@wrongstack/core 0.283.0 → 0.284.0

package/dist/{index-BhCteHAF.d.ts → index--Gm41aBJ.d.ts}

@@ -1,10 +1,10 @@
-import { s as TextBlock, g as Tool, z as ToolUseBlock, d as Context, A as ToolResultBlock, n as RiskTier, c as Request, e as Response, P as Provider, i as ContentBlock, aq as WrongStackError } from './tool-LVSLiE1s.js';
+import { s as TextBlock, g as Tool, B as ToolUseBlock, d as Context, D as ToolResultBlock, n as RiskTier, c as Request, e as Response, P as Provider, i as ContentBlock, ay as WrongStackError } from './tool-BNlnIJvo.js';
 import { L as Logger } from './logger-B63L5bTg.js';
-import { B as BuildContext, H as HookRegistry, a as Renderer, P as Pipeline, C as Container } from './pipeline-ixSFe5jg.js';
-import { a as PermissionDecision, P as PermissionPolicy } from './permission-B6YAtNFz.js';
-import { a3 as ToolDescriptionMode, a4 as ToolDescriptionModeConfig, H as HookEvent, a5 as ToolResultRenderModeConfig, W as WireFamily, P as ProviderConfig } from './config-DkCbA3Bw.js';
+import { B as BuildContext, H as HookRegistry, a as Renderer, P as Pipeline, C as Container } from './pipeline-DGDyIohT.js';
+import { a as PermissionDecision, P as PermissionPolicy } from './permission-ByDKXEcG.js';
+import { ac as ToolDescriptionMode, ad as ToolDescriptionModeConfig, H as HookEvent, ae as ToolResultRenderModeConfig, W as WireFamily, P as ProviderConfig, $ as LoopDetectionConfig } from './config-MRqn1V-u.js';
 import { T as Tracer } from './observability-D-HZN_mF.js';
-import { E as EventBus } from './events-KmxSmvho.js';
+import { E as EventBus } from './events-Bgnh43r9.js';
 import { S as SecretScrubber } from './secret-scrubber-3MHDDAtm.js';
 
 /**
@@ -180,17 +180,20 @@ declare class ToolRegistry {
 /** Minimal run-state the runner reads. `Context` structurally satisfies it. */
 interface HookRunEnv {
     cwd: string;
+    signal?: AbortSignal | undefined;
 }
 interface HookRunnerOptions {
     registry: HookRegistry;
     logger?: Logger | undefined;
     /**
-     * When false, shell hooks are skipped entirely (in-process hooks still run).
-     * Set by the boot path under `--bare` / `--no-hooks` / untrusted sessions.
+     * When false, ordinary hooks are skipped across every transport;
+     * `policy: true` enforcement hooks still run.
      */
+    allowNonPolicy?: boolean | undefined;
+    /** @deprecated Use `allowNonPolicy`; retained for API compatibility. */
     allowShell?: boolean | undefined;
     /** Resolves the active session id for the `HookInput` payload. */
-    sessionId?: ((() => string)) | undefined;
+    sessionId?: (() => string) | undefined;
 }
 interface PreToolUseResult {
     block?: boolean | undefined;
@@ -206,8 +209,8 @@ interface PromptResult {
 /**
  * Drives the registered hooks at each lifecycle phase. Pure orchestration —
  * the executor / pipeline / agent extension call the matching method and act on
- * the returned decision. Hook failures are caught and logged; they never abort
- * the agent.
+ * the returned decision. Fail-open hooks are skipped on failure; fail-closed
+ * policy hooks turn failures into explicit denials without prompting the user.
  */
 declare class HookRunner {
     private readonly opts;
@@ -231,6 +234,8 @@ declare class HookRunner {
     private base;
     private matching;
     private invoke;
+    private invokeInProcess;
+    private failureOutcome;
     private collectContext;
 }
 
@@ -630,6 +635,16 @@ interface AgentInit {
     tracer?: Tracer | undefined;
     extensions?: ExtensionRegistry | undefined;
     toolExecutor: ToolExecutorLike;
+    /** Loop-detector tuning (`tools.loopDetection`). Omitted fields use defaults. */
+    loopDetection?: LoopDetectionConfig | undefined;
+}
+/** Fully-resolved loop-detector settings (defaults applied, bounds clamped). */
+interface ResolvedLoopDetectionConfig {
+    mode: 'steer-then-cut' | 'cut' | 'off';
+    steerThreshold: number;
+    cutThreshold: number;
+    windowSize: number;
+    callRepeatThreshold: number;
 }
 interface AgentPipelines {
     request: Pipeline<Request>;
@@ -653,4 +668,4 @@ interface ToolCallPipelinePayload {
 }
 declare function createDefaultPipelines(): AgentPipelines;
 
-export { type AgentPipelines as A, type BeforeIterationHook as B, DEFAULT_MAX_ITERATIONS as D, ExtensionRegistry as E, type HookRunEnv as H, type OnErrorHook as O, ProviderRegistry as P, type RunResult as R, type SystemPromptContributor as S, type ToolCallPipelinePayload as T, type UserInputPayload as U, type ToolWrapper as a, ToolRegistry as b, type ToolExecutorLike as c, type AgentInit as d, type AgentInput as e, type ToolExecutorOptions as f, type ToolExecutorStrategy as g, type ToolBatchResult as h, type AgentExtension as i, type AfterIterationHook as j, type AfterRunHook as k, type AfterToolExecutionHook as l, type BeforeRunHook as m, type BeforeToolExecutionHook as n, HookRunner as o, type HookRunnerOptions as p, type PreToolUseResult as q, type PromptResult as r, type ProviderFactory as s, type ProviderRunnerWrapper as t, createDefaultPipelines as u, type ProviderRunnerFn as v };
+export { type AgentPipelines as A, type BeforeIterationHook as B, DEFAULT_MAX_ITERATIONS as D, ExtensionRegistry as E, type HookRunEnv as H, type OnErrorHook as O, ProviderRegistry as P, type ResolvedLoopDetectionConfig as R, type SystemPromptContributor as S, type ToolCallPipelinePayload as T, type UserInputPayload as U, type ToolWrapper as a, ToolRegistry as b, type ToolExecutorLike as c, type AgentInit as d, type AgentInput as e, type RunResult as f, type ToolExecutorOptions as g, type ToolExecutorStrategy as h, type ToolBatchResult as i, type AgentExtension as j, type AfterIterationHook as k, type AfterRunHook as l, type AfterToolExecutionHook as m, type BeforeRunHook as n, type BeforeToolExecutionHook as o, HookRunner as p, type HookRunnerOptions as q, type PreToolUseResult as r, type PromptResult as s, type ProviderFactory as t, type ProviderRunnerWrapper as u, createDefaultPipelines as v, type ProviderRunnerFn as w };

package/dist/{index-BEFWNZYs.d.ts → index-CbyuOE5y.d.ts}

@@ -1,4 +1,4 @@
-import './secret-vault-D7jeyXUQ.js';
+import './secret-vault-DxohkUBc.js';
 
 /**
  * Well-known tool capabilities used for authorization decisions.
@@ -46,6 +46,10 @@ declare const ToolCapabilities: {
     readonly SUBAGENT_SPAWN: "subagent.spawn";
     /** Can inspect fleet/subagent coordination state without mutating it. */
     readonly COORDINATION_FLEET_READ: "coordination.fleet.read";
+    /** Can publish attributed, schema-checked events onto the fleet bus. */
+    readonly COORDINATION_FLEET_EMIT: "coordination.fleet.emit";
+    /** Can submit a task-local structured result to the parent Director. */
+    readonly COORDINATION_RESULT_SUBMIT: "coordination.result.submit";
     /** Can read or write inter-agent mailbox messages. */
     readonly COORDINATION_MAIL: "coordination.mail";
     /** Can schedule, inspect, or cancel in-session cron jobs. */