@wrongstack/core 0.284.1 → 0.286.0

package/dist/observability/prometheus.d.ts

@@ -0,0 +1,49 @@
+import type { HealthRegistry, MetricsSink, MetricsSnapshot } from '../types/observability.js';
+/** TLS options for HTTPS metrics endpoint. */
+export interface MetricsTlsOptions {
+    cert: string;
+    key: string;
+}
+/**
+ * Render a `MetricsSnapshot` as Prometheus text-format bytes. The output
+ * always ends with a trailing newline (Prometheus requires it).
+ */
+export declare function renderPrometheus(snapshot: MetricsSnapshot): string;
+/** MIME type Prometheus servers must respond with on /metrics. */
+export declare const PROMETHEUS_CONTENT_TYPE = "text/plain; version=0.0.4; charset=utf-8";
+export interface MetricsServerOptions {
+    port: number;
+    /** Bind address. Defaults to 127.0.0.1 so we don't accidentally expose metrics publicly. */
+    host?: string | undefined;
+    sink: MetricsSink;
+    /** Path to serve on. Defaults to /metrics. */
+    path?: string | undefined;
+    /**
+     * V2-C: optional health registry. When provided, the server also responds
+     * on `/healthz` (configurable via `healthPath`) with a JSON aggregate of
+     * every registered health check. K8s probes expect a single HTTP server
+     * exposing both `/metrics` and `/healthz`, so we mount them on the same
+     * port rather than opening a sibling listener.
+     */
+    healthRegistry?: HealthRegistry | undefined;
+    /** Path to serve health JSON on. Defaults to /healthz. */
+    healthPath?: string | undefined;
+    /** Enable HTTPS by providing TLS key/cert. Both required. */
+    tls?: MetricsTlsOptions | undefined;
+}
+export interface MetricsServerHandle {
+    port: number;
+    url: string;
+    close(): Promise<void>;
+}
+/**
+ * Start an HTTP server that exposes a Prometheus scrape endpoint.
+ * Uses node:http directly to avoid pulling a framework into the core graph.
+ *
+ * Why bind to 127.0.0.1 by default: telemetry endpoints inside an agent
+ * process can leak prompt content via metric labels (tool name, error
+ * message, etc.). The default keeps that on the loopback interface;
+ * operators who want network scraping opt in explicitly with host: '0.0.0.0'.
+ */
+export declare function startMetricsServer(opts: MetricsServerOptions): Promise<MetricsServerHandle>;
+//# sourceMappingURL=prometheus.d.ts.map

package/dist/observability/prometheus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prometheus.d.ts","sourceRoot":"","sources":["../../src/observability/prometheus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG9F,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAyCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CA8ClE;AAED,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,6CAA6C,CAAC;AAElF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,6DAA6D;IAC7D,GAAG,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0FjG"}

package/dist/observability/tracer.d.ts

@@ -0,0 +1,9 @@
+import type { Span, Tracer } from '../types/observability.js';
+/**
+ * Default tracer is a noop — zero overhead when observability is not wired up.
+ * Replace at runtime with an OpenTelemetry-backed Tracer to enable real spans.
+ */
+export declare class NoopTracer implements Tracer {
+    startSpan(): Span;
+}
+//# sourceMappingURL=tracer.d.ts.map

package/dist/observability/tracer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer.d.ts","sourceRoot":"","sources":["../../src/observability/tracer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;;GAGG;AACH,qBAAa,UAAW,YAAW,MAAM;IACvC,SAAS,IAAI,IAAI,CAEhB;CACF"}

package/dist/plugin/api.d.ts

@@ -0,0 +1,226 @@
+import type { Mailbox } from '../coordination/mailbox-types.js';
+import { ExtensionRegistry } from '../extension/registry.js';
+import type { HookRegistry } from '../hooks/registry.js';
+import type { Container } from '../kernel/container.js';
+import type { EventBus, EventName, Listener } from '../kernel/events.js';
+import type { ProviderRegistry } from '../registry/provider-registry.js';
+import type { SlashCommandRegistry } from '../registry/slash-command-registry.js';
+import type { ToolRegistry } from '../registry/tool-registry.js';
+import type { Config } from '../types/config.js';
+import type { HookEvent, HookMatcher, InProcessHook } from '../types/hooks.js';
+import type { Logger } from '../types/logger.js';
+import type { ModelsRegistry } from '../types/models-registry.js';
+import type { MCPRegistryView, MetricsSinkView, PluginAPI, PluginCapabilities, PluginDependency, PluginLLM, PluginPipelines, ProviderRegistryView, SessionWriterView, SlashCommandRegistryView, ToolRegistryView } from '../types/plugin.js';
+import type { Provider } from '../types/provider.js';
+import type { SystemPromptContributor } from '../types/system-prompt-contributor.js';
+import type { JSONSchema } from '../types/tool.js';
+export interface PluginAPIInit {
+    ownerName: string;
+    container: Container;
+    events: EventBus;
+    /**
+     * The agent's concrete pipelines. `DefaultPluginAPI` converts each to a
+     * `ReadonlyPipeline` before exposing them to the plugin — plugins can
+     * inspect and invoke pipelines but cannot mutate them.
+     */
+    pipelines: PluginPipelines;
+    toolRegistry: ToolRegistry;
+    providerRegistry: ProviderRegistry;
+    slashCommandRegistry?: SlashCommandRegistry | undefined;
+    mcpRegistry?: MCPRegistryView | undefined;
+    /**
+     * The agent's extension registry. Plugins register AgentExtension
+     * instances here to hook into agent lifecycle events.
+     */
+    extensions?: ExtensionRegistry | undefined;
+    /**
+     * The host's lifecycle hook registry. When provided, `api.registerHook`
+     * adds in-process hooks here. When absent, `registerHook` is a noop.
+     */
+    hookRegistry?: HookRegistry | undefined;
+    /**
+     * The active session writer. Plugins append custom events here.
+     * When not provided, a noop writer is used.
+     */
+    sessionWriter?: SessionWriterView | undefined;
+    /**
+     * The host's metrics sink. When set, the plugin gets a scoped view
+     * that auto-prefixes metric names with `plugin.<pluginName>.`.
+     * When not provided, a noop sink is used.
+     */
+    metricsSink?: MetricsSinkView | undefined;
+    /**
+     * The host's models registry (models.dev-backed catalog of providers,
+     * models, and per-token pricing). When provided, plugins that need
+     * model metadata (cost-tracker, billing reports) can query it instead
+     * of relying on bundled tables. Optional — minimal hosts/tests may
+     * omit it.
+     */
+    modelsRegistry?: ModelsRegistry | undefined;
+    /**
+     * The host's project-level mailbox. When provided, plugins that publish
+     * to other agents (todo-listener, session-recap) can call `api.mailbox.send`.
+     * When not provided, those plugins should gracefully no-op.
+     */
+    mailbox?: Mailbox | undefined;
+    /**
+     * LLM wiring for `api.llm`. When provided, `DefaultPluginAPI` exposes a
+     * `PluginLLM` that routes completions through the host's provider layer:
+     *
+     *  - `provider` — the host session's live default Provider instance
+     *  - `model`    — the host session's default model id
+     *  - `createProvider` — optional factory used when a plugin requests a
+     *    DIFFERENT provider by name (per-call `opts.provider` or the plugin's
+     *    `config.extensions[<name>].llm.provider`). The CLI host passes an
+     *    implementation backed by the provider registry + saved provider
+     *    configs; when absent, `DefaultPluginAPI` falls back to
+     *    `providerRegistry.create({ ...config.providers[name], type: name })`.
+     *
+     * Omit entirely on minimal hosts — `api.llm` stays undefined and plugins
+     * must guard.
+     */
+    llm?: {
+        provider: Provider;
+        model: string;
+        createProvider?: ((name: string, model?: string) => Provider) | undefined;
+    } | undefined;
+    config: Config;
+    /**
+     * The host's ConfigStore. Used to wire `api.onConfigChange()`.
+     * When not provided, `onConfigChange` is a noop.
+     */
+    configStore?: {
+        watch(cb: (next: unknown, prev: unknown) => void): () => void;
+    };
+    log: Logger;
+    /**
+     * Whether this plugin is first-party ("official"). Set by the host based on
+     * the plugin's load source (e.g. shipped in the built-in factory list), NOT
+     * self-declared by the plugin. Official plugins may register bare slash
+     * command names and override built-ins; external plugins are namespaced.
+     * Defaults to false.
+     */
+    official?: boolean | undefined;
+    /**
+     * Declared capabilities of the plugin. Used for capability-based
+     * authorization checks (e.g. tool mutation permissions).
+     */
+    capabilities?: PluginCapabilities | undefined;
+}
+export declare class DefaultPluginAPI implements PluginAPI {
+    readonly container: Container;
+    readonly events: EventBus;
+    readonly pipelines: PluginPipelines;
+    readonly tools: ToolRegistryView;
+    readonly providers: ProviderRegistryView;
+    readonly mcp: MCPRegistryView;
+    readonly slashCommands: SlashCommandRegistryView;
+    readonly extensions: ExtensionRegistry;
+    readonly session: SessionWriterView;
+    readonly metrics: MetricsSinkView;
+    readonly config: Config;
+    readonly log: Logger;
+    readonly modelsRegistry: ModelsRegistry | undefined;
+    readonly mailbox: Mailbox | undefined;
+    readonly llm: PluginLLM | undefined;
+    private readonly configStore;
+    private readonly hookRegistry;
+    private readonly ownerName;
+    private readonly pluginCleanupFns;
+    constructor(init: PluginAPIInit);
+    onEvent<K extends EventName>(event: K, handler: Listener<K>): () => void;
+    onPattern(pattern: string, handler: (event: string, payload: unknown) => void): () => void;
+    emitCustom(event: string, payload: unknown): void;
+    onConfigChange(handler: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
+    /** Called by the plugin loader when uninstalling the plugin. */
+    drainCleanup(): void;
+    registerSystemPromptContributor(c: SystemPromptContributor): () => void;
+    registerHook(event: HookEvent, matcher: HookMatcher | undefined, hook: InProcessHook, options?: import('../types/hooks.js').HookRegistrationOptions | undefined): () => void;
+}
+/**
+ * Define a plugin with automatic `apiVersion` injection and optional
+ * TypeScript type inference for the plugin options schema.
+ *
+ * The `options` generic is inferred from the `factory` function's second
+ * parameter, so annotating it gives you fully-typed options throughout:
+ *
+ * @example
+ * ```ts
+ * import { definePlugin } from '@wrongstack/core';
+ *
+ * interface MyOptions {
+ *   threshold: number;
+ *   enabled: boolean;
+ * }
+ *
+ * const myPlugin = definePlugin(
+ *   {
+ *     name: 'my-plugin',
+ *     version: '0.1.0',
+ *     description: 'My example plugin',
+ *     capabilities: { tools: true },
+ *     configSchema: {
+ *       type: 'object',
+ *       properties: {
+ *         threshold: { type: 'number', default: 100 },
+ *         enabled: { type: 'boolean', default: true },
+ *       },
+ *     },
+ *     defaultConfig: { threshold: 100, enabled: true },
+ *   },
+ *   (api, options) => {
+ *     // options.threshold is `number` here, not `unknown`
+ *     api.tools.register({
+ *       name: 'my-tool',
+ *       description: `Threshold is ${options.threshold}`,
+ *       // ...
+ *     });
+ *   },
+ * );
+ *
+ * export default myPlugin;
+ * ```
+ *
+ * Plugins that don't need typed options can omit the interface and let
+ * TypeScript infer from `defaultConfig`, or omit `defaultConfig` entirely
+ * (options will be `undefined` at runtime, accessible via `api.config`):
+ *
+ * @example
+ * ```ts
+ * const simplePlugin = definePlugin(
+ *   { name: 'simple' },
+ *   (api) => {
+ *     api.tools.register({ name: 'ping', description: 'Ping the service' });
+ *   },
+ * );
+ * ```
+ *
+ * The `apiVersion` is automatically set to the current `KERNEL_API_VERSION`
+ * so plugins are always compatible with the kernel that loaded them.
+ * Plugins that need to pin to a specific kernel version can override it
+ * in the returned object before exporting.
+ */
+export declare function definePlugin<const TOptions extends Record<string, unknown> | undefined>(metadata: {
+    name: string;
+    version?: string | undefined;
+    description?: string | undefined;
+    capabilities?: PluginCapabilities | undefined;
+    configSchema?: JSONSchema | undefined;
+    defaultConfig?: TOptions | undefined;
+    dependsOn?: (string | PluginDependency)[] | undefined;
+    optionalDeps?: (string | PluginDependency)[] | undefined;
+    conflictsWith?: string[] | undefined;
+}, factory: (api: PluginAPI, options: TOptions) => void | Promise<void>): {
+    name: string;
+    version?: string | undefined;
+    description?: string | undefined;
+    apiVersion: string;
+    capabilities?: PluginCapabilities | undefined;
+    configSchema?: JSONSchema | undefined;
+    defaultConfig?: TOptions | undefined;
+    dependsOn?: (string | PluginDependency)[] | undefined;
+    optionalDeps?: (string | PluginDependency)[] | undefined;
+    conflictsWith?: string[] | undefined;
+    setup: (api: PluginAPI) => void | Promise<void>;
+};
+//# sourceMappingURL=api.d.ts.map

package/dist/plugin/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/plugin/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,8BAA8B,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,SAAS,EAGT,eAAe,EAEf,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAW,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,KAAK,EAAE,UAAU,EAAQ,MAAM,kBAAkB,CAAC;AAGzD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC;IACjB;;;;OAIG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACxD,WAAW,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC3C;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,aAAa,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC9C;;;;OAIG;IACH,WAAW,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC1C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B;;;;;;;;;;;;;;;OAeG;IACH,GAAG,CAAC,EACA;QACE,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,GAAG,SAAS,CAAC;KAC3E,GACD,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;KAAE,CAAC;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,YAAY,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC/C;AAED,qBAAa,gBAAiB,YAAW,SAAS;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAEd;IACd,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IAE1D,YAAY,IAAI,EAAE,aAAa,EAuH9B;IAED,OAAO,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAIvE;IAED,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAIzF;IAED,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAEhD;IAED,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAG5F;IAED,gEAAgE;IAChE,YAAY,IAAI,IAAI,CAanB;IAED,+BAA+B,CAAC,CAAC,EAAE,uBAAuB,GAAG,MAAM,IAAI,CAEtE;IAED,YAAY,CACV,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,WAAW,GAAG,SAAS,EAChC,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,OAAO,mBAAmB,EAAE,uBAAuB,GAAG,SAAS,GACxE,MAAM,IAAI,CAKZ;CACF;AAiMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,wBAAgB,YAAY,CAAC,KAAK,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACrF,QAAQ,EAAE;IACR,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC9C,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,aAAa,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,GAAG,SAAS,CAAC;IACtD,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,GAAG,SAAS,CAAC;IACzD,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACtC,EACD,OAAO,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnE;IACD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC9C,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,aAAa,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,GAAG,SAAS,CAAC;IACtD,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,GAAG,SAAS,CAAC;IACzD,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD,CAkBA"}

package/dist/plugin/loader.d.ts

@@ -0,0 +1,73 @@
+import type { Logger } from '../types/logger.js';
+import type { Plugin, PluginAPI } from '../types/plugin.js';
+/**
+ * Stable plugin API contract version. This is intentionally independent of
+ * the package version: bump only when the surface visible to plugins
+ * (PluginAPI, types/plugin) changes in a way that breaks existing setup
+ * functions. Plugins declare `apiVersion: "^1.0"` to opt into this contract.
+ *
+ * 0.1.9: additive — `FleetSpawnBudgetError|FleetCostCapError` plus `FLEET_ROSTER` and the
+ * pre-built fleet agent configs (Audit Log, Bug Hunter, Refactor Planner,
+ * Security Scanner) now exported from `@wrongstack/core`.
+ * 0.1.10: additive — extended-thinking stream events, core subpath
+ * exports, tool output size chips on `tool.executed`. Plugin contract
+ * unchanged otherwise; 0.1.x range still loads cleanly.
+ *
+ * Note: the package shipped as 0.2.0, but the *plugin contract* didn't
+ * change in a breaking way — `SubagentError`, `subagent.tool_executed`,
+ * `transcriptPath`, `planTool`, `delegate`, `runText`, and Director
+ * sessionWriter are all additive to the surface. We deliberately keep
+ * the kernel API at 0.1.10 so plugins pinning `apiVersion: "^0.1"`
+ * keep loading. Bump to 1.0 when we stabilize and want the freedom to
+ * remove deprecated surfaces.
+ */
+export declare const KERNEL_API_VERSION = "0.1.10";
+export interface LoadPluginsOptions {
+    apiFactory: (plugin: Plugin) => PluginAPI;
+    log: Logger;
+    kernelApiVersion?: string | undefined;
+    /**
+     * Per-plugin options keyed by plugin name. When a plugin declares
+     * `configSchema`, the loader validates `pluginOptions[plugin.name]`
+     * against it before calling `setup`. Pass `Config.plugins` shaped
+     * `{ [name]: { options } }` or any flat record.
+     */
+    pluginOptions?: Record<string, unknown>;
+    /**
+     * When true, the loader throws a PluginError if a plugin calls an API
+     * method that contradicts its declared `capabilities` — instead of
+     * just logging a warning. Use in CI/strict deployments to enforce
+     * manifest honesty. Default: false (log-only, backward-compatible).
+     */
+    enforceCapabilities?: boolean | undefined;
+    /**
+     * Timeout in milliseconds for each plugin's `setup()` call. If the
+     * plugin's setup exceeds this deadline it is treated as a failure
+     * and the plugin is not loaded. Default: 30 000 ms.
+     */
+    setupTimeoutMs?: number | undefined;
+    /**
+     * Timeout in milliseconds for each plugin's `teardown()` call. If the
+     * plugin's teardown exceeds this deadline it is treated as a best-effort
+     * failure (logged but not propagated). Default: 10 000 ms.
+     */
+    teardownTimeoutMs?: number | undefined;
+}
+export declare function loadPlugins(plugins: Plugin[], opts: LoadPluginsOptions): Promise<{
+    loaded: Plugin[];
+    failed: {
+        plugin: Plugin;
+        err: unknown;
+    }[];
+}>;
+/**
+ * Tear down loaded plugins in reverse-dependency order. `teardown()` is
+ * best-effort: errors are caught and logged so a single misbehaving plugin
+ * can't abort the host shutdown sequence.
+ *
+ * Pass the result of a prior `loadPlugins(...)` call's `loaded` array, plus
+ * the original `LoadPluginsOptions` so the same `apiFactory` (and the same
+ * PluginAPI surface the plugin saw during `setup`) is used for `teardown`.
+ */
+export declare function unloadPlugins(loadedPlugins: Plugin[], opts: LoadPluginsOptions): Promise<void>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/plugin/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugin/loader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AAS9E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAoHD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC,CAwG3E;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,aAAa,EAAE,MAAM,EAAE,EACvB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAmCf"}

package/dist/plugins/chimera-plugin.d.ts

@@ -0,0 +1,37 @@
+import type { Plugin } from '../types/plugin.js';
+interface ChimeraConfig {
+    enabled?: boolean | undefined;
+    provider?: string | undefined;
+    model?: string | undefined;
+    maxFiles?: number | undefined;
+    /**
+     * @deprecated Removed. The subagent's `Request.maxTokens` now defaults to
+     * the provider's `capabilities.maxOutput`, so Chimera reports can run up
+     * to the selected model's native ceiling. Kept on the config interface as an `unknown` sink
+     * so old config files don't crash — but it's no longer read.
+     */
+    maxTokens?: unknown;
+}
+export interface ResolvedChimeraConfig {
+    enabled: boolean;
+    provider: string;
+    model: string;
+    maxFiles: number;
+}
+export declare function resolveChimeraConfig(cfg: ChimeraConfig, sessionProvider: string, sessionModel: string): ResolvedChimeraConfig;
+export interface ChimeraReviewNeededPayload {
+    /** Resolved chimera config */
+    config: ResolvedChimeraConfig;
+    /** Project root for git operations */
+    cwd: string;
+    /** Changed files with their contents */
+    files: Array<{
+        path: string;
+        status: 'added' | 'modified';
+        content: string;
+    }>;
+}
+export declare const CHIMERA_REVIEW_PROMPT: string;
+export declare function createChimeraPlugin(): Plugin;
+export {};
+//# sourceMappingURL=chimera-plugin.d.ts.map

package/dist/plugins/chimera-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chimera-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/chimera-plugin.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAQjD,UAAU,aAAa;IACrB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,aAAa,EAClB,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,GACnB,qBAAqB,CAOvB;AAKD,MAAM,WAAW,0BAA0B;IACzC,8BAA8B;IAC9B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAKD,eAAO,MAAM,qBAAqB,QAAsD,CAAC;AA+GzF,wBAAgB,mBAAmB,IAAI,MAAM,CA2G5C"}

package/dist/plugins/prompts-plugin.d.ts

@@ -0,0 +1,26 @@
+import { DefaultPromptStore } from '../storage/prompt-store.js';
+import { PromptUsageStore } from '../storage/prompt-usage-store.js';
+import type { PromptLoader } from '../types/prompt.js';
+import type { WstackPaths } from '../utils/wstack-paths.js';
+import type { Plugin } from '../types/plugin.js';
+interface PromptsPluginOptions {
+    store?: DefaultPromptStore | undefined;
+    loader?: PromptLoader | undefined;
+    usage?: PromptUsageStore | undefined;
+    paths?: WstackPaths | undefined;
+}
+/**
+ * PromptsPlugin — built-in prompt library.
+ *
+ * Registers three slash commands:
+ *   - `/prompts`     manage your library (list/view/add/edit/delete/favorite/extend)
+ *   - `/prompt`      search the merged library (builtin + user + project) and insert
+ *   - `/prompt-gen`  AI-guided authoring of a new high-quality prompt
+ *
+ * Active by default for all WrongStack sessions. The host injects a
+ * `PromptLoader` (cross-layer read + copy-on-write) via `config.promptLoader`;
+ * without one the commands degrade to the writable user store only.
+ */
+export declare function createPromptsPlugin(opts?: PromptsPluginOptions): Plugin;
+export {};
+//# sourceMappingURL=prompts-plugin.d.ts.map

package/dist/plugins/prompts-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/prompts-plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAsB,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAe,YAAY,EAAkB,MAAM,oBAAoB,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAM5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGjD,UAAU,oBAAoB;IAC5B,KAAK,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACrC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,MAAM,CA8CvE"}

package/dist/plugins/security-plugin.d.ts

@@ -0,0 +1,19 @@
+import type { Plugin } from '../types/plugin.js';
+/**
+ * SecurityPlugin — automated security scanning back-end.
+ *
+ * Exposes the LLM-powered `defaultOrchestrator` programmatically. The
+ * synchronous TUI surface is owned by the CLI built-in
+ * `packages/cli/src/slash-commands/security.ts` (`/security audit-deps |
+ * scan | redact-test | help`), which intentionally does NOT invoke the
+ * orchestrator — slash commands run on a sync surface and a full scan
+ * takes minutes. To run a real scan, dispatch a subagent from the TUI
+ * (`/security scan` prints the dispatch instructions).
+ *
+ * Do NOT register a `/security` slash command here — it would shadow the
+ * CLI built-in and leave users staring at a silent prompt while an
+ * LLM scan hangs in the background. The `createSecuritySlashCommand`
+ * factory remains exported for programmatic/test use only.
+ */
+export declare function createSecurityPlugin(): Plugin;
+//# sourceMappingURL=security-plugin.d.ts.map

package/dist/plugins/security-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/security-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAsB7C"}

package/dist/plugins/skills-plugin.d.ts

@@ -0,0 +1,42 @@
+import type { SlashCommand } from '../index.js';
+import type { SkillRegistryAdapter } from '../skills/registry/registry-adapter.js';
+import type { Plugin } from '../types/plugin.js';
+import type { SkillLoader } from '../types/skill.js';
+interface SkillsPluginOptions {
+    skillLoader?: SkillLoader | undefined;
+    /**
+     * Registry adapters. When unset the plugin wires the github-direct adapter
+     * (for `user/repo` installs) plus a skills.sh adapter pointed at
+     * `config.skills.registryUrl` (default {@link DEFAULT_SKILLS_SH_URL}).
+     */
+    registryAdapters?: SkillRegistryAdapter[] | undefined;
+}
+/**
+ * SkillsPlugin — skill library + installer + authoring toolkit.
+ *
+ * Registers `/skill`, `/skill-gen`, `/skill-search`, `/skill-install`,
+ * `/skill-import`, `/skill-update`, `/skill-uninstall`. First-party ("official")
+ * plugin, so the commands keep their bare names. Needs a `SkillLoader` (injected
+ * by the host via `config.skillLoader`); without one the commands report that
+ * and no-op.
+ */
+export declare function createSkillsPlugin(opts?: SkillsPluginOptions): Plugin;
+export declare function buildSkillCommand(skillLoader?: SkillLoader): SlashCommand;
+export declare function buildSkillGeneratorCommand(skillLoader?: SkillLoader): SlashCommand;
+export declare function buildSkillSearchCommand(_skillLoader: SkillLoader | undefined, registryAdapters: SkillRegistryAdapter[]): SlashCommand;
+export declare function buildSkillInstallCommand(skillLoader?: SkillLoader, registryAdapters?: SkillRegistryAdapter[]): SlashCommand;
+/**
+ * Resolve a `--from <tool>` source directory for `/skill-import`. Returns the
+ * project-level dir (`<project>/.<tool>/<subdir>`) or user-level (`~/.<tool>/<subdir>`
+ * when `global`), or `undefined` for an unknown tool id. Exported for testing.
+ */
+export declare function resolveImportSourceDir(tool: string, opts: {
+    global: boolean;
+    projectRoot: string;
+    homeDir?: string;
+}): string | undefined;
+export declare function buildSkillImportCommand(skillLoader?: SkillLoader): SlashCommand;
+export declare function buildSkillUpdateCommand(skillLoader?: SkillLoader, registryAdapters?: SkillRegistryAdapter[]): SlashCommand;
+export declare function buildSkillUninstallCommand(skillLoader?: SkillLoader): SlashCommand;
+export {};
+//# sourceMappingURL=skills-plugin.d.ts.map

package/dist/plugins/skills-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/skills-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,YAAY,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAcnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKrD,UAAU,mBAAmB;IAC3B,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,GAAG,SAAS,CAAC;CACvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAqDrE;AAkBD,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,CAsBzE;AAED,wBAAgB,0BAA0B,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,CA4IlF;AA2HD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,WAAW,GAAG,SAAS,EACrC,gBAAgB,EAAE,oBAAoB,EAAE,GACvC,YAAY,CAyEd;AAED,wBAAgB,wBAAwB,CACtC,WAAW,CAAC,EAAE,WAAW,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,GACxC,YAAY,CAoDd;AAQD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,MAAM,GAAG,SAAS,CAKpB;AAED,wBAAgB,uBAAuB,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,CAoE/E;AAED,wBAAgB,uBAAuB,CACrC,WAAW,CAAC,EAAE,WAAW,EACzB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,GACxC,YAAY,CAkDd;AAED,wBAAgB,0BAA0B,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,YAAY,CAgDlF"}

package/dist/plugins/sync-plugin.d.ts

@@ -0,0 +1,22 @@
+import type { Plugin } from '../types/plugin.js';
+import type { WstackPaths } from '../utils/wstack-paths.js';
+import type { ConfigStore } from '../types/config.js';
+interface SyncPluginOptions {
+    paths?: WstackPaths | undefined;
+    configStore?: ConfigStore | undefined;
+    /** Secret vault for encrypting the GitHub token before persisting to disk. */
+    vault?: {
+        encrypt(plaintext: string): string;
+        decrypt?(value: string): string;
+    };
+}
+/**
+ * SyncPlugin — GitHub-backed cloud sync for WrongStack user data.
+ *
+ * Registers `/sync` slash command. Users can push/pull their prompts,
+ * skills, settings, memory, and history to a private GitHub repo.
+ * Active by default; configure once with `/sync enable owner/repo TOKEN`.
+ */
+export declare function createSyncPlugin(opts?: SyncPluginOptions): Plugin;
+export {};
+//# sourceMappingURL=sync-plugin.d.ts.map

package/dist/plugins/sync-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/sync-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAIjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,UAAU,iBAAiB;IACzB,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACjF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAqDjE"}

package/dist/prompts/index.d.ts

@@ -0,0 +1,3 @@
+export { type JsonFetcher, PromptInstaller, type PromptInstallerOptions, type PromptPullResult, } from './prompt-installer.js';
+export { PromptManifestStore } from './prompt-manifest-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/prompts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/prompts/prompt-installer.d.ts

@@ -0,0 +1,50 @@
+import { type PromptRegistryManifest, type RegistryDiff } from '../types/prompt-registry.js';
+/**
+ * Fetch a JSON document. Injectable so the installer is testable without
+ * network access. Defaults to the global `fetch`.
+ */
+export type JsonFetcher = (url: string) => Promise<unknown>;
+export interface PromptPullResult {
+    manifest: PromptRegistryManifest;
+    diff: RegistryDiff;
+    /** Always true for the stub — pull never writes anything yet. */
+    dryRun: true;
+}
+export interface PromptInstallerOptions {
+    fetcher?: JsonFetcher | undefined;
+}
+/**
+ * PromptInstaller — registry sync GROUNDWORK (stub).
+ *
+ * `pull()` fetches and validates a remote manifest and computes the checksum
+ * diff against the prompts the caller already has — but writes NOTHING. The
+ * actual download/write is the documented extension point (`install`), left
+ * unimplemented so the sync surface can land incrementally and be reviewed
+ * before it can touch the user's prompt store.
+ *
+ * Mirrors `SkillInstaller`. For a GitHub-backed hub, the contract is a repo
+ * with a top-level `registry.json` (a `PromptRegistryManifest`) plus
+ * `prompts/<slug>.json` bodies — the same shape the bundled dataset emits.
+ */
+export declare class PromptInstaller {
+    private readonly fetcher;
+    constructor(opts?: PromptInstallerOptions);
+    /**
+     * Fetch + validate a manifest and report what a sync WOULD change. Read-only.
+     * @param manifestUrl URL to the registry's `registry.json`.
+     * @param local       The prompts the caller already has (slug + checksum).
+     */
+    pull(manifestUrl: string, local: {
+        slug: string;
+        checksum?: string | undefined;
+    }[]): Promise<PromptPullResult>;
+    /**
+     * EXTENSION POINT (not yet wired): download the prompt bodies for the given
+     * registry refs and write them into the user layer as `source:'synced'`,
+     * recording each in the installed-prompts manifest. Intentionally unimplemented
+     * — pulling real content over the network is gated behind a future change so
+     * the format/diff path can ship and be reviewed first.
+     */
+    install(): Promise<never>;
+}
+//# sourceMappingURL=prompt-installer.d.ts.map

package/dist/prompts/prompt-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-installer.d.ts","sourceRoot":"","sources":["../../src/prompts/prompt-installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAElB,MAAM,6BAA6B,CAAC;AAGrC;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAc5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,iEAAiE;IACjE,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC,YAAY,IAAI,GAAE,sBAA2B,EAE5C;IAED;;;;OAIG;IACG,IAAI,CACR,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,GACvD,OAAO,CAAC,gBAAgB,CAAC,CAW3B;IAED;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAK9B;CACF"}

package/dist/prompts/prompt-manifest-store.d.ts

@@ -0,0 +1,18 @@
+import type { InstalledPromptEntry, PromptManifestData } from '../types/prompt-registry.js';
+/**
+ * Tracks prompts pulled from a remote registry, persisted to
+ * `~/.wrongstack/installed-prompts.json`. Mirrors `SkillManifestStore`. The
+ * manifest is the source of truth for "what have I synced and at what version",
+ * enabling a future `pull --favorites` / update flow.
+ */
+export declare class PromptManifestStore {
+    private readonly manifestPath;
+    constructor(manifestPath: string);
+    load(): Promise<PromptManifestData>;
+    save(data: PromptManifestData): Promise<void>;
+    /** Upsert one entry keyed by slug. */
+    record(entry: InstalledPromptEntry): Promise<void>;
+    remove(slug: string): Promise<boolean>;
+    list(): Promise<InstalledPromptEntry[]>;
+}
+//# sourceMappingURL=prompt-manifest-store.d.ts.map

package/dist/prompts/prompt-manifest-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-manifest-store.d.ts","sourceRoot":"","sources":["../../src/prompts/prompt-manifest-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAG5F;;;;;GAKG;AACH,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAzC,YAA6B,YAAY,EAAE,MAAM,EAAI;IAE/C,IAAI,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAUxC;IAEK,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlD;IAED,sCAAsC;IAChC,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvD;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM3C;IAEK,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAE5C;CACF"}