@wrongstack/core 0.257.2 → 0.264.0

package/dist/{agent-bridge-BrxWHEOm.d.ts → agent-bridge-D8sa1vtv.d.ts}

@@ -1,4 +1,4 @@
-import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-US741uBH.js';
+import { B as BridgeTransport, a as BridgeMessage, A as AgentBridge, b as AgentBridgeConfig } from './agent-subagent-runner-c9DLkaas.js';
 
 /**
  * In-memory pub/sub transport for agent-to-agent messaging.

package/dist/{agent-subagent-runner-US741uBH.d.ts → agent-subagent-runner-c9DLkaas.d.ts}

@@ -1,12 +1,12 @@
-import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-CitPrI3a.js';
-import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-JG8XoudC.js';
-import { E as EventBus, a as EventName, L as Listener } from './brain-TjEEwSpw.js';
-import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-Tg7LXkoK.js';
+import { c as ToolCallPipelinePayload, d as ToolWrapper, E as ExtensionRegistry, S as SystemPromptContributor, e as ToolRegistry, P as ProviderRegistry, A as AgentPipelines, f as ToolExecutorLike, g as AgentInit, h as AgentInput, R as RunResult } from './index-CbLSI66_.js';
+import { C as Container, R as ReadonlyPipeline, a as Renderer } from './pipeline-CXCeMz8J.js';
+import { E as EventBus, a as EventName, L as Listener } from './brain-O1IdKPaK.js';
+import { R as RetryPolicy, E as ErrorHandler } from './retry-policy-CFhdtRzz.js';
 import { L as Logger } from './logger-B63L5bTg.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { P as PermissionPolicy } from './permission-CwBBpCoF.js';
-import { U as Usage, C as Context, J as JSONSchema, R as Request, b as Response, g as ContentBlock, n as TextBlock, T as Tool, P as Provider, o as RunOptions } from './context-CGdgA0q6.js';
-import { W as WireFamily, H as HookEvent, e as HookMatcher, I as InProcessHook, h as Config } from './config-DuAu23zm.js';
+import { P as PermissionPolicy } from './permission-4yvGmMRB.js';
+import { U as Usage, C as Context, J as JSONSchema, R as Request, b as Response, g as ContentBlock, n as TextBlock, T as Tool, P as Provider, o as RunOptions } from './context-BGSpZNSE.js';
+import { W as WireFamily, H as HookEvent, e as HookMatcher, I as InProcessHook, h as Config } from './config-Dz2F3H2K.js';
 
 /**
  * Single fleet-wide event with subagent attribution. Whatever a child
@@ -416,6 +416,13 @@ interface SubagentConfig {
      */
     idleTimeoutMs?: number | undefined;
     tools?: string[] | undefined;
+    /**
+     * Tools to explicitly disable for this subagent. These tools will be
+     * removed from the subagent's tool list even if they are normally available.
+     * Use this to enforce constraints that the baseline prompt alone cannot
+     * fully enforce (e.g., preventing delegation by removing the delegate tool).
+     */
+    disabledTools?: string[] | undefined;
     model?: string | undefined;
     priority?: number | undefined;
     /**
@@ -979,7 +986,9 @@ declare class Agent {
     readonly events: EventBus;
     readonly pipelines: AgentPipelines;
     readonly ctx: Context;
-    readonly maxIterations: number;
+    /** Max agent-loop iterations per run. Mutable so the TUI `/settings` picker
+     *  can apply a new value to the live session (takes effect next run). */
+    maxIterations: number;
     readonly executionStrategy: 'parallel' | 'sequential' | 'smart';
     readonly perIterationOutputCapBytes: number;
     private readonly plugins;
@@ -1013,6 +1022,19 @@ declare class Agent {
  * attributed correctly.
  */
 type AgentFactory = (config: SubagentConfig) => Promise<AgentFactoryResult>;
+/**
+ * Wrap a factory to automatically filter out disabled tools from subagent
+ * configurations. This provides mechanical enforcement of tool restrictions
+ * (e.g., preventing delegation) in addition to the baseline prompt constraint.
+ *
+ * The wrapper reads `config.disabledTools` and removes those tools from the
+ * agent's tool registry before returning.
+ *
+ * Usage:
+ *   const filteredFactory = withDisabledToolFiltering(originalFactory);
+ *   const runner = makeAgentSubagentRunner({ factory: filteredFactory });
+ */
+declare function withDisabledToolFiltering(factory: AgentFactory): AgentFactory;
 interface AgentFactoryResult {
     agent: Agent;
     /** Event bus the factory wired to this agent — required for budget hookup. */
@@ -1062,4 +1084,4 @@ interface AgentRunnerOptions {
  */
 declare function makeAgentSubagentRunner(opts: AgentRunnerOptions): SubagentRunner;
 
-export { type AgentBridge as A, type BridgeTransport as B, type CoordinatorStatus as C, type DoneCondition as D, type PluginPipelines as E, FleetBus as F, type ToolRegistryView as G, type ProviderRegistryView as H, type MCPRegistryView as I, type SlashCommandRegistryView as J, type SessionWriterView as K, type MetricsSinkView as L, type MultiAgentCoordinator as M, type PluginCapabilities as N, type Plugin as O, type PluginAPI as P, type CoordinatorEvents as Q, type PluginDependency as R, type SubagentConfig as S, type TaskSpec as T, type SubagentContext as U, type SubagentError as V, type SubagentErrorKind as W, type SubagentRunContext as X, type SubagentRunOutcome as Y, type TaskDelegation as Z, type ProviderFactory as _, type BridgeMessage as a, type AgentBridgeConfig as b, type MultiAgentConfig as c, type SubagentRunner as d, type SpawnResult as e, type TaskResult as f, Agent as g, type AgentFactory as h, type AgentFactoryResult as i, type AgentRunnerOptions as j, BudgetExceededError as k, type BudgetKind as l, type BudgetLimits as m, type BudgetNegotiationMode as n, type BudgetThresholdDecision as o, type BudgetThresholdHandler as p, BudgetThresholdSignal as q, type BudgetUsage as r, type FleetEvent as s, type FleetHandler as t, type FleetUsage as u, FleetUsageAggregator as v, SubagentBudget as w, type SubagentUsageSnapshot as x, makeAgentSubagentRunner as y, type SlashCommand as z };
+export { type ProviderFactory as $, type AgentBridge as A, type BridgeTransport as B, type CoordinatorStatus as C, type DoneCondition as D, type BudgetThresholdDecision as E, FleetBus as F, type BudgetThresholdHandler as G, BudgetThresholdSignal as H, type BudgetUsage as I, type CoordinatorEvents as J, type FleetEvent as K, type FleetHandler as L, type MultiAgentCoordinator as M, type PluginDependency as N, SubagentBudget as O, type PluginAPI as P, type SubagentContext as Q, type SubagentError as R, type SubagentConfig as S, type TaskSpec as T, type SubagentErrorKind as U, type SubagentRunContext as V, type SubagentRunOutcome as W, type SubagentUsageSnapshot as X, type TaskDelegation as Y, makeAgentSubagentRunner as Z, withDisabledToolFiltering as _, type BridgeMessage as a, type AgentBridgeConfig as b, type MultiAgentConfig as c, type SubagentRunner as d, type SpawnResult as e, type TaskResult as f, Agent as g, type AgentFactory as h, type FleetUsage as i, FleetUsageAggregator as j, type SlashCommand as k, type PluginPipelines as l, type ToolRegistryView as m, type ProviderRegistryView as n, type MCPRegistryView as o, type SlashCommandRegistryView as p, type SessionWriterView as q, type MetricsSinkView as r, type PluginCapabilities as s, type Plugin as t, type AgentFactoryResult as u, type AgentRunnerOptions as v, BudgetExceededError as w, type BudgetKind as x, type BudgetLimits as y, type BudgetNegotiationMode as z };

package/dist/{brain-TjEEwSpw.d.ts → brain-O1IdKPaK.d.ts}

@@ -1,4 +1,4 @@
-import { U as Usage, C as Context, j as ToolProgressEvent, T as Tool } from './context-CGdgA0q6.js';
+import { U as Usage, C as Context, j as ToolProgressEvent, T as Tool } from './context-BGSpZNSE.js';
 
 type MemoryScope = 'project-agents' | 'project-memory' | 'user-memory';
 type MemoryType = 'fact' | 'decision' | 'convention' | 'preference' | 'reference' | 'anti_pattern';
@@ -81,6 +81,12 @@ interface MemoryStore {
      * Returns only entries that meet a relevance threshold.
      */
     scoreRelevant?(ctx: MemoryRelevanceContext, scope?: MemoryScope, limit?: number): Promise<ScoredEntry[]>;
+    /**
+     * Attach a trace ID to this store so that all subsequent `storage.*`
+     * events include it for observability correlation. Mutates the store
+     * in place and returns the same instance (convenience chaining).
+     */
+    withTraceId(traceId: string): MemoryStore;
 }
 
 /**
@@ -744,6 +750,57 @@ interface EventMap {
     'memory.forgotten': MemoryForgottenPayload;
     'memory.cleared': MemoryClearedPayload;
     'memory.consolidated': MemoryConsolidatedPayload;
+    /**
+     * Fired when a store completes a read operation. Carries the session ID
+     * and file path so dashboards can correlate storage I/O with agent
+     * iterations via the session ID.
+     */
+    'storage.read': {
+        sessionId: string;
+        /** Which store was read. */
+        store: 'session' | 'goal' | 'plan' | 'project' | 'todos' | 'queue' | 'tasks' | 'memory' | 'annotations' | 'audit' | 'replay' | 'config';
+        filePath: string;
+        /** Session store: load|list|summary|index_read. Goal store: load. Plan store: load. Memory store: readAll. Annotations: list. Audit: verify|load. Replay: load|lookup. Config: read_json|load_sync. */
+        operation: string;
+        outcome: 'success' | 'failure';
+        durationMs: number;
+        error?: string;
+        traceId?: string;
+    };
+    /**
+     * Fired when a store completes a write operation. Covers both individual
+     * event appends and batch flushes — check `eventCount` to distinguish.
+     */
+    'storage.write': {
+        sessionId: string;
+        store: 'session' | 'goal' | 'plan' | 'project' | 'todos' | 'queue' | 'tasks' | 'memory' | 'annotations' | 'audit' | 'replay' | 'config';
+        filePath: string;
+        /** Session store: create|resume|append|flush|close|index_append|compact|checkpoint.
+         * Goal store: save|update|delete. Plan store: save. Project manifest: manifest_write.
+         * Todos: save. Queue: write|clear. Tasks: save. Memory: remember|forget|clear|consolidate.
+         * Annotations: add|resolve|evict. Audit: record. Replay: record|compact. Config: persist_sync. */
+        operation: string;
+        outcome: 'success' | 'failure';
+        durationMs: number;
+        eventCount?: number;
+        error?: string;
+        traceId?: string;
+    };
+    /**
+     * Fired when a store operation fails after best-effort retries.
+     * Use this for alert-worthy persistent failures (disk full, permissions).
+     */
+    'storage.error': {
+        sessionId: string;
+        store: 'session' | 'goal' | 'plan' | 'project' | 'todos' | 'queue' | 'tasks' | 'memory' | 'annotations' | 'audit' | 'replay' | 'config';
+        filePath: string;
+        operation: string;
+        outcome?: 'failure';
+        error: string;
+        recoverable: boolean;
+        durationMs?: number;
+        traceId?: string;
+    };
     error: {
         err: Error;
         phase: string;
@@ -1000,4 +1057,4 @@ declare class DefaultBrainArbiter implements BrainArbiter {
 }
 declare function formatHumanPrompt(request: BrainDecisionRequest): string;
 
-export { type BrainArbiter as B, DefaultBrainArbiter as D, EventBus as E, HumanEscalatingBrainArbiter as H, type Listener as L, type MemoryScope as M, ObservableBrainArbiter as O, type ScoredEntry as S, type EventName as a, type BrainDecision as b, type BrainDecisionOption as c, BrainDecisionQueue as d, type BrainDecisionRequest as e, type BrainDecisionSource as f, type BrainFallback as g, type BrainRisk as h, type DefaultBrainArbiterOptions as i, formatHumanPrompt as j, type MemoryEntry as k, type MemoryStore as l, type MemoryRelevanceContext as m, type EventLogger as n, type EventMap as o, MEMORY_TYPE_LABELS as p, type MemoryClearedPayload as q, type MemoryConsolidatedPayload as r, type MemoryForgottenPayload as s, type MemoryPriority as t, type MemoryRememberedPayload as u, type MemoryType as v, ScopedEventBus as w };
+export { type BrainArbiter as B, DefaultBrainArbiter as D, EventBus as E, HumanEscalatingBrainArbiter as H, type Listener as L, type MemoryScope as M, ObservableBrainArbiter as O, type ScoredEntry as S, type EventName as a, type MemoryEntry as b, type MemoryStore as c, type MemoryRelevanceContext as d, type BrainDecision as e, type BrainDecisionOption as f, BrainDecisionQueue as g, type BrainDecisionRequest as h, type BrainDecisionSource as i, type BrainFallback as j, type BrainRisk as k, type DefaultBrainArbiterOptions as l, type EventLogger as m, type EventMap as n, MEMORY_TYPE_LABELS as o, type MemoryClearedPayload as p, type MemoryConsolidatedPayload as q, type MemoryForgottenPayload as r, type MemoryPriority as s, type MemoryRememberedPayload as t, type MemoryType as u, ScopedEventBus as v, formatHumanPrompt as w };

package/dist/{compactor-C5sT4U7I.d.ts → compactor-BBy0rCtB.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context } from './context-CGdgA0q6.js';
+import { C as Context } from './context-BGSpZNSE.js';
 
 interface CompactRepairReport {
     removedToolUses: string[];

package/dist/{config-DuAu23zm.d.ts → config-Dz2F3H2K.d.ts}

@@ -1,4 +1,4 @@
-import { k as Capabilities, f as Permission } from './context-CGdgA0q6.js';
+import { k as Capabilities, f as Permission } from './context-BGSpZNSE.js';
 
 type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
 type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
@@ -382,6 +382,12 @@ interface FeaturesConfig {
      * `features.tokenSavingMode: true` in config.
      */
     tokenSavingMode?: boolean | undefined;
+    /**
+     * Allow tools to read/write paths outside the project root directory.
+     * When true (default), tools can access any path on the filesystem.
+     * When false, tools are restricted to the project root directory.
+     */
+    allowOutsideProjectRoot?: boolean | undefined;
 }
 interface AutonomyConfig {
     /** ms to wait before auto-proceeding in 'auto' mode. Default: 45000. */

package/dist/{context-CGdgA0q6.d.ts → context-BGSpZNSE.d.ts}

@@ -1012,6 +1012,14 @@ interface SessionStore {
 }
 interface SessionWriter {
     readonly id: string;
+    /**
+     * Session-level trace ID for correlating storage events with agent
+     * iterations in observability pipelines. Generated once at Context
+     * creation time and stored here so storage operations can include it
+     * in `storage.*` events even though the store has no direct handle
+     * on the Context.
+     */
+    traceId?: string | undefined;
     /**
      * Absolute path to the JSONL file this writer appends to, when one
      * exists. In-memory writers (tests, ephemeral sessions) leave it
@@ -1283,6 +1291,20 @@ interface ContextInit {
     agentId?: string | undefined;
     /** Human-readable agent name. */
     agentName?: string | undefined;
+    /**
+     * Session-level trace ID for correlating storage events with agent
+     * iterations in observability pipelines. Stored on the SessionWriter
+     * so that storage operations can emit it in `storage.*` events.
+     * When set, the Context constructor propagates it to
+     * `session.traceId` automatically.
+     */
+    traceId?: string | undefined;
+    /**
+     * Allow tools to read/write paths outside the project root directory.
+     * When true, tools can access any path on the filesystem.
+     * When false or undefined, tools are restricted to the project root.
+     */
+    allowOutsideProjectRoot?: boolean | undefined;
 }
 /**
  * L1-A: `Context` is the live agent-run object. Its read-only environment
@@ -1322,6 +1344,17 @@ declare class Context implements RunEnv {
     agentId: string;
     /** Human-readable agent name. */
     agentName: string;
+    /**
+     * Session-level trace ID for correlating storage events with agent
+     * iterations. Stored here and also propagated to `session.traceId`
+     * so storage operations can include it in `storage.*` events.
+     */
+    traceId: string | undefined;
+    /**
+     * When true, tools can access any path on the filesystem.
+     * When false or undefined, tools are restricted to the project root.
+     */
+    allowOutsideProjectRoot: boolean;
     /** Callbacks fired when `setWorkingDir()` changes the working directory. */
     private _onWorkingDirChanged;
     /**