@wrongstack/core 0.267.0 → 0.268.0

package/dist/execution/index.d.ts

@@ -1,23 +1,24 @@
-export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, E as EternalAutonomyEngine, c as EternalAutonomyOptions, d as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, e as ParallelEternalEngine, f as ParallelEternalOptions, g as ParallelIterationStage, T as ToolExecutor } from '../parallel-eternal-engine-DdNnw9BQ.js';
-export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, l as ContextWindowBudgetSnapshot, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from '../goal-preamble-SulMTowG.js';
-import { P as Provider } from '../context-dT5Ueund.js';
-import { e as BrainDecision, h as BrainDecisionRequest, B as BrainArbiter } from '../brain-Cdg77tVN.js';
-import '../retry-policy-BilV1ujH.js';
-import '../compactor-iMZ84CXq.js';
-import '../config-Du3pYYln.js';
-import '../index-Bms0m4oy.js';
+export { C as CompactorOptions, a as DefaultErrorHandler, b as DefaultRetryPolicy, E as EternalAutonomyEngine, c as EternalAutonomyOptions, d as EternalEngineState, H as HybridCompactor, I as IterationStage, P as ParallelEngineState, e as ParallelEternalEngine, f as ParallelEternalOptions, g as ParallelIterationStage, T as ToolExecutor } from '../parallel-eternal-engine-Ci71gYu_.js';
+export { A as AutoCompactionMiddleware, a as AutonomousRunner, b as AutonomousRunnerOptions, c as AutonomyPromptContributorOptions, C as CompactorStrategy, l as ContextWindowBudgetSnapshot, D as DefaultSkillLoader, d as DoneCheckResult, e as DoneConditionChecker, I as IntelligentCompactor, f as IntelligentCompactorOptions, S as SelectiveCompactor, g as SelectiveCompactorOptions, h as SkillLoaderOptions, i as StrategyCompactorOptions, j as buildGoalPreamble, k as createStrategyCompactor, m as makeAutonomyPromptContributor } from '../goal-preamble-CrYjmdw4.js';
+import { P as Provider, l as ReasoningConfig, R as Request } from '../context-C0U8B9NF.js';
+import { e as BrainDecision, h as BrainDecisionRequest, B as BrainArbiter } from '../brain-69wzMKp1.js';
+import { B as ModelRuntimeConfig } from '../config-VKfOZ-6X.js';
+import '../retry-policy-C3s_lvdK.js';
+import '../compactor-CBQAJoDc.js';
+import '../index-gCv830d7.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-BfD2k1rT.js';
+import '../pipeline-BDNvENyV.js';
+import '../mailbox-types-Ct2hJq0P.js';
 import '../observability-D-HZN_mF.js';
-import '../permission-B75JAi3-.js';
-import '../agent-subagent-runner-CzPGP3jA.js';
-import '../goal-store-CABDwdFE.js';
-import '../multi-agent-coordinator-B8R43uPz.js';
+import '../permission-Bd-57Lbl.js';
+import '../agent-subagent-runner-Bvtf1o9K.js';
+import '../goal-store-Y_zdLZ3q.js';
+import '../multi-agent-coordinator-BACjsmkC.js';
 import 'node:events';
 import '../skill-DGIXCtdv.js';
 import '../wstack-paths-hOpNLmvf.js';
-import '../selector-Bc7eWtT3.js';
-import '../session-event-bridge-D-araDEz.js';
+import '../selector-47LBnBVk.js';
+import '../session-event-bridge-Cw7oqmW2.js';
 
 /**
  * AutonomyBrain — a self-driving decision layer for autonomous workflows.
@@ -108,4 +109,59 @@ declare function createAutonomyBrain(opts: AutonomyBrainOptions): BrainArbiter;
  */
 declare function formatDecisionSummary(decision: BrainDecision, request: BrainDecisionRequest): string;
 
-export { type AutonomyBrainOptions, type BrainAutoRisk, type TieredBrainArbiterOptions, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary };
+/**
+ * Model-runtime resolver + request-pipeline middleware.
+ *
+ * Maps the shared `Config.modelRuntime` settings into the per-request
+ * `Request.reasoning` and `Request.cache` fields, gated by the active model's
+ * `reasoningConfig` capabilities so unsupported values are omitted (and
+ * surfaced as warnings) instead of triggering provider 400s.
+ *
+ * Wired once at boot (REPL/TUI/WebUI all go through the same `request`
+ * pipeline) — see `installModelRuntimeMiddleware()`. UIs only need to mutate
+ * `Config.modelRuntime` (and persist) for the change to take effect on the next
+ * request.
+ */
+
+interface ResolvedModelRuntime {
+    reasoning: Request['reasoning'];
+    cache: Request['cache'];
+    /** Human-readable warnings for settings that were ignored for this model. */
+    warnings: string[];
+}
+/**
+ * Resolve user-facing runtime settings into request fields for a specific
+ * model capability profile. Pure function — safe to unit-test without a
+ * provider or event bus.
+ *
+ * @param settings   `Config.modelRuntime` (may be undefined → no-op)
+ * @param reasoning  The model's `reasoningConfig`, or undefined when unknown.
+ *                   When undefined the resolver is conservative: explicit
+ *                   on/off is suppressed (provider default wins) and effort is
+ *                   dropped, because we cannot tell whether the model will
+ *                   accept the fields.
+ */
+declare function resolveModelRuntime(settings: ModelRuntimeConfig | undefined, reasoning: ReasoningConfig | undefined): ResolvedModelRuntime;
+declare function resolveReasoningForRequest(settings: ModelRuntimeConfig, rc: ReasoningConfig | undefined, warnings: string[]): Request['reasoning'];
+declare function resolveCacheForRequest(settings: ModelRuntimeConfig, _warnings: string[]): Request['cache'];
+interface ModelRuntimeMiddlewareOptions {
+    /** Provider id of the active model, for logging/diagnostics only. */
+    providerId?: string | undefined;
+    /** Model id of the active model, for logging/diagnostics only. */
+    modelId?: string | undefined;
+    /** Current runtime settings. Called per-request so live changes apply. */
+    getSettings(): ModelRuntimeConfig | undefined;
+    /** Current model capability profile. Called per-request. */
+    getReasoningConfig(): ReasoningConfig | undefined;
+    /** Optional sink for suppressed-setting warnings (e.g. emit to event bus). */
+    onWarning?: ((message: string) => void) | undefined;
+}
+/**
+ * Build a `request`-pipeline middleware that applies runtime settings. The
+ * returned function mutates the outgoing request by overlaying resolved
+ * `reasoning` / `cache` fields. Existing fields on the request are preserved
+ * only when the resolver produces nothing for that field.
+ */
+declare function applyModelRuntime(req: Request, opts: ModelRuntimeMiddlewareOptions): Request;
+
+export { type AutonomyBrainOptions, type BrainAutoRisk, type ModelRuntimeMiddlewareOptions, type ResolvedModelRuntime, type TieredBrainArbiterOptions, applyModelRuntime, createAutonomyBrain, createTieredBrainArbiter, formatDecisionSummary, resolveCacheForRequest, resolveModelRuntime, resolveReasoningForRequest };

package/dist/execution/index.js

@@ -1765,6 +1765,41 @@ function truncate(s, max) {
   return s.length <= max ? s : `${s.slice(0, max - 1)}\u2026`;
 }
 
+// src/utils/tool-subject.ts
+var GLOB_METACHARACTERS = /[*?[\]]/g;
+function escapeGlobSubject(value) {
+  return value.replace(GLOB_METACHARACTERS, (char) => `\\${char}`);
+}
+function normalizePathSubject(value) {
+  return escapeGlobSubject(value.replace(/\\/g, "/"));
+}
+function isPathSubjectKey(subjectKey) {
+  return subjectKey === "path" || subjectKey === "file" || subjectKey === "files";
+}
+function subjectForToolInput(toolName, input, subjectKey) {
+  if (!input || typeof input !== "object") return void 0;
+  const obj = input;
+  if (subjectKey) {
+    const value = obj[subjectKey];
+    if (typeof value === "string") {
+      return isPathSubjectKey(subjectKey) ? normalizePathSubject(value) : escapeGlobSubject(value);
+    }
+  }
+  if (toolName === "bash" && typeof obj.command === "string") {
+    return escapeGlobSubject(obj.command);
+  }
+  if (typeof obj.path === "string") {
+    return normalizePathSubject(obj.path);
+  }
+  if (typeof obj.url === "string") {
+    return escapeGlobSubject(obj.url);
+  }
+  if (typeof obj.name === "string") {
+    return escapeGlobSubject(obj.name);
+  }
+  return void 0;
+}
+
 // src/utils/tool-output-serializer.ts
 var DEFAULT_LIST_LIMIT = 500;
 var LOG_ENTRY_LIMIT = 200;
@@ -2994,7 +3029,7 @@ ${errorDetails}`,
             return { result, tool, durationMs: Date.now() - start };
           }
         } else {
-          const suggestedPattern = this.subjectFor(tool.name, use.input, tool.subjectKey) ?? tool.name;
+          const suggestedPattern = subjectForToolInput(tool.name, use.input, tool.subjectKey) ?? tool.name;
           const pending = {
             type: "tool_confirm_pending",
             toolUseId: use.id,
@@ -3273,38 +3308,6 @@ ${excerpt}`;
   budgetForString(content, budget) {
     return Math.max(0, budget - Buffer.byteLength(content, "utf8"));
   }
-  /**
-   * Compute the suggestedPattern string for a tool+input pair.
-   * Matches the logic in DefaultPermissionPolicy so the TUI shows the
-   * same subject that the trust file would use.
-   */
-  subjectFor(toolName, input, subjectKey) {
-    if (!input || typeof input !== "object") return void 0;
-    const obj = input;
-    const globChars = /[*?[\]]/g;
-    const escapeGlob = (s) => s.replace(globChars, (c) => `\\${c}`);
-    const normalizePath = (s) => escapeGlob(s.replace(/\\/g, "/"));
-    if (subjectKey) {
-      const v = obj[subjectKey];
-      if (typeof v === "string") {
-        const isPathKey = subjectKey === "path" || subjectKey === "file" || subjectKey === "files";
-        return isPathKey ? normalizePath(v) : escapeGlob(v);
-      }
-    }
-    if (toolName === "bash" && typeof obj.command === "string") {
-      return escapeGlob(obj.command);
-    }
-    if (typeof obj.path === "string") {
-      return normalizePath(obj.path);
-    }
-    if (typeof obj.url === "string") {
-      return escapeGlob(obj.url);
-    }
-    if (typeof obj.name === "string") {
-      return escapeGlob(obj.name);
-    }
-    return void 0;
-  }
 };
 function clampTimeoutMs(timeoutMs, maxTimeoutMs) {
   const fallback = 3e5;
@@ -7313,7 +7316,27 @@ Working rules:
       id: "devops",
       name: "DevOps",
       role: "devops",
-      tools: [...TOOLS.build],
+      tools: [
+        ...TOOLS.build,
+        "mcp__ssh__ssh_list_servers",
+        "mcp__ssh__ssh_connection_status",
+        "mcp__ssh__ssh_execute",
+        "mcp__ssh__ssh_execute_sudo",
+        "mcp__ssh__ssh_upload",
+        "mcp__ssh__ssh_download",
+        "mcp__ssh__ssh_sync",
+        "mcp__ssh__ssh_deploy",
+        "mcp__ssh__ssh_health_check",
+        "mcp__ssh__ssh_service_status",
+        "mcp__ssh__ssh_process_manager",
+        "mcp__ssh__ssh_tunnel",
+        "mcp__ssh__ssh_backup_create",
+        "mcp__ssh__ssh_backup_list",
+        "mcp__ssh__ssh_backup_restore",
+        "mcp__ssh__ssh_db_list",
+        "mcp__ssh__ssh_db_query",
+        "mcp__ssh__ssh_profile"
+      ],
       prompt: `You are the DevOps agent. Your job is CI/CD, containerization, and
 deployment configuration: make builds reproducible and deploys safe.
 
@@ -7322,6 +7345,7 @@ Scope:
 - Write Dockerfiles/compose and optimize image size and layer caching
 - Configure deployment (env, secrets handling, health checks, rollback)
 - Diagnose flaky/broken pipelines
+- Use optional SSH MCP tools for remote hosts when the 'ssh' MCP server is enabled: list servers, run health checks, inspect services, transfer/deploy files, and open tunnels
 
 Input format you accept:
 { "task": "ci | container | deploy | fix-pipeline", "platform": "github-actions | gitlab | docker | k8s", "target": "<what>" }
@@ -7336,7 +7360,8 @@ Working rules:
 - Never hardcode secrets in config; reference the secret store
 - Pin versions for reproducible builds; avoid floating :latest
 - Every deploy path needs a rollback and a health check
-- Treat CI/CD changes as high-risk \u2014 explain blast radius before applying`
+- Treat CI/CD changes as high-risk \u2014 explain blast radius before applying
+- For remote SSH work, start with ssh_list_servers / ssh_connection_status, prefer read-only checks first, and do not run destructive commands without explicit user approval`
     },
     budget: MEDIUM_BUDGET,
     capability: {
@@ -7353,6 +7378,13 @@ Working rules:
         "kubernetes",
         "k8s",
         "deploy",
+        "ssh",
+        "remote ssh",
+        "remote server",
+        "sftp",
+        "tunnel",
+        "bastion",
+        "jump host",
         "github actions",
         "container"
       ]
@@ -8935,6 +8967,7 @@ var DefaultMultiAgentCoordinator = class _DefaultMultiAgentCoordinator extends E
         subagentId: result.subagentId,
         taskId: result.taskId,
         status: result.status,
+        result: result.result,
         iterations: result.iterations,
         toolCalls: result.toolCalls,
         durationMs: result.durationMs
@@ -9868,6 +9901,88 @@ function parseDescriptionFromText(desc) {
   return { trigger, scope };
 }
 
-export { AutoCompactionMiddleware, AutonomousRunner, DefaultErrorHandler, DefaultRetryPolicy, DefaultSkillLoader, DoneConditionChecker, EternalAutonomyEngine, HybridCompactor, IntelligentCompactor, ParallelEternalEngine, SelectiveCompactor, ToolExecutor, buildGoalPreamble, createAutonomyBrain, createStrategyCompactor, createTieredBrainArbiter, formatDecisionSummary, makeAutonomyPromptContributor };
+// src/execution/model-runtime.ts
+function resolveModelRuntime(settings, reasoning) {
+  const warnings = [];
+  if (!settings) {
+    return { reasoning: void 0, cache: void 0, warnings };
+  }
+  const reasoningField = resolveReasoningForRequest(settings, reasoning, warnings);
+  const cacheField = resolveCacheForRequest(settings);
+  return { reasoning: reasoningField, cache: cacheField, warnings };
+}
+function resolveReasoningForRequest(settings, rc, warnings) {
+  const cfg = settings.reasoning;
+  if (!cfg) return void 0;
+  const capKnown = rc !== void 0;
+  const supportsReasoning = rc ? rc.default !== "disabled" || rc.disableSupported || rc.effortSupported : false;
+  const out = {};
+  if (cfg.mode === "off") {
+    if (capKnown && rc?.disableSupported) {
+      out.enabled = false;
+    } else if (capKnown && rc && rc.default === "always_on") {
+      warnings.push(
+        'reasoning "off" requested, but this model has thinking always on; the disable field was omitted to avoid a provider error.'
+      );
+    } else if (capKnown && rc && !rc.disableSupported) {
+      warnings.push('reasoning "off" requested, but this model does not support disabling thinking; the setting was omitted.');
+    } else {
+      warnings.push('reasoning "off" requested, but model capabilities are unknown; the setting was omitted.');
+    }
+  } else if (cfg.mode === "on") {
+    if (!capKnown) {
+      warnings.push('reasoning "on" requested, but model capabilities are unknown; the setting was omitted.');
+    } else if (!supportsReasoning && rc?.default === "disabled") {
+      warnings.push('reasoning "on" requested, but this model has reasoning disabled by default and does not advertise support; the setting was omitted.');
+    } else {
+      out.enabled = true;
+    }
+  }
+  const effort = cfg.effort;
+  if (effort !== void 0) {
+    if (capKnown && rc?.effortSupported && rc.effortLevels.includes(effort)) {
+      out.effort = effort;
+    } else if (capKnown && rc?.effortSupported) {
+      warnings.push(
+        `reasoning effort "${effort}" not supported by this model (supported: ${rc.effortLevels.join(", ")}); the setting was omitted.`
+      );
+    } else if (capKnown) {
+      warnings.push(`reasoning effort "${effort}" requested, but this model does not support effort; the setting was omitted.`);
+    } else {
+      warnings.push(`reasoning effort "${effort}" requested, but model capabilities are unknown; the setting was omitted.`);
+    }
+  }
+  if (cfg.preserve !== void 0) {
+    if (capKnown && rc && rc.preserveThinking !== "unsupported") {
+      out.preserve = cfg.preserve;
+    } else if (capKnown) {
+      warnings.push("reasoning preserve requested, but this model does not support preserved thinking; the setting was omitted.");
+    }
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
+function resolveCacheForRequest(settings, _warnings) {
+  const ttl = settings.cache?.ttl;
+  if (ttl === void 0) return void 0;
+  const out = { ttl };
+  return out;
+}
+function applyModelRuntime(req, opts) {
+  const settings = opts.getSettings();
+  if (!settings) return req;
+  const rc = opts.getReasoningConfig();
+  const resolved = resolveModelRuntime(settings, rc);
+  for (const w of resolved.warnings) opts.onWarning?.(w);
+  const next = { ...req };
+  if (resolved.reasoning !== void 0) {
+    next.reasoning = resolved.reasoning;
+  }
+  if (resolved.cache !== void 0) {
+    next.cache = resolved.cache;
+  }
+  return next;
+}
+
+export { AutoCompactionMiddleware, AutonomousRunner, DefaultErrorHandler, DefaultRetryPolicy, DefaultSkillLoader, DoneConditionChecker, EternalAutonomyEngine, HybridCompactor, IntelligentCompactor, ParallelEternalEngine, SelectiveCompactor, ToolExecutor, applyModelRuntime, buildGoalPreamble, createAutonomyBrain, createStrategyCompactor, createTieredBrainArbiter, formatDecisionSummary, makeAutonomyPromptContributor, resolveCacheForRequest, resolveModelRuntime, resolveReasoningForRequest };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map