@wrongstack/core 0.1.3 → 0.1.7

package/LICENSE

@@ -1,17 +1,21 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
+MIT License
 
-   Copyright 2026 ECOSTACK TECHNOLOGY OÜ
+Copyright (c) 2026 ECOSTACK TECHNOLOGY OÜ
 
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
 
-       http://www.apache.org/licenses/LICENSE-2.0
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
 
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,155 @@
+# @wrongstack/core
+
+Kernel, types, and default implementations that drive the WrongStack CLI agent.
+
+This package has no `bin`. It's a library you'd depend on if you were building a plugin, embedding the agent in another tool, or replacing one of the default implementations (a custom session store, a stricter permission policy, your own retry strategy).
+
+If you're just using WrongStack from the terminal, install [`wrongstack`](../../README.md) instead.
+
+## Install
+
+```bash
+pnpm add @wrongstack/core
+```
+
+Requires **Node.js ≥ 22.0.0**.
+
+## What's in here
+
+```
+src/
+  core/         — Agent, Context, ConversationState, ProviderRunner, InputBuilder
+  defaults/     — Production-ready implementations (session store, secret vault, …)
+  kernel/       — Container, TOKENS, EventBus, ToolRegistry, ProviderRegistry
+  plugin/       — Plugin loader, PluginAPI, manifest validation
+  registry/     — SlashCommandRegistry, ToolRegistry, ProviderRegistry
+  types/        — Public type surface (Tool, Provider, SessionStore, …)
+  utils/        — wstack-paths, safe-json, deterministic-stringify, lru-cache
+```
+
+## Quick example
+
+Run an agent loop with the Anthropic provider and a single tool:
+
+```ts
+import {
+  Agent,
+  Container,
+  Context,
+  DefaultEventBus,
+  DefaultLogger,
+  DefaultPermissionPolicy,
+  DefaultSessionStore,
+  DefaultSystemPromptBuilder,
+  DefaultTokenCounter,
+  ToolRegistry,
+  TOKENS,
+} from '@wrongstack/core';
+import { AnthropicProvider } from '@wrongstack/providers';
+import { readTool, writeTool, bashTool } from '@wrongstack/tools';
+
+const container = new Container();
+container.bind(TOKENS.EventBus, () => new DefaultEventBus());
+container.bind(TOKENS.Logger, () => new DefaultLogger());
+container.bind(TOKENS.PermissionPolicy, () => new DefaultPermissionPolicy());
+
+const provider = new AnthropicProvider({ apiKey: process.env.ANTHROPIC_API_KEY! });
+const tools = new ToolRegistry([readTool, writeTool, bashTool]);
+
+const ctx = new Context({
+  cwd: process.cwd(),
+  projectRoot: process.cwd(),
+  provider,
+  model: 'claude-sonnet-4-6',
+  tokenCounter: new DefaultTokenCounter({ providerId: 'anthropic' }),
+});
+
+const agent = new Agent({
+  container,
+  ctx,
+  tools,
+  systemPromptBuilder: new DefaultSystemPromptBuilder(),
+});
+
+const result = await agent.run({
+  input: { text: 'list the files in src/' },
+});
+
+console.log(result.assistantText);
+```
+
+## Replacing a default
+
+Every concrete class under `defaults/` implements an interface in `types/`. The container resolves by token, so swapping is a one-line change:
+
+```ts
+import { TOKENS } from '@wrongstack/core';
+
+class StrictPolicy implements PermissionPolicy {
+  async check(tool, input, ctx) {
+    if (tool.name === 'bash') return { decision: 'deny', reason: 'no shell' };
+    return { decision: 'allow' };
+  }
+}
+
+container.bind(TOKENS.PermissionPolicy, () => new StrictPolicy());
+```
+
+The same pattern works for `SessionStore`, `MemoryStore`, `SystemPromptBuilder`, `RetryPolicy`, `ErrorHandler`, `TokenCounter`, `SecretVault`, `SecretScrubber`, `Compactor`, `ConfigStore`, `ModelsRegistry`, `ModeStore`.
+
+## Building a tool
+
+```ts
+import type { Tool } from '@wrongstack/core';
+
+export const echoTool: Tool<{ text: string }, string> = {
+  name: 'echo',
+  description: 'Echo a string back.',
+  inputSchema: {
+    type: 'object',
+    properties: { text: { type: 'string' } },
+    required: ['text'],
+  },
+  permission: 'auto',
+  mutating: false,
+  async execute(input) {
+    return input.text;
+  },
+};
+```
+
+See [docs/tool-author-guide.md](../../docs/tool-author-guide.md) for the full contract (`subjectKey`, `executeStream`, `cleanup`, abort handling, output bounds).
+
+## Building a provider
+
+Most providers can ride the declarative wire-format adapter — see [`@wrongstack/providers`](../providers). For direct implementation, see [docs/provider-author-guide.md](../../docs/provider-author-guide.md).
+
+## Building a plugin
+
+```ts
+import type { Plugin } from '@wrongstack/core';
+
+export default {
+  name: 'my-plugin',
+  version: '1.0.0',
+  capabilities: { tools: true, slashCommands: true },
+  async setup(api) {
+    api.registerTool(myTool);
+    api.registerSlashCommand({ name: 'my-cmd', description: '…', run: async () => {} });
+  },
+} satisfies Plugin;
+```
+
+See [docs/plugin-author-guide.md](../../docs/plugin-author-guide.md).
+
+## Path layout
+
+All developer-level state lives under `~/.wrongstack/`. Per-project state is keyed by `sha256(absoluteProjectRoot).slice(0,12)` under `~/.wrongstack/projects/<hash>/`. The only thing inside the project tree itself is the optional, committable `.wrongstack/AGENTS.md` and `.wrongstack/skills/`. See `WstackPaths` in [utils/wstack-paths.ts](src/utils/wstack-paths.ts) for the full layout.
+
+## Security model
+
+See [SECURITY.md](../../SECURITY.md) at the repo root for the threat model, adversary trust assumptions, and the catalog of controls (SSRF defenses, child-env sanitization, secret vault, prompt-injection assumptions for LLM-generated tool inputs).
+
+## License
+
+MIT

package/dist/defaults/index.d.ts

@@ -1,8 +1,8 @@
-import { g as Logger, f as LogLevel, P as PathResolver, n as ModelsRegistry, B as EventBus, u as ResolvedModel, j as MemoryStore, i as MemoryScope, S as SecretScrubber, p as PermissionPolicy, I as InputReader, o as PermissionDecision, w as RetryPolicy, E as ErrorHandler, a as Compactor, x as SkillLoader, y as SkillManifest, b as Config, c as ConfigLoader, d as ConfigStore, C as CompactReport, U as MiddlewareHandler, l as ModelsDevPayload, v as ResolvedProvider, W as WireFamily, M as MCPServerConfig } from '../secret-scrubber-qU3AwEiI.js';
-import { u as TokenCounter, U as Usage, C as CacheStats, p as SessionStore, o as SessionMetadata, r as SessionWriter, l as ResumedSession, S as SessionData, q as SessionSummary, c as ContentBlock, v as Tool, a0 as Context, i as ProviderError, k as Response, h as Provider, M as Message, F as ToolUseBlock, B as ToolResultBlock, n as SessionEvent } from '../provider-DovtyuM8.js';
-import { h as AttachmentStore, A as AddAttachmentInput, g as AttachmentRef, d as Attachment, S as SecretVault, F as ModeStore, y as ModeConfig, x as Mode, I as MultiAgentCoordinator, G as MultiAgentConfig, ae as SubagentRunner, aa as SubagentConfig, a0 as SpawnResult, aq as TaskSpec, B as BridgeMessage, a as AgentBridge, l as CoordinatorStatus, ao as TaskResult, aH as Agent, aJ as AgentInput, j as BridgeTransport, b as AgentBridgeConfig, p as DoneCondition, aR as RunResult, a9 as Specification, a1 as SpecAnalysis, a8 as SpecValidationResult, ak as TaskGraph, al as TaskNode, aj as TaskFilter, ap as TaskSort, an as TaskProgress, as as TaskType, am as TaskPriority, ay as ToolExecutorOptions, az as ToolExecutorStrategy, at as ToolBatchResult, V as SessionReader, o as DefaultSessionReaderOptions, U as SessionQuery, Y as SessionSummaryLite, X as SessionSearchQuery, W as SessionSearchHit, T as SessionExportOptions, v as MetricsSink, t as MetricLabels, w as MetricsSnapshot, r as HealthRegistry, H as HealthCheck, c as AggregateHealth, aB as Tracer, $ as Span } from '../session-reader-DR4u3bu9.js';
-export { aL as BudgetExceededError, aM as BudgetKind, aN as BudgetLimits, aO as BudgetUsage, aS as SubagentBudget } from '../session-reader-DR4u3bu9.js';
-import { a as WstackPaths } from '../wstack-paths-D24ynAz1.js';
+import { g as Logger, f as LogLevel, P as PathResolver, r as ModelsRegistry, O as EventBus, z as ResolvedModel, j as MemoryStore, i as MemoryScope, S as SecretScrubber, t as PermissionPolicy, I as InputReader, s as PermissionDecision, B as RetryPolicy, E as ErrorHandler, a as Compactor, R as RecoveryDecision, H as SkillLoader, J as SkillManifest, G as SkillEntry, b as Config, c as ConfigLoader, d as ConfigStore, C as CompactReport, a0 as MiddlewareHandler, p as ModelsDevPayload, A as ResolvedProvider, W as WireFamily, n as ModeStore, l as ModeConfig, k as Mode, M as MCPServerConfig } from '../mode-Pjt5vMS6.js';
+import { u as TokenCounter, U as Usage, C as CacheStats, p as SessionStore, o as SessionMetadata, r as SessionWriter, l as ResumedSession, S as SessionData, q as SessionSummary, c as ContentBlock, v as Tool, a0 as Context, i as ProviderError, h as Provider, M as Message, F as ToolUseBlock, B as ToolResultBlock, n as SessionEvent } from '../provider-txgB0Oq9.js';
+import { h as AttachmentStore, A as AddAttachmentInput, g as AttachmentRef, d as Attachment, S as SecretVault, x as MultiAgentCoordinator, w as MultiAgentConfig, a9 as SubagentRunner, a5 as SubagentConfig, X as SpawnResult, al as TaskSpec, B as BridgeMessage, a as AgentBridge, l as CoordinatorStatus, aj as TaskResult, aC as Agent, aE as AgentInput, j as BridgeTransport, b as AgentBridgeConfig, o as DoneCondition, aM as RunResult, a4 as Specification, Y as SpecAnalysis, a3 as SpecValidationResult, af as TaskGraph, ag as TaskNode, ae as TaskFilter, ak as TaskSort, ai as TaskProgress, an as TaskType, ah as TaskPriority, at as ToolExecutorOptions, au as ToolExecutorStrategy, ao as ToolBatchResult, O as SessionReader, n as DefaultSessionReaderOptions, N as SessionQuery, T as SessionSummaryLite, R as SessionSearchQuery, Q as SessionSearchHit, L as SessionExportOptions, u as MetricsSink, s as MetricLabels, v as MetricsSnapshot, q as HealthRegistry, H as HealthCheck, c as AggregateHealth, aw as Tracer, W as Span } from '../session-reader-7AutWHut.js';
+export { aG as BudgetExceededError, aH as BudgetKind, aI as BudgetLimits, aJ as BudgetUsage, aN as SubagentBudget } from '../session-reader-7AutWHut.js';
+import { a as WstackPaths } from '../wstack-paths-BGu2INTm.js';
 import { EventEmitter } from 'node:events';
 
 interface DefaultLoggerOptions {
@@ -165,17 +165,30 @@ interface MemoryStoreOptions {
  */
 declare class DefaultMemoryStore implements MemoryStore {
     private readonly files;
+    /**
+     * Per-scope serialization queue. `remember` / `forget` / `consolidate` /
+     * `clear` are read-modify-write against a single file; without a lock,
+     * two concurrent calls on the same scope can read the same baseline and
+     * the later write silently drops the earlier entry. We chain each
+     * mutation onto the prior promise for the same scope so they run in
+     * issue order. Different scopes still proceed in parallel.
+     */
+    private readonly writeChain;
     constructor(opts: MemoryStoreOptions);
+    private runSerialized;
     readAll(): Promise<string>;
     read(scope: MemoryScope): Promise<string>;
     remember(text: string, scope?: MemoryScope): Promise<void>;
     forget(query: string, scope?: MemoryScope): Promise<number>;
+    private forgetUnsafe;
     consolidate(scope: MemoryScope): Promise<void>;
+    private consolidateUnsafe;
     clear(scope?: MemoryScope): Promise<void>;
 }
 
 declare class DefaultSecretScrubber implements SecretScrubber {
     scrub(text: string): string;
+    private scrubOne;
     scrubObject<T>(obj: T): T;
 }
 
@@ -247,6 +260,7 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
 }
 
 declare class DefaultRetryPolicy implements RetryPolicy {
+    private static readonly NETWORK_ERR_RE;
     shouldRetry(err: Error | ProviderError, attempt: number): boolean;
     maxAttempts(err: Error | ProviderError): number;
     delayMs(attempt: number): number;
@@ -254,15 +268,15 @@ declare class DefaultRetryPolicy implements RetryPolicy {
 
 /**
  * Tiered error recovery strategies.
- * Each strategy is attempted in order until one succeeds.
+ * Each strategy is attempted in order until one returns a decision.
  */
 interface RecoveryStrategy {
     /** Human-readable label for logs. */
     label: string;
     /** Optional compactor for context_overflow recovery. */
     compactor?: Compactor;
-    /** Returns a substitute Response, or null to fall through to the next strategy. */
-    attempt: (err: unknown, ctx: Context) => Promise<Response | null>;
+    /** Returns an explicit recovery decision, or null to fall through. */
+    attempt: (err: unknown, ctx: Context) => Promise<RecoveryDecision | null>;
 }
 declare class DefaultErrorHandler implements ErrorHandler {
     private readonly strategies;
@@ -271,7 +285,7 @@ declare class DefaultErrorHandler implements ErrorHandler {
         kind: 'rate_limit' | 'overloaded' | 'server' | 'client' | 'network' | 'abort' | 'context_overflow' | 'unknown';
         retryable: boolean;
     };
-    recover(err: unknown, ctx: Context): Promise<Response | null>;
+    recover(err: unknown, ctx: Context): Promise<RecoveryDecision | null>;
 }
 
 interface SkillLoaderOptions {
@@ -292,6 +306,7 @@ declare class DefaultSkillLoader implements SkillLoader {
     list(): Promise<SkillManifest[]>;
     find(name: string): Promise<SkillManifest | undefined>;
     manifestText(): Promise<string>;
+    listEntries(): Promise<SkillEntry[]>;
     readBody(name: string): Promise<string>;
 }
 
@@ -674,10 +689,16 @@ declare class LLMSelector implements MessageSelector {
     private parseSelectorOutput;
 }
 
+type CompactionFailureMode = 'throw' | 'throw_on_hard' | 'continue';
+interface AutoCompactionOptions {
+    aggressiveOn?: 'hard' | 'soft' | 'warn';
+    events?: EventBus;
+    failureMode?: CompactionFailureMode;
+}
 /**
- * Pipeline middleware that monitors context token load and
- * automatically triggers compaction when the warn/soft/hard
- * thresholds are crossed. Runs before the next agent iteration.
+ * Pipeline middleware that monitors context token load and automatically
+ * triggers compaction when the warn/soft/hard thresholds are crossed.
+ * Runs before the next agent iteration.
  */
 declare class AutoCompactionMiddleware {
     readonly name = "AutoCompaction";
@@ -688,18 +709,24 @@ declare class AutoCompactionMiddleware {
     private readonly maxContext;
     private readonly estimator;
     private readonly aggressiveOn;
+    private readonly events?;
+    private readonly failureMode;
     /**
-     * @param compactor        Compactor to use for compaction
-     * @param maxContext       Provider's max context window in tokens
-     * @param estimator        Token estimation function (ctx → token count)
-     * @param thresholds      Threshold fractions (0-1) of maxContext
-     * @param aggressiveOn    Which threshold triggers aggressive (full LLM summarization)
+     * @param compactor        Compactor to use for compaction.
+     * @param maxContext       Provider's max context window in tokens.
+     * @param estimator        Token estimation function.
+     * @param thresholds       Threshold fractions (0-1) of maxContext.
+     * @param opts             Optional behavior. By default, failures at the
+     *                         hard threshold throw AGENT_CONTEXT_OVERFLOW so
+     *                         the agent does not continue into a likely
+     *                         provider context overflow. Warn/soft failures
+     *                         still emit compaction.failed and continue.
      */
     constructor(compactor: Compactor, maxContext: number, estimator: (ctx: Context) => number, thresholds: {
         warn: number;
         soft: number;
         hard: number;
-    }, aggressiveOn?: 'hard' | 'soft' | 'warn');
+    }, optsOrAggressiveOn?: AutoCompactionOptions | 'hard' | 'soft' | 'warn', events?: EventBus);
     handler(): MiddlewareHandler<Context>;
     private compact;
 }
@@ -883,6 +910,10 @@ declare class InMemoryAgentBridge implements AgentBridge {
 }
 declare function createMessage<T = unknown>(type: BridgeMessage['type'], from: string, payload: T, to?: string): BridgeMessage<T>;
 
+type AutonomousResult = RunResult & {
+    toolCalls: number;
+    reason?: string;
+};
 interface DoneCheckResult {
     done: boolean;
     reason?: string;
@@ -891,6 +922,7 @@ interface DoneCheckResult {
 }
 declare class DoneConditionChecker {
     private readonly condition;
+    private readonly compiledRegex;
     constructor(condition: DoneCondition);
     check(state: {
         iterations: number;
@@ -907,10 +939,7 @@ interface AutonomousRunnerOptions {
         iteration: number;
         toolCalls: number;
     }) => void;
-    onDone?: (result: RunResult & {
-        toolCalls: number;
-        reason?: string;
-    }) => void;
+    onDone?: (result: AutonomousResult) => void;
 }
 declare class AutonomousRunner {
     private readonly opts;
@@ -920,19 +949,11 @@ declare class AutonomousRunner {
     private stopped;
     private readonly doneChecker;
     constructor(opts: AutonomousRunnerOptions);
-    run(): Promise<RunResult & {
-        toolCalls: number;
-        reason?: string;
-    }>;
+    run(): Promise<AutonomousResult>;
     stop(): void;
 }
 
-interface SpecParserOptions {
-    strict?: boolean;
-}
 declare class SpecParser {
-    private readonly opts;
-    constructor(opts?: SpecParserOptions);
     parse(content: string): Specification;
     private extractTitle;
     private extractVersion;
@@ -957,6 +978,13 @@ interface TaskStore {
 }
 interface TaskTrackerOptions {
     store: TaskStore;
+    /**
+     * Called when an in-the-background persistence (`saveGraph`) rejects.
+     * The synchronous TaskTracker methods (addNode/addEdge/updateNodeStatus)
+     * fire-and-forget their writes; without this, a failing store silently
+     * loses graph mutations. Defaults to a console.warn.
+     */
+    onPersistError?: (err: unknown) => void;
 }
 interface TaskTransition {
     from: TaskNode['status'];
@@ -984,6 +1012,14 @@ declare class TaskTracker {
     getTransitions(taskId?: string): TaskTransition[];
     private unblockDependents;
     private checkAndBlockIfNeeded;
+    /**
+     * Fire-and-forget persistence with attached error handler.
+     * Synchronous mutators (addNode/addEdge/updateNodeStatus) use this to
+     * avoid forcing an async cascade through every caller; if the store
+     * rejects, the configured `onPersistError` is invoked so failures are
+     * surfaced instead of swallowed by an unhandled promise rejection.
+     */
+    private persist;
 }
 
 interface TaskGeneratorOptions {
@@ -1006,7 +1042,6 @@ declare class TaskGenerator {
     private createTaskFromEndpoint;
     private buildDescription;
     private mapRequirementType;
-    private mapPriority;
     private estimateHours;
     private estimateForEndpoint;
     generateSubtasks(parentTaskId: string, spec: Specification): Promise<void>;
@@ -1679,4 +1714,4 @@ declare const sentinelServer: () => MCPServerConfig;
 /** Everything bundled — full set of built-in servers. Useful for `wstack mcp add --all`. */
 declare const allServers: () => Record<string, MCPServerConfig>;
 
-export { type AbandonedSession, type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, type AttachmentStoreOptions, AutoCompactionMiddleware, AutonomousRunner, type AutonomousRunnerOptions, type CompactorOptions, type ConfigLoaderOptions, type ConfigMigration, ConfigMigrationError, type ConfigSource, type ContextManagerAction, type ContextManagerInput, type ContextManagerResult, type ContextManagerToolOptions, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, type DefaultLoggerOptions, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, type DefaultModelsRegistryOptions, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, DefaultTokenCounter, type DoneCheckResult, DoneConditionChecker, type GeneratedTask, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, type IntelligentCompactorOptions, LLMSelector, type LLMSelectorOptions, type MemoryStoreOptions, type MetricsServerHandle, type MetricsServerOptions, type MigrationContext, type MigrationResult, type ModeLoaderOptions, type MultiAgentCoordinatorOptions, NoopMetricsSink, NoopTracer, OTelTracer, type OtlpMetricsExporterHandle, type OtlpMetricsExporterOptions, type OtlpTraceExporterHandle, type OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, type PermissionPolicyOptions, type PersistedQueueItem, QueueStore, RecoveryLock, type RecoveryLockOptions, type SecretVaultOptions, SelectiveCompactor, type SelectiveCompactorOptions, type SessionStoreOptions, type SkillLoaderOptions, SpecDrivenDev, type SpecDrivenDevOptions, SpecParser, type SpecParserOptions, TaskFlow, type TaskFlowEventMap, type TaskFlowEventName, type TaskFlowExecutionContext, type TaskFlowOptions, type TaskFlowPhase, TaskGenerator, type TaskGeneratorOptions, type TaskStore, TaskTracker, type TaskTrackerOptions, type TaskTransition, ToolExecutor, allServers, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, context7Server, contextManagerTool, createContextManagerTool, createMessage, decryptConfigSecrets, encryptConfigSecrets, everArtServer, filesystemServer, githubServer, googleMapsServer, loadProjectModes, loadUserModes, makeAgentSubagentRunner, migratePlaintextSecrets, renderPrometheus, rewriteConfigEncrypted, runConfigMigrations, sentinelServer, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents };
+export { type AbandonedSession, type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, type AttachmentStoreOptions, AutoCompactionMiddleware, AutonomousRunner, type AutonomousRunnerOptions, type CompactorOptions, type ConfigLoaderOptions, type ConfigMigration, ConfigMigrationError, type ConfigSource, type ContextManagerAction, type ContextManagerInput, type ContextManagerResult, type ContextManagerToolOptions, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, type DefaultLoggerOptions, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, type DefaultModelsRegistryOptions, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, DefaultTokenCounter, type DoneCheckResult, DoneConditionChecker, type GeneratedTask, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, type IntelligentCompactorOptions, LLMSelector, type LLMSelectorOptions, type MemoryStoreOptions, type MetricsServerHandle, type MetricsServerOptions, type MigrationContext, type MigrationResult, type ModeLoaderOptions, type MultiAgentCoordinatorOptions, NoopMetricsSink, NoopTracer, OTelTracer, type OtlpMetricsExporterHandle, type OtlpMetricsExporterOptions, type OtlpTraceExporterHandle, type OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, type PermissionPolicyOptions, type PersistedQueueItem, QueueStore, RecoveryLock, type RecoveryLockOptions, type SecretVaultOptions, SelectiveCompactor, type SelectiveCompactorOptions, type SessionStoreOptions, type SkillLoaderOptions, SpecDrivenDev, type SpecDrivenDevOptions, SpecParser, TaskFlow, type TaskFlowEventMap, type TaskFlowEventName, type TaskFlowExecutionContext, type TaskFlowOptions, type TaskFlowPhase, TaskGenerator, type TaskGeneratorOptions, type TaskStore, TaskTracker, type TaskTrackerOptions, type TaskTransition, ToolExecutor, allServers, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, context7Server, contextManagerTool, createContextManagerTool, createMessage, decryptConfigSecrets, encryptConfigSecrets, everArtServer, filesystemServer, githubServer, googleMapsServer, loadProjectModes, loadUserModes, makeAgentSubagentRunner, migratePlaintextSecrets, renderPrometheus, rewriteConfigEncrypted, runConfigMigrations, sentinelServer, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents };