@wrongstack/core 0.280.1 → 0.281.1

package/dist/{selector-Dy-MzKp1.d.ts → selector-Bx2HgUkU.d.ts}

@@ -1,4 +1,4 @@
-import { M as Message } from './tool-BkOgs_KL.js';
+import { M as Message } from './tool-LVSLiE1s.js';
 
 /**
  * Result of LLM-driven message importance analysis.

package/dist/{session-event-bridge-CqdiGnfU.d.ts → session-event-bridge-vA2fLV58.d.ts}

@@ -1,4 +1,4 @@
-import { S as SessionEvent, b as SessionWriter } from './tool-BkOgs_KL.js';
+import { S as SessionEvent, b as SessionWriter } from './tool-LVSLiE1s.js';
 
 type AuditLevel = 'minimal' | 'standard' | 'full';
 /**

package/dist/{session-reader-Hk0WbNm9.d.ts → session-reader-B-Fi9L6I.d.ts}

@@ -1,4 +1,4 @@
-import { i as ContentBlock, S as SessionEvent, j as SessionMetadata, k as SessionStore } from './tool-BkOgs_KL.js';
+import { i as ContentBlock, S as SessionEvent, j as SessionMetadata, k as SessionStore } from './tool-LVSLiE1s.js';
 
 type AttachmentKind = 'text' | 'image' | 'file';
 interface AttachmentMeta {

package/dist/session-registry-Dvg7i_IA.d.ts

@@ -0,0 +1,129 @@
+/** Live status of a single agent within a session. */
+type AgentLiveStatus = 'idle' | 'running' | 'streaming' | 'waiting_user' | 'error';
+interface AgentEntry {
+    /** Unique agent id (ULID or UUID). */
+    id: string;
+    /** Human-readable label (e.g. "leader", "bug-hunter #1"). */
+    name: string;
+    /** UTC ISO timestamp when this agent/run started, when known. */
+    startedAt?: string | undefined;
+    status: AgentLiveStatus;
+    /** Current tool name if running, undefined otherwise. */
+    currentTool?: string | undefined;
+    /** Iteration count so far. */
+    iterations: number;
+    /** Tool calls so far. */
+    toolCalls: number;
+    /** Cumulative cost in USD for this agent, when known. */
+    costUsd?: number | undefined;
+    /** Cumulative input tokens, when known. */
+    tokensIn?: number | undefined;
+    /** Cumulative output tokens, when known. */
+    tokensOut?: number | undefined;
+    /** Context window fill 0–100 (may exceed 100 when over limit), when known. */
+    ctxPct?: number | undefined;
+    /** Model id this agent is running on, when known. */
+    model?: string | undefined;
+    /**
+     * Tail of the assistant text currently being streamed (capped, throttled).
+     * Lets a cross-process watcher see the response form in near-real-time
+     * instead of waiting for the completed turn to land in the session log.
+     */
+    partialText?: string | undefined;
+    /** UTC ISO timestamp of last activity. */
+    lastActivityAt: string;
+}
+type SessionLiveStatus = 'active' | 'idle' | 'closing' | 'stale';
+interface SessionRegistryEntry {
+    sessionId: string;
+    projectSlug: string;
+    projectRoot: string;
+    projectName: string;
+    workingDir: string;
+    /**
+     * Which surface owns this session — `'tui'` / `'webui'` / `'cli'` (one-shot or
+     * REPL). Lets cross-process consumers (e.g. the WebUI Fleet HQ office map) label
+     * each live session by client kind. Optional for back-compat with older entries.
+     */
+    clientType?: 'tui' | 'webui' | 'cli' | 'repl' | string | undefined;
+    /** Current git branch, if the project is a git repo. Detected at registration. */
+    gitBranch?: string | undefined;
+    status: SessionLiveStatus;
+    pid: number;
+    /** UTC ISO */
+    startedAt: string;
+    /** UTC ISO — updated on every heartbeat */
+    lastHeartbeatAt: string;
+    /** Count of tracked agents */
+    agentCount: number;
+    agents: AgentEntry[];
+}
+declare class SessionRegistry {
+    private readonly filePath;
+    private heartbeatTimer;
+    private currentSessionId;
+    /**
+     * Last full entry this process registered. Kept so the heartbeat can
+     * re-create our entry if it ever goes missing — e.g. our initial register()
+     * write was dropped (a wedged lock), the file was reset, or we were pruned.
+     */
+    private lastEntry;
+    constructor(globalRoot: string);
+    /**
+     * Register the current session. Call once on session start.
+     * Starts the heartbeat timer.
+     */
+    register(entry: Omit<SessionRegistryEntry, 'status' | 'lastHeartbeatAt' | 'agentCount' | 'agents'> & {
+        agents?: AgentEntry[] | undefined;
+    }): Promise<void>;
+    /**
+     * Update agent status for the current session. Call on every
+     * significant status change (agent start, tool start, user wait, error).
+     */
+    updateAgents(agents: AgentEntry[]): Promise<void>;
+    /**
+     * Mark the session as closing. Called during shutdown.
+     * Stops the heartbeat timer.
+     */
+    markClosing(): Promise<void>;
+    /**
+     * Remove the current session from the registry. Call on clean exit.
+     */
+    unregister(): Promise<void>;
+    /**
+     * List all non-stale sessions. Prunes stale entries automatically.
+     */
+    list(): Promise<SessionRegistryEntry[]>;
+    /**
+     * Get a single session entry by ID. Returns undefined if not found or stale.
+     */
+    get(sessionId: string): Promise<SessionRegistryEntry | undefined>;
+    /**
+     * List all sessions for a specific project (by slug).
+     */
+    listByProject(projectSlug: string): Promise<SessionRegistryEntry[]>;
+    /**
+     * Return the registry file path. Useful for WebUI to watch/read.
+     */
+    get registryPath(): string;
+    private heartbeat;
+    private readAndPrune;
+    private atomicUpdate;
+    /**
+     * Break a contended lock if it is stale: the recorded owner pid is no longer
+     * alive, or the lock is older than {@link STALE_LOCK_MS}. Returns true when the
+     * lock was removed (caller should retry acquisition). Best-effort and
+     * race-tolerant — a fresh lock (age ~0, live owner) is never broken, so the
+     * common concurrent case self-heals on the next heartbeat.
+     */
+    private breakStaleLock;
+    private writeAtomicLocked;
+    /** Legacy write without lock — used by heartbeat for performance. */
+    private writeAtomic;
+    private writeAtomicFile;
+    private pruneStaleTempFiles;
+}
+declare function getSessionRegistry(globalRoot?: string): SessionRegistry;
+declare function hasSessionRegistry(): boolean;
+
+export { type AgentEntry as A, type SessionLiveStatus as S, type AgentLiveStatus as a, SessionRegistry as b, type SessionRegistryEntry as c, getSessionRegistry as g, hasSessionRegistry as h };

package/dist/storage/index.d.ts

@@ -1,22 +1,24 @@
-import { M as MemoryBackend, j as FileMemoryBackendOptions } from '../todos-checkpoint-Bk2uP7Ex.js';
-export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as mutatePlan, J as parseEntries, K as removePlanItem, L as runConfigMigrations, N as savePlan, O as saveTodosCheckpoint, U as setPlanItemStatus } from '../todos-checkpoint-Bk2uP7Ex.js';
-import { M as MemoryScope, b as MemoryEntry, c as MemoryStore, E as EventBus } from '../events-Bs2fmldo.js';
-import { i as AgentExtension, k as AfterRunHook } from '../index-kidebiDh.js';
-import { P as Provider, c as Request, d as Response, S as SessionEvent, D as CompletedWorkEvidence } from '../tool-BkOgs_KL.js';
-import { P as ProviderConfig, $ as SyncCategory, l as SyncConfig } from '../config-Cr3312zc.js';
+import { M as MemoryBackend, j as FileMemoryBackendOptions } from '../todos-checkpoint-B1QVkoa8.js';
+export { A as AbandonedSession, a as AttachmentStoreOptions, C as ConfigLoaderOptions, b as ConfigMigration, c as ConfigMigrationError, d as ConfigSource, D as DEFAULT_CONFIG_MIGRATIONS, e as DefaultAttachmentStore, f as DefaultConfigLoader, g as DefaultConfigStore, h as DefaultMemoryStore, i as DefaultSessionStore, F as FileMemoryBackend, k as MemoryStoreOptions, l as MigrationContext, m as MigrationResult, P as PersistedQueueItem, n as PlanFile, o as PlanItem, p as PlanTemplate, Q as QueueStore, R as RecoveryLock, q as RecoveryLockOptions, S as SessionAnalyzer, r as SessionStoreOptions, T as TodosCheckpointFile, s as addPlanItem, t as attachPlanCheckpoint, u as attachTodosCheckpoint, v as clearPlan, w as deriveTodosFromPlanItem, x as emptyPlan, y as formatPlan, z as formatPlanTemplates, B as getPlanTemplate, E as listPlanTemplates, G as loadPlan, H as loadTodosCheckpoint, I as mutatePlan, J as parseEntries, K as removePlanItem, L as runConfigMigrations, N as savePlan, O as saveTodosCheckpoint, U as setPlanItemStatus } from '../todos-checkpoint-B1QVkoa8.js';
+import { M as MemoryScope, b as MemoryEntry, c as MemoryStore, E as EventBus } from '../events-C5hLU0AT.js';
+import { i as AgentExtension, k as AfterRunHook } from '../index-C1E-_71T.js';
+import { P as Provider, c as Request, e as Response, S as SessionEvent, D as CompletedWorkEvidence } from '../tool-LVSLiE1s.js';
+import { P as ProviderConfig, a2 as SyncCategory, j as SyncConfig } from '../config-CN-vdDEI.js';
 import { S as SecretVault } from '../secret-vault-BAKpgFw_.js';
-export { D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from '../session-reader-Hk0WbNm9.js';
+export { D as DefaultSessionReader, f as DefaultSessionReaderOptions, S as SessionReader } from '../session-reader-B-Fi9L6I.js';
+import { b as SessionRegistry, A as AgentEntry } from '../session-registry-Dvg7i_IA.js';
+export { a as AgentLiveStatus, S as SessionLiveStatus, c as SessionRegistryEntry, g as getSessionRegistry, h as hasSessionRegistry } from '../session-registry-Dvg7i_IA.js';
 import { S as SessionRewinder, C as CheckpointInfo, a as RewindResultExtended } from '../session-rewinder-C9HnMkhP.js';
 import { T as TaskItem } from '../task-format-vGOIftmK.js';
 export { a as DirectorStateCheckpoint, D as DirectorStateSnapshot, b as DirectorSubagentState, c as DirectorTaskState, l as loadDirectorState } from '../director-state-BfeCUbmk.js';
-export { G as GoalFile, J as JournalEntry, M as MAX_JOURNAL_ENTRIES, a as MAX_PROGRESS_HISTORY, P as ProgressSnapshot, b as appendJournal, e as emptyGoal, f as formatGoal, g as goalFilePath, l as loadGoal, p as parseProgressFromText, r as recordProgress, s as saveGoal, c as setProgress, d as summarizeUsage } from '../goal-store-C4F6DjC0.js';
+export { G as GoalFile, J as JournalEntry, M as MAX_JOURNAL_ENTRIES, a as MAX_PROGRESS_HISTORY, P as ProgressSnapshot, b as appendJournal, e as emptyGoal, f as formatGoal, g as goalFilePath, l as loadGoal, p as parseProgressFromText, r as recordProgress, s as saveGoal, c as setProgress, d as summarizeUsage } from '../goal-store-BLGZq16t.js';
 import { a as PromptEntry } from '../prompt-DLd35n4Q.js';
-import { W as WstackPaths } from '../wstack-paths-CMl_cYgq.js';
-export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from '../session-event-bridge-CqdiGnfU.js';
-import '../secret-scrubber-3MHDDAtm.js';
-import '../permission-Dx6dIqS2.js';
+import { W as WstackPaths } from '../wstack-paths-C3K40Qst.js';
+import { S as SecretScrubber } from '../secret-scrubber-3MHDDAtm.js';
+export { A as AuditLevel, C as CORE_RECONSTRUCT_EVENTS, a as STANDARD_AUDIT_EVENTS, S as SessionEventBridge, b as SessionEventBridgeOptions, c as SessionSamplingOptions, T as ToolProgressSamplingOptions, d as createSessionEventBridge, r as resolveAuditLevel, e as resolveSessionLoggingConfig } from '../session-event-bridge-vA2fLV58.js';
+import '../permission-B6YAtNFz.js';
 import '../logger-B63L5bTg.js';
-import '../pipeline-BwAP21_4.js';
+import '../pipeline-E7_jqGyV.js';
 import '../mailbox-types-BGZWrYTJ.js';
 import '../observability-D-HZN_mF.js';
 import '../task-graph-u1q9Jkyk.js';
@@ -667,134 +669,6 @@ declare class ToolAuditLog {
     private enqueue;
 }
 
-/** Live status of a single agent within a session. */
-type AgentLiveStatus = 'idle' | 'running' | 'streaming' | 'waiting_user' | 'error';
-interface AgentEntry {
-    /** Unique agent id (ULID or UUID). */
-    id: string;
-    /** Human-readable label (e.g. "leader", "bug-hunter #1"). */
-    name: string;
-    /** UTC ISO timestamp when this agent/run started, when known. */
-    startedAt?: string | undefined;
-    status: AgentLiveStatus;
-    /** Current tool name if running, undefined otherwise. */
-    currentTool?: string | undefined;
-    /** Iteration count so far. */
-    iterations: number;
-    /** Tool calls so far. */
-    toolCalls: number;
-    /** Cumulative cost in USD for this agent, when known. */
-    costUsd?: number | undefined;
-    /** Cumulative input tokens, when known. */
-    tokensIn?: number | undefined;
-    /** Cumulative output tokens, when known. */
-    tokensOut?: number | undefined;
-    /** Context window fill 0–100 (may exceed 100 when over limit), when known. */
-    ctxPct?: number | undefined;
-    /** Model id this agent is running on, when known. */
-    model?: string | undefined;
-    /**
-     * Tail of the assistant text currently being streamed (capped, throttled).
-     * Lets a cross-process watcher see the response form in near-real-time
-     * instead of waiting for the completed turn to land in the session log.
-     */
-    partialText?: string | undefined;
-    /** UTC ISO timestamp of last activity. */
-    lastActivityAt: string;
-}
-type SessionLiveStatus = 'active' | 'idle' | 'closing' | 'stale';
-interface SessionRegistryEntry {
-    sessionId: string;
-    projectSlug: string;
-    projectRoot: string;
-    projectName: string;
-    workingDir: string;
-    /**
-     * Which surface owns this session — `'tui'` / `'webui'` / `'cli'` (one-shot or
-     * REPL). Lets cross-process consumers (e.g. the WebUI Fleet HQ office map) label
-     * each live session by client kind. Optional for back-compat with older entries.
-     */
-    clientType?: 'tui' | 'webui' | 'cli' | 'repl' | string | undefined;
-    /** Current git branch, if the project is a git repo. Detected at registration. */
-    gitBranch?: string | undefined;
-    status: SessionLiveStatus;
-    pid: number;
-    /** UTC ISO */
-    startedAt: string;
-    /** UTC ISO — updated on every heartbeat */
-    lastHeartbeatAt: string;
-    /** Count of tracked agents */
-    agentCount: number;
-    agents: AgentEntry[];
-}
-declare class SessionRegistry {
-    private readonly filePath;
-    private heartbeatTimer;
-    private currentSessionId;
-    /**
-     * Last full entry this process registered. Kept so the heartbeat can
-     * re-create our entry if it ever goes missing — e.g. our initial register()
-     * write was dropped (a wedged lock), the file was reset, or we were pruned.
-     */
-    private lastEntry;
-    constructor(globalRoot: string);
-    /**
-     * Register the current session. Call once on session start.
-     * Starts the heartbeat timer.
-     */
-    register(entry: Omit<SessionRegistryEntry, 'status' | 'lastHeartbeatAt' | 'agentCount' | 'agents'> & {
-        agents?: AgentEntry[] | undefined;
-    }): Promise<void>;
-    /**
-     * Update agent status for the current session. Call on every
-     * significant status change (agent start, tool start, user wait, error).
-     */
-    updateAgents(agents: AgentEntry[]): Promise<void>;
-    /**
-     * Mark the session as closing. Called during shutdown.
-     * Stops the heartbeat timer.
-     */
-    markClosing(): Promise<void>;
-    /**
-     * Remove the current session from the registry. Call on clean exit.
-     */
-    unregister(): Promise<void>;
-    /**
-     * List all non-stale sessions. Prunes stale entries automatically.
-     */
-    list(): Promise<SessionRegistryEntry[]>;
-    /**
-     * Get a single session entry by ID. Returns undefined if not found or stale.
-     */
-    get(sessionId: string): Promise<SessionRegistryEntry | undefined>;
-    /**
-     * List all sessions for a specific project (by slug).
-     */
-    listByProject(projectSlug: string): Promise<SessionRegistryEntry[]>;
-    /**
-     * Return the registry file path. Useful for WebUI to watch/read.
-     */
-    get registryPath(): string;
-    private heartbeat;
-    private readAndPrune;
-    private atomicUpdate;
-    /**
-     * Break a contended lock if it is stale: the recorded owner pid is no longer
-     * alive, or the lock is older than {@link STALE_LOCK_MS}. Returns true when the
-     * lock was removed (caller should retry acquisition). Best-effort and
-     * race-tolerant — a fresh lock (age ~0, live owner) is never broken, so the
-     * common concurrent case self-heals on the next heartbeat.
-     */
-    private breakStaleLock;
-    private writeAtomicLocked;
-    /** Legacy write without lock — used by heartbeat for performance. */
-    private writeAtomic;
-    private writeAtomicFile;
-    private pruneStaleTempFiles;
-}
-declare function getSessionRegistry(globalRoot?: string): SessionRegistry;
-declare function hasSessionRegistry(): boolean;
-
 /**
  * AgentStatusTracker — subscribes to EventBus events and keeps the
  * SessionRegistry updated with live agent status.
@@ -1019,6 +893,61 @@ declare class PromptUsageStore {
     }[]>;
 }
 
+declare const INPUT_HISTORY_DEFAULT_MAX = 100;
+/**
+ * Per-project TUI prompt input history.
+ *
+ * Backed by a single JSON file at `~/.wrongstack/projects/<slug>/input-
+ * history.json`. Entries are newest-first, capped at `maxEntries`. Before
+ * any entry is written to disk it is passed through a `SecretScrubber` and
+ * dropped if it still contains a redacted marker — leaking a pasted API
+ * key into a history file would be a real incident, so the scrubber is
+ * mandatory, not optional.
+ *
+ * The store is intentionally small and synchronous-ish (load once at TUI
+ * boot, save debounced on change). It mirrors PromptUsageStore's shape so
+ * the two read as a family.
+ */
+declare class InputHistoryStore {
+    private readonly file;
+    private readonly scrubber;
+    private readonly maxEntries;
+    /**
+     * @param file Absolute path to the per-project input-history.json.
+     * @param scrubber SecretScrubber used to filter secrets before write.
+     * @param maxEntries Cap on the number of entries persisted. Default 100.
+     */
+    constructor(file: string, scrubber: SecretScrubber, maxEntries?: number);
+    /**
+     * Load the persisted entries. Missing or corrupt file → empty list
+     * (never throws — history is best-effort).
+     */
+    load(): Promise<string[]>;
+    /**
+     * Persist `entries` to disk after scrubbing each one. Entries that still
+     * contain a redaction marker AFTER scrubbing are dropped — a half-scrubbed
+     * prompt like "export API_KEY=***REDACTED***" is useless as history and
+     * keeping it risks confusing the agent. Dedup is the caller's job (the
+     * reducer already dedups); this method only scrubs, caps, and writes.
+     */
+    save(entries: string[]): Promise<void>;
+    /** Truncate the file to an empty entry list (used by /clear). */
+    clear(): Promise<void>;
+    /**
+     * Run each entry through the scrubber and drop any that still contain a
+     * redaction marker. Internal so the test suite can pin the policy.
+     */
+    private scrubAndFilter;
+    /**
+     * Heuristic: did the scrubber actually redact anything? DefaultSecretScrubber
+     * replaces matches with "***REDACTED***", so a residual marker means a secret
+     * was detected. Subclasses of SecretScrubber that use a different sentinel
+     * can be accommodated by widening this check in the future; for now the
+     * marker check covers the shipped scrubber.
+     */
+    private looksRedacted;
+}
+
 declare const ALL_SYNC_CATEGORIES: SyncCategory[];
 interface SyncResult {
     ok: boolean;
@@ -1061,4 +990,4 @@ declare class CloudSync {
     private walkDir;
 }
 
-export { ALL_SYNC_CATEGORIES, type AgentEntry, type AgentLiveStatus, AgentStatusTracker, type AgentStatusTrackerOptions, type Annotation, AnnotationsStore, type AnnotationsStoreOptions, type AuditEntry, CloudSync, type CompletedWorkCheckpointFile, type ConsolidationOp, DefaultPromptStore, DefaultSessionRewinder, FileMemoryBackendOptions, FleetNotifier, type FleetNotifierOptions, GraphMemoryBackend, type GraphMemoryBackendOptions, MemoryBackend, type MemoryConsolidatorOptions, PromptEntry, type PromptStore, type PromptUsage, PromptUsageStore, type ProviderConfigSnapshot, type RecoveryPlan, type ReplayEntry, ReplayLogStore, type ReplayLogStoreOptions, type SessionLiveStatus, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, type SessionRegistryEntry, type SessionRewinderOptions, type StaleSession, SyncCategory, SyncConfig, type SyncResult, type TaskFile, ToolAuditLog, type ToolAuditLogOptions, type VerifyResult, type WatchProviderConfigOptions, emptyTaskFile, generateSessionId, getSessionRegistry, hasSessionRegistry, loadCompletedWorkCheckpoint, loadTasks, migratePromptEntry, mutateTasks, promptChecksum, sanitizeModel, saveCompletedWorkCheckpoint, saveTasks, watchProviderConfig };
+export { ALL_SYNC_CATEGORIES, AgentEntry, AgentStatusTracker, type AgentStatusTrackerOptions, type Annotation, AnnotationsStore, type AnnotationsStoreOptions, type AuditEntry, CloudSync, type CompletedWorkCheckpointFile, type ConsolidationOp, DefaultPromptStore, DefaultSessionRewinder, FileMemoryBackendOptions, FleetNotifier, type FleetNotifierOptions, GraphMemoryBackend, type GraphMemoryBackendOptions, INPUT_HISTORY_DEFAULT_MAX, InputHistoryStore, MemoryBackend, type MemoryConsolidatorOptions, PromptEntry, type PromptStore, type PromptUsage, PromptUsageStore, type ProviderConfigSnapshot, type RecoveryPlan, type ReplayEntry, ReplayLogStore, type ReplayLogStoreOptions, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, type SessionRewinderOptions, type StaleSession, SyncCategory, SyncConfig, type SyncResult, type TaskFile, ToolAuditLog, type ToolAuditLogOptions, type VerifyResult, type WatchProviderConfigOptions, emptyTaskFile, generateSessionId, loadCompletedWorkCheckpoint, loadTasks, migratePromptEntry, mutateTasks, promptChecksum, sanitizeModel, saveCompletedWorkCheckpoint, saveTasks, watchProviderConfig };

package/dist/storage/index.js

@@ -372,6 +372,7 @@ function resolveWstackPaths(opts) {
     projectHash: hash,
     projectSlug: slug,
     projectGoal: path2.join(projectDir, "goal.json"),
+    projectInputHistory: path2.join(projectDir, "input-history.json"),
     projectSpecs: path2.join(projectDir, "specs"),
     projectTaskGraphs: path2.join(projectDir, "task-graphs"),
     projectSddSession: path2.join(projectDir, "sdd-session.json"),
@@ -1283,6 +1284,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
   dir;
   events;
   secretScrubber;
+  isSessionInUse;
   /**
    * In-memory cache for load() results, keyed by session ID. The cache is
    * invalidated when the file's mtimeMs or size changes (indicating the
@@ -1302,6 +1304,7 @@ var DefaultSessionStore = class _DefaultSessionStore {
     this.dir = opts.dir;
     this.events = opts.events;
     this.secretScrubber = opts.secretScrubber;
+    this.isSessionInUse = opts.isSessionInUse;
   }
   /**
    * Clear the load() cache. Useful for testing or when the caller knows
@@ -2193,19 +2196,74 @@ var DefaultSessionStore = class _DefaultSessionStore {
     });
     await this.writeTombstone(id);
   }
+  /**
+   * Read the session id currently marked active in `active.json`, or `null`
+   * when the lock is absent/unreadable. Shared by {@link delete} and
+   * {@link prune} to avoid clobbering a session a live process is writing to.
+   */
+  async readActiveSessionId() {
+    try {
+      const raw = await fsp2.readFile(path2.join(this.dir, "active.json"), "utf8");
+      const active = JSON.parse(raw);
+      return active.sessionId ?? null;
+    } catch {
+      return null;
+    }
+  }
   async delete(id) {
+    const activeId = await this.readActiveSessionId();
+    if (activeId && id === activeId) {
+      throw new Error(
+        `Session ${id} is currently active in this project and cannot be deleted. Resume or start another session first.`
+      );
+    }
+    if (this.isSessionInUse) {
+      const reason = await this.isSessionInUse(id);
+      if (reason) {
+        throw new Error(`Session ${id} is in use (${reason}) and cannot be deleted.`);
+      }
+    }
     await this.deleteSession(id);
   }
+  async rename(id, name) {
+    const trimmed = name.trim();
+    const manifest = this.sessionPath(id, ".summary.json");
+    const jsonlPath = this.sessionPath(id, ".jsonl");
+    try {
+      await fsp2.stat(jsonlPath);
+    } catch (err) {
+      const code = err?.code;
+      if (code === "ENOENT") {
+        throw new Error(`Session not found: ${id}`);
+      }
+      throw err;
+    }
+    const summary = await this.summaryFor(id);
+    const { name: _drop, ...rest } = summary;
+    const updated = trimmed ? { ...rest, name: trimmed } : rest;
+    const t0 = Date.now();
+    let outcome = "success";
+    let errorMsg;
+    try {
+      await atomicWrite(manifest, JSON.stringify(updated), { mode: 384 });
+    } catch (err) {
+      outcome = "failure";
+      errorMsg = toErrorMessage(err);
+      this.emitError(id, manifest, "rename", errorMsg, false);
+      throw err;
+    } finally {
+      this.emitWrite(id, manifest, "close", outcome, Date.now() - t0, void 0, errorMsg);
+    }
+    await this.appendToIndex(updated);
+    this.invalidateShardManifestBySessionId(id);
+    this._indexCache = null;
+    this.clearLoadCache(id);
+    return updated;
+  }
   async prune(maxAgeDays = 30) {
     const cutoff = Date.now() - maxAgeDays * 864e5;
     let deleted = 0;
-    let activeSessionId = null;
-    try {
-      const raw = await fsp2.readFile(path2.join(this.dir, "active.json"), "utf8");
-      const active = JSON.parse(raw);
-      activeSessionId = active.sessionId ?? null;
-    } catch {
-    }
+    const activeSessionId = await this.readActiveSessionId();
     const isPrunableJsonl = (name) => name.endsWith(".jsonl") && name !== "_index.jsonl" && name !== "_mailbox.jsonl" && !name.endsWith(".replay.jsonl") && !name.endsWith(".audit.jsonl");
     const pruneFile = async (dir, name, prefix) => {
       const jsonlPath = path2.join(dir, name);
@@ -3937,14 +3995,21 @@ function simpleHash(s) {
   }
   return Math.abs(h).toString(36);
 }
+var textCache = /* @__PURE__ */ new Map();
+var rootCandidates;
 function readBundledInstructionText(relativePath) {
+  const cached = textCache.get(relativePath);
+  if (cached !== void 0) return cached;
+  let resolved = "";
   for (const root of instructionRootCandidates()) {
     try {
-      return readFileSync(path2.join(root, relativePath), "utf8").trimEnd();
+      resolved = readFileSync(path2.join(root, relativePath), "utf8").trimEnd();
+      break;
     } catch {
     }
   }
-  return "";
+  textCache.set(relativePath, resolved);
+  return resolved;
 }
 function renderInstructionTemplate(template, values) {
   return template.replace(
@@ -3953,13 +4018,15 @@ function renderInstructionTemplate(template, values) {
   );
 }
 function instructionRootCandidates() {
+  if (rootCandidates !== void 0) return rootCandidates;
   const here = path2.dirname(fileURLToPath(import.meta.url));
   const candidates = [
     path2.resolve(here, "../../instructions"),
     path2.resolve(here, "../instructions"),
     path2.resolve(here, "instructions")
   ];
-  return candidates.sort((a, b) => Number(!isDirectory(a)) - Number(!isDirectory(b)));
+  rootCandidates = candidates.sort((a, b) => Number(!isDirectory(a)) - Number(!isDirectory(b)));
+  return rootCandidates;
 }
 function isDirectory(candidate) {
   try {
@@ -4594,7 +4661,11 @@ var KNOWN_DENIED_IN_PROJECT = [
   { key: "yolo", reason: "Disables all permission confirmation prompts." },
   { key: "extensions", reason: "Per-plugin config can carry command/credential fields." },
   { key: "hq", reason: "Carries HQ client token credential and endpoint URL." },
-  { key: "acp", reason: "Per-agent ACP command/args/env override \u2192 arbitrary command exec (RCE)." }
+  { key: "acp", reason: "Per-agent ACP command/args/env override \u2192 arbitrary command exec (RCE)." },
+  {
+    key: "fleet",
+    reason: "Fleet supervision knobs: a repo-committed config could enable autonomous subagent spawning/steering/termination and mailbox traffic on the victim machine."
+  }
 ];
 var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "version",
@@ -4636,7 +4707,8 @@ var KNOWN_CONFIG_TOP_LEVEL_KEYS = /* @__PURE__ */ new Set([
   "hq",
   "sync",
   "extensions",
-  "acp"
+  "acp",
+  "fleet"
 ]);
 function assertInProjectAllowListComplete() {
   const missingFromBoth = [];
@@ -9236,6 +9308,82 @@ var PromptUsageStore = class {
     ).slice(0, limit);
   }
 };
+var INPUT_HISTORY_DEFAULT_MAX = 100;
+var InputHistoryStore = class {
+  /**
+   * @param file Absolute path to the per-project input-history.json.
+   * @param scrubber SecretScrubber used to filter secrets before write.
+   * @param maxEntries Cap on the number of entries persisted. Default 100.
+   */
+  constructor(file, scrubber, maxEntries = INPUT_HISTORY_DEFAULT_MAX) {
+    this.file = file;
+    this.scrubber = scrubber;
+    this.maxEntries = maxEntries;
+  }
+  file;
+  scrubber;
+  maxEntries;
+  /**
+   * Load the persisted entries. Missing or corrupt file → empty list
+   * (never throws — history is best-effort).
+   */
+  async load() {
+    try {
+      const raw = JSON.parse(await fsp2.readFile(this.file, "utf8"));
+      if (raw && typeof raw === "object" && Array.isArray(raw.entries) && raw.entries.every((e) => typeof e === "string")) {
+        return raw.entries.slice(0, this.maxEntries);
+      }
+    } catch {
+    }
+    return [];
+  }
+  /**
+   * Persist `entries` to disk after scrubbing each one. Entries that still
+   * contain a redaction marker AFTER scrubbing are dropped — a half-scrubbed
+   * prompt like "export API_KEY=***REDACTED***" is useless as history and
+   * keeping it risks confusing the agent. Dedup is the caller's job (the
+   * reducer already dedups); this method only scrubs, caps, and writes.
+   */
+  async save(entries) {
+    const cleaned = this.scrubAndFilter(entries);
+    await ensureDir(path2.dirname(this.file));
+    const payload = {
+      version: 1,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      entries: cleaned
+    };
+    await atomicWrite(this.file, JSON.stringify(payload, null, 2));
+  }
+  /** Truncate the file to an empty entry list (used by /clear). */
+  async clear() {
+    await ensureDir(path2.dirname(this.file));
+    const payload = { version: 1, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), entries: [] };
+    await atomicWrite(this.file, JSON.stringify(payload, null, 2));
+  }
+  /**
+   * Run each entry through the scrubber and drop any that still contain a
+   * redaction marker. Internal so the test suite can pin the policy.
+   */
+  scrubAndFilter(entries) {
+    const out = [];
+    for (const entry of entries) {
+      const scrubbed = this.scrubber.scrub(entry);
+      if (this.looksRedacted(scrubbed)) continue;
+      out.push(scrubbed);
+    }
+    return out.slice(0, this.maxEntries);
+  }
+  /**
+   * Heuristic: did the scrubber actually redact anything? DefaultSecretScrubber
+   * replaces matches with "***REDACTED***", so a residual marker means a secret
+   * was detected. Subclasses of SecretScrubber that use a different sentinel
+   * can be accommodated by widening this check in the future; for now the
+   * marker check covers the shipped scrubber.
+   */
+  looksRedacted(text) {
+    return text.includes("***REDACTED***");
+  }
+};
 var ALL_SYNC_CATEGORIES = ["settings", "skills", "prompts", "memory", "history"];
 var CloudSync = class {
   constructor(paths, getConfig, setConfig) {
@@ -9691,6 +9839,6 @@ function resolveSessionLoggingConfig(cfg) {
   };
 }
 
-export { ALL_SYNC_CATEGORIES, AgentStatusTracker, AnnotationsStore, CORE_RECONSTRUCT_EVENTS, CloudSync, ConfigMigrationError, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultMemoryStore, DefaultPromptStore, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DirectorStateCheckpoint, FileMemoryBackend, FleetNotifier, GraphMemoryBackend, MAX_JOURNAL_ENTRIES, MAX_PROGRESS_HISTORY, PromptUsageStore, QueueStore, RecoveryLock, ReplayLogStore, STANDARD_AUDIT_EVENTS, SessionAnalyzer, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, ToolAuditLog, addPlanItem, appendJournal, attachPlanCheckpoint, attachTodosCheckpoint, clearPlan, createSessionEventBridge, deriveTodosFromPlanItem, emptyGoal, emptyPlan, emptyTaskFile, formatGoal, formatPlan, formatPlanTemplates, generateSessionId, getPlanTemplate, getSessionRegistry, goalFilePath, hasSessionRegistry, listPlanTemplates, loadCompletedWorkCheckpoint, loadDirectorState, loadGoal, loadPlan, loadTasks, loadTodosCheckpoint, migratePromptEntry, mutatePlan, mutateTasks, parseEntries, parseProgressFromText, promptChecksum, recordProgress, removePlanItem, resolveAuditLevel, resolveSessionLoggingConfig, runConfigMigrations, sanitizeModel, saveCompletedWorkCheckpoint, saveGoal, savePlan, saveTasks, saveTodosCheckpoint, setPlanItemStatus, setProgress, summarizeUsage, watchProviderConfig };
+export { ALL_SYNC_CATEGORIES, AgentStatusTracker, AnnotationsStore, CORE_RECONSTRUCT_EVENTS, CloudSync, ConfigMigrationError, DEFAULT_CONFIG_MIGRATIONS, DefaultAttachmentStore, DefaultConfigLoader, DefaultConfigStore, DefaultMemoryStore, DefaultPromptStore, DefaultSessionReader, DefaultSessionRewinder, DefaultSessionStore, DirectorStateCheckpoint, FileMemoryBackend, FleetNotifier, GraphMemoryBackend, INPUT_HISTORY_DEFAULT_MAX, InputHistoryStore, MAX_JOURNAL_ENTRIES, MAX_PROGRESS_HISTORY, PromptUsageStore, QueueStore, RecoveryLock, ReplayLogStore, STANDARD_AUDIT_EVENTS, SessionAnalyzer, SessionMemoryConsolidator, SessionRecovery, SessionRegistry, ToolAuditLog, addPlanItem, appendJournal, attachPlanCheckpoint, attachTodosCheckpoint, clearPlan, createSessionEventBridge, deriveTodosFromPlanItem, emptyGoal, emptyPlan, emptyTaskFile, formatGoal, formatPlan, formatPlanTemplates, generateSessionId, getPlanTemplate, getSessionRegistry, goalFilePath, hasSessionRegistry, listPlanTemplates, loadCompletedWorkCheckpoint, loadDirectorState, loadGoal, loadPlan, loadTasks, loadTodosCheckpoint, migratePromptEntry, mutatePlan, mutateTasks, parseEntries, parseProgressFromText, promptChecksum, recordProgress, removePlanItem, resolveAuditLevel, resolveSessionLoggingConfig, runConfigMigrations, sanitizeModel, saveCompletedWorkCheckpoint, saveGoal, savePlan, saveTasks, saveTodosCheckpoint, setPlanItemStatus, setProgress, summarizeUsage, watchProviderConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map