@wrongstack/core 0.1.1 → 0.1.3

package/dist/{secret-scrubber-Dax_Ou_o.d.ts → secret-scrubber-qU3AwEiI.d.ts}

@@ -1,3 +1,5 @@
+import { U as Usage, a0 as Context, z as ToolProgressEvent, v as Tool, P as Permission, T as TextBlock, c as ContentBlock, k as Response, i as ProviderError } from './provider-DovtyuM8.js';
+
 /**
  * Container — dependency injection with explicit bind / override / decorate.
  *
@@ -60,6 +62,22 @@ declare class Container {
  */
 type NextFn<T> = (value: T) => Promise<T>;
 type MiddlewareHandler<T> = (value: T, next: NextFn<T>) => Promise<T>;
+/**
+ * Called when a middleware crashes (throws or rejects). Used by the
+ * Pipeline's error boundary to log the offender without aborting the run.
+ *
+ * Return `'rethrow'` to propagate the error (default for core middleware),
+ * or `'swallow'` to skip past the crashing middleware and continue with the
+ * value the previous one produced. Plugin middleware should usually be
+ * swallowed so one bad plugin can't kill an agent run.
+ */
+type PipelineErrorPolicy = 'rethrow' | 'swallow';
+interface PipelineErrorEvent {
+    middleware: string;
+    owner?: string;
+    err: unknown;
+}
+type PipelineErrorHandler = (ev: PipelineErrorEvent) => PipelineErrorPolicy | Promise<PipelineErrorPolicy>;
 interface Middleware<T> {
     name: string;
     handler: MiddlewareHandler<T>;
@@ -80,6 +98,17 @@ interface ReadonlyPipeline<T> {
 }
 declare class Pipeline<T> {
     private readonly chain;
+    private errorHandler?;
+    /**
+     * Install an error boundary. When a middleware throws or rejects, the
+     * handler is called and decides whether to swallow (continue with the
+     * pre-handler value) or rethrow. Without a handler, errors propagate.
+     *
+     * Wire one per pipeline at boot — the host CLI typically installs a
+     * single boundary that logs to the operational log and emits a
+     * `pipeline.error` event for /diag.
+     */
+    setErrorHandler(handler: PipelineErrorHandler | undefined): this;
     use(mw: Middleware<T> | Middleware<unknown>): this;
     prepend(mw: Middleware<T>): this;
     /**
@@ -113,462 +142,6 @@ declare class Pipeline<T> {
     private ensureUnique;
 }
 
-interface TextBlock {
-    type: 'text';
-    text: string;
-    cache_control?: {
-        type: 'ephemeral';
-    };
-}
-interface ToolUseBlock {
-    type: 'tool_use';
-    id: string;
-    name: string;
-    input: Record<string, unknown>;
-}
-interface ToolResultBlock {
-    type: 'tool_result';
-    tool_use_id: string;
-    /**
-     * The original tool name. Useful for providers like Google Gemini that
-     * need the tool name in `functionResponse.name` — the tool_use_id is
-     * only a session-local identifier and is not stable across replays.
-     * Always set by ToolExecutor; may be absent on manually-constructed blocks.
-     */
-    name?: string;
-    content: string;
-    is_error?: boolean;
-}
-interface ImageBlock {
-    type: 'image';
-    source: {
-        type: 'base64' | 'url';
-        media_type?: string;
-        data?: string;
-        url?: string;
-    };
-}
-type ContentBlock = TextBlock | ToolUseBlock | ToolResultBlock | ImageBlock;
-declare function isTextBlock(b: ContentBlock): b is TextBlock;
-declare function isToolUseBlock(b: ContentBlock): b is ToolUseBlock;
-declare function isToolResultBlock(b: ContentBlock): b is ToolResultBlock;
-declare function isImageBlock(b: ContentBlock): b is ImageBlock;
-
-type MessageRole = 'user' | 'assistant' | 'system';
-interface Message {
-    role: MessageRole;
-    content: string | ContentBlock[];
-}
-declare function asBlocks(content: string | ContentBlock[]): ContentBlock[];
-declare function asText(content: string | ContentBlock[]): string;
-
-interface SessionMetadata {
-    id: string;
-    title?: string;
-    model?: string;
-    provider?: string;
-    startedAt: string;
-    endedAt?: string;
-}
-type SessionEvent = {
-    type: 'session_start';
-    ts: string;
-    id: string;
-    model: string;
-    provider: string;
-} | {
-    type: 'session_resumed';
-    ts: string;
-    id: string;
-    model: string;
-    provider: string;
-} | {
-    type: 'user_input';
-    ts: string;
-    content: string | ContentBlock[];
-} | {
-    type: 'llm_request';
-    ts: string;
-    model: string;
-    messageCount: number;
-} | {
-    type: 'llm_response';
-    ts: string;
-    content: ContentBlock[];
-    stopReason: string;
-    usage: Usage;
-} | {
-    type: 'tool_use';
-    ts: string;
-    name: string;
-    id: string;
-    input: unknown;
-} | {
-    type: 'tool_result';
-    ts: string;
-    id: string;
-    content: unknown;
-    isError: boolean;
-} | {
-    type: 'compaction';
-    ts: string;
-    before: number;
-    after: number;
-} | {
-    type: 'error';
-    ts: string;
-    message: string;
-    phase: string;
-} | {
-    type: 'session_end';
-    ts: string;
-    usage: Usage;
-} | {
-    type: 'mode_changed';
-    ts: string;
-    from: string;
-    to: string;
-} | {
-    type: 'task_created';
-    ts: string;
-    taskId: string;
-    title: string;
-} | {
-    type: 'task_updated';
-    ts: string;
-    taskId: string;
-    status: string;
-} | {
-    type: 'task_completed';
-    ts: string;
-    taskId: string;
-    title: string;
-} | {
-    type: 'task_failed';
-    ts: string;
-    taskId: string;
-    title: string;
-    error: string;
-} | {
-    type: 'agent_spawned';
-    ts: string;
-    agentId: string;
-    role: string;
-} | {
-    type: 'agent_stopped';
-    ts: string;
-    agentId: string;
-} | {
-    type: 'agent_error';
-    ts: string;
-    agentId: string;
-    error: string;
-} | {
-    type: 'spec_parsed';
-    ts: string;
-    specId: string;
-    title: string;
-    completeness: number;
-} | {
-    type: 'spec_analyzed';
-    ts: string;
-    specId: string;
-    gaps: string[];
-} | {
-    type: 'skill_activated';
-    ts: string;
-    skillName: string;
-} | {
-    type: 'skill_deactivated';
-    ts: string;
-    skillName: string;
-} | {
-    type: 'tool_call_start';
-    ts: string;
-    name: string;
-    id: string;
-    input: unknown;
-} | {
-    type: 'tool_call_end';
-    ts: string;
-    name: string;
-    id: string;
-    durationMs: number;
-    outputSize: number;
-} | {
-    type: 'message_truncated';
-    ts: string;
-    before: number;
-    after: number;
-};
-interface SessionSummary {
-    id: string;
-    title: string;
-    startedAt: string;
-    model: string;
-    provider: string;
-    tokenTotal: number;
-}
-interface SessionData {
-    metadata: SessionMetadata;
-    events: SessionEvent[];
-    messages: Message[];
-    usage: Usage;
-}
-interface ResumedSession {
-    writer: SessionWriter;
-    data: SessionData;
-}
-interface SessionStore {
-    create(meta: Omit<SessionMetadata, 'startedAt'>): Promise<SessionWriter>;
-    load(id: string): Promise<SessionData>;
-    /**
-     * Open an existing session for append, returning both a writer that
-     * continues writing to the same JSONL file and the replayed state
-     * (messages + usage) so the caller can hydrate a Context. A
-     * `session_resumed` marker is appended for audit.
-     */
-    resume(id: string): Promise<ResumedSession>;
-    list(limit?: number): Promise<SessionSummary[]>;
-    delete(id: string): Promise<void>;
-}
-interface SessionWriter {
-    readonly id: string;
-    append(event: SessionEvent): Promise<void>;
-    close(): Promise<void>;
-}
-
-interface CacheStats {
-    /** Tokens served from cache (cheaper). */
-    readTokens: number;
-    /** Tokens written into the cache (more expensive than input on first hit). */
-    writeTokens: number;
-    /** Hit ratio: cacheRead / (cacheRead + input). 0 when nothing cached. */
-    hitRatio: number;
-}
-interface TokenCounter {
-    account(usage: Usage, model?: string): void;
-    total(): Usage;
-    estimateCost(): {
-        input: number;
-        output: number;
-        total: number;
-        currency: 'USD';
-    };
-    cacheStats(): CacheStats;
-    reset(): void;
-}
-
-interface TodoItem {
-    id: string;
-    content: string;
-    status: 'pending' | 'in_progress' | 'completed';
-    activeForm?: string;
-}
-interface RunOptions {
-    signal?: AbortSignal;
-    model?: string;
-    executionStrategy?: 'parallel' | 'sequential' | 'smart';
-    maxIterations?: number;
-}
-interface ContextInit {
-    systemPrompt: TextBlock[];
-    provider: Provider;
-    session: SessionWriter;
-    signal: AbortSignal;
-    tokenCounter: TokenCounter;
-    cwd: string;
-    projectRoot: string;
-    model: string;
-    tools?: Tool[];
-}
-declare class Context {
-    messages: Message[];
-    todos: TodoItem[];
-    readFiles: Set<string>;
-    fileMtimes: Map<string, number>;
-    systemPrompt: TextBlock[];
-    provider: Provider;
-    session: SessionWriter;
-    signal: AbortSignal;
-    tokenCounter: TokenCounter;
-    cwd: string;
-    projectRoot: string;
-    model: string;
-    tools: Tool[];
-    meta: Record<string, unknown>;
-    constructor(init: ContextInit);
-    /**
-     * Register a teardown hook tied to the current run's abort signal. The
-     * hook fires when the run aborts OR ends normally — Agent.run wires
-     * this through a RunController. When no run is active the hook fires
-     * immediately so callers don't leak resources.
-     */
-    private abortHooks;
-    registerAbortHook(fn: () => void | Promise<void>): () => void;
-    drainAbortHooks(): Promise<void>;
-    recordRead(absPath: string, mtimeMs: number): void;
-    hasRead(absPath: string): boolean;
-    lastReadMtime(absPath: string): number | undefined;
-    usage(): Usage;
-}
-
-type Permission = 'auto' | 'confirm' | 'deny';
-interface JSONSchema {
-    type?: string;
-    properties?: Record<string, JSONSchema>;
-    required?: string[];
-    items?: JSONSchema;
-    enum?: unknown[];
-    description?: string;
-    [k: string]: unknown;
-}
-interface Tool<I = unknown, O = unknown> {
-    name: string;
-    description: string;
-    usageHint?: string;
-    inputSchema: JSONSchema;
-    permission: Permission;
-    mutating: boolean;
-    maxOutputBytes?: number;
-    timeoutMs?: number;
-    execute(input: I, ctx: Context, opts: {
-        signal: AbortSignal;
-    }): Promise<O>;
-}
-interface ToolCallContext {
-    tool: Tool;
-    input: unknown;
-    callId: string;
-    ctx: Context;
-    signal: AbortSignal;
-}
-
-interface Usage {
-    input: number;
-    output: number;
-    cacheRead?: number;
-    cacheWrite?: number;
-}
-interface Capabilities {
-    tools: boolean;
-    parallelTools: boolean;
-    vision: boolean;
-    streaming: boolean;
-    promptCache: boolean;
-    systemPrompt: boolean;
-    jsonMode: boolean;
-    maxContext: number;
-    cacheControl: 'native' | 'auto' | 'none';
-}
-interface Request {
-    model: string;
-    system?: TextBlock[];
-    messages: Message[];
-    tools?: Tool[];
-    maxTokens: number;
-    temperature?: number;
-    topP?: number;
-    stopSequences?: string[];
-    toolChoice?: 'auto' | 'required' | 'none' | {
-        type: 'tool';
-        name: string;
-    };
-}
-type StopReason = 'end_turn' | 'tool_use' | 'max_tokens' | 'stop_sequence' | 'refusal';
-interface Response {
-    content: ContentBlock[];
-    stopReason: StopReason;
-    usage: Usage;
-    model: string;
-}
-type StreamEvent = {
-    type: 'message_start';
-    model: string;
-} | {
-    type: 'content_block_start';
-    kind: 'text' | 'tool_use';
-    id?: string;
-    name?: string;
-} | {
-    type: 'content_block_stop';
-    index: number;
-} | {
-    type: 'text_delta';
-    text: string;
-} | {
-    type: 'tool_use_start';
-    id: string;
-    name: string;
-} | {
-    type: 'tool_use_input_delta';
-    id: string;
-    partial: string;
-} | {
-    type: 'tool_use_stop';
-    id: string;
-    input: unknown;
-} | {
-    type: 'message_stop';
-    stopReason: StopReason;
-    usage: Usage;
-};
-interface Provider {
-    readonly id: string;
-    readonly capabilities: Capabilities;
-    /** Canonical streaming entry point. `complete()` defaults to a wrapper that
-     * aggregates this stream — providers may override for non-streaming wires. */
-    stream(req: Request, opts: {
-        signal: AbortSignal;
-    }): AsyncIterable<StreamEvent>;
-    complete(req: Request, opts: {
-        signal: AbortSignal;
-    }): Promise<Response>;
-}
-/**
- * Structured body parsed from a provider's HTTP error response. Populated
- * best-effort: providers return JSON shaped differently (Anthropic uses
- * `{error: {type, message}}`, OpenAI uses `{error: {message, code}}`,
- * Google uses `{error: {status, message}}`), so the fields here are the
- * intersection that's usable for rendering and routing.
- */
-interface ProviderErrorBody {
-    /** Provider-specific kind, e.g. "overloaded_error", "rate_limit_error", "invalid_request_error". */
-    type?: string;
-    /** Human-readable explanation from the provider. */
-    message?: string;
-    /** Provider request id, when present in the body or headers. */
-    requestId?: string;
-    /** Parsed Retry-After header (or equivalent body hint) in milliseconds. */
-    retryAfterMs?: number;
-    /** The raw response body (truncated), kept for debugging. */
-    raw?: string;
-}
-declare class ProviderError extends Error {
-    readonly status: number;
-    readonly retryable: boolean;
-    readonly providerId: string;
-    readonly body?: ProviderErrorBody;
-    readonly cause?: unknown;
-    constructor(message: string, status: number, retryable: boolean, providerId: string, opts?: {
-        body?: ProviderErrorBody;
-        cause?: unknown;
-    });
-    /**
-     * Render a one-line, user-facing description. Designed for the CLI/TUI
-     * status line and the agent's retry warning. Avoids dumping raw JSON
-     * (which is what users see today when a 529 lands and the log message
-     * includes the full `{"type":"error",...}` body).
-     *
-     * Examples:
-     *   "minimax-coding-plan overloaded (529): High traffic detected. Upgrade for highspeed model. [req 06534785201de9c0…]"
-     *   "openai rate limited (429): Retry after 12s"
-     *   "anthropic invalid request (400): messages.0.role must be one of 'user'|'assistant'"
-     *   "groq HTTP 500 (server error)"
-     */
-    describe(): string;
-}
-
 /**
  * EventBus — observe-only typed event bus.
  * Subscribers cannot modify or cancel. Subscriber exceptions are caught.
@@ -651,6 +224,29 @@ interface EventMap {
         id: string;
         input?: unknown;
     };
+    /**
+     * Fired for each ToolProgressEvent yielded by `Tool.executeStream`. UIs
+     * subscribe to render incremental progress (streaming bash output, file
+     * tree counts, etc.) without the tool having to know about the UI.
+     */
+    'tool.progress': {
+        name: string;
+        id: string;
+        event: ToolProgressEvent;
+    };
+    /**
+     * Fired when a tool call needs user confirmation and no confirmHandler
+     * is registered on the executor. The TUI renders a confirmation dialog
+     * from this event. Resolution is driven by calling the resolve function
+     * passed in the payload with a decision string ('yes' | 'no' | 'always' | 'deny').
+     */
+    'tool.confirm_needed': {
+        tool: Tool;
+        input: unknown;
+        toolUseId: string;
+        suggestedPattern: string;
+        resolve: (decision: 'yes' | 'no' | 'always' | 'deny') => void;
+    };
     /**
      * `output` is a truncated preview of the tool's serialized result text
      * (capped at ~400 chars by the emitter). UIs render this inline in the
@@ -705,6 +301,12 @@ declare class EventBus {
     once<E extends EventName>(event: E, fn: Listener<E>): () => void;
     emit<E extends EventName>(event: E, payload: EventMap[E]): void;
     clear(): void;
+    /**
+     * V2-D: introspection helper. Pass an `event` to count handlers for a
+     * single key, or omit to get the total across every event. Used by the
+     * leak-detection smoke test to flag handler accumulation across runs.
+     */
+    listenerCount(event?: EventName): number;
 }
 
 type LogLevel = 'error' | 'warn' | 'info' | 'debug' | 'trace';
@@ -911,9 +513,30 @@ interface ToolsConfig {
      */
     autoExtendLimit?: boolean;
 }
+interface ProviderApiKey {
+    /** Short human-readable label (e.g. "personal", "work", "rate-limit-backup"). */
+    label: string;
+    /**
+     * The key itself. The field name contains `apiKey` so the secret-vault
+     * walker will encrypt it on write and decrypt it on read.
+     */
+    apiKey: string;
+    /** ISO-8601 timestamp the key was added. */
+    createdAt: string;
+}
 interface ProviderConfig {
     type: string;
+    /**
+     * Legacy single-key field. Still honored as a fallback when `apiKeys`
+     * is empty. When `apiKeys`/`activeKey` are present, the config loader
+     * mirrors the active entry into this field so downstream consumers
+     * (provider construction, wire adapters) need no changes.
+     */
     apiKey?: string;
+    /** Multiple keys for the same provider — pick one with `activeKey`. */
+    apiKeys?: ProviderApiKey[];
+    /** Label of the entry in `apiKeys` to use. Defaults to the first one. */
+    activeKey?: string;
     baseUrl?: string;
     headers?: Record<string, string>;
     model?: string;
@@ -931,6 +554,8 @@ interface ProviderConfig {
     models?: string[];
 }
 interface MCPServerConfig {
+    /** Human-readable description shown in `wstack mcp list`. */
+    description?: string;
     name: string;
     transport: 'stdio' | 'sse' | 'streamable-http';
     command?: string;
@@ -987,6 +612,19 @@ interface Config {
     features: FeaturesConfig;
     yolo?: boolean;
     cwd?: string;
+    /**
+     * Per-plugin namespaced config sections. Each plugin reads its own
+     * subtree via `ConfigStore.getExtension(pluginName)`. Plugins should
+     * declare a `configSchema` so the loader validates this section
+     * automatically before `setup()` runs.
+     *
+     * Example:
+     *   extensions: {
+     *     'wstack-auth': { tokenUrl: 'https://...', refreshBefore: 300 },
+     *     'wstack-metrics': { sink: 'prometheus', port: 9090 },
+     *   }
+     */
+    extensions?: Record<string, Record<string, unknown>>;
 }
 interface ConfigLoader {
     load(opts?: {
@@ -994,6 +632,37 @@ interface ConfigLoader {
         cwd?: string;
     }): Promise<Config>;
 }
+/**
+ * Subscribable view over Config. Plugins and CLI subsystems use this instead
+ * of holding a frozen Config reference, so they can react to runtime updates
+ * (e.g. `/model` switching the active provider, secrets rotation, dynamic
+ * extension reload).
+ *
+ * The store enforces immutability — `get()` always returns a frozen object.
+ * Updates happen through `update(partial)`, which produces a new Config
+ * (structurally cloned, then frozen) and notifies watchers.
+ */
+interface ConfigStore {
+    get(): Readonly<Config>;
+    /**
+     * Get a typed top-level section. Convenience for consumers that only
+     * care about one slice (e.g. `tools` or `context`).
+     */
+    getSection<K extends keyof Config>(key: K): Readonly<Config[K]>;
+    /**
+     * Return the extension namespace for `pluginName`, or an empty record
+     * when none is configured. The returned object is frozen.
+     */
+    getExtension(pluginName: string): Readonly<Record<string, unknown>>;
+    /**
+     * Apply a partial update. Returns the new Config. Watchers are notified
+     * synchronously after the update completes. Throws if the result fails
+     * any registered invariants (currently: version must stay 1).
+     */
+    update(partial: Partial<Config>): Readonly<Config>;
+    /** Subscribe to changes. Returns an unsubscribe function. */
+    watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
+}
 
 interface Renderer {
     write(text: string | TextBlock): void;
@@ -1052,4 +721,4 @@ interface SecretScrubber {
     scrubObject<T>(obj: T): T;
 }
 
-export { type StreamEvent as $, ProviderError as A, type ProviderErrorBody as B, type CacheStats as C, type Request as D, type ErrorHandler as E, type FeaturesConfig as F, type ResolvedModel as G, type ResolvedProvider as H, type ImageBlock as I, type JSONSchema as J, type Response as K, type LogConfig as L, type MCPServerConfig as M, type ResumedSession as N, type RetryPolicy as O, type PathResolver as P, type SessionData as Q, type Renderer as R, type SecretScrubber as S, type SessionEvent as T, type SessionMetadata as U, type SessionStore as V, type SessionSummary as W, type SessionWriter as X, type SkillLoader as Y, type SkillManifest as Z, type StopReason as _, type Capabilities as a, type TextBlock as a0, type TokenCounter as a1, type Tool as a2, type ToolCallContext as a3, type ToolResultBlock as a4, type ToolUseBlock as a5, type ToolsConfig as a6, type TrustPolicy as a7, type Usage as a8, type WireFamily as a9, asBlocks as aa, asText as ab, isImageBlock as ac, isTextBlock as ad, isToolResultBlock as ae, isToolUseBlock as af, Context as ag, Container as ah, EventBus as ai, type EventName as aj, type Listener as ak, type BindOptions as al, type ContextInit as am, type Decorator as an, type EventLogger as ao, type EventMap as ap, type Factory as aq, type Middleware as ar, type MiddlewareHandler as as, type NextFn as at, Pipeline as au, type PipelineOptions as av, type RunOptions as aw, type TodoItem as ax, type Token as ay, type ReadonlyPipeline as az, type CompactReport as b, type Compactor as c, type Config as d, type ConfigLoader as e, type ContentBlock as f, type ContextConfig as g, type InputReader as h, type LogLevel as i, type Logger as j, type MemoryEntry as k, type MemoryScope as l, type MemoryStore as m, type Message as n, type MessageRole as o, type ModelsDevModel as p, type ModelsDevPayload as q, type ModelsDevProvider as r, type ModelsRegistry as s, type Permission as t, type PermissionDecision as u, type PermissionPolicy as v, type PluginConfig as w, type PromptOption as x, type Provider as y, type ProviderConfig as z };
+export { Container as A, EventBus as B, type CompactReport as C, type EventName as D, type ErrorHandler as E, type FeaturesConfig as F, type Listener as G, type BindOptions as H, type InputReader as I, type Decorator as J, type EventLogger as K, type LogConfig as L, type MCPServerConfig as M, type EventMap as N, type Factory as O, type PathResolver as P, type Middleware as Q, type Renderer as R, type SecretScrubber as S, type ToolsConfig as T, type MiddlewareHandler as U, type NextFn as V, type WireFamily as W, Pipeline as X, type PipelineOptions as Y, type Token as Z, type ReadonlyPipeline as _, type Compactor as a, type Config as b, type ConfigLoader as c, type ConfigStore as d, type ContextConfig as e, type LogLevel as f, type Logger as g, type MemoryEntry as h, type MemoryScope as i, type MemoryStore as j, type ModelsDevModel as k, type ModelsDevPayload as l, type ModelsDevProvider as m, type ModelsRegistry as n, type PermissionDecision as o, type PermissionPolicy as p, type PluginConfig as q, type PromptOption as r, type ProviderApiKey as s, type ProviderConfig as t, type ResolvedModel as u, type ResolvedProvider as v, type RetryPolicy as w, type SkillLoader as x, type SkillManifest as y, type TrustPolicy as z };