@wrongstack/core 0.273.0 → 0.273.1

package/dist/storage/index.js

@@ -746,6 +746,91 @@ var DefaultSessionStore = class _DefaultSessionStore {
       }
     }
   }
+  /**
+   * Streaming search over a session's JSONL. Walks the file once, parses
+   * each event lazily, and yields only the events that match `predicate`.
+   * Stops as soon as `opts.limit` matches are collected.
+   *
+   * Why this exists: `load()` parses the entire file into memory and
+   * rebuilds `messages`/`toolCallEnds` for every caller. `search()` only
+   * needs to know which events contain matching text — a per-line
+   * predicate is enough. The full parse work (and the `_loadCache` poll)
+   * is wasted in that case.
+   *
+   * Memory: O(hits) regardless of file size. Disk: one linear scan,
+   * terminated at `limit` if the caller asked for one.
+   *
+   * Errors: missing file yields []. Corrupt lines are skipped (same
+   * policy as `load()`). Aborting via `signal` rejects with `AbortError`.
+   */
+  async searchEvents(id, predicate, opts) {
+    const file = this.sessionPath(id, ".jsonl");
+    const limit = opts?.limit;
+    const signal = opts?.signal;
+    const out = [];
+    let stat7;
+    try {
+      stat7 = await fsp.stat(file);
+    } catch (err) {
+      if (err.code === "ENOENT") return [];
+      throw err;
+    }
+    if (stat7.size === 0) return [];
+    let fh;
+    try {
+      fh = await fsp.open(file, "r");
+      const CHUNK = 64 * 1024;
+      const buf = Buffer.alloc(CHUNK);
+      let leftover = "";
+      let eventIndex = 0;
+      for (let position = 0; ; position += buf.byteLength) {
+        if (signal?.aborted) {
+          const reason = signal.reason ?? new DOMException("Aborted", "AbortError");
+          throw reason;
+        }
+        const { bytesRead } = await fh.read(buf, 0, CHUNK, position);
+        if (bytesRead === 0) break;
+        const text = leftover + buf.subarray(0, bytesRead).toString("utf8");
+        const parts = text.split("\n");
+        leftover = parts.pop() ?? "";
+        for (const line of parts) {
+          if (!line) continue;
+          let ev;
+          try {
+            const parsed = JSON.parse(line);
+            if (parsed === null || typeof parsed !== "object" || typeof parsed.type !== "string" || typeof parsed.ts !== "string") {
+              continue;
+            }
+            ev = parsed;
+          } catch {
+            continue;
+          }
+          if (predicate(ev, eventIndex, ev.ts)) {
+            out.push({ event: ev, eventIndex, ts: ev.ts });
+            if (limit !== void 0 && out.length >= limit) {
+              return out;
+            }
+          }
+          eventIndex++;
+        }
+      }
+      if (leftover.trim()) {
+        try {
+          const parsed = JSON.parse(leftover);
+          if (parsed !== null && typeof parsed === "object" && typeof parsed.type === "string" && typeof parsed.ts === "string") {
+            const ev = parsed;
+            if (predicate(ev, eventIndex, ev.ts)) {
+              out.push({ event: ev, eventIndex, ts: ev.ts });
+            }
+          }
+        } catch {
+        }
+      }
+      return out;
+    } finally {
+      if (fh) await fh.close().catch(() => void 0);
+    }
+  }
   async list(limit = 20) {
     try {
       await ensureDir(this.dir);
@@ -3660,6 +3745,9 @@ function isContextWindowModeId(id) {
   return CONTEXT_WINDOW_MODES.some((m) => m.id === id);
 }
 
+// src/types/config.ts
+var DEFAULT_TUI_THINKING_WORD = "thinking";
+
 // src/types/default-config.ts
 var DEFAULT_TOOLS_CONFIG = Object.freeze({
   defaultExecutionStrategy: "smart",
@@ -3678,6 +3766,10 @@ var DEFAULT_CONTEXT_CONFIG = Object.freeze({
 var DEFAULT_AUTONOMY_CONFIG = Object.freeze({
   autoProceedDelayMs: 45e3
 });
+var DEFAULT_CIRCUIT_BREAKER_CONFIG = Object.freeze({
+  enabled: false,
+  autoKillResetMs: 6e4
+});
 var DEFAULT_SESSION_LOGGING_CONFIG = Object.freeze({
   auditLevel: "standard",
   sampling: {
@@ -3704,7 +3796,8 @@ var BEHAVIOR_DEFAULTS = {
     hardThreshold: 0.9,
     autoCompact: true,
     preserveK: DEFAULT_CONTEXT_CONFIG.preserveK,
-    eliseThreshold: DEFAULT_CONTEXT_CONFIG.eliseThreshold
+    eliseThreshold: DEFAULT_CONTEXT_CONFIG.eliseThreshold,
+    strategy: "hybrid"
   },
   tools: {
     defaultExecutionStrategy: DEFAULT_TOOLS_CONFIG.defaultExecutionStrategy,
@@ -3727,6 +3820,13 @@ var BEHAVIOR_DEFAULTS = {
     allowOutsideProjectRoot: true
   },
   mcpServers: {},
+  fallbackAuto: true,
+  maxConcurrent: 4,
+  yolo: false,
+  nextPrediction: false,
+  hints: true,
+  debugStream: false,
+  configScope: "global",
   indexing: {
     onSessionStart: true,
     onEdit: true,
@@ -3734,8 +3834,55 @@ var BEHAVIOR_DEFAULTS = {
     debounceMs: 400
   },
   session: { ...DEFAULT_SESSION_LOGGING_CONFIG },
-  autonomy: { autoProceedDelayMs: DEFAULT_AUTONOMY_CONFIG.autoProceedDelayMs }
+  autonomy: {
+    defaultMode: "off",
+    autoProceedDelayMs: DEFAULT_AUTONOMY_CONFIG.autoProceedDelayMs,
+    autoProceedMaxIterations: 50,
+    autonomyNextPrompt: "auto {{suggestion}}",
+    terminalTitleAnimation: true,
+    yolo: false,
+    streamFleet: true,
+    chime: false,
+    confirmExit: true,
+    mouseMode: false,
+    enhance: true,
+    enhanceDelayMs: 6e4,
+    enhanceLanguage: "original",
+    statuslineMode: "detailed",
+    thinkingWord: DEFAULT_TUI_THINKING_WORD
+  },
+  circuitBreaker: { ...DEFAULT_CIRCUIT_BREAKER_CONFIG },
+  modelRuntime: {
+    reasoning: { mode: "auto", effort: "high", preserve: false },
+    cache: {}
+  }
 };
+function isPlainRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function cloneJsonValue(value) {
+  return structuredClone(value);
+}
+function fillMissingDefaults(target, defaults) {
+  const value = cloneJsonValue(target);
+  const changed = fillMissingDefaultsInPlace(value, defaults);
+  return { value, changed };
+}
+function fillMissingDefaultsInPlace(target, defaults) {
+  let changed = false;
+  for (const [key, defaultValue] of Object.entries(defaults)) {
+    if (!Object.prototype.hasOwnProperty.call(target, key)) {
+      target[key] = cloneJsonValue(defaultValue);
+      changed = true;
+      continue;
+    }
+    const current = target[key];
+    if (isPlainRecord(current) && isPlainRecord(defaultValue)) {
+      changed = fillMissingDefaultsInPlace(current, defaultValue) || changed;
+    }
+  }
+  return changed;
+}
 function envBool(v) {
   return !/^(0|false|no|off)$/i.test(v.trim());
 }
@@ -3787,27 +3934,139 @@ var defaultIndexing = {
   watchExternal: true,
   debounceMs: 400
 };
-var IN_PROJECT_FORBIDDEN_KEYS = /* @__PURE__ */ new Set([
+var IN_PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
+  "version",
+  "model",
+  "cwd",
+  "context",
+  "tools",
+  "features",
+  "autonomy",
+  "indexing",
+  "session",
+  "log",
+  "launch",
+  "nextPrediction",
+  "hints",
+  "debugStream",
+  "configScope",
+  "maxConcurrent",
+  "fallbackModels",
+  "fallbackAuto",
+  "models",
+  "modelMatrix",
+  "circuitBreaker",
+  "adaptiveConcurrency",
+  "modelRuntime"
+]);
+var KNOWN_DENIED_IN_PROJECT = [
+  { key: "provider", reason: "Provider id override; can intercept prompts/responses." },
+  { key: "apiKey", reason: "Overrides user API key; exfiltrates prompts." },
+  { key: "baseUrl", reason: "Redirects provider endpoint; leaks real API key." },
+  { key: "providers", reason: "Per-provider apiKey/baseUrl/oauthConfig; same redirect/exfil." },
+  { key: "mcpServers", reason: "Arbitrary command/args/env spawned at boot (RCE)." },
+  { key: "hooks", reason: "Shell command arrays on lifecycle events (RCE)." },
+  { key: "plugins", reason: "Dynamic npm package load at boot (RCE)." },
+  { key: "sync", reason: "Carries githubToken credential and target repo." },
+  { key: "yolo", reason: "Disables all permission confirmation prompts." },
+  { key: "extensions", reason: "Per-plugin config can carry command/credential fields." },
+  { key: "hq", reason: "Carries HQ client token credential and endpoint URL." }
+];
+var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
+  "version",
   "provider",
+  "model",
   "apiKey",
   "baseUrl",
+  "maxConcurrent",
   "providers",
+  "models",
+  "modelMatrix",
+  "context",
+  "tools",
   "mcpServers",
+  "fallbackModels",
+  "fallbackAuto",
   "hooks",
   "plugins",
-  "sync",
+  "log",
+  "features",
   "yolo",
+  "nextPrediction",
+  "cwd",
+  "autonomy",
+  "hints",
+  "debugStream",
+  "configScope",
+  "indexing",
+  "circuitBreaker",
+  "adaptiveConcurrency",
+  "launch",
+  "session",
+  "modelRuntime",
+  "hq",
+  "sync",
   "extensions"
 ]);
+function assertInProjectAllowListComplete() {
+  const missingFromBoth = [];
+  for (const key of KNOWN_CONFIG_TOP_LEVEL_KEYS) {
+    if (IN_PROJECT_ALLOWED_KEYS.has(key)) continue;
+    const denied = KNOWN_DENIED_IN_PROJECT.find((d) => d.key === key);
+    if (!denied) missingFromBoth.push(key);
+  }
+  const staleDenials = KNOWN_DENIED_IN_PROJECT.filter((d) => !KNOWN_CONFIG_TOP_LEVEL_KEYS.has(d.key)).map((d) => d.key);
+  const duplicate = KNOWN_DENIED_IN_PROJECT.filter((d) => IN_PROJECT_ALLOWED_KEYS.has(d.key)).map((d) => d.key);
+  const problems = [];
+  if (missingFromBoth.length > 0) {
+    problems.push(
+      `new Config field(s) not classified as allowed or denied for in-project config: ` + missingFromBoth.join(", ") + ". Add each to IN_PROJECT_ALLOWED_KEYS (if safe) or KNOWN_DENIED_IN_PROJECT (with a reason)."
+    );
+  }
+  if (staleDenials.length > 0) {
+    problems.push(
+      `KNOWN_DENIED_IN_PROJECT references keys that no longer exist on Config: ` + staleDenials.join(", ") + ". Remove them or restore the field on Config."
+    );
+  }
+  if (duplicate.length > 0) {
+    problems.push(
+      `field(s) appear in BOTH IN_PROJECT_ALLOWED_KEYS and KNOWN_DENIED_IN_PROJECT: ` + duplicate.join(", ") + ". The allow-list wins at runtime; remove from one of the two."
+    );
+  }
+  if (problems.length > 0) {
+    throw new Error(
+      `stripUnsafeInProjectFields drift check failed:
+  - ${problems.join("\n  - ")}`
+    );
+  }
+}
+var driftChecked = false;
 function stripUnsafeInProjectFields(inProject, sourcePath, warn = (msg) => console.warn(msg)) {
+  if (!driftChecked) {
+    assertInProjectAllowListComplete();
+    driftChecked = true;
+  }
   const stripped = [];
   const out = {};
   for (const [k, v] of Object.entries(inProject)) {
-    if (IN_PROJECT_FORBIDDEN_KEYS.has(k)) {
-      stripped.push(k);
+    if (IN_PROJECT_ALLOWED_KEYS.has(k)) {
+      out[k] = v;
       continue;
     }
-    out[k] = v;
+    stripped.push(k);
+  }
+  const outTools = out["tools"];
+  if (outTools && typeof outTools === "object") {
+    const execCfg = outTools["exec"];
+    if (execCfg && typeof execCfg === "object" && "allow" in execCfg) {
+      const clonedExec = { ...execCfg };
+      delete clonedExec["allow"];
+      out["tools"] = {
+        ...outTools,
+        exec: clonedExec
+      };
+      stripped.push("tools.exec.allow");
+    }
   }
   if (stripped.length > 0) {
     warn(
@@ -3816,7 +4075,7 @@ function stripUnsafeInProjectFields(inProject, sourcePath, warn = (msg) => conso
         event: "config.in_project_unsafe_fields_ignored",
         path: sourcePath,
         ignoredKeys: stripped,
-        message: `Ignored ${stripped.length} unsafe field(s) from the repo-committed config "${sourcePath}": ${stripped.join(", ")}. These can only be set in your personal ~/.wrongstack/config.json, not in a project-committed file.`,
+        message: `Ignored ${stripped.length} field(s) from the repo-committed config "${sourcePath}": ${stripped.join(", ")}. Only a small allow-list of benign preferences (model, context, tools limits, features, \u2026) may be set by <project>/.wrongstack/config.json. Everything else must live in your personal ~/.wrongstack/config.json.`,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       })
     );
@@ -3860,6 +4119,7 @@ var DefaultConfigLoader = class {
   }
   async load(opts = {}) {
     let cfg = { ...BEHAVIOR_DEFAULTS };
+    await this.ensureGlobalDefaults();
     const inProjectCollides = samePath(this.paths.inProjectConfig, this.paths.globalConfig) || samePath(this.paths.inProjectConfig, this.paths.projectLocalConfig);
     const [global, local, inProject] = await Promise.all([
       this.readJson(this.paths.globalConfig),
@@ -3924,6 +4184,80 @@ var DefaultConfigLoader = class {
     }
     return Object.freeze(cfg);
   }
+  async ensureGlobalDefaults() {
+    const fp = this.paths.globalConfig;
+    const t0 = Date.now();
+    try {
+      await withFileLock(fp, async () => {
+        let parsed;
+        try {
+          const raw = await fsp.readFile(fp, "utf8");
+          const result = safeParse(raw);
+          if (!result.ok || !isPlainRecord(result.value)) {
+            return;
+          }
+          parsed = result.value;
+        } catch (err) {
+          if (err.code !== "ENOENT") {
+            this.events?.emit("storage.error", {
+              sessionId: "~config~",
+              store: "config",
+              filePath: fp,
+              operation: "ensure_defaults",
+              outcome: "failure",
+              error: storageErrorString(err),
+              recoverable: false,
+              durationMs: Date.now() - t0,
+              ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
+            });
+            console.warn(JSON.stringify({
+              level: "warn",
+              event: "config.defaults_read_failed",
+              path: fp,
+              message: toErrorMessage(err),
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            }));
+            return;
+          }
+          parsed = {};
+        }
+        const { value, changed } = fillMissingDefaults(
+          parsed,
+          BEHAVIOR_DEFAULTS
+        );
+        if (!changed) return;
+        await atomicWrite(fp, JSON.stringify(value, null, 2), { mode: 384 });
+        this.events?.emit("storage.write", {
+          sessionId: "~config~",
+          store: "config",
+          filePath: fp,
+          operation: "ensure_defaults",
+          outcome: "success",
+          durationMs: Date.now() - t0,
+          ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
+        });
+      });
+    } catch (err) {
+      this.events?.emit("storage.error", {
+        sessionId: "~config~",
+        store: "config",
+        filePath: fp,
+        operation: "ensure_defaults",
+        outcome: "failure",
+        error: storageErrorString(err),
+        recoverable: false,
+        durationMs: Date.now() - t0,
+        ...this.traceId !== void 0 ? { traceId: this.traceId } : {}
+      });
+      console.warn(JSON.stringify({
+        level: "warn",
+        event: "config.defaults_write_failed",
+        path: fp,
+        message: toErrorMessage(err),
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      }));
+    }
+  }
   /**
    * Persist a sync config to ~/.wrongstack/sync.json, with the token encrypted
    * by the vault (if provided). The file is isolated from the main config
@@ -4386,6 +4720,34 @@ var DefaultSessionReader = class {
       ids = filtered.map((s) => s.id);
     }
     const hits = [];
+    const streaming = this.store.searchEvents?.bind(this.store);
+    if (streaming) {
+      for (const id of ids) {
+        const matched = await streaming(
+          id,
+          (ev) => {
+            if (allowedTypes && !allowedTypes.has(ev.type)) return false;
+            const text = eventText(ev);
+            if (text === null) return false;
+            return matcher(text) !== null;
+          },
+          { limit: limit - hits.length }
+        );
+        for (const m of matched) {
+          const text = expectDefined(eventText(m.event));
+          const hit = expectDefined(matcher(text));
+          hits.push({
+            sessionId: id,
+            eventIndex: m.eventIndex,
+            ts: m.ts,
+            type: m.event.type,
+            snippet: snippetOf(text, hit.start, hit.end)
+          });
+          if (hits.length >= limit) return hits;
+        }
+      }
+      return hits;
+    }
     for (const id of ids) {
       let data;
       try {
@@ -6127,6 +6489,10 @@ var AGENT_REAP_MS = 3e4;
 var AGENT_SWEEP_INTERVAL_MS = 1e4;
 var PARTIAL_TEXT_CAP = 1200;
 var PARTIAL_FLUSH_THROTTLE_MS = 300;
+function clampPct(pct) {
+  if (!Number.isFinite(pct)) return 0;
+  return Math.max(0, Math.min(100, pct));
+}
 var AgentStatusTracker = class {
   events;
   registry;
@@ -6278,7 +6644,7 @@ var AgentStatusTracker = class {
       this.events.onPattern("ctx.pct", (_e, payload) => {
         const p = payload;
         if (typeof p?.load === "number" && Number.isFinite(p.load)) {
-          this.leaderCtxPct = Math.round(p.load * 100);
+          this.leaderCtxPct = clampPct(Math.round(p.load * 100));
           this.flush();
         }
       })
@@ -6320,7 +6686,7 @@ var AgentStatusTracker = class {
         const p = payload;
         if (!p?.subagentId) return;
         const entry = touch(p.subagentId);
-        if (typeof p.load === "number") entry.ctxPct = Math.round(p.load * 100);
+        if (typeof p.load === "number") entry.ctxPct = clampPct(Math.round(p.load * 100));
         this.flush();
       })
     );
@@ -6481,7 +6847,7 @@ var AgentStatusTracker = class {
     const providerMax = c.provider?.capabilities?.maxContext;
     const maxContext = typeof metaLimit === "number" && metaLimit > 0 ? metaLimit : typeof providerMax === "number" && providerMax > 0 ? providerMax : void 0;
     if (typeof c.lastRequestTokens === "number" && c.lastRequestTokens > 0 && maxContext !== void 0) {
-      this.leaderCtxPct = Math.round(c.lastRequestTokens / maxContext * 100);
+      this.leaderCtxPct = clampPct(Math.round(c.lastRequestTokens / maxContext * 100));
     }
   }
 };