION_PATTERNS: _INTERACTION_PATTERNS, _COMPLEXITY_LEVELS
 } = longInputConstants;
 
 // Destructure voice functions

package/scripts/flow-memory-sync.js

@@ -49,7 +49,7 @@ const DECISIONS_PATH = PATHS.decisions;
 /**
  * Extract patterns from facts by category
  */
-async function analyzePatterns() {
+async function _analyzePatterns() {
   const facts = await memoryDb.getAllFacts();
   const patterns = {};
 

package/scripts/flow-memory.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /**
- * Wogi Flow - Memory CLI (query / fetch / stats / tag)
+ * Wogi Flow - Memory CLI (query / fetch / stats / tag / propose)
  *
  * Unified query layer over WogiFlow's state-file landscape. Instead of
  * grepping across ready.json / decisions.md / feedback-patterns.md /
@@ -9,9 +9,13 @@
  * `flow memory query <filters>` or `flow memory fetch <ref>`.
  *
  * Story: wf-e64cacd0 (epic-episodic-memory, re-scoped post-pivot).
+ * Story: wf-4434851f (IGR artifact edit proposals — propose|approve|reject|list).
  *
  * Boundaries:
- *   - Does NOT modify memory file contents (read-only across all sources).
+ *   - Does NOT modify query source files.
+ *   - The propose/approve surface stages edits to IGR artifacts
+ *     (product / domain-model / user-journeys / glossary). Agents propose;
+ *     the user approves at session-end. No silent writes.
  *   - Tags are stored in a sidecar `.workflow/state/memory-tags.json` — the
  *     source memory files stay immutable.
  *
@@ -21,6 +25,10 @@
  *   flow memory stats
  *   flow memory tag <ref> <#tag>
  *   flow memory untag <ref> <#tag>
+ *   flow memory propose --block <b> --op <o> --content <file> [--section <h>] [--rationale <text>]
+ *   flow memory approve <id>
+ *   flow memory reject  <id> [--reason <text>]
+ *   flow memory list    [--status pending|approved|rejected] [--json]
  *
  * Usage (programmatic):
  *   const { queryMemory, fetchByRef, memoryStats, addTag } = require('./flow-memory');
@@ -749,15 +757,78 @@ if (require.main === module) {
       return;
     }
 
+    if (cmd === 'propose' || cmd === 'approve' || cmd === 'reject' || cmd === 'list') {
+      const store = require('../lib/memory-proposal-store');
+      try {
+        if (cmd === 'propose') {
+          const record = store.createProposal({
+            block: args.block,
+            op: args.op,
+            contentFile: args.content,
+            section: args.section,
+            rationale: args.rationale,
+            proposedBy: args['proposed-by'],
+          });
+          if (args.json) { console.log(JSON.stringify(record, null, 2)); return; }
+          console.log(`Staged ${record.op} on ${record.block} (${record.id})`);
+          console.log(`  content: ${record.contentPath}`);
+          if (record.section) console.log(`  section: ${record.section}`);
+          if (record.rationale) console.log(`  rationale: ${record.rationale}`);
+          console.log(`  review at session-end or: flow memory list`);
+          return;
+        }
+        if (cmd === 'approve') {
+          const id = args._[1] || args.id;
+          if (!id) { console.error('Usage: flow memory approve <id>'); process.exit(1); }
+          const applied = store.approveProposal({ id });
+          if (args.json) { console.log(JSON.stringify(applied, null, 2)); return; }
+          console.log(`Approved ${applied.op} on ${applied.block} (${applied.id})`);
+          return;
+        }
+        if (cmd === 'reject') {
+          const id = args._[1] || args.id;
+          if (!id) { console.error('Usage: flow memory reject <id> [--reason <text>]'); process.exit(1); }
+          const rejected = store.rejectProposal({ id, reason: args.reason });
+          if (args.json) { console.log(JSON.stringify(rejected, null, 2)); return; }
+          console.log(`Rejected ${rejected.op} on ${rejected.block} (${rejected.id})`);
+          if (rejected.reason) console.log(`  reason: ${rejected.reason}`);
+          return;
+        }
+        // list
+        const statusFilter = args.status && args.status !== true ? args.status : 'pending';
+        const list = store.listProposals({ status: statusFilter });
+        if (args.json) { console.log(JSON.stringify(list, null, 2)); return; }
+        if (list.length === 0) { console.log(`(no ${statusFilter} memory proposals)`); return; }
+        console.log(`Memory proposals (${statusFilter}, ${list.length}):`);
+        for (const r of list) {
+          const icon = r.op === 'append' ? '+' : r.op === 'replace-section' ? '~' : '!';
+          console.log(`  ${icon} ${r.block} [${r.op}] ${r.id}`);
+          console.log(`    proposedAt: ${r.proposedAt}  by: ${r.proposedBy}`);
+          if (r.section) console.log(`    section: ${r.section}`);
+          if (r.rationale) console.log(`    rationale: ${r.rationale}`);
+        }
+        return;
+      } catch (err) {
+        console.error(`[memory:${cmd}] error: ${err.message}`);
+        process.exit(1);
+      }
+    }
+
     console.log(`Usage:
-  flow memory query [--since=<dur>] [--task=<id>] [--kind=<k>] [--tag=<#t>] [--limit=N] [--json]
-  flow memory fetch <ref> [--raw] [--json]
-  flow memory stats [--json]
-  flow memory tag <ref> <#tag>
-  flow memory untag <ref> <#tag>
+  flow memory query   [--since=<dur>] [--task=<id>] [--kind=<k>] [--tag=<#t>] [--limit=N] [--json]
+  flow memory fetch   <ref> [--raw] [--json]
+  flow memory stats   [--json]
+  flow memory tag     <ref> <#tag>
+  flow memory untag   <ref> <#tag>
+  flow memory propose --block <b> --op <o> --content <file> [--section <h>] [--rationale <text>]
+  flow memory approve <id>
+  flow memory reject  <id> [--reason <text>]
+  flow memory list    [--status pending|approved|rejected] [--json]
 
 Durations: 30m, 2h, 7d, 2w
 Kinds:     ${Object.values(KINDS).join(', ')}
+Blocks:    product, domain-model, user-journeys, glossary
+Ops:       append, replace-section, replace-all (replace-all requires --rationale)
 Refs:      wf-XXXXXXXX | R-NNN | CORR-NNN | <adversary-run-filename>`);
     process.exit(cmd ? 1 : 0);
   })().catch((err) => {

package/scripts/flow-migrate.js

@@ -24,7 +24,7 @@ const {
   outputJson,
   checkSpecMigration,
   SPEC_FILE_MAP: _SPEC_FILE_MAP,
-  getTodayDate
+  _getTodayDate
 } = require('./flow-utils')
 const { printHeader, printSection, color, success, warn, error, info } = require('./flow-output');;
 

package/scripts/flow-model-caller.js

@@ -18,7 +18,7 @@ const {
   getConfigValue: _getConfigValue,
   color: _color,
   warn: _warn,
-  error
+  _error
 } = require('./flow-utils');
 
 // ============================================================

package/scripts/flow-models.js

@@ -545,7 +545,7 @@ function getCostAnalysis(_options = {}) {
   }
 
   // Generate recommendations using CONFIG constants
-  for (const [modelId, modelData] of Object.entries(analysis.byModel)) {
+  for (const [_modelId, modelData] of Object.entries(analysis.byModel)) {
     if (modelData.costTier === 'premium' && modelData.totalTasks > CONFIG.MIN_TASKS_FOR_RECOMMENDATION) {
       const avgCost = modelData.avgCostPerTask;
       if (avgCost > CONFIG.COST_OPTIMIZATION_THRESHOLD) {
@@ -826,7 +826,7 @@ function formatCostAnalysis(analysis) {
     const sortedModels = Object.entries(analysis.byModel)
       .sort((a, b) => b[1].totalCost - a[1].totalCost);
 
-    for (const [modelId, data] of sortedModels) {
+    for (const [_modelId, data] of sortedModels) {
       output += `  ${color('cyan', data.displayName)} (${data.costTier})\n`;
       output += `    Total: $${data.totalCost.toFixed(4)} | Tasks: ${data.totalTasks} | Avg: $${data.avgCostPerTask.toFixed(4)}\n`;
     }

package/scripts/flow-morning.js

@@ -649,23 +649,6 @@ function printBriefing(briefing) {
 function main() {
   const { flags } = parseFlags(process.argv.slice(2));
 
-  // Check if morning briefing is enabled
-  const config = getConfig();
-  const morningConfig = config.morningBriefing || {};
-
-  if (morningConfig.enabled === false) {
-    if (flags.json) {
-      outputJson({
-        success: false,
-        error: 'Morning briefing is disabled in config',
-        hint: 'Set morningBriefing.enabled: true in .workflow/config.json'
-      });
-    }
-    console.log(color('yellow', 'Morning briefing is disabled.'));
-    console.log(color('dim', 'Enable it in .workflow/config.json: morningBriefing.enabled: true'));
-    process.exit(0);
-  }
-
   // v2.6.1: Clean up stale state before briefing (safety net)
   // Morning briefing also cleans up stale auto-created tasks older than 24h
   const cleanedState = cleanupStaleState({ cleanupStaleTasks: true });

package/scripts/flow-multi-approach.js

@@ -220,7 +220,7 @@ function calculateApproachScore(result) {
   if (result.code) score += 10;
 
   // Validation gates
-  for (const [gate, passed] of Object.entries(result.validationResults)) {
+  for (const [_gate, passed] of Object.entries(result.validationResults)) {
     if (passed) score += 20;
     else score -= 10;
   }

package/scripts/flow-orchestrate-context.js

@@ -440,7 +440,7 @@ class ProjectContextGenerator {
 
       // Collect all array exports for global warning
       const allArrayExports = [];
-      for (const [name, info] of Object.entries(exportMap.components)) {
+      for (const [_name, info] of Object.entries(exportMap.components)) {
         if (info.arrayExports && info.arrayExports.length > 0) {
           allArrayExports.push(...info.arrayExports);
         }
@@ -479,7 +479,7 @@ class ProjectContextGenerator {
     if (Object.keys(exportMap.services).length > 0) {
       section += '### Services\n\n';
       section += '```typescript\n';
-      for (const [name, info] of Object.entries(exportMap.services)) {
+      for (const [_name, info] of Object.entries(exportMap.services)) {
         if (info.exports.length > 0) {
           section += `import { ${info.exports.join(', ')} } from '${info.importPath}';\n`;
         }
@@ -491,7 +491,7 @@ class ProjectContextGenerator {
     if (Object.keys(exportMap.types).length > 0) {
       section += '### Types\n\n';
       section += '```typescript\n';
-      for (const [name, info] of Object.entries(exportMap.types)) {
+      for (const [_name, info] of Object.entries(exportMap.types)) {
         if (info.types && info.types.length > 0) {
           section += `import type { ${info.types.join(', ')} } from '${info.importPath}';\n`;
         }
@@ -503,7 +503,7 @@ class ProjectContextGenerator {
     if (Object.keys(exportMap.utils).length > 0) {
       section += '### Utilities\n\n';
       section += '```typescript\n';
-      for (const [name, info] of Object.entries(exportMap.utils)) {
+      for (const [_name, info] of Object.entries(exportMap.utils)) {
         if (info.exports.length > 0) {
           section += `import { ${info.exports.join(', ')} } from '${info.importPath}';\n`;
         }

package/scripts/flow-orchestrate-templates.js

@@ -17,7 +17,7 @@ const {
   loadRelatedCode
 } = require('./flow-instruction-richness');
 
-function log(color, ...args) {
+function _log(color, ...args) {
   console.log(colors[color] + args.join(' ') + colors.reset);
 }
 

package/scripts/flow-orchestrate.js

@@ -34,17 +34,17 @@ const {
   assessTaskComplexity,
   TOKEN_BUDGETS: _TOKEN_BUDGETS,
   getDefaultTokens,
-  clampTokens
+  _clampTokens
 } = require('./flow-complexity');
 
 // Import instruction richness module
 const {
   getInstructionRichness,
   getVerbosityGuidance: _getVerbosityGuidance,
-  loadProjectContext: loadRichnessContext,
+  loadProjectContext: _loadRichnessContext,
   loadPatterns: _loadPatterns,
   loadRelevantTypes: _loadRelevantTypes,
-  loadRelatedCode
+  _loadRelatedCode
 } = require('./flow-instruction-richness');
 
 // Import export scanner module
@@ -67,7 +67,7 @@ const {
   createExecutorFromConfig: _createExecutorFromConfig,
   getExecutorConfig,
   MODEL_CAPABILITIES: _MODEL_CAPABILITIES,
-  getModelContextLimit
+  _getModelContextLimit
 } = require('./flow-providers');
 
 // Import response parser for error recovery
@@ -86,7 +86,7 @@ const {
   analyzeFailure,
   refinePromptForRetry,
   recordSuccessfulRecovery,
-  ERROR_CATEGORIES
+  _ERROR_CATEGORIES
 } = require('./flow-adaptive-learning');
 
 // Import pattern enforcer for active learning enforcement
@@ -94,7 +94,7 @@ const {
   injectPatterns,
   extractRelevantPatterns: _extractRelevantPatterns,
   validateAgainstPatterns: _validateAgainstPatterns,
-  generateSessionSummary
+  _generateSessionSummary
 } = require('./flow-pattern-enforcer');
 
 // v2.0: Import durable session for unified step tracking
@@ -109,12 +109,12 @@ const {
 
 const {
   classifyTask,
-  getTaskTypeContext
+  _getTaskTypeContext
 } = require('./flow-task-classifier');
 
 const {
   learnFromFailure,
-  enhancePromptWithLearning
+  _enhancePromptWithLearning
 } = require('./flow-failure-learning');
 
 // ============================================================

package/scripts/flow-peer-review.js

@@ -342,7 +342,7 @@ function formatResults(comparison, results) {
 // ============================================================
 
 async function main() {
-  const { flags, positional } = parseFlags(process.argv.slice(2));
+  const { flags, _positional } = parseFlags(process.argv.slice(2));
 
   if (flags.help) {
     console.log(`

package/scripts/flow-phase.js

@@ -28,6 +28,15 @@ if (command === 'transition') {
   const success = transitionPhase(from, to, taskId || null);
   if (success) {
     console.log(`Phase: ${from} → ${to}`);
+    // wf-8d635d0e / E1: fire background auto-review on coding → validating.
+    // Fails open — any error here must not fail the primary transition.
+    try {
+      const { maybeStartAutoReview } = require('./hooks/core/phase-transition-auto-review');
+      const result = maybeStartAutoReview(from, to, taskId || null);
+      if (result.started && process.env.DEBUG) {
+        console.error(`[auto-review] started pid=${result.handle?.pid} task=${taskId}`);
+      }
+    } catch (_err) { /* fail-open */ }
   } else {
     console.error(`Phase transition failed: ${from} → ${to}`);
     process.exit(1);

package/scripts/flow-proactive-compact.js

@@ -78,7 +78,7 @@ function getProactiveCompactionConfig() {
  * @returns {{ shouldCompact: boolean, reason: string, checkpoint: Object|null }}
  */
 function shouldCompactAtPhase(params) {
-  const { phase, contextPercent, taskId } = params;
+  const { phase, contextPercent, _taskId } = params;
   const config = getProactiveCompactionConfig();
 
   // Disabled — skip

package/scripts/flow-prompt-composer.js

@@ -16,6 +16,7 @@
 
 const fs = require('node:fs');
 const path = require('node:path');
+const { DANGEROUS_KEYS } = require('./flow-io');
 const {
   PROJECT_ROOT,
   parseFlags,
@@ -341,7 +342,7 @@ function applyTemplate(template, data) {
   }
 
   // Forbidden keys to prevent prototype pollution (case-insensitive)
-  const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+  // Consolidated to flow-io canonical (audit dup-002 / wf-9fc4970b).
 
   // Simple substitution: {{key}} or {{object.key}}
   return template.replace(/\{\{([^}]+)\}\}/g, (match, path) => {
@@ -351,7 +352,7 @@ function applyTemplate(template, data) {
     for (const key of keys) {
       // Prevent prototype pollution attacks (case-insensitive check)
       const keyLower = key.toLowerCase();
-      if (FORBIDDEN_KEYS.has(keyLower)) return match;
+      if (DANGEROUS_KEYS.has(keyLower)) return match;
       if (value === undefined || value === null) return match;
       // Only access own properties
       if (!Object.hasOwn(value, key)) return match;

package/scripts/flow-prompt-template.js

@@ -38,8 +38,9 @@ const MODEL_TEMPLATE_MAP = {
   'gemini-2-flash': 'gemini-flash.yaml'
 };
 
-// Blocked keys for security (prototype pollution prevention)
-const BLOCKED_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+// Blocked keys for security (prototype pollution prevention).
+// Consolidated to flow-io canonical (audit dup-002 / wf-9fc4970b).
+const { DANGEROUS_KEYS: BLOCKED_KEYS } = require('./flow-io');
 
 // ============================================================
 // YAML Parser (lightweight, no dependency)

package/scripts/flow-providers.js

@@ -203,7 +203,7 @@ class BaseProvider {
    * Abstract — every concrete provider subclass (AnthropicProvider,
    * OpenAIProvider, OllamaProvider, etc.) must override this.
    */
-  // eslint-disable-next-line no-unused-vars
+   
   async complete(prompt, _options = {}) {
     throw new Error(`Provider ${this.name}: complete() not implemented — override in subclass`);
   }