@wrongstack/core 0.1.4 → 0.1.7

package/README.md

@@ -0,0 +1,155 @@
+# @wrongstack/core
+
+Kernel, types, and default implementations that drive the WrongStack CLI agent.
+
+This package has no `bin`. It's a library you'd depend on if you were building a plugin, embedding the agent in another tool, or replacing one of the default implementations (a custom session store, a stricter permission policy, your own retry strategy).
+
+If you're just using WrongStack from the terminal, install [`wrongstack`](../../README.md) instead.
+
+## Install
+
+```bash
+pnpm add @wrongstack/core
+```
+
+Requires **Node.js ≥ 22.0.0**.
+
+## What's in here
+
+```
+src/
+  core/         — Agent, Context, ConversationState, ProviderRunner, InputBuilder
+  defaults/     — Production-ready implementations (session store, secret vault, …)
+  kernel/       — Container, TOKENS, EventBus, ToolRegistry, ProviderRegistry
+  plugin/       — Plugin loader, PluginAPI, manifest validation
+  registry/     — SlashCommandRegistry, ToolRegistry, ProviderRegistry
+  types/        — Public type surface (Tool, Provider, SessionStore, …)
+  utils/        — wstack-paths, safe-json, deterministic-stringify, lru-cache
+```
+
+## Quick example
+
+Run an agent loop with the Anthropic provider and a single tool:
+
+```ts
+import {
+  Agent,
+  Container,
+  Context,
+  DefaultEventBus,
+  DefaultLogger,
+  DefaultPermissionPolicy,
+  DefaultSessionStore,
+  DefaultSystemPromptBuilder,
+  DefaultTokenCounter,
+  ToolRegistry,
+  TOKENS,
+} from '@wrongstack/core';
+import { AnthropicProvider } from '@wrongstack/providers';
+import { readTool, writeTool, bashTool } from '@wrongstack/tools';
+
+const container = new Container();
+container.bind(TOKENS.EventBus, () => new DefaultEventBus());
+container.bind(TOKENS.Logger, () => new DefaultLogger());
+container.bind(TOKENS.PermissionPolicy, () => new DefaultPermissionPolicy());
+
+const provider = new AnthropicProvider({ apiKey: process.env.ANTHROPIC_API_KEY! });
+const tools = new ToolRegistry([readTool, writeTool, bashTool]);
+
+const ctx = new Context({
+  cwd: process.cwd(),
+  projectRoot: process.cwd(),
+  provider,
+  model: 'claude-sonnet-4-6',
+  tokenCounter: new DefaultTokenCounter({ providerId: 'anthropic' }),
+});
+
+const agent = new Agent({
+  container,
+  ctx,
+  tools,
+  systemPromptBuilder: new DefaultSystemPromptBuilder(),
+});
+
+const result = await agent.run({
+  input: { text: 'list the files in src/' },
+});
+
+console.log(result.assistantText);
+```
+
+## Replacing a default
+
+Every concrete class under `defaults/` implements an interface in `types/`. The container resolves by token, so swapping is a one-line change:
+
+```ts
+import { TOKENS } from '@wrongstack/core';
+
+class StrictPolicy implements PermissionPolicy {
+  async check(tool, input, ctx) {
+    if (tool.name === 'bash') return { decision: 'deny', reason: 'no shell' };
+    return { decision: 'allow' };
+  }
+}
+
+container.bind(TOKENS.PermissionPolicy, () => new StrictPolicy());
+```
+
+The same pattern works for `SessionStore`, `MemoryStore`, `SystemPromptBuilder`, `RetryPolicy`, `ErrorHandler`, `TokenCounter`, `SecretVault`, `SecretScrubber`, `Compactor`, `ConfigStore`, `ModelsRegistry`, `ModeStore`.
+
+## Building a tool
+
+```ts
+import type { Tool } from '@wrongstack/core';
+
+export const echoTool: Tool<{ text: string }, string> = {
+  name: 'echo',
+  description: 'Echo a string back.',
+  inputSchema: {
+    type: 'object',
+    properties: { text: { type: 'string' } },
+    required: ['text'],
+  },
+  permission: 'auto',
+  mutating: false,
+  async execute(input) {
+    return input.text;
+  },
+};
+```
+
+See [docs/tool-author-guide.md](../../docs/tool-author-guide.md) for the full contract (`subjectKey`, `executeStream`, `cleanup`, abort handling, output bounds).
+
+## Building a provider
+
+Most providers can ride the declarative wire-format adapter — see [`@wrongstack/providers`](../providers). For direct implementation, see [docs/provider-author-guide.md](../../docs/provider-author-guide.md).
+
+## Building a plugin
+
+```ts
+import type { Plugin } from '@wrongstack/core';
+
+export default {
+  name: 'my-plugin',
+  version: '1.0.0',
+  capabilities: { tools: true, slashCommands: true },
+  async setup(api) {
+    api.registerTool(myTool);
+    api.registerSlashCommand({ name: 'my-cmd', description: '…', run: async () => {} });
+  },
+} satisfies Plugin;
+```
+
+See [docs/plugin-author-guide.md](../../docs/plugin-author-guide.md).
+
+## Path layout
+
+All developer-level state lives under `~/.wrongstack/`. Per-project state is keyed by `sha256(absoluteProjectRoot).slice(0,12)` under `~/.wrongstack/projects/<hash>/`. The only thing inside the project tree itself is the optional, committable `.wrongstack/AGENTS.md` and `.wrongstack/skills/`. See `WstackPaths` in [utils/wstack-paths.ts](src/utils/wstack-paths.ts) for the full layout.
+
+## Security model
+
+See [SECURITY.md](../../SECURITY.md) at the repo root for the threat model, adversary trust assumptions, and the catalog of controls (SSRF defenses, child-env sanitization, secret vault, prompt-injection assumptions for LLM-generated tool inputs).
+
+## License
+
+MIT

package/dist/defaults/index.d.ts

@@ -1,8 +1,8 @@
-import { g as Logger, f as LogLevel, P as PathResolver, n as ModelsRegistry, B as EventBus, u as ResolvedModel, j as MemoryStore, i as MemoryScope, S as SecretScrubber, p as PermissionPolicy, I as InputReader, o as PermissionDecision, w as RetryPolicy, E as ErrorHandler, a as Compactor, x as SkillLoader, y as SkillManifest, b as Config, c as ConfigLoader, d as ConfigStore, C as CompactReport, U as MiddlewareHandler, l as ModelsDevPayload, v as ResolvedProvider, W as WireFamily, M as MCPServerConfig } from '../secret-scrubber-qU3AwEiI.js';
-import { u as TokenCounter, U as Usage, C as CacheStats, p as SessionStore, o as SessionMetadata, r as SessionWriter, l as ResumedSession, S as SessionData, q as SessionSummary, c as ContentBlock, v as Tool, a0 as Context, i as ProviderError, k as Response, h as Provider, M as Message, F as ToolUseBlock, B as ToolResultBlock, n as SessionEvent } from '../provider-DovtyuM8.js';
-import { h as AttachmentStore, A as AddAttachmentInput, g as AttachmentRef, d as Attachment, S as SecretVault, F as ModeStore, y as ModeConfig, x as Mode, I as MultiAgentCoordinator, G as MultiAgentConfig, ae as SubagentRunner, aa as SubagentConfig, a0 as SpawnResult, aq as TaskSpec, B as BridgeMessage, a as AgentBridge, l as CoordinatorStatus, ao as TaskResult, aH as Agent, aJ as AgentInput, j as BridgeTransport, b as AgentBridgeConfig, p as DoneCondition, aR as RunResult, a9 as Specification, a1 as SpecAnalysis, a8 as SpecValidationResult, ak as TaskGraph, al as TaskNode, aj as TaskFilter, ap as TaskSort, an as TaskProgress, as as TaskType, am as TaskPriority, ay as ToolExecutorOptions, az as ToolExecutorStrategy, at as ToolBatchResult, V as SessionReader, o as DefaultSessionReaderOptions, U as SessionQuery, Y as SessionSummaryLite, X as SessionSearchQuery, W as SessionSearchHit, T as SessionExportOptions, v as MetricsSink, t as MetricLabels, w as MetricsSnapshot, r as HealthRegistry, H as HealthCheck, c as AggregateHealth, aB as Tracer, $ as Span } from '../session-reader-DR4u3bu9.js';
-export { aL as BudgetExceededError, aM as BudgetKind, aN as BudgetLimits, aO as BudgetUsage, aS as SubagentBudget } from '../session-reader-DR4u3bu9.js';
-import { a as WstackPaths } from '../wstack-paths-D24ynAz1.js';
+import { g as Logger, f as LogLevel, P as PathResolver, r as ModelsRegistry, O as EventBus, z as ResolvedModel, j as MemoryStore, i as MemoryScope, S as SecretScrubber, t as PermissionPolicy, I as InputReader, s as PermissionDecision, B as RetryPolicy, E as ErrorHandler, a as Compactor, R as RecoveryDecision, H as SkillLoader, J as SkillManifest, G as SkillEntry, b as Config, c as ConfigLoader, d as ConfigStore, C as CompactReport, a0 as MiddlewareHandler, p as ModelsDevPayload, A as ResolvedProvider, W as WireFamily, n as ModeStore, l as ModeConfig, k as Mode, M as MCPServerConfig } from '../mode-Pjt5vMS6.js';
+import { u as TokenCounter, U as Usage, C as CacheStats, p as SessionStore, o as SessionMetadata, r as SessionWriter, l as ResumedSession, S as SessionData, q as SessionSummary, c as ContentBlock, v as Tool, a0 as Context, i as ProviderError, h as Provider, M as Message, F as ToolUseBlock, B as ToolResultBlock, n as SessionEvent } from '../provider-txgB0Oq9.js';
+import { h as AttachmentStore, A as AddAttachmentInput, g as AttachmentRef, d as Attachment, S as SecretVault, x as MultiAgentCoordinator, w as MultiAgentConfig, a9 as SubagentRunner, a5 as SubagentConfig, X as SpawnResult, al as TaskSpec, B as BridgeMessage, a as AgentBridge, l as CoordinatorStatus, aj as TaskResult, aC as Agent, aE as AgentInput, j as BridgeTransport, b as AgentBridgeConfig, o as DoneCondition, aM as RunResult, a4 as Specification, Y as SpecAnalysis, a3 as SpecValidationResult, af as TaskGraph, ag as TaskNode, ae as TaskFilter, ak as TaskSort, ai as TaskProgress, an as TaskType, ah as TaskPriority, at as ToolExecutorOptions, au as ToolExecutorStrategy, ao as ToolBatchResult, O as SessionReader, n as DefaultSessionReaderOptions, N as SessionQuery, T as SessionSummaryLite, R as SessionSearchQuery, Q as SessionSearchHit, L as SessionExportOptions, u as MetricsSink, s as MetricLabels, v as MetricsSnapshot, q as HealthRegistry, H as HealthCheck, c as AggregateHealth, aw as Tracer, W as Span } from '../session-reader-7AutWHut.js';
+export { aG as BudgetExceededError, aH as BudgetKind, aI as BudgetLimits, aJ as BudgetUsage, aN as SubagentBudget } from '../session-reader-7AutWHut.js';
+import { a as WstackPaths } from '../wstack-paths-BGu2INTm.js';
 import { EventEmitter } from 'node:events';
 
 interface DefaultLoggerOptions {
@@ -165,17 +165,30 @@ interface MemoryStoreOptions {
  */
 declare class DefaultMemoryStore implements MemoryStore {
     private readonly files;
+    /**
+     * Per-scope serialization queue. `remember` / `forget` / `consolidate` /
+     * `clear` are read-modify-write against a single file; without a lock,
+     * two concurrent calls on the same scope can read the same baseline and
+     * the later write silently drops the earlier entry. We chain each
+     * mutation onto the prior promise for the same scope so they run in
+     * issue order. Different scopes still proceed in parallel.
+     */
+    private readonly writeChain;
     constructor(opts: MemoryStoreOptions);
+    private runSerialized;
     readAll(): Promise<string>;
     read(scope: MemoryScope): Promise<string>;
     remember(text: string, scope?: MemoryScope): Promise<void>;
     forget(query: string, scope?: MemoryScope): Promise<number>;
+    private forgetUnsafe;
     consolidate(scope: MemoryScope): Promise<void>;
+    private consolidateUnsafe;
     clear(scope?: MemoryScope): Promise<void>;
 }
 
 declare class DefaultSecretScrubber implements SecretScrubber {
     scrub(text: string): string;
+    private scrubOne;
     scrubObject<T>(obj: T): T;
 }
 
@@ -247,6 +260,7 @@ declare class DefaultPermissionPolicy implements PermissionPolicy {
 }
 
 declare class DefaultRetryPolicy implements RetryPolicy {
+    private static readonly NETWORK_ERR_RE;
     shouldRetry(err: Error | ProviderError, attempt: number): boolean;
     maxAttempts(err: Error | ProviderError): number;
     delayMs(attempt: number): number;
@@ -254,15 +268,15 @@ declare class DefaultRetryPolicy implements RetryPolicy {
 
 /**
  * Tiered error recovery strategies.
- * Each strategy is attempted in order until one succeeds.
+ * Each strategy is attempted in order until one returns a decision.
  */
 interface RecoveryStrategy {
     /** Human-readable label for logs. */
     label: string;
     /** Optional compactor for context_overflow recovery. */
     compactor?: Compactor;
-    /** Returns a substitute Response, or null to fall through to the next strategy. */
-    attempt: (err: unknown, ctx: Context) => Promise<Response | null>;
+    /** Returns an explicit recovery decision, or null to fall through. */
+    attempt: (err: unknown, ctx: Context) => Promise<RecoveryDecision | null>;
 }
 declare class DefaultErrorHandler implements ErrorHandler {
     private readonly strategies;
@@ -271,7 +285,7 @@ declare class DefaultErrorHandler implements ErrorHandler {
         kind: 'rate_limit' | 'overloaded' | 'server' | 'client' | 'network' | 'abort' | 'context_overflow' | 'unknown';
         retryable: boolean;
     };
-    recover(err: unknown, ctx: Context): Promise<Response | null>;
+    recover(err: unknown, ctx: Context): Promise<RecoveryDecision | null>;
 }
 
 interface SkillLoaderOptions {
@@ -292,6 +306,7 @@ declare class DefaultSkillLoader implements SkillLoader {
     list(): Promise<SkillManifest[]>;
     find(name: string): Promise<SkillManifest | undefined>;
     manifestText(): Promise<string>;
+    listEntries(): Promise<SkillEntry[]>;
     readBody(name: string): Promise<string>;
 }
 
@@ -674,10 +689,16 @@ declare class LLMSelector implements MessageSelector {
     private parseSelectorOutput;
 }
 
+type CompactionFailureMode = 'throw' | 'throw_on_hard' | 'continue';
+interface AutoCompactionOptions {
+    aggressiveOn?: 'hard' | 'soft' | 'warn';
+    events?: EventBus;
+    failureMode?: CompactionFailureMode;
+}
 /**
- * Pipeline middleware that monitors context token load and
- * automatically triggers compaction when the warn/soft/hard
- * thresholds are crossed. Runs before the next agent iteration.
+ * Pipeline middleware that monitors context token load and automatically
+ * triggers compaction when the warn/soft/hard thresholds are crossed.
+ * Runs before the next agent iteration.
  */
 declare class AutoCompactionMiddleware {
     readonly name = "AutoCompaction";
@@ -688,18 +709,24 @@ declare class AutoCompactionMiddleware {
     private readonly maxContext;
     private readonly estimator;
     private readonly aggressiveOn;
+    private readonly events?;
+    private readonly failureMode;
     /**
-     * @param compactor        Compactor to use for compaction
-     * @param maxContext       Provider's max context window in tokens
-     * @param estimator        Token estimation function (ctx → token count)
-     * @param thresholds      Threshold fractions (0-1) of maxContext
-     * @param aggressiveOn    Which threshold triggers aggressive (full LLM summarization)
+     * @param compactor        Compactor to use for compaction.
+     * @param maxContext       Provider's max context window in tokens.
+     * @param estimator        Token estimation function.
+     * @param thresholds       Threshold fractions (0-1) of maxContext.
+     * @param opts             Optional behavior. By default, failures at the
+     *                         hard threshold throw AGENT_CONTEXT_OVERFLOW so
+     *                         the agent does not continue into a likely
+     *                         provider context overflow. Warn/soft failures
+     *                         still emit compaction.failed and continue.
      */
     constructor(compactor: Compactor, maxContext: number, estimator: (ctx: Context) => number, thresholds: {
         warn: number;
         soft: number;
         hard: number;
-    }, aggressiveOn?: 'hard' | 'soft' | 'warn');
+    }, optsOrAggressiveOn?: AutoCompactionOptions | 'hard' | 'soft' | 'warn', events?: EventBus);
     handler(): MiddlewareHandler<Context>;
     private compact;
 }
@@ -883,6 +910,10 @@ declare class InMemoryAgentBridge implements AgentBridge {
 }
 declare function createMessage<T = unknown>(type: BridgeMessage['type'], from: string, payload: T, to?: string): BridgeMessage<T>;
 
+type AutonomousResult = RunResult & {
+    toolCalls: number;
+    reason?: string;
+};
 interface DoneCheckResult {
     done: boolean;
     reason?: string;
@@ -891,6 +922,7 @@ interface DoneCheckResult {
 }
 declare class DoneConditionChecker {
     private readonly condition;
+    private readonly compiledRegex;
     constructor(condition: DoneCondition);
     check(state: {
         iterations: number;
@@ -907,10 +939,7 @@ interface AutonomousRunnerOptions {
         iteration: number;
         toolCalls: number;
     }) => void;
-    onDone?: (result: RunResult & {
-        toolCalls: number;
-        reason?: string;
-    }) => void;
+    onDone?: (result: AutonomousResult) => void;
 }
 declare class AutonomousRunner {
     private readonly opts;
@@ -920,19 +949,11 @@ declare class AutonomousRunner {
     private stopped;
     private readonly doneChecker;
     constructor(opts: AutonomousRunnerOptions);
-    run(): Promise<RunResult & {
-        toolCalls: number;
-        reason?: string;
-    }>;
+    run(): Promise<AutonomousResult>;
     stop(): void;
 }
 
-interface SpecParserOptions {
-    strict?: boolean;
-}
 declare class SpecParser {
-    private readonly opts;
-    constructor(opts?: SpecParserOptions);
     parse(content: string): Specification;
     private extractTitle;
     private extractVersion;
@@ -957,6 +978,13 @@ interface TaskStore {
 }
 interface TaskTrackerOptions {
     store: TaskStore;
+    /**
+     * Called when an in-the-background persistence (`saveGraph`) rejects.
+     * The synchronous TaskTracker methods (addNode/addEdge/updateNodeStatus)
+     * fire-and-forget their writes; without this, a failing store silently
+     * loses graph mutations. Defaults to a console.warn.
+     */
+    onPersistError?: (err: unknown) => void;
 }
 interface TaskTransition {
     from: TaskNode['status'];
@@ -984,6 +1012,14 @@ declare class TaskTracker {
     getTransitions(taskId?: string): TaskTransition[];
     private unblockDependents;
     private checkAndBlockIfNeeded;
+    /**
+     * Fire-and-forget persistence with attached error handler.
+     * Synchronous mutators (addNode/addEdge/updateNodeStatus) use this to
+     * avoid forcing an async cascade through every caller; if the store
+     * rejects, the configured `onPersistError` is invoked so failures are
+     * surfaced instead of swallowed by an unhandled promise rejection.
+     */
+    private persist;
 }
 
 interface TaskGeneratorOptions {
@@ -1006,7 +1042,6 @@ declare class TaskGenerator {
     private createTaskFromEndpoint;
     private buildDescription;
     private mapRequirementType;
-    private mapPriority;
     private estimateHours;
     private estimateForEndpoint;
     generateSubtasks(parentTaskId: string, spec: Specification): Promise<void>;
@@ -1679,4 +1714,4 @@ declare const sentinelServer: () => MCPServerConfig;
 /** Everything bundled — full set of built-in servers. Useful for `wstack mcp add --all`. */
 declare const allServers: () => Record<string, MCPServerConfig>;
 
-export { type AbandonedSession, type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, type AttachmentStoreOptions, AutoCompactionMiddleware, AutonomousRunner, type AutonomousRunnerOptions, type CompactorOptions, type ConfigLoaderOptions, type ConfigMigration, ConfigMigrationError, type ConfigSource, type ContextManagerAction, type ContextManagerInput, type ContextManagerResult, type ContextManagerToolOptions, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, type DefaultLoggerOptions, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, type DefaultModelsRegistryOptions, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, DefaultTokenCounter, type DoneCheckResult, DoneConditionChecker, type GeneratedTask, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, type IntelligentCompactorOptions, LLMSelector, type LLMSelectorOptions, type MemoryStoreOptions, type MetricsServerHandle, type MetricsServerOptions, type MigrationContext, type MigrationResult, type ModeLoaderOptions, type MultiAgentCoordinatorOptions, NoopMetricsSink, NoopTracer, OTelTracer, type OtlpMetricsExporterHandle, type OtlpMetricsExporterOptions, type OtlpTraceExporterHandle, type OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, type PermissionPolicyOptions, type PersistedQueueItem, QueueStore, RecoveryLock, type RecoveryLockOptions, type SecretVaultOptions, SelectiveCompactor, type SelectiveCompactorOptions, type SessionStoreOptions, type SkillLoaderOptions, SpecDrivenDev, type SpecDrivenDevOptions, SpecParser, type SpecParserOptions, TaskFlow, type TaskFlowEventMap, type TaskFlowEventName, type TaskFlowExecutionContext, type TaskFlowOptions, type TaskFlowPhase, TaskGenerator, type TaskGeneratorOptions, type TaskStore, TaskTracker, type TaskTrackerOptions, type TaskTransition, ToolExecutor, allServers, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, context7Server, contextManagerTool, createContextManagerTool, createMessage, decryptConfigSecrets, encryptConfigSecrets, everArtServer, filesystemServer, githubServer, googleMapsServer, loadProjectModes, loadUserModes, makeAgentSubagentRunner, migratePlaintextSecrets, renderPrometheus, rewriteConfigEncrypted, runConfigMigrations, sentinelServer, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents };
+export { type AbandonedSession, type AgentFactory, type AgentFactoryResult, type AgentRunnerOptions, type AttachmentStoreOptions, AutoCompactionMiddleware, AutonomousRunner, type AutonomousRunnerOptions, type CompactorOptions, type ConfigLoaderOptions, type ConfigMigration, ConfigMigrationError, type ConfigSource, type ContextManagerAction, type ContextManagerInput, type ContextManagerResult, type ContextManagerToolOptions, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultErrorHandler, DefaultHealthRegistry, DefaultLogger, type DefaultLoggerOptions, DefaultMemoryStore, DefaultModeStore, DefaultModelsRegistry, type DefaultModelsRegistryOptions, DefaultMultiAgentCoordinator, DefaultPathResolver, DefaultPermissionPolicy, DefaultRetryPolicy, DefaultSecretScrubber, DefaultSecretVault, DefaultSessionReader, DefaultSessionStore, DefaultSkillLoader, DefaultTaskStore, DefaultTokenCounter, type DoneCheckResult, DoneConditionChecker, type GeneratedTask, HybridCompactor, InMemoryAgentBridge, InMemoryBridgeTransport, InMemoryMetricsSink, IntelligentCompactor, type IntelligentCompactorOptions, LLMSelector, type LLMSelectorOptions, type MemoryStoreOptions, type MetricsServerHandle, type MetricsServerOptions, type MigrationContext, type MigrationResult, type ModeLoaderOptions, type MultiAgentCoordinatorOptions, NoopMetricsSink, NoopTracer, OTelTracer, type OtlpMetricsExporterHandle, type OtlpMetricsExporterOptions, type OtlpTraceExporterHandle, type OtlpTraceExporterOptions, PROMETHEUS_CONTENT_TYPE, type PermissionPolicyOptions, type PersistedQueueItem, QueueStore, RecoveryLock, type RecoveryLockOptions, type SecretVaultOptions, SelectiveCompactor, type SelectiveCompactorOptions, type SessionStoreOptions, type SkillLoaderOptions, SpecDrivenDev, type SpecDrivenDevOptions, SpecParser, TaskFlow, type TaskFlowEventMap, type TaskFlowEventName, type TaskFlowExecutionContext, type TaskFlowOptions, type TaskFlowPhase, TaskGenerator, type TaskGeneratorOptions, type TaskStore, TaskTracker, type TaskTrackerOptions, type TaskTransition, ToolExecutor, allServers, awsServer, blockServer, braveSearchServer, buildOtlpMetricsRequest, buildOtlpTracesRequest, classifyFamily, context7Server, contextManagerTool, createContextManagerTool, createMessage, decryptConfigSecrets, encryptConfigSecrets, everArtServer, filesystemServer, githubServer, googleMapsServer, loadProjectModes, loadUserModes, makeAgentSubagentRunner, migratePlaintextSecrets, renderPrometheus, rewriteConfigEncrypted, runConfigMigrations, sentinelServer, slackServer, startMetricsServer, startOtlpMetricsExporter, startOtlpTraceExporter, wireMetricsToEvents };