@wrongstack/core 0.284.1 → 0.286.0

package/dist/{config-MRqn1V-u.d.ts → types/config.d.ts}

@@ -1,311 +1,8 @@
-import { a as ReasoningConfig, p as ReasoningEffort, q as CacheTtl, r as Capabilities, f as Permission } from './tool-BNlnIJvo.js';
-
-type ContextWindowModeId = 'balanced' | 'frugal' | 'deep' | 'archival';
-type ContextWindowAggressiveOn = 'hard' | 'soft' | 'warn';
-interface ContextWindowThresholds {
-    warn: number;
-    soft: number;
-    hard: number;
-}
-interface ContextWindowMode {
-    id: ContextWindowModeId;
-    name: string;
-    description: string;
-    thresholds: ContextWindowThresholds;
-    aggressiveOn: ContextWindowAggressiveOn;
-    preserveK: number;
-    eliseThreshold: number;
-    targetLoad: number;
-}
-interface ContextWindowPolicy extends ContextWindowMode {
-}
-interface ContextWindowConfigLike {
-    mode?: ContextWindowModeId | string | undefined;
-    warnThreshold?: number | undefined;
-    softThreshold?: number | undefined;
-    hardThreshold?: number | undefined;
-    preserveK?: number | undefined;
-    eliseThreshold?: number | undefined;
-}
-declare const DEFAULT_CONTEXT_WINDOW_MODE_ID: ContextWindowModeId;
-declare const CONTEXT_WINDOW_MODES: readonly ContextWindowMode[];
-declare function listContextWindowModes(): ContextWindowMode[];
-declare function getContextWindowMode(id: string | null | undefined): ContextWindowMode | null;
-declare function isContextWindowModeId(id: string): id is ContextWindowModeId;
-declare function resolveContextWindowPolicy(config?: ContextWindowConfigLike, overrideMode?: string | null | undefined): ContextWindowPolicy;
-declare function formatContextWindowModeList(activeId?: string | null): string;
-
-/**
- * Lifecycle hook types — the pure, serializable contract shared by the config
- * layer, the in-process plugin API, and the shell-hook executor.
- *
- * These types intentionally avoid referencing the live `Context` (which lives
- * in `core/`, a higher layer) so `types/config.ts` can import them without
- * creating a layering cycle. The runtime pieces (`hooks/registry`,
- * `hooks/runner`, `hooks/shell-executor`) translate live run state into the
- * serializable `HookInput` below.
- */
-/** Lifecycle phases a hook can subscribe to. */
-type HookEvent = 'PreToolUse' | 'PostToolUse' | 'UserPromptSubmit' | 'SessionStart' | 'Stop';
-/**
- * Tool-name matcher for `PreToolUse`/`PostToolUse` hooks. A pipe-delimited
- * list of exact tool names, or `*` for all tools. Examples: `"Bash"`,
- * `"edit|write"`, `"*"`. Ignored (treated as `*`) for non-tool events.
- */
-type HookMatcher = string;
-/** What to do when a hook crashes, times out, or returns malformed output. */
-type HookFailurePolicy = 'open' | 'closed';
-/**
- * PreToolUse hooks run in two phases. Mutators compose first; validators then
- * inspect the final arguments and may no longer rewrite them.
- */
-type PreToolUseStage = 'mutate' | 'validate';
-/** Per-registration runtime controls shared by every hook transport. */
-interface HookRegistrationOptions {
-    /** Stable name used in logs and model-visible fail-closed errors. */
-    name?: string | undefined;
-    /** Per-invocation deadline in milliseconds (default 5000). */
-    timeoutMs?: number | undefined;
-    /** `open` skips a failed hook; `closed` converts failure to a denial. */
-    failurePolicy?: HookFailurePolicy | undefined;
-    /** PreToolUse phase. Legacy registrations default to `mutate`. */
-    stage?: PreToolUseStage | undefined;
-    /**
-     * Trusted enforcement hook. Policy hooks remain active under `--no-hooks`;
-     * ordinary automation hooks do not.
-     */
-    policy?: boolean | undefined;
-}
-/** Deadline/cancellation context passed to in-process hooks. */
-interface HookInvocationContext {
-    signal: AbortSignal;
-    /** Absolute Unix epoch deadline in milliseconds. */
-    deadlineAt: number;
-}
-/**
- * The JSON payload handed to a hook. For shell hooks this is serialized to
- * stdin; for in-process hooks it is passed as the sole argument. Kept flat and
- * serializable so both transports see the same shape.
- */
-interface HookInput {
-    event: HookEvent;
-    /** Present for PreToolUse / PostToolUse. */
-    toolName?: string | undefined;
-    /** Tool arguments (PreToolUse / PostToolUse). */
-    toolInput?: unknown | undefined;
-    /** Tool result preview (PostToolUse only). */
-    toolResult?: {
-        content: string;
-        isError: boolean;
-    };
-    /** The submitted user text (UserPromptSubmit only). */
-    prompt?: string | undefined;
-    /** Absolute working directory of the session. */
-    cwd: string;
-    /** Active session id, when known. */
-    sessionId?: string | undefined;
-}
-/**
- * What a hook returns. Every field is optional — an empty object (or a hook
- * that returns nothing) is a no-op "allow".
- */
-interface HookOutcome {
-    /**
-     * `block` stops the action (PreToolUse → tool not run; UserPromptSubmit →
-     * turn short-circuited). `allow` is the explicit no-op. Omitted = allow.
-     */
-    decision?: 'block' | 'allow' | undefined;
-    /** Human-readable reason, surfaced to the model when blocking. */
-    reason?: string | undefined;
-    /**
-     * PreToolUse only: replacement tool arguments. The executor swaps these in
-     * and RE-VALIDATES them against the tool's input schema before running.
-     */
-    modifiedInput?: Record<string, unknown>;
-    /**
-     * Extra context to fold back to the model — appended to the tool_result
-     * (PostToolUse), the user message (UserPromptSubmit), or the system preamble
-     * (SessionStart).
-     */
-    additionalContext?: string | undefined;
-    /**
-     * Where the additionalContext should appear. `inline` (default) appends it
-     * to the tool_result / user message content so it renders as part of that
-     * block. `separate` appends it as a new user message, keeping plugin notices
-     * visually separated from the actual tool output.
-     */
-    contextAs?: 'inline' | 'separate' | undefined;
-}
-/**
- * Preferred, mutually-exclusive PreToolUse result. `allow` means only that
- * this hook has no objection; it never bypasses the core permission policy.
- */
-type PreToolUseOutcome = {
-    additionalContext?: string | undefined;
-    contextAs?: 'inline' | 'separate' | undefined;
-} & ({
-    action: 'allow';
-} | {
-    action: 'deny';
-    reason: string;
-} | {
-    action: 'mutate';
-    input: Record<string, unknown>;
-    reason?: string | undefined;
-});
-/** New and legacy hook outputs accepted at the transport boundary. */
-type AnyHookOutcome = HookOutcome | PreToolUseOutcome;
-/** An in-process hook function (registered via the plugin API). */
-type InProcessHook = (input: HookInput, runtime: HookInvocationContext) => AnyHookOutcome | void | Promise<AnyHookOutcome | void>;
-interface ConfiguredHookBase extends HookRegistrationOptions {
-    /** Tool-name matcher (defaults to `*`). */
-    matcher?: HookMatcher | undefined;
-}
-/**
- * A shell-command hook (declared in `config.hooks`). Claude-compatible: the
- * `HookInput` JSON is written to the command's stdin; a JSON `HookOutcome` may
- * be printed to stdout, and exit code 2 forces `decision: 'block'`.
- */
-interface ShellHook extends ConfiguredHookBase {
-    type?: 'command' | undefined;
-    /** Command line run via the platform shell. */
-    command: string;
-}
-/** Native HTTP hook. The HookInput JSON is POSTed and JSON output is parsed. */
-interface HttpHook extends ConfiguredHookBase {
-    type: 'http';
-    url: string;
-    headers?: Record<string, string> | undefined;
-}
-type ConfiguredHook = ShellHook | HttpHook;
-interface HookEntryBase {
-    event: HookEvent;
-    matcher: HookMatcher;
-    name: string;
-    timeoutMs?: number | undefined;
-    failurePolicy: HookFailurePolicy;
-    stage: PreToolUseStage;
-    policy: boolean;
-}
-/** A registered hook entry, discriminated by transport. */
-type HookEntry = (HookEntryBase & {
-    kind: 'inprocess';
-    hook: InProcessHook;
-    owner?: string | undefined;
-}) | (HookEntryBase & {
-    kind: 'shell';
-    command: string;
-}) | (HookEntryBase & {
-    kind: 'http';
-    url: string;
-    headers?: Record<string, string> | undefined;
-});
-
-/**
- * Mirror of the models.dev/api.json schema. Top-level is keyed by provider id.
- * We keep `unknown` for fields we don't read so the cached payload stays faithful.
- */
-
-interface ModelsDevModel {
-    id: string;
-    name: string;
-    family?: string | undefined;
-    /**
-     * One-line capability blurb. Not part of the upstream models.dev schema —
-     * carried by our curated overlay (`packages/cli/data/providers.json`, synced
-     * from raw GitHub) for subscription models like openai-codex.
-     */
-    description?: string | undefined;
-    attachment?: boolean | undefined;
-    reasoning?: boolean | undefined;
-    reasoningConfig?: ReasoningConfig | undefined;
-    tool_call?: boolean | undefined;
-    temperature?: boolean | undefined;
-    knowledge?: string | undefined;
-    release_date?: string | undefined;
-    last_updated?: string | undefined;
-    open_weights?: boolean | undefined;
-    modalities?: {
-        input?: string[] | undefined;
-        output?: string[] | undefined;
-    };
-    cost?: {
-        input?: number | undefined;
-        output?: number | undefined;
-        cache_read?: number | undefined;
-        cache_write?: number | undefined;
-        cache_write_5m?: number | undefined;
-        cache_write_1h?: number | undefined;
-        [k: string]: number | undefined;
-    };
-    limit?: {
-        context?: number | undefined;
-        output?: number | undefined;
-    };
-    [k: string]: unknown;
-}
-interface ModelsDevProvider {
-    id: string;
-    name: string;
-    /** Env vars that hold the API key, in priority order. */
-    env?: string[] | undefined;
-    /** Identifies the wire format family (e.g. @ai-sdk/anthropic). */
-    npm?: string | undefined;
-    /** Default base URL when not provided by SDK defaults. */
-    api?: string | undefined;
-    /** Documentation URL. */
-    doc?: string | undefined;
-    models: Record<string, ModelsDevModel>;
-}
-type ModelsDevPayload = Record<string, ModelsDevProvider>;
-/**
- * Canonical wire-format families WrongStack knows how to speak natively.
- * Used by the provider registry to pick a transport.
- */
-type WireFamily = 'anthropic' | 'anthropic-oauth' | 'openai' | 'openai-compatible' | 'openai-codex' | 'github-copilot' | 'google' | 'unsupported';
-interface ResolvedProvider {
-    id: string;
-    name: string;
-    family: WireFamily;
-    apiBase?: string | undefined;
-    envVars: string[];
-    doc?: string | undefined;
-    models: ModelsDevModel[];
-    npm?: string | undefined;
-}
-interface ResolvedModel {
-    providerId: string;
-    modelId: string;
-    capabilities: {
-        tools: boolean;
-        vision: boolean;
-        reasoning: boolean;
-        maxContext: number;
-        maxOutput?: number | undefined;
-        knowledge?: string | undefined;
-        reasoningConfig?: ReasoningConfig | undefined;
-    };
-    cost?: ModelsDevModel['cost'] | undefined;
-}
-interface ModelsRegistry {
-    /** Load (from cache or network). Idempotent; second call returns cached value. */
-    load(opts?: {
-        force?: boolean | undefined;
-    }): Promise<ModelsDevPayload>;
-    /** Force-refresh from network and overwrite cache. */
-    refresh(): Promise<ModelsDevPayload>;
-    /** All providers, classified by wire family. */
-    listProviders(): Promise<ResolvedProvider[]>;
-    /** A single provider by id, or undefined. */
-    getProvider(id: string): Promise<ResolvedProvider | undefined>;
-    /** A model lookup with capabilities + cost. */
-    getModel(providerId: string, modelId: string): Promise<ResolvedModel | undefined>;
-    /** Suggest a default model for the given provider (latest by release_date). */
-    suggestModel(providerId: string): Promise<string | undefined>;
-    /** Cache freshness in seconds since last successful network fetch (Infinity if never). */
-    ageSeconds(): Promise<number>;
-}
-
+import type { ContextWindowModeId } from './context-window.js';
+import type { ConfiguredHook, HookEvent } from './hooks.js';
+import type { WireFamily } from './models-registry.js';
+import type { CacheTtl, Capabilities, ReasoningEffort } from './provider.js';
+import type { Permission } from './tool.js';
 /**
  * Runtime reasoning controls the user can set per-session/project. Mapped into
  * the provider `Request.reasoning` field by the model-runtime request
@@ -313,7 +10,7 @@ interface ModelsRegistry {
  * unsupported values are omitted (and warned) instead of triggering provider
  * 400s. See `resolveReasoningForRequest()` in packages/core.
  */
-interface ModelRuntimeReasoningConfig {
+export interface ModelRuntimeReasoningConfig {
     /**
      * Whether to send explicit reasoning enable/disable.
      * - 'auto'    → do not send explicit fields; provider/model default wins
@@ -330,7 +27,7 @@ interface ModelRuntimeReasoningConfig {
  * Runtime prompt-cache controls mapped into `Request.cache`. Currently only the
  * Anthropic TTL toggle (5m vs 1h) is exposed; other providers ignore it.
  */
-interface ModelRuntimeCacheConfig {
+export interface ModelRuntimeCacheConfig {
     ttl?: CacheTtl | undefined;
 }
 /**
@@ -338,7 +35,7 @@ interface ModelRuntimeCacheConfig {
  * (REPL / TUI / WebUI). The CLI installs a single request-pipeline middleware
  * that reads these and mutates the outgoing `Request`.
  */
-interface ModelRuntimeConfig {
+export interface ModelRuntimeConfig {
     reasoning?: ModelRuntimeReasoningConfig | undefined;
     cache?: ModelRuntimeCacheConfig | undefined;
     /**
@@ -353,7 +50,7 @@ interface ModelRuntimeConfig {
  * corresponding `Capabilities` flag so unsupported models don't receive
  * parameters they'd reject.
  */
-interface ModelRuntimeParametersConfig {
+export interface ModelRuntimeParametersConfig {
     /** Top-K sampling (Anthropic, Gemini). Gated by `capabilities.topK`. */
     topK?: number | undefined;
     /** Frequency penalty (OpenAI, Gemini). Gated by `capabilities.frequencyPenalty`. */
@@ -373,7 +70,7 @@ interface ModelRuntimeParametersConfig {
  * HQ client connection settings. Same-machine clients can auto-discover the
  * local HQ auth file; remote clients use this config-backed URL/token pair.
  */
-interface HqClientConfig {
+export interface HqClientConfig {
     /** Enable HQ publishing. Env WRONGSTACK_HQ_ENABLED still overrides at runtime. */
     enabled?: boolean | undefined;
     /** HQ HTTP base URL, e.g. http://host:3499. */
@@ -397,7 +94,7 @@ interface HqClientConfig {
  * - 'medium'    — Most development tools (~24), some guidance (default when `true`)
  * - 'aggressive' — Maximum savings before tools become unusable (~4-5k tokens saved)
  */
-type TokenSavingTier = 'off' | 'minimal' | 'light' | 'medium' | 'aggressive';
+export type TokenSavingTier = 'off' | 'minimal' | 'light' | 'medium' | 'aggressive';
 /**
  * Normalize a TokenSavingTier value, handling backward-compatible boolean inputs.
  * - `true`  → 'medium' (existing behavior)
@@ -405,15 +102,30 @@ type TokenSavingTier = 'off' | 'minimal' | 'light' | 'medium' | 'aggressive';
  * - string values are returned as-is after validation
  * - `undefined` → 'off'
  */
-declare function normalizeTokenSavingTier(val?: TokenSavingTier | boolean): TokenSavingTier;
-declare const DEFAULT_TUI_THINKING_WORD = "thinking";
-declare const MAX_TUI_THINKING_WORD_LENGTH = 16;
+export declare function normalizeTokenSavingTier(val?: TokenSavingTier | boolean): TokenSavingTier;
+/**
+ * Verbosity of fleet/subagent activity streamed into the main TUI chat.
+ * See {@link AutonomyConfig.fleetChatVerbosity}.
+ */
+export type FleetChatVerbosity = 'off' | 'compact' | 'full';
+export declare const FLEET_CHAT_VERBOSITY_VALUES: readonly FleetChatVerbosity[];
+/**
+ * Resolve the effective fleet-chat verbosity from autonomy config.
+ * An explicit `fleetChatVerbosity` wins; otherwise the legacy `streamFleet`
+ * boolean is honored (`false` → 'off'); absence of both means 'compact'.
+ * `fleetChatVerbosity` must never be given a merge-time default — the
+ * absence of the field is what lets legacy `streamFleet: false` configs
+ * keep their intent.
+ */
+export declare function resolveFleetChatVerbosity(autonomy?: Pick<AutonomyConfig, 'fleetChatVerbosity' | 'streamFleet'>): FleetChatVerbosity;
+export declare const DEFAULT_TUI_THINKING_WORD = "thinking";
+export declare const MAX_TUI_THINKING_WORD_LENGTH = 16;
 /**
  * Normalize the configurable statusline word shown while the TUI is working.
  * The value must be a single short word; invalid values fall back to the default.
  */
-declare function normalizeTuiThinkingWord(value: unknown): string;
-interface ContextConfig {
+export declare function normalizeTuiThinkingWord(value: unknown): string;
+export interface ContextConfig {
     /** Context-window policy mode. Controls compaction thresholds and preservation depth. */
     mode?: ContextWindowModeId | undefined;
     warnThreshold: number;
@@ -449,7 +161,7 @@ interface ContextConfig {
  * that is on by default; this section controls whether the registry actually
  * participates in it and how it auto-recovers.
  */
-interface CircuitBreakerRuntimeConfig {
+export interface CircuitBreakerRuntimeConfig {
     /**
      * Enable circuit-breaker protection. When false (the default), the breaker
      * is bypassed — `bash`/`exec` calls always proceed regardless of failure
@@ -471,7 +183,7 @@ interface CircuitBreakerRuntimeConfig {
  * - On 429: halves `maxConcurrent` (floor at 1)
  * - On sustained success (no 429 for `recoveryIntervalMs`): increases `maxConcurrent` by 1
  */
-interface AdaptiveConcurrencyConfig {
+export interface AdaptiveConcurrencyConfig {
     /** Enable adaptive concurrency. Default: false (disabled). */
     enabled?: boolean | undefined;
     /**
@@ -501,7 +213,7 @@ interface AdaptiveConcurrencyConfig {
      */
     recoveryIntervalMs?: number | undefined;
 }
-interface ToolsConfig {
+export interface ToolsConfig {
     defaultExecutionStrategy: 'parallel' | 'sequential' | 'smart';
     maxIterations: number;
     iterationTimeoutMs: number;
@@ -566,7 +278,7 @@ interface ToolsConfig {
     loopDetection?: LoopDetectionConfig | undefined;
 }
 /** Tuning for the agent-loop repetition detector (`tools.loopDetection`). */
-interface LoopDetectionConfig {
+export interface LoopDetectionConfig {
     /**
      * `steer-then-cut` (default): inject a corrective note at the steer
      * threshold, cut the turn only if repetition persists to the cut threshold.
@@ -590,7 +302,7 @@ interface LoopDetectionConfig {
     callRepeatThreshold?: number | undefined;
 }
 /** Allow/deny extension of the `exec` tool's built-in command allowlist. */
-interface ExecToolConfig {
+export interface ExecToolConfig {
     /**
      * Extra command names to add to the allowlist (e.g. `["make", "dotnet"]`).
      * Trusted sources only — stripped from in-project repo config.
@@ -619,7 +331,7 @@ interface ExecToolConfig {
      */
     danger?: ExecDangerConfig | undefined;
 }
-interface ExecDangerConfig {
+export interface ExecDangerConfig {
     /**
      * List of danger rule ids to skip. Each id corresponds to a rule in
      * `@wrongstack/tools/src/_danger-detect.ts` (e.g. `rm-recursive`,
@@ -629,8 +341,8 @@ interface ExecDangerConfig {
      */
     bypass?: string[] | undefined;
 }
-type ToolDescriptionMode = 'extend' | 'simple';
-type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>;
+export type ToolDescriptionMode = 'extend' | 'simple';
+export type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>;
 /**
  * Per-tool on-screen result rendering mode. Independent of
  * {@link ToolDescriptionMode}: `descriptionMode` controls the prose the
@@ -646,9 +358,9 @@ type ToolDescriptionModeConfig = Record<string, ToolDescriptionMode | undefined>
  * and `/tool <name> result simple`. The legacy `/tool <name> simple`
  * command sets BOTH at once for backward compatibility.
  */
-type ToolResultRenderMode = 'extend' | 'simple';
-type ToolResultRenderModeConfig = Record<string, ToolResultRenderMode | undefined>;
-interface ProviderApiKey {
+export type ToolResultRenderMode = 'extend' | 'simple';
+export type ToolResultRenderModeConfig = Record<string, ToolResultRenderMode | undefined>;
+export interface ProviderApiKey {
     /** Short human-readable label (e.g. "personal", "work", "rate-limit-backup"). */
     label: string;
     /**
@@ -685,7 +397,7 @@ interface ProviderApiKey {
      */
     accountId?: string | undefined;
 }
-interface ProviderConfig {
+export interface ProviderConfig {
     type: string;
     /**
      * Legacy single-key field. Still honored as a read fallback when `apiKeys`
@@ -753,7 +465,7 @@ interface ProviderConfig {
  * Resolved at subagent-spawn time so e.g. `security-scanner` can run a
  * different model than `documentation` while the leader stays on its own.
  */
-interface ModelMatrixEntry {
+export interface ModelMatrixEntry {
     /** Provider registry id (e.g. "anthropic", "minimax", "zai"). When omitted,
      *  the leader's provider is used with this entry's model. */
     provider?: string | undefined;
@@ -773,7 +485,7 @@ interface ModelMatrixEntry {
      */
     fallbackProfile?: string | undefined;
 }
-interface MCPServerConfig {
+export interface MCPServerConfig {
     /** Human-readable description shown in `wstack mcp list`. */
     description?: string | undefined;
     name: string;
@@ -816,12 +528,39 @@ interface MCPServerConfig {
      * Example: passthroughEnv: ['GITHUB_PERSONAL_ACCESS_TOKEN', 'GITHUB_TOKEN']
      */
     passthroughEnv?: string[] | undefined;
+    /**
+     * Operational-health settings for this MCP server. Thresholds are optional;
+     * when omitted the server is considered healthy as long as its connection
+     * lifecycle succeeds. Latency thresholds compare against the rolling p95 of
+     * the bounded sample buffer; the in-flight threshold compares against the
+     * observed peak in-flight call count.
+     */
+    health?: MCPHealthConfig | undefined;
+}
+/** Per-server operational-health knobs. */
+export interface MCPHealthConfig {
+    thresholds?: MCPHealthThresholds | undefined;
+}
+/**
+ * Configurable thresholds that can push an otherwise-healthy MCP server into
+ * the `degraded` health state. All thresholds are optional and disabled when
+ * omitted so existing behaviour is preserved.
+ */
+export interface MCPHealthThresholds {
+    /** Connection latency p95 above this value marks the server degraded. */
+    connectionLatencyP95Ms?: number | undefined;
+    /** Discovery (capability listing) latency p95 above this marks degraded. */
+    discoveryLatencyP95Ms?: number | undefined;
+    /** Tool-call latency p95 above this marks degraded. */
+    callLatencyP95Ms?: number | undefined;
+    /** Peak in-flight calls above this marks the server saturated/degraded. */
+    inFlightCalls?: number | undefined;
 }
-interface LogConfig {
+export interface LogConfig {
     level: 'error' | 'warn' | 'info' | 'debug' | 'trace';
     file?: string | undefined;
 }
-interface PluginConfig {
+export interface PluginConfig {
     name: string;
     enabled?: boolean | undefined;
     options?: Record<string, unknown>;
@@ -833,7 +572,7 @@ interface PluginConfig {
  * is the minimum viable WrongStack: a single provider, a fixed config,
  * no network calls at startup.
  */
-interface FeaturesConfig {
+export interface FeaturesConfig {
     /** Load MCP servers declared in `mcpServers`. */
     mcp: boolean;
     /** Load + initialise npm plugins declared in `plugins`. */
@@ -907,8 +646,51 @@ interface FeaturesConfig {
      */
     mailboxBridge?: 'auto' | 'off' | undefined;
 }
-interface AutonomyConfig {
-    /** Default autonomy mode at startup. Default: "off". */
+export interface SuperMemoryConfig {
+    /** Enable the project-local Super Memory backend. Default: true. */
+    enabled?: boolean | undefined;
+    storage?: {
+        /** Store memory inside the project under a gitignored directory. Default: true. */
+        projectLocal?: boolean | undefined;
+        /** Project-relative directory. Default: ".wrongstack/memories". */
+        directory?: string | undefined;
+    } | undefined;
+    inject?: {
+        /** Add relevant memory to ordinary turn-level context. Default: true. */
+        turnContext?: boolean | undefined;
+        /** Add relevant memory to read/tree/grep/bash/edit tool results. Default: true. */
+        toolResults?: boolean | undefined;
+        /** Maximum hints appended to a single tool result. Default: 4. */
+        maxHintsPerTool?: number | undefined;
+        /** Maximum characters appended to a single tool result. Default: 1200. */
+        maxCharsPerTool?: number | undefined;
+        /** Maximum memories appended to ordinary turn context. Default: 8. */
+        maxTurnMemories?: number | undefined;
+        /** Maximum characters appended to ordinary turn context. Default: 2400. */
+        maxCharsPerTurn?: number | undefined;
+        /** Minimum retrieval score for ordinary hints. Default: 0.65. */
+        minScore?: number | undefined;
+        /** Cooldown before the same memory can be injected again. Default: 30 minutes. */
+        repeatCooldownMs?: number | undefined;
+        triggers?: Partial<Record<'read' | 'tree' | 'grep' | 'glob' | 'codebase_search' | 'bash' | 'write' | 'edit' | 'patch', boolean>> | undefined;
+    } | undefined;
+    hygiene?: {
+        /** Run hygiene after successful sessions. Default: true. */
+        autoAfterSession?: boolean | undefined;
+        /** Re-check anchored memories when files are edited. Default: true. */
+        autoOnFileChange?: boolean | undefined;
+        /** Archive stale/low-value memories after this many days. Default: 90. */
+        retentionDays?: number | undefined;
+        /** Archive low-confidence memories after this many days. Default: 30. */
+        archiveLowConfidenceAfterDays?: number | undefined;
+    } | undefined;
+    embeddings?: {
+        /** Optional future semantic layer. Disabled by default and never required. */
+        enabled?: boolean | undefined;
+    } | undefined;
+}
+export interface AutonomyConfig {
+    /** Default autonomy mode at startup. Default: "auto". */
     defaultMode?: 'off' | 'suggest' | 'auto' | undefined;
     /** ms to wait before auto-proceeding in 'auto' mode. Default: 45000. */
     autoProceedDelayMs?: number | undefined;
@@ -920,8 +702,19 @@ interface AutonomyConfig {
     terminalTitleAnimation?: boolean | undefined;
     /** Persisted YOLO preference mirrored into top-level config.yolo at runtime. Default: false. */
     yolo?: boolean | undefined;
-    /** Stream fleet/subagent output into the main TUI chat. Default: true. */
+    /**
+     * @deprecated Mirror of `fleetChatVerbosity !== 'off'`, kept for readers that
+     * still expect a boolean (webui prefs). Writers must keep it in sync.
+     */
     streamFleet?: boolean | undefined;
+    /**
+     * How much fleet/subagent activity is streamed into the main TUI chat.
+     * - 'off': no subagent lines (failures/errors still surface); F2/F3 stay live.
+     * - 'compact': spawn, one tool/message summary per agent turn, completion.
+     * - 'full': every subagent tool call and interim message (legacy behavior).
+     * Resolved via {@link resolveFleetChatVerbosity}. Default: 'compact'.
+     */
+    fleetChatVerbosity?: FleetChatVerbosity | undefined;
     /** Ring terminal bell when an agent run completes. Default: false. */
     chime?: boolean | undefined;
     /** Ask for confirmation before interrupt/exit. Default: true. */
@@ -930,12 +723,29 @@ interface AutonomyConfig {
     mouseMode?: boolean | undefined;
     /** Enable prompt refinement before sending. Default: true. */
     enhance?: boolean | undefined;
+    /**
+     * Provider id to use for goal refinement (`/goal set`). When set,
+     * the refiner uses this provider's model (see `refinerModel`)
+     * instead of the session's main provider/model. Falls back to the
+     * main session provider when unset or when the provider is unavailable.
+     * Default: unset (uses the main session provider).
+     */
+    refinerProvider?: string | undefined;
+    /**
+     * Model id to use for goal refinement. When `refinerProvider` is
+     * also set, the refiner uses this specific model on that provider.
+     * When only `refinerModel` is set (without a provider), the model
+     * is used on the session's main provider. When both are unset, the
+     * session's main model is used. Falls back to heuristic on failure.
+     * Default: unset (uses the main session model).
+     */
+    refinerModel?: string | undefined;
     /** Prompt-refinement preview countdown in ms. Default: 60000. */
     enhanceDelayMs?: number | undefined;
     /** Prompt-refinement language mode. Default: "original". */
     enhanceLanguage?: 'original' | 'english' | undefined;
     /** TUI statusline density. Default: "detailed". */
-    statuslineMode?: 'minimum' | 'detailed' | undefined;
+    statuslineMode?: 'minimum' | 'detailed' | 'no-color' | undefined;
     /** Single short word shown in the TUI rainbow working-state chip. Default: "thinking". */
     thinkingWord?: string | undefined;
     /**
@@ -950,7 +760,7 @@ interface AutonomyConfig {
  * `config.autonomy.inputHistory` because the TUI-specific knobs on Config
  * are grouped there.
  */
-interface InputHistoryConfig {
+export interface InputHistoryConfig {
     /** Persist history to ~/.wrongstack/projects/<slug>/input-history.json. Default: true. */
     enabled?: boolean | undefined;
     /** Max entries kept on disk (and in memory). Default: 100. */
@@ -961,7 +771,7 @@ interface InputHistoryConfig {
  * index (SQLite, `~/.wrongstack/projects/<hash>/codebase-index/index.db`) fresh
  * without the user having to call `codebase-index` by hand.
  */
-interface IndexingConfig {
+export interface IndexingConfig {
     /** Run a blocking incremental index at session start (with a visible summary). Default: true. */
     onSessionStart: boolean;
     /** Reindex files the agent writes/edits via tools, in the background. Default: true. */
@@ -982,7 +792,7 @@ interface IndexingConfig {
  * can offer a one-line "Continue with last settings? [Y/n]" instead of
  * re-asking every question from scratch.
  */
-interface LaunchConfig {
+export interface LaunchConfig {
     /** Interactive mode: 'tui' (Ink TUI) or 'repl' (readline REPL). */
     mode?: 'tui' | 'repl' | undefined;
     /** Start with Director mode on (fleet manifest + multi-agent orchestration). */
@@ -998,7 +808,7 @@ interface LaunchConfig {
  * Controls how much detail is persisted to the per-session JSONL log
  * (`~/.wrongstack/projects/<hash>/sessions/<date>/sess_<ULID>.jsonl`).
  */
-interface SessionLoggingConfig {
+export interface SessionLoggingConfig {
     /**
      * How much detail to write to the persistent session log.
      *
@@ -1025,8 +835,8 @@ interface SessionLoggingConfig {
         };
     };
 }
-type SyncCategory = 'settings' | 'skills' | 'prompts' | 'memory' | 'history';
-interface SyncConfig {
+export type SyncCategory = 'settings' | 'skills' | 'prompts' | 'memory' | 'history';
+export interface SyncConfig {
     enabled: boolean;
     repo: string;
     /** GitHub token (fine-grained PAT). Encrypted at rest via SecretVault. */
@@ -1039,7 +849,7 @@ interface SyncConfig {
  * Used to add models not in the models.dev catalog, or override catalog
  * facts when the real backend differs (e.g. local Ollama models, proxies).
  */
-interface CustomModelDefinition {
+export interface CustomModelDefinition {
     /** Provider this model belongs to. Defaults to the owning ProviderConfig. */
     provider?: string | undefined;
     /** Optional display name. */
@@ -1059,7 +869,7 @@ interface CustomModelDefinition {
  * (arbitrary directories are a prompt-injection vector) — only `readClaudeSkills`
  * and `mode` survive there.
  */
-interface SkillsConfig {
+export interface SkillsConfig {
     /**
      * Read skills from foreign coding-agent directories (`<project>/.claude/skills`
      * and `~/.claude/skills`). Default `true`. Lets Claude Code / Codex / Gemini /
@@ -1111,7 +921,20 @@ interface SkillsConfig {
  * switch. See `FleetSupervisor` (coordination/fleet-supervisor.ts) for the
  * supervisor semantics.
  */
-interface FleetConfig {
+export interface FleetConfig {
+    /** Subagent process/registry lifecycle after it is no longer doing work. */
+    lifecycle?: {
+        /**
+         * Remove a spawned or between-task subagent after this much idle time.
+         * This is separate from the in-task activity watchdog. Default 30000.
+         */
+        idleTimeoutMs?: number | undefined;
+        /**
+         * Retire a subagent as soon as its final task result is delivered and
+         * no queued task reused it in the same dispatch cycle. Default true.
+         */
+        retireOnTaskComplete?: boolean | undefined;
+    } | undefined;
     /** Fleet-wide hard ceilings. In-flight work may finish; new spawns are refused at the cap. */
     budget?: {
         /** Maximum subagents spawned during one Director lifetime. Default 64 in CLI. */
@@ -1170,7 +993,7 @@ interface FleetConfig {
     supervisor?: FleetSupervisorConfig | undefined;
 }
 /** Config surface for the brain-gated FleetSupervisor. */
-interface FleetSupervisorConfig {
+export interface FleetSupervisorConfig {
     /** Kill switch. Default true (active whenever a Director is running). */
     enabled?: boolean | undefined;
     /** Evaluation tick. Default 20000. */
@@ -1194,7 +1017,149 @@ interface FleetSupervisorConfig {
     /** Allow the supervisor to terminate subagents (highest risk). Default false. */
     allowTerminate?: boolean | undefined;
 }
-interface Config {
+/**
+ * One member of the Brain's LLM pool or council. String entries elsewhere
+ * (`Config.brain.models`, council voters) parse with the same `parseModelRef`
+ * grammar as `fallbackModels`: bare `model`, `provider/model`, or
+ * `provider model`.
+ */
+export interface BrainModelEntry {
+    /** Provider id (a key of `Config.providers` or a catalog id). Defaults to the session provider. */
+    provider?: string | undefined;
+    /** Model id, required. */
+    model: string;
+}
+/** One voting seat on the Brain council. */
+export interface BrainCouncilVoterConfig extends BrainModelEntry {
+    /**
+     * Decision lens for this seat. Built-ins: 'executor' (progress-biased),
+     * 'skeptic' (risk-hunting), 'auditor' (cost/waste-focused). Any other
+     * string is injected verbatim as the persona description.
+     */
+    persona?: string | undefined;
+    /** Vote weight in the tally. Default 1. */
+    weight?: number | undefined;
+    /** When true, this seat's explicit refusal denies the request outright. */
+    veto?: boolean | undefined;
+}
+/** Multi-LLM council configuration for high-stakes Brain decisions. */
+export interface BrainCouncilConfig {
+    /** Kill switch. Default: enabled when `voters` is non-empty or ≥2 pool models exist. */
+    enabled?: boolean | undefined;
+    /**
+     * Minimum request risk that convenes the council instead of the single-LLM
+     * tier. Default 'high'. 'critical' = council only for critical questions;
+     * 'medium' = council for most non-trivial questions (slow + expensive).
+     */
+    minRisk?: 'medium' | 'high' | 'critical' | undefined;
+    /**
+     * Voting seats. String entries use the `parseModelRef` grammar and get
+     * default personas (executor, skeptic w/ veto, auditor) assigned in order.
+     * When omitted, seats are derived from `brain.models` (up to 3).
+     */
+    voters?: Array<string | BrainCouncilVoterConfig> | undefined;
+    /** Fraction of seats that must return a valid vote. Default 0.5. */
+    quorum?: number | undefined;
+    /** Fraction of cast vote weight the winning option must exceed. Default 0.5. */
+    approval?: number | undefined;
+    /**
+     * Tie-breaker / synthesizer model (`parseModelRef` grammar or entry).
+     * Sees every vote's rationale and issues the final structured decision.
+     * Default: the first pool/voter model.
+     */
+    judge?: string | BrainModelEntry | undefined;
+}
+/**
+ * Brain decision-layer configuration. SECURITY: in the in-project config
+ * DENY list — a repo-committed config must not be able to raise the
+ * autonomy ceiling, remove the human tier, or point Brain decisions at an
+ * attacker-chosen provider. Only honoured from `~/.wrongstack/config.json`.
+ */
+export interface BrainConfig {
+    /**
+     * 'headless'    — the Brain NEVER blocks on a human. Escalations resolve
+     *                 via the terminal policy (recommended option for low/medium
+     *                 risk, request fallback semantics, otherwise deny).
+     * 'interactive' — escalations prompt the human in the TUI/WebUI.
+     * Default (resolved at boot by `resolveBrainConfigDefaults`): 'headless' —
+     * minimum-human out of the box. Switch live with `/brain mode <m>`.
+     */
+    mode?: 'headless' | 'interactive' | undefined;
+    /**
+     * Initial autonomy ceiling for the LLM tier. Default (resolved at boot):
+     * adaptive — 'all' when a council can convene (≥2 voters/pool models),
+     * otherwise 'high'. Live-set via `/brain risk`.
+     */
+    maxAutoRisk?: 'off' | 'low' | 'medium' | 'high' | 'all' | undefined;
+    /**
+     * Ordered LLM pool for Brain decisions (`parseModelRef` grammar or
+     * entries). With `strategy: 'fallback'` the first entry is primary and the
+     * rest are tried in order when it fails; with 'round-robin' calls rotate
+     * across the pool. Default (resolved at boot): the user's `fallbackModels`
+     * chain; with none configured, the session provider/model is used.
+     */
+    models?: Array<string | BrainModelEntry> | undefined;
+    /** Pool selection strategy. Default 'fallback'. */
+    strategy?: 'fallback' | 'round-robin' | undefined;
+    /** Per-LLM-call decision timeout (ms). Default 15000. */
+    decisionTimeoutMs?: number | undefined;
+    /**
+     * Interactive mode only: how long an ask-human prompt may stay unanswered
+     * before it resolves through the terminal policy instead of blocking
+     * forever. Default (resolved at boot): 120000. Set 0 to wait indefinitely
+     * (legacy behavior).
+     */
+    humanTimeoutMs?: number | undefined;
+    /** Multi-LLM council for high-stakes decisions. */
+    council?: BrainCouncilConfig | undefined;
+    /**
+     * Persistent decision ledger (`<project>/.wrongstack/brain-ledger.jsonl`):
+     * every decision + observed outcome is appended, and outcome stats for
+     * similar past decisions are fed back into the LLM/council prompts.
+     * Default: enabled.
+     */
+    ledger?: {
+        enabled?: boolean | undefined;
+        /**
+         * Deterministic guard: once this many consecutive approvals of a
+         * decision group ended in observed failures, deny outright without
+         * consulting any LLM (a later success lifts the guard). Default 3.
+         * 0 disables.
+         */
+        autoDenyAfterFailures?: number | undefined;
+    } | undefined;
+    /**
+     * BrainMonitor distress-signal thresholds (self-activation). All optional;
+     * defaults match `BrainMonitorOptions`.
+     */
+    monitor?: {
+        /** Consecutive failures of the same tool before engaging. Default 3. */
+        toolFailureStreak?: number | undefined;
+        /** Errors within 60s before engaging. Default 4. */
+        errorStormCount?: number | undefined;
+        /** Active run with no progress for this long → stall signal (ms). Default 300000. 0 disables. */
+        stallMs?: number | undefined;
+        /** Edits to the same file within the churn window before engaging. Default 5. */
+        fileChurnThreshold?: number | undefined;
+        /** Sliding window for the file-churn signal (ms). Default 600000. */
+        fileChurnWindowMs?: number | undefined;
+        /** Per-signal re-engagement cooldown (ms). Default 120000. */
+        cooldownMs?: number | undefined;
+    } | undefined;
+}
+/** Git behavior overrides for agent-run git commands. See `Config.git`. */
+export interface GitBehaviorConfig {
+    /**
+     * Commit identity injected as `GIT_AUTHOR_NAME/EMAIL` +
+     * `GIT_COMMITTER_NAME/EMAIL` into every child process. Either field may be
+     * set alone; the missing one falls back to git's own config.
+     */
+    identity?: {
+        name?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+}
+export interface Config {
     version: 1;
     provider: string;
     model: string;
@@ -1291,6 +1256,8 @@ interface Config {
     plugins?: (string | PluginConfig)[] | undefined;
     log: LogConfig;
     features: FeaturesConfig;
+    /** Project-local structured memory, graph-ready anchors, retrieval, and hygiene. */
+    superMemory?: SuperMemoryConfig | undefined;
     /** Skill subsystem options (readClaudeSkills / mode / extraDirs). */
     skills?: SkillsConfig | undefined;
     yolo?: boolean | undefined;
@@ -1346,11 +1313,34 @@ interface Config {
      * honoured from the user's `~/.wrongstack/config.json`.
      */
     fleet?: FleetConfig | undefined;
+    /**
+     * Brain decision-layer settings: escalation mode (headless = never block
+     * on a human), LLM pool with fallback/round-robin, autonomy ceiling, and
+     * the multi-LLM council. SECURITY: in the in-project config DENY list —
+     * a repo-committed config must not be able to raise the autonomy ceiling
+     * or reroute Brain decisions. Only honoured from `~/.wrongstack/config.json`.
+     */
+    brain?: BrainConfig | undefined;
     /**
      * Cloud sync configuration. Stored separately in sync.json to avoid
      * accidentally committing the GitHub token to project configs.
      */
     sync?: SyncConfig | undefined;
+    /**
+     * Git behavior overrides for agent-run git commands.
+     *
+     * `identity` sets the commit author/committer used by every git process
+     * WrongStack spawns (git tool, bash/exec shells, worktree manager,
+     * plugins) via the `GIT_AUTHOR_*` / `GIT_COMMITTER_*` env vars. It never
+     * touches the repo's or the user's `git config`, so commits made outside
+     * WrongStack keep their normal identity. Unset → git's own config applies
+     * (today's behavior). Manage at runtime with `/gitid`.
+     *
+     * SECURITY: in the in-project config DENY list — a repo-committed config
+     * must not be able to spoof the identity written into the user's commit
+     * history. Only honoured from the user's `~/.wrongstack/config.json`.
+     */
+    git?: GitBehaviorConfig | undefined;
     /**
      * Per-plugin namespaced config sections. Each plugin reads its own
      * subtree via `ConfigStore.getExtension(pluginName)`. Plugins should
@@ -1365,7 +1355,7 @@ interface Config {
      */
     extensions?: Record<string, Record<string, unknown>>;
 }
-interface ConfigLoader {
+export interface ConfigLoader {
     load(opts?: {
         cliFlags?: Partial<Config> | undefined;
         cwd?: string | undefined;
@@ -1385,7 +1375,7 @@ interface ConfigLoader {
  * Updates happen through `update(partial)`, which produces a new Config
  * (structurally cloned, then frozen) and notifies watchers.
  */
-interface ConfigStore {
+export interface ConfigStore {
     get(): Readonly<Config>;
     /**
      * Get a typed top-level section. Convenience for consumers that only
@@ -1406,5 +1396,4 @@ interface ConfigStore {
     /** Subscribe to changes. Returns an unsubscribe function. */
     watch(cb: (next: Readonly<Config>, prev: Readonly<Config>) => void): () => void;
 }
-
-export { type LoopDetectionConfig as $, type AdaptiveConcurrencyConfig as A, type ContextWindowModeId as B, type ConfiguredHook as C, type ContextWindowThresholds as D, type CustomModelDefinition as E, type FleetConfig as F, DEFAULT_CONTEXT_WINDOW_MODE_ID as G, type HookEvent as H, type InProcessHook as I, DEFAULT_TUI_THINKING_WORD as J, type ExecDangerConfig as K, type ExecToolConfig as L, type ModelsRegistry as M, type FeaturesConfig as N, type FleetSupervisorConfig as O, type ProviderConfig as P, type HookFailurePolicy as Q, type ResolvedModel as R, type ShellHook as S, type ToolResultRenderMode as T, type HookInvocationContext as U, type HqClientConfig as V, type WireFamily as W, type IndexingConfig as X, type InputHistoryConfig as Y, type LaunchConfig as Z, type LogConfig as _, type ModelMatrixEntry as a, MAX_TUI_THINKING_WORD_LENGTH as a0, type ModelRuntimeCacheConfig as a1, type ModelRuntimeParametersConfig as a2, type ModelRuntimeReasoningConfig as a3, type ModelsDevProvider as a4, type PluginConfig as a5, type PreToolUseOutcome as a6, type PreToolUseStage as a7, type ProviderApiKey as a8, type SessionLoggingConfig as a9, type SkillsConfig as aa, type SyncCategory as ab, type ToolDescriptionMode as ac, type ToolDescriptionModeConfig as ad, type ToolResultRenderModeConfig as ae, type ToolsConfig as af, formatContextWindowModeList as ag, getContextWindowMode as ah, isContextWindowModeId as ai, listContextWindowModes as aj, normalizeTokenSavingTier as ak, normalizeTuiThinkingWord as al, resolveContextWindowPolicy as am, type MCPServerConfig as b, type ModelsDevPayload as c, type ResolvedProvider as d, type ModelsDevModel as e, type HookMatcher as f, type HookRegistrationOptions as g, type HttpHook as h, type HookEntry as i, type Config as j, type ModelRuntimeConfig as k, type ConfigLoader as l, type SyncConfig as m, type ConfigStore as n, type ContextWindowAggressiveOn as o, type ContextWindowPolicy as p, type TokenSavingTier as q, type HookInput as r, type HookOutcome as s, type AnyHookOutcome as t, type AutonomyConfig as u, CONTEXT_WINDOW_MODES as v, type CircuitBreakerRuntimeConfig as w, type ContextConfig as x, type ContextWindowConfigLike as y, type ContextWindowMode as z };
+//# sourceMappingURL=config.d.ts.map