@wrongstack/core 0.277.1 → 0.280.0

package/dist/{compactor-D3BGw26y.d.ts → compactor-U3agvUIG.d.ts}

@@ -1,4 +1,4 @@
-import { C as Context } from './context-DPlA6kid.js';
+import { C as Context } from './tool-BkOgs_KL.js';
 
 interface CompactRepairReport {
     removedToolUses: string[];

package/dist/{config-DAOjriz9.d.ts → config-Cr3312zc.d.ts}

@@ -1,4 +1,4 @@
-import { a as ReasoningConfig, o as Capabilities, h as Permission, p as ReasoningEffort, q as CacheTtl } from './context-DPlA6kid.js';
+import { a as ReasoningConfig, p as ReasoningEffort, q as CacheTtl, r as Capabilities, e as Permission } from './tool-BkOgs_KL.js';
 
 type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
 type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
@@ -493,6 +493,33 @@ interface ExecToolConfig {
      * removing a command can only narrow what runs, so it is always safe.
      */
     deny?: string[] | undefined;
+    /**
+     * Per-rule bypass for the heuristic danger detector. Each entry is a
+     * stable `matchedRule` id (e.g. `rm-recursive`, `git-push-force`); a
+     * matched rule whose id is in this list is suppressed.
+     *
+     * Use case: a project that legitimately runs `rm -rf ./build` on every
+     * CI run can add `"rm-recursive"` to bypass so the detector stops
+     * emitting banners for that one rule — without disabling it for every
+     * other `rm -rf` invocation.
+     *
+     * **Trusted sources only.** Bypassing a danger rule means the user
+     * agreed to a specific destructive pattern; in-project repo config
+     * could otherwise be used to silently opt everyone in. The boot path
+     * strips this field from `<project>/.wrongstack/config.json` the
+     * same way it strips `allow`.
+     */
+    danger?: ExecDangerConfig | undefined;
+}
+interface ExecDangerConfig {
+    /**
+     * List of danger rule ids to skip. Each id corresponds to a rule in
+     * `@wrongstack/tools/src/_danger-detect.ts` (e.g. `rm-recursive`,
+     * `git-push-force`, `inline-eval`, `sudo`). Unknown ids are ignored
+     * (forward-compat: a rule added in a future version can be referenced
+     * before the user upgrades).
+     */
+    bypass?: string[] | undefined;
 }
 type ToolDescriptionMode = 'extend' | 'simple';
 type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>;
@@ -624,6 +651,13 @@ interface ModelMatrixEntry {
     provider?: string | undefined;
     /** Model id to run for the matched role/phase/default. */
     model?: string | undefined;
+    /**
+     * Runtime request overrides for subagents matched by this entry. This is
+     * intentionally scoped to subagents: leader requests keep using top-level
+     * `Config.modelRuntime`, while a role/phase can opt into its own reasoning
+     * effort, cache TTL, or gated generation parameters.
+     */
+    modelRuntime?: ModelRuntimeConfig | undefined;
     /**
      * Named fallback profile to use for the matched role/phase/default. When
      * `model` is omitted, the first model in the profile becomes the primary and
@@ -873,6 +907,59 @@ interface CustomModelDefinition {
      */
     maxOutput?: number | undefined;
 }
+/**
+ * Skill subsystem configuration. All fields optional; the subsystem itself is
+ * gated by `features.skills`. Honored from the user's `~/.wrongstack/config.json`;
+ * in the repo-committed in-project config the `extraDirs` field is stripped
+ * (arbitrary directories are a prompt-injection vector) — only `readClaudeSkills`
+ * and `mode` survive there.
+ */
+interface SkillsConfig {
+    /**
+     * Read skills from foreign coding-agent directories (`<project>/.claude/skills`
+     * and `~/.claude/skills`). Default `true`. Lets Claude Code / Codex / Gemini /
+     * `asm` / `gh skill` skills be used without copying them.
+     */
+    readClaudeSkills?: boolean | undefined;
+    /**
+     * Scan OTHER coding agents' skill directories (`~/.codex/skills`,
+     * `~/.cursor/skills`, `~/.agents/skills`, `~/.qwen/skills`,
+     * `~/.trae/skills`, … + their `<project>/.<tool>/…` equivalents). Default
+     * `true` (all known tools); pass a tool-id list to restrict, or `false` to
+     * disable. Non-existent dirs are skipped. Unknown ids in the list (likely
+     * typos) are dropped and surfaced via a config warning.
+     */
+    foreignSources?: boolean | string[] | undefined;
+    /**
+     * How skill bodies reach the system prompt.
+     * - `'eager'` (default): inject every discovered skill body into the prompt.
+     * - `'progressive'`: inject only the metadata manifest; the agent loads a
+     *   skill body on demand via the `skill` tool (the agentskills.io model).
+     */
+    mode?: 'eager' | 'progressive' | undefined;
+    /**
+     * Extra skill directories to scan (lowest priority, after the `.claude`
+     * layers). Honored only from the user config; stripped from in-project config.
+     */
+    extraDirs?: string[] | undefined;
+    /**
+     * In eager mode, the maximum total chars of skill bodies injected into the
+     * prompt (highest-priority skills first; the rest are listed as a manifest the
+     * agent loads via the `skill` tool). Bounds prompt cost when many skills are
+     * discovered. Default 24000 (~6k tokens). Set very high to disable. Ignored in
+     * progressive mode (which injects only the manifest anyway).
+     */
+    eagerMaxChars?: number | undefined;
+    /**
+     * Base URL of the skill registry used by `/skill-search` and
+     * `/skill-install <registry>:<id>`. Default `https://skills.sh` (the open
+     * marketplace backed by mastra-ai/skills-api). Honored only from the user
+     * config; stripped from in-project config (a repo-committed override would be
+     * an SSRF / prompt-injection vector — the registry response is parsed into the
+     * prompt). Set to a self-hosted skills-api instance to use a private catalog.
+     */
+    registryUrl?: string | undefined;
+}
 interface Config {
     version: 1;
     provider: string;
@@ -886,6 +973,14 @@ interface Config {
      * CLI flag. Change at runtime with /fleet concurrency <n>.
      */
     maxConcurrent?: number | undefined;
+    /**
+     * Display language for the UI chrome (WebUI + desktop shell). A BCP-47-ish
+     * code from SUPPORTED_LOCALES (en/tr/de/fr/it/es/pt-BR). Persisted here so a
+     * change in one surface propagates to all others via the shared machine
+     * config; each surface may keep a local cache for instant reactivity. When
+     * unset, surfaces fall back to their own browser/system detection.
+     */
+    uiLocale?: string | undefined;
     providers?: Record<string, ProviderConfig>;
     /**
      * Top-level custom models (maps modelId → definition). Merged with
@@ -935,8 +1030,9 @@ interface Config {
      * Ordered list of fallback model references tried, in order, when the
      * primary model is overloaded (HTTP 429/529/5xx) and its own retries are
      * exhausted. Each entry is a model reference: a bare model id (same
-     * provider), `provider/model`, or `provider model`. The primary is always
-     * re-tried first at the start of every user turn. See `createFallbackModelExtension`.
+     * provider), `provider/model`, or `provider model`. After a fallback hop,
+     * the primary is retried only after its cooldown expires. See
+     * `createFallbackModelExtension`.
      */
     fallbackModels?: string[] | undefined;
     /**
@@ -961,6 +1057,8 @@ interface Config {
     plugins?: (string | PluginConfig)[] | undefined;
     log: LogConfig;
     features: FeaturesConfig;
+    /** Skill subsystem options (readClaudeSkills / mode / extraDirs). */
+    skills?: SkillsConfig | undefined;
     yolo?: boolean | undefined;
     /** When true, show lightweight LLM-predicted next steps after each turn (/next). */
     nextPrediction?: boolean | undefined;
@@ -1067,4 +1165,4 @@ interface ConfigStore {
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
 
-export { type ToolDescriptionModeConfig as $, type AdaptiveConcurrencyConfig as A, type IndexingConfig as B, type Config as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, type ExecToolConfig as E, type FeaturesConfig as F, type LogConfig as G, type HookEvent as H, type InProcessHook as I, MAX_TUI_THINKING_WORD_LENGTH as J, type ModelRuntimeCacheConfig as K, type LaunchConfig as L, type ModelsRegistry as M, type ModelRuntimeConfig as N, type ModelRuntimeParametersConfig as O, type ProviderConfig as P, type ModelRuntimeReasoningConfig as Q, type ResolvedProvider as R, type ShellHook as S, type ToolResultRenderMode as T, type ModelsDevProvider as U, type PluginConfig as V, type WireFamily as W, type ProviderApiKey as X, type SessionLoggingConfig as Y, type SyncCategory as Z, type ToolDescriptionMode as _, type ModelsDevPayload as a, type ToolResultRenderModeConfig as a0, type ToolsConfig as a1, formatContextWindowModeList as a2, getContextWindowMode as a3, isContextWindowModeId as a4, listContextWindowModes as a5, normalizeTokenSavingTier as a6, normalizeTuiThinkingWord as a7, resolveContextWindowPolicy as a8, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ContextWindowAggressiveOn as h, type ContextWindowPolicy as i, type ConfigLoader as j, type SyncConfig as k, type ConfigStore as l, type HookInput as m, type HookOutcome as n, type TokenSavingTier as o, type AutonomyConfig as p, CONTEXT_WINDOW_MODES as q, type CircuitBreakerRuntimeConfig as r, type ContextConfig as s, type ContextWindowConfigLike as t, type ContextWindowMode as u, type ContextWindowModeId as v, type ContextWindowThresholds as w, type CustomModelDefinition as x, DEFAULT_TUI_THINKING_WORD as y, type HqClientConfig as z };
+export { type SyncCategory as $, type AdaptiveConcurrencyConfig as A, type ExecToolConfig as B, type Config as C, DEFAULT_CONTEXT_WINDOW_MODE_ID as D, type ExecDangerConfig as E, type FeaturesConfig as F, type HqClientConfig as G, type HookEvent as H, type InProcessHook as I, type IndexingConfig as J, type LogConfig as K, type LaunchConfig as L, type ModelsRegistry as M, MAX_TUI_THINKING_WORD_LENGTH as N, type ModelRuntimeCacheConfig as O, type ProviderConfig as P, type ModelRuntimeParametersConfig as Q, type ResolvedProvider as R, type ShellHook as S, type ToolResultRenderMode as T, type ModelRuntimeReasoningConfig as U, type ModelsDevProvider as V, type WireFamily as W, type PluginConfig as X, type ProviderApiKey as Y, type SessionLoggingConfig as Z, type SkillsConfig as _, type ModelsDevPayload as a, type ToolDescriptionMode as a0, type ToolDescriptionModeConfig as a1, type ToolResultRenderModeConfig as a2, type ToolsConfig as a3, formatContextWindowModeList as a4, getContextWindowMode as a5, isContextWindowModeId as a6, listContextWindowModes as a7, normalizeTokenSavingTier as a8, normalizeTuiThinkingWord as a9, resolveContextWindowPolicy as aa, type ResolvedModel as b, type MCPServerConfig as c, type ModelMatrixEntry as d, type ModelsDevModel as e, type HookMatcher as f, type HookEntry as g, type ModelRuntimeConfig as h, type ContextWindowAggressiveOn as i, type ContextWindowPolicy as j, type ConfigLoader as k, type SyncConfig as l, type ConfigStore as m, type HookInput as n, type HookOutcome as o, type TokenSavingTier as p, type AutonomyConfig as q, CONTEXT_WINDOW_MODES as r, type CircuitBreakerRuntimeConfig as s, type ContextConfig as t, type ContextWindowConfigLike as u, type ContextWindowMode as v, type ContextWindowModeId as w, type ContextWindowThresholds as x, type CustomModelDefinition as y, DEFAULT_TUI_THINKING_WORD as z };